last executing test programs: 5.004131462s ago: executing program 4 (id=2514): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000005700)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000005}], 0x1, 0x840) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/162, 0xa2}], 0x1}, 0x2) 4.7889347s ago: executing program 4 (id=2520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5}]}, 0x24}}, 0x0) 4.58963876s ago: executing program 4 (id=2524): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812003208020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea", 0x77) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xe4}]}, 0x3c}}, 0x0) 4.139639764s ago: executing program 4 (id=2530): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x2c, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) 3.892393188s ago: executing program 4 (id=2536): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x4044040) syz_emit_ethernet(0x36, &(0x7f0000000e00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 3.751474997s ago: executing program 4 (id=2540): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f00000012c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/35, 0x23}}, {{&(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1, &(0x7f0000000200)=""/222, 0xde}, 0x6}, {{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000300)=""/33, 0x21}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/41, 0x29}, {&(0x7f00000004c0)=""/113, 0x71}], 0x4}, 0xa}, {{&(0x7f00000006c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000800)=""/248, 0xf8}], 0x1, &(0x7f0000000740)=""/27, 0x1b}, 0xa10}, {{&(0x7f0000000980)=@qipcrtr, 0x80, &(0x7f0000001140)=[{&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b80)=""/251, 0xfb}, {&(0x7f0000000c80)=""/179, 0xb3}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000000e40)=""/130, 0x82}, {&(0x7f0000000f00)=""/150, 0x96}, {&(0x7f0000000fc0)=""/244, 0xf4}, {&(0x7f00000010c0)=""/119, 0x77}, {&(0x7f0000000900)=""/25, 0x19}], 0xa, &(0x7f0000001200)=""/161, 0xa1}, 0x40}], 0x3fffe60, 0x2, 0x0) 3.495972773s ago: executing program 3 (id=2545): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) 3.348923151s ago: executing program 3 (id=2548): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x9, 0xc, 0x4, 0x6, 0x5d0bef1f, 0x400, 0x5, 0x837, 0xffffffff, 0x9fec, 0x401, 0x2000068, 0x7, 0xdd64, 0x1, 0x8, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0xffff, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x9, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x4, 0x267, 0x1, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x8, 0x7ff, 0x44, 0x2, 0x9, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x2, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0xb, 0x6, 0x0, 0x3365, 0xa82f, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0xc, 0x81, 0x111, 0x7, 0x5c20, 0x7b, 0x0, 0xe, 0x4, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90a, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x0, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0xd, 0x4, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0xe56d, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x9, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x10000, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x3, 0x603c, 0x80000004, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x4, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x4, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0x0, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0xa2, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x20002, 0x5, 0x1, 0x2, 0xfff, {0x5, 0x0, 0x9c, 0xf9e, 0xfff, 0x7}, {0xf8, 0x2, 0x0, 0x4, 0x6fb}, 0x6, 0x3}}]}]}}]}, 0x478}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) 3.246779197s ago: executing program 1 (id=2550): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x20) 3.148336551s ago: executing program 3 (id=2551): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @remote, 0x0, "d009000000000000006404000000dc3f0900000000000000d800000000000400", 0x0, 0x0, 0xfffffd, 0xfffffffd}, 0x3c) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) sendmsg$NL80211_CMD_SET_BEACON(r4, 0x0, 0xc0a5) syz_genetlink_get_family_id$nl80211(0x0, r4) listen(r2, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) 2.77147613s ago: executing program 1 (id=2554): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 2.591796603s ago: executing program 1 (id=2556): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @remote, 0x0, "d009000000000000006404000000dc3f0900000000000000d800000000000400", 0x0, 0x0, 0xfffffd, 0xfffffffd}, 0x3c) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) sendmsg$NL80211_CMD_SET_BEACON(r4, 0x0, 0xc0a5) r5 = syz_genetlink_get_family_id$nl80211(0x0, r4) listen(r2, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) r6 = accept(r0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x6, 0x3a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40024) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) 2.179070465s ago: executing program 3 (id=2560): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) socket$packet(0x11, 0x3, 0x300) 1.830191213s ago: executing program 3 (id=2562): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$nbd(r2, &(0x7f0000000440)=ANY=[], 0xd6) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) 1.610361288s ago: executing program 1 (id=2564): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000140)=0xb2, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000bc8020"], &(0x7f0000000300)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000240)={0x1, 0xff, 0xfffc, @random="03137a115c2b", 'ip6tnl0\x00'}) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000200)}], 0x1) 1.60960766s ago: executing program 0 (id=2565): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0xfffffffc) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 1.460397477s ago: executing program 1 (id=2566): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a342", 0x51}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d082247558bef6b2b2cd6a0dffece1b36526e9388c344fb7ac429e432bcb0330483c0604aaf296d8218e240055cb92f17b1b47fd7b1b178ca0d1c470154ed985a179f87c9bc402189195e92dc1d73fce0d96439a53", 0x74}, {&(0x7f00000002c0)}], 0x3}}], 0x1, 0xc0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000640)="09268a927f1f65", 0x7, 0x200000c1, 0x0, 0x0) 1.414928313s ago: executing program 0 (id=2567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r1, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x4040) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, 'batadv_slave_1\x00'}}, 0x1e) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x40a40, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f00000000c0)=0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, 0x0) 1.286532471s ago: executing program 0 (id=2568): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x0) poll(&(0x7f0000000600)=[{0xffffffffffffffff, 0x2004}, {r0, 0x2201}], 0x2, 0x8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x240680c0) 1.269859708s ago: executing program 2 (id=2569): getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x18) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r1, &(0x7f0000003780)=""/4096, 0x1000) 1.12588432s ago: executing program 0 (id=2570): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @remote, 0x0, "d009000000000000006404000000dc3f0900000000000000d800000000000400", 0x0, 0x0, 0xfffffd, 0xfffffffd}, 0x3c) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000), 0x0) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, 0x0, 0x0, 0x40800) sendmsg$NL80211_CMD_SET_BEACON(r4, 0x0, 0xc0a5) syz_genetlink_get_family_id$nl80211(0x0, r4) listen(r2, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) 1.053742193s ago: executing program 2 (id=2571): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @broadcast, @multicast2}, "1a3f02eb38ad1bf6"}}}}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000700000000000000fbffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018210000", @ANYRES32, @ANYBLOB="0000000000000101851000000700800018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600000000000000000000001851000009000000000000000000000085100000faffffff5318ffff10000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x4, 0x80000000, 0x5}, 0x10, 0x169a0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x1, 0x3, 0x8, 0x2}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x57, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce9872f8b1ae6cbb89cb5fef8", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x27, 0xd3, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", &(0x7f0000000580)="1324840f61f2582958c7a13a4cb07c12e6ecb79e1e4a5ce8e2b094cb1edf8582dfc76b94c7a32d6ad727284dee99911cbebac2b56de4b756a4b4d7ab40d887a06a1a64578ca3be4b2b1199f073af3b8786e28aaa18190e25a18d21a25234f582dce4358b52f6b2a6467c3f0c7739d6bd5a565b16e767e0da1df8fd4b076723d41eb010daaaeb5cf488ff4be3be97abe73c01bf69228aa29254faeba1beedba4f3f432007e825367a3d4e928f5c3a8adca1d0de94d2e7d7d9a0652a837242e2b09161c51dea51f2fc9a3ea6be63ad1a6444d530", 0x0, 0x0, 0x607}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 811.832866ms ago: executing program 2 (id=2572): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendmsg$inet6(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000080)="abf63fa63be2057e6eb311864b862f44687c12bc9818a7859baa745aff3f92ef76bdf77e7b5d02d91fc1523771c95efb", 0x30}, {&(0x7f0000000480)="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", 0xfd}, {&(0x7f0000000240)="48edc487717a690680dd1b477b1b66f6ea0142bd8ca00f8a7e3a3e520f8adcbe6dab37ba403c2e9923da1833dd11ca383a6d15e18b86b27175a14a8670146d37ce7e8d726d66bfb76649432d82c990712c96ac8e7ffe131637f081b5299f1cd4d210d282c5de16089e6b5ae996836a1c8b2a475048eaf9e1710cdd5c390be553caf0c8c2ef7046bc", 0x88}, {&(0x7f0000000940)="4da1537e1aa8ee68c744c5a486e7b2393712688bdffa4e960c7629be4054a649249ce75863e4b6189990e87e8ade0e7abd7c19e524fb3270ee17563373cb5cef0600000062298a6e00"/85, 0x55}, {&(0x7f0000000580)="ff41c07b3bc0bb61c722d3d67c9e883fbcbb907958a2d3b5f478d9f0afe2a0a587dc0d3e7a7011ded58cee584dafbadfdbd560cff25414fe5e5c0adc1c425dfb9c273feb9cbd03d513b68b29527e13c9396ffe05ca82fa4fb0", 0x59}, {&(0x7f0000000600)="4db4e4aa095c9b5a2387d052149b7c35fa0d70b53339fc2d0bebb32c8067922fb8f7282fa73ef579c6e344162ae2976b06dae8bb60d55f87974a636a824cea86fe3e0bed0e29d37683ce9e232e4da2eb401ee683868f5470885043a7e2d832fd3c80a32d365b2a33bd295610f808d6b7ca42e590b9d6345f2815d824b234409259c29656ff8a00c71a2c9ffc830267ed5faa27b60962891f939fc893febaa273dcb3ed7b7b6eeaedb56d8ef64ad6bfa0690ae8b28c8d6bf3b60edaba1ff9529dc531f28c4dbb982b5808afe6447ffe0929ec0fe7d9f4d8b85c8fb9d7721d0c296f14fa512a60504dcfcadc326ec6f790f83932f4", 0xf4}, {&(0x7f0000000b80)="141deb00cedbccb636a9ab53213ea1f1c1986285e42936fad54f7abb5dbe0574b548b09c7dc60ea9f0", 0x29}], 0x7}, 0x91) recvmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) 668.963339ms ago: executing program 2 (id=2573): r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @local}, 0x10) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={0x1, @bcast, @bpq0, 0x3, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 434.262675ms ago: executing program 2 (id=2574): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x50) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYBLOB="7fd91d522433a1f5198516cb8ef36d5b3f6b068da48d1e9fb11134df", @ANYRESOCT=r1], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000740)) poll(&(0x7f0000000040), 0x55, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 264.383215ms ago: executing program 3 (id=2575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000140)={'syzkaller0\x00', @random="000f00"}) 167.781402ms ago: executing program 0 (id=2576): syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty=0xeaffffff}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "87cfcdda6219d3dcb7744773b3819bce721e0b1f97e0f4b3", "2fc72613b81c11588e4a2be73556ee12cdaccc1b5e4113c894f0693edd32545f"}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x36) 148.812719ms ago: executing program 1 (id=2577): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) listen(r1, 0xfffffffc) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) close(r4) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) 148.466092ms ago: executing program 2 (id=2578): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r0, 0x20000005) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dvmrp0\x00'}) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40090}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) write$nbd(r2, &(0x7f0000000440)=ANY=[], 0xd6) 0s ago: executing program 0 (id=2579): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, 0x0, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r1, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 84.685624][ T5829] cgroup: Unknown subsys name 'net' [ 84.820976][ T5829] cgroup: Unknown subsys name 'cpuset' [ 84.830988][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.547359][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.612991][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.621585][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.627940][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.629495][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.641530][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.645264][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.655451][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.664599][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.666718][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.676523][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.680974][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.693733][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.697405][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.704746][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.728828][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.738956][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.746839][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.754298][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.756948][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.764132][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.771523][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.784352][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.792525][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.831162][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.839646][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.484912][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 91.557264][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 91.709910][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 91.768197][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 91.799564][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.807643][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.815118][ T5846] bridge_slave_0: entered allmulticast mode [ 91.823196][ T5846] bridge_slave_0: entered promiscuous mode [ 91.870193][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.877583][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.884878][ T5846] bridge_slave_1: entered allmulticast mode [ 91.892603][ T5846] bridge_slave_1: entered promiscuous mode [ 91.958172][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 92.038319][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.051845][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.068711][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.077034][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.084284][ T5839] bridge_slave_0: entered allmulticast mode [ 92.092047][ T5839] bridge_slave_0: entered promiscuous mode [ 92.178120][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.185364][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.194258][ T5839] bridge_slave_1: entered allmulticast mode [ 92.202088][ T5839] bridge_slave_1: entered promiscuous mode [ 92.265510][ T5846] team0: Port device team_slave_0 added [ 92.271923][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.280750][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.288460][ T5840] bridge_slave_0: entered allmulticast mode [ 92.296392][ T5840] bridge_slave_0: entered promiscuous mode [ 92.343116][ T5846] team0: Port device team_slave_1 added [ 92.352602][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.361042][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.368357][ T5840] bridge_slave_1: entered allmulticast mode [ 92.375715][ T5840] bridge_slave_1: entered promiscuous mode [ 92.385466][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.394875][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.402441][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.409839][ T5848] bridge_slave_0: entered allmulticast mode [ 92.417961][ T5848] bridge_slave_0: entered promiscuous mode [ 92.479139][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.489231][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.496729][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.503979][ T5848] bridge_slave_1: entered allmulticast mode [ 92.511528][ T5848] bridge_slave_1: entered promiscuous mode [ 92.550533][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.557928][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.584217][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.654714][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.662187][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.689100][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.711752][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.739218][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.749017][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.758501][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.765789][ T5843] bridge_slave_0: entered allmulticast mode [ 92.773709][ T5843] bridge_slave_0: entered promiscuous mode [ 92.782382][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.789699][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.797312][ T5843] bridge_slave_1: entered allmulticast mode [ 92.804814][ T5843] bridge_slave_1: entered promiscuous mode [ 92.831345][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.841443][ T5853] Bluetooth: hci2: command tx timeout [ 92.841687][ T5853] Bluetooth: hci1: command tx timeout [ 92.851386][ T55] Bluetooth: hci0: command tx timeout [ 92.853023][ T5853] Bluetooth: hci3: command tx timeout [ 92.879681][ T5839] team0: Port device team_slave_0 added [ 92.889587][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.916329][ T5853] Bluetooth: hci4: command tx timeout [ 92.950732][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.979309][ T5839] team0: Port device team_slave_1 added [ 92.988520][ T5840] team0: Port device team_slave_0 added [ 93.013777][ T5848] team0: Port device team_slave_0 added [ 93.023338][ T5848] team0: Port device team_slave_1 added [ 93.032466][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.061304][ T5840] team0: Port device team_slave_1 added [ 93.104809][ T5846] hsr_slave_0: entered promiscuous mode [ 93.111944][ T5846] hsr_slave_1: entered promiscuous mode [ 93.178079][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.185081][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.214483][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.244096][ T5843] team0: Port device team_slave_0 added [ 93.254134][ T5843] team0: Port device team_slave_1 added [ 93.274845][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.282317][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.308319][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.320447][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.328039][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.354346][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.368258][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.375356][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.401859][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.471891][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.480517][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.506950][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.640990][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.649117][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.675369][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.734521][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.742025][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.768195][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.809908][ T5839] hsr_slave_0: entered promiscuous mode [ 93.817063][ T5839] hsr_slave_1: entered promiscuous mode [ 93.823321][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.831215][ T5839] Cannot create hsr debugfs directory [ 93.852252][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.859563][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.886186][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.932508][ T5848] hsr_slave_0: entered promiscuous mode [ 93.939508][ T5848] hsr_slave_1: entered promiscuous mode [ 93.945729][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.953611][ T5848] Cannot create hsr debugfs directory [ 94.093548][ T5840] hsr_slave_0: entered promiscuous mode [ 94.100142][ T5840] hsr_slave_1: entered promiscuous mode [ 94.106533][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.114175][ T5840] Cannot create hsr debugfs directory [ 94.141811][ T5843] hsr_slave_0: entered promiscuous mode [ 94.149172][ T5843] hsr_slave_1: entered promiscuous mode [ 94.155399][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.163486][ T5843] Cannot create hsr debugfs directory [ 94.702135][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.729470][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.742253][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.754389][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.844322][ T5848] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.862028][ T5848] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.874937][ T5848] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.901878][ T5848] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.916340][ T55] Bluetooth: hci1: command tx timeout [ 94.921841][ T55] Bluetooth: hci2: command tx timeout [ 94.927841][ T5152] Bluetooth: hci3: command tx timeout [ 94.933742][ T5853] Bluetooth: hci0: command tx timeout [ 94.988869][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.996837][ T5853] Bluetooth: hci4: command tx timeout [ 95.009318][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.022169][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.048796][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.131355][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.157680][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.170285][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.183269][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.234558][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.338075][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.352039][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.364606][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.383813][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.420483][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.459121][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.466585][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.529781][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.537014][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.576943][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.665494][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.687389][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.752648][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.763872][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.771127][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.824536][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.832272][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.849662][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.870146][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.877632][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.920193][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.932816][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.940030][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.008968][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.030864][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.038308][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.094140][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.101415][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.221927][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.264620][ T1326] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.271889][ T1326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.348654][ T3005] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.355824][ T3005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.434831][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.535551][ T5843] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.575311][ T5843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.693253][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.900172][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.960823][ T5848] veth0_vlan: entered promiscuous mode [ 96.996875][ T5853] Bluetooth: hci0: command tx timeout [ 97.002392][ T5853] Bluetooth: hci2: command tx timeout [ 97.008886][ T55] Bluetooth: hci3: command tx timeout [ 97.014370][ T55] Bluetooth: hci1: command tx timeout [ 97.067373][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.079267][ T5853] Bluetooth: hci4: command tx timeout [ 97.090832][ T5848] veth1_vlan: entered promiscuous mode [ 97.168725][ T5839] veth0_vlan: entered promiscuous mode [ 97.179327][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.215463][ T5848] veth0_macvtap: entered promiscuous mode [ 97.249235][ T5848] veth1_macvtap: entered promiscuous mode [ 97.264494][ T5846] veth0_vlan: entered promiscuous mode [ 97.307477][ T5839] veth1_vlan: entered promiscuous mode [ 97.314431][ T5843] veth0_vlan: entered promiscuous mode [ 97.330413][ T5846] veth1_vlan: entered promiscuous mode [ 97.364359][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.402372][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.415108][ T5848] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.424594][ T5848] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.433764][ T5848] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.442817][ T5848] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.454131][ T5843] veth1_vlan: entered promiscuous mode [ 97.486889][ T5840] veth0_vlan: entered promiscuous mode [ 97.519249][ T5839] veth0_macvtap: entered promiscuous mode [ 97.543455][ T5840] veth1_vlan: entered promiscuous mode [ 97.575156][ T5846] veth0_macvtap: entered promiscuous mode [ 97.591171][ T5839] veth1_macvtap: entered promiscuous mode [ 97.609594][ T5843] veth0_macvtap: entered promiscuous mode [ 97.623872][ T5843] veth1_macvtap: entered promiscuous mode [ 97.642389][ T5846] veth1_macvtap: entered promiscuous mode [ 97.734340][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.745690][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.758257][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.783342][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.795768][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.801823][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.807809][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.814792][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.831885][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.843750][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.853221][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.863920][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.874024][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.884771][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.894826][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.905707][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.917734][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.944263][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.959135][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.971038][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.993756][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.004508][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.014931][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.026938][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.040118][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.052635][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.063581][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.074520][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.085206][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.095287][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.106806][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.118569][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.130410][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.139396][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.148867][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.157873][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.172932][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.183255][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.193174][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.203496][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.224056][ T5846] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.233039][ T5846] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.242816][ T5846] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.251734][ T5846] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.291299][ T754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.310073][ T754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.323753][ T5840] veth0_macvtap: entered promiscuous mode [ 98.358936][ T5840] veth1_macvtap: entered promiscuous mode [ 98.511460][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.533090][ T9] cfg80211: failed to load regulatory.db [ 98.535346][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.559892][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.569965][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.580568][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.590680][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.601638][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.611627][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.622166][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.633785][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.680765][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.693254][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.730788][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.750555][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.763976][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.781389][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.792634][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.808343][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.819100][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.843344][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.870197][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.892081][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.910390][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.957852][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.985582][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.992213][ T5932] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.995597][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.016432][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.061147][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.078166][ T5853] Bluetooth: hci3: command tx timeout [ 99.083664][ T5853] Bluetooth: hci0: command tx timeout [ 99.085986][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.090841][ T55] Bluetooth: hci2: command tx timeout [ 99.096889][ T5152] Bluetooth: hci1: command tx timeout [ 99.144525][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.156093][ T5152] Bluetooth: hci4: command tx timeout [ 99.163767][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.249606][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.264875][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.377513][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.385416][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.473275][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.526035][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.671019][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.690100][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.532914][ T5958] tipc: Started in network mode [ 100.551741][ T5958] tipc: Node identity 7a21e180c3a9, cluster identity 4711 [ 100.588803][ T5958] tipc: Enabled bearer , priority 0 [ 100.856981][ T5966] syzkaller0: entered promiscuous mode [ 100.877519][ T5966] syzkaller0: entered allmulticast mode [ 100.936946][ T5966] tipc: Resetting bearer [ 101.128499][ T65] tipc: Resetting bearer [ 101.198628][ T5956] tipc: Resetting bearer [ 101.254132][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 101.323237][ T5985] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17'. [ 101.648434][ T5895] tipc: Node number set to 3112755584 [ 102.510970][ T5956] tipc: Disabling bearer [ 102.594968][ T5985] vlan2: entered promiscuous mode [ 102.666013][ T5985] bond0: entered promiscuous mode [ 102.671145][ T5985] bond_slave_0: entered promiscuous mode [ 102.694719][ T5985] bond_slave_1: entered promiscuous mode [ 102.993881][ T6005] netlink: 'syz.2.25': attribute type 10 has an invalid length. [ 103.021676][ T6005] netlink: 40 bytes leftover after parsing attributes in process `syz.2.25'. [ 103.198964][ T6005] team0: Port device geneve0 added [ 103.294883][ T6013] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 103.415076][ T6013] bridge0: port 3(ip6gretap1) entered blocking state [ 103.432386][ T6013] bridge0: port 3(ip6gretap1) entered disabled state [ 103.443088][ T6013] ip6gretap1: entered allmulticast mode [ 103.463701][ T6013] ip6gretap1: entered promiscuous mode [ 103.532095][ T6021] veth3: entered promiscuous mode [ 103.554005][ T6021] bridge0: port 4(veth3) entered blocking state [ 103.584381][ T6021] bridge0: port 4(veth3) entered disabled state [ 103.615661][ T6021] veth3: entered allmulticast mode [ 103.666956][ T6026] warning: `syz.1.30' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.820839][ T6031] pim6reg1: entered promiscuous mode [ 103.830502][ T6031] pim6reg1: entered allmulticast mode [ 104.426237][ T6055] C: renamed from lo (while UP) [ 104.471970][ T6055] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 104.750953][ T6066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.46'. [ 104.761741][ T6066] netlink: 'syz.4.46': attribute type 7 has an invalid length. [ 104.773270][ T6066] netlink: 'syz.4.46': attribute type 8 has an invalid length. [ 104.782082][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'. [ 104.827615][ T6066] bond0: entered promiscuous mode [ 104.845145][ T6066] bond_slave_0: entered promiscuous mode [ 104.879113][ T6066] bond_slave_1: entered promiscuous mode [ 104.906587][ T6066] ip6gretap0: entered promiscuous mode [ 104.918114][ T6066] gretap0: entered promiscuous mode [ 104.918860][ T6069] Bluetooth: MGMT ver 1.23 [ 105.216278][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.677382][ T6068] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 105.948353][ T6099] netlink: 'syz.2.56': attribute type 4 has an invalid length. [ 106.318386][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 106.941421][ T120] IPVS: starting estimator thread 0... [ 107.047052][ T6121] IPVS: using max 30 ests per chain, 72000 per kthread [ 107.948723][ T6131] Zero length message leads to an empty skb [ 108.777360][ T6143] netlink: 16 bytes leftover after parsing attributes in process `syz.2.70'. [ 108.928902][ T6147] syz.0.74 uses obsolete (PF_INET,SOCK_PACKET) [ 109.047379][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.76'. [ 109.057500][ T6151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 109.069318][ T6151] netlink: 'syz.2.76': attribute type 1 has an invalid length. [ 109.088927][ T6151] netlink: 10 bytes leftover after parsing attributes in process `syz.2.76'. [ 109.180297][ T6151] nbd: socks must be embedded in a SOCK_ITEM attr [ 109.201438][ T6151] block nbd0: shutting down sockets [ 109.525426][ T6162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 109.563246][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 109.582701][ T6163] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.618281][ T6162] netlink: 'syz.0.80': attribute type 1 has an invalid length. [ 109.643307][ T6162] netlink: 10 bytes leftover after parsing attributes in process `syz.0.80'. [ 109.689669][ T5152] block nbd0: Receive control failed (result -107) [ 110.017490][ T6176] netlink: 36 bytes leftover after parsing attributes in process `syz.4.87'. [ 110.067802][ T6176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.87'. [ 110.289986][ T6186] dccp_close: ABORT with 68 bytes unread [ 112.445081][ T6224] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 113.195089][ T6250] __nla_validate_parse: 3 callbacks suppressed [ 113.195128][ T6250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.112'. [ 113.267694][ T6252] netlink: 40 bytes leftover after parsing attributes in process `syz.4.113'. [ 114.614804][ T6250] vlan3: entered promiscuous mode [ 114.626446][ T6250] ip6gretap0: entered promiscuous mode [ 115.263787][ T6282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.125'. [ 115.295388][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.125'. [ 115.348593][ T6282] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 115.361108][ T6282] netlink: 10 bytes leftover after parsing attributes in process `syz.1.125'. [ 115.514145][ T5152] block nbd1: Receive control failed (result -32) [ 115.632788][ T6289] bridge_slave_0: left allmulticast mode [ 115.667453][ T6289] bridge_slave_0: left promiscuous mode [ 115.674887][ T6289] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.738398][ T6289] bridge_slave_1: left allmulticast mode [ 115.744216][ T6289] bridge_slave_1: left promiscuous mode [ 115.768286][ T6293] netlink: 28 bytes leftover after parsing attributes in process `syz.1.129'. [ 115.804955][ T6289] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.829829][ T6289] bond0: (slave bond_slave_0): Releasing backup interface [ 115.861646][ T6289] bond0: (slave bond_slave_1): Releasing backup interface [ 115.961588][ T6289] team0: Port device team_slave_0 removed [ 116.006956][ T6289] team0: Port device team_slave_1 removed [ 116.013808][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.051893][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.062496][ T6289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.070884][ T6289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.142463][ T6299] netlink: 'syz.2.130': attribute type 10 has an invalid length. [ 116.182863][ T6304] vlan2: entered allmulticast mode [ 116.203780][ T6304] bond0: entered allmulticast mode [ 116.217037][ T6304] bond_slave_0: entered allmulticast mode [ 116.233220][ T6304] bond_slave_1: entered allmulticast mode [ 116.261154][ T6304] bridge0: port 5(vlan2) entered blocking state [ 116.270034][ T6304] bridge0: port 5(vlan2) entered disabled state [ 116.324445][ T6304] vlan2: entered promiscuous mode [ 116.353855][ T6304] bond0: entered promiscuous mode [ 116.373445][ T6304] bond_slave_0: entered promiscuous mode [ 116.383555][ T6304] bond_slave_1: entered promiscuous mode [ 116.395778][ T6304] bridge0: port 5(vlan2) entered blocking state [ 116.402614][ T6304] bridge0: port 5(vlan2) entered forwarding state [ 116.429817][ T6299] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.449450][ T6299] team0: entered promiscuous mode [ 116.454839][ T6299] team_slave_0: entered promiscuous mode [ 116.476551][ T6299] team_slave_1: entered promiscuous mode [ 116.482507][ T6299] geneve0: entered promiscuous mode [ 116.531414][ T6299] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.302426][ T6339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.137'. [ 118.773606][ T6339] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 118.784290][ T6345] wlan0 speed is unknown, defaulting to 1000 [ 118.826202][ T6345] wlan0 speed is unknown, defaulting to 1000 [ 118.865108][ T6345] wlan0 speed is unknown, defaulting to 1000 [ 118.956512][ T6345] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.003627][ T6345] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 119.073693][ T6360] tipc: Started in network mode [ 119.095933][ T6360] tipc: Node identity 169340caf46b, cluster identity 4711 [ 119.103352][ T6360] tipc: Enabled bearer , priority 0 [ 119.185618][ T6365] syzkaller0: entered promiscuous mode [ 119.206729][ T6365] syzkaller0: entered allmulticast mode [ 119.231234][ T6345] wlan0 speed is unknown, defaulting to 1000 [ 119.253170][ T6360] tipc: Resetting bearer [ 119.311509][ T6372] bridge1: entered allmulticast mode [ 119.333911][ T6345] wlan0 speed is unknown, defaulting to 1000 [ 119.358946][ T6358] tipc: Resetting bearer [ 119.380895][ T6358] tipc: Disabling bearer [ 119.394606][ T6345] wlan0 speed is unknown, defaulting to 1000 [ 119.401437][ T6377] IPv6: Can't replace route, no match found [ 119.421847][ T6375] gre1: entered promiscuous mode [ 119.427082][ T6375] gre1: entered allmulticast mode [ 119.464554][ T6345] wlan0 speed is unknown, defaulting to 1000 [ 119.490477][ T6345] wlan0 speed is unknown, defaulting to 1000 [ 120.052429][ T6397] tipc: Enabled bearer , priority 0 [ 120.075797][ T6397] syzkaller0: entered promiscuous mode [ 120.091671][ T6397] syzkaller0: entered allmulticast mode [ 120.133771][ T6397] tipc: Resetting bearer [ 120.164677][ T6395] tipc: Resetting bearer [ 120.223612][ T6395] tipc: Disabling bearer [ 120.330452][ T6409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 121.044374][ T6425] pim6reg1: entered promiscuous mode [ 121.060096][ T6425] pim6reg1: entered allmulticast mode [ 121.080351][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.175'. [ 121.190317][ T6429] vlan2: entered promiscuous mode [ 121.205153][ T6429] bridge0: entered promiscuous mode [ 121.286148][ T6432] net veth1_virt_wifi : renamed from virt_wifi0 [ 121.788604][ T6448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.157371][ T6467] raw_sendmsg: syz.1.192 forgot to set AF_INET. Fix it! [ 122.208637][ T6468] netlink: 'syz.4.193': attribute type 10 has an invalid length. [ 122.305746][ T6468] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 122.336160][ T6468] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 122.521012][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 122.560667][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.200'. [ 122.798960][ T6485] syzkaller0: entered allmulticast mode [ 122.960375][ T6498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.206'. [ 124.151809][ T6531] netlink: 92 bytes leftover after parsing attributes in process `syz.2.220'. [ 124.935038][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.236'. [ 124.958584][ T6564] netlink: 4 bytes leftover after parsing attributes in process `syz.4.236'. [ 125.000247][ T6564] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 125.029465][ T6564] netlink: 10 bytes leftover after parsing attributes in process `syz.4.236'. [ 125.043664][ T6564] block nbd2: Unsupported socket: shutdown callout must be supported. [ 125.048565][ T6569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.237'. [ 125.088919][ T6569] bond1: entered promiscuous mode [ 125.094672][ T6569] 8021q: adding VLAN 0 to HW filter on device bond1 [ 125.797757][ T6586] syzkaller0: entered promiscuous mode [ 125.811298][ T6586] syzkaller0: entered allmulticast mode [ 128.510077][ T6650] netlink: 'syz.2.269': attribute type 4 has an invalid length. [ 128.559916][ T6651] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 128.586321][ T6650] netlink: 'syz.2.269': attribute type 4 has an invalid length. [ 129.458816][ T120] hid-generic 0005:15C2:5505.0001: item fetching failed at offset 0/1 [ 129.471994][ T120] hid-generic 0005:15C2:5505.0001: probe with driver hid-generic failed with error -22 [ 130.047270][ T6677] dccp_close: ABORT with 60 bytes unread [ 132.724431][ T6761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.316'. [ 133.367890][ T6775] netlink: 71 bytes leftover after parsing attributes in process `syz.4.322'. [ 134.062641][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.333'. [ 135.072396][ T6849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.350'. [ 135.541483][ T6850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.587474][ T6863] sch_fq: defrate 0 ignored. [ 136.501661][ T6897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.370'. [ 137.043393][ T6919] netlink: 68 bytes leftover after parsing attributes in process `syz.0.380'. [ 137.068599][ T6918] netlink: 88 bytes leftover after parsing attributes in process `syz.3.379'. [ 137.101607][ T6918] netem: invalid attributes len -24 [ 137.112634][ T6918] netem: change failed [ 137.418799][ T6931] tipc: Started in network mode [ 137.440470][ T6931] tipc: Node identity , cluster identity 4711 [ 137.456900][ T6931] tipc: Failed to set node id, please configure manually [ 137.464791][ T6931] tipc: Enabling of bearer rejected, failed to enable media [ 138.360345][ T6969] C: renamed from lo (while UP) [ 138.379178][ T6967] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 138.410615][ T6969] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 138.524312][ T6973] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 138.627187][ T6967] veth3: entered promiscuous mode [ 138.640183][ T6967] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 138.649271][ T6977] netlink: 96 bytes leftover after parsing attributes in process `syz.4.404'. [ 139.274814][ T6998] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 139.304316][ T6998] team0: Device ipvlan2 is already an upper device of the team interface [ 139.481557][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.753421][ T7014] dccp_close: ABORT with 44 bytes unread [ 139.815215][ T7019] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96 [ 140.639392][ T7053] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 140.805325][ T7053] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.819049][ T7053] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.829172][ T7053] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.845093][ T7053] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 140.858412][ T7063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'. [ 140.910476][ T7053] bond1: (slave geneve2): making interface the new active one [ 140.964531][ T7053] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 141.006802][ T7063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 141.299052][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.450'. [ 141.331927][ T7077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.450'. [ 141.360510][ T7077] netlink: 'syz.1.450': attribute type 1 has an invalid length. [ 141.375492][ T7077] netlink: 10 bytes leftover after parsing attributes in process `syz.1.450'. [ 141.448917][ T5152] block nbd2: Receive control failed (result -107) [ 141.723982][ T7092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 141.731422][ T7092] IPv6: NLM_F_CREATE should be set when creating new route [ 141.756501][ T7092] C: entered allmulticast mode [ 141.817994][ T7092] tunl0: entered allmulticast mode [ 141.874583][ T7092] gre0: entered allmulticast mode [ 141.929310][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 141.947268][ T7092] gretap0: entered allmulticast mode [ 141.987566][ T7092] erspan0: entered allmulticast mode [ 142.008287][ T7092] ip_vti0: entered allmulticast mode [ 142.039243][ T7092] ip6_vti0: entered allmulticast mode [ 142.057767][ T7092] sit0: entered allmulticast mode [ 142.087305][ T7092] ip6tnl0: entered allmulticast mode [ 142.108602][ T7092] ip6gre0: entered allmulticast mode [ 142.140333][ T7092] syz_tun: entered allmulticast mode [ 142.166959][ T7092] ip6gretap0: entered allmulticast mode [ 142.186022][ T7092] bridge0: port 5(vlan2) entered disabled state [ 142.192598][ T7092] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.200523][ T7092] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.221264][ T7092] bridge0: entered allmulticast mode [ 142.265785][ T7092] vcan0: entered allmulticast mode [ 142.319310][ T7092] team0: entered allmulticast mode [ 142.333257][ T7092] team_slave_0: entered allmulticast mode [ 142.341737][ T7092] team_slave_1: entered allmulticast mode [ 142.360027][ T7092] dummy0: entered allmulticast mode [ 142.390967][ T7092] nlmon0: entered allmulticast mode [ 142.405193][ T7092] caif0: entered allmulticast mode [ 142.427027][ T7092] batadv0: entered allmulticast mode [ 142.435739][ T7092] vxcan0: entered allmulticast mode [ 142.467067][ T7092] vxcan1: entered allmulticast mode [ 142.474683][ T7092] veth0: entered allmulticast mode [ 142.485557][ T7092] veth1: entered allmulticast mode [ 142.504017][ T7092] wg0: entered allmulticast mode [ 142.527860][ T7092] wg1: entered allmulticast mode [ 142.543925][ T7092] wg2: entered allmulticast mode [ 142.553714][ T7092] veth0_to_bridge: entered allmulticast mode [ 142.573862][ T7092] veth1_to_bridge: entered allmulticast mode [ 142.594628][ T7092] veth0_to_bond: entered allmulticast mode [ 142.624733][ T7092] veth1_to_bond: entered allmulticast mode [ 142.650588][ T7092] veth0_to_team: entered allmulticast mode [ 142.694378][ T7092] veth1_to_team: entered allmulticast mode [ 142.713496][ T7092] veth0_to_batadv: entered allmulticast mode [ 142.723739][ T7092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.734705][ T7092] batadv_slave_0: entered allmulticast mode [ 142.749397][ T7092] veth1_to_batadv: entered allmulticast mode [ 142.765188][ T7092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.773518][ T7092] batadv_slave_1: entered allmulticast mode [ 142.794050][ T7092] xfrm0: entered allmulticast mode [ 142.819475][ T7092] veth0_to_hsr: entered allmulticast mode [ 142.838538][ T7092] hsr_slave_0: entered allmulticast mode [ 142.857690][ T7092] veth1_to_hsr: entered allmulticast mode [ 142.882714][ T7092] hsr_slave_1: entered allmulticast mode [ 142.905214][ T7092] hsr0: entered allmulticast mode [ 142.918361][ T7092] veth1_virt_wifi: entered allmulticast mode [ 142.941135][ T7092] veth0_virt_wifi: entered allmulticast mode [ 142.966373][ T7092] net veth1_virt_wifi : entered allmulticast mode [ 142.974490][ T7092] veth1_macvtap: entered allmulticast mode [ 143.001939][ T7092] veth0_macvtap: entered allmulticast mode [ 143.040137][ T7092] macvtap0: entered allmulticast mode [ 143.072202][ T7092] macsec0: entered allmulticast mode [ 143.100021][ T7092] geneve0: entered allmulticast mode [ 143.128150][ T7092] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.137317][ T7092] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.155014][ T7092] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.164816][ T7092] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.174950][ T7092] geneve1: entered allmulticast mode [ 143.190274][ T7092] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 143.211050][ T7092] netdevsim netdevsim0 netdevsim1: entered allmulticast mode [ 143.229189][ T7092] netdevsim netdevsim0 netdevsim2: entered allmulticast mode [ 143.249218][ T7092] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 143.282378][ T7092] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 143.300448][ T7092] veth2: entered allmulticast mode [ 143.312261][ T7098] bridge_slave_1: left allmulticast mode [ 143.332529][ T7098] bridge_slave_1: left promiscuous mode [ 143.348489][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.405326][ T7098] bridge_slave_0: left allmulticast mode [ 143.419609][ T7098] bridge_slave_0: left promiscuous mode [ 143.425584][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.434033][ T7132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.463'. [ 143.499632][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.461'. [ 143.522488][ T7135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 143.532165][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.461'. [ 143.542461][ T7135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.461'. [ 143.561108][ T7097] batman_adv: batadv0: Adding interface: dummy0 [ 143.576581][ T7097] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.634915][ T7097] batman_adv: batadv0: Interface activated: dummy0 [ 143.687866][ T7103] batadv0: mtu less than device minimum [ 143.694760][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.707232][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.718891][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.730699][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.742318][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.754061][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.765664][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.777432][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 143.789716][ T7103] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 144.406420][ T7160] netlink: 'syz.0.470': attribute type 1 has an invalid length. [ 144.447181][ T7160] nbd: socks must be embedded in a SOCK_ITEM attr [ 144.453730][ T7160] block nbd3: shutting down sockets [ 146.183763][ T7154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.305752][ T7181] __nla_validate_parse: 5 callbacks suppressed [ 146.305779][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.475'. [ 146.483937][ T7154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.568828][ T7188] batadv_slave_0: left allmulticast mode [ 146.709992][ T7154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.989074][ T7154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.273737][ T7220] netlink: 28 bytes leftover after parsing attributes in process `syz.3.484'. [ 147.331231][ T7154] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.411439][ T7154] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.519134][ T7154] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.612332][ T7154] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.312041][ T7256] bridge_slave_0: left promiscuous mode [ 148.341905][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.450764][ T7256] bridge_slave_1: left promiscuous mode [ 148.461377][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.520421][ T7256] bond0: (slave bond_slave_0): Releasing backup interface [ 148.572495][ T7256] bond_slave_0: left promiscuous mode [ 148.606759][ T7256] bond0: (slave bond_slave_1): Releasing backup interface [ 148.652540][ T7256] bond_slave_1: left promiscuous mode [ 148.678672][ T7256] team0: Port device team_slave_0 removed [ 148.712989][ T7256] team0: Port device team_slave_1 removed [ 148.741591][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.788693][ T7256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.815566][ T7256] ip6gretap1: left promiscuous mode [ 148.828700][ T7256] bridge0: port 3(ip6gretap1) entered disabled state [ 148.856467][ T7256] veth3: left promiscuous mode [ 148.869905][ T7256] bridge0: port 4(veth3) entered disabled state [ 148.880861][ T7256] vlan2: left promiscuous mode [ 148.885721][ T7256] bond0: left promiscuous mode [ 148.924101][ T7256] bridge0: port 5(vlan2) entered disabled state [ 148.939502][ T7274] IPv6: Can't replace route, no match found [ 149.290271][ T7288] bridge1: entered allmulticast mode [ 149.941647][ T7324] tipc: Enabling not permitted [ 149.951661][ T7324] tipc: Enabling of bearer rejected, failed to enable media [ 151.012810][ T7365] net veth1_virt_wifi : renamed from virt_wifi0 [ 151.096143][ T7371] netlink: 40 bytes leftover after parsing attributes in process `syz.3.537'. [ 151.278518][ T7373] bridge_slave_0: left allmulticast mode [ 151.303348][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.362604][ T7373] bridge_slave_1: left allmulticast mode [ 151.387246][ T7373] bridge_slave_1: left promiscuous mode [ 151.421109][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.477360][ T7373] bond0: (slave bond_slave_0): Releasing backup interface [ 151.511768][ T7373] bond_slave_0: left promiscuous mode [ 151.589123][ T7373] bond0: (slave bond_slave_1): Releasing backup interface [ 151.600215][ T7373] bond_slave_1: left promiscuous mode [ 151.627949][ T7373] team0: Port device team_slave_0 removed [ 151.647543][ T7373] team0: Port device team_slave_1 removed [ 151.654617][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.662424][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.674771][ T7373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.683340][ T7373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.703088][ T7373] bond0: (slave netdevsim0): Releasing backup interface [ 151.712654][ T7373] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 151.771374][ T5845] wlan0 speed is unknown, defaulting to 1000 [ 152.642955][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.4.558'. [ 152.699165][ T7422] vlan2: entered promiscuous mode [ 153.242292][ T7439] bond0: (slave team0): Releasing backup interface [ 153.299108][ T7439] team0: left promiscuous mode [ 153.304603][ T7439] team_slave_0: left promiscuous mode [ 153.326282][ T7439] team_slave_1: left promiscuous mode [ 153.331997][ T7439] geneve0: left promiscuous mode [ 153.391658][ T7439] bond0: (slave bond_slave_0): Releasing backup interface [ 153.410720][ T7439] bond_slave_0: left promiscuous mode [ 153.443022][ T7439] bond0: (slave bond_slave_1): Releasing backup interface [ 153.477943][ T7439] bond_slave_1: left promiscuous mode [ 153.536753][ T7439] team0: Port device team_slave_0 removed [ 153.562721][ T7439] team0: Port device team_slave_1 removed [ 153.597295][ T7439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.604835][ T7439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.618756][ T7439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.632798][ T7439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.705570][ T7439] team0: Port device geneve0 removed [ 153.744013][ T7439] bond1: (slave ip6gretap1): Releasing backup interface [ 153.754863][ T7439] bond1: (slave ip6gretap1): the permanent HWaddr of slave - aa:20:9f:43:20:9e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 153.821588][ T7439] bond1: (slave veth3): Releasing backup interface [ 153.987263][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 154.050423][ T7461] 8021q: VLANs not supported on gre0 [ 154.452785][ T7479] netlink: 'syz.1.580': attribute type 4 has an invalid length. [ 154.551493][ T7479] netlink: 'syz.1.580': attribute type 4 has an invalid length. [ 154.759267][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz.4.596'. [ 155.087190][ T7507] netlink: 92 bytes leftover after parsing attributes in process `syz.4.591'. [ 155.146897][ T7498] wlan0 speed is unknown, defaulting to 1000 [ 156.506020][ T7544] siw: device registration error -23 [ 156.936985][ T7565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 156.975138][ T7565] vlan2: entered promiscuous mode [ 156.997238][ T7565] ip6gretap0: entered promiscuous mode [ 157.119545][ T7572] netlink: 40 bytes leftover after parsing attributes in process `syz.4.622'. [ 157.312827][ C0] Unknown status report in ack skb [ 157.785578][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.632'. [ 157.921330][ T7599] netlink: 40 bytes leftover after parsing attributes in process `syz.0.635'. [ 158.228014][ T7610] siw: device registration error -23 [ 158.751100][ T7631] netlink: 40 bytes leftover after parsing attributes in process `syz.1.649'. [ 158.980352][ T7639] siw: device registration error -23 [ 159.233289][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.657'. [ 159.332522][ T7650] vlan2: entered promiscuous mode [ 159.552940][ T7661] netlink: 40 bytes leftover after parsing attributes in process `syz.0.663'. [ 159.909100][ T7669] wlan0 speed is unknown, defaulting to 1000 [ 160.525476][ T7694] netlink: 40 bytes leftover after parsing attributes in process `syz.4.678'. [ 161.302769][ T7720] siw: device registration error -23 [ 161.969819][ T7747] siw: device registration error -23 [ 162.981576][ T7788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.722'. [ 163.021827][ T7788] vlan2: entered promiscuous mode [ 163.450962][ T7805] siw: device registration error -23 [ 164.305202][ T7843] netlink: 71 bytes leftover after parsing attributes in process `syz.2.743'. [ 165.149600][ T7876] siw: device registration error -23 [ 165.201703][ T7878] netlink: 16 bytes leftover after parsing attributes in process `syz.1.759'. [ 165.234980][ T7878] netlink: 6 bytes leftover after parsing attributes in process `syz.1.759'. [ 165.593174][ T7895] net_ratelimit: 10 callbacks suppressed [ 165.593218][ T7895] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 165.756664][ T7900] netlink: 40 bytes leftover after parsing attributes in process `syz.3.767'. [ 165.945774][ T7906] siw: device registration error -23 [ 166.574066][ T7929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.783'. [ 167.348257][ T7961] netlink: 40 bytes leftover after parsing attributes in process `syz.4.798'. [ 167.638318][ T7973] tap0: tun_chr_ioctl cmd 1074025672 [ 167.643742][ T7973] tap0: ignored: set checksum disabled [ 168.117011][ T7992] netlink: 830 bytes leftover after parsing attributes in process `syz.2.813'. [ 168.667845][ T5845] hid-generic 0005:0C45:0007.0002: item fetching failed at offset 0/1 [ 168.716912][ T5845] hid-generic 0005:0C45:0007.0002: probe with driver hid-generic failed with error -22 [ 168.834585][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.2.828'. [ 168.928994][ T8022] vlan3: entered promiscuous mode [ 169.897029][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.4.847'. [ 169.915159][ T8063] vlan2: entered promiscuous mode [ 170.581581][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.858'. [ 171.544595][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.875'. [ 173.164762][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 173.706210][ T8211] syz.3.908 (8211) used greatest stack depth: 19416 bytes left [ 174.053485][ T8224] vxcan1: tx address claim with different name [ 174.244753][ T8233] netlink: 40 bytes leftover after parsing attributes in process `syz.1.917'. [ 174.590912][ T8239] wlan0 speed is unknown, defaulting to 1000 [ 175.082895][ T8259] veth0_to_team: entered promiscuous mode [ 175.106947][ T8259] veth0_to_team: entered allmulticast mode [ 175.145261][ T8264] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 176.666915][ T8314] wlan0 speed is unknown, defaulting to 1000 [ 178.772975][ T8393] wlan0 speed is unknown, defaulting to 1000 [ 178.825774][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.982'. [ 180.052398][ T8442] netlink: 'syz.3.999': attribute type 9 has an invalid length. [ 180.575407][ T8461] siw: device registration error -23 [ 180.749051][ T8469] wlan0 speed is unknown, defaulting to 1000 [ 180.965379][ T8481] dccp_close: ABORT with 68 bytes unread [ 181.252912][ T8491] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1017'. [ 181.640306][ T8502] siw: device registration error -23 [ 182.028891][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1026'. [ 182.244506][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1031'. [ 182.258788][ T8525] 8021q: VLANs not supported on ip6gre0 [ 182.337465][ T8531] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 182.345061][ T8531] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 182.491498][ T8529] wlan0 speed is unknown, defaulting to 1000 [ 183.098151][ T8561] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1044'. [ 183.747554][ T8581] vlan2: entered promiscuous mode [ 183.777606][ T8581] bond0: entered promiscuous mode [ 183.796591][ T8581] bond_slave_0: entered promiscuous mode [ 183.815546][ T8581] bond_slave_1: entered promiscuous mode [ 183.887023][ T8584] team0: Mode changed to "loadbalance" [ 184.044998][ T8595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1057'. [ 184.122559][ T8599] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 184.843939][ T8630] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1071'. [ 184.852968][ T8632] siw: device registration error -23 [ 185.334854][ T8654] wlan0 speed is unknown, defaulting to 1000 [ 185.603543][ T8665] siw: device registration error -23 [ 185.624093][ T8664] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1085'. [ 186.668525][ T8698] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1096'. [ 186.686931][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 187.467890][ T8730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1109'. [ 188.234194][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1124'. [ 188.307389][ T8762] vlan2: entered promiscuous mode [ 188.325237][ T8762] syz_tun: entered promiscuous mode [ 188.381650][ T8767] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1125'. [ 188.442862][ T8771] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1125'. [ 188.465660][ T8767] gretap0: entered promiscuous mode [ 188.490813][ T8771] 0ªî{X¹¦: renamed from gretap0 [ 188.555286][ T8771] 0ªî{X¹¦: left promiscuous mode [ 188.568008][ T8771] 0ªî{X¹¦: entered allmulticast mode [ 188.602139][ T8771] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 188.654081][ T8771] syz.2.1125 (8771) used greatest stack depth: 18872 bytes left [ 189.355158][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1141'. [ 189.406698][ T8808] vlan3: entered promiscuous mode [ 189.451771][ T8808] syz_tun: entered promiscuous mode [ 189.651550][ T8823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.658930][ T8823] IPv6: NLM_F_CREATE should be set when creating new route [ 189.666306][ T8823] IPv6: NLM_F_CREATE should be set when creating new route [ 189.673586][ T8823] IPv6: NLM_F_CREATE should be set when creating new route [ 189.687266][ T8823] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.371429][ T8851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1161'. [ 190.425468][ T8851] 8021q: VLANs not supported on ip6gre0 [ 190.473794][ T8857] dccp_close: ABORT with 68 bytes unread [ 191.823910][ T8926] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1190'. [ 192.487512][ T8951] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1201'. [ 192.795979][ T7127] IPVS: starting estimator thread 0... [ 192.797039][ T8962] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.886123][ T8966] IPVS: using max 26 ests per chain, 62400 per kthread [ 193.393020][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1220'. [ 193.601296][ T9005] netlink: 'syz.1.1225': attribute type 9 has an invalid length. [ 193.623307][ T9005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 194.735406][ T9056] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1246'. [ 194.925482][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1250'. [ 195.243724][ T9077] vlan2: entered allmulticast mode [ 195.258942][ T9077] bond0: entered allmulticast mode [ 195.274011][ T9077] bridge0: port 1(vlan2) entered blocking state [ 195.284192][ T9077] bridge0: port 1(vlan2) entered disabled state [ 195.295062][ T9077] vlan2: entered promiscuous mode [ 195.301879][ T9077] bond0: entered promiscuous mode [ 195.550624][ T9089] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1259'. [ 195.761660][ T9101] vxcan1: tx address claim with different name [ 196.030204][ T9111] siw: device registration error -23 [ 196.194914][ T9120] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 196.555245][ T9138] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1280'. [ 196.584682][ T9138] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1280'. [ 196.619585][ T9138] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1280'. [ 196.636561][ T9138] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1280'. [ 196.654358][ T9138] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1280'. [ 196.664048][ T9138] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1280'. [ 196.678420][ T9138] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1280'. [ 197.593580][ T9183] 8021q: VLANs not supported on ip6tnl0 [ 198.526507][ T9215] 8021q: VLANs not supported on ip6tnl0 [ 199.920451][ T9274] __nla_validate_parse: 146 callbacks suppressed [ 199.920477][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1342'. [ 200.285918][ T9290] dccp_invalid_packet: P.Data Offset(0) too small [ 200.653960][ T9308] wlan0 speed is unknown, defaulting to 1000 [ 200.921405][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.284419][ T9364] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 202.751759][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1388'. [ 202.864570][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1389'. [ 202.905294][ T9392] 8021q: VLANs not supported on ip6gre0 [ 203.024070][ T9400] siw: device registration error -23 [ 203.741761][ T9429] syzkaller1: entered promiscuous mode [ 203.755130][ T9429] syzkaller1: entered allmulticast mode [ 203.763778][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1406'. [ 203.774760][ T9430] 8021q: VLANs not supported on ip6gre0 [ 204.536046][ T9467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'. [ 204.559991][ T9467] 8021q: VLANs not supported on ip6gre0 [ 204.639453][ T9471] siw: device registration error -23 [ 205.029845][ T9486] netlink: 'syz.3.1429': attribute type 2 has an invalid length. [ 205.198198][ T9492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 205.288890][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 205.314491][ T9496] 8021q: VLANs not supported on ip6gre0 [ 205.475934][ T9509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1438'. [ 206.688818][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1466'. [ 206.709629][ T9566] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.718647][ T9566] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.727034][ T9566] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.735635][ T9566] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 206.758025][ T9566] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.766693][ T9566] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.775185][ T9566] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 206.783755][ T9566] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 207.113991][ T9580] siw: device registration error -23 [ 207.521770][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1480'. [ 207.554331][ T9602] syzkaller1: entered promiscuous mode [ 207.565654][ T9602] syzkaller1: entered allmulticast mode [ 207.580074][ T9598] 8021q: VLANs not supported on ip6gre0 [ 207.704267][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 207.858273][ T9613] siw: device registration error -23 [ 207.951397][ T9618] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 208.557249][ T9638] syzkaller1: entered promiscuous mode [ 208.562845][ T9638] syzkaller1: entered allmulticast mode [ 208.588814][ T9645] siw: device registration error -23 [ 208.766818][ T9653] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1503'. [ 209.082514][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1509'. [ 209.544418][ T9680] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 209.545641][ T5919] IPVS: starting estimator thread 0... [ 209.685987][ T9682] IPVS: using max 30 ests per chain, 72000 per kthread [ 209.919954][ T9702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1523'. [ 209.940212][ T9700] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1522'. [ 210.583502][ T9736] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1537'. [ 210.708105][ T9738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1538'. [ 211.277727][ T9759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 211.399291][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1551'. [ 211.811141][ T9791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1559'. [ 211.948288][ T9794] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1561'. [ 212.450696][ T9817] wlan0 speed is unknown, defaulting to 1000 [ 212.588211][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1575'. [ 212.617447][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1576'. [ 212.647221][ T9826] 8021q: VLANs not supported on ip6gre0 [ 213.238757][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 213.239224][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 213.245421][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 213.653192][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1589'. [ 213.706354][ T9860] 8021q: VLANs not supported on ip6gre0 [ 213.808416][ T9867] siw: device registration error -23 [ 215.044163][ T9916] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1610'. [ 215.562062][ T9945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'. [ 215.743272][ T9953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1627'. [ 216.071681][ T9971] sctp: [Deprecated]: syz.1.1635 (pid 9971) Use of struct sctp_assoc_value in delayed_ack socket option. [ 216.071681][ T9971] Use struct sctp_sack_info instead [ 216.573192][ T9987] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1641'. [ 216.616135][ T9991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1640'. [ 217.193853][T10005] 8021q: adding VLAN 0 to HW filter on device bond2 [ 217.496201][T10030] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1654'. [ 218.275613][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 218.954440][T10087] trusted_key: syz.4.1677 sent an empty control message without MSG_MORE. [ 219.120400][T10089] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 220.121961][T10133] xt_CT: No such helper "pptp" [ 220.170956][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1700'. [ 222.569241][T10240] wlan0 speed is unknown, defaulting to 1000 [ 224.046208][T10295] siw: device registration error -23 [ 224.379049][T10308] wlan0 speed is unknown, defaulting to 1000 [ 224.407407][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1767'. [ 225.016834][T10335] netlink: 'syz.3.1776': attribute type 4 has an invalid length. [ 225.785286][T10358] netlink: 'syz.2.1783': attribute type 10 has an invalid length. [ 225.926855][T10366] netlink: 'syz.2.1788': attribute type 29 has an invalid length. [ 225.941421][T10366] netlink: 'syz.2.1788': attribute type 29 has an invalid length. [ 225.951309][T10366] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1788'. [ 226.256077][T10382] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 226.550641][T10396] siw: device registration error -23 [ 226.712844][T10399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1802'. [ 227.382065][T10433] syzkaller1: entered promiscuous mode [ 227.392230][T10433] syzkaller1: entered allmulticast mode [ 227.403540][T10431] siw: device registration error -23 [ 228.628297][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1843'. [ 229.510324][T10529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1860'. [ 229.530040][T10528] lo: entered allmulticast mode [ 229.583560][T10527] lo: left allmulticast mode [ 229.775686][T10540] geneve2: entered promiscuous mode [ 229.785600][T10540] geneve2: entered allmulticast mode [ 229.816066][T10545] netlink: 276 bytes leftover after parsing attributes in process `syz.4.1866'. [ 229.906180][T10537] wlan0 speed is unknown, defaulting to 1000 [ 229.911504][T10546] Unknown status report in ack skb [ 230.524286][T10559] syzkaller1: entered promiscuous mode [ 230.529974][T10559] syzkaller1: entered allmulticast mode [ 230.870904][T10575] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.272003][T10630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1896'. [ 232.891516][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'. [ 233.304202][T10670] wlan0 speed is unknown, defaulting to 1000 [ 233.550451][T10682] netlink: 'syz.4.1919': attribute type 1 has an invalid length. [ 233.712000][T10682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.759433][T10686] geneve2: entered promiscuous mode [ 233.775499][T10686] geneve2: entered allmulticast mode [ 233.852568][T10686] bond1: (slave geneve2): making interface the new active one [ 233.887991][T10686] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 234.767639][T10729] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1932'. [ 234.822682][T10729] vlan3: entered promiscuous mode [ 235.138636][T10740] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 235.627183][T10768] dccp_invalid_packet: P.Data Offset(3) too small [ 235.996696][T10783] tipc: Started in network mode [ 236.001682][T10783] tipc: Node identity aad090b711b1, cluster identity 4711 [ 236.018281][T10783] tipc: Enabled bearer , priority 0 [ 236.090142][T10791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1955'. [ 236.121935][T10783] syzkaller0: entered promiscuous mode [ 236.128972][T10783] syzkaller0: entered allmulticast mode [ 236.135523][T10783] tipc: Resetting bearer [ 236.226379][T10782] tipc: Resetting bearer [ 237.080396][ T5919] tipc: Node number set to 3143733431 [ 237.916482][T10782] tipc: Disabling bearer [ 239.782924][T10826] syz_tun: entered allmulticast mode [ 239.829081][T10825] syz_tun: left allmulticast mode [ 239.850420][T10829] siw: device registration error -23 [ 240.416748][T10851] syzkaller1: entered promiscuous mode [ 240.423205][T10851] syzkaller1: entered allmulticast mode [ 240.491061][T10862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1976'. [ 240.827242][T10872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1982'. [ 240.894825][T10876] xt_hashlimit: size too large, truncated to 1048576 [ 240.895197][T10878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'. [ 240.941434][T10878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1984'. [ 240.971550][T10882] : renamed from bond0 (while UP) [ 241.548324][T10904] netlink: 'syz.3.1994': attribute type 4 has an invalid length. [ 241.610242][T10906] siw: device registration error -23 [ 241.680472][T10908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1997'. [ 241.713388][T10903] syz.2.1995 (10903) used greatest stack depth: 18712 bytes left [ 243.422673][T10959] team0: Mode changed to "loadbalance" [ 244.384108][T10987] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 244.391787][T10987] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 244.783920][T10999] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 244.813323][T10999] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 245.010050][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2033'. [ 245.020635][T11010] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2034'. [ 245.031478][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 245.919887][T11031] syzkaller0: entered promiscuous mode [ 245.932436][T11031] syzkaller0: entered allmulticast mode [ 249.203313][T10965] Set syz1 is full, maxelem 65536 reached [ 249.222412][T11033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2046'. [ 249.236545][T11033] tipc: Started in network mode [ 249.241475][T11033] tipc: Node identity 7, cluster identity 5 [ 249.247908][T11033] tipc: Node number set to 7 [ 249.638025][T11056] netlink: 'syz.0.2054': attribute type 39 has an invalid length. [ 250.114538][T11081] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2063'. [ 250.264696][T11089] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2066'. [ 250.474956][T11096] ipvlan0: entered promiscuous mode [ 250.485154][T11096] ipvlan0: entered allmulticast mode [ 250.507101][T11096] veth0_vlan: entered allmulticast mode [ 250.703515][T11091] syzkaller0: entered promiscuous mode [ 250.711526][T11091] syzkaller0: entered allmulticast mode [ 251.455159][T11128] Cannot find set identified by id 3 to match [ 252.710969][T11134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2084'. [ 253.246816][T11158] tipc: Enabling of bearer rejected, failed to enable media [ 255.661819][T11290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2137'. [ 256.688250][T11342] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 256.751106][T11345] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2155'. [ 257.650313][T11388] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 257.659313][ T5861] IPVS: starting estimator thread 0... [ 257.764741][T11395] tipc: Enabled bearer , priority 0 [ 257.776198][T11392] IPVS: using max 26 ests per chain, 62400 per kthread [ 257.902461][T11395] syzkaller0: entered promiscuous mode [ 257.916351][T11395] syzkaller0: entered allmulticast mode [ 257.929325][T11395] tipc: Resetting bearer [ 258.071769][T11394] tipc: Resetting bearer [ 259.835507][T11394] tipc: Disabling bearer [ 259.845714][T11417] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2183'. [ 259.957190][T11429] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2186'. [ 260.177186][T11444] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2190'. [ 261.161178][T11481] 8021q: adding VLAN 0 to HW filter on device bond2 [ 261.204891][T11481] bridge0: port 3(bond2) entered blocking state [ 261.232989][T11481] bridge0: port 3(bond2) entered disabled state [ 261.248592][T11481] bond2: entered allmulticast mode [ 261.273686][T11481] bond2: entered promiscuous mode [ 261.279682][T11481] bridge0: port 3(bond2) entered blocking state [ 261.286195][T11481] bridge0: port 3(bond2) entered forwarding state [ 261.308283][ T13] bridge0: port 3(bond2) entered disabled state [ 261.803865][T11525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2220'. [ 262.029247][T11539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2226'. [ 262.058001][T11539] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2226'. [ 262.364329][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.529576][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2234'. [ 262.729461][T11567] wlan0 speed is unknown, defaulting to 1000 [ 263.215652][T11595] netlink: 'syz.1.2249': attribute type 12 has an invalid length. [ 263.223849][T11595] netlink: 'syz.1.2249': attribute type 29 has an invalid length. [ 263.232160][T11595] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2249'. [ 263.242110][T11595] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2249'. [ 263.429099][T11603] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.438807][T11603] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.516200][ T7127] IPVS: starting estimator thread 0... [ 265.627337][T11636] IPVS: using max 29 ests per chain, 69600 per kthread [ 266.291045][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2276'. [ 267.095190][T11707] gtp0: entered promiscuous mode [ 268.065701][T11757] vcan0: tx drop: invalid da for name 0x0000000000000004 [ 268.155337][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2311'. [ 269.697637][T11816] bridge2: entered allmulticast mode [ 269.757512][T11821] netlink: 'syz.3.2337': attribute type 11 has an invalid length. [ 269.854030][T11823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2338'. [ 270.114917][T11827] wlan0 speed is unknown, defaulting to 1000 [ 270.459951][T11834] netlink: 'syz.0.2341': attribute type 4 has an invalid length. [ 271.187062][T11858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2351'. [ 271.218916][T11858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2351'. [ 271.240229][T11858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2351'. [ 271.263764][T11858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2351'. [ 271.301305][T11858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2351'. [ 271.320212][T11858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2351'. [ 271.361422][T11858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2351'. [ 271.401524][T11858] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2351'. [ 273.688106][T11970] __nla_validate_parse: 164 callbacks suppressed [ 273.688135][T11970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2392'. [ 274.738157][T12002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2406'. [ 276.453749][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 276.578301][T12028] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2418'. [ 276.849947][T12042] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.2425'. [ 276.864817][T12042] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 276.886645][T12042] openvswitch: netlink: Message has 8454 unknown bytes. [ 276.940916][T12044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.128130][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2430'. [ 277.404810][T12067] team0: Mode changed to "loadbalance" [ 278.898237][T12141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'. [ 279.454543][T12156] "syz.1.2473" (12156) uses obsolete ecb(arc4) skcipher [ 280.318561][T12211] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2497'. [ 281.695737][T12282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2527'. [ 281.973886][T12291] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2531'. [ 281.996519][T12291] netlink: zone id is out of range [ 282.009384][T12291] netlink: get zone limit has 8 unknown bytes [ 282.634384][T12322] vlan3: entered promiscuous mode [ 282.654115][T12322] bridge0: entered promiscuous mode [ 282.686103][T12322] vlan3: entered allmulticast mode [ 282.691587][T12322] bridge0: entered allmulticast mode [ 283.181804][T12334] syz.1.2550 (12334) used greatest stack depth: 18552 bytes left [ 283.975628][T12377] netlink: 'syz.3.2560': attribute type 1 has an invalid length. [ 284.057638][T12377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.067182][ T5152] Bluetooth: hci4: link tx timeout [ 284.072742][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.084002][ T5152] Bluetooth: hci4: link tx timeout [ 284.093040][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.243973][ T5152] Bluetooth: hci4: link tx timeout [ 284.249334][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.280516][ T5152] Bluetooth: hci4: link tx timeout [ 284.285825][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.504861][ T5152] Bluetooth: hci4: link tx timeout [ 284.510252][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 284.998430][ T5152] Bluetooth: hci4: link tx timeout [ 285.004574][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 285.869223][T12430] syzkaller0: entered promiscuous mode [ 285.910087][T12430] syzkaller0: entered allmulticast mode [ 286.014496][ T5152] Bluetooth: hci4: link tx timeout [ 286.019927][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.118447][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 286.124569][ T5152] Bluetooth: hci4: link tx timeout [ 286.131309][ T5152] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 286.142927][ T5152] ================================================================== [ 286.151061][ T5152] BUG: KASAN: slab-use-after-free in hci_disconnect+0x20a/0x2d0 [ 286.158772][ T5152] Read of size 1 at addr ffff888033ff803d by task kworker/u9:1/5152 [ 286.166788][ T5152] [ 286.169159][ T5152] CPU: 0 UID: 0 PID: 5152 Comm: kworker/u9:1 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 286.169180][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.169193][ T5152] Workqueue: hci4 hci_tx_work [ 286.169231][ T5152] Call Trace: [ 286.169248][ T5152] [ 286.169257][ T5152] dump_stack_lvl+0x241/0x360 [ 286.169298][ T5152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.169322][ T5152] ? __virt_addr_valid+0x183/0x530 [ 286.169348][ T5152] ? rcu_is_watching+0x15/0xb0 [ 286.169377][ T5152] ? __virt_addr_valid+0x183/0x530 [ 286.169398][ T5152] ? lock_release+0x4e/0x3e0 [ 286.169418][ T5152] ? __virt_addr_valid+0x183/0x530 [ 286.169440][ T5152] ? __virt_addr_valid+0x183/0x530 [ 286.169464][ T5152] print_report+0x16e/0x5b0 [ 286.169489][ T5152] ? __virt_addr_valid+0x183/0x530 [ 286.169511][ T5152] ? __virt_addr_valid+0x183/0x530 [ 286.169533][ T5152] ? __virt_addr_valid+0x45f/0x530 [ 286.169555][ T5152] ? __phys_addr+0xba/0x170 [ 286.169578][ T5152] ? hci_disconnect+0x20a/0x2d0 [ 286.169595][ T5152] kasan_report+0x143/0x180 [ 286.169622][ T5152] ? hci_disconnect+0x20a/0x2d0 [ 286.169648][ T5152] hci_disconnect+0x20a/0x2d0 [ 286.169668][ T5152] ? __pfx_hci_disconnect+0x10/0x10 [ 286.169688][ T5152] ? __rcu_read_unlock+0xa1/0x110 [ 286.169705][ T5152] ? __check_timeout+0x181/0x550 [ 286.169721][ T5152] __check_timeout+0x3a5/0x550 [ 286.169737][ T5152] ? __check_timeout+0x181/0x550 [ 286.169755][ T5152] hci_tx_work+0xbe2/0x1660 [ 286.169787][ T5152] ? __pfx_hci_tx_work+0x10/0x10 [ 286.169816][ T5152] ? process_scheduled_works+0x9cb/0x18e0 [ 286.169836][ T5152] process_scheduled_works+0xac3/0x18e0 [ 286.169868][ T5152] ? __pfx_process_scheduled_works+0x10/0x10 [ 286.169890][ T5152] ? assign_work+0x367/0x3d0 [ 286.169910][ T5152] worker_thread+0x870/0xd50 [ 286.169936][ T5152] ? __kthread_parkme+0x1a8/0x200 [ 286.169958][ T5152] ? __pfx_worker_thread+0x10/0x10 [ 286.169978][ T5152] kthread+0x7b7/0x940 [ 286.170001][ T5152] ? __pfx_worker_thread+0x10/0x10 [ 286.170020][ T5152] ? __pfx_kthread+0x10/0x10 [ 286.170041][ T5152] ? __pfx_kthread+0x10/0x10 [ 286.170063][ T5152] ? __pfx_kthread+0x10/0x10 [ 286.170084][ T5152] ? __pfx_kthread+0x10/0x10 [ 286.170106][ T5152] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.170126][ T5152] ? lockdep_hardirqs_on+0x9d/0x150 [ 286.170146][ T5152] ? __pfx_kthread+0x10/0x10 [ 286.170172][ T5152] ret_from_fork+0x4b/0x80 [ 286.170194][ T5152] ? __pfx_kthread+0x10/0x10 [ 286.170219][ T5152] ret_from_fork_asm+0x1a/0x30 [ 286.170244][ T5152] [ 286.170261][ T5152] [ 286.417914][ T5152] Allocated by task 55: [ 286.422111][ T5152] kasan_save_track+0x3f/0x80 [ 286.426802][ T5152] __kasan_kmalloc+0x9d/0xb0 [ 286.431410][ T5152] __kmalloc_cache_noprof+0x236/0x370 [ 286.436800][ T5152] __hci_conn_add+0x317/0x19c0 [ 286.441571][ T5152] le_conn_complete_evt+0x2d7/0x12a0 [ 286.446866][ T5152] hci_le_conn_complete_evt+0x18c/0x420 [ 286.452414][ T5152] hci_event_packet+0xa5c/0x1550 [ 286.457362][ T5152] hci_rx_work+0x3f3/0xdb0 [ 286.461797][ T5152] process_scheduled_works+0xac3/0x18e0 [ 286.467348][ T5152] worker_thread+0x870/0xd50 [ 286.471944][ T5152] kthread+0x7b7/0x940 [ 286.476022][ T5152] ret_from_fork+0x4b/0x80 [ 286.480449][ T5152] ret_from_fork_asm+0x1a/0x30 [ 286.485218][ T5152] [ 286.487542][ T5152] Freed by task 5850: [ 286.491519][ T5152] kasan_save_track+0x3f/0x80 [ 286.496201][ T5152] kasan_save_free_info+0x40/0x50 [ 286.501241][ T5152] __kasan_slab_free+0x59/0x70 [ 286.506034][ T5152] kfree+0x198/0x430 [ 286.509951][ T5152] device_release+0x99/0x1c0 [ 286.514556][ T5152] kobject_put+0x22f/0x480 [ 286.518985][ T5152] hci_conn_del+0x8d5/0xc50 [ 286.523498][ T5152] hci_abort_conn_sync+0x5a0/0xeb0 [ 286.528616][ T5152] hci_cmd_sync_work+0x22b/0x400 [ 286.533560][ T5152] process_scheduled_works+0xac3/0x18e0 [ 286.539217][ T5152] worker_thread+0x870/0xd50 [ 286.543828][ T5152] kthread+0x7b7/0x940 [ 286.547909][ T5152] ret_from_fork+0x4b/0x80 [ 286.552338][ T5152] ret_from_fork_asm+0x1a/0x30 [ 286.557104][ T5152] [ 286.559428][ T5152] The buggy address belongs to the object at ffff888033ff8000 [ 286.559428][ T5152] which belongs to the cache kmalloc-8k of size 8192 [ 286.573487][ T5152] The buggy address is located 61 bytes inside of [ 286.573487][ T5152] freed 8192-byte region [ffff888033ff8000, ffff888033ffa000) [ 286.587290][ T5152] [ 286.589709][ T5152] The buggy address belongs to the physical page: [ 286.596127][ T5152] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33ff8 [ 286.604900][ T5152] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 286.613402][ T5152] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 286.620960][ T5152] page_type: f5(slab) [ 286.624949][ T5152] raw: 00fff00000000040 ffff88801b042280 ffffea0000c5d000 dead000000000002 [ 286.633535][ T5152] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 286.642124][ T5152] head: 00fff00000000040 ffff88801b042280 ffffea0000c5d000 dead000000000002 [ 286.650801][ T5152] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 286.659474][ T5152] head: 00fff00000000003 ffffea0000cffe01 00000000ffffffff 00000000ffffffff [ 286.668149][ T5152] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 286.676818][ T5152] page dumped because: kasan: bad access detected [ 286.683243][ T5152] page_owner tracks the page as allocated [ 286.688956][ T5152] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5506, tgid 5506 (dhcpcd), ts 60844930683, free_ts 60401870934 [ 286.709633][ T5152] post_alloc_hook+0x1f4/0x240 [ 286.714427][ T5152] get_page_from_freelist+0x352b/0x36c0 [ 286.719999][ T5152] __alloc_frozen_pages_noprof+0x211/0x5b0 [ 286.725823][ T5152] alloc_pages_mpol+0x339/0x690 [ 286.730684][ T5152] allocate_slab+0x8f/0x3a0 [ 286.735192][ T5152] ___slab_alloc+0xc3b/0x1500 [ 286.739875][ T5152] __slab_alloc+0x58/0xa0 [ 286.744204][ T5152] __kmalloc_node_track_caller_noprof+0x2ef/0x4d0 [ 286.750641][ T5152] kmalloc_reserve+0x111/0x2a0 [ 286.755428][ T5152] __alloc_skb+0x1f2/0x480 [ 286.759845][ T5152] netlink_dump+0x1eb/0xeb0 [ 286.764359][ T5152] netlink_recvmsg+0x6c7/0x1180 [ 286.769222][ T5152] sock_recvmsg+0x22f/0x280 [ 286.773736][ T5152] ____sys_recvmsg+0x1c8/0x480 [ 286.778503][ T5152] __sys_recvmsg+0x2a5/0x3a0 [ 286.783096][ T5152] do_syscall_64+0xf3/0x230 [ 286.787630][ T5152] page last free pid 5496 tgid 5496 stack trace: [ 286.794129][ T5152] __free_frozen_pages+0xde8/0x10a0 [ 286.799332][ T5152] __put_partials+0x160/0x1c0 [ 286.804013][ T5152] put_cpu_partial+0x17e/0x250 [ 286.808788][ T5152] __slab_free+0x294/0x390 [ 286.813210][ T5152] qlist_free_all+0x9a/0x140 [ 286.817809][ T5152] kasan_quarantine_reduce+0x14f/0x170 [ 286.823274][ T5152] __kasan_slab_alloc+0x23/0x80 [ 286.828134][ T5152] __kmalloc_cache_noprof+0x1c8/0x370 [ 286.833513][ T5152] tomoyo_init_log+0x1c6/0x2150 [ 286.838379][ T5152] tomoyo_supervisor+0x3c0/0x18b0 [ 286.843418][ T5152] tomoyo_path_permission+0x243/0x360 [ 286.848796][ T5152] tomoyo_path_perm+0x4c9/0x640 [ 286.853650][ T5152] security_inode_getattr+0x130/0x330 [ 286.859026][ T5152] vfs_fstatat+0xa5/0x150 [ 286.863378][ T5152] __x64_sys_newfstatat+0x11f/0x1a0 [ 286.868581][ T5152] do_syscall_64+0xf3/0x230 [ 286.873092][ T5152] [ 286.875420][ T5152] Memory state around the buggy address: [ 286.881054][ T5152] ffff888033ff7f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 286.889117][ T5152] ffff888033ff7f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 286.897178][ T5152] >ffff888033ff8000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.905241][ T5152] ^ [ 286.911136][ T5152] ffff888033ff8080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.919200][ T5152] ffff888033ff8100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 286.927264][ T5152] ================================================================== [ 286.938286][ T5152] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 286.945539][ T5152] CPU: 0 UID: 0 PID: 5152 Comm: kworker/u9:1 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 286.957380][ T5152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.967485][ T5152] Workqueue: hci4 hci_tx_work [ 286.972223][ T5152] Call Trace: [ 286.975519][ T5152] [ 286.978481][ T5152] dump_stack_lvl+0x241/0x360 [ 286.983214][ T5152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.988473][ T5152] ? __pfx__printk+0x10/0x10 [ 286.993109][ T5152] ? vscnprintf+0x5d/0x90 [ 286.997484][ T5152] panic+0x349/0x880 [ 287.001420][ T5152] ? check_panic_on_warn+0x21/0xb0 [ 287.006572][ T5152] ? __pfx_panic+0x10/0x10 [ 287.011024][ T5152] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 287.017053][ T5152] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 287.023417][ T5152] ? print_report+0x519/0x5b0 [ 287.028147][ T5152] check_panic_on_warn+0x86/0xb0 [ 287.033127][ T5152] ? hci_disconnect+0x20a/0x2d0 [ 287.038024][ T5152] end_report+0x77/0x160 [ 287.042306][ T5152] kasan_report+0x154/0x180 [ 287.046845][ T5152] ? hci_disconnect+0x20a/0x2d0 [ 287.051734][ T5152] hci_disconnect+0x20a/0x2d0 [ 287.056444][ T5152] ? __pfx_hci_disconnect+0x10/0x10 [ 287.061684][ T5152] ? __rcu_read_unlock+0xa1/0x110 [ 287.066740][ T5152] ? __check_timeout+0x181/0x550 [ 287.071863][ T5152] __check_timeout+0x3a5/0x550 [ 287.076735][ T5152] ? __check_timeout+0x181/0x550 [ 287.081688][ T5152] hci_tx_work+0xbe2/0x1660 [ 287.086218][ T5152] ? __pfx_hci_tx_work+0x10/0x10 [ 287.091183][ T5152] ? process_scheduled_works+0x9cb/0x18e0 [ 287.096915][ T5152] process_scheduled_works+0xac3/0x18e0 [ 287.102481][ T5152] ? __pfx_process_scheduled_works+0x10/0x10 [ 287.108472][ T5152] ? assign_work+0x367/0x3d0 [ 287.113075][ T5152] worker_thread+0x870/0xd50 [ 287.117709][ T5152] ? __kthread_parkme+0x1a8/0x200 [ 287.122758][ T5152] ? __pfx_worker_thread+0x10/0x10 [ 287.127881][ T5152] kthread+0x7b7/0x940 [ 287.131968][ T5152] ? __pfx_worker_thread+0x10/0x10 [ 287.137091][ T5152] ? __pfx_kthread+0x10/0x10 [ 287.141693][ T5152] ? __pfx_kthread+0x10/0x10 [ 287.146301][ T5152] ? __pfx_kthread+0x10/0x10 [ 287.150902][ T5152] ? __pfx_kthread+0x10/0x10 [ 287.155501][ T5152] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.160706][ T5152] ? lockdep_hardirqs_on+0x9d/0x150 [ 287.165920][ T5152] ? __pfx_kthread+0x10/0x10 [ 287.170525][ T5152] ret_from_fork+0x4b/0x80 [ 287.174968][ T5152] ? __pfx_kthread+0x10/0x10 [ 287.179610][ T5152] ret_from_fork_asm+0x1a/0x30 [ 287.184418][ T5152] [ 287.187799][ T5152] Kernel Offset: disabled [ 287.192163][ T5152] Rebooting in 86400 seconds..