last executing test programs: 1m27.978425566s ago: executing program 2 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0xc00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 1m26.818405371s ago: executing program 4 (id=2308): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="0000000014000500000100fe88000000000000000000000004000100"], 0x44}}, 0x0) r3 = socket(0x18, 0x80005, 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "49ed3bdca70faa86c10da66b0381183a870ed10f990eac5816991a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "88c77568bb055ca92a89dddf2fdf74320453b3234edfd83cd387f19aac0ac8"}}]}, @TIPC_NLA_LINK={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01050400000000003c0012800b00010067726574617000002c00028008000100", @ANYRES32=r1], 0x64}}, 0x0) 1m11.99704128s ago: executing program 2 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0xc00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 1m8.48151626s ago: executing program 4 (id=2308): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="0000000014000500000100fe88000000000000000000000004000100"], 0x44}}, 0x0) r3 = socket(0x18, 0x80005, 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "49ed3bdca70faa86c10da66b0381183a870ed10f990eac5816991a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "88c77568bb055ca92a89dddf2fdf74320453b3234edfd83cd387f19aac0ac8"}}]}, @TIPC_NLA_LINK={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01050400000000003c0012800b00010067726574617000002c00028008000100", @ANYRES32=r1], 0x64}}, 0x0) 56.328293889s ago: executing program 2 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0xc00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 54.404841242s ago: executing program 4 (id=2308): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="0000000014000500000100fe88000000000000000000000004000100"], 0x44}}, 0x0) r3 = socket(0x18, 0x80005, 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "49ed3bdca70faa86c10da66b0381183a870ed10f990eac5816991a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "88c77568bb055ca92a89dddf2fdf74320453b3234edfd83cd387f19aac0ac8"}}]}, @TIPC_NLA_LINK={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01050400000000003c0012800b00010067726574617000002c00028008000100", @ANYRES32=r1], 0x64}}, 0x0) 40.939027762s ago: executing program 2 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0xc00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 39.835975632s ago: executing program 4 (id=2308): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="0000000014000500000100fe88000000000000000000000004000100"], 0x44}}, 0x0) r3 = socket(0x18, 0x80005, 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "49ed3bdca70faa86c10da66b0381183a870ed10f990eac5816991a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "88c77568bb055ca92a89dddf2fdf74320453b3234edfd83cd387f19aac0ac8"}}]}, @TIPC_NLA_LINK={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01050400000000003c0012800b00010067726574617000002c00028008000100", @ANYRES32=r1], 0x64}}, 0x0) 28.081821843s ago: executing program 2 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0xc00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 26.917951596s ago: executing program 4 (id=2308): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="0000000014000500000100fe88000000000000000000000004000100"], 0x44}}, 0x0) r3 = socket(0x18, 0x80005, 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "49ed3bdca70faa86c10da66b0381183a870ed10f990eac5816991a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "88c77568bb055ca92a89dddf2fdf74320453b3234edfd83cd387f19aac0ac8"}}]}, @TIPC_NLA_LINK={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01050400000000003c0012800b00010067726574617000002c00028008000100", @ANYRES32=r1], 0x64}}, 0x0) 20.868181924s ago: executing program 0 (id=3031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x2100000000000000) 20.766144761s ago: executing program 0 (id=3033): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) unshare(0x400) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x54000200) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x27, 0x26, 0x0, &(0x7f0000000240)="f8ad48cc09000000000000000800a28e01849adccf57808289375ea7e3f9a6021f1cbccc785c", 0x0, 0xbfffffff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r5, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f0000000540)=""/55, 0x37}}], 0x400000000000222, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_INTERFACE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x4008014) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x0, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20040001}, 0x0) bind$inet6(r1, 0x0, 0x39) 18.976082128s ago: executing program 0 (id=3036): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x40, 0x7800, 0x60000, 0x1ff, {{0x18, 0x4, 0x3, 0xa, 0x60, 0x68, 0x0, 0x6b, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp_prespec={0x44, 0x1c, 0x21, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x7}, {@rand_addr=0x64010102, 0x5}, {@private=0xa010101, 0x9}]}, @generic={0x7, 0xa, "c97b59685ca530eb"}, @lsrr={0x83, 0x23, 0x1, [@multicast2, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'ip_vti0\x00', r3, 0x8, 0x8048, 0x0, 0x4, {{0x12, 0x4, 0x1, 0x1, 0x48, 0x68, 0x0, 0x81, 0x29, 0x0, @multicast2, @local, {[@noop, @generic={0x53, 0xb, "7bc82887445d88cfb6"}, @noop, @rr={0x7, 0x3, 0x2f}, @lsrr={0x83, 0x1f, 0xe5, [@remote, @empty, @multicast1, @multicast1, @empty, @empty, @remote]}, @generic={0x94, 0x5, "773591"}]}}}}}) 18.919198585s ago: executing program 0 (id=3038): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) unshare(0x6a040000) mmap(&(0x7f0000775000/0x2000)=nil, 0x2000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x10000c00) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40050) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000640)="ad000000000000000c750000000000002cf57d0e722a3aaba124a91942b0e41c85ff1995a41b1ccc29b84c09477c9625d7be98034761af114e438d6eb3db3a78ce5f64a88ec9382e1a5e522cd635836cf774abf4ecd7fd6c525e2c89e67f44671f6709ec557f1067a704e9d437331b3544d92d38f7a368852efa8b6c406433e74dbdf891001d8e1e40c201a39d1f9ffc98c6374c909fb853f7cd152485e5b9b8c98a62a4eb1294d38e21bc79f17918c47a7df6530128de59e735b5b60d23dda14c92c731ab54f83820c18b36c4ef3d42edb52d16601332a45bf846f0786040d0", 0xe0) recvmmsg(r3, &(0x7f0000001300)=[{{&(0x7f0000000580)=@ax25={{0x3, @netrom}, [@null, @null, @default, @rose, @null, @remote, @default, @bcast]}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)=""/69, 0x45}, {&(0x7f00000007c0)=""/171, 0xab}], 0x2, &(0x7f0000000c00)}, 0xffffffff}, {{&(0x7f0000000900)=@nl=@proc, 0x80, &(0x7f0000000a80)}, 0xf52a}, {{&(0x7f0000000ac0)=@isdn, 0x80, &(0x7f0000000880)=[{&(0x7f00000037c0)=""/255, 0xff}, {&(0x7f0000000c40)=""/74, 0x4a}, {&(0x7f0000000b80)=""/104, 0x68}, {&(0x7f0000003a00)=""/4100, 0x1004}], 0x4, &(0x7f0000001dc0)=""/108, 0x6c}, 0x61e7}, {{0x0, 0x0, &(0x7f0000003200)=[{&(0x7f0000001e40)=""/213, 0xd5}, {&(0x7f0000000cc0)=""/93, 0x5d}, {&(0x7f0000001fc0)=""/56, 0x38}, {&(0x7f0000002040)=""/15, 0xf}, {&(0x7f0000002080)=""/181, 0xb5}, {&(0x7f0000002140)=""/124, 0x7c}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/25, 0x19}], 0x8}, 0x5}, {{&(0x7f0000003280)=@nfc_llcp, 0x80, &(0x7f0000003540), 0x0, &(0x7f00000008c0)}}], 0x5, 0x2040, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000003780)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000003a00)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20048025}, 0x200440d0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x5b, 0x80000, 0x3fffc) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0x7c}}, 0x20000000) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x8c4}, 0xc855) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003580)={&(0x7f0000003900)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="010028bd7000fedbdf25180000000c000600030000000000000040003080050002000d00000005000200000000002400030041685de1713a2d5a3a408d346df1bbbbffd285cee3dd9416eec9b57b9418190b05000200690000006c0030800c0001800800010003000000050002008100000005000200a2000000140004005967c5561e875f6bfc2b9cca92b812480500020032000000050002000300000014000400ffe42cb00e281ba97b4b46b437d3c8b614000400d8135edc6db44b02e853d4bd049290a908000300", @ANYRES32=0x0, @ANYBLOB="0c000600000000000022000079451785c444572031acd745ce8500"], 0xe0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0xc000000) r7 = socket$inet6(0xa, 0x3, 0x3a) sendmmsg(r7, &(0x7f0000001140)=[{{&(0x7f0000000980)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000d80)="80701ba3fc72ceaa82708f57fe915c1ea4058cd9750ba6d7b69b1c8241a2372513942c41f339629a4b5d725ae4202d55cb4d281a79d715d0b132bddc40d0793ada8ce4158c65cca84fa80d6b8018b21a72dacd2b8a3807b88ae254c6d99b8619550fc86f3663164a5bbdb90064c0ccad188cdc53225bcce9e276525989973fd7600eee4b85104d8b2dfe66292d317cb2d8c9d9adc965a9a4954720eeca6ff88e6037ceb21a3c23d82745c93cf8c1b79715920699454a574e46049631001aaa5a3ad6155ecfcc5345b5cfb8dd3864235dd98b6c6a8fde4565c32888f6c011a525b01c6668", 0xe4}, {&(0x7f0000001200)="0af25eadcf374a62693623bf51cb9d98a61abe3a754b53292e90a6ed86d8b8b482198f417bce7a106b81d4fd97d74994320f0f2712b443f4d223be2619efb199a7214f4279b2dfd27d97", 0x4a}, {&(0x7f0000000a00)="c298264ed9715f96e116e37551b70d2565e26e34a2a661ec1b02ebe4a95c322d74e536ecf880a694cd1ee7e9db17c934dc79349d63b7d8d561f3a667312317af2904fb6e17b21dfe911aa70db2141c43d8b5", 0x52}, {&(0x7f0000001280)="27d744f2848b74ff053556deca898c9cfe3e35d53e46b6c89e3aee3cddbb3eae87645569a740e8916fb8b4a607aec375fd26a00df65671bffe8ca28fc8e6fc76045c5f57a62f48c0552be9d89a06243e5f9efe1654c64bd46c5e4512b7b588816fa0628a", 0x64}], 0x4}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000e80)="df4d1046d347023951a0ea109ed1ebe04c740431159c0289e4be1e83fae6a2a6d57909000fc761a665b9bfefc330656d753157005004d20237477dc661afb919f09f622d17160058e157e646339998371d67e6eb7942cfbbceb6c8a17ad2ec462d9bf3e198", 0x65}, {&(0x7f0000000f00)="e95fe89bf9c8a038ae2372b91184c7acb6dadb23539e7e280454e62581e328f4785e667512b493a7072795588dbcb7a9d706254ee469af38c51958122e77bc0385e6beed0e4b63a8b0c2ebb6e1674c674f4e165c8679d1f8ca7dae35798913486af60d0d90e117c51f1f1f61dde8d8f3cb972f5d2a49e0e16869646c15cc1424ce8d0a46931c13e5ea3c5ad2d256ec7b5138af9235b6e2b19e9b4ef460e17d8eae0fe9ddfcd4f70a8e0cce8cf8ab11dbe71b0694b5345c212b6ce3cd3bc19825", 0xc0}, {&(0x7f00000011c0)="ab03163d0a34fc9e754b025a8bdae7610714d00c177f72f72804858bf1a16cc271352cacf7c2202ede798b102a5f3624f5b7f920d7c2402f57d4fed4f604fd", 0x3f}], 0x3, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0xe8}}], 0x2, 0x80488c4) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0xa, 0x7, 0x619347a8, 0xfffffffffffffffc, 0x3]}, &(0x7f00000002c0)=0x78) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRESHEX], 0x0, 0x5a, 0x0, 0x1, 0x1, 0x10000, @value}, 0x28) 18.532101069s ago: executing program 0 (id=3043): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="7b2d911b6ada09376b7de50d8445da8ef69740479f52b81070a303f4b06c1e5dfb"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES64=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 10.687778348s ago: executing program 2 (id=2442): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0xc00, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 9.232396638s ago: executing program 4 (id=2308): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001800010010000000000000000a370000", @ANYRES32=0x0, @ANYBLOB="0000000014000500000100fe88000000000000000000000004000100"], 0x44}}, 0x0) r3 = socket(0x18, 0x80005, 0x6) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xc8, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0xa4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "49ed3bdca70faa86c10da66b0381183a870ed10f990eac5816991a"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "88c77568bb055ca92a89dddf2fdf74320453b3234edfd83cd387f19aac0ac8"}}]}, @TIPC_NLA_LINK={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000010) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="01050400000000003c0012800b00010067726574617000002c00028008000100", @ANYRES32=r1], 0x64}}, 0x0) 5.380310991s ago: executing program 3 (id=3090): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808ffb0a10000000000000000000001851000000600000018180000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000f8ffffff00000000000000009500005000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 5.346879218s ago: executing program 3 (id=3091): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x0, 0x60}}, 0x26}}, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2={0xff, 0x3}, 0x0, 0x0, 0xfffffffe, 0xffffffff}}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x2, 0x8d6c, 0x4, 0x81, 0x5}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r3, 0x56, 0x20}, 0xc) socket$rds(0x15, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003280)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in6={0xa, 0x4e23, 0x3, @private1, 0x4}], 0x58) 4.999641168s ago: executing program 3 (id=3092): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000580)=""/84, 0x54}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000001800)=""/35, 0x23}, {&(0x7f0000006080)=""/4096, 0x1000}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x8, 0x20, 0x0) 4.895235655s ago: executing program 0 (id=3043): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="7b2d911b6ada09376b7de50d8445da8ef69740479f52b81070a303f4b06c1e5dfb"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYRESOCT=r1, @ANYRES8=r0, @ANYRES64=r0], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x14, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000000)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 4.569384919s ago: executing program 3 (id=3095): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000080)={0x3c, r2, 0xa72704fd2dfb5147, 0xf0bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f00000000c0)=0x7) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000140), 0xfffffdef) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000140)={0x3, @bcast}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000140)) listen(r5, 0xfff) accept$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000073c0)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x4e23, 0x81, 0x4e22, 0xac16, 0x0, 0xc0, 0xe0, 0x3a, 0x0, r6}, {0x1200, 0x2, 0xd961, 0x6, 0x7, 0x8, 0x407, 0xffffffffffff8001}, {0x4, 0x6, 0xfffffffffffffff9, 0x5}, 0x5, 0x6e6bb4, 0x1, 0x1, 0x34cafd5c6e8e44f4, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, 0x4d5, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x34ff, 0x3, 0x1, 0xe, 0x3, 0x8001, 0x40}}, 0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000001240)={0x1268, 0x4, 0x4, 0x301, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x7}, [@typed={0xc, 0xa8, 0x0, 0x0, @u64=0x40}, @typed={0x8, 0xe8, 0x0, 0x0, @fd=r1}, @nested={0x123d, 0x80, 0x0, 0x1, [@generic="a79f0184094882058e6a7d5a9c6c1dff67a2d17756f733abb61cbc37a8293bc14d5d994afe6e773e145122d73d6621ba3274e30e86a24b90c62be41bf2920b2ed1f5be910464adaf5edce63d652319e4879dae45035003fae2d4524f30f6ddb6d41f614ab80b51b35c4f4930cf3bfddb68742fd5e9b559", @typed={0x8, 0xbf, 0x0, 0x0, @uid}, @typed={0x8, 0x30, 0x0, 0x0, @uid=r6}, @nested={0x4, 0xfe}, @generic="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", @generic="0ced60a006f4dae22efc2148c19bb832f172a151bd22bbe1cd59f2be8a9856b5b82254b9fa2d25d49d51cf613b7b344ece36906d0c7416c4a7681c6fc4224f478685e3c09d91bfa807fe27c7abfe12eac9e8a7bfe00effbb3bf7d4a2632d620622dcee74b00e2f61428f77c2bfa3c8aa074390d0be35ad758dc221f884c9df3cd68b893c06ab486b98feef2422ddaf727b6375e32002b46c772039e34a89852746db87cdaa3534cfb99ebe8aa252876cf3f2c952d385ff64a4eb3b22649fcd8b2b71e1ca1e", @generic="6ea965e771771d5adbecd4391485ce89119f889764435be97f3a9c22d76c964e5a231e92cd3809e6253c1144ae88b552564db3ac0ba698c1728db746241155452002da23c93d830ba81da6c35528a06827526e826caabf495d120ce56af2eed22f9e11362e3d51f6c84811ea8a8ad7c6ad9860a0c5fd24e4fbf1da7696442b2f5216bc906fa42a87ad7295f44c0a5e821a5e120956522a10d07fc14ae00988bff2e733cc0d89ff874fd1bbab3aedcc129431a872698633130551795f9e10139a9f", @generic="21d62b0a3cdbd59b629a9299789437c698b46a6caaaebad5a217bd7d1b703827d80f2eb01522c050"]}]}, 0x1268}, 0x1, 0x0, 0x0, 0x40010}, 0x10) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000004) 1.88133276s ago: executing program 3 (id=3102): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r4, @ANYRES32], 0x1c}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x10, 0x3, 0x6) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x3, [0x4, 0x9, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30}, 0x9c) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r9, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r9, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000fbdbdf25090002007379913100000000080041007278650014003300766c616e3000"/56], 0x38}, 0x1, 0x0, 0x0, 0x4040024}, 0x8000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e22}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x44}}, 0x40010) 1.540193011s ago: executing program 3 (id=3104): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x0, 0x8c}, 0x20) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8=r1], 0x4c}, 0x1, 0x0, 0x0, 0x20000081}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.107180343s ago: executing program 1 (id=3106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x13, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x10}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0xf8ff, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 957.322384ms ago: executing program 1 (id=3107): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000240)={r2}, &(0x7f0000000040)=0x8) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000100000300", @ANYRES32=0x0, @ANYBLOB="000000000000000000922388091501007663616e0000010004002d800800406b54bb11892952aaaf891cc2fb7d8cf5b545f1c1c23e0615"], 0x3c}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x40000}, 0xc) bpf$ENABLE_STATS(0x20, &(0x7f0000000180), 0x4) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000080)={@any, 0x3}) 796.112661ms ago: executing program 1 (id=3108): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ff7f01ffef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x600000000000000, 0x0, 0x4100}, 0x0) 433.462412ms ago: executing program 1 (id=3109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='1'], 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0xfc, r1, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x4f}}}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x2b}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x34, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x90}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x5}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x584}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4a}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6f}]}, @NL80211_ATTR_CQM={0x4}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xdc6b}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xe}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5b}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x18}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x6}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2b580}]}, @NL80211_ATTR_CQM={0x28, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x5, 0x3, 0x8]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5f8}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x4000040) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a", 0xa}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000008000000"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r3}, &(0x7f0000000040), 0x0}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) 302.303062ms ago: executing program 1 (id=3110): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a88a8ff", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080081000000060027"], 0x44}}, 0x0) 0s ago: executing program 1 (id=3111): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xa4}}, 0x200000d4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5c1, 0x2, 0x1, 0x8, 0x9, 0x8}, &(0x7f0000000040)=0x20) bind$alg(r5, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r7, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r7) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0x434}, 0x1, 0x0, 0x0, 0x10}, 0x40000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'caif0\x00'}}, 0x1e) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002, 0xf94}, 0x1c) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) r10 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r10, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff}, 0x2}, 0x18) sendto$inet6(r9, &(0x7f0000000440)="55ec4e47b3d71e5f70a0d949457b12b43790c7bc562af0299355d1f119b8eac9805adc56d2dde704f1e259079fa8ad1f3a3d0d1823898833a0c1ae7df0e449c837ebf5ef41cf9fa441c07b84b8926a87a77e02151c589f10bd93ba6b282040a68a45c5ac10473297ef60a6630ad97c2470560acf2da906ced9ab15aa328f8f6c1ec0e2e800a3d9dea032699366701bea51be5e0207bac094ae7b78f04415faa4a7b33d987107272f752e9da3a86b15ec7fc0e1db4eff7ef54ded4aadef8716cb9047ce744e64e63e2d0d9005376df9730b146f504da641509e2b0b49c31996fd30fde72cf730e3aa8b0d328ca13ea6892501c742", 0xf4, 0x40440d0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_FIOGETOWN(r7, 0x8903, &(0x7f0000000240)=0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000680)={0x270, 0x36, 0x200, 0x70bd25, 0x25dfdbfb, "", [@generic="1eac3338b99f42f4828e8108eaf4fd68f24df1c6a30f0908e14793db38da459c1cb123610226efc6a84f2ab754f173914a", @typed={0x8, 0x140, 0x0, 0x0, @pid=r11}, @nested={0x10e, 0x151, 0x0, 0x1, [@generic="3e4e7f82136a34398fa1e85d3f56717289b8ed2c3422f2c1fa4979ef76a92c08c0a74d5fe78dd6e7aa8343d8a5167ed1fd7db12d6b0a0a12ad7128ed5a213203bd2acb55dad62e418229b85f3462f61c072396d5b1d69818eea86cd53755bf6b82c089a5", @generic="f47face18336b9956263e7419e11f7397974e787133993b3e0ad2ee9517b83493ec233f2c53911036b9e1fd64e4b715d337ebe558fd88fe36a27981346786da819d5dff57181b82225212862de8d014eba153428d7d0563d2574fa2c690a41765c581e231f52481146dc33ab00279bc74a7855b9fb4bc7ccb1ede2cc47c0a41b442374ebe0d7c5b686afcda7ab79c103664871c27271cbf7587fca22b7c3", @typed={0x8, 0x135, 0x0, 0x0, @u32=0x1a82}]}, @typed={0xd, 0x8f, 0x0, 0x0, @str='!],$[\'&e\x00'}, @typed={0xed, 0xe2, 0x0, 0x0, @binary="1106844ed7154c74c77934847219885fe0f6f29e07b868cba86f9a17fb7acbed7b701a27cb8f228ef3ee90641e4c622eeb0041d5e624f23671b935a33dabf4dab5bda21cc1db6d4faea4f03a4e9bc7931b7eb28f11d859b08067ccc09d334a6cd85eed3914a24c9cec85ee10163dfd90a5b14f2dac398a4f705bc562d2bb89a7675f959b92276e2528b260c39a02399096d5546c8124eeabe7f95247cfad123b269bc0bce06585c38ff66c1bb2ee08e363b9e78746ed6d4391e7505bb76fd9be4449466d32c1cb21d2843f5df6d904cef8ab91ed3ccc5a924689c1c942ac109d5494658379f7946816"}, @nested={0x14, 0x47, 0x0, 0x1, [@generic="cfd237d03c19ada9877996cf58ecc093"]}]}, 0x270}, {&(0x7f0000006b00)={0x44fc, 0x2c, 0xc38, 0x70bd26, 0x25dfdbfc, "", [@typed={0x8, 0x41, 0x0, 0x0, @u32=0x7c7a}, @nested={0xfa, 0x69, 0x0, 0x1, [@nested={0x4, 0xfa}, @generic="98e8931aa341411b98667247cfd35ff48cf2ed3fa37203c457e3d99b656e69559549e7161671ade75ca526fcab06a42eb6aba3b7f3812229a54fe2205e917c63bfae07344d0d9f986eebdd9c6a112d048b1cc514473c2759c610282c0eadff333e75af777337287af1a75fb03fea4aaa2c569115d793a40a9c42bc150a78c18a3761ad431d13d88c8b09a5b5bff5886a7791547af940771743fa42aee5a4010744b8871c2d4b84cbabb8cff98eb05a701276629a4b37a88f79bb9910162b513582b58ec9caf6e1f8fc968a944d0b18f3e7731e32c352f5957a536e7d6e38f81411bc38f5a3eb9c4ac209383cda47", @nested={0x4, 0x148}]}, @typed={0x8, 0x94, 0x0, 0x0, @pid=r11}, @nested={0x20e1, 0x11, 0x0, 0x1, [@nested={0x4, 0xe4}, @typed={0xc, 0x53, 0x0, 0x0, @u64=0x5}, @typed={0x8, 0xae, 0x0, 0x0, @fd}, @typed={0x8, 0x11f, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x20}, @generic="c9fe9f97ac831e28e2e3b5b6145ec8d908d7e69960dbdab44261e9cf811fff99d8b603827a9e5de3126a27469f5c4bf44112c9e0a2cef8a6bb94bea3594251fed841e73dd25f679fb1b287a3e84a4db1ea49e84f1e090a09afa8fd5da9050200b32ff4de7e325043fe4621b380e69a062e865d320dfebdda90c89608b6039ce8ac5b4392252d66b76c1b26f5b28ee46aa9f9890a72398553e6a00e1b6e4f852390a157c9103b8a971f98f3f2f80bbfabb047ecd47a0bcac5cf", @generic="8e91e482ce0d89466bac611505b989de2a2712a3a2c94137bec89f1cf87e6288d705afefa8a2cb3336f6ad2805a453a8da60376887a6ec83432a5e985ddf0821b902c4e51466ebc306928bf9c6d2edf9ef43d242f86c71a35c0367f8c448511f0baaa8aff01e489480bc8000b1ee688efe37cba251cc3826ac20ee3f0470fca4aa5e0b52298f1f687910bad54326a5eca7e45f1713207e0f96986f8fccc05f87d627c0fc295d8011c90fb16ab9ee934708d55c94158ac299e91a740d5808bee33eb84747494c9936be9907638f50be1f722e94f062a59bbaaa6927a96551bf28fdf7476b87d6450ed61df1544d7451688c81c6e8bddbd9005889f624a836c345277bc04d757b3ecdcc77a155591c81dc8a750503b492607fdce500cf9274f282f33ce44a9946b5dd8180d1d759d2c55188f3330efcebae9d5b3c527c91fdb5c583673e54a8315a06647d6b2eb521bf7748c2c27808519820f3b28e10b771d0ab5924a5ab552a47566055fe877c54887645035bb271738467e5595373c2752d89b1de7d891e62703ab0a386da55703b6580fb57cefcab79198d008fbcefdd215ccbfc9e2816b3b72a93b5c05273827674e69f01c8d410f6e1eca4c4f4cca2be1466076f344a190d3d3746fe8778804e5d4089ac895a122d3b04b740c3f74ef31761c42c6d324ae36d191108d95bedf5a8734aa831b46f256318e027a0fd4ad1fa6e8e817917b1ba5732a9ccf46ac9ea442bc281efd4d2ae4ccc8a51321def2437df265db15ef82485ac429d6cebb96aa411d7a78d442351271707d4b77867ee34a10d16c4b054b5bfd8e6d3721485efadd14213ee9c9505d4112f423aa379b84e092d449185919803cd54c894c94150fbd26bc848759661051e0072f706dedd607bf5f204543da6bb5e93825918151d07eae946042f0ae5b3650e3be4ba5e92f56744e06b35e86e80ab18f9568edcd6119f9d3f96958856142efaad859ac5a1811e8e4ef1e71ca4779d6ca475e23430bc4c31a9c001833fba5d268602f87424f9bb4bdbd5187a7ba64cbf8c83e99d3a9bfcc1db408db059790689a1d599bb74cbcf3347d28f3580ef73c94be08f9092dad0ca229704da4aa371a7b725fd28ac28fc730acb3b6d086de5d4ede183db0e97657417c057fab2ceeed4ec02beaae1679b58432e6489322745085c222cc9d07ab567f5d49f89540e49ce0a7ca8d8cb17299190886ada62d24bb3849b57245543c30e30f923e51174e9cd245a09bcc34338b7b5628e2b74e386f0d8cbc9cc306554af03eff003db02f7b00f1356cedba16f283def3589104a30d03cf0057ad5dab829bde9bccd0861333a28b1c85f882f35444994c1dcdeb7692d822ad9233be7857a40c0656c8489d1f1e067ea0fbee29ac9bac72371bdef5de400db7333d9a4f5131ad881929308a6dc7b7b610bf905989ae9f2f445dbed2fc7db15570f305a6bd1fc1be286166c9337bd17834da5f8e13fff6db0111882ea6f2e2fa54b85edb1a8fc64de69a90d242697e42f76f3705b92e2490a3a68cce0f7ad48f0b35355b2448af89d8aed4a086ca9596cfec33e0836e00d855ae087b815c37445921cf6daaa80645b18262e5c9de6a28a7b5c356a21c08ff1486bbdb786390f147361d51bdf45fa86df538beb5ba75133b700d1736b73b443a5c2b3e8cb222499467bace48316d9853b5e2279720be069bec8df08fdba437a55d0d5b6fbcef2f3185b5b9afe8dbf2a23e2fdb8dc248909b683b6dc777e95fe0c27e21c534af97c0817a8cbe1cee9d2092423fd99c8ba39052941e9d67f4fc0ef123f20a0320958371c98a3d7317f7a4a5909e8dc4c76daf9914ee8bac2e43887feb4d838ac9f4bb409f12a8a0000f0efcc75a8707226a4c94441388d7e14de590ff5ccb0aa81816912ef3137d26ff963b46f5582cc4603647f2389f917192e1e7a6014534d38eafed894092bcde5e7d0fd522e6f3bc09df2bb196ae576bcd164850c03497e697d9812c1aa81e1178aa4175991a389f8baf5dbfd2d5e0da983b8069894477dd41b0432b538693f133d98b30b82f347cbfd645ea53e740c80b4e70da9d5fd0d6205bf018bee38f6de298cc9baa2da56d7afb75b931250611bea9f0769ed90a8ee55391cd865e0666e99d90e1f922c67a1c758aa87d008d10473e25355f43a8ace350fdfe16ba6bf3c1cc85146794951fa68e06752dded6bf25b5802c3376b07259915e116c8297b2850bc10cfa6b99f97af0a96a4bbe5522471aedf2a5aa94ce55a7e6e39555365ffa77262b6d2482c0b8c7b6faa891a29c7b5d451e3363198245633bfeaf48615f9a0458b0d97d26ad1868ff7b9d308997ef6ff52e7c15c9fe00c23e06cc1664954257b72a9329a2eaedf71086e548ccaeb52f270f7513feb79ab0d4b8d41b757ab3470030f053da0ead2df433bec1976c46d1e1f6b2146678d5e195b384fbfd86899da166947bb9f98de61f56cadaec8e826944a8140dcea6a4b108c7673574ae7fb3d2af2c595e2dca6560a9043d894aa145c8df7eab55101e843048e0be7e2563fd105cdc7ff1bf38cfdefe8de26e93a91ed9e0841483c4413c33b01516aac96153e55ba9f5bf410dc1dccbd8e46bf7934779e2d22f1b21ca0c7b2618589cf242d96d1ddc3236486ea84c0580fd4a225efbab1825605518443a9141281bb9aa4110ede39c082a7721de882a8a5b76a4d809efa64464472b6858f812144d4098a6dc375fb57348344aa516418f9407b28ae35713f59dd1cb017f1603aa627fcc34f0662c67a1e86efde2b31d48659d185c9aed1176253768ae9ab734c66bafe5e956a704ddb5d0605801932c61ec57baacc1ee719b3c5241d31f123a0ed8ec6528c3deedc24cad4a460260db9d58001ce9f01d6be394369fde0d80c43f982ebd242c86810ea32814e6546e842021768963e4d7bdacad56220b38e88dd20d50412c65aa841e29820ebfb6e574d52b28697351ca8424b484a4a49f9f5329ef5b558534396315a899279744a4f826a578d420781ebc5174df19996ca652bfecf10bfee41002bcca8ffba64aafcf200edadf5fc14d115a4c7a84088fefe4ad220dfba09916ea01de6db21c01c333c0796f87a384dedcfa4a419dec2198bba6c5f40239b10eb438785e8a82b869cea55d0eeb198a0ea98f71242dc239e16255a9b5272cb55bc69e9cd24fc1ae06446550038f55ee85132aa7b3e13286086f42c671aa1253ec71ab4e173048e395f772cb87a1845fd353f1b104380b2abb34f712c2c353fa210dcfcd92e3cdc2413f85d704758f16134895652bfdf68c17f3802db7f017154b7c2966a6e4081a8fb368ce9bd2aa710dbe91ecd026bfc87e5caa59d9981d5600e6dd72d24f0a15489380b339fcab4e13a81e7ab8a7bbc79d85a6a4cadcd140c4eb3c533417e9685b24451e809a1ad8d49427309ec137e9fab4d5cac84c33452cf717199d8855e55bc8d91919a1332a8bf9091cf027ce9727eb9c5d6bb25110a2ab1f2092a046282719b8e0e852fdd4d934248d80a2b523f991da5ef7400bf76daab1b9e855fc4a546bbddc5e9d310c5b902ad5b83a98c9b02a91a5e8aa6b9d3e3a9662ebfe8658d797f35a890c8d7977d21f7d0918bf6ef74069e297cc91fa7c4b05da1ff22ace4803aa843b2f6e310ba732f726417e74f707ab35ccedcc361af0fe75d573ff99a889dfe7d854c1f596e6a88bb889f32a449e8c4523b4a6795ec00b3f37263920941ba4ba66b3883ac1f48b0412b05c9ad9783bbf706e2921cf125b368faf0c1a5bcdb71d2e3eb1a8fe719892853f40d1f63d31955facffc55ce2cda94f5e881d5edfeffe344b9e0dc951bb9bce4217f54875a8247e9ed56c8d91a1a244977c638f5e8105318c2a6fcd042fee4a2c0cfc8ad706a9ece7370dd785fea48936ed64e31990b53e47114918c7f73c4df0e5ec3ef18dcbc80f2657f65d6e9897d44c5c0d7094012d9c3f3a7a3884d800c8102f047e5df75cb2bd8c2da05a7e079bc1292dac9d68cda146a0a40bcc3a07e22c0c309dbd5fbb57d4ba07aa340536f7ef84c96c67beb522cc41494598a25707fa07f8fb505181fab8ae773234bfcc017d9921b75a03e6b80489dd50710f773250f4559b3e777dbabdb94881b22df7d0729dda6f5f3024ff743c6a64777734862b241ddbeb6f1d35540d1517d84f769d59d0855efbcd780a2e0d83eecf9dcfff170669f929b9964191aee496d49deac8575098d928e22119ece914ac0c5a5a005f09f935f35be202ccef5af957540623945820cff58743f7b00ba1fec69d75b110e829b8e468f1619c3e403fe184b4a3e631a5081aa76d0b29a2510f7a5ec0566b744799ce0fb38eacd1d58969277856f04738bd5f364a5a9796b0522ddb10cccfcabb07fb84a8c9a8b44b55b5a48ff42c8077fe7a1becfc64204a227ffc4fdfc19fbf5b12405920b00a8befb874a0dd50c19ffc45d95e1f64208096bf4dc87b6074d98ba9e1c088a280c4d33a90f192009907f01f69a6ebfbc9507b78e86f6645799575951c2df1358f2d68ea4cfb341fd3bdedb3c3c3df3aeaf3bda390c969b7ae6f01a41f822e737ccd8f1df6c4092fbb121ea3807d2e7c53937faae74e376320d8c48899404a3bbbfb6fd29bf9661aaac7a043119aa3abcb50e38bdc8356f58a855265553443bd1cfe6f9805ebfdce6fb809b718a49f6f559ffbdbafc6cc992eb75d2c89464267b743f2a1cee63cc9fad2c8aeff8bedfe69e5f577a34385437b2e3f674c2d71587f1cbf06b7020e21a2e45bbd39dbba02c17c328203a575e06b7205ba321b13445a8db8cb17c08c3bcf10536c3fdc985b2a4310b7c94cb10c654fede3a29c1b9b91d0db14b6d999949e1166e467931739468c810d32732dae3136b55fdac17ba5f3639480bfd05efb1ed5fd345a3efa427ed4c61b3154e53c18cf0e4f35be8c8db21d287d6f9246f2d955c9159ac796a840cd4e9e953914fd75465086214b2ad7b4e5459d92c7b0c53d902804ad98b486a62072e71722249a2886a31f6056eea0c0e33922f269dd377ae9812fed5f524130fbbe0d680503043868e1b34d6a463e53ec6489b6781e2d21f7d03f4da3233b8c53504d0bcf4546b320c624810258dd49633d597dd6e7ed743b13c6ab33dd8d0a6de35c7c6822e64b6bd8b4be9b67f842f16dc746a79ba795639cad173d34c5a559f8178b7e3c007368ee532fce896a30a3ac3830103cf835229f242dfd23a25bf3feb63583a9645f961cfb9d213bcb74ac42359d36afae262fa0c14cc735abf025e380c08fa1feaa79e84d8d7aeef4ce5e8d4abc1ea5b6cc0514d7ad4522bd1e48dc7645daf2bbdc650fbae6237a177d2407df903749adf57565ba2d1d46e438305e2e0d091d2a6ab3254422aece43a41f0abfd24b41f848163a66e33f91c9a48e86c9fc6c217b968c9da0b20bc2df1ec019b4c17124be26470c72306be699c1c3975bc7eddb4f05f680798f87eeef36ec35fc4671e9f00e6373e7bf24be143e2cef19dcd4cc6272d6a068faeef0ea7b6a05f9487a3682ae4512f1694e0abd884ecd0d8e0330ba5ee29025f369a4fc09980bc70db84836d33c17eddf0dbce340362b5f8bc563b8267489db41af5592cf1afab5c833a54c58ab5346c74733fd47b73e45eb03170b203bd9d2ec501b9029a8e10b515cbb610efdd6282a15d61947ef1646877d1b1b06a9f8b773b8e0b48df96d935fef7f80dd4359674dfd5cb0a40e213a52bdd57ad4bac5308ba8b33a57ccb11e0e5bf42c0067e78", @generic="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"]}, @typed={0x4, 0xe5}, @nested={0x123e, 0x95, 0x0, 0x1, [@generic="8d98afdd4e426e59f3d82d18f3dfd258e61c89c0307b251dc0217b7deb50e7a99c5b17efe97a4f0a37fd632e084df2e438a58ae2745addd45ad4e1aac805af4b6d97f7df1bef670921094aa2f9fc9240eabe621615be37fa551cb3002aae7f7f29746d5bcf922f91db8e4807f8c29e49ecd3431452d7d6d8e73dea2c3052dbe890484295d91c47a0fb7a4b0a3ea8c67b8996c0fb6a75cdb455365c0cd4498c205590690da5fa47ed6bcf437b3c54720c4b", @nested={0x4, 0x47}, @typed={0x8, 0x2d, 0x0, 0x0, @fd=r5}, @nested={0x4, 0x38}, @typed={0x14, 0xec, 0x0, 0x0, @ipv6=@mcast1}, @generic="0430d6eeb912fcd9e5c192345a76c7e02d615ae93a326241009a7ca16abafd1447dc845cb12c94ffcdcc7c5cba2fc882e31099efee2dc5ac50d2f48f5f8be24b1c4306ae1db2003a396d04ce853a31bca7c9bc4c7711fc5fa4a3a57933277c6cc35ac7a7a30f63dcc86f0889b2c2ec187fd8c378458686213417e4c5136bede4911699c7c10cf8ad07b699ec1ec4c4365d584fd5883a1b", @generic="ad4fa46932140efcc8eb948687598a3042f68de9facbba2591ee49abca30e3e97488cfb43ca276cb375a383f53abe1d903cce567e7d1fcb1aba8e214dc5e1245e5709649d8fbcb0170266120cf13daeb8ac50bedc1f5dcd0e1b8335bf940fddc845936b7c193459ba744460bae5743d1565e0d26496a582b9bee1cfdfcda31d437073373b167a4a2209a5116b735441ffe1319499fb5fb359585e3b7e78bc6b76c49e5f1898c890f348b0dcabf2eff65c892e1d7f0123bd2bd9cb8abb67eea9ed6dcc818a06bea26fd60", @nested={0x4, 0x12d}, @generic="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"]}, @generic="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", @typed={0x14, 0x13b, 0x0, 0x0, @ipv6=@private2}, @typed={0x5, 0x88, 0x0, 0x0, @binary='\a'}, @generic="303b801097c5adac786c13a2cd301a34cbfe5057532d28db11b8ff0b289de06bc63465dbc7147f6cee82d4110c0bbc700684bb94da65b8f98dde6a2a64494f3752aa7932ff44c7669fe21c606ec1d08e269fb7ae718674b3fe294bc67224c437e94a3225b0bd377fc569353576cf7c2144ab58dd8ad9b59c6bd761b57dffbe6119cb2814597625a9fb05a12aff8a853a448950b4b51946e599c5574d"]}, 0x44fc}], 0x2}, 0x4000) kernel console output (not intermixed with test programs): ast mode [ 399.449685][ T53] bridge_slave_0: left promiscuous mode [ 399.460047][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.643862][T13279] netlink: 'syz.0.2570': attribute type 8 has an invalid length. [ 400.008953][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 400.020255][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 400.030866][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 400.040795][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 400.049897][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 400.163787][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.177396][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.187916][ T53] bond0 (unregistering): Released all slaves [ 400.208767][T13274] bond0: entered promiscuous mode [ 400.214391][T13274] bond_slave_0: entered promiscuous mode [ 400.220870][T13274] bond_slave_1: entered promiscuous mode [ 400.228785][T13274] batadv0: entered promiscuous mode [ 400.237767][T13274] team0: entered promiscuous mode [ 400.243026][T13274] team_slave_0: entered promiscuous mode [ 400.250528][T13274] team_slave_1: entered promiscuous mode [ 400.361829][T13270] bond0: left promiscuous mode [ 400.378491][T13270] bond_slave_0: left promiscuous mode [ 400.385280][T13270] bond_slave_1: left promiscuous mode [ 400.391994][T13270] batadv0: left promiscuous mode [ 400.397846][T13270] team0: left promiscuous mode [ 400.402852][T13270] team_slave_0: left promiscuous mode [ 400.410839][T13270] team_slave_1: left promiscuous mode [ 400.689489][T13299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2577'. [ 400.791353][ T53] hsr_slave_0: left promiscuous mode [ 400.802293][ T53] hsr_slave_1: left promiscuous mode [ 400.809803][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.823030][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.832626][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.840915][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.879662][ T53] veth1_macvtap: left promiscuous mode [ 400.885771][ T53] veth0_macvtap: left promiscuous mode [ 400.891561][ T53] veth1_vlan: left promiscuous mode [ 400.900941][ T53] veth0_vlan: left promiscuous mode [ 401.107273][ T5843] Bluetooth: hci1: command tx timeout [ 401.115140][T13316] Cannot find set identified by id 0 to match [ 401.461083][ T53] team0 (unregistering): Port device team_slave_1 removed [ 401.505758][ T53] team0 (unregistering): Port device team_slave_0 removed [ 402.074472][T13318] syzkaller0: entered promiscuous mode [ 402.080141][T13318] syzkaller0: entered allmulticast mode [ 402.143929][ T5843] Bluetooth: hci2: command tx timeout [ 402.271155][T13332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2585'. [ 403.186104][ T5843] Bluetooth: hci1: command tx timeout [ 403.772856][T13259] chnl_net:caif_netlink_parms(): no params data found [ 404.151909][T13288] chnl_net:caif_netlink_parms(): no params data found [ 404.167227][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.174811][T13259] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.182214][T13259] bridge_slave_0: entered allmulticast mode [ 404.190325][T13259] bridge_slave_0: entered promiscuous mode [ 404.198608][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.205981][T13259] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.213758][T13259] bridge_slave_1: entered allmulticast mode [ 404.221653][T13352] netlink: 532 bytes leftover after parsing attributes in process `syz.0.2590'. [ 404.221953][T13259] bridge_slave_1: entered promiscuous mode [ 404.235335][ T5843] Bluetooth: hci2: command tx timeout [ 404.345062][T13355] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.401125][T13259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.432034][T13355] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.449582][T13259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 404.464864][T13288] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.477057][T13288] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.486446][T13288] bridge_slave_0: entered allmulticast mode [ 404.494668][T13288] bridge_slave_0: entered promiscuous mode [ 404.505118][T13288] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.512389][T13288] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.520438][T13288] bridge_slave_1: entered allmulticast mode [ 404.528699][T13288] bridge_slave_1: entered promiscuous mode [ 404.557796][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.602431][T13355] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.638862][T13259] team0: Port device team_slave_0 added [ 404.655511][T13259] team0: Port device team_slave_1 added [ 404.685561][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.776825][T13288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 404.809572][T13355] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.957953][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.996047][T13288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.078386][T13259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.088956][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.099984][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 405.117267][T13259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.136325][T13376] netlink: 'syz.3.2598': attribute type 2 has an invalid length. [ 405.145698][T13376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2598'. [ 405.171609][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.237664][T13288] team0: Port device team_slave_0 added [ 405.256695][T13288] team0: Port device team_slave_1 added [ 405.265687][ T5843] Bluetooth: hci1: command tx timeout [ 405.313254][T13259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.326978][T13259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.355439][T13259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.407949][T13288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.419893][T13288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.449187][T13288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.473708][T13355] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.501048][T13288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.512826][T13288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.546218][T13288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.562336][T13389] FAULT_INJECTION: forcing a failure. [ 405.562336][T13389] name failslab, interval 1, probability 0, space 0, times 0 [ 405.592040][T13389] CPU: 1 UID: 0 PID: 13389 Comm: syz.3.2602 Not tainted 6.15.0-rc4-syzkaller-00995-g3e52667a9c32 #0 PREEMPT(full) [ 405.592071][T13389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 405.592083][T13389] Call Trace: [ 405.592091][T13389] [ 405.592099][T13389] dump_stack_lvl+0x189/0x250 [ 405.592136][T13389] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.592165][T13389] ? __pfx__printk+0x10/0x10 [ 405.592201][T13389] should_fail_ex+0x414/0x560 [ 405.592228][T13389] should_failslab+0xa8/0x100 [ 405.592257][T13389] __kmalloc_cache_noprof+0x70/0x3d0 [ 405.592283][T13389] ? sctp_add_bind_addr+0x8c/0x370 [ 405.592308][T13389] sctp_add_bind_addr+0x8c/0x370 [ 405.592333][T13389] sctp_copy_local_addr_list+0x30b/0x4e0 [ 405.592357][T13389] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 405.592377][T13389] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 405.592399][T13389] ? sctp_v6_is_any+0x64/0x80 [ 405.592423][T13389] ? sctp_copy_one_addr+0x93/0x360 [ 405.592447][T13389] sctp_bind_addr_copy+0xb3/0x3c0 [ 405.592475][T13389] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 405.592509][T13389] sctp_connect_new_asoc+0x2e0/0x690 [ 405.592538][T13389] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 405.592562][T13389] ? __local_bh_enable_ip+0x12d/0x1c0 [ 405.592601][T13389] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 405.592625][T13389] ? security_sctp_bind_connect+0x7e/0x2e0 [ 405.592658][T13389] sctp_sendmsg+0x155c/0x2810 [ 405.592695][T13389] ? __pfx_sctp_sendmsg+0x10/0x10 [ 405.592722][T13389] ? aa_sk_perm+0x81e/0x950 [ 405.592747][T13389] ? __pfx_aa_sk_perm+0x10/0x10 [ 405.592769][T13389] ? sock_rps_record_flow+0x19/0x410 [ 405.592804][T13389] ? inet_sendmsg+0x2f4/0x370 [ 405.592828][T13389] __sock_sendmsg+0x19c/0x270 [ 405.592852][T13389] ____sys_sendmsg+0x52d/0x830 [ 405.592885][T13389] ? __pfx_____sys_sendmsg+0x10/0x10 [ 405.592923][T13389] ? import_iovec+0x74/0xa0 [ 405.592955][T13389] ___sys_sendmsg+0x21f/0x2a0 [ 405.592983][T13389] ? __pfx____sys_sendmsg+0x10/0x10 [ 405.593047][T13389] ? __fget_files+0x2a/0x420 [ 405.593072][T13389] ? __fget_files+0x3a0/0x420 [ 405.593110][T13389] __sys_sendmmsg+0x227/0x430 [ 405.593143][T13389] ? __pfx___sys_sendmmsg+0x10/0x10 [ 405.593181][T13389] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 405.593221][T13389] ? ksys_write+0x1f0/0x250 [ 405.593256][T13389] __x64_sys_sendmmsg+0xa0/0xc0 [ 405.593287][T13389] do_syscall_64+0xf6/0x210 [ 405.593308][T13389] ? clear_bhb_loop+0x45/0xa0 [ 405.593333][T13389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.593352][T13389] RIP: 0033:0x7f22f138e969 [ 405.593370][T13389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.593387][T13389] RSP: 002b:00007f22f2116038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 405.593409][T13389] RAX: ffffffffffffffda RBX: 00007f22f15b5fa0 RCX: 00007f22f138e969 [ 405.593424][T13389] RDX: 0000000000000001 RSI: 0000200000006bc0 RDI: 0000000000000004 [ 405.593437][T13389] RBP: 00007f22f2116090 R08: 0000000000000000 R09: 0000000000000000 [ 405.593457][T13389] R10: 0000000004040001 R11: 0000000000000246 R12: 0000000000000002 [ 405.593470][T13389] R13: 0000000000000000 R14: 00007f22f15b5fa0 R15: 00007ffe0ca071e8 [ 405.593506][T13389] [ 405.960801][T13355] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.004696][T13259] hsr_slave_0: entered promiscuous mode [ 406.011340][T13259] hsr_slave_1: entered promiscuous mode [ 406.018397][T13259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.026881][T13259] Cannot create hsr debugfs directory [ 406.069708][T13394] syzkaller1: entered promiscuous mode [ 406.076133][T13397] netlink: 'syz.3.2605': attribute type 29 has an invalid length. [ 406.105114][T13355] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.136533][T13288] hsr_slave_0: entered promiscuous mode [ 406.142995][T13288] hsr_slave_1: entered promiscuous mode [ 406.149768][T13288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 406.158143][T13288] Cannot create hsr debugfs directory [ 406.165117][T13397] lo: left promiscuous mode [ 406.169997][T13397] erspan0: left allmulticast mode [ 406.192989][T13397] bridge_slave_0: left allmulticast mode [ 406.234649][T13397] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 406.249639][T13397] macsec3: left promiscuous mode [ 406.256054][T13397] macsec3: left allmulticast mode [ 406.280986][T13397] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.290098][T13397] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.298672][T13397] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.307304][T13397] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.315706][ T5843] Bluetooth: hci2: command tx timeout [ 406.399721][T13397] veth7: left promiscuous mode [ 406.428692][T13355] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.557878][T13413] netlink: 'syz.3.2610': attribute type 1 has an invalid length. [ 406.574508][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2611'. [ 406.583833][T13415] netlink: 'syz.0.2611': attribute type 2 has an invalid length. [ 406.591592][T13415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2611'. [ 406.655911][T13418] veth9: entered promiscuous mode [ 406.739675][T13423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2612'. [ 406.762584][T13423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2612'. [ 406.773150][T13423] netlink: 'syz.0.2612': attribute type 11 has an invalid length. [ 406.784119][T13423] netlink: 'syz.0.2612': attribute type 13 has an invalid length. [ 406.802752][T13413] 8021q: adding VLAN 0 to HW filter on device bond3 [ 406.810437][ T53] bridge_slave_1: left allmulticast mode [ 406.816731][ T53] bridge_slave_1: left promiscuous mode [ 406.823579][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.836565][ T53] bridge_slave_0: left allmulticast mode [ 406.842435][ T53] bridge_slave_0: left promiscuous mode [ 406.848463][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.180524][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.191800][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.203829][ T53] bond0 (unregistering): Released all slaves [ 407.230263][T13420] erspan0: entered allmulticast mode [ 407.240586][T13420] bond3: (slave erspan0): making interface the new active one [ 407.259429][T13420] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 407.347659][ T5843] Bluetooth: hci1: command tx timeout [ 407.606675][T13435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2617'. [ 407.647696][T13435] ipt_ECN: cannot use operation on non-tcp rule [ 407.661617][T13437] netlink: 'syz.0.2618': attribute type 8 has an invalid length. [ 407.781824][T13441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2620'. [ 407.863332][T13441] batadv1: entered promiscuous mode [ 407.874955][T13441] batadv1: entered allmulticast mode [ 407.910352][ T53] hsr_slave_0: left promiscuous mode [ 407.917848][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2622'. [ 407.932129][T13445] netlink: 'syz.0.2622': attribute type 2 has an invalid length. [ 407.932622][ T53] hsr_slave_1: left promiscuous mode [ 407.952616][T13445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2622'. [ 407.962694][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.972103][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.014639][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.053638][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.103339][ T53] veth1_macvtap: left promiscuous mode [ 408.124369][ T53] veth0_macvtap: left promiscuous mode [ 408.130107][ T53] veth1_vlan: left promiscuous mode [ 408.163949][ T53] veth0_vlan: left promiscuous mode [ 408.394298][ T5843] Bluetooth: hci2: command tx timeout [ 409.264672][ T53] team0 (unregistering): Port device team_slave_1 removed [ 409.332769][ T53] team0 (unregistering): Port device team_slave_0 removed [ 409.888130][T13473] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.928692][T13470] tipc: Enabled bearer , priority 10 [ 410.036988][T13473] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.130239][T13473] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.235585][T13473] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.368382][T13473] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.390542][T13491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2635'. [ 410.407344][T13473] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.430857][T13473] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.458914][T13473] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.577843][T13259] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 410.635214][T13259] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 410.657186][T13259] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 410.686746][T13259] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 410.942281][T13259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.977937][T13259] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.006394][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.013836][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.050348][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.057597][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.193133][T13515] erspan0: left allmulticast mode [ 411.291561][T13288] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.310722][T13288] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 411.337783][T13288] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 411.368147][T13288] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 411.578147][T13288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.616209][T13259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.632992][T13288] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.653581][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.660852][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.689107][ T6066] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.696345][ T6066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.780410][T13259] veth0_vlan: entered promiscuous mode [ 411.847839][T13259] veth1_vlan: entered promiscuous mode [ 411.940917][T13259] veth0_macvtap: entered promiscuous mode [ 412.000147][T13259] veth1_macvtap: entered promiscuous mode [ 412.062537][T13259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.087063][T13534] netlink: 'syz.1.2650': attribute type 11 has an invalid length. [ 412.115381][T13259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.143304][T13259] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.178802][T13259] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.200003][T13259] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.220338][T13259] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.412407][T13288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.573920][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.582159][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.632602][T13554] netlink: 'syz.0.2658': attribute type 1 has an invalid length. [ 412.703155][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.714688][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.736357][T13554] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 412.784665][T13563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2660'. [ 412.804379][T13563] ªªªªªª: renamed from lo [ 412.891597][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2661'. [ 413.355741][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 413.445130][T13588] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2665'. [ 413.572322][T13288] veth0_vlan: entered promiscuous mode [ 413.620888][T13288] veth1_vlan: entered promiscuous mode [ 413.688946][T13288] veth0_macvtap: entered promiscuous mode [ 413.754616][T13596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2668'. [ 413.755717][T13288] veth1_macvtap: entered promiscuous mode [ 413.870473][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2668'. [ 413.946034][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2672'. [ 413.984099][T13605] netlink: 'syz.1.2672': attribute type 2 has an invalid length. [ 414.003661][T13605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2672'. [ 414.143017][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.160881][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.172786][T13288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.221439][T13288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.273849][T13288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.298041][T13288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.316413][T13609] FAULT_INJECTION: forcing a failure. [ 414.316413][T13609] name failslab, interval 1, probability 0, space 0, times 0 [ 414.329837][T13611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2674'. [ 414.353901][T13609] CPU: 1 UID: 0 PID: 13609 Comm: syz.1.2673 Not tainted 6.15.0-rc4-syzkaller-00995-g3e52667a9c32 #0 PREEMPT(full) [ 414.353931][T13609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 414.353944][T13609] Call Trace: [ 414.353951][T13609] [ 414.353960][T13609] dump_stack_lvl+0x189/0x250 [ 414.353999][T13609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.354028][T13609] ? __pfx__printk+0x10/0x10 [ 414.354055][T13609] ? __pfx___might_resched+0x10/0x10 [ 414.354073][T13609] ? fs_reclaim_acquire+0x7d/0x100 [ 414.354108][T13609] should_fail_ex+0x414/0x560 [ 414.354133][T13609] should_failslab+0xa8/0x100 [ 414.354162][T13609] __kmalloc_cache_noprof+0x70/0x3d0 [ 414.354188][T13609] ? sctp_datamsg_from_user+0x88/0xef0 [ 414.354224][T13609] sctp_datamsg_from_user+0x88/0xef0 [ 414.354255][T13609] ? __sk_mem_raise_allocated+0xb14/0x1300 [ 414.354297][T13609] ? sctp_primitive_ASSOCIATE+0x95/0xc0 [ 414.354328][T13609] sctp_sendmsg_to_asoc+0x1003/0x1810 [ 414.354351][T13609] ? __asan_memcpy+0x40/0x70 [ 414.354379][T13609] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 414.354422][T13609] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 414.354447][T13609] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 414.354479][T13609] ? __local_bh_enable_ip+0x12d/0x1c0 [ 414.354519][T13609] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 414.354544][T13609] ? security_sctp_bind_connect+0x7e/0x2e0 [ 414.354578][T13609] sctp_sendmsg+0x1941/0x2810 [ 414.354616][T13609] ? __pfx_sctp_sendmsg+0x10/0x10 [ 414.354644][T13609] ? aa_sk_perm+0x81e/0x950 [ 414.354670][T13609] ? __pfx_aa_sk_perm+0x10/0x10 [ 414.354693][T13609] ? sock_rps_record_flow+0x19/0x410 [ 414.354727][T13609] ? inet_sendmsg+0x2f4/0x370 [ 414.354751][T13609] __sock_sendmsg+0x19c/0x270 [ 414.354774][T13609] ____sys_sendmsg+0x52d/0x830 [ 414.354808][T13609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 414.354845][T13609] ? import_iovec+0x74/0xa0 [ 414.354877][T13609] ___sys_sendmsg+0x21f/0x2a0 [ 414.354906][T13609] ? __pfx____sys_sendmsg+0x10/0x10 [ 414.354975][T13609] ? __fget_files+0x2a/0x420 [ 414.355000][T13609] ? __fget_files+0x3a0/0x420 [ 414.355038][T13609] __sys_sendmmsg+0x227/0x430 [ 414.355072][T13609] ? __pfx___sys_sendmmsg+0x10/0x10 [ 414.355110][T13609] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 414.355150][T13609] ? ksys_write+0x1f0/0x250 [ 414.355171][T13609] ? rcu_is_watching+0x15/0xb0 [ 414.355213][T13609] __x64_sys_sendmmsg+0xa0/0xc0 [ 414.355243][T13609] do_syscall_64+0xf6/0x210 [ 414.355264][T13609] ? clear_bhb_loop+0x45/0xa0 [ 414.355289][T13609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.355307][T13609] RIP: 0033:0x7f5c15b8e969 [ 414.355325][T13609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.355341][T13609] RSP: 002b:00007f5c139f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 414.355363][T13609] RAX: ffffffffffffffda RBX: 00007f5c15db5fa0 RCX: 00007f5c15b8e969 [ 414.355378][T13609] RDX: 0000000000000001 RSI: 0000200000006bc0 RDI: 0000000000000004 [ 414.355390][T13609] RBP: 00007f5c139f6090 R08: 0000000000000000 R09: 0000000000000000 [ 414.355402][T13609] R10: 0000000004040001 R11: 0000000000000246 R12: 0000000000000002 [ 414.355415][T13609] R13: 0000000000000000 R14: 00007f5c15db5fa0 R15: 00007ffd6f3b8d48 [ 414.355447][T13609] [ 414.700669][T13613] bond0: (slave wlan1): Releasing backup interface [ 414.718532][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 414.728911][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 414.737734][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 414.752216][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 414.767744][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 414.804213][T13613] bond1: (slave ip6gretap1): Releasing backup interface [ 414.849332][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2676'. [ 414.859140][T13611] macvlan5: entered promiscuous mode [ 414.870886][T13611] bond0: entered promiscuous mode [ 414.878324][T13611] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 414.929999][T13288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.960337][T13288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.975108][T13288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.979939][T13628] x_tables: duplicate underflow at hook 1 [ 414.984002][T13288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.137595][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.200743][T13633] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.213878][T13633] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.222189][T13633] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.236182][T13633] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.248519][T13633] geneve2: entered promiscuous mode [ 415.255387][T13633] geneve2: entered allmulticast mode [ 415.307748][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.421614][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.427633][T13647] netlink: 'syz.1.2684': attribute type 2 has an invalid length. [ 415.551438][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.581664][T13652] gre0: entered promiscuous mode [ 415.616453][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.633710][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.822444][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.831872][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.947976][T13665] FAULT_INJECTION: forcing a failure. [ 415.947976][T13665] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 415.961974][ T13] bridge_slave_1: left allmulticast mode [ 415.967890][ T13] bridge_slave_1: left promiscuous mode [ 415.978317][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.017927][T13665] CPU: 1 UID: 0 PID: 13665 Comm: syz.0.2688 Not tainted 6.15.0-rc4-syzkaller-00995-g3e52667a9c32 #0 PREEMPT(full) [ 416.017960][T13665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 416.017972][T13665] Call Trace: [ 416.017981][T13665] [ 416.017991][T13665] dump_stack_lvl+0x189/0x250 [ 416.018029][T13665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.018059][T13665] ? __pfx__printk+0x10/0x10 [ 416.018083][T13665] ? fs_reclaim_acquire+0x7d/0x100 [ 416.018123][T13665] should_fail_ex+0x414/0x560 [ 416.018149][T13665] prepare_alloc_pages+0x213/0x610 [ 416.018189][T13665] __alloc_frozen_pages_noprof+0x123/0x370 [ 416.018226][T13665] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 416.018256][T13665] ? __lock_acquire+0xaac/0xd20 [ 416.018294][T13665] ? policy_nodemask+0x27c/0x720 [ 416.018326][T13665] alloc_pages_mpol+0x232/0x4a0 [ 416.018359][T13665] vma_alloc_folio_noprof+0xe4/0x200 [ 416.018390][T13665] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 416.018438][T13665] folio_prealloc+0x30/0x180 [ 416.018467][T13665] do_wp_page+0x123a/0x5760 [ 416.018516][T13665] ? __pfx_do_wp_page+0x10/0x10 [ 416.018536][T13665] ? do_raw_spin_lock+0x121/0x290 [ 416.018562][T13665] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 416.018598][T13665] __handle_mm_fault+0x1028/0x5380 [ 416.018645][T13665] ? __pfx___handle_mm_fault+0x10/0x10 [ 416.018686][T13665] ? follow_page_pte+0xdee/0x13c0 [ 416.018722][T13665] handle_mm_fault+0x3f6/0x8c0 [ 416.018759][T13665] __get_user_pages+0x16f0/0x2a40 [ 416.018820][T13665] ? __pfx___get_user_pages+0x10/0x10 [ 416.018843][T13665] ? __gup_longterm_locked+0xbf7/0x15b0 [ 416.018867][T13665] ? down_read_killable+0x1d1/0x350 [ 416.018894][T13665] __gup_longterm_locked+0xd66/0x15b0 [ 416.018934][T13665] ? sanity_check_pinned_pages+0x11a2/0x1290 [ 416.018964][T13665] ? gup_fast_fallback+0x1672/0x1d60 [ 416.018992][T13665] gup_fast_fallback+0x1843/0x1d60 [ 416.019014][T13665] ? arch_stack_walk+0xfc/0x150 [ 416.019076][T13665] ? __pfx_gup_fast_fallback+0x10/0x10 [ 416.019097][T13665] ? __kasan_kmalloc+0x93/0xb0 [ 416.019119][T13665] ? sock_kmalloc+0xd6/0x160 [ 416.019145][T13665] ? af_alg_get_rsgl+0x236/0x810 [ 416.019174][T13665] ? skcipher_recvmsg+0x3c0/0x11c0 [ 416.019194][T13665] ? ____sys_recvmsg+0x1c9/0x460 [ 416.019218][T13665] ? ___sys_recvmsg+0x1b5/0x510 [ 416.019243][T13665] ? __x64_sys_recvmsg+0x198/0x260 [ 416.019275][T13665] ? pin_user_pages_fast+0x4d/0xb0 [ 416.019302][T13665] iov_iter_extract_pages+0x35a/0x5e0 [ 416.019341][T13665] extract_iter_to_sg+0xdeb/0x2480 [ 416.019383][T13665] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 416.019421][T13665] ? rcu_is_watching+0x15/0xb0 [ 416.019452][T13665] ? trace_kmalloc+0x1f/0xd0 [ 416.019473][T13665] ? __kmalloc_noprof+0x29b/0x4f0 [ 416.019505][T13665] ? __asan_memset+0x22/0x50 [ 416.019527][T13665] af_alg_get_rsgl+0x436/0x810 [ 416.019581][T13665] skcipher_recvmsg+0x3c0/0x11c0 [ 416.019607][T13665] ? aa_sk_perm+0x81e/0x950 [ 416.019640][T13665] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 416.019666][T13665] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 416.019687][T13665] ? security_socket_recvmsg+0x7e/0x2e0 [ 416.019714][T13665] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 416.019736][T13665] sock_recvmsg+0x229/0x270 [ 416.019761][T13665] ____sys_recvmsg+0x1c9/0x460 [ 416.019799][T13665] ? __pfx_____sys_recvmsg+0x10/0x10 [ 416.019846][T13665] ? import_iovec+0x74/0xa0 [ 416.019877][T13665] ___sys_recvmsg+0x1b5/0x510 [ 416.019911][T13665] ? __pfx____sys_recvmsg+0x10/0x10 [ 416.019969][T13665] ? __fget_files+0x3a0/0x420 [ 416.020009][T13665] __x64_sys_recvmsg+0x198/0x260 [ 416.020040][T13665] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 416.020088][T13665] ? do_syscall_64+0xba/0x210 [ 416.020112][T13665] do_syscall_64+0xf6/0x210 [ 416.020132][T13665] ? clear_bhb_loop+0x45/0xa0 [ 416.020157][T13665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.020176][T13665] RIP: 0033:0x7f2db9f8e969 [ 416.020195][T13665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.020212][T13665] RSP: 002b:00007f2dbaebb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 416.020233][T13665] RAX: ffffffffffffffda RBX: 00007f2dba1b5fa0 RCX: 00007f2db9f8e969 [ 416.020248][T13665] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 416.020260][T13665] RBP: 00007f2dbaebb090 R08: 0000000000000000 R09: 0000000000000000 [ 416.020272][T13665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 416.020283][T13665] R13: 0000000000000000 R14: 00007f2dba1b5fa0 R15: 00007ffd4d826548 [ 416.020316][T13665] [ 416.501348][ T13] bridge_slave_0: left allmulticast mode [ 416.523696][ T13] bridge_slave_0: left promiscuous mode [ 416.529618][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.776281][T13678] netlink: 'syz.1.2696': attribute type 2 has an invalid length. [ 416.872204][ T5839] Bluetooth: hci1: command tx timeout [ 417.155838][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.168132][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.182161][ T13] bond0 (unregistering): Released all slaves [ 417.332271][T13614] chnl_net:caif_netlink_parms(): no params data found [ 417.673134][ T13] hsr_slave_0: left promiscuous mode [ 417.679674][ T13] hsr_slave_1: left promiscuous mode [ 417.686715][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.694911][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.702972][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.710642][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.735764][ T13] veth1_macvtap: left promiscuous mode [ 417.741347][ T13] veth0_macvtap: left promiscuous mode [ 417.749792][ T13] veth1_vlan: left promiscuous mode [ 417.755698][ T13] veth0_vlan: left promiscuous mode [ 418.127534][T13705] __nla_validate_parse: 16 callbacks suppressed [ 418.127558][T13705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2705'. [ 418.586713][T13716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2709'. [ 418.597409][T13718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2710'. [ 418.606789][T13716] netlink: 'syz.0.2709': attribute type 2 has an invalid length. [ 418.614806][T13716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2709'. [ 418.656366][ T13] team0 (unregistering): Port device team_slave_1 removed [ 418.667265][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.677058][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.687250][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.694137][T13725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2711'. [ 418.704748][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.718127][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.770533][ T13] team0 (unregistering): Port device team_slave_0 removed [ 418.950998][ T5839] Bluetooth: hci1: command tx timeout [ 419.530333][T13614] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.550614][T13614] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.558463][T13614] bridge_slave_0: entered allmulticast mode [ 419.568154][T13614] bridge_slave_0: entered promiscuous mode [ 419.587781][T13614] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.602453][T13614] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.609811][T13614] bridge_slave_1: entered allmulticast mode [ 419.620526][T13614] bridge_slave_1: entered promiscuous mode [ 419.697841][T13614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.730536][T13614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.834746][T13614] team0: Port device team_slave_0 added [ 419.846225][T13614] team0: Port device team_slave_1 added [ 419.888402][T13739] tipc: Started in network mode [ 419.893322][T13739] tipc: Node identity ae20521149d6, cluster identity 4711 [ 419.901144][T13739] tipc: Enabled bearer , priority 0 [ 419.926522][T13614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.933611][T13614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.959937][T13614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.979909][T13739] syzkaller0: entered promiscuous mode [ 419.985595][T13739] syzkaller0: entered allmulticast mode [ 419.996161][T13739] tipc: Resetting bearer [ 420.003118][T13614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.010556][T13614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.039262][T13614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.148666][T13738] tipc: Resetting bearer [ 420.168333][T13738] tipc: Disabling bearer [ 420.203254][T13614] hsr_slave_0: entered promiscuous mode [ 420.208326][T13745] netlink: 'syz.3.2716': attribute type 15 has an invalid length. [ 420.213805][T13614] hsr_slave_1: entered promiscuous mode [ 420.223364][T13614] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.231109][T13614] Cannot create hsr debugfs directory [ 420.265774][T13745] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2716'. [ 420.601145][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.643066][T13755] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2719'. [ 420.783738][ T5839] Bluetooth: hci2: command tx timeout [ 420.959248][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.023772][ T5839] Bluetooth: hci1: command tx timeout [ 421.141827][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.239270][T13780] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.274181][T13787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2729'. [ 421.292059][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.346767][T13719] chnl_net:caif_netlink_parms(): no params data found [ 421.669464][T13719] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.684504][T13719] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.691816][T13719] bridge_slave_0: entered allmulticast mode [ 421.736985][T13719] bridge_slave_0: entered promiscuous mode [ 421.788567][T13719] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.797135][T13719] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.805131][T13719] bridge_slave_1: entered allmulticast mode [ 421.814282][T13719] bridge_slave_1: entered promiscuous mode [ 421.929890][T13800] macvlan1: entered promiscuous mode [ 421.937485][T13800] ipvlan0: entered promiscuous mode [ 421.945511][T13800] ipvlan0: left promiscuous mode [ 421.950921][T13800] macvlan1: left promiscuous mode [ 422.009953][T13719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.037615][ T13] bridge_slave_1: left allmulticast mode [ 422.050627][ T13] bridge_slave_1: left promiscuous mode [ 422.050962][T13803] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2734'. [ 422.056649][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.083719][ T13] bridge_slave_0: left allmulticast mode [ 422.089435][ T13] bridge_slave_0: left promiscuous mode [ 422.102732][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.578188][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.599016][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.615975][ T13] bond0 (unregistering): Released all slaves [ 422.646331][T13719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.865363][ T5839] Bluetooth: hci2: command tx timeout [ 422.884169][T13719] team0: Port device team_slave_0 added [ 422.906142][T13719] team0: Port device team_slave_1 added [ 423.092694][T13719] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.104133][ T5839] Bluetooth: hci1: command tx timeout [ 423.123316][T13719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.152546][T13719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.167124][T13719] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.180196][T13719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.213061][T13719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.269157][ T13] hsr_slave_0: left promiscuous mode [ 423.278632][ T13] hsr_slave_1: left promiscuous mode [ 423.287556][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.299475][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.310359][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.319303][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.349544][ T13] veth1_macvtap: left promiscuous mode [ 423.355390][ T13] veth0_macvtap: left promiscuous mode [ 423.361115][ T13] veth1_vlan: left promiscuous mode [ 423.367236][ T13] veth0_vlan: left promiscuous mode [ 423.866591][ T13] team0 (unregistering): Port device team_slave_1 removed [ 423.910323][ T13] team0 (unregistering): Port device team_slave_0 removed [ 424.468636][T13719] hsr_slave_0: entered promiscuous mode [ 424.476833][T13719] hsr_slave_1: entered promiscuous mode [ 424.483372][T13719] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.491138][T13719] Cannot create hsr debugfs directory [ 424.548516][T13614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 424.574899][T13614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 424.676989][T13614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 424.697062][T13614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 424.717944][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2748'. [ 424.780752][T13849] hsr_slave_1 (unregistering): left promiscuous mode [ 424.946989][ T5839] Bluetooth: hci2: command tx timeout [ 425.017701][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2751'. [ 425.027341][T13860] netlink: 'syz.1.2751': attribute type 9 has an invalid length. [ 425.357915][T13614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.442744][T13614] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.466306][T13873] netlink: 'syz.0.2754': attribute type 4 has an invalid length. [ 425.728310][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 425.797586][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 425.955544][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.962762][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.003868][T13881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2759'. [ 426.397360][T13886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2760'. [ 426.442066][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.449418][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.702363][T13719] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 426.745941][T13614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 426.765741][T13719] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 426.786222][T13719] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 426.839262][T13719] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 427.023912][ T5839] Bluetooth: hci2: command tx timeout [ 427.470340][T13614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.567466][T13719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.601701][T13928] team0: Port device gtp1 added [ 427.662659][T13719] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.768645][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.775897][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.882115][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.889385][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.927544][T13614] veth0_vlan: entered promiscuous mode [ 427.989557][T13614] veth1_vlan: entered promiscuous mode [ 428.096143][T13719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.320246][T13614] veth0_macvtap: entered promiscuous mode [ 428.354999][T13614] veth1_macvtap: entered promiscuous mode [ 428.443863][T13614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.452471][T13951] netlink: 'syz.0.2779': attribute type 5 has an invalid length. [ 428.530058][T13614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.586260][T13614] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.602498][T13614] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.626906][T13614] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.641390][T13614] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.705448][T13958] tun0: tun_chr_ioctl cmd 1074025677 [ 428.710947][T13958] tun0: linktype set to 5 [ 428.748924][T13958] tun0: tun_chr_ioctl cmd 1074025680 [ 428.871038][T13719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.966304][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.995687][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.014639][T13977] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2789'. [ 429.081141][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.107333][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.137144][T13982] netlink: 'syz.0.2790': attribute type 3 has an invalid length. [ 429.145857][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2790'. [ 429.162327][T13982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2790'. [ 429.172384][T13982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2790'. [ 429.481231][T13995] geneve1: entered promiscuous mode [ 429.627238][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.782810][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.865527][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.881804][T13719] veth0_vlan: entered promiscuous mode [ 429.898129][T13719] veth1_vlan: entered promiscuous mode [ 429.953018][T13719] veth0_macvtap: entered promiscuous mode [ 429.966678][T13719] veth1_macvtap: entered promiscuous mode [ 429.986736][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.997693][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.010145][T13719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.033424][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.059872][T13719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.071182][T13719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.083920][T13719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 430.102147][T13719] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.111666][T13719] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.121797][T13719] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.131203][T13719] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.218510][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.233443][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.286450][ T53] bridge_slave_1: left allmulticast mode [ 430.292258][ T53] bridge_slave_1: left promiscuous mode [ 430.298301][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.308729][ T53] bridge_slave_0: left allmulticast mode [ 430.315415][ T53] bridge_slave_0: left promiscuous mode [ 430.321474][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.845407][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 430.879165][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 430.887961][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 430.900593][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 430.916863][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 431.029550][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.041553][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.052096][ T53] bond0 (unregistering): Released all slaves [ 431.074249][ T1306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.089677][ T1306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.352863][T14030] openvswitch: netlink: Message has 513 unknown bytes. [ 431.404094][T14030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.709724][ T53] hsr_slave_0: left promiscuous mode [ 431.721733][ T53] hsr_slave_1: left promiscuous mode [ 431.735831][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.752596][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.771704][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.793729][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.823368][ T53] veth1_macvtap: left promiscuous mode [ 431.830841][ T53] veth0_macvtap: left promiscuous mode [ 431.836801][ T53] veth1_vlan: left promiscuous mode [ 431.842308][ T53] veth0_vlan: left promiscuous mode [ 432.300828][ T53] team0 (unregistering): Port device team_slave_1 removed [ 432.346338][ T53] team0 (unregistering): Port device team_slave_0 removed [ 432.747366][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 432.768171][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 432.781016][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 432.790739][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 432.798567][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.024063][ T5839] Bluetooth: hci1: command tx timeout [ 433.546003][T14024] chnl_net:caif_netlink_parms(): no params data found [ 433.803056][T14070] __nla_validate_parse: 3 callbacks suppressed [ 433.803077][T14070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2816'. [ 434.165245][T14078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2817'. [ 434.396992][T14081] xt_ecn: cannot match TCP bits for non-tcp packets [ 434.468685][T14024] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.482653][T14024] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.498204][T14024] bridge_slave_0: entered allmulticast mode [ 434.511676][T14024] bridge_slave_0: entered promiscuous mode [ 434.580735][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.665308][T14024] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.683190][T14024] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.691164][T14024] bridge_slave_1: entered allmulticast mode [ 434.711214][T14024] bridge_slave_1: entered promiscuous mode [ 434.758541][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.819844][T14050] chnl_net:caif_netlink_parms(): no params data found [ 434.863800][ T5839] Bluetooth: hci2: command tx timeout [ 434.901640][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.051880][T14024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.106689][ T5839] Bluetooth: hci1: command tx timeout [ 435.109695][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.159665][T14024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.511816][T14024] team0: Port device team_slave_0 added [ 435.538659][T14050] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.547223][T14050] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.559999][T14050] bridge_slave_0: entered allmulticast mode [ 435.571321][T14050] bridge_slave_0: entered promiscuous mode [ 435.586505][T14050] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.598358][T14050] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.605846][T14050] bridge_slave_1: entered allmulticast mode [ 435.624291][T14050] bridge_slave_1: entered promiscuous mode [ 435.680379][T14024] team0: Port device team_slave_1 added [ 435.704317][T14110] netlink: 134788 bytes leftover after parsing attributes in process `syz.1.2828'. [ 435.719321][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2828'. [ 435.806343][T14024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.814282][T14024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.841836][T14024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.910735][T14050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.941072][T14024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.952886][T14024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.996623][T14024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.031312][T14050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.090128][ T53] bridge_slave_1: left allmulticast mode [ 436.097871][ T53] bridge_slave_1: left promiscuous mode [ 436.107621][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.124662][ T53] bridge_slave_0: left allmulticast mode [ 436.130392][ T53] bridge_slave_0: left promiscuous mode [ 436.141276][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.343471][T14130] Cannot find del_set index 16387 as target [ 436.562853][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.578259][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.589330][ T53] bond0 (unregistering): Released all slaves [ 436.698964][T14050] team0: Port device team_slave_0 added [ 436.707564][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'. [ 436.733152][T14126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2833'. [ 436.829555][T14024] hsr_slave_0: entered promiscuous mode [ 436.836850][T14024] hsr_slave_1: entered promiscuous mode [ 436.843589][T14024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 436.851339][T14024] Cannot create hsr debugfs directory [ 436.897097][T14050] team0: Port device team_slave_1 added [ 436.940032][T14136] ieee802154 phy1 wpan1: encryption failed: -22 [ 436.946543][ T5839] Bluetooth: hci2: command tx timeout [ 437.016003][T14050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.023159][T14050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.051675][T14050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.131666][T14140] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 437.184438][ T5839] Bluetooth: hci1: command tx timeout [ 437.188173][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 437.202129][T14147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2839'. [ 437.262414][T14050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.271415][T14050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.297680][T14050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.401525][ T53] hsr_slave_0: left promiscuous mode [ 437.418860][ T53] hsr_slave_1: left promiscuous mode [ 437.427953][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.435652][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.445074][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.473015][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.517958][ T53] veth1_macvtap: left promiscuous mode [ 437.523971][ T53] veth0_macvtap: left promiscuous mode [ 437.532052][ T53] veth1_vlan: left promiscuous mode [ 437.538608][ T53] veth0_vlan: left promiscuous mode [ 438.017028][ T53] team0 (unregistering): Port device team_slave_1 removed [ 438.057018][ T53] team0 (unregistering): Port device team_slave_0 removed [ 438.562664][T14050] hsr_slave_0: entered promiscuous mode [ 438.575253][T14050] hsr_slave_1: entered promiscuous mode [ 438.581824][T14050] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.589599][T14050] Cannot create hsr debugfs directory [ 438.986825][T14185] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2848'. [ 439.025705][ T5839] Bluetooth: hci2: command tx timeout [ 439.039611][T14187] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2849'. [ 439.266238][ T5839] Bluetooth: hci1: command tx timeout [ 439.802716][T14209] delete_channel: no stack [ 439.880530][T14215] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2855'. [ 439.967635][T14218] raw_sendmsg: syz.3.2856 forgot to set AF_INET. Fix it! [ 440.105631][T14226] syzkaller1: entered promiscuous mode [ 440.114615][T14226] syzkaller1: entered allmulticast mode [ 440.139710][T14231] ipvlan0: entered promiscuous mode [ 440.152145][T14231] ipvlan0: entered allmulticast mode [ 440.152294][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.158458][T14231] bridge0: entered allmulticast mode [ 440.183069][T14231] batman_adv: batadv0: Adding interface: ipvlan0 [ 440.195779][T14231] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.226640][T14231] batman_adv: batadv0: Interface activated: ipvlan0 [ 440.420032][T14240] FAULT_INJECTION: forcing a failure. [ 440.420032][T14240] name failslab, interval 1, probability 0, space 0, times 0 [ 440.452043][T14240] CPU: 0 UID: 0 PID: 14240 Comm: syz.0.2863 Not tainted 6.15.0-rc4-syzkaller-00995-g3e52667a9c32 #0 PREEMPT(full) [ 440.452086][T14240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 440.452105][T14240] Call Trace: [ 440.452113][T14240] [ 440.452123][T14240] dump_stack_lvl+0x189/0x250 [ 440.452162][T14240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.452190][T14240] ? __pfx__printk+0x10/0x10 [ 440.452224][T14240] should_fail_ex+0x414/0x560 [ 440.452248][T14240] should_failslab+0xa8/0x100 [ 440.452276][T14240] __kmalloc_cache_noprof+0x70/0x3d0 [ 440.452314][T14240] ? sctp_add_bind_addr+0x8c/0x370 [ 440.452337][T14240] sctp_add_bind_addr+0x8c/0x370 [ 440.452361][T14240] sctp_copy_local_addr_list+0x30b/0x4e0 [ 440.452384][T14240] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 440.452404][T14240] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 440.452426][T14240] ? sctp_v6_is_any+0x64/0x80 [ 440.452449][T14240] ? sctp_copy_one_addr+0x93/0x360 [ 440.452472][T14240] sctp_bind_addr_copy+0xb3/0x3c0 [ 440.452493][T14240] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 440.452526][T14240] sctp_connect_new_asoc+0x2e0/0x690 [ 440.452556][T14240] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 440.452578][T14240] ? __local_bh_enable_ip+0x12d/0x1c0 [ 440.452618][T14240] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 440.452643][T14240] ? security_sctp_bind_connect+0x7e/0x2e0 [ 440.452677][T14240] sctp_sendmsg+0x155c/0x2810 [ 440.452714][T14240] ? __pfx_sctp_sendmsg+0x10/0x10 [ 440.452742][T14240] ? aa_sk_perm+0x81e/0x950 [ 440.452766][T14240] ? __pfx_aa_sk_perm+0x10/0x10 [ 440.452789][T14240] ? sock_rps_record_flow+0x19/0x410 [ 440.452823][T14240] ? inet_sendmsg+0x2f4/0x370 [ 440.452844][T14240] __sock_sendmsg+0x19c/0x270 [ 440.452870][T14240] ____sys_sendmsg+0x52d/0x830 [ 440.452903][T14240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.452939][T14240] ? import_iovec+0x74/0xa0 [ 440.452970][T14240] ___sys_sendmsg+0x21f/0x2a0 [ 440.453001][T14240] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.453068][T14240] ? __fget_files+0x2a/0x420 [ 440.453094][T14240] ? __fget_files+0x3a0/0x420 [ 440.453131][T14240] __sys_sendmmsg+0x227/0x430 [ 440.453164][T14240] ? __pfx___sys_sendmmsg+0x10/0x10 [ 440.453201][T14240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 440.453241][T14240] ? ksys_write+0x1f0/0x250 [ 440.453262][T14240] ? rcu_is_watching+0x15/0xb0 [ 440.453311][T14240] __x64_sys_sendmmsg+0xa0/0xc0 [ 440.453342][T14240] do_syscall_64+0xf6/0x210 [ 440.453364][T14240] ? clear_bhb_loop+0x45/0xa0 [ 440.453389][T14240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.453407][T14240] RIP: 0033:0x7f2db9f8e969 [ 440.453426][T14240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.453444][T14240] RSP: 002b:00007f2dbaebb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 440.453466][T14240] RAX: ffffffffffffffda RBX: 00007f2dba1b5fa0 RCX: 00007f2db9f8e969 [ 440.453481][T14240] RDX: 0000000000000001 RSI: 0000200000006bc0 RDI: 0000000000000004 [ 440.453497][T14240] RBP: 00007f2dbaebb090 R08: 0000000000000000 R09: 0000000000000000 [ 440.453508][T14240] R10: 0000000004040001 R11: 0000000000000246 R12: 0000000000000002 [ 440.453519][T14240] R13: 0000000000000000 R14: 00007f2dba1b5fa0 R15: 00007ffd4d826548 [ 440.453551][T14240] [ 440.863359][T14024] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 440.926294][T14024] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 440.950220][T14024] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 441.028262][T14254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2867'. [ 441.042203][T14024] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 441.104131][ T5839] Bluetooth: hci2: command tx timeout [ 441.105940][T14259] netlink: 'syz.3.2867': attribute type 3 has an invalid length. [ 441.179954][T14050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 441.225384][T14050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 441.250026][T14050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 441.291116][T14265] netlink: 'syz.3.2871': attribute type 8 has an invalid length. [ 441.316271][T14050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 441.525218][T14024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.571930][T14277] ip6tnl1: entered promiscuous mode [ 441.581955][T14277] ip6tnl1: entered allmulticast mode [ 441.605632][T14024] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.619027][T14277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2874'. [ 441.684869][T14277] ip6gretap0: entered promiscuous mode [ 441.691230][T14277] macvtap1: entered promiscuous mode [ 441.697173][T14277] macvtap1: entered allmulticast mode [ 441.702685][T14277] ip6gretap0: entered allmulticast mode [ 441.714939][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.722181][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.752740][T14282] ip6gretap0: left allmulticast mode [ 441.760055][T14282] ip6gretap0: left promiscuous mode [ 441.791459][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.798898][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.137636][T14050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.198602][T14050] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.240049][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.247427][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.282703][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.290028][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.299078][T14307] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2883'. [ 442.405878][T14314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2883'. [ 442.828172][T14024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.986982][T14050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.066169][T14024] veth0_vlan: entered promiscuous mode [ 443.141042][T14024] veth1_vlan: entered promiscuous mode [ 443.581116][T14024] veth0_macvtap: entered promiscuous mode [ 443.616342][T14024] veth1_macvtap: entered promiscuous mode [ 443.708253][T14024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.889992][T14024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.958678][T14024] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.988707][T14024] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.001420][T14024] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.013220][T14024] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.227161][T14050] veth0_vlan: entered promiscuous mode [ 444.245958][T14050] veth1_vlan: entered promiscuous mode [ 444.261836][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.282627][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.361212][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.385895][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.423966][T14050] veth0_macvtap: entered promiscuous mode [ 444.452974][T14050] veth1_macvtap: entered promiscuous mode [ 444.525592][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.546873][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.560321][T14050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.582455][T14050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.591393][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 444.602243][T14050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.644926][T14050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.671123][T14387] vxcan1: entered allmulticast mode [ 444.686842][T14393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 444.759642][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 444.771220][T14050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.807004][T14050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.835920][T14050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.850187][T14050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.882895][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 444.947014][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 445.027462][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 445.069675][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 445.138702][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.185580][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 445.229234][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.259477][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.275666][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 445.329634][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.380998][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2899'. [ 445.397856][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.412636][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.528628][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.641328][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.798314][ T13] bridge_slave_1: left allmulticast mode [ 445.815942][ T13] bridge_slave_1: left promiscuous mode [ 445.822591][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.857974][ T13] bridge_slave_0: left allmulticast mode [ 445.872312][ T13] bridge_slave_0: left promiscuous mode [ 445.883816][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.498445][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 446.520477][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 446.538760][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 446.555032][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 446.563073][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 446.627299][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.638531][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.656495][ T13] bond0 (unregistering): Released all slaves [ 446.960975][ T13] hsr_slave_0: left promiscuous mode [ 446.970048][ T13] hsr_slave_1: left promiscuous mode [ 447.004429][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.011928][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.078806][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.096516][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.181288][ T13] veth1_macvtap: left promiscuous mode [ 447.212652][ T13] veth0_macvtap: left promiscuous mode [ 447.218649][ T13] veth1_vlan: left promiscuous mode [ 447.233194][ T13] veth0_vlan: left promiscuous mode [ 447.479193][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 447.489682][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 447.507131][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 447.516569][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 447.526938][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 447.863092][ T13] team0 (unregistering): Port device team_slave_1 removed [ 447.909277][ T13] team0 (unregistering): Port device team_slave_0 removed [ 448.111745][T14456] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2914'. [ 448.411759][T14448] netlink: 'syz.0.2913': attribute type 1 has an invalid length. [ 448.429587][T14429] chnl_net:caif_netlink_parms(): no params data found [ 448.623682][ T5843] Bluetooth: hci1: command tx timeout [ 448.932193][T14429] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.946199][T14429] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.953831][T14429] bridge_slave_0: entered allmulticast mode [ 448.973102][T14429] bridge_slave_0: entered promiscuous mode [ 448.985052][T14429] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.012865][T14429] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.020527][T14429] bridge_slave_1: entered allmulticast mode [ 449.039423][T14429] bridge_slave_1: entered promiscuous mode [ 449.240206][T14429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.283276][T14429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.485243][T14429] team0: Port device team_slave_0 added [ 449.517386][T14429] team0: Port device team_slave_1 added [ 449.593841][ T5843] Bluetooth: hci2: command tx timeout [ 449.730747][T14429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 449.737953][T14508] __nla_validate_parse: 3 callbacks suppressed [ 449.737971][T14508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2927'. [ 449.738043][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.781145][T14429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 449.870713][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.920326][T14429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 449.931914][T14429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 449.962993][T14429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.091014][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.117267][T14452] chnl_net:caif_netlink_parms(): no params data found [ 450.211504][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.258560][T14429] hsr_slave_0: entered promiscuous mode [ 450.275937][T14429] hsr_slave_1: entered promiscuous mode [ 450.284027][T14429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.292191][T14429] Cannot create hsr debugfs directory [ 450.536960][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.704107][ T5843] Bluetooth: hci1: command tx timeout [ 450.810443][T14452] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.822577][T14452] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.831017][T14452] bridge_slave_0: entered allmulticast mode [ 450.847716][T14452] bridge_slave_0: entered promiscuous mode [ 450.895319][T14452] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.904614][T14452] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.911912][T14452] bridge_slave_1: entered allmulticast mode [ 450.921357][T14452] bridge_slave_1: entered promiscuous mode [ 451.086976][T14452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.103349][T14541] dvmrp0: entered allmulticast mode [ 451.165228][T14452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.278603][ T13] bridge_slave_1: left allmulticast mode [ 451.288452][ T13] bridge_slave_1: left promiscuous mode [ 451.301241][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.318022][ T13] bridge_slave_0: left allmulticast mode [ 451.337924][ T13] bridge_slave_0: left promiscuous mode [ 451.345285][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.664066][ T5843] Bluetooth: hci2: command tx timeout [ 451.970881][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.982184][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.992934][ T13] bond0 (unregistering): Released all slaves [ 452.027462][T14452] team0: Port device team_slave_0 added [ 452.039659][T14452] team0: Port device team_slave_1 added [ 452.180939][T14452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.188115][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.220022][T14452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.287783][T14452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.299387][T14452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.329929][T14452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.341429][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2944'. [ 452.452895][T14566] netlink: 'syz.1.2944': attribute type 10 has an invalid length. [ 452.478667][T14566] team0: Device bond0 is already an upper device of the team interface [ 452.492482][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2944'. [ 452.552183][T14566] bond0: (slave team0): Releasing backup interface [ 452.563435][T14566] team0 (unregistering): Port device team_slave_0 removed [ 452.579686][T14566] team0 (unregistering): Port device team_slave_1 removed [ 452.618339][T14452] hsr_slave_0: entered promiscuous mode [ 452.625577][T14452] hsr_slave_1: entered promiscuous mode [ 452.631836][T14452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.639776][T14452] Cannot create hsr debugfs directory [ 452.658930][ T13] hsr_slave_0: left promiscuous mode [ 452.665341][ T13] hsr_slave_1: left promiscuous mode [ 452.671502][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.684302][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.701207][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.709800][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.734236][ T13] veth1_macvtap: left promiscuous mode [ 452.739825][ T13] veth0_macvtap: left promiscuous mode [ 452.745544][ T13] veth1_vlan: left promiscuous mode [ 452.751794][ T13] veth0_vlan: left promiscuous mode [ 452.783800][ T5843] Bluetooth: hci1: command tx timeout [ 453.218358][ T13] team0 (unregistering): Port device team_slave_1 removed [ 453.259595][ T13] team0 (unregistering): Port device team_slave_0 removed [ 453.744811][ T5843] Bluetooth: hci2: command tx timeout [ 453.922109][T14575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 454.040562][T14578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2947'. [ 454.118308][T14429] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 454.142270][T14429] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 454.177716][T14429] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 454.206533][T14429] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 454.461188][T14591] IPv6: sit1: Disabled Multicast RS [ 454.489209][T14594] No such timeout policy "syz1" [ 454.509286][T14429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.550528][T14594] syzkaller1: entered promiscuous mode [ 454.556085][T14591] netlink: 'syz.3.2954': attribute type 1 has an invalid length. [ 454.557813][T14594] syzkaller1: entered allmulticast mode [ 454.601564][T14429] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.686236][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.693581][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.796216][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.803610][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.827025][T14608] netlink: 'syz.0.2957': attribute type 2 has an invalid length. [ 454.866271][T14452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 454.867199][ T5843] Bluetooth: hci1: command tx timeout [ 454.899730][T14452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 454.954894][T14452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 454.977852][T14612] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2959'. [ 454.990305][T14452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 455.272420][T14452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.328373][T14452] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.372487][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.379740][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.399147][T14626] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2962'. [ 455.448565][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.455805][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.647798][T14429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.694472][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'. [ 455.723661][T14637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2966'. [ 455.764279][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'. [ 455.792467][T14637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2966'. [ 455.824182][ T5843] Bluetooth: hci2: command tx timeout [ 455.991999][T14429] veth0_vlan: entered promiscuous mode [ 456.049856][T14429] veth1_vlan: entered promiscuous mode [ 456.190084][T14652] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2971'. [ 456.275359][T14653] netlink: 'syz.3.2969': attribute type 11 has an invalid length. [ 456.278628][T14657] sit0: entered promiscuous mode [ 456.283231][T14653] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2969'. [ 456.306068][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2972'. [ 456.320235][T14657] netlink: 'syz.3.2969': attribute type 1 has an invalid length. [ 456.353723][T14657] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2969'. [ 456.498613][T14429] veth0_macvtap: entered promiscuous mode [ 456.517775][T14452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.531070][T14429] veth1_macvtap: entered promiscuous mode [ 456.588563][T14429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.640855][T14429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.688434][T14429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.715194][T14429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.747343][T14429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.777369][T14429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.011046][ T1306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.039451][ T1306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.120376][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.147312][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.252776][T14452] veth0_vlan: entered promiscuous mode [ 457.282184][T14452] veth1_vlan: entered promiscuous mode [ 457.409449][T14452] veth0_macvtap: entered promiscuous mode [ 457.439184][T14452] veth1_macvtap: entered promiscuous mode [ 457.498460][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.523713][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.535995][T14452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.899329][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.962449][T14452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.985420][T14452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.005363][T14452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.150258][T14452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.173963][T14452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.182779][T14452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.207201][T14452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.288586][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.403952][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.489069][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.564482][ T1320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.572428][ T1320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.599976][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.612875][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.958184][T14715] netlink: 'syz.1.2987': attribute type 16 has an invalid length. [ 458.980148][T14715] netlink: 'syz.1.2987': attribute type 17 has an invalid length. [ 459.127857][T14718] netlink: 'syz.1.2987': attribute type 9 has an invalid length. [ 459.188223][T14715] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.234738][T14715] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.243172][T14715] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.253736][T14715] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.277905][T14715] batman_adv: batadv0: Interface deactivated: ipvlan0 [ 459.320547][T14718] macvlan0: entered promiscuous mode [ 459.334957][T14718] hsr0: entered promiscuous mode [ 459.340303][T14718] macvlan0: entered allmulticast mode [ 459.352595][T14718] hsr0: entered allmulticast mode [ 459.359091][T14718] hsr_slave_0: entered allmulticast mode [ 459.392982][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 459.410588][ T12] bridge_slave_1: left allmulticast mode [ 459.417083][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 459.426271][ T12] bridge_slave_1: left promiscuous mode [ 459.432322][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 459.439961][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.444670][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 459.457966][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 459.458585][ T12] bridge_slave_0: left allmulticast mode [ 459.473433][ T12] bridge_slave_0: left promiscuous mode [ 459.480582][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.816715][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.829988][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.840543][ T12] bond0 (unregistering): Released all slaves [ 460.077739][T14726] netlink: 'syz.0.2989': attribute type 15 has an invalid length. [ 460.140265][T14730] __nla_validate_parse: 3 callbacks suppressed [ 460.140284][T14730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2991'. [ 460.187427][T14720] chnl_net:caif_netlink_parms(): no params data found [ 460.304792][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2991'. [ 460.423165][T14740] netlink: 'syz.0.2993': attribute type 1 has an invalid length. [ 460.439383][ T12] hsr_slave_0: left promiscuous mode [ 460.443376][T14740] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2993'. [ 460.473779][ T12] hsr_slave_1: left promiscuous mode [ 460.480795][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.493275][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.509630][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.517236][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.556085][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.566844][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.577073][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.593998][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.602829][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.613993][ T12] veth1_macvtap: left promiscuous mode [ 460.619592][ T12] veth0_macvtap: left promiscuous mode [ 460.642492][ T12] veth1_vlan: left promiscuous mode [ 460.651188][ T12] veth0_vlan: left promiscuous mode [ 461.253444][ T12] team0 (unregistering): Port device team_slave_1 removed [ 461.294593][ T12] team0 (unregistering): Port device team_slave_0 removed [ 461.519726][ T5843] Bluetooth: hci1: command tx timeout [ 461.802002][T14765] mac80211_hwsim hwsim3 wlan0: Device is already in use. [ 461.822043][T14720] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.844070][T14720] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.853922][T14720] bridge_slave_0: entered allmulticast mode [ 461.878632][T14720] bridge_slave_0: entered promiscuous mode [ 461.902515][T14720] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.939358][T14720] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.958245][T14720] bridge_slave_1: entered allmulticast mode [ 461.988148][T14720] bridge_slave_1: entered promiscuous mode [ 462.124173][T14720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.169057][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3001'. [ 462.208539][T14720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.229056][T14776] x_tables: duplicate underflow at hook 2 [ 462.263722][T14779] block nbd0: server does not support multiple connections per device. [ 462.294369][T14779] block nbd0: shutting down sockets [ 462.322377][T14720] team0: Port device team_slave_0 added [ 462.350239][T14720] team0: Port device team_slave_1 added [ 462.539594][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.601292][T14794] x_tables: duplicate underflow at hook 3 [ 462.603134][T14720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.626204][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.653091][ T5843] Bluetooth: hci2: command tx timeout [ 462.659790][T14720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.681230][T14796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3009'. [ 462.690993][T14796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 462.706615][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.727163][T14720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.735542][T14720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.762489][T14720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.851854][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.041043][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.117445][T14720] hsr_slave_0: entered promiscuous mode [ 463.124820][T14720] hsr_slave_1: entered promiscuous mode [ 463.131326][T14720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.148225][T14720] Cannot create hsr debugfs directory [ 463.231166][T14817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3014'. [ 463.272248][T14817] vlan3: entered promiscuous mode [ 463.279953][T14817] batadv0: entered promiscuous mode [ 463.368546][T14748] chnl_net:caif_netlink_parms(): no params data found [ 463.584072][ T5843] Bluetooth: hci1: command tx timeout [ 463.673235][T14831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'. [ 463.741578][T14840] netlink: 'syz.1.3023': attribute type 1 has an invalid length. [ 463.843323][T14840] bond5: entered promiscuous mode [ 463.849442][T14840] 8021q: adding VLAN 0 to HW filter on device bond5 [ 463.857362][T14831] tun0: tun_chr_ioctl cmd 1074025677 [ 463.862929][T14831] tun0: linktype set to 825 [ 463.920275][T14850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3023'. [ 463.938845][T14847] bond5: (slave bridge7): making interface the new active one [ 463.950896][T14847] bridge7: entered promiscuous mode [ 463.960083][T14847] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 464.011433][T14840] bridge8: the hash_elasticity option has been deprecated and is always 16 [ 464.036188][T14840] bridge8: entered allmulticast mode [ 464.121196][ T12] bridge_slave_1: left allmulticast mode [ 464.129911][ T12] bridge_slave_1: left promiscuous mode [ 464.136624][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.147805][ T12] bridge_slave_0: left allmulticast mode [ 464.154385][ T12] bridge_slave_0: left promiscuous mode [ 464.160170][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.182208][T14859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.541470][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.552775][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.567495][ T12] bond0 (unregistering): Released all slaves [ 464.590654][T14850] bond5: left promiscuous mode [ 464.595653][T14850] bridge7: left promiscuous mode [ 464.664895][T14748] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.679637][T14748] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.704096][ T5843] Bluetooth: hci2: command tx timeout [ 464.706801][T14748] bridge_slave_0: entered allmulticast mode [ 464.720236][T14748] bridge_slave_0: entered promiscuous mode [ 464.730858][T14748] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.742438][T14748] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.749963][T14748] bridge_slave_1: entered allmulticast mode [ 464.758376][T14748] bridge_slave_1: entered promiscuous mode [ 464.921302][T14865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3029'. [ 464.923287][T14748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.949401][T14865] netlink: 'syz.1.3029': attribute type 2 has an invalid length. [ 465.073081][T14748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.186067][T14880] IPv6: Can't replace route, no match found [ 465.209784][T14880] IPv6: Can't replace route, no match found [ 465.241137][T14880] IPv6: Can't replace route, no match found [ 465.321904][ T12] hsr_slave_0: left promiscuous mode [ 465.328995][ T12] hsr_slave_1: left promiscuous mode [ 465.344381][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.359674][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.369288][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.381065][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.417261][ T12] veth1_macvtap: left promiscuous mode [ 465.425389][ T12] veth0_macvtap: left promiscuous mode [ 465.431111][ T12] veth1_vlan: left promiscuous mode [ 465.439043][ T12] veth0_vlan: left promiscuous mode [ 465.663862][ T5843] Bluetooth: hci1: command tx timeout [ 466.338029][ T12] team0 (unregistering): Port device team_slave_1 removed [ 466.385766][ T12] team0 (unregistering): Port device team_slave_0 removed [ 466.794397][ T5843] Bluetooth: hci2: command tx timeout [ 466.806427][T14748] team0: Port device team_slave_0 added [ 466.886361][T14748] team0: Port device team_slave_1 added [ 467.051507][T14748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.067774][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.134888][T14748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.285941][T14748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.293381][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.354327][T14748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.624856][T14748] hsr_slave_0: entered promiscuous mode [ 467.642144][T14748] hsr_slave_1: entered promiscuous mode [ 467.655155][T14748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.666463][T14748] Cannot create hsr debugfs directory [ 467.700351][T14720] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 467.729076][T14720] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.757632][ T5843] Bluetooth: hci1: command tx timeout [ 467.800776][T14720] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.982402][T14720] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 468.071322][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 468.081388][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 468.090741][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 468.103168][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 468.112345][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 468.151608][ T53] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.249041][ T53] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.351723][ T53] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.477191][ T53] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.552511][T14926] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 468.869510][ T5843] Bluetooth: hci2: command tx timeout [ 469.033735][T14945] netlink: 'syz.3.3053': attribute type 4 has an invalid length. [ 469.084090][T14946] netlink: 'syz.3.3053': attribute type 4 has an invalid length. [ 469.361913][ T53] team0: Port device gtp1 removed [ 470.142008][ T53] bond0 (unregistering): Released all slaves [ 470.148247][ T5843] Bluetooth: hci0: command tx timeout [ 470.163195][ T53] bond1 (unregistering): Released all slaves [ 470.251778][T14720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.303074][T14720] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.349930][T14916] chnl_net:caif_netlink_parms(): no params data found [ 470.387601][ T53] tipc: Disabling bearer [ 470.407432][ T53] tipc: Disabling bearer [ 470.418332][ T53] tipc: Left network mode [ 470.474054][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.481323][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.528973][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.536198][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.637198][T14955] __nla_validate_parse: 2 callbacks suppressed [ 470.637220][T14955] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3056'. [ 470.796789][T14748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 470.827862][ T53] hsr_slave_0: left promiscuous mode [ 470.836259][ T53] 0·: left promiscuous mode [ 470.857585][ T53] veth1_macvtap: left promiscuous mode [ 470.863885][ T53] veth0_macvtap: left promiscuous mode [ 470.876622][ T53] veth1_vlan: left promiscuous mode [ 471.779788][T14748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 471.813070][T14748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 471.841225][T14916] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.854474][T14916] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.861863][T14916] bridge_slave_0: entered allmulticast mode [ 471.885681][T14916] bridge_slave_0: entered promiscuous mode [ 471.902064][T14916] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.904789][T14974] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3061'. [ 471.910534][T14916] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.927201][T14916] bridge_slave_1: entered allmulticast mode [ 471.936090][T14916] bridge_slave_1: entered promiscuous mode [ 471.949023][T14748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 472.119592][T14916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.191062][T14916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.224134][ T5843] Bluetooth: hci0: command tx timeout [ 472.333170][T14916] team0: Port device team_slave_0 added [ 472.392548][T14916] team0: Port device team_slave_1 added [ 472.451881][T14916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.459816][T14916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.487489][T14916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.505687][T14916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.512915][ T53] IPVS: stop unused estimator thread 0... [ 472.518871][T14916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.546148][T14916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.730703][T14748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.742876][T14916] hsr_slave_0: entered promiscuous mode [ 472.750342][T14916] hsr_slave_1: entered promiscuous mode [ 472.987317][T14720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.076408][T14748] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.113642][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.120870][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.225728][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.232939][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.550376][T14720] veth0_vlan: entered promiscuous mode [ 473.617703][T14720] veth1_vlan: entered promiscuous mode [ 473.706566][T14720] veth0_macvtap: entered promiscuous mode [ 473.737281][T14720] veth1_macvtap: entered promiscuous mode [ 473.806390][T14720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.850002][T14720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.912948][T14720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.946999][T14720] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.970250][T14720] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.001628][T14720] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.200958][T14916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 474.228587][T14916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 474.261893][T14916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 474.304690][T14916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 474.306231][ T5843] Bluetooth: hci0: command tx timeout [ 474.357207][T14748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.445270][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.453152][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.565902][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.575845][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.111172][T14916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.274448][T15048] delete_channel: no stack [ 475.283070][T15028] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.308094][T15048] netlink: 'syz.1.3075': attribute type 21 has an invalid length. [ 475.419468][T15028] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.450912][T14916] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.459265][T15051] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 475.513221][ T1306] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.520462][ T1306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.559695][ T1306] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.566934][ T1306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.623597][T15028] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.639814][T14748] veth0_vlan: entered promiscuous mode [ 475.672609][T14748] veth1_vlan: entered promiscuous mode [ 475.723203][T14748] veth0_macvtap: entered promiscuous mode [ 475.736280][T14748] veth1_macvtap: entered promiscuous mode [ 475.757299][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 475.767957][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.780496][T14748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.801455][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.816642][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.829324][T14748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.847903][T14748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.858904][T14748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.869782][T14748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.878691][T14748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.968448][T15028] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.020788][ T6066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.034076][ T6066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.066017][T14916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.075262][ T1320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.083182][ T1320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.179743][T14916] veth0_vlan: entered promiscuous mode [ 476.196797][T14916] veth1_vlan: entered promiscuous mode [ 476.309507][T15028] bridge_slave_1: left allmulticast mode [ 476.325262][T15028] bridge_slave_1: left promiscuous mode [ 476.343924][T15028] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.364490][T15028] bridge_slave_0: left allmulticast mode [ 476.370207][T15028] bridge_slave_0: left promiscuous mode [ 476.383877][ T5843] Bluetooth: hci0: command tx timeout [ 476.403994][T15028] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.688076][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 476.698134][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.713636][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.725728][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.733716][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 477.035994][T15028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.048319][T15028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.060174][T15028] bond0 (unregistering): Released all slaves [ 477.077037][T15060] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.085800][T15060] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.094532][T15060] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.102893][T15060] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.260540][T14916] veth0_macvtap: entered promiscuous mode [ 477.348956][T14916] veth1_macvtap: entered promiscuous mode [ 477.400707][T15028] hsr_slave_0: left promiscuous mode [ 477.407594][T15028] hsr_slave_1: left promiscuous mode [ 477.413447][T15028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.422880][T15028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.434477][T15028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.441905][T15028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.464076][T15028] veth1_macvtap: left promiscuous mode [ 477.469664][T15028] veth0_macvtap: left promiscuous mode [ 477.475502][T15028] veth1_vlan: left promiscuous mode [ 477.480794][T15028] veth0_vlan: left promiscuous mode [ 478.045344][T15028] team0 (unregistering): Port device team_slave_1 removed [ 478.137671][T15028] team0 (unregistering): Port device team_slave_0 removed [ 478.201367][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 478.222137][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 478.231150][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 478.241369][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 478.249511][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.259911][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 478.671876][T15086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.681757][T15086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.692500][T15086] batman_adv: batadv0: Removing interface: ipvlan0 [ 478.715818][T15086] bond0: (slave batadv0): Releasing backup interface [ 478.794386][T14916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.808235][T14916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.828835][T14916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.859440][T14916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.870723][ T5843] Bluetooth: hci1: command tx timeout [ 478.880050][T14916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.892336][T14916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.977949][T14916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.987122][T14916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.999256][T14916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.008384][T14916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.192209][T15071] chnl_net:caif_netlink_parms(): no params data found [ 479.592934][T15071] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.600473][T15071] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.611477][T15071] bridge_slave_0: entered allmulticast mode [ 479.624486][T15071] bridge_slave_0: entered promiscuous mode [ 479.678954][T15114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 479.729522][T15071] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.741027][T15071] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.757425][T15071] bridge_slave_1: entered allmulticast mode [ 479.768216][T15071] bridge_slave_1: entered promiscuous mode [ 479.796110][ T5899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.819199][ T5899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.844654][T15121] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3088'. [ 479.899815][T15124] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3088'. [ 479.931474][ T6066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.994918][T15118] wireguard0: entered promiscuous mode [ 480.002530][T15118] team0: Device wireguard0 is up. Set it down before adding it as a team port [ 480.070043][T15071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.101684][T15071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.130012][ T6066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.147378][T15084] chnl_net:caif_netlink_parms(): no params data found [ 480.285114][ T6066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.303827][ T5843] Bluetooth: hci2: command tx timeout [ 480.351615][T15071] team0: Port device team_slave_0 added [ 480.380473][ T1306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.389430][ T1306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.417871][T15071] team0: Port device team_slave_1 added [ 480.516941][ T6066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.566131][T15071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.573371][T15071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.601502][T15071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.621768][T15084] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.632356][T15084] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.640743][T15084] bridge_slave_0: entered allmulticast mode [ 480.649229][T15084] bridge_slave_0: entered promiscuous mode [ 480.665736][T15071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.675508][T15071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.711893][T15071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.748925][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.758576][T15084] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.767149][T15084] bridge_slave_1: entered allmulticast mode [ 480.775158][T15084] bridge_slave_1: entered promiscuous mode [ 480.939027][T15084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.954137][ T5843] Bluetooth: hci1: command tx timeout [ 481.059979][T15084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.120953][T15071] hsr_slave_0: entered promiscuous mode [ 481.145526][T15071] hsr_slave_1: entered promiscuous mode [ 481.151762][T15071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.164090][T15071] Cannot create hsr debugfs directory [ 481.238569][T15084] team0: Port device team_slave_0 added [ 481.275294][T15084] team0: Port device team_slave_1 added [ 481.345508][ T6066] bridge_slave_1: left allmulticast mode [ 481.352224][ T6066] bridge_slave_1: left promiscuous mode [ 481.362400][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.375355][ T6066] bridge_slave_0: left allmulticast mode [ 481.381134][ T6066] bridge_slave_0: left promiscuous mode [ 481.387336][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.787371][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 481.810027][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 481.821362][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 481.833914][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 481.842065][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 481.954874][ T6066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.968239][ T6066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.979001][ T6066] bond0 (unregistering): Released all slaves [ 482.060743][T15157] bond0: entered promiscuous mode [ 482.066524][T15157] bond_slave_0: entered promiscuous mode [ 482.072506][T15157] bond_slave_1: entered promiscuous mode [ 482.085285][T15157] bond0: left promiscuous mode [ 482.095654][T15157] bond_slave_0: left promiscuous mode [ 482.101335][T15157] bond_slave_1: left promiscuous mode [ 482.125982][T15084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.133043][T15084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.161781][T15084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.281819][T15084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.298326][T15084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.330382][T15084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.395335][ T5839] Bluetooth: hci2: command tx timeout [ 482.562677][ T6066] hsr_slave_0: left promiscuous mode [ 482.568950][ T6066] hsr_slave_1: left promiscuous mode [ 482.575583][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.583089][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.591573][ T6066] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.599867][ T6066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.620980][ T6066] veth1_macvtap: left promiscuous mode [ 482.626839][ T6066] veth0_macvtap: left promiscuous mode [ 482.632460][ T6066] veth1_vlan: left promiscuous mode [ 482.637905][ T6066] veth0_vlan: left promiscuous mode [ 483.033675][ T5839] Bluetooth: hci1: command tx timeout [ 483.099405][ T6066] team0 (unregistering): Port device team_slave_1 removed [ 483.142455][ T6066] team0 (unregistering): Port device team_slave_0 removed [ 483.600975][T15173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'. [ 483.659149][T15084] hsr_slave_0: entered promiscuous mode [ 483.666185][T15084] hsr_slave_1: entered promiscuous mode [ 483.673390][T15084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.681359][T15084] Cannot create hsr debugfs directory [ 483.903733][ T5839] Bluetooth: hci0: command tx timeout [ 484.061097][T15180] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 484.198485][T15180] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 484.220043][T15180] macsec4: entered promiscuous mode [ 484.228484][T15180] macsec4: entered allmulticast mode [ 484.242055][T15159] chnl_net:caif_netlink_parms(): no params data found [ 484.414885][ T6066] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.463903][ T5839] Bluetooth: hci2: command tx timeout [ 484.572761][ T6066] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.594938][T15194] netlink: 'syz.1.3105': attribute type 1 has an invalid length. [ 484.692049][ T6066] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.737721][T15071] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 484.768893][T15071] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 484.926966][T15204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3107'. [ 485.000109][ T6066] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.020504][T15071] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.093104][T15159] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.100692][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.110917][ T5839] Bluetooth: hci1: command tx timeout [ 485.121669][T15159] bridge_slave_0: entered allmulticast mode [ 485.140827][T15159] bridge_slave_0: entered promiscuous mode [ 485.171332][T15071] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 485.316086][T15159] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.327194][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.338493][T15159] bridge_slave_1: entered allmulticast mode [ 485.352221][T15159] bridge_slave_1: entered promiscuous mode [ 485.471006][T15159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.517499][T15159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.677399][T15210] netlink: 'syz.1.3110': attribute type 8 has an invalid length. [ 485.700663][T15159] team0: Port device team_slave_0 added [ 485.717506][T15159] team0: Port device team_slave_1 added [ 485.883286][T15159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.909727][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.941940][T15159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.990989][ T5839] Bluetooth: hci0: command tx timeout [ 486.014781][T15159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.021790][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.060121][T15215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3111'. [ 486.099123][T15159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.267711][ C1] ================================================================== [ 486.275920][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 486.283831][ C1] Read of size 2 at addr ffff88807ecfc02a by task syz.3.3104/15188 [ 486.291724][ C1] [ 486.294090][ C1] CPU: 1 UID: 0 PID: 15188 Comm: syz.3.3104 Not tainted 6.15.0-rc4-syzkaller-00995-g3e52667a9c32 #0 PREEMPT(full) [ 486.294112][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 486.294123][ C1] Call Trace: [ 486.294132][ C1] [ 486.294140][ C1] dump_stack_lvl+0x189/0x250 [ 486.294167][ C1] ? __virt_addr_valid+0x18c/0x540 [ 486.294189][ C1] ? rcu_is_watching+0x15/0xb0 [ 486.294215][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.294238][ C1] ? rcu_is_watching+0x15/0xb0 [ 486.294262][ C1] ? lock_release+0x4b/0x3e0 [ 486.294288][ C1] ? __virt_addr_valid+0x18c/0x540 [ 486.294308][ C1] ? __virt_addr_valid+0x469/0x540 [ 486.294331][ C1] print_report+0xb4/0x290 [ 486.294352][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 486.294367][ C1] kasan_report+0x118/0x150 [ 486.294389][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 486.294410][ C1] rose_timer_expiry+0x471/0x4b0 [ 486.294427][ C1] call_timer_fn+0x17b/0x5f0 [ 486.294450][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 486.294466][ C1] ? call_timer_fn+0xbe/0x5f0 [ 486.294487][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 486.294513][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.294536][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.294559][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 486.294577][ C1] __run_timer_base+0x61a/0x860 [ 486.294605][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 486.294628][ C1] ? lapic_next_event+0x11/0x20 [ 486.294646][ C1] ? clockevents_program_event+0x24d/0x360 [ 486.294671][ C1] run_timer_softirq+0xb7/0x180 [ 486.294691][ C1] handle_softirqs+0x283/0x870 [ 486.294708][ C1] ? do_softirq+0xec/0x180 [ 486.294730][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 486.294748][ C1] ? hash_netport4_resize+0x62e/0x1bf0 [ 486.294770][ C1] do_softirq+0xec/0x180 [ 486.294783][ C1] [ 486.294789][ C1] [ 486.294795][ C1] ? __pfx_do_softirq+0x10/0x10 [ 486.294814][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 486.294837][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 486.294861][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 486.294890][ C1] ? hash_netport4_resize+0x62e/0x1bf0 [ 486.294910][ C1] ? hash_netport4_resize+0x62e/0x1bf0 [ 486.294931][ C1] hash_netport4_resize+0x1195/0x1bf0 [ 486.294957][ C1] ? hash_netport4_resize+0x62e/0x1bf0 [ 486.294994][ C1] call_ad+0x44b/0xb00 [ 486.295014][ C1] ? __pfx_call_ad+0x10/0x10 [ 486.295037][ C1] ? __nla_parse+0x40/0x60 [ 486.295058][ C1] ip_set_ad+0x791/0x930 [ 486.295078][ C1] ? __pfx_ip_set_ad+0x10/0x10 [ 486.295091][ C1] ? __mutex_lock+0x330/0xe80 [ 486.295127][ C1] nfnetlink_rcv_msg+0xb4a/0x1130 [ 486.295153][ C1] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 486.295188][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 486.295228][ C1] ? __lock_acquire+0xaac/0xd20 [ 486.295260][ C1] netlink_rcv_skb+0x219/0x490 [ 486.295280][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 486.295305][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.295331][ C1] ? apparmor_capable+0x137/0x1b0 [ 486.295354][ C1] ? bpf_lsm_capable+0x9/0x20 [ 486.295377][ C1] ? security_capable+0x7e/0x2e0 [ 486.295399][ C1] nfnetlink_rcv+0x273/0x2530 [ 486.295424][ C1] ? kernel_text_address+0xa5/0xe0 [ 486.295446][ C1] ? __kernel_text_address+0xd/0x40 [ 486.295469][ C1] ? unwind_get_return_address+0x4d/0x90 [ 486.295488][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 486.295505][ C1] ? arch_stack_walk+0xfc/0x150 [ 486.295533][ C1] ? stack_trace_save+0x9c/0xe0 [ 486.295551][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 486.295573][ C1] ? stack_depot_save_flags+0x40/0x910 [ 486.295594][ C1] ? kasan_save_track+0x4f/0x80 [ 486.295610][ C1] ? kasan_save_track+0x3e/0x80 [ 486.295632][ C1] ? __lock_acquire+0xaac/0xd20 [ 486.295668][ C1] ? __lock_acquire+0xaac/0xd20 [ 486.295694][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.295733][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.295751][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 486.295773][ C1] netlink_unicast+0x758/0x8d0 [ 486.295795][ C1] netlink_sendmsg+0x805/0xb30 [ 486.295820][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.295840][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 486.295858][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.295877][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.295896][ C1] __sock_sendmsg+0x219/0x270 [ 486.295913][ C1] ____sys_sendmsg+0x505/0x830 [ 486.295938][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.295966][ C1] ? import_iovec+0x74/0xa0 [ 486.295990][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 486.296012][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.296055][ C1] ? __fget_files+0x2a/0x420 [ 486.296075][ C1] ? __fget_files+0x3a0/0x420 [ 486.296101][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 486.296124][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.296155][ C1] ? do_syscall_64+0xba/0x210 [ 486.296172][ C1] do_syscall_64+0xf6/0x210 [ 486.296188][ C1] ? clear_bhb_loop+0x45/0xa0 [ 486.296207][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.296222][ C1] RIP: 0033:0x7f22f138e969 [ 486.296238][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.296252][ C1] RSP: 002b:00007f22f2116038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.296270][ C1] RAX: ffffffffffffffda RBX: 00007f22f15b5fa0 RCX: 00007f22f138e969 [ 486.296282][ C1] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 486.296292][ C1] RBP: 00007f22f1410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 486.296302][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.296312][ C1] R13: 0000000000000000 R14: 00007f22f15b5fa0 R15: 00007ffe0ca071e8 [ 486.296333][ C1] [ 486.296339][ C1] [ 486.861023][ C1] Allocated by task 15102: [ 486.865463][ C1] kasan_save_track+0x3e/0x80 [ 486.870159][ C1] __kasan_kmalloc+0x93/0xb0 [ 486.874761][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 486.880139][ C1] __genradix_ptr_alloc+0x352/0x4a0 [ 486.885451][ C1] __genradix_prealloc+0x44/0x90 [ 486.890397][ C1] sctp_stream_init+0x14b/0x440 [ 486.895269][ C1] sctp_association_new+0x10dd/0x25f0 [ 486.900647][ C1] sctp_connect_new_asoc+0x2c5/0x690 [ 486.905940][ C1] sctp_sendmsg+0x155c/0x2810 [ 486.910795][ C1] __sock_sendmsg+0x19c/0x270 [ 486.915472][ C1] __sys_sendto+0x3bd/0x520 [ 486.919985][ C1] __x64_sys_sendto+0xde/0x100 [ 486.924755][ C1] do_syscall_64+0xf6/0x210 [ 486.929257][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.935154][ C1] [ 486.937477][ C1] Freed by task 15103: [ 486.941541][ C1] kasan_save_track+0x3e/0x80 [ 486.946222][ C1] kasan_save_free_info+0x46/0x50 [ 486.951258][ C1] __kasan_slab_free+0x62/0x70 [ 486.956024][ C1] kfree+0x193/0x440 [ 486.959921][ C1] genradix_free_recurse+0x5d/0xa0 [ 486.965059][ C1] genradix_free_recurse+0x5d/0xa0 [ 486.970351][ C1] sctp_stream_free+0xd5/0x110 [ 486.975124][ C1] sctp_association_free+0x26d/0x7f0 [ 486.980424][ C1] sctp_do_sm+0x3eba/0x5a20 [ 486.984935][ C1] sctp_primitive_SHUTDOWN+0x98/0xc0 [ 486.990224][ C1] sctp_close+0x409/0x900 [ 486.994605][ C1] inet_release+0x184/0x210 [ 486.999143][ C1] sock_close+0xc0/0x240 [ 487.003391][ C1] __fput+0x449/0xa70 [ 487.007401][ C1] task_work_run+0x1d1/0x260 [ 487.012001][ C1] do_exit+0x8d6/0x2550 [ 487.016167][ C1] do_group_exit+0x21c/0x2d0 [ 487.020758][ C1] get_signal+0x125e/0x1310 [ 487.025269][ C1] arch_do_signal_or_restart+0x95/0x780 [ 487.030818][ C1] syscall_exit_to_user_mode+0x8b/0x120 [ 487.036377][ C1] do_syscall_64+0x103/0x210 [ 487.040976][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.047252][ C1] [ 487.049585][ C1] The buggy address belongs to the object at ffff88807ecfc000 [ 487.049585][ C1] which belongs to the cache kmalloc-512 of size 512 [ 487.063660][ C1] The buggy address is located 42 bytes inside of [ 487.063660][ C1] freed 512-byte region [ffff88807ecfc000, ffff88807ecfc200) [ 487.077557][ C1] [ 487.079896][ C1] The buggy address belongs to the physical page: [ 487.086319][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ecfc [ 487.095086][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 487.103583][ C1] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 487.111575][ C1] page_type: f5(slab) [ 487.115573][ C1] raw: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 487.124246][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 487.132835][ C1] head: 00fff00000000040 ffff88801a041c80 0000000000000000 dead000000000001 [ 487.141528][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 487.150224][ C1] head: 00fff00000000002 ffffea0001fb3f01 00000000ffffffff 00000000ffffffff [ 487.158923][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 487.167591][ C1] page dumped because: kasan: bad access detected [ 487.174014][ C1] page_owner tracks the page as allocated [ 487.179739][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5838, tgid 5838 (syz-executor), ts 97063056196, free_ts 96993202655 [ 487.201108][ C1] post_alloc_hook+0x1d8/0x230 [ 487.205888][ C1] get_page_from_freelist+0x21e0/0x22c0 [ 487.211446][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 487.217287][ C1] alloc_pages_mpol+0x232/0x4a0 [ 487.222142][ C1] allocate_slab+0x8a/0x3b0 [ 487.226674][ C1] ___slab_alloc+0xbfc/0x1480 [ 487.231361][ C1] __kmalloc_noprof+0x305/0x4f0 [ 487.236230][ C1] fib6_info_alloc+0x30/0xf0 [ 487.240833][ C1] ip6_route_info_create+0x147/0xa70 [ 487.246232][ C1] ip6_route_add+0x29/0x2f0 [ 487.250830][ C1] addrconf_add_dev+0x24f/0x340 [ 487.255689][ C1] inet6_addr_add+0x1a1/0xc00 [ 487.260455][ C1] inet6_rtm_newaddr+0x93d/0xd20 [ 487.265407][ C1] rtnetlink_rcv_msg+0x7cc/0xb70 [ 487.270351][ C1] netlink_rcv_skb+0x219/0x490 [ 487.275258][ C1] netlink_unicast+0x758/0x8d0 [ 487.280111][ C1] page last free pid 5917 tgid 5917 stack trace: [ 487.286438][ C1] __free_frozen_pages+0xb14/0xce0 [ 487.291644][ C1] __slab_free+0x326/0x400 [ 487.296058][ C1] qlist_free_all+0x9a/0x140 [ 487.300712][ C1] kasan_quarantine_reduce+0x148/0x160 [ 487.306172][ C1] __kasan_slab_alloc+0x22/0x80 [ 487.311024][ C1] __kmalloc_noprof+0x224/0x4f0 [ 487.315880][ C1] tomoyo_encode+0x28b/0x550 [ 487.320489][ C1] tomoyo_realpath_from_path+0x58d/0x5d0 [ 487.326164][ C1] tomoyo_path_perm+0x213/0x4b0 [ 487.331044][ C1] tomoyo_path_symlink+0xa3/0xe0 [ 487.336011][ C1] security_path_symlink+0x177/0x380 [ 487.341486][ C1] do_symlinkat+0x107/0x3f0 [ 487.346006][ C1] __x64_sys_symlinkat+0x95/0xb0 [ 487.350953][ C1] do_syscall_64+0xf6/0x210 [ 487.355461][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.361368][ C1] [ 487.363698][ C1] Memory state around the buggy address: [ 487.369341][ C1] ffff88807ecfbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.377403][ C1] ffff88807ecfbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.385553][ C1] >ffff88807ecfc000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 487.393613][ C1] ^ [ 487.398978][ C1] ffff88807ecfc080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 487.407044][ C1] ffff88807ecfc100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 487.415103][ C1] ================================================================== [ 487.423263][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 487.430494][ C1] CPU: 1 UID: 0 PID: 15188 Comm: syz.3.3104 Not tainted 6.15.0-rc4-syzkaller-00995-g3e52667a9c32 #0 PREEMPT(full) [ 487.442761][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 487.452828][ C1] Call Trace: [ 487.456123][ C1] [ 487.458973][ C1] dump_stack_lvl+0x99/0x250 [ 487.463602][ C1] ? __asan_memcpy+0x40/0x70 [ 487.468202][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.473407][ C1] ? __pfx__printk+0x10/0x10 [ 487.478009][ C1] panic+0x2db/0x790 [ 487.481921][ C1] ? __pfx_panic+0x10/0x10 [ 487.486871][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 487.492777][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 487.498689][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 487.505116][ C1] ? print_memory_metadata+0x314/0x400 [ 487.510597][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 487.515714][ C1] check_panic_on_warn+0x89/0xb0 [ 487.520670][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 487.525788][ C1] end_report+0x78/0x160 [ 487.530213][ C1] kasan_report+0x129/0x150 [ 487.534725][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 487.539868][ C1] rose_timer_expiry+0x471/0x4b0 [ 487.544812][ C1] call_timer_fn+0x17b/0x5f0 [ 487.549430][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 487.554893][ C1] ? call_timer_fn+0xbe/0x5f0 [ 487.559580][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 487.564707][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.569917][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.575122][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 487.580584][ C1] __run_timer_base+0x61a/0x860 [ 487.585453][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 487.590887][ C1] ? lapic_next_event+0x11/0x20 [ 487.595776][ C1] ? clockevents_program_event+0x24d/0x360 [ 487.601619][ C1] run_timer_softirq+0xb7/0x180 [ 487.606592][ C1] handle_softirqs+0x283/0x870 [ 487.611374][ C1] ? do_softirq+0xec/0x180 [ 487.615828][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 487.621149][ C1] ? hash_netport4_resize+0x62e/0x1bf0 [ 487.626644][ C1] do_softirq+0xec/0x180 [ 487.630915][ C1] [ 487.633854][ C1] [ 487.636789][ C1] ? __pfx_do_softirq+0x10/0x10 [ 487.641680][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 487.647094][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 487.652323][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 487.658080][ C1] ? hash_netport4_resize+0x62e/0x1bf0 [ 487.663555][ C1] ? hash_netport4_resize+0x62e/0x1bf0 [ 487.669029][ C1] hash_netport4_resize+0x1195/0x1bf0 [ 487.674417][ C1] ? hash_netport4_resize+0x62e/0x1bf0 [ 487.679905][ C1] call_ad+0x44b/0xb00 [ 487.683983][ C1] ? __pfx_call_ad+0x10/0x10 [ 487.688592][ C1] ? __nla_parse+0x40/0x60 [ 487.693026][ C1] ip_set_ad+0x791/0x930 [ 487.697283][ C1] ? __pfx_ip_set_ad+0x10/0x10 [ 487.702055][ C1] ? __mutex_lock+0x330/0xe80 [ 487.706854][ C1] nfnetlink_rcv_msg+0xb4a/0x1130 [ 487.711897][ C1] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 487.717121][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 487.722617][ C1] ? __lock_acquire+0xaac/0xd20 [ 487.727492][ C1] netlink_rcv_skb+0x219/0x490 [ 487.732264][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 487.737846][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 487.743159][ C1] ? apparmor_capable+0x137/0x1b0 [ 487.748230][ C1] ? bpf_lsm_capable+0x9/0x20 [ 487.752951][ C1] ? security_capable+0x7e/0x2e0 [ 487.757928][ C1] nfnetlink_rcv+0x273/0x2530 [ 487.762640][ C1] ? kernel_text_address+0xa5/0xe0 [ 487.767781][ C1] ? __kernel_text_address+0xd/0x40 [ 487.773009][ C1] ? unwind_get_return_address+0x4d/0x90 [ 487.778663][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 487.784856][ C1] ? arch_stack_walk+0xfc/0x150 [ 487.789736][ C1] ? stack_trace_save+0x9c/0xe0 [ 487.794603][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 487.799737][ C1] ? stack_depot_save_flags+0x40/0x910 [ 487.805221][ C1] ? kasan_save_track+0x4f/0x80 [ 487.810088][ C1] ? kasan_save_track+0x3e/0x80 [ 487.814960][ C1] ? __lock_acquire+0xaac/0xd20 [ 487.819846][ C1] ? __lock_acquire+0xaac/0xd20 [ 487.824896][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.830114][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.835345][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 487.840582][ C1] netlink_unicast+0x758/0x8d0 [ 487.845381][ C1] netlink_sendmsg+0x805/0xb30 [ 487.850180][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.855537][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 487.860486][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 487.865870][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 487.871256][ C1] __sock_sendmsg+0x219/0x270 [ 487.875943][ C1] ____sys_sendmsg+0x505/0x830 [ 487.880722][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 487.886019][ C1] ? import_iovec+0x74/0xa0 [ 487.890536][ C1] ___sys_sendmsg+0x21f/0x2a0 [ 487.895407][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.900722][ C1] ? __fget_files+0x2a/0x420 [ 487.905427][ C1] ? __fget_files+0x3a0/0x420 [ 487.910124][ C1] __x64_sys_sendmsg+0x19b/0x260 [ 487.915083][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.920562][ C1] ? do_syscall_64+0xba/0x210 [ 487.925253][ C1] do_syscall_64+0xf6/0x210 [ 487.929762][ C1] ? clear_bhb_loop+0x45/0xa0 [ 487.934469][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.940366][ C1] RIP: 0033:0x7f22f138e969 [ 487.944789][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.964416][ C1] RSP: 002b:00007f22f2116038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.972928][ C1] RAX: ffffffffffffffda RBX: 00007f22f15b5fa0 RCX: 00007f22f138e969 [ 487.980994][ C1] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 487.988984][ C1] RBP: 00007f22f1410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 487.996956][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.005033][ C1] R13: 0000000000000000 R14: 00007f22f15b5fa0 R15: 00007ffe0ca071e8 [ 488.013021][ C1] [ 488.016444][ C1] Kernel Offset: disabled [ 488.020777][ C1] Rebooting in 86400 seconds..