last executing test programs: 42.632802782s ago: executing program 4 (id=29): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$rxrpc(0x21, 0x2, 0xa) (async) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB="02"], 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/'], 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB='/'], 0x20) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) ioctl(r3, 0x2, &(0x7f0000000140)="f6877f96c73e217cd21b2c06bbd469fe480c8f633d6280fb5f6e2c2ada3baa86de8cc0ac6a39d7b8faa08fe6a8c84a994a4d1f7f5b1b6bec8dea78c550b0f726b5ddc4a7bbe183583ffcbe60c49d57e7da06fef8394bc793a239bf9a37fc8ca0ef04b75debbb3f23eb93eb7e5bbe83d4715f454d0417e2e1de6a625d7532bb94f8241015572deeeed8d8064e4ccbad21ecac41aa768d3fa7bfa46699dda08f910ca8212f1432948052b2402fed5bd2c8da5268ea50dc3071a372b1bab3387eaadd9ee20ebad64ce06593e43cbf28cbe818c496755f74b77d4f9bbcf8673e40828d5d55d882ba7eeffc1539d4e2a9945b0d67f3de5758432dd9") (async) ioctl(r3, 0x2, &(0x7f0000000140)="f6877f96c73e217cd21b2c06bbd469fe480c8f633d6280fb5f6e2c2ada3baa86de8cc0ac6a39d7b8faa08fe6a8c84a994a4d1f7f5b1b6bec8dea78c550b0f726b5ddc4a7bbe183583ffcbe60c49d57e7da06fef8394bc793a239bf9a37fc8ca0ef04b75debbb3f23eb93eb7e5bbe83d4715f454d0417e2e1de6a625d7532bb94f8241015572deeeed8d8064e4ccbad21ecac41aa768d3fa7bfa46699dda08f910ca8212f1432948052b2402fed5bd2c8da5268ea50dc3071a372b1bab3387eaadd9ee20ebad64ce06593e43cbf28cbe818c496755f74b77d4f9bbcf8673e40828d5d55d882ba7eeffc1539d4e2a9945b0d67f3de5758432dd9") write(r6, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 42.365325531s ago: executing program 4 (id=31): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x2040000}, 0x4040000) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002020, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x1c}}, 0x8004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000101010300000000000000000206001959f8c1f883016e647618ff27a16516000c00198008000100ad23016de17fbdd687000080"], 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000001240)="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", 0x480}], 0x2}, 0x0) sendmsg$alg(r4, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='contention_end\x00', r5}, 0x18) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000001640)={0x8, 0x9, 0x9, 0x3, 0x200, 0x7, 0x8, 0x800}, &(0x7f0000000040)={0x401, 0x2, 0x1b4, 0x4, 0x1000, 0xf9, 0x1000, 0x381d930a}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 41.908050566s ago: executing program 4 (id=38): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1, 0x1}, {0x10, 0x110, 0x1}], 0x20}}], 0x1, 0x20000040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000940)="90d12f2ac4dbb2fd2e50dbb561941ad8862572316bb93704cb501db6db96bf413cc3dd3383f80871c56dd1a19ab57348c7623b86984db565b0dc09f7daa4b51056b0d89a065ba9029e8c7f17f936142d4736ae6d64f145ab1b75e5821d6f29c212fd67c08d5398fdec40b6a650691d4739da3022888a68b711101ee577af416b", 0x80}], 0x1}}], 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x61, 0x0, 0x29) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x53, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r7], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a", 0x0, 0xfffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x20, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xd600, [0x1]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='b 0:* r'], 0xa) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[], 0x48}}, 0x20008004) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000fc0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f1000000000000000000000007000000ffdeff94000000d3031a00200000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)="9ecec88197fc5e28df8b0b8a14eab34e24534d371f98c9f04341d649cf6b8fcdddb70b8ee65a6f654972d289f061f272bf8ecdb74a511eb150dbbd51508b6475ee581577d0ec8ff9cf671db264e210824d58890684c02117cf464b4722466f3b586b7b5136d1dd5a7513618caa09dbc5e784d8a02840d7b528f0b3a1d8854c992bf3e8c142b5d53e1ad60f1ea3ce17f728292645eaa5325a13362f68f8f47767e1c057fd") getsockopt(r0, 0x3, 0x6, &(0x7f0000000240)=""/148, &(0x7f00000003c0)=0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 25.822069748s ago: executing program 4 (id=38): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1, 0x1}, {0x10, 0x110, 0x1}], 0x20}}], 0x1, 0x20000040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000940)="90d12f2ac4dbb2fd2e50dbb561941ad8862572316bb93704cb501db6db96bf413cc3dd3383f80871c56dd1a19ab57348c7623b86984db565b0dc09f7daa4b51056b0d89a065ba9029e8c7f17f936142d4736ae6d64f145ab1b75e5821d6f29c212fd67c08d5398fdec40b6a650691d4739da3022888a68b711101ee577af416b", 0x80}], 0x1}}], 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x61, 0x0, 0x29) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x53, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r7], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a", 0x0, 0xfffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x20, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xd600, [0x1]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='b 0:* r'], 0xa) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[], 0x48}}, 0x20008004) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000fc0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f1000000000000000000000007000000ffdeff94000000d3031a00200000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)="9ecec88197fc5e28df8b0b8a14eab34e24534d371f98c9f04341d649cf6b8fcdddb70b8ee65a6f654972d289f061f272bf8ecdb74a511eb150dbbd51508b6475ee581577d0ec8ff9cf671db264e210824d58890684c02117cf464b4722466f3b586b7b5136d1dd5a7513618caa09dbc5e784d8a02840d7b528f0b3a1d8854c992bf3e8c142b5d53e1ad60f1ea3ce17f728292645eaa5325a13362f68f8f47767e1c057fd") getsockopt(r0, 0x3, 0x6, &(0x7f0000000240)=""/148, &(0x7f00000003c0)=0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 11.900934022s ago: executing program 4 (id=38): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1, 0x1}, {0x10, 0x110, 0x1}], 0x20}}], 0x1, 0x20000040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000940)="90d12f2ac4dbb2fd2e50dbb561941ad8862572316bb93704cb501db6db96bf413cc3dd3383f80871c56dd1a19ab57348c7623b86984db565b0dc09f7daa4b51056b0d89a065ba9029e8c7f17f936142d4736ae6d64f145ab1b75e5821d6f29c212fd67c08d5398fdec40b6a650691d4739da3022888a68b711101ee577af416b", 0x80}], 0x1}}], 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x61, 0x0, 0x29) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x53, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r7], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a", 0x0, 0xfffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x20, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xd600, [0x1]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='b 0:* r'], 0xa) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[], 0x48}}, 0x20008004) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000fc0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f1000000000000000000000007000000ffdeff94000000d3031a00200000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)="9ecec88197fc5e28df8b0b8a14eab34e24534d371f98c9f04341d649cf6b8fcdddb70b8ee65a6f654972d289f061f272bf8ecdb74a511eb150dbbd51508b6475ee581577d0ec8ff9cf671db264e210824d58890684c02117cf464b4722466f3b586b7b5136d1dd5a7513618caa09dbc5e784d8a02840d7b528f0b3a1d8854c992bf3e8c142b5d53e1ad60f1ea3ce17f728292645eaa5325a13362f68f8f47767e1c057fd") getsockopt(r0, 0x3, 0x6, &(0x7f0000000240)=""/148, &(0x7f00000003c0)=0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 2.590200402s ago: executing program 2 (id=400): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x64, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10) recvfrom(r0, 0x0, 0x0, 0x40000777, 0x0, 0x0) 2.407199347s ago: executing program 2 (id=403): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0xfffe, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.790379113s ago: executing program 2 (id=411): r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x2c020400) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x70bd25, 0x25dfdbfd, {0x2, 0x20, 0x0, 0xcb, r3}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_RT_PRIORITY={0x8, 0x9, 0x103}]}, 0x28}}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x803, 0x84) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.646090011s ago: executing program 1 (id=414): recvmmsg(0xffffffffffffffff, &(0x7f0000004700)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f00000019c0)=""/190, 0xbe}], 0x1}, 0x308000}], 0x1, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 1.645142591s ago: executing program 2 (id=415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r3, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r4, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) 1.597091285s ago: executing program 1 (id=416): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 1.574137307s ago: executing program 2 (id=417): r0 = socket$inet6(0xa, 0x1, 0x100) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f000000ff00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000018c0)='r', 0x1}], 0x1}}], 0x1, 0x4000800) 1.404898021s ago: executing program 1 (id=418): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 1.330021608s ago: executing program 1 (id=419): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3b8, 0xffffff80, 0x178, 0x0, 0x178, 0x518, 0x22b, 0x258, 0x518, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xa8, 0xc8, 0x340, {0x1e0002a8, 0x7203000000000000}}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast2, @remote, [], [], 'team_slave_1\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140000006a"], 0x14}], 0x1}, 0x0) 1.28805976s ago: executing program 1 (id=420): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 1.140802614s ago: executing program 3 (id=422): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6312, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x200000000200}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) 1.108823453s ago: executing program 0 (id=423): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) 1.086681776s ago: executing program 4 (id=38): r0 = socket$can_j1939(0x1d, 0x2, 0x7) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg(r1, &(0x7f0000004440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001840)=[{0x10, 0x1, 0x1}, {0x10, 0x110, 0x1}], 0x20}}], 0x1, 0x20000040) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000940)="90d12f2ac4dbb2fd2e50dbb561941ad8862572316bb93704cb501db6db96bf413cc3dd3383f80871c56dd1a19ab57348c7623b86984db565b0dc09f7daa4b51056b0d89a065ba9029e8c7f17f936142d4736ae6d64f145ab1b75e5821d6f29c212fd67c08d5398fdec40b6a650691d4739da3022888a68b711101ee577af416b", 0x80}], 0x1}}], 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0200000002"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x61, 0x0, 0x29) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x53, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r7], 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a", 0x0, 0xfffffffe, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x20, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x3, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0xd600, [0x1]}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='b 0:* r'], 0xa) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[], 0x48}}, 0x20008004) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000fc0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000f1000000000000000000000007000000ffdeff94000000d3031a00200000000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x118, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) ioctl$sock_proto_private(0xffffffffffffffff, 0x89ed, &(0x7f0000000080)="9ecec88197fc5e28df8b0b8a14eab34e24534d371f98c9f04341d649cf6b8fcdddb70b8ee65a6f654972d289f061f272bf8ecdb74a511eb150dbbd51508b6475ee581577d0ec8ff9cf671db264e210824d58890684c02117cf464b4722466f3b586b7b5136d1dd5a7513618caa09dbc5e784d8a02840d7b528f0b3a1d8854c992bf3e8c142b5d53e1ad60f1ea3ce17f728292645eaa5325a13362f68f8f47767e1c057fd") getsockopt(r0, 0x3, 0x6, &(0x7f0000000240)=""/148, &(0x7f00000003c0)=0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) 1.008913668s ago: executing program 3 (id=424): socket$l2tp(0x2, 0x2, 0x73) recvmsg(0xffffffffffffffff, 0x0, 0x10002) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2d, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 416.984337ms ago: executing program 0 (id=425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r3, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r5, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) 416.569598ms ago: executing program 1 (id=426): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="440000001000010425bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800030004"], 0x44}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 414.988191ms ago: executing program 2 (id=427): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r4, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 412.229141ms ago: executing program 3 (id=428): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 274.966612ms ago: executing program 0 (id=429): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x17, 0x0, 0x2c) 264.445267ms ago: executing program 3 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000c4100810979a2d3ed26fe"], 0x30}}, 0x0) 140.950174ms ago: executing program 0 (id=431): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x0, 0xdc0, 0x4000, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x0, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x0, 0x13}, 0x22) 140.742496ms ago: executing program 3 (id=432): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f00000008c0)=[{&(0x7f0000000580)='`', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 99.182106ms ago: executing program 0 (id=433): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0xca, &(0x7f0000000340)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @multicast2, {[@cipso={0x86, 0x2a, 0x0, [{0x0, 0xd, "5e000000ff000000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @broadcast, @loopback, @multicast2]}, @cipso={0x86, 0x38, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x1, 0xa, "2189ea43a2149b84"}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x56, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0xfffffffd}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7c8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x9, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev={0xac, 0x14, 0x14, 0xc}, @in6=@remote, @in6=@private2, @in=@local, 0xff, 0x1, 0x0, 0x2, 0x2, 0xa}]}]}, 0xa0}}, 0x0) 532.41µs ago: executing program 0 (id=434): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) 0s ago: executing program 3 (id=435): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000910000000011c00000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020001000000000000000702000000ff05000500000000000a00000000000000ff17000580ffffffff8000000000000100000000000000000200080008"], 0x80}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 66.374636][ T5821] cgroup: Unknown subsys name 'net' [ 66.547502][ T5821] cgroup: Unknown subsys name 'cpuset' [ 66.556673][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.915868][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.359178][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.361463][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.384737][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.393641][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.401354][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.409221][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.416510][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.424763][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.432941][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.443955][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.452707][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.462130][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.469653][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.477862][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.479519][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.499947][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.511301][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.513958][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.519274][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.555193][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.564176][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.573896][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.585314][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.604002][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.611826][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.020505][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 71.248111][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 71.357432][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.365523][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.372812][ T5832] bridge_slave_0: entered allmulticast mode [ 71.380355][ T5832] bridge_slave_0: entered promiscuous mode [ 71.430544][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 71.448459][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.456660][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.464062][ T5832] bridge_slave_1: entered allmulticast mode [ 71.471806][ T5832] bridge_slave_1: entered promiscuous mode [ 71.500213][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.508495][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.557389][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 71.584018][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 71.621071][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.686442][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.720744][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.728064][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.735561][ T5840] bridge_slave_0: entered allmulticast mode [ 71.742674][ T5840] bridge_slave_0: entered promiscuous mode [ 71.766361][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.773888][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.781035][ T5848] bridge_slave_0: entered allmulticast mode [ 71.788249][ T5848] bridge_slave_0: entered promiscuous mode [ 71.820197][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.827491][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.835461][ T5840] bridge_slave_1: entered allmulticast mode [ 71.842381][ T5840] bridge_slave_1: entered promiscuous mode [ 71.868498][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.875809][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.883000][ T5848] bridge_slave_1: entered allmulticast mode [ 71.890509][ T5848] bridge_slave_1: entered promiscuous mode [ 71.914825][ T5832] team0: Port device team_slave_0 added [ 71.978938][ T5832] team0: Port device team_slave_1 added [ 72.011660][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.018963][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.027524][ T5845] bridge_slave_0: entered allmulticast mode [ 72.034775][ T5845] bridge_slave_0: entered promiscuous mode [ 72.076048][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.085913][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.093049][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.100819][ T5845] bridge_slave_1: entered allmulticast mode [ 72.108015][ T5845] bridge_slave_1: entered promiscuous mode [ 72.117442][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.130175][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.154076][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.161045][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.187412][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.201231][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.276581][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.283791][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.310163][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.345890][ T5848] team0: Port device team_slave_0 added [ 72.351979][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.360306][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.367670][ T5831] bridge_slave_0: entered allmulticast mode [ 72.375791][ T5831] bridge_slave_0: entered promiscuous mode [ 72.395896][ T5840] team0: Port device team_slave_0 added [ 72.404623][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.415854][ T5848] team0: Port device team_slave_1 added [ 72.423944][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.433277][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.440674][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.448688][ T5831] bridge_slave_1: entered allmulticast mode [ 72.455899][ T5831] bridge_slave_1: entered promiscuous mode [ 72.480495][ T5840] team0: Port device team_slave_1 added [ 72.571535][ T5845] team0: Port device team_slave_0 added [ 72.587660][ T5832] hsr_slave_0: entered promiscuous mode [ 72.594278][ T5832] hsr_slave_1: entered promiscuous mode [ 72.614223][ T5834] Bluetooth: hci2: command tx timeout [ 72.614672][ T5842] Bluetooth: hci1: command tx timeout [ 72.619902][ T5834] Bluetooth: hci0: command tx timeout [ 72.639964][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.647269][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.673579][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.686468][ T5845] team0: Port device team_slave_1 added [ 72.703515][ T55] Bluetooth: hci3: command tx timeout [ 72.709081][ T5834] Bluetooth: hci4: command tx timeout [ 72.718213][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.728218][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.735862][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.762198][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.774660][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.781615][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.807833][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.841201][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.850995][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.858042][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.884273][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.920055][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.927137][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.953383][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.007429][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.014661][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.041004][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.112213][ T5831] team0: Port device team_slave_0 added [ 73.124852][ T5848] hsr_slave_0: entered promiscuous mode [ 73.131121][ T5848] hsr_slave_1: entered promiscuous mode [ 73.137424][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.145226][ T5848] Cannot create hsr debugfs directory [ 73.155712][ T5840] hsr_slave_0: entered promiscuous mode [ 73.161950][ T5840] hsr_slave_1: entered promiscuous mode [ 73.168221][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.175926][ T5840] Cannot create hsr debugfs directory [ 73.209807][ T5831] team0: Port device team_slave_1 added [ 73.240634][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.247840][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.274668][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.316866][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.324070][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.350543][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.380227][ T5845] hsr_slave_0: entered promiscuous mode [ 73.386590][ T5845] hsr_slave_1: entered promiscuous mode [ 73.394013][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.401595][ T5845] Cannot create hsr debugfs directory [ 73.562049][ T5831] hsr_slave_0: entered promiscuous mode [ 73.568811][ T5831] hsr_slave_1: entered promiscuous mode [ 73.576056][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.583676][ T5831] Cannot create hsr debugfs directory [ 73.951408][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.966638][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.978755][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.998806][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.045054][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.061598][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.072147][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.087929][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.164530][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.198439][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.209490][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.220553][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.279862][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.321033][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.333279][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.367991][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.469890][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.480388][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.518570][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.525654][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.542994][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.586263][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.626261][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.668125][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.675486][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.694530][ T5834] Bluetooth: hci0: command tx timeout [ 74.694550][ T55] Bluetooth: hci1: command tx timeout [ 74.694558][ T5842] Bluetooth: hci2: command tx timeout [ 74.724435][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.731545][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.746953][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.771780][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.778965][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.792360][ T5842] Bluetooth: hci3: command tx timeout [ 74.798306][ T5834] Bluetooth: hci4: command tx timeout [ 74.849697][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.873695][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.880814][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.910147][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.922418][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.959625][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.966800][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.007318][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.014534][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.052549][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.126780][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.134035][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.152126][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.159430][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.267392][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.318800][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.341620][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.406896][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.414097][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.461947][ T5845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.479981][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.498417][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.506155][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.578878][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.601070][ T5832] veth0_vlan: entered promiscuous mode [ 75.622395][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.657947][ T5832] veth1_vlan: entered promiscuous mode [ 75.781387][ T5832] veth0_macvtap: entered promiscuous mode [ 75.825429][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.840535][ T5832] veth1_macvtap: entered promiscuous mode [ 75.877806][ T5840] veth0_vlan: entered promiscuous mode [ 75.925269][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.950817][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.970937][ T5848] veth0_vlan: entered promiscuous mode [ 75.988462][ T5840] veth1_vlan: entered promiscuous mode [ 76.007111][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.017877][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.029282][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.040328][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.074326][ T5848] veth1_vlan: entered promiscuous mode [ 76.128705][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.181588][ T5840] veth0_macvtap: entered promiscuous mode [ 76.199169][ T5840] veth1_macvtap: entered promiscuous mode [ 76.251092][ T5848] veth0_macvtap: entered promiscuous mode [ 76.277408][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.289131][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.301821][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.316117][ T5848] veth1_macvtap: entered promiscuous mode [ 76.358662][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.369449][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.382693][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.401232][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.411135][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.415258][ T5845] veth0_vlan: entered promiscuous mode [ 76.433700][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.442432][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.451912][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.462106][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.482701][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.493488][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.503298][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.513892][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.526963][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.575921][ T5831] veth0_vlan: entered promiscuous mode [ 76.588937][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.599781][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.609868][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.621084][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.632136][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.646902][ T5845] veth1_vlan: entered promiscuous mode [ 76.659239][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.667269][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.669947][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.690162][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.699805][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.708587][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.766475][ T5831] veth1_vlan: entered promiscuous mode [ 76.774195][ T5842] Bluetooth: hci0: command tx timeout [ 76.779689][ T5834] Bluetooth: hci2: command tx timeout [ 76.785808][ T5842] Bluetooth: hci1: command tx timeout [ 76.854332][ T5834] Bluetooth: hci4: command tx timeout [ 76.859783][ T5834] Bluetooth: hci3: command tx timeout [ 76.892613][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.918412][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.931810][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.966146][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.976207][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.984436][ T5845] veth0_macvtap: entered promiscuous mode [ 77.011309][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.033399][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.068198][ T5845] veth1_macvtap: entered promiscuous mode [ 77.080404][ T30] audit: type=1107 audit(1744950262.556:2): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 77.089753][ T5831] veth0_macvtap: entered promiscuous mode [ 77.115323][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.123154][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.132650][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.136594][ T5918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 77.161641][ T5831] veth1_macvtap: entered promiscuous mode [ 77.186208][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.205957][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.216999][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.227476][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.237960][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.248549][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.264310][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.304957][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.316428][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.326413][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.337014][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.346925][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.358902][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.370779][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.392278][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.429698][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.457008][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.468496][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.534153][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.566855][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.579328][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.590753][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.603867][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.615399][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.625959][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.636597][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.662862][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.671314][ T5929] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 77.719732][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.730635][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.741718][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.752587][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.764313][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.775705][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.787187][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.800943][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.819442][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.849720][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.877482][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.889351][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.900425][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.977020][ T5926] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.005578][ T5934] FAULT_INJECTION: forcing a failure. [ 78.005578][ T5934] name failslab, interval 1, probability 0, space 0, times 1 [ 78.057220][ T5934] CPU: 1 UID: 0 PID: 5934 Comm: syz.2.7 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 78.057249][ T5934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.057265][ T5934] Call Trace: [ 78.057272][ T5934] [ 78.057280][ T5934] dump_stack_lvl+0x241/0x360 [ 78.057317][ T5934] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.057338][ T5934] ? __pfx__printk+0x10/0x10 [ 78.057364][ T5934] ? __pfx___might_resched+0x10/0x10 [ 78.057394][ T5934] should_fail_ex+0x424/0x570 [ 78.057418][ T5934] should_failslab+0xac/0x100 [ 78.057436][ T5934] kmem_cache_alloc_noprof+0x78/0x390 [ 78.057452][ T5934] ? ima_inode_get+0xf3/0x4e0 [ 78.057476][ T5934] ima_inode_get+0xf3/0x4e0 [ 78.057502][ T5934] process_measurement+0x4bf/0x1fe0 [ 78.057529][ T5934] ? rcu_is_watching+0x15/0xb0 [ 78.057557][ T5934] ? __pfx_process_measurement+0x10/0x10 [ 78.057576][ T5934] ? rcu_read_unlock_special+0x49b/0x570 [ 78.057600][ T5934] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 78.057659][ T5934] ? rcu_read_lock_any_held+0xbb/0x160 [ 78.057677][ T5934] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 78.057698][ T5934] ima_file_mmap+0x1cf/0x220 [ 78.057718][ T5934] ? __pfx_ima_file_mmap+0x10/0x10 [ 78.057734][ T5934] ? end_current_label_crit_section+0x151/0x180 [ 78.057750][ T5934] ? common_file_perm+0x1a6/0x210 [ 78.057768][ T5934] security_mmap_file+0x7aa/0xa40 [ 78.057783][ T5934] vm_mmap_pgoff+0x151/0x530 [ 78.057803][ T5934] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 78.057818][ T5934] ? __fget_files+0x2a/0x420 [ 78.057831][ T5934] ? __fget_files+0x39d/0x420 [ 78.057841][ T5934] ? __fget_files+0x2a/0x420 [ 78.057855][ T5934] ksys_mmap_pgoff+0x4ee/0x720 [ 78.057869][ T5934] ? __x64_sys_mmap+0x7f/0x140 [ 78.057885][ T5934] do_syscall_64+0xf3/0x210 [ 78.057899][ T5934] ? clear_bhb_loop+0x45/0xa0 [ 78.057914][ T5934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.057926][ T5934] RIP: 0033:0x7f176638e169 [ 78.057943][ T5934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.057953][ T5934] RSP: 002b:00007f1767297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 78.057968][ T5934] RAX: ffffffffffffffda RBX: 00007f17665b5fa0 RCX: 00007f176638e169 [ 78.057977][ T5934] RDX: 000000000100000c RSI: 0000000000003000 RDI: 00002000007a6000 [ 78.057985][ T5934] RBP: 00007f1767297090 R08: 0000000000000003 R09: 0000000000000000 [ 78.057993][ T5934] R10: 0000000000022051 R11: 0000000000000246 R12: 0000000000000001 [ 78.058001][ T5934] R13: 0000000000000000 R14: 00007f17665b5fa0 R15: 00007ffc72ff2068 [ 78.058022][ T5934] [ 78.403230][ T5926] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.472339][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.530679][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.581034][ T5926] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.726909][ T5948] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 78.732032][ T5926] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.757295][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.769130][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.841984][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.856929][ T5834] Bluetooth: hci2: command tx timeout [ 78.862380][ T5834] Bluetooth: hci1: command tx timeout [ 78.868066][ T5842] Bluetooth: hci0: command tx timeout [ 78.887200][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.935116][ T5834] Bluetooth: hci3: command tx timeout [ 78.940775][ T5842] Bluetooth: hci4: command tx timeout [ 78.976003][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.013975][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.098425][ T5952] syz.2.12 (5952) used obsolete PPPIOCDETACH ioctl [ 79.788476][ T5975] FAULT_INJECTION: forcing a failure. [ 79.788476][ T5975] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 79.808961][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.2.18 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 79.808995][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 79.809004][ T5975] Call Trace: [ 79.809011][ T5975] [ 79.809018][ T5975] dump_stack_lvl+0x241/0x360 [ 79.809049][ T5975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.809070][ T5975] ? __pfx__printk+0x10/0x10 [ 79.809103][ T5975] should_fail_ex+0x424/0x570 [ 79.809127][ T5975] _copy_to_user+0x31/0xb0 [ 79.809153][ T5975] simple_read_from_buffer+0xc4/0x170 [ 79.809180][ T5975] proc_fail_nth_read+0x1ef/0x260 [ 79.809207][ T5975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.809231][ T5975] ? rw_verify_area+0x246/0x630 [ 79.809249][ T5975] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 79.809274][ T5975] vfs_read+0x21f/0xb90 [ 79.809300][ T5975] ? __pfx___mutex_lock+0x10/0x10 [ 79.809316][ T5975] ? __pfx_vfs_read+0x10/0x10 [ 79.809339][ T5975] ? __fget_files+0x2a/0x420 [ 79.809356][ T5975] ? __fget_files+0x39d/0x420 [ 79.809369][ T5975] ? __fget_files+0x2a/0x420 [ 79.809393][ T5975] ksys_read+0x19d/0x2d0 [ 79.809416][ T5975] ? __pfx_ksys_read+0x10/0x10 [ 79.809442][ T5975] ? do_syscall_64+0xb6/0x210 [ 79.809462][ T5975] do_syscall_64+0xf3/0x210 [ 79.809478][ T5975] ? clear_bhb_loop+0x45/0xa0 [ 79.809498][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.809513][ T5975] RIP: 0033:0x7f176638cb7c [ 79.809528][ T5975] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 79.809540][ T5975] RSP: 002b:00007f1767276030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 79.809558][ T5975] RAX: ffffffffffffffda RBX: 00007f17665b6080 RCX: 00007f176638cb7c [ 79.809570][ T5975] RDX: 000000000000000f RSI: 00007f17672760a0 RDI: 000000000000000a [ 79.809580][ T5975] RBP: 00007f1767276090 R08: 0000000000000000 R09: 0000000000000000 [ 79.809590][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.809599][ T5975] R13: 0000000000000000 R14: 00007f17665b6080 R15: 00007ffc72ff2068 [ 79.809627][ T5975] [ 80.258327][ T5987] netlink: 1 bytes leftover after parsing attributes in process `syz.2.23'. [ 80.506844][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26'. [ 81.208873][ T6027] netlink: 'syz.2.32': attribute type 10 has an invalid length. [ 81.272221][ T6027] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.469708][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.490897][ T6042] x_tables: unsorted entry at hook 3 [ 81.569717][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.578040][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.777134][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.802116][ T6027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.977570][ T6027] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.003975][ T6027] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.043414][ T6027] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.052342][ T6027] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.369006][ T1140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.391510][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.400980][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.412318][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.424762][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.432518][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.461629][ T5926] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.506131][ T5926] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.551717][ T1140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.569431][ T6060] syz.1.41 uses obsolete (PF_INET,SOCK_PACKET) [ 82.627282][ T6064] netlink: 'syz.3.43': attribute type 1 has an invalid length. [ 82.677872][ T5926] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.753192][ T1140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.798032][ T5926] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.813057][ T6069] netlink: 20 bytes leftover after parsing attributes in process `syz.3.44'. [ 82.975120][ T1140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.000039][ T5886] IPVS: starting estimator thread 0... [ 83.115604][ T6077] IPVS: using max 28 ests per chain, 67200 per kthread [ 83.247641][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 83.471224][ T6097] Driver unsupported XDP return value 0 on prog (id 20) dev N/A, expect packet loss! [ 83.666783][ T6107] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 83.725097][ T6111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.57'. [ 83.755248][ T6100] pim6reg: entered allmulticast mode [ 83.768812][ T6103] team0: entered allmulticast mode [ 83.799947][ T6103] team_slave_0: entered allmulticast mode [ 83.817897][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.57'. [ 83.853206][ T6103] team_slave_1: entered allmulticast mode [ 83.872357][ T6105] pim6reg: left allmulticast mode [ 83.894467][ T6105] team0: left allmulticast mode [ 83.902636][ T6105] team_slave_0: left allmulticast mode [ 83.916505][ T6105] team_slave_1: left allmulticast mode [ 83.962598][ T1140] bridge_slave_1: left allmulticast mode [ 83.976277][ T1140] bridge_slave_1: left promiscuous mode [ 83.983624][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.61'. [ 83.993962][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.011530][ T6115] netlink: 'syz.2.59': attribute type 10 has an invalid length. [ 84.024868][ T6115] netlink: 40 bytes leftover after parsing attributes in process `syz.2.59'. [ 84.035603][ T1140] bridge_slave_0: left allmulticast mode [ 84.042028][ T1140] bridge_slave_0: left promiscuous mode [ 84.051468][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.398790][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.410952][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.421741][ T1140] bond0 (unregistering): Released all slaves [ 84.458678][ T6115] veth0_vlan: left promiscuous mode [ 84.477644][ T6115] veth0_vlan: entered promiscuous mode [ 84.486709][ T6115] veth0_vlan: entered allmulticast mode [ 84.505577][ T6115] bridge0: port 3(veth0_vlan) entered blocking state [ 84.513303][ T6115] bridge0: port 3(veth0_vlan) entered disabled state [ 84.537217][ T6115] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 84.540590][ T5842] Bluetooth: hci3: command tx timeout [ 84.598213][ T6053] chnl_net:caif_netlink_parms(): no params data found [ 85.019410][ T6148] netlink: 'syz.1.67': attribute type 10 has an invalid length. [ 85.190133][ T6157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.69'. [ 85.497254][ T6175] FAULT_INJECTION: forcing a failure. [ 85.497254][ T6175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.533442][ T6175] CPU: 1 UID: 0 PID: 6175 Comm: syz.3.71 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 85.533467][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 85.533476][ T6175] Call Trace: [ 85.533482][ T6175] [ 85.533498][ T6175] dump_stack_lvl+0x241/0x360 [ 85.533527][ T6175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.533547][ T6175] ? __pfx__printk+0x10/0x10 [ 85.533581][ T6175] should_fail_ex+0x424/0x570 [ 85.533605][ T6175] _copy_from_iter+0x211/0x1c70 [ 85.533628][ T6175] ? __mutex_lock+0x380/0x10c0 [ 85.533654][ T6175] ? alloc_pages_mpol+0x4e6/0x690 [ 85.533669][ T6175] ? __pfx__copy_from_iter+0x10/0x10 [ 85.533693][ T6175] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 85.533706][ T6175] ? aa_file_perm+0x3f1/0xf60 [ 85.533733][ T6175] ? page_copy_sane+0x46/0x260 [ 85.533756][ T6175] copy_page_from_iter+0x7a/0x100 [ 85.533781][ T6175] anon_pipe_write+0x784/0x14f0 [ 85.533829][ T6175] ? __pfx_anon_pipe_write+0x10/0x10 [ 85.533851][ T6175] ? common_file_perm+0x1a6/0x210 [ 85.533875][ T6175] ? bpf_lsm_file_permission+0x9/0x10 [ 85.533905][ T6175] vfs_write+0x70f/0xd10 [ 85.533934][ T6175] ? __pfx_anon_pipe_write+0x10/0x10 [ 85.533959][ T6175] ? __pfx_vfs_write+0x10/0x10 [ 85.533983][ T6175] ? __fget_files+0x2a/0x420 [ 85.534002][ T6175] ? __fget_files+0x2a/0x420 [ 85.534027][ T6175] ksys_write+0x19d/0x2d0 [ 85.534051][ T6175] ? __pfx_ksys_write+0x10/0x10 [ 85.534078][ T6175] ? do_syscall_64+0xb6/0x210 [ 85.534096][ T6175] do_syscall_64+0xf3/0x210 [ 85.534112][ T6175] ? clear_bhb_loop+0x45/0xa0 [ 85.534131][ T6175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.534146][ T6175] RIP: 0033:0x7f284238e169 [ 85.534161][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.534173][ T6175] RSP: 002b:00007f28431c3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 85.534190][ T6175] RAX: ffffffffffffffda RBX: 00007f28425b6080 RCX: 00007f284238e169 [ 85.534201][ T6175] RDX: 0000000000010448 RSI: 0000200000003100 RDI: 0000000000000006 [ 85.534211][ T6175] RBP: 00007f28431c3090 R08: 0000000000000000 R09: 0000000000000000 [ 85.534221][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.534231][ T6175] R13: 0000000000000000 R14: 00007f28425b6080 R15: 00007ffca12a8398 [ 85.534261][ T6175] [ 85.910681][ T1140] hsr_slave_0: left promiscuous mode [ 86.001011][ T1140] hsr_slave_1: left promiscuous mode [ 86.007260][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.014967][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.038225][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.046254][ T6187] netlink: 'syz.2.72': attribute type 10 has an invalid length. [ 86.054718][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.091357][ T1140] veth1_macvtap: left promiscuous mode [ 86.097370][ T1140] veth0_macvtap: left promiscuous mode [ 86.105765][ T1140] veth1_vlan: left promiscuous mode [ 86.111181][ T1140] veth0_vlan: left promiscuous mode [ 86.616464][ T5842] Bluetooth: hci3: command tx timeout [ 86.653779][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 86.686557][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 86.866741][ T882] cfg80211: failed to load regulatory.db [ 86.991677][ T6045] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.000770][ T6045] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.013737][ T5904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.158365][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.192164][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.199899][ T6053] bridge_slave_0: entered allmulticast mode [ 87.208844][ T6053] bridge_slave_0: entered promiscuous mode [ 87.238701][ T6203] netlink: 20 bytes leftover after parsing attributes in process `syz.3.78'. [ 87.249043][ T6205] FAULT_INJECTION: forcing a failure. [ 87.249043][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 87.271777][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.1.79 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 87.271801][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 87.271810][ T6205] Call Trace: [ 87.271817][ T6205] [ 87.271825][ T6205] dump_stack_lvl+0x241/0x360 [ 87.271852][ T6205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.271870][ T6205] ? __pfx__printk+0x10/0x10 [ 87.271894][ T6205] ? __pfx___might_resched+0x10/0x10 [ 87.271943][ T6205] should_fail_ex+0x424/0x570 [ 87.271967][ T6205] should_failslab+0xac/0x100 [ 87.271986][ T6205] __kvmalloc_node_noprof+0x170/0x5a0 [ 87.272003][ T6205] ? alloc_netdev_mqs+0xce7/0x1210 [ 87.272021][ T6205] ? alloc_netdev_mqs+0xc7c/0x1210 [ 87.272043][ T6205] alloc_netdev_mqs+0xce7/0x1210 [ 87.272074][ T6205] rtnl_create_link+0x2f4/0xc90 [ 87.272098][ T6205] rtnl_newlink_create+0x2f2/0xc30 [ 87.272113][ T6205] ? __mutex_lock+0xbe3/0x10c0 [ 87.272134][ T6205] ? __mutex_lock+0x5f3/0x10c0 [ 87.272147][ T6205] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 87.272163][ T6205] ? __pfx___mutex_lock+0x10/0x10 [ 87.272186][ T6205] ? ns_capable+0x8a/0xf0 [ 87.272211][ T6205] rtnl_newlink+0x18b0/0x1fe0 [ 87.272246][ T6205] ? __pfx_rtnl_newlink+0x10/0x10 [ 87.272264][ T6205] ? dev_hard_start_xmit+0x2d9/0x830 [ 87.272279][ T6205] ? __dev_queue_xmit+0x1b80/0x3f60 [ 87.272296][ T6205] ? __netlink_deliver_tap+0x561/0x7f0 [ 87.272315][ T6205] ? netlink_deliver_tap+0x19d/0x1b0 [ 87.272331][ T6205] ? netlink_unicast+0x7c6/0x9a0 [ 87.272346][ T6205] ? netlink_sendmsg+0x8c3/0xcd0 [ 87.272363][ T6205] ? __sock_sendmsg+0x221/0x270 [ 87.272386][ T6205] ? ____sys_sendmsg+0x523/0x860 [ 87.272401][ T6205] ? __sys_sendmsg+0x271/0x360 [ 87.272415][ T6205] ? do_syscall_64+0xf3/0x210 [ 87.272428][ T6205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.272477][ T6205] ? kasan_quarantine_put+0xdc/0x230 [ 87.272495][ T6205] ? lockdep_hardirqs_on+0x9d/0x150 [ 87.272520][ T6205] ? nlmon_xmit+0xaf/0x100 [ 87.272543][ T6205] ? __local_bh_enable_ip+0x168/0x200 [ 87.272564][ T6205] ? lockdep_hardirqs_on+0x9d/0x150 [ 87.272592][ T6205] ? aa_get_newest_label+0x101/0x6f0 [ 87.272615][ T6205] ? __lock_acquire+0xad5/0xd80 [ 87.272652][ T6205] ? __pfx_rtnl_newlink+0x10/0x10 [ 87.272675][ T6205] rtnetlink_rcv_msg+0x80f/0xd70 [ 87.272694][ T6205] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 87.272718][ T6205] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.272746][ T6205] ? ref_tracker_free+0x63e/0x7e0 [ 87.272771][ T6205] netlink_rcv_skb+0x208/0x480 [ 87.272793][ T6205] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.272820][ T6205] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.272857][ T6205] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.272881][ T6205] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.272906][ T6205] netlink_unicast+0x7f8/0x9a0 [ 87.272935][ T6205] ? __pfx_netlink_unicast+0x10/0x10 [ 87.272957][ T6205] ? skb_put+0x114/0x1f0 [ 87.272977][ T6205] netlink_sendmsg+0x8c3/0xcd0 [ 87.273009][ T6205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.273036][ T6205] ? aa_sock_msg_perm+0x91/0x160 [ 87.273069][ T6205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.273089][ T6205] __sock_sendmsg+0x221/0x270 [ 87.273114][ T6205] ____sys_sendmsg+0x523/0x860 [ 87.273141][ T6205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.273156][ T6205] ? __fget_files+0x2a/0x420 [ 87.273174][ T6205] ? __fget_files+0x2a/0x420 [ 87.273199][ T6205] __sys_sendmsg+0x271/0x360 [ 87.273223][ T6205] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.273290][ T6205] ? do_syscall_64+0xb6/0x210 [ 87.273308][ T6205] do_syscall_64+0xf3/0x210 [ 87.273323][ T6205] ? clear_bhb_loop+0x45/0xa0 [ 87.273341][ T6205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.273353][ T6205] RIP: 0033:0x7f348bd8e169 [ 87.273369][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.273381][ T6205] RSP: 002b:00007f348cc92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.273397][ T6205] RAX: ffffffffffffffda RBX: 00007f348bfb5fa0 RCX: 00007f348bd8e169 [ 87.273407][ T6205] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 87.273416][ T6205] RBP: 00007f348cc92090 R08: 0000000000000000 R09: 0000000000000000 [ 87.273425][ T6205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.273433][ T6205] R13: 0000000000000000 R14: 00007f348bfb5fa0 R15: 00007fff03847728 [ 87.273457][ T6205] [ 87.386133][ T6208] netlink: 'syz.3.80': attribute type 10 has an invalid length. [ 87.391483][ T5904] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.411329][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.750235][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.757569][ T6053] bridge_slave_1: entered allmulticast mode [ 87.765465][ T6053] bridge_slave_1: entered promiscuous mode [ 87.813748][ T882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 87.854328][ T6208] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.996258][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.004743][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.125275][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.139802][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.230557][ T6209] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.240712][ T6209] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.249663][ T6209] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.259216][ T6209] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.435100][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.477840][ T6230] IPv6: addrconf: prefix option has invalid lifetime [ 88.517942][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.669664][ T6236] Zero length message leads to an empty skb [ 88.696787][ T5842] Bluetooth: hci3: command tx timeout [ 88.719034][ T6234] dvmrp1: entered allmulticast mode [ 88.738681][ T6053] team0: Port device team_slave_0 added [ 88.757997][ T6053] team0: Port device team_slave_1 added [ 88.786826][ T6240] dvmrp1: left allmulticast mode [ 88.921050][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.931117][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.958548][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.970949][ T6239] netlink: 830 bytes leftover after parsing attributes in process `syz.1.89'. [ 89.010068][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.027657][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.059667][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.211400][ T6260] @ÿ: renamed from bond_slave_0 (while UP) [ 89.251588][ T6263] tipc: Invalid UDP bearer configuration [ 89.251646][ T6263] tipc: Enabling of bearer rejected, failed to enable media [ 89.392615][ T6263] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 89.457673][ T6053] hsr_slave_0: entered promiscuous mode [ 89.478472][ T6053] hsr_slave_1: entered promiscuous mode [ 89.497036][ T6053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.514319][ T6053] Cannot create hsr debugfs directory [ 89.530273][ T6270] netlink: 'syz.1.95': attribute type 1 has an invalid length. [ 89.692870][ T6291] execmem: unable to allocate memory [ 90.312319][ T6316] netlink: 'syz.3.107': attribute type 10 has an invalid length. [ 90.396831][ T6317] tipc: Invalid UDP bearer configuration [ 90.396886][ T6317] tipc: Enabling of bearer rejected, failed to enable media [ 90.439934][ T6319] netlink: 248 bytes leftover after parsing attributes in process `syz.0.109'. [ 90.495740][ T5904] hid-generic 0005:15C2:0006.0001: item fetching failed at offset 0/3 [ 90.505890][ T5904] hid-generic 0005:15C2:0006.0001: probe with driver hid-generic failed with error -22 [ 90.539431][ T6329] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 90.652829][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.112'. [ 90.668250][ T6317] netlink: 'syz.2.110': attribute type 1 has an invalid length. [ 90.774887][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.783666][ T5842] Bluetooth: hci3: command tx timeout [ 91.091774][ T6345] vlan3: entered allmulticast mode [ 91.097331][ T6345] bond0: entered allmulticast mode [ 91.102646][ T6345] bond_slave_0: entered allmulticast mode [ 91.115006][ T6345] bond_slave_1: entered allmulticast mode [ 91.131891][ T6345] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 91.238111][ T6351] xt_CT: No such helper "pptp" [ 91.413389][ T6053] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.433998][ T6362] netlink: 'syz.2.119': attribute type 10 has an invalid length. [ 91.458083][ T6053] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.516754][ T6053] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.555549][ T6366] FAULT_INJECTION: forcing a failure. [ 91.555549][ T6366] name failslab, interval 1, probability 0, space 0, times 0 [ 91.579134][ T6053] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.603781][ T6366] CPU: 0 UID: 0 PID: 6366 Comm: syz.0.121 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 91.603806][ T6366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 91.603815][ T6366] Call Trace: [ 91.603822][ T6366] [ 91.603829][ T6366] dump_stack_lvl+0x241/0x360 [ 91.603858][ T6366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.603879][ T6366] ? __pfx__printk+0x10/0x10 [ 91.603905][ T6366] ? __pfx___might_resched+0x10/0x10 [ 91.603934][ T6366] should_fail_ex+0x424/0x570 [ 91.603958][ T6366] should_failslab+0xac/0x100 [ 91.603976][ T6366] __kmalloc_cache_noprof+0x73/0x370 [ 91.603992][ T6366] ? ima_calc_file_hash+0xaea/0x1c10 [ 91.604017][ T6366] ima_calc_file_hash+0xaea/0x1c10 [ 91.604050][ T6366] ? __lock_acquire+0xad5/0xd80 [ 91.604075][ T6366] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 91.604128][ T6366] ? inode_query_iversion+0x19c/0x220 [ 91.604153][ T6366] ? __pfx_inode_query_iversion+0x10/0x10 [ 91.604175][ T6366] ? fill_mg_cmtime+0x28e/0x530 [ 91.604195][ T6366] ? shmem_huge_global_enabled+0x175/0x3b0 [ 91.604217][ T6366] ? shmem_getattr+0x3df/0x530 [ 91.604246][ T6366] ima_collect_measurement+0x52b/0xb20 [ 91.604281][ T6366] ? __pfx_ima_collect_measurement+0x10/0x10 [ 91.604300][ T6366] ? __lock_acquire+0xad5/0xd80 [ 91.604336][ T6366] ? simple_xattr_get+0xf1/0x170 [ 91.604367][ T6366] ? ima_get_hash_algo+0x157/0x520 [ 91.604385][ T6366] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 91.604413][ T6366] process_measurement+0x13a3/0x1fe0 [ 91.604455][ T6366] ? __pfx_process_measurement+0x10/0x10 [ 91.604473][ T6366] ? __lock_acquire+0xad5/0xd80 [ 91.604538][ T6366] ? rcu_read_lock_any_held+0xbb/0x160 [ 91.604559][ T6366] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 91.604582][ T6366] ima_file_mmap+0x1cf/0x220 [ 91.604605][ T6366] ? __pfx_ima_file_mmap+0x10/0x10 [ 91.604625][ T6366] ? end_current_label_crit_section+0x151/0x180 [ 91.604645][ T6366] ? common_file_perm+0x1a6/0x210 [ 91.604669][ T6366] security_mmap_file+0x7aa/0xa40 [ 91.604697][ T6366] vm_mmap_pgoff+0x151/0x530 [ 91.604723][ T6366] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 91.604742][ T6366] ? __fget_files+0x2a/0x420 [ 91.604758][ T6366] ? __fget_files+0x39d/0x420 [ 91.604771][ T6366] ? __fget_files+0x2a/0x420 [ 91.604790][ T6366] ksys_mmap_pgoff+0x4ee/0x720 [ 91.604808][ T6366] ? __x64_sys_mmap+0x7f/0x140 [ 91.604829][ T6366] do_syscall_64+0xf3/0x210 [ 91.604845][ T6366] ? clear_bhb_loop+0x45/0xa0 [ 91.604865][ T6366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.604881][ T6366] RIP: 0033:0x7fde10d8e169 [ 91.604895][ T6366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.604908][ T6366] RSP: 002b:00007fde11bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 91.604925][ T6366] RAX: ffffffffffffffda RBX: 00007fde10fb5fa0 RCX: 00007fde10d8e169 [ 91.604935][ T6366] RDX: 000000000100000c RSI: 0000000000003000 RDI: 00002000007a6000 [ 91.604944][ T6366] RBP: 00007fde11bf6090 R08: 0000000000000003 R09: 0000000000000000 [ 91.604952][ T6366] R10: 0000000000022051 R11: 0000000000000246 R12: 0000000000000001 [ 91.604961][ T6366] R13: 0000000000000000 R14: 00007fde10fb5fa0 R15: 00007ffd81473f28 [ 91.604988][ T6366] [ 91.609182][ T30] audit: type=1800 audit(1744950277.086:3): pid=6366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.121" name="cgroup.controllers" dev="tmpfs" ino=130 res=0 errno=0 [ 91.684268][ T6374] netlink: 'syz.1.122': attribute type 10 has an invalid length. [ 91.921983][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.054190][ T6374] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 92.080279][ T6374] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 92.124687][ T6374] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 92.253119][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.612869][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.620141][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.668976][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.676401][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.931224][ T6406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.129'. [ 93.048662][ T6404] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.057104][ T6404] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.492628][ T6413] netlink: 68 bytes leftover after parsing attributes in process `syz.0.130'. [ 93.506536][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.564618][ T6404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.812916][ T6404] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.837125][ T6404] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.848229][ T6404] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.868022][ T6404] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.027003][ T6406] tipc: Started in network mode [ 94.031925][ T6406] tipc: Node identity 5, cluster identity 4711 [ 94.058355][ T6406] tipc: Node number set to 5 [ 94.351388][ T6437] netlink: 'syz.1.135': attribute type 1 has an invalid length. [ 94.379007][ T6437] netlink: 224 bytes leftover after parsing attributes in process `syz.1.135'. [ 94.398014][ T6434] xt_CT: No such helper "pptp" [ 94.887946][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.957378][ T6464] lo speed is unknown, defaulting to 1000 [ 94.979874][ T6466] netlink: 'syz.3.142': attribute type 11 has an invalid length. [ 95.110284][ T6481] netlink: 'syz.1.141': attribute type 10 has an invalid length. [ 95.140635][ T6464] lo speed is unknown, defaulting to 1000 [ 95.211689][ T6481] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.287253][ T6464] lo speed is unknown, defaulting to 1000 [ 95.349061][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.144'. [ 95.401872][ T6489] netlink: 24 bytes leftover after parsing attributes in process `syz.3.144'. [ 95.602665][ T6464] infiniband sz1: set active [ 95.602683][ T6496] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 95.617361][ T9] lo speed is unknown, defaulting to 1000 [ 95.638954][ T6464] infiniband sz1: added lo [ 95.809755][ T6464] RDS/IB: sz1: added [ 95.820017][ T6464] smc: adding ib device sz1 with port count 1 [ 95.827760][ T6464] smc: ib device sz1 port 1 has pnetid [ 95.836202][ T10] lo speed is unknown, defaulting to 1000 [ 95.845722][ T6464] lo speed is unknown, defaulting to 1000 [ 95.878689][ T6053] veth0_vlan: entered promiscuous mode [ 95.948742][ T6053] veth1_vlan: entered promiscuous mode [ 96.050043][ T6053] veth0_macvtap: entered promiscuous mode [ 96.106467][ T6053] veth1_macvtap: entered promiscuous mode [ 96.162509][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.186437][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.205468][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.236468][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.268624][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.297905][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.335532][ T6053] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.380405][ T6053] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.419843][ T6053] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.442772][ T6053] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.687403][ T6464] lo speed is unknown, defaulting to 1000 [ 96.713867][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.152'. [ 96.774669][ T3016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.782531][ T3016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.941728][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.948820][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 96.977941][ T6543] netlink: 24 bytes leftover after parsing attributes in process `syz.1.155'. [ 96.991018][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.609038][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.159'. [ 97.696119][ T1140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.848478][ T6464] lo speed is unknown, defaulting to 1000 [ 97.896956][ T1140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.190576][ T1140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.310695][ T6578] netlink: 36 bytes leftover after parsing attributes in process `syz.3.160'. [ 98.349137][ T6578] FAULT_INJECTION: forcing a failure. [ 98.349137][ T6578] name failslab, interval 1, probability 0, space 0, times 0 [ 98.373558][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 98.407056][ T6578] CPU: 1 UID: 0 PID: 6578 Comm: syz.3.160 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 98.407085][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 98.407092][ T6578] Call Trace: [ 98.407098][ T6578] [ 98.407104][ T6578] dump_stack_lvl+0x241/0x360 [ 98.407128][ T6578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.407145][ T6578] ? __pfx__printk+0x10/0x10 [ 98.407166][ T6578] ? __pfx___might_resched+0x10/0x10 [ 98.407189][ T6578] should_fail_ex+0x424/0x570 [ 98.407208][ T6578] should_failslab+0xac/0x100 [ 98.407222][ T6578] __kmalloc_noprof+0xdf/0x4d0 [ 98.407234][ T6578] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 98.407255][ T6578] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 98.407269][ T6578] ? __kernel_text_address+0xd/0x40 [ 98.407289][ T6578] genl_rcv_msg+0x819/0xf00 [ 98.407310][ T6578] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.407323][ T6578] ? stack_trace_save+0x11a/0x1d0 [ 98.407339][ T6578] ? __pfx_stack_trace_save+0x10/0x10 [ 98.407354][ T6578] ? stack_depot_save_flags+0x44/0x940 [ 98.407367][ T6578] ? __pfx_stack_trace_save+0x1/0x10 [ 98.407391][ T6578] ? __lock_acquire+0xad5/0xd80 [ 98.407410][ T6578] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 98.407438][ T6578] netlink_rcv_skb+0x208/0x480 [ 98.407457][ T6578] ? __pfx_genl_rcv_msg+0x10/0x10 [ 98.407472][ T6578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.407507][ T6578] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.407529][ T6578] genl_rcv+0x28/0x40 [ 98.407541][ T6578] netlink_unicast+0x7f8/0x9a0 [ 98.407564][ T6578] ? __pfx_netlink_unicast+0x10/0x10 [ 98.407582][ T6578] ? skb_put+0x114/0x1f0 [ 98.407599][ T6578] netlink_sendmsg+0x8c3/0xcd0 [ 98.407627][ T6578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.407648][ T6578] ? aa_sock_msg_perm+0x91/0x160 [ 98.407669][ T6578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.407684][ T6578] __sock_sendmsg+0x221/0x270 [ 98.407704][ T6578] ____sys_sendmsg+0x523/0x860 [ 98.407725][ T6578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.407738][ T6578] ? __fget_files+0x2a/0x420 [ 98.407752][ T6578] ? __fget_files+0x2a/0x420 [ 98.407771][ T6578] __sys_sendmsg+0x271/0x360 [ 98.407789][ T6578] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.407853][ T6578] ? do_syscall_64+0xb6/0x210 [ 98.407868][ T6578] do_syscall_64+0xf3/0x210 [ 98.407880][ T6578] ? clear_bhb_loop+0x45/0xa0 [ 98.407896][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.407908][ T6578] RIP: 0033:0x7f284238e169 [ 98.407920][ T6578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.407929][ T6578] RSP: 002b:00007f28431a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.407944][ T6578] RAX: ffffffffffffffda RBX: 00007f28425b6160 RCX: 00007f284238e169 [ 98.407953][ T6578] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000c [ 98.407960][ T6578] RBP: 00007f28431a2090 R08: 0000000000000000 R09: 0000000000000000 [ 98.407968][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.407975][ T6578] R13: 0000000000000000 R14: 00007f28425b6160 R15: 00007ffca12a8398 [ 98.407997][ T6578] [ 98.583289][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.737961][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.748237][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.750233][ T1140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.760319][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.775270][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.781153][ T6554] lo speed is unknown, defaulting to 1000 [ 98.864606][ T6583] netlink: 'syz.3.161': attribute type 10 has an invalid length. [ 99.098457][ T1140] bridge_slave_1: left allmulticast mode [ 99.133694][ T1140] bridge_slave_1: left promiscuous mode [ 99.139530][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.202769][ T1140] bridge_slave_0: left allmulticast mode [ 99.216919][ T1140] bridge_slave_0: left promiscuous mode [ 99.229637][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.607640][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'. [ 99.620079][ T6610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.167'. [ 99.891253][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.903865][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.915521][ T1140] bond0 (unregistering): Released all slaves [ 99.940711][ T6464] lo speed is unknown, defaulting to 1000 [ 99.940753][ T6614] tipc: Invalid UDP bearer configuration [ 99.947564][ T6614] tipc: Enabling of bearer rejected, failed to enable media [ 99.974070][ T6616] netlink: 'syz.3.168': attribute type 1 has an invalid length. [ 100.056739][ T6614] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 100.576204][ T6464] lo speed is unknown, defaulting to 1000 [ 100.594510][ T6632] netlink: 'syz.2.172': attribute type 11 has an invalid length. [ 100.614094][ T6632] netlink: 224 bytes leftover after parsing attributes in process `syz.2.172'. [ 100.672772][ T6638] sctp: [Deprecated]: syz.2.172 (pid 6638) Use of int in maxseg socket option. [ 100.672772][ T6638] Use struct sctp_assoc_value instead [ 100.853714][ T5834] Bluetooth: hci3: command tx timeout [ 101.273933][ T6580] lo speed is unknown, defaulting to 1000 [ 101.359905][ T6661] netlink: 36 bytes leftover after parsing attributes in process `syz.3.177'. [ 101.841569][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.178'. [ 101.887846][ T6672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.178'. [ 102.570797][ T1140] hsr_slave_0: left promiscuous mode [ 102.579771][ T1140] hsr_slave_1: left promiscuous mode [ 102.598396][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.615206][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.625877][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.633869][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.655466][ T1140] veth1_macvtap: left promiscuous mode [ 102.661050][ T1140] veth0_macvtap: left promiscuous mode [ 102.666852][ T1140] veth1_vlan: left promiscuous mode [ 102.672141][ T1140] veth0_vlan: left promiscuous mode [ 102.934913][ T5834] Bluetooth: hci3: command tx timeout [ 103.129130][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 103.161726][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 103.764770][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 103.784194][ T6705] netlink: 52 bytes leftover after parsing attributes in process `syz.3.187'. [ 103.803025][ T6580] chnl_net:caif_netlink_parms(): no params data found [ 104.030272][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.190'. [ 104.407280][ T6727] batadv1: entered promiscuous mode [ 104.426154][ T6727] batadv1: entered allmulticast mode [ 104.446834][ T6727] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 104.453577][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 104.461267][ T6727] team0: Port device batadv1 added [ 104.495810][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.503161][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.553724][ T6580] bridge_slave_0: entered allmulticast mode [ 104.561466][ T6580] bridge_slave_0: entered promiscuous mode [ 104.598954][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.627913][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.639125][ T6580] bridge_slave_1: entered allmulticast mode [ 104.650638][ T6580] bridge_slave_1: entered promiscuous mode [ 104.789971][ T6746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.805450][ T6746] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.822653][ T6746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.922450][ T6746] syz.1.197 (6746) used greatest stack depth: 18808 bytes left [ 105.006448][ T6580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.017304][ T5834] Bluetooth: hci3: command tx timeout [ 105.035393][ T6764] __nla_validate_parse: 2 callbacks suppressed [ 105.035412][ T6764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 105.046018][ T6580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.153021][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.3.201'. [ 105.217286][ T6764] macsec1: entered allmulticast mode [ 105.246294][ T6764] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 105.259220][ T6764] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 105.300498][ T6580] team0: Port device team_slave_0 added [ 105.346092][ T6580] team0: Port device team_slave_1 added [ 105.415568][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 105.457746][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.461641][ T6778] netlink: 24 bytes leftover after parsing attributes in process `syz.0.207'. [ 105.474075][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.502885][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.513593][ T6784] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.533723][ T6780] netlink: 48 bytes leftover after parsing attributes in process `syz.1.209'. [ 105.543997][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.551195][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.584683][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.603802][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.2.211'. [ 105.614974][ T6788] netlink: 48 bytes leftover after parsing attributes in process `syz.1.209'. [ 105.658721][ T6780] bond0: entered promiscuous mode [ 105.664909][ T6780] bond_slave_0: entered promiscuous mode [ 105.670757][ T6780] bond_slave_1: entered promiscuous mode [ 105.676904][ T6780] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 105.748271][ T6791] netlink: 'syz.3.210': attribute type 11 has an invalid length. [ 105.928203][ T6796] netlink: 'syz.1.213': attribute type 10 has an invalid length. [ 105.979788][ T6580] hsr_slave_0: entered promiscuous mode [ 105.988244][ T6580] hsr_slave_1: entered promiscuous mode [ 106.010070][ T6580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.024729][ T6580] Cannot create hsr debugfs directory [ 106.122868][ T6807] netlink: 'syz.0.217': attribute type 4 has an invalid length. [ 106.135509][ T6791] tun0: tun_chr_ioctl cmd 1074025677 [ 106.140972][ T6791] tun0: linktype set to 773 [ 106.177042][ T6799] xt_hashlimit: size too large, truncated to 1048576 [ 106.222527][ T6811] netlink: 'syz.1.216': attribute type 10 has an invalid length. [ 106.390984][ T6805] bond0: left promiscuous mode [ 106.416353][ T6805] bond_slave_0: left promiscuous mode [ 106.428578][ T6805] bond_slave_1: left promiscuous mode [ 106.434391][ T6805] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 106.548668][ T5904] lo speed is unknown, defaulting to 1000 [ 106.562263][ T5904] sz1: Port: 1 Link DOWN [ 106.596835][ T5904] lo speed is unknown, defaulting to 1000 [ 106.666306][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 106.688071][ T6823] netlink: 24 bytes leftover after parsing attributes in process `syz.1.222'. [ 106.755666][ T6826] netlink: 'syz.2.223': attribute type 16 has an invalid length. [ 106.766518][ T6826] netlink: 'syz.2.223': attribute type 17 has an invalid length. [ 106.943174][ T6826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.961114][ T6826] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.978880][ T6826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 107.093756][ T5834] Bluetooth: hci3: command tx timeout [ 107.097647][ T6833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.225'. [ 107.153183][ T6833] openvswitch: netlink: Missing key (keys=40, expected=80) [ 107.523257][ T6845] ipip0: entered promiscuous mode [ 107.828717][ T6862] tipc: Invalid UDP bearer configuration [ 107.828770][ T6862] tipc: Enabling of bearer rejected, failed to enable media [ 107.851102][ T6849] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 107.886214][ T6862] netlink: 'syz.0.237': attribute type 1 has an invalid length. [ 107.943915][ T6862] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 108.019535][ T6580] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.050626][ T6580] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.073711][ T6580] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.096565][ T6580] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.233203][ T6880] xt_hashlimit: size too large, truncated to 1048576 [ 108.285048][ T6885] delete_channel: no stack [ 108.376207][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.406848][ T6580] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.438473][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.445708][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.485166][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.485701][ T6890] Bluetooth: MGMT ver 1.23 [ 108.492374][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.745184][ T6907] tipc: Invalid UDP bearer configuration [ 108.745240][ T6907] tipc: Enabling of bearer rejected, failed to enable media [ 108.800817][ T6907] netlink: 'syz.1.251': attribute type 1 has an invalid length. [ 108.829761][ T6907] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 108.939483][ T6918] ipt_ECN: cannot use operation on non-tcp rule [ 109.105390][ T6580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.327763][ T6938] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.335486][ T6938] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.497900][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.511412][ T6938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.587336][ T6938] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.596068][ T6938] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.604574][ T6938] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.612947][ T6938] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.642996][ T6954] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 109.651270][ T6938] ipip0: left promiscuous mode [ 109.677004][ T6946] veth0: entered promiscuous mode [ 109.756115][ T6949] veth0 (unregistering): left promiscuous mode [ 109.772836][ T6958] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 109.821060][ T6951] tipc: Invalid UDP bearer configuration [ 109.821116][ T6951] tipc: Enabling of bearer rejected, failed to enable media [ 109.837999][ T6953] netlink: 'syz.3.265': attribute type 1 has an invalid length. [ 110.088496][ T6580] veth0_vlan: entered promiscuous mode [ 110.130290][ T6580] veth1_vlan: entered promiscuous mode [ 110.180542][ T6580] veth0_macvtap: entered promiscuous mode [ 110.198163][ T6580] veth1_macvtap: entered promiscuous mode [ 110.239268][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.268432][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.290473][ T6580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.300528][ T6580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.310505][ T6580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.319325][ T6580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.338199][ T6983] __nla_validate_parse: 18 callbacks suppressed [ 110.338242][ T6983] netlink: 20 bytes leftover after parsing attributes in process `syz.2.276'. [ 110.424457][ T6985] netlink: 'syz.2.277': attribute type 4 has an invalid length. [ 110.432302][ T6045] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.441787][ T6045] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.484799][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.492661][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.749319][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.282'. [ 110.759696][ T6996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 111.006607][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 111.158054][ T7017] netlink: 'syz.1.290': attribute type 11 has an invalid length. [ 111.189893][ T7017] netlink: 224 bytes leftover after parsing attributes in process `syz.1.290'. [ 111.223140][ T7026] netlink: 'syz.1.290': attribute type 1 has an invalid length. [ 111.285586][ T7021] !: renamed from dummy0 [ 111.437156][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 111.573593][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.622969][ T7043] netlink: 140 bytes leftover after parsing attributes in process `syz.0.299'. [ 111.808863][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.080606][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.325833][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.407025][ T7068] netlink: 36 bytes leftover after parsing attributes in process `syz.1.306'. [ 112.429471][ T7068] bond0: entered promiscuous mode [ 112.435151][ T7068] bond_slave_0: entered promiscuous mode [ 112.441150][ T7068] bond_slave_1: entered promiscuous mode [ 112.454817][ T7068] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 112.483696][ T7068] batadv0: entered promiscuous mode [ 112.501191][ T7068] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 112.527268][ T7068] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 112.569252][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 112.569792][ T7068] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 112.586138][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 112.595372][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 112.610885][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 112.620996][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.659846][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 112.681894][ T7076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 112.691051][ T13] bridge_slave_1: left allmulticast mode [ 112.703402][ T13] bridge_slave_1: left promiscuous mode [ 112.709324][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.727002][ T13] bridge_slave_0: left allmulticast mode [ 112.732701][ T13] bridge_slave_0: left promiscuous mode [ 112.752912][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.175264][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.186739][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.199519][ T13] bond0 (unregistering): Released all slaves [ 113.218617][ T7081] pim6reg: entered allmulticast mode [ 113.224454][ T7084] team0: entered allmulticast mode [ 113.230546][ T7084] team_slave_0: entered allmulticast mode [ 113.236801][ T7084] team_slave_1: entered allmulticast mode [ 113.267783][ T7087] bond0: option mode: unable to set because the bond device has slaves [ 113.311018][ T7073] lo speed is unknown, defaulting to 1000 [ 113.428955][ T7103] FAULT_INJECTION: forcing a failure. [ 113.428955][ T7103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.462135][ T7103] CPU: 1 UID: 0 PID: 7103 Comm: syz.0.317 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 113.462157][ T7103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.462166][ T7103] Call Trace: [ 113.462173][ T7103] [ 113.462180][ T7103] dump_stack_lvl+0x241/0x360 [ 113.462210][ T7103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.462231][ T7103] ? __pfx__printk+0x10/0x10 [ 113.462263][ T7103] should_fail_ex+0x424/0x570 [ 113.462288][ T7103] _copy_to_user+0x31/0xb0 [ 113.462314][ T7103] bpf_test_finish+0x626/0x930 [ 113.462346][ T7103] ? __pfx_bpf_test_finish+0x10/0x10 [ 113.462374][ T7103] ? bpf_test_init+0x130/0x170 [ 113.462398][ T7103] bpf_prog_test_run_xdp+0x8f8/0x1200 [ 113.462442][ T7103] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 113.462466][ T7103] ? __fget_files+0x2a/0x420 [ 113.462484][ T7103] ? __fget_files+0x2a/0x420 [ 113.462504][ T7103] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 113.462528][ T7103] bpf_prog_test_run+0x2e4/0x360 [ 113.462553][ T7103] __sys_bpf+0x4ee/0x8b0 [ 113.462575][ T7103] ? __pfx___sys_bpf+0x10/0x10 [ 113.462608][ T7103] ? ksys_write+0x275/0x2d0 [ 113.462643][ T7103] __x64_sys_bpf+0x7c/0x90 [ 113.462663][ T7103] do_syscall_64+0xf3/0x210 [ 113.462679][ T7103] ? clear_bhb_loop+0x45/0xa0 [ 113.462699][ T7103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.462714][ T7103] RIP: 0033:0x7fde10d8e169 [ 113.462729][ T7103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.462741][ T7103] RSP: 002b:00007fde11bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 113.462766][ T7103] RAX: ffffffffffffffda RBX: 00007fde10fb5fa0 RCX: 00007fde10d8e169 [ 113.462777][ T7103] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 113.462788][ T7103] RBP: 00007fde11bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 113.462797][ T7103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 113.462807][ T7103] R13: 0000000000000000 R14: 00007fde10fb5fa0 R15: 00007ffd81473f28 [ 113.462835][ T7103] [ 113.892263][ T7114] tipc: Invalid UDP bearer configuration [ 113.892317][ T7114] tipc: Enabling of bearer rejected, failed to enable media [ 113.910430][ T7114] netlink: 'syz.0.320': attribute type 1 has an invalid length. [ 113.947644][ T7114] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 114.073429][ T7120] FAULT_INJECTION: forcing a failure. [ 114.073429][ T7120] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 114.088047][ T7120] CPU: 1 UID: 0 PID: 7120 Comm: syz.2.324 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 114.088071][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.088079][ T7120] Call Trace: [ 114.088085][ T7120] [ 114.088091][ T7120] dump_stack_lvl+0x241/0x360 [ 114.088120][ T7120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.088142][ T7120] ? __pfx__printk+0x10/0x10 [ 114.088175][ T7120] should_fail_ex+0x424/0x570 [ 114.088199][ T7120] prepare_alloc_pages+0x220/0x610 [ 114.088229][ T7120] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 114.088254][ T7120] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.088275][ T7120] ? cgroup_rstat_updated+0x144/0xc40 [ 114.088313][ T7120] alloc_pages_mpol+0x339/0x690 [ 114.088334][ T7120] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 114.088360][ T7120] folio_alloc_mpol_noprof+0x36/0x70 [ 114.088377][ T7120] shmem_alloc_and_add_folio+0x490/0x1070 [ 114.088406][ T7120] ? shmem_huge_global_enabled+0x175/0x3b0 [ 114.088420][ T7120] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 114.088441][ T7120] ? shmem_allowable_huge_orders+0x41b/0x430 [ 114.088463][ T7120] shmem_get_folio_gfp+0x655/0x1800 [ 114.088477][ T7120] ? seqcount_lockdep_reader_access+0x159/0x230 [ 114.088493][ T7120] ? lockdep_hardirqs_on+0x9d/0x150 [ 114.088528][ T7120] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 114.088555][ T7120] shmem_fault+0x223/0x5c0 [ 114.088579][ T7120] ? __pfx_shmem_fault+0x10/0x10 [ 114.088597][ T7120] ? __pfx____pte_offset_map+0x10/0x10 [ 114.088624][ T7120] __do_fault+0x135/0x390 [ 114.088644][ T7120] handle_pte_fault+0xfcc/0x61c0 [ 114.088672][ T7120] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 114.088707][ T7120] ? __pfx_handle_pte_fault+0x10/0x10 [ 114.088735][ T7120] ? rcu_is_watching+0x15/0xb0 [ 114.088754][ T7120] ? __lock_acquire+0xad5/0xd80 [ 114.088791][ T7120] ? __lock_acquire+0xad5/0xd80 [ 114.088815][ T7120] ? do_raw_spin_lock+0x151/0x370 [ 114.088842][ T7120] handle_mm_fault+0x1129/0x1bf0 [ 114.088887][ T7120] ? __pfx_handle_mm_fault+0x10/0x10 [ 114.088904][ T7120] ? follow_page_pte+0x9ff/0x15e0 [ 114.088935][ T7120] ? __pfx_find_vma+0x10/0x10 [ 114.088953][ T7120] ? vma_is_secretmem+0xd/0x50 [ 114.088974][ T7120] ? check_vma_flags+0x51b/0x590 [ 114.088994][ T7120] __get_user_pages+0x1adc/0x4180 [ 114.089039][ T7120] ? __pfx___get_user_pages+0x10/0x10 [ 114.089052][ T7120] ? __gup_longterm_locked+0x11b5/0x1850 [ 114.089067][ T7120] ? __pfx_down_read_killable+0x10/0x10 [ 114.089091][ T7120] ? __page_table_check_zero+0xb8/0x510 [ 114.089111][ T7120] __gup_longterm_locked+0x1334/0x1850 [ 114.089126][ T7120] ? __page_table_check_zero+0x3e2/0x510 [ 114.089164][ T7120] ? __pfx___gup_longterm_locked+0x10/0x10 [ 114.089183][ T7120] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 114.089203][ T7120] ? gup_fast_fallback+0x203f/0x2980 [ 114.089221][ T7120] gup_fast_fallback+0x2227/0x2980 [ 114.089270][ T7120] ? __pfx_gup_fast_fallback+0x10/0x10 [ 114.089291][ T7120] ? __lock_acquire+0xad5/0xd80 [ 114.089331][ T7120] ? __lruvec_stat_mod_folio+0x7d/0x300 [ 114.089358][ T7120] ? __phys_addr+0xba/0x170 [ 114.089374][ T7120] ? is_valid_gup_args+0x124/0x200 [ 114.089394][ T7120] pin_user_pages_fast+0xd2/0x160 [ 114.089415][ T7120] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 114.089430][ T7120] ? rcu_is_watching+0x15/0xb0 [ 114.089446][ T7120] ? trace_kmalloc+0x1f/0xd0 [ 114.089461][ T7120] ? rds_info_getsockopt+0x201/0x620 [ 114.089483][ T7120] rds_info_getsockopt+0x228/0x620 [ 114.089524][ T7120] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 114.089544][ T7120] ? __might_fault+0xaa/0x120 [ 114.089566][ T7120] ? rds_getsockopt+0x2b8/0x530 [ 114.089586][ T7120] ? __pfx_rds_getsockopt+0x10/0x10 [ 114.089609][ T7120] do_sock_getsockopt+0x391/0x740 [ 114.089634][ T7120] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 114.089649][ T7120] ? __fget_files+0x2a/0x420 [ 114.089665][ T7120] ? __fget_files+0x39d/0x420 [ 114.089677][ T7120] ? __fget_files+0x2a/0x420 [ 114.089705][ T7120] __x64_sys_getsockopt+0x233/0x310 [ 114.089729][ T7120] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 114.089745][ T7120] ? rcu_is_watching+0x15/0xb0 [ 114.089760][ T7120] ? trace_sys_enter+0x25/0x120 [ 114.089788][ T7120] do_syscall_64+0xf3/0x210 [ 114.089804][ T7120] ? clear_bhb_loop+0x45/0xa0 [ 114.089824][ T7120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.089840][ T7120] RIP: 0033:0x7f176638e169 [ 114.089855][ T7120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.089868][ T7120] RSP: 002b:00007f1767297038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 114.089886][ T7120] RAX: ffffffffffffffda RBX: 00007f17665b5fa0 RCX: 00007f176638e169 [ 114.089898][ T7120] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000004 [ 114.089908][ T7120] RBP: 00007f1767297090 R08: 0000200000000000 R09: 0000000000000000 [ 114.089918][ T7120] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000002 [ 114.089928][ T7120] R13: 0000000000000000 R14: 00007f17665b5fa0 R15: 00007ffc72ff2068 [ 114.089956][ T7120] [ 114.694759][ T5842] Bluetooth: hci3: command tx timeout [ 114.847839][ T7073] chnl_net:caif_netlink_parms(): no params data found [ 115.037000][ T7143] FAULT_INJECTION: forcing a failure. [ 115.037000][ T7143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.104604][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.3.330 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 115.104630][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.104639][ T7143] Call Trace: [ 115.104646][ T7143] [ 115.104653][ T7143] dump_stack_lvl+0x241/0x360 [ 115.104684][ T7143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.104706][ T7143] ? __pfx__printk+0x10/0x10 [ 115.104741][ T7143] should_fail_ex+0x424/0x570 [ 115.104764][ T7143] _copy_from_user+0x2d/0xb0 [ 115.104789][ T7143] copy_msghdr_from_user+0xb3/0x580 [ 115.104826][ T7143] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 115.104865][ T7143] do_recvmmsg+0x3bf/0xab0 [ 115.104897][ T7143] ? __pfx_do_recvmmsg+0x10/0x10 [ 115.104933][ T7143] ? rcu_read_lock_any_held+0xbb/0x160 [ 115.104951][ T7143] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 115.104971][ T7143] ? vfs_write+0xb29/0xd10 [ 115.105002][ T7143] ? ksys_write+0x24e/0x2d0 [ 115.105027][ T7143] ? __mutex_unlock_slowpath+0x229/0x800 [ 115.105053][ T7143] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 115.105068][ T7143] ? __fget_files+0x2a/0x420 [ 115.105099][ T7143] __x64_sys_recvmmsg+0x1ab/0x260 [ 115.105122][ T7143] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 115.105148][ T7143] ? do_syscall_64+0xb6/0x210 [ 115.105166][ T7143] do_syscall_64+0xf3/0x210 [ 115.105182][ T7143] ? clear_bhb_loop+0x45/0xa0 [ 115.105202][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.105217][ T7143] RIP: 0033:0x7f284238e169 [ 115.105231][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.105244][ T7143] RSP: 002b:00007f28431e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 115.105262][ T7143] RAX: ffffffffffffffda RBX: 00007f28425b5fa0 RCX: 00007f284238e169 [ 115.105273][ T7143] RDX: 03ffffffffffff81 RSI: 0000200000000780 RDI: 0000000000000003 [ 115.105284][ T7143] RBP: 00007f28431e4090 R08: 0000000000000000 R09: 0000000000000000 [ 115.105294][ T7143] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 115.105303][ T7143] R13: 0000000000000000 R14: 00007f28425b5fa0 R15: 00007ffca12a8398 [ 115.105332][ T7143] [ 115.505877][ T13] hsr_slave_0: left promiscuous mode [ 115.518491][ T13] hsr_slave_1: left promiscuous mode [ 115.528317][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.536274][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.546857][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.554433][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.593465][ T13] veth1_macvtap: left promiscuous mode [ 115.599083][ T13] veth0_macvtap: left promiscuous mode [ 115.623983][ T13] veth1_vlan: left promiscuous mode [ 115.629515][ T13] veth0_vlan: left promiscuous mode [ 115.781995][ T7167] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 116.127434][ T13] team0 (unregistering): Port device team_slave_1 removed [ 116.167325][ T13] team0 (unregistering): Port device team_slave_0 removed [ 116.512953][ T7156] tipc: Invalid UDP bearer configuration [ 116.513001][ T7156] tipc: Enabling of bearer rejected, failed to enable media [ 116.528830][ T7162] netlink: 'syz.2.335': attribute type 1 has an invalid length. [ 116.708931][ T7180] __nla_validate_parse: 1 callbacks suppressed [ 116.708951][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 116.728493][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.728891][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 116.736391][ T7073] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.752071][ T7073] bridge_slave_0: entered allmulticast mode [ 116.760018][ T7073] bridge_slave_0: entered promiscuous mode [ 116.772030][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.786336][ T7073] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.786359][ T5842] Bluetooth: hci3: command tx timeout [ 116.794301][ T7073] bridge_slave_1: entered allmulticast mode [ 116.817370][ T7073] bridge_slave_1: entered promiscuous mode [ 116.843172][ T7182] macsec1: entered promiscuous mode [ 116.848586][ T7182] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 116.858729][ T7182] macsec1: entered allmulticast mode [ 116.864197][ T7182] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 116.881189][ T7176] lo speed is unknown, defaulting to 1000 [ 117.022107][ T7073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.048179][ T7073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.082968][ T7191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 117.192522][ T7073] team0: Port device team_slave_0 added [ 117.220506][ T7073] team0: Port device team_slave_1 added [ 117.353934][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.360924][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.437797][ T7073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.469891][ T7203] warning: `syz.2.352' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.506380][ T7073] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.513943][ T7073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.540584][ T7073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.838985][ T7073] hsr_slave_0: entered promiscuous mode [ 117.874231][ T7073] hsr_slave_1: entered promiscuous mode [ 117.880634][ T7073] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.885629][ T7218] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 117.903417][ T7073] Cannot create hsr debugfs directory [ 118.077439][ T7219] syz_tun: entered allmulticast mode [ 118.137996][ T7213] syz_tun: left allmulticast mode [ 118.159945][ T7208] lo speed is unknown, defaulting to 1000 [ 118.230374][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.0.361'. [ 118.259563][ T7227] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.268206][ T7227] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.276460][ T7227] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.284738][ T7227] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.311362][ T7227] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.319908][ T7227] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.328522][ T7227] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.336961][ T7227] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.578825][ T7235] netlink: 'syz.0.365': attribute type 1 has an invalid length. [ 118.854892][ T5842] Bluetooth: hci3: command tx timeout [ 119.343699][ T7073] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.371018][ T7073] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 119.408682][ T7073] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 119.440905][ T7073] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 119.595906][ T7073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.652543][ T7073] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.692612][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.699873][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.729414][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.736645][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.905869][ T7281] netlink: 104 bytes leftover after parsing attributes in process `syz.2.385'. [ 120.014482][ T7287] batadv1: entered allmulticast mode [ 120.028195][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.039513][ T7287] bridge0: port 3(batadv1) entered blocking state [ 120.048107][ T7287] bridge0: port 3(batadv1) entered disabled state [ 120.060226][ T7287] batadv1: entered promiscuous mode [ 120.070909][ T7287] bridge0: port 3(batadv1) entered blocking state [ 120.077789][ T7287] bridge0: port 3(batadv1) entered forwarding state [ 120.220714][ T7297] dummy0: entered promiscuous mode [ 120.231143][ T7297] dummy0: left promiscuous mode [ 120.271187][ T7073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.531342][ T1147] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 120.541258][ T1147] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 120.578542][ T7073] veth0_vlan: entered promiscuous mode [ 120.605594][ T7073] veth1_vlan: entered promiscuous mode [ 120.676062][ T7073] veth0_macvtap: entered promiscuous mode [ 120.689697][ T7073] veth1_macvtap: entered promiscuous mode [ 120.728033][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.753286][ T7073] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.777919][ T7073] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.787443][ T7073] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.797181][ T7073] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.809806][ T7073] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.937798][ T5842] Bluetooth: hci3: command tx timeout [ 120.970135][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.983585][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.023196][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.047564][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.453933][ T7340] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 121.561148][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 121.587493][ T7344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.754624][ T7353] netlink: 156 bytes leftover after parsing attributes in process `syz.2.415'. [ 121.937380][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.418'. [ 122.091976][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 122.372983][ T7373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 122.395841][ T1147] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.432818][ T7374] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 122.972846][ T7377] bridge_slave_0: left allmulticast mode [ 122.983534][ T7377] bridge_slave_0: left promiscuous mode [ 122.999333][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.045939][ T7377] bridge_slave_1: left allmulticast mode [ 123.051636][ T7377] bridge_slave_1: left promiscuous mode [ 123.054390][ T7384] netlink: 'syz.1.426': attribute type 10 has an invalid length. [ 123.102360][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.163014][ T7377] bond0: (slave bond_slave_0): Releasing backup interface [ 123.180212][ T7377] bond_slave_0: left promiscuous mode [ 123.198727][ T7377] bond0: (slave bond_slave_1): Releasing backup interface [ 123.236299][ T7377] bond_slave_1: left promiscuous mode [ 123.255062][ T7377] team0: Port device team_slave_0 removed [ 123.282889][ T7377] team0: Port device team_slave_1 removed [ 123.304257][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.332342][ T7377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.380434][ T7377] bond0: (slave wlan1): Releasing backup interface [ 123.398423][ T7377] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 123.432474][ T7381] ------------[ cut here ]------------ [ 123.438433][ T7381] WARNING: CPU: 0 PID: 7381 at ./include/net/netdev_lock.h:17 netdev_nl_dev_fill+0x6bc/0x860 [ 123.449167][ T7381] Modules linked in: [ 123.453302][ T7381] CPU: 0 UID: 0 PID: 7381 Comm: syz.2.427 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 123.465354][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.475501][ T7381] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 123.476339][ T7399] netlink: 156 bytes leftover after parsing attributes in process `syz.0.434'. [ 123.481618][ T7381] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 65 4e c4 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 57 4e c4 f7 90 0f 0b 90 42 80 3c 3b 00 [ 123.481672][ T7381] RSP: 0000:ffffc90005006d80 EFLAGS: 00010287 [ 123.481691][ T7381] RAX: ffffffff89fe6c5b RBX: 0000000000000000 RCX: 0000000000080000 [ 123.525878][ T7381] RDX: ffffc9000c591000 RSI: 000000000000071a RDI: 000000000000071b [ 123.533922][ T7381] RBP: ffffc90005006eb0 R08: ffffffff89fe667c R09: 1ffff1100b668ddc [ 123.541927][ T7381] R10: dffffc0000000000 R11: ffffed100b668ddd R12: ffff888028fb8000 [ 123.549983][ T7381] R13: ffff88802a0f5780 R14: ffff88802a0f5780 R15: ffffc90005006f00 [ 123.558400][ T7381] FS: 00007f17672976c0(0000) GS:ffff888124fab000(0000) knlGS:0000000000000000 [ 123.567444][ T7381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 123.574119][ T7381] CR2: 00007f28423849d3 CR3: 000000005aa74000 CR4: 00000000003526f0 [ 123.575742][ T5834] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 123.582365][ T7381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 123.582386][ T7381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 123.582399][ T7381] Call Trace: [ 123.593229][ T5834] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 123.597717][ T7381] [ 123.597737][ T7381] ? __build_skb_around+0x247/0x3d0 [ 123.597766][ T7381] ? __pfx_netdev_nl_dev_fill+0x10/0x10 [ 123.607790][ T5834] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 123.609056][ T7381] ? __alloc_skb+0x298/0x480 [ 123.609090][ T7381] ? __pfx___alloc_skb+0x10/0x10 [ 123.618465][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 123.619034][ T7381] netdev_genl_dev_notify+0x1fb/0x450 [ 123.619066][ T7381] ? __pfx_netdev_genl_dev_notify+0x10/0x10 [ 123.625788][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 123.629985][ T7381] ? dev_map_notification+0x967/0x9a0 [ 123.630018][ T7381] ? dev_map_notification+0x71/0x9a0 [ 123.630040][ T7381] ? ip_vs_dst_event+0x508/0x6a0 [ 123.689219][ T7381] netdev_genl_netdevice_event+0x81/0xa0 [ 123.695166][ T7381] notifier_call_chain+0x1a5/0x3f0 [ 123.700323][ T7381] unregister_netdevice_many_notify+0x16b7/0x2640 [ 123.706905][ T7381] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 123.713795][ T7381] ? call_rcu+0x7a4/0xad0 [ 123.718175][ T7381] ? lockdep_hardirqs_on+0x9d/0x150 [ 123.723512][ T7381] unregister_netdevice_queue+0x383/0x400 [ 123.729267][ T7381] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 123.735667][ T7381] ? kernfs_put+0x43e/0x460 [ 123.740199][ T7381] _cfg80211_unregister_wdev+0x163/0x590 [ 123.745999][ T7381] ieee80211_if_remove+0x25d/0x320 [ 123.751145][ T7381] ieee80211_del_iface+0x19/0x30 [ 123.756176][ T7381] cfg80211_remove_virtual_intf+0x23f/0x410 [ 123.762112][ T7381] genl_rcv_msg+0xb38/0xf00 [ 123.766712][ T7381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.771758][ T7381] ? __dev_queue_xmit+0x1780/0x3f60 [ 123.777042][ T7381] ? kasan_save_track+0x3f/0x80 [ 123.781926][ T7381] ? __kasan_slab_alloc+0x66/0x80 [ 123.787302][ T7381] ? do_syscall_64+0xf3/0x210 [ 123.792316][ T7381] ? __lock_acquire+0xad5/0xd80 [ 123.797237][ T7381] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 123.802635][ T7381] ? __pfx_nl80211_del_interface+0x10/0x10 [ 123.808504][ T7381] ? __pfx_nl80211_post_doit+0x10/0x10 [ 123.814345][ T7381] netlink_rcv_skb+0x208/0x480 [ 123.819124][ T7381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.824189][ T7381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.829518][ T7381] ? netlink_deliver_tap+0x2e/0x1b0 [ 123.834880][ T7381] genl_rcv+0x28/0x40 [ 123.838893][ T7381] netlink_unicast+0x7f8/0x9a0 [ 123.843742][ T7381] ? __pfx_netlink_unicast+0x10/0x10 [ 123.849065][ T7381] ? skb_put+0x114/0x1f0 [ 123.853419][ T7381] netlink_sendmsg+0x8c3/0xcd0 [ 123.858226][ T7381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.863585][ T7381] ? aa_sock_msg_perm+0x91/0x160 [ 123.868560][ T7381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.873924][ T7381] __sock_sendmsg+0x221/0x270 [ 123.878634][ T7381] ____sys_sendmsg+0x523/0x860 [ 123.883474][ T7381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.889034][ T7381] ? __fget_files+0x2a/0x420 [ 123.893932][ T7381] ? __fget_files+0x2a/0x420 [ 123.898561][ T7381] __sys_sendmsg+0x271/0x360 [ 123.903183][ T7381] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.908464][ T7381] ? do_syscall_64+0xb6/0x210 [ 123.913171][ T7381] do_syscall_64+0xf3/0x210 [ 123.917731][ T7381] ? clear_bhb_loop+0x45/0xa0 [ 123.922433][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.928387][ T7381] RIP: 0033:0x7f176638e169 [ 123.932819][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.952509][ T7381] RSP: 002b:00007f1767297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.961041][ T7381] RAX: ffffffffffffffda RBX: 00007f17665b5fa0 RCX: 00007f176638e169 [ 123.969094][ T7381] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 123.977641][ T7381] RBP: 00007f1766410a68 R08: 0000000000000000 R09: 0000000000000000 [ 123.985668][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.994023][ T7381] R13: 0000000000000000 R14: 00007f17665b5fa0 R15: 00007ffc72ff2068 [ 124.002290][ T7381] [ 124.005364][ T7381] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.012648][ T7381] CPU: 0 UID: 0 PID: 7381 Comm: syz.2.427 Not tainted 6.15.0-rc2-syzkaller-00563-g240ce924d271 #0 PREEMPT(full) [ 124.024533][ T7381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.034603][ T7381] Call Trace: [ 124.037885][ T7381] [ 124.040799][ T7381] dump_stack_lvl+0x241/0x360 [ 124.045477][ T7381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.050679][ T7381] ? __pfx__printk+0x10/0x10 [ 124.055282][ T7381] ? vscnprintf+0x5d/0x90 [ 124.059619][ T7381] panic+0x349/0x880 [ 124.063520][ T7381] ? __warn+0x174/0x4d0 [ 124.067671][ T7381] ? __pfx_panic+0x10/0x10 [ 124.072084][ T7381] __warn+0x344/0x4d0 [ 124.076051][ T7381] ? netdev_nl_dev_fill+0x6bc/0x860 [ 124.081245][ T7381] report_bug+0x2b3/0x500 [ 124.085572][ T7381] ? netdev_nl_dev_fill+0x6bc/0x860 [ 124.090778][ T7381] ? netdev_nl_dev_fill+0x6bc/0x860 [ 124.095971][ T7381] ? netdev_nl_dev_fill+0x6be/0x860 [ 124.101160][ T7381] handle_bug+0x89/0x170 [ 124.105395][ T7381] exc_invalid_op+0x1a/0x50 [ 124.109891][ T7381] asm_exc_invalid_op+0x1a/0x20 [ 124.114734][ T7381] RIP: 0010:netdev_nl_dev_fill+0x6bc/0x860 [ 124.120538][ T7381] Code: 1c 24 44 29 eb 4c 89 e8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 4a 01 00 00 41 89 5d 00 31 c0 e9 4d fe ff ff e8 65 4e c4 f7 90 <0f> 0b 90 e9 2c fa ff ff e8 57 4e c4 f7 90 0f 0b 90 42 80 3c 3b 00 [ 124.140134][ T7381] RSP: 0000:ffffc90005006d80 EFLAGS: 00010287 [ 124.146196][ T7381] RAX: ffffffff89fe6c5b RBX: 0000000000000000 RCX: 0000000000080000 [ 124.154157][ T7381] RDX: ffffc9000c591000 RSI: 000000000000071a RDI: 000000000000071b [ 124.162115][ T7381] RBP: ffffc90005006eb0 R08: ffffffff89fe667c R09: 1ffff1100b668ddc [ 124.170075][ T7381] R10: dffffc0000000000 R11: ffffed100b668ddd R12: ffff888028fb8000 [ 124.178034][ T7381] R13: ffff88802a0f5780 R14: ffff88802a0f5780 R15: ffffc90005006f00 [ 124.186009][ T7381] ? netdev_nl_dev_fill+0xdc/0x860 [ 124.191120][ T7381] ? netdev_nl_dev_fill+0x6bb/0x860 [ 124.196320][ T7381] ? __build_skb_around+0x247/0x3d0 [ 124.201510][ T7381] ? __pfx_netdev_nl_dev_fill+0x10/0x10 [ 124.207055][ T7381] ? __alloc_skb+0x298/0x480 [ 124.211638][ T7381] ? __pfx___alloc_skb+0x10/0x10 [ 124.216573][ T7381] netdev_genl_dev_notify+0x1fb/0x450 [ 124.221941][ T7381] ? __pfx_netdev_genl_dev_notify+0x10/0x10 [ 124.227834][ T7381] ? dev_map_notification+0x967/0x9a0 [ 124.233202][ T7381] ? dev_map_notification+0x71/0x9a0 [ 124.238479][ T7381] ? ip_vs_dst_event+0x508/0x6a0 [ 124.243413][ T7381] netdev_genl_netdevice_event+0x81/0xa0 [ 124.249042][ T7381] notifier_call_chain+0x1a5/0x3f0 [ 124.254156][ T7381] unregister_netdevice_many_notify+0x16b7/0x2640 [ 124.260576][ T7381] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 124.267336][ T7381] ? call_rcu+0x7a4/0xad0 [ 124.271656][ T7381] ? lockdep_hardirqs_on+0x9d/0x150 [ 124.276870][ T7381] unregister_netdevice_queue+0x383/0x400 [ 124.282584][ T7381] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 124.288821][ T7381] ? kernfs_put+0x43e/0x460 [ 124.293323][ T7381] _cfg80211_unregister_wdev+0x163/0x590 [ 124.298975][ T7381] ieee80211_if_remove+0x25d/0x320 [ 124.304087][ T7381] ieee80211_del_iface+0x19/0x30 [ 124.309019][ T7381] cfg80211_remove_virtual_intf+0x23f/0x410 [ 124.314911][ T7381] genl_rcv_msg+0xb38/0xf00 [ 124.319413][ T7381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.324426][ T7381] ? __dev_queue_xmit+0x1780/0x3f60 [ 124.329617][ T7381] ? kasan_save_track+0x3f/0x80 [ 124.334462][ T7381] ? __kasan_slab_alloc+0x66/0x80 [ 124.339488][ T7381] ? do_syscall_64+0xf3/0x210 [ 124.344167][ T7381] ? __lock_acquire+0xad5/0xd80 [ 124.349030][ T7381] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 124.354418][ T7381] ? __pfx_nl80211_del_interface+0x10/0x10 [ 124.360229][ T7381] ? __pfx_nl80211_post_doit+0x10/0x10 [ 124.365696][ T7381] netlink_rcv_skb+0x208/0x480 [ 124.370466][ T7381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.376006][ T7381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.381313][ T7381] ? netlink_deliver_tap+0x2e/0x1b0 [ 124.386510][ T7381] genl_rcv+0x28/0x40 [ 124.390494][ T7381] netlink_unicast+0x7f8/0x9a0 [ 124.395268][ T7381] ? __pfx_netlink_unicast+0x10/0x10 [ 124.400549][ T7381] ? skb_put+0x114/0x1f0 [ 124.404790][ T7381] netlink_sendmsg+0x8c3/0xcd0 [ 124.409562][ T7381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.414864][ T7381] ? aa_sock_msg_perm+0x91/0x160 [ 124.419816][ T7381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.425138][ T7381] __sock_sendmsg+0x221/0x270 [ 124.429817][ T7381] ____sys_sendmsg+0x523/0x860 [ 124.434580][ T7381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.439854][ T7381] ? __fget_files+0x2a/0x420 [ 124.444436][ T7381] ? __fget_files+0x2a/0x420 [ 124.449020][ T7381] __sys_sendmsg+0x271/0x360 [ 124.453616][ T7381] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.458768][ T7381] ? do_syscall_64+0xb6/0x210 [ 124.463439][ T7381] do_syscall_64+0xf3/0x210 [ 124.467935][ T7381] ? clear_bhb_loop+0x45/0xa0 [ 124.472631][ T7381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.478514][ T7381] RIP: 0033:0x7f176638e169 [ 124.482926][ T7381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.502539][ T7381] RSP: 002b:00007f1767297038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.510949][ T7381] RAX: ffffffffffffffda RBX: 00007f17665b5fa0 RCX: 00007f176638e169 [ 124.518918][ T7381] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 124.526879][ T7381] RBP: 00007f1766410a68 R08: 0000000000000000 R09: 0000000000000000 [ 124.534841][ T7381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.542839][ T7381] R13: 0000000000000000 R14: 00007f17665b5fa0 R15: 00007ffc72ff2068 [ 124.550861][ T7381] [ 124.554132][ T7381] Kernel Offset: disabled [ 124.558452][ T7381] Rebooting in 86400 seconds..