last executing test programs: 3.13778444s ago: executing program 3 (id=5035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="98000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r2, @ANYBLOB="51000e0080000000080211000000080211000000469fd5134a8f000000000f000000000064000000040600000000000025030000002d1a00000000000000000020000000000000000000000000000000000000000500a3000000000008000c006400000008000d"], 0x98}}, 0x0) 2.672781671s ago: executing program 3 (id=5043): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x18, r2, 0x1, 0x0, 0x0, {0x3, 0x0, 0x6}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030400000000000000000000000070b0808e076cde21299037abc935ec19c61f0721a65e9c43306ced4a6600500ff2c363aaf1c4dad878965f75abd563b223cde908111ba0abc424035c753139fc", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100736974001c00028008000c006600000008000200e000000106000d0000000000"], 0x48}, 0x1, 0xba01}, 0x0) 2.493490347s ago: executing program 3 (id=5048): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128l)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x14, 0x7ce6755b3a6b8c51, 0x0, 0x0, {0x2b}}, 0x14}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x6c}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb8}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)={0x14}, 0x14}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000680)="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", 0xf00}, {0x0}, {&(0x7f0000001cc0)="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", 0x167}, {&(0x7f00000004c0)}], 0x4, &(0x7f0000001700)=[{0x18, 0x101, 0x0, "14"}, {0x10, 0x118}, {0xe0, 0x103, 0x7, "5fc765be351f4903f872f3212a4842295ef75255941147878ca2de18e1f1d5af1e0fc780b88d0664f80867b7f9edfd5352587d97a8a92e5951988505237a9c03628f9738b83f17e83db39edef4d04e4c3a2c310bf39b38e4cff8012180d620f1d981002dba5d97bc806f1a41b52ce742d1f54210202306abce767baf3ea29bd37d3578f2cd20e1868b18f58b0edb72f1b9e994804f0de335e1f70b1a2164299483c90e85c74eb50de7693698171b2469a42e79f9246cc3d95380abb725193259bcd9e09ae6acc7cce176"}, {0xc8, 0x3a, 0x0, "b5c80ff71597f9dc390aa78c21ee4bff9c3625357524e97420ca404a02568deb50bf809fbd096ced445ad943bcc7d41be7a64ba868756489ecc204e6dd80eed7dc529a8f0652fddaac6eccfa5ab40ed3ce26328c213a4a4965f54f0cba07144ca5509b35477bfe668b16fcea5a0dcc03065e44306d30eb4c704e1a4b2e5f3d8890e28eadc31cc5de0634e1f9c73e966c454a235e47ac1e46ffeb401c230f643438e532b12b9055c566861290bef03a894fc990cbc8f4"}, {0x20, 0x0, 0x0, "f758022c89a9b9bcfde4"}, {0x10, 0x115}, {0x30, 0x0, 0x0, "8e077a9d2a20bef1d070f07ccb1f267d89bb132293fbe4712b"}, {0x40, 0x103, 0x7, "67ed0dc903aac6b1b7bd3af7e487b638ec0c7b65bc98a9e811a2443684de9dbb08779e5d44e8f4db7436"}, {0x98, 0x119, 0x0, "78aadfb36838c95225aa3d0719fde32eab9ffd28ff0c58595eb5ddf382baa4613a52e8547e959292622a98a2baa37fc96df674a9f4bed943b34520fe697f2841f2bcbcc1ad810c7a61f65552421ad5e02eb83134c42a7516c310fef1c366b56dc12ee897c76594f1a0392cb00eb840b57981bb0c3743a52f8a3146d0eda0d0ed04b6b7"}], 0x308}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002480)=[{0x78, 0x0, 0x0, "e14278e63b9c8083ede42784bdfeb8ecbd80c26e569d2382c1eebf5f84bdbaa0c0ac50b474f517d0b27951c4b2cd1028c6f18424b1ad69512209aed055eb614884ce62d9472c3d1b1ac4cfa995d9cd358fc071562f702241c830e28bf7175e0bbaad"}, {0xd0, 0x0, 0x0, "7c75401214e75920bb0b029313af0366fee4f5df9cc44a358351f0b1a827d781e3ec23649c9eadc14c1565ddfc3c8bde3c7b07dbb77f203c76a1fe8edca9f389c6a630bb1fb9c0c85d8a966d400d768b28fc81a71a3a4b86a7a7cd985beca0d6f1dbae80559a32d2979c9cf3f6ff93017f6220930f4f52c1651d26be5b9d4fa041f833f540df9e0deecbed26b748487b03b35016f46728c1aa53a29de1ac09c5663b1b2fee916d5f09140ccf74c7ec15c0ead9a5d03fe85f64a91946611e8eab"}, {0x40, 0x0, 0x0, "00328e8f994a4ea9e02149f202ada246c9b406a410758aeee1d11a66e77858a25d82d8815983bff8b2137131"}, {0x48, 0x0, 0x0, "5909f8e9151b1a3799c7ccebe24ba83f14d3b1f0fd6c6d16226d08052888dc84dab1d98277c2dc65fedeb13d75ff1c688d81fd0a47"}, {0xc0, 0x0, 0x0, "9f74c5a2f53efbe9593accc785a8dda0999d02faf2aa9dfa4ac69a2da6c097f2267145b390beab78f3b60f2d3d8f9ad1ce3be4c4920b3d4dd5510174b42da7550414b7a9a8d69af6ff5f71de8056878b16d94faae6409460557d52bbad17d0b2cd601d7352f49bedcd3ee2da3fa6c03d3a0b197a049d4f400850d28f326d8e650fb1db28cf80095ffbdaf11877a96a2d07be7d4468eea045858ba891bb96f0a6c6270ec41eaca63b7d18d8"}, {0x90, 0x0, 0x0, "7482c8cf5f8b6e53103162866badf5065aac5d0b33ebea1319919daf5bd1060558d5a1abd6be392c1bd85a14e92408a913b2c9a4fff880c2ad5bd24ecd52f74df35439b721b337dd32a7572355a945e62318dde41466aaccc3fe785e9a4ce1aedfc998ac9c3016a9f6119cdf3fa537f1f0f61b431623eddb67"}], 0x320}}, {{0x0, 0x0, &(0x7f0000004080)}}, {{&(0x7f0000003cc0)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x80, &(0x7f0000003f40)=[{&(0x7f0000003d40)="53cc22afb69ecfea9afc023a98d4954d8c8cf3ad679419bb53a4f770d5717e7835353c73fe897a52213198a386ab3e6fb71d3d045d9531d7e264472f7a9bdfe09727d45a3da40e0ae062dd13c91a0916bbbcb5e00d5994595653de40a0b71adb2781d98715c984acf56dd0a6ab2a4100d89a2820396d61c44b70c16ff17ed8242e5faffcb25474b6367e393787f94a515c0283a99ce0f96c38978b6a26018f30f6ab4416264dc785317721c10b693a7bfaf0a9d40c165fd2d117c0d4b38a79e8", 0xc0}, {&(0x7f0000003e00)="d8c2939a89d61eaa2dff25527cc10e748bc589bc96f10c433c99c3dbc897291234339a3e0d6e8ff9a37200bf15903f13bb654929a735f12b21e2d602e93f0c398f82a87385ba2cea0b411421c6467d72182b5f6e2da966d1d62507ae6a239975720fc1f5c6515c2b77a6fec4a3a95e00f4bc37", 0x73}, {&(0x7f0000003e80)="2bb1e1bd6d8da02146fdd77c104b59a53928611220a77a37eb36eb0896708a9ad941a00461fa535f4bf473956babf8ff16f630034423525308e919643f5ec2511d79132f0db22f2410cfa101630633215e1b5f346bd35f9c64b189508148623c342287bedfe10c6c1f904ffca2d1eb45021197c9d0a6cfee186a79dae804b029805e3c1f894b188062ed604401f1af58fba04457b2e61acd9e2e80", 0x9b}], 0x3}}, {{&(0x7f00000005c0)=@ll={0x11, 0x8, r5, 0x1, 0x6, 0x6, @remote}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001580)="78c90495ccb5ab97653e951e52affd8827a65e9bda1a4fc94f65e34e99b5846c45512ec96b86186712144b6ffd257ed1ff1452a9433b0c8ca727a78162b90913ece508159ec0c64748012689471e5223f4344bb2fc26103df308d9cf94f87fea1502112b37af9010184525c3186539f49c4adbd08db58a6e31aabfedffbdbe4ff5839e71123708ca6ab93dca0d842dd1bf73eb80a6b491b5caa94d8ed0addde3120c6bd9889de7da7e46ed75ad02791f1d23301487df6063ae587ca39da30f8d1bbf6968a8bae0", 0xc7}, {&(0x7f0000001a40)="c7b44d0d350f043150a1b744eff11b88c8594b1f014e7eb0b17de7102af947a0ffc8c9b69d741865941f010f34272c9bf9b26e41f3275b52eaf88082d5d14960b1fbe4162900ff767369226e", 0x4c}, {&(0x7f0000001ac0)="1383efa233e5942fadfe4b59a78c2fdd0427c8201f1c9b1de78f878da18f5402ce0af0795430de5aaaf54437327c3236a8d38bbb8d14dde4a409c9b90493c56b90eedc58722aa8551bba3badf15e91bd219247a2d7f95c0d2896f3a8811fae092c5f2ea4e3578b8d1bec757ed178ea6bdd546c7b57cf444c3c5750b21e3ed97275cea5c2d0e5f8c5fe035fb10ffeb384c7c8b46dad6568999e6e60b8f023a82ea9fa60a33858b3667a8b2a3935b9bde13f7afc7820cc", 0xb6}], 0x3, &(0x7f00000027c0)=[{0x178, 0xff, 0x80000001, "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"}, {0x108, 0x116, 0x1, "bc5d975caded987b6babc9a50f48003cee536c13c6dd2df4fe424a18e0c4a4eb68a02c7aba3670c1232f64fce63cad46bac73a1fa10ca1146ce7ea935be9ff9c5ef121635adf808124ba89f3fde6c04f116a6aae32ff87cd2afc4cc47a4c975836f07db8b75ddcdddda46297584ad0ff2eb0c5409a8a5fd6e529319260b9f003e20331275dc3dad262c2152aad3d3968c6413bd7b16c6ad2623aa21e9c966b4d3819db36c0b53826db977a6b50e144980e0dab680637ba54031a535c44ac2e520c88f0527472eb2bff4dfe103ce12c98b21e69904c1ac261273dc37ea30915ebffcd4514b1850110009423fc622dbd94c8e4"}, {0x1010, 0x111, 0xa, "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"}], 0x1290}}], 0x5, 0x2400c0c0) socketpair(0x1, 0x6, 0x5, &(0x7f0000000440)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x38, 0x140e, 0x300, 0x0, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8005}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x20, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, r9, 0x300, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 1.899829487s ago: executing program 4 (id=5054): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0) 1.771878679s ago: executing program 4 (id=5058): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16, @ANYBLOB="f70300000000a6"], 0x18}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) (async, rerun: 32) shutdown(r4, 0x0) (async, rerun: 32) sendmmsg(r4, &(0x7f00000080c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120010001600020000000600180040000000050017"], 0x50}}, 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r10, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r8], 0x30}}, 0x0) (rerun: 64) r11 = socket(0x10, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000480)) (async) recvmmsg(r11, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/239, 0xef}], 0x2}}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004200817a"], 0x14}}, 0x0) (async, rerun: 64) r12 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) 1.770537234s ago: executing program 3 (id=5059): r0 = socket$nl_rdma(0x10, 0x3, 0x14) recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0)="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", 0x381) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000640), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000000e1443eb0000000000001900080001"], 0x18}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AWAKE_WINDOW={0x6}]}]}, 0x28}}, 0x20000000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) accept$unix(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000001c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000100)=0x20000002, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x85, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @broadcast}}}, &(0x7f0000000280)=0x90) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010011a80100003800c0005"], 0x270}}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r10, 0x0) 1.504868903s ago: executing program 2 (id=5063): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f70000000300e2ffca1b1f0000000007c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d0001400a100c00bdad446bdcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff0000000000000000", 0x89}], 0x1}, 0x0) 1.433888122s ago: executing program 1 (id=5064): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000007a0a14000000020ab5a300000000000000000000000014000000110001"], 0x3c}}, 0x0) 1.332016091s ago: executing program 2 (id=5065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x68, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x4c, 0x33, @beacon={{{}, {}, @device_b}, 0x2000000, @random, 0x0, @void, @val={0x1, 0x3, [{}, {}, {}]}, @val={0x3, 0x1, 0x3c}, @val={0x4, 0x6}, @val={0x6, 0x2, 0x800}, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x68}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000180)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}]}, {0xffffffffffffffbf}]}]}, 0x30}}, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000000, 0x38cc3e062f77cffe, 0xffffffffffffffff, 0x72ba0000) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x31004000}, 0xc, &(0x7f0000002140)={&(0x7f0000000700)=ANY=[@ANYBLOB="50070072b41d3a35f7d922317377e24d4b0500", @ANYRES16=r3, @ANYBLOB="00032bbd7000fbdbdf250c0000000800370002000000080037000000000009000700c50fdb702800000011000700fb53408ca676968cb91dfe235c0000000900070018d39ec94f000000"], 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x20048042) socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="240000001a006da800000000000000001c0000000000000000000000040004"], 0x24}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0), 0xfec8) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000), 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000380)=""/196, 0xc4}], 0x2}}], 0x2, 0x0, 0x0) 1.331841295s ago: executing program 0 (id=5066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x20000000}}, 0x78}}, 0x0) 1.331433521s ago: executing program 4 (id=5067): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8060000000000000000000000000aa140006"], 0x54}}, 0x0) 1.245020802s ago: executing program 1 (id=5068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x4e22}, 0x1c) (async) listen(r0, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) unshare(0x6020400) (async) r3 = socket$rxrpc(0x21, 0x2, 0x2) shutdown(r3, 0x0) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r4, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0xffffffbb) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000150000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x6) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x30, 0x24, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (async) r11 = socket(0x29, 0x3, 0x9) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x1402, 0x3}, 0x10}}, 0x0) (async) setsockopt$SO_BINDTODEVICE(r11, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000010000001400030073797a5f74756e00000000000000000008000a00", @ANYRES32=r10], 0x3c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r13, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_emit_ethernet(0x17b, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000001450600fe8000000000000000000000000000bbff02000000000000000000000000000100004e22"], 0x0) 1.229484362s ago: executing program 0 (id=5069): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r2, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003001900000008000a"], 0x3c}}, 0x0) 1.128272759s ago: executing program 4 (id=5070): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x28, 0x4, 0x6, 0x101, 0x0, 0x900, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}}, 0x0) 1.124579108s ago: executing program 4 (id=5071): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cgroup.max.descendants\x00', 0x2, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0, 0x4}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x11) close(0xffffffffffffffff) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmmsg$inet(r3, &(0x7f0000000380)=[{{0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x6000}}], 0x300, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="380000002d000100000000001f00000000000000", @ANYRES32=r7, @ANYBLOB="0b000080976b64086860300014000180325531db20a2d0431d1ef0f29674d908"], 0x38}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a80258c6394f90324fc60100005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='N-N:5/F'], 0x6a) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000001fc0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r8, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x38, r9, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}]}, 0x38}}, 0x0) 1.071139873s ago: executing program 1 (id=5072): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) close(r0) 940.283999ms ago: executing program 0 (id=5073): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000071111f0000000000630a00ff000000009500000000000000b003000000e54d9a4320c267fb3605f6c3f687dcfe09064db290cb1e5db93406c6a38b2b345f8f3c747a79a06ef7917f53fef4d0e04e3b462e606c8bb1d523659dfd3f5e898b83540000c2c680a56b7cf106b2e1b6c8315202d1b30aa6ea5867dc08cc"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff6c, 0x10, &(0x7f0000000000), 0xfffffe51, 0xffffffffffffffff}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='lo\x00') setsockopt$WPAN_WANTLQI(r0, 0x0, 0x3, &(0x7f0000000040), 0x4) 841.704564ms ago: executing program 3 (id=5074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000002005000400000000000900020073797a31000000001400078005001500030000000800124000100000050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) 767.85541ms ago: executing program 1 (id=5075): socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x138) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="380030803400018008000100000000002800038008000200030000000c0004000000000000000000060001"], 0x54}, 0x1, 0xf0ffffffffffffff}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4015) 712.224587ms ago: executing program 0 (id=5076): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x4, 0x80, 0x3d8da034, 0xa, r0, 0x9a, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0xe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000000)=0x7, 0x4) connect$inet6(r2, &(0x7f0000000080), 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$packet(0x11, 0x0, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x304}, "43e47115b50762ce", "2068284d135a5b537036262c0ca5bb83", "996b7610", "3d977ce8128f0142"}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) 695.960714ms ago: executing program 2 (id=5077): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="020f00001400000000000000fddbdf25080012000000220000000000000000020600010000000000000400000000000000000001000000000000000000000000fe8000000000000000000000000000aa05000500000000000a0000010000000000000000000000000000000000000001000000000000000005000600000000000a"], 0xa0}}, 0x0) 621.839246ms ago: executing program 4 (id=5078): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000013c0)={0x0, 0x64}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000002080), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x3}, 0x18) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0xf0, {0x0, 0x0, 0x74, r6}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 520.271048ms ago: executing program 2 (id=5079): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e08f0ff070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x6558) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x154}}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x7) socket$inet(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @multicast}, 0x3e, {0x2, 0x0, @broadcast}, 'veth1_to_bond\x00'}) (async) ioctl$sock_inet_SIOCDARP(r3, 0x8953, &(0x7f00000004c0)={{0x2, 0x0, @empty}, {0x0, @multicast}, 0x3e, {0x2, 0x0, @broadcast}, 'veth1_to_bond\x00'}) pipe(&(0x7f0000000040)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x9c0, [], 0x0, 0x0, 0x0}, 0xa38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) 253.954952ms ago: executing program 1 (id=5080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001800d0001007564703a73797a30000000002c0004001400010002080000e000000100000000000b0000140002"], 0x54}}, 0x0) 241.251358ms ago: executing program 2 (id=5081): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000c4e82ff00000000000000008500000041000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900}, 0x50) 148.329343ms ago: executing program 0 (id=5082): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000a000000034000030000000003000400010000f0", 0x24) 110.268403ms ago: executing program 3 (id=5083): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="611251000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52004507000010000000d60600000ee60000bf050000000000000f630000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c196738b5f32b095f5d5b996b9e8d897e461c01c697671d1000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5c}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x5, 0x40, 0x0, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5, 0xa}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000380), 0x20000000}, 0x20) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r3 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r3, &(0x7f0000000580)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f00000004c0), 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r3], 0x82}}, 0x20000000) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x7000, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) sendmsg$tipc(r4, &(0x7f00000008c0)={&(0x7f0000000700)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'wlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c00)={0x448, 0x12, 0x20, 0x70bd25, 0x25dfdbff, {0x1e, 0x9, 0xb4, 0xb, {0x4e21, 0x4e20, [0x2, 0x3, 0x0, 0x4], [0x9, 0xe, 0x12, 0xb], r7, [0x9, 0x400]}, 0x6, 0xfffffffe}, [@INET_DIAG_REQ_BYTECODE={0x46, 0x1, "344a4889a17e5aeb0609cc1878d32042b47b0c4ec6e811f77bbf9c8cc242d85e4409b33b64ce60e5f783d70c94cf6db88fd142d7e1fa013b980cd52c05770203e7ca"}, @INET_DIAG_REQ_BYTECODE={0xe8, 0x1, "e80fab742f449c4d8e2605bc19e5a26fbb91fc8b0b3e1138f88c1037e89910ac13380aca7f8d82ec932135cb1b12b5a36048210a365cf325701e16a0e2e79f563f2f5089bd6697672d11e53e9c1533018bcea9145730ae37d2eba3e73ce730040890940c664a90220100e851c2a313a9a3e19c36e01574481791c05581a1570050a9426edd35ee4c4470bce529beeca2290306bda8504a58a8e66a49cc37e80d1163a3d0e62222af263e3aad754e3876133f24f3360c5eb648bc4b449529fdc7898704f27eaf8a063e7d4a40a75ac5e18b0e43a90498c6892576323d5d5ed8194cfe939a"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "328194f224240d1d86e72b051a0380fb7dc26f51fd70684be065a2c36106e1a22609fdc5d40a03a1f1393ef592d8041275aea52133be8aada87b7ddaff75abc4e838f82d7510fb234fa527f2855d645d42e83452afe42f3df77f2f11305966cfb7b32424f8e3de27cb2bd642e6220473821a6651707c3c1cee4f497c02aa15370c7b888b8deb84c371fedde364a42d03ad491326c9027f3fec1a628a73681195a712df0869fb1b3f7e634d77b3b9b07a02449a73bcf8479076954072"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "a4dcc4b89fb83627bd113183e6e6a51f68901831b01cf30a3272073559e920d652beb5f7bcccb443595d2c299abb2e89bf62b92511a7979ede6d09fadeadbf2a8b256c664ad11a4386527b70183c687cd16d8e76e47b9c701eac3254a77c05b437089a72c3585f5817440596512a2bc78857b0da13d0b96a0d5e38465411603b97b719ae7d26396bbe5538447e5e004c0758136d94d22fe37495ab152fa73524e2358d48f0046afdf73115172473e6031e2408e0f28a9cfa6f728f74490a309cff09c02c0e39a8fa8d5bb4fa37256ef4159937"}, @INET_DIAG_REQ_BYTECODE={0x8f, 0x1, "5fcff7c662cfc95cc9ca2a4aa049227755afe38628368afa7e5fa82a6cc83bc9e4dee1cb95b89e5acd7448c7f0a4cdc5efaa67619b8c37bad4e0cd4833c49c724e333384ce3867c37b3abc134c53d420a7ba1fc71a3ea277a9be06a1ff3a927847aa719956a05747ab04e32817643fee28c6b2e149f78b6173327ecaeda20166a901a1ae53eadecb09e3a2"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x9e, 0x1, "de34cf23f9c74ade08a14b43139b6ad3224e393ce9577abe02d3e75dbc864ebd9a6fd166ad10c0faaf5e7e7a00b0e0943f2b7c208b1aba5be88f992b11ac69a476e0a6f693d16a0cc05838f7b94a7ce4c9f22f0b82e4c3daf0014b9386bfb9d5be33c74ad9b7b525d48cd05fbf1f5e66218aaa33c47333b5e411bd3454084a031b0badf96842207934a7af16b33ddc5aaef3613dd0f5979e7db0"}]}, 0x448}, 0x1, 0x0, 0x0, 0x10}, 0x40000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) 84.018502ms ago: executing program 2 (id=5084): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x14, r1, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) 245.253µs ago: executing program 1 (id=5085): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x400000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x108) close(0xffffffffffffffff) 0s ago: executing program 0 (id=5086): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x80005, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000040400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d"], 0x0, 0x5a}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {0xc}, {0x8100}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): z.1.2807'. [ 237.003808][T13177] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 237.156860][T13194] netlink: 'syz.1.2810': attribute type 11 has an invalid length. [ 237.282241][T13200] FAULT_INJECTION: forcing a failure. [ 237.282241][T13200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.333097][T13200] CPU: 0 PID: 13200 Comm: syz.2.2814 Not tainted 6.10.0-rc7-syzkaller-02012-g51b35d4f9d88 #0 [ 237.343320][T13200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 237.353400][T13200] Call Trace: [ 237.356705][T13200] [ 237.359653][T13200] dump_stack_lvl+0x241/0x360 [ 237.364362][T13200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.369594][T13200] ? __pfx__printk+0x10/0x10 [ 237.374214][T13200] ? __pfx_lock_release+0x10/0x10 [ 237.379271][T13200] should_fail_ex+0x3b0/0x4e0 [ 237.382805][T13206] netlink: 'syz.4.2817': attribute type 8 has an invalid length. [ 237.383962][T13200] _copy_to_user+0x2f/0xb0 [ 237.383992][T13200] bpf_test_finish+0x30f/0x8b0 [ 237.400895][T13200] ? __pfx_bpf_test_finish+0x10/0x10 [ 237.406214][T13200] ? _copy_from_user+0xa6/0xe0 [ 237.411004][T13200] ? bpf_test_init+0x15a/0x180 [ 237.415794][T13200] bpf_prog_test_run_xdp+0x905/0x11b0 [ 237.421200][T13200] ? __pfx_lock_release+0x10/0x10 [ 237.426260][T13200] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 237.432120][T13200] ? __fget_files+0x29/0x470 [ 237.436759][T13200] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 237.442655][T13200] bpf_prog_test_run+0x33a/0x3b0 [ 237.447623][T13200] __sys_bpf+0x48d/0x810 [ 237.451900][T13200] ? __pfx___sys_bpf+0x10/0x10 [ 237.456700][T13200] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.462709][T13200] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.469061][T13200] ? do_syscall_64+0x100/0x230 [ 237.473860][T13200] __x64_sys_bpf+0x7c/0x90 [ 237.478308][T13200] do_syscall_64+0xf3/0x230 [ 237.482838][T13200] ? clear_bhb_loop+0x35/0x90 [ 237.487534][T13200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.493456][T13200] RIP: 0033:0x7f2249175bd9 [ 237.497889][T13200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.517555][T13200] RSP: 002b:00007f2249f5a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.525976][T13200] RAX: ffffffffffffffda RBX: 00007f2249303f60 RCX: 00007f2249175bd9 [ 237.534465][T13200] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 237.542440][T13200] RBP: 00007f2249f5a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 237.550407][T13200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.558371][T13200] R13: 000000000000004d R14: 00007f2249303f60 R15: 00007ffe017ef7a8 [ 237.566357][T13200] [ 237.712849][T13215] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2818'. [ 238.185001][T13238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2829'. [ 238.295942][T13250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2832'. [ 238.414979][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'. [ 238.444162][T13259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2835'. [ 238.577805][T13268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.701756][T13278] netlink: 'syz.1.2843': attribute type 2 has an invalid length. [ 238.861576][T13282] netlink: 'syz.1.2844': attribute type 1 has an invalid length. [ 239.887785][T13345] vlan0: entered promiscuous mode [ 240.092961][T13348] vlan3: entered promiscuous mode [ 240.119158][T13348] team0: entered promiscuous mode [ 240.129089][T13348] team_slave_0: entered promiscuous mode [ 240.144806][T13348] team_slave_1: entered promiscuous mode [ 240.198864][T13348] team0: left promiscuous mode [ 240.207043][T13348] team_slave_0: left promiscuous mode [ 240.229162][T13348] team_slave_1: left promiscuous mode [ 240.602927][T13380] netlink: zone id is out of range [ 240.658816][T13379] netlink: 'syz.3.2871': attribute type 1 has an invalid length. [ 240.910533][T13393] netlink: 'syz.1.2878': attribute type 13 has an invalid length. [ 241.063024][T13396] vlan3: entered promiscuous mode [ 241.389001][T13410] netlink: 'syz.1.2884': attribute type 4 has an invalid length. [ 241.517219][T13410] netlink: 'syz.1.2884': attribute type 10 has an invalid length. [ 241.591947][T13410] team0: Port device netdevsim0 removed [ 241.630379][T13410] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 241.718211][T13429] __nla_validate_parse: 13 callbacks suppressed [ 241.718236][T13429] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2892'. [ 241.773262][T13432] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 241.851458][T13432] macvtap2: entered promiscuous mode [ 241.873670][T13432] macvtap2: entered allmulticast mode [ 241.910685][T13435] ɶƣ0GC¦: entered promiscuous mode [ 241.918180][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2893'. [ 241.968358][T13436] macvtap2: left allmulticast mode [ 242.116888][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2898'. [ 242.345773][T13462] Bluetooth: MGMT ver 1.23 [ 242.545827][T13465] can: request_module (can-proto-0) failed. [ 242.688546][T13483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2911'. [ 242.762608][T13490] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.2913'. [ 243.040475][T13511] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2920'. [ 243.057885][T13514] SET target dimension over the limit! [ 243.238356][T13521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2925'. [ 243.408194][T13534] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 243.492843][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2934'. [ 243.522799][T13543] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2936'. [ 243.677243][T13553] netlink: 'syz.0.2940': attribute type 29 has an invalid length. [ 243.704577][T13549] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 243.718393][T13553] netlink: 'syz.0.2940': attribute type 29 has an invalid length. [ 243.767552][T13549] netlink: 'syz.3.2936': attribute type 11 has an invalid length. [ 243.804870][T13565] netlink: 'syz.1.2942': attribute type 1 has an invalid length. [ 243.858291][T13565] netlink: 'syz.1.2942': attribute type 1 has an invalid length. [ 244.033003][T13577] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (64) [ 244.227953][T13585] netlink: 'syz.0.2952': attribute type 1 has an invalid length. [ 244.367376][T13589] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 244.406449][T13589] bond2: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 244.465987][T13589] bond2: (slave vcan0): making interface the new active one [ 244.499457][T13589] bond2: (slave vcan0): Enslaving as an active interface with an up link [ 245.401047][T13638] netlink: 'syz.2.2967': attribute type 4 has an invalid length. [ 245.510136][T13632] netlink: 'syz.4.2969': attribute type 5 has an invalid length. [ 245.561898][T13632] : entered promiscuous mode [ 245.584484][T13637] syz_tun: left allmulticast mode [ 245.614543][T13637] syz_tun: left promiscuous mode [ 245.621585][T13637] bridge0: port 3(syz_tun) entered disabled state [ 245.674346][T13637] bridge_slave_1: left allmulticast mode [ 245.697104][T13637] bridge_slave_1: left promiscuous mode [ 245.703048][T13637] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.739196][T13637] bridge_slave_0: left allmulticast mode [ 245.747482][T13637] bridge_slave_0: left promiscuous mode [ 245.758602][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.174856][T13669] netlink: 'syz.3.2978': attribute type 13 has an invalid length. [ 246.201507][T13670] netlink: 'syz.1.2979': attribute type 1 has an invalid length. [ 246.351037][T13687] netlink: 'syz.0.2984': attribute type 4 has an invalid length. [ 246.892741][T13719] __nla_validate_parse: 14 callbacks suppressed [ 246.892762][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2997'. [ 247.595810][T13756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3010'. [ 247.836071][T13773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3018'. [ 247.850688][T13772] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.3017'. [ 247.891526][T13778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3015'. [ 247.953347][T13778] vlan3: entered promiscuous mode [ 247.972380][T13778] vlan0: entered promiscuous mode [ 248.002979][T13778] vlan0: left promiscuous mode [ 248.524365][T13817] syz_tun: entered promiscuous mode [ 248.559098][T13817] batadv_slave_0: entered promiscuous mode [ 248.599634][T13817] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.641651][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3034'. [ 248.651825][T13817] syz_tun: left promiscuous mode [ 248.676928][T13817] batadv_slave_0: left promiscuous mode [ 248.747008][T13818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 248.789334][T13818] dummy0: entered promiscuous mode [ 248.794823][T13818] macvtap1: entered promiscuous mode [ 248.812946][T13818] macvtap1: entered allmulticast mode [ 248.819757][T13818] dummy0: entered allmulticast mode [ 248.844041][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 248.877325][T13827] veth0: entered promiscuous mode [ 248.886705][T13827] veth0: left promiscuous mode [ 248.974895][T13833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3038'. [ 248.993858][T13833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3038'. [ 249.160258][T13846] validate_nla: 5 callbacks suppressed [ 249.160291][T13846] netlink: 'syz.1.3043': attribute type 2 has an invalid length. [ 249.179445][T13850] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 249.619021][T13874] netlink: 'syz.4.3054': attribute type 10 has an invalid length. [ 249.628297][T13874] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 249.636056][T13874] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 249.653026][T13874] team0: Port device netdevsim0 added [ 249.923478][T13888] netlink: 'syz.4.3059': attribute type 2 has an invalid length. [ 250.321599][T13909] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 250.720700][T13922] netlink: 'syz.0.3070': attribute type 2 has an invalid length. [ 250.801837][T13936] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 250.848073][T13938] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 251.019517][T13947] netlink: 'syz.3.3077': attribute type 8 has an invalid length. [ 251.132047][T13950] netlink: 'syz.1.3078': attribute type 1 has an invalid length. [ 251.416700][T13953] netlink: 'syz.0.3079': attribute type 2 has an invalid length. [ 251.424502][T13953] netlink: 'syz.0.3079': attribute type 1 has an invalid length. [ 251.621716][ T4491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 251.633172][ T4491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 251.642816][ T4491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 251.656655][ T4491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 251.666771][ T4491] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 251.689485][ T4491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 251.811181][ T74] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.824172][ T74] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.978180][ T74] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 251.998265][ T74] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.029972][T13981] __nla_validate_parse: 12 callbacks suppressed [ 252.029992][T13981] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3088'. [ 252.054864][T13984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3090'. [ 252.182143][ T74] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.204102][ T74] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.272354][T13987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3091'. [ 252.315799][T13996] can: request_module (can-proto-0) failed. [ 252.351592][T13995] can: request_module (can-proto-0) failed. [ 252.460567][ T74] team0: Port device netdevsim0 removed [ 252.491342][ T74] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 252.501830][T14013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3097'. [ 252.521178][T14011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3096'. [ 252.534253][ T74] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.590663][T14018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'. [ 252.676857][T14016] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3098'. [ 252.882210][T14028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3101'. [ 253.422178][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3109'. [ 253.550968][ T74] batman_adv: batadv0: Removing interface: gretap1 [ 253.729017][ T74] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.743555][ T74] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.760375][ T74] bond0 (unregistering): Released all slaves [ 253.777640][T14054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3110'. [ 253.792075][T14051] netlink: 'syz.3.3108': attribute type 4 has an invalid length. [ 253.806652][ T4491] Bluetooth: hci2: command tx timeout [ 253.839567][T13969] chnl_net:caif_netlink_parms(): no params data found [ 253.906612][ T74] : left promiscuous mode [ 254.440033][T13969] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.486699][T13969] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.494008][T13969] bridge_slave_0: entered allmulticast mode [ 254.538002][T13969] bridge_slave_0: entered promiscuous mode [ 254.608931][T13969] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.625843][T13969] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.649965][T13969] bridge_slave_1: entered allmulticast mode [ 254.664804][T13969] bridge_slave_1: entered promiscuous mode [ 254.971141][T13969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.136116][ T74] hsr_slave_0: left promiscuous mode [ 255.181397][ T74] hsr_slave_1: left promiscuous mode [ 255.222197][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.249782][ T74] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.270508][ T74] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.291301][ T74] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.393147][ T74] dummy0: left allmulticast mode [ 255.400999][ T74] dummy0: left promiscuous mode [ 255.408160][ T74] vlan0: left promiscuous mode [ 255.414106][ T74] macvtap0: left promiscuous mode [ 255.433376][ T74] veth1_macvtap: left promiscuous mode [ 255.450345][ T74] veth0_macvtap: left promiscuous mode [ 255.466756][ T74] veth1_vlan: left promiscuous mode [ 255.483551][ T74] veth0_vlan: left promiscuous mode [ 255.552486][T14157] netlink: 'syz.0.3141': attribute type 9 has an invalid length. [ 255.885651][ T4491] Bluetooth: hci2: command tx timeout [ 255.991373][ T29] audit: type=1107 audit(1721147704.921:2): pid=14167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 256.051120][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.362491][ T74] team0 (unregistering): Port device team_slave_1 removed [ 256.411221][ T74] team0 (unregistering): Port device team_slave_0 removed [ 256.870247][T13969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.979088][T14179] netlink: 'syz.1.3142': attribute type 4 has an invalid length. [ 256.988637][T14164] netlink: 'syz.0.3141': attribute type 9 has an invalid length. [ 257.029896][T14182] netlink: 'syz.1.3142': attribute type 4 has an invalid length. [ 257.041202][T14183] netlink: 'syz.3.3137': attribute type 1 has an invalid length. [ 257.053056][T14183] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 257.270094][T13969] team0: Port device team_slave_0 added [ 257.332410][T13969] team0: Port device team_slave_1 added [ 257.398567][T14200] __nla_validate_parse: 11 callbacks suppressed [ 257.398587][T14200] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3144'. [ 257.474864][T14200] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3144'. [ 257.501739][T13969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.510292][T14200] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 257.519597][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.551602][T13969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.568189][T13969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.576789][T13969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.623046][T13969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.638423][T14206] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3151'. [ 257.789490][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3151'. [ 257.863175][T13969] hsr_slave_0: entered promiscuous mode [ 257.917421][T13969] hsr_slave_1: entered promiscuous mode [ 257.931448][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3155'. [ 257.945670][T13969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.962613][T13969] Cannot create hsr debugfs directory [ 257.976048][ T4491] Bluetooth: hci2: command tx timeout [ 258.098172][T14225] netlink: 'syz.3.3157': attribute type 2 has an invalid length. [ 258.114319][T14225] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3157'. [ 258.259748][T14229] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3159'. [ 258.282309][T14229] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 258.598672][T14241] batadv_slave_1: entered promiscuous mode [ 258.701817][T14249] netlink: 'syz.1.3165': attribute type 6 has an invalid length. [ 258.715435][T14240] batadv_slave_1: left promiscuous mode [ 258.787042][T14253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3164'. [ 258.938510][T14259] netlink: 'syz.2.3168': attribute type 4 has an invalid length. [ 258.984891][T14259] netlink: 'syz.2.3168': attribute type 10 has an invalid length. [ 259.023108][T14259] bond0: (slave netdevsim0): Releasing backup interface [ 259.051837][T14259] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 259.071162][T14259] team0: Port device netdevsim0 added [ 259.091637][T14264] netlink: 'syz.2.3168': attribute type 10 has an invalid length. [ 259.117349][T14264] team0: Port device netdevsim0 removed [ 259.124094][T14264] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 259.133890][T14264] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 259.154371][T14267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 259.170762][T13969] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 259.184166][T13969] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 259.222634][T13969] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 259.262952][T13969] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 259.304086][T14271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3172'. [ 259.524694][T13969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.639140][T13969] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.727156][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.734329][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.774186][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.781446][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.045444][ T4491] Bluetooth: hci2: command tx timeout [ 260.276738][T14309] can: request_module (can-proto-0) failed. [ 260.379564][T13969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.840795][T13969] veth0_vlan: entered promiscuous mode [ 260.877884][T13969] veth1_vlan: entered promiscuous mode [ 260.973004][T13969] veth0_macvtap: entered promiscuous mode [ 260.991039][T13969] veth1_macvtap: entered promiscuous mode [ 261.058660][T14345] team0: Device macvtap1 is already an upper device of the team interface [ 261.132797][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.148324][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.159837][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.204132][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.255661][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.296529][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.314302][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.342697][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.392934][T13969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.436526][T14357] validate_nla: 3 callbacks suppressed [ 261.436546][T14357] netlink: 'syz.3.3202': attribute type 4 has an invalid length. [ 261.478352][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.521270][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.555080][T13969] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.586631][T13969] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.603606][T13969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.702763][T14370] netlink: 'syz.0.3204': attribute type 2 has an invalid length. [ 261.760506][T14369] batman_adv: batadv0: Adding interface: gretap1 [ 261.784461][T14369] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.842070][T14369] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 261.864117][T13969] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.880716][T13969] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.904896][T13969] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.928861][T13969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.261915][ T8023] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.286071][ T8023] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.400506][T14393] ipvlan2: entered allmulticast mode [ 262.411108][T14393] veth0_vlan: entered allmulticast mode [ 262.447900][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.455428][T14396] __nla_validate_parse: 7 callbacks suppressed [ 262.455445][T14396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3214'. [ 262.458170][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.692141][T14406] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3216'. [ 262.869202][T14416] tipc: Enabling of bearer rejected, failed to enable media [ 263.236920][T14433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3228'. [ 263.270687][T14438] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.3230'. [ 263.308157][T14438] netlink: zone id is out of range [ 263.321120][T14438] netlink: zone id is out of range [ 263.332265][T14438] netlink: zone id is out of range [ 263.522163][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3233'. [ 263.660960][T14466] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 263.684872][T14466] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.3235'. [ 263.699523][T14466] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 264.043207][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3247'. [ 264.210957][T14504] netlink: 'syz.4.3251': attribute type 1 has an invalid length. [ 264.211692][T14501] netlink: 'syz.3.3248': attribute type 1 has an invalid length. [ 264.249667][T14501] netlink: 9372 bytes leftover after parsing attributes in process `syz.3.3248'. [ 264.293641][T14501] netlink: 'syz.3.3248': attribute type 1 has an invalid length. [ 264.454375][T14516] netlink: 'syz.0.3256': attribute type 3 has an invalid length. [ 264.651542][T14525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3261'. [ 264.713859][T14529] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 264.741067][T14534] veth0: entered promiscuous mode [ 264.750490][T14534] veth0: left promiscuous mode [ 264.802620][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'. [ 265.360963][T14569] netlink: 'syz.4.3277': attribute type 10 has an invalid length. [ 265.407052][T14569] team0: Failed to send options change via netlink (err -105) [ 265.423652][T14569] team0: Port device netdevsim0 added [ 265.432681][T14572] netlink: 'syz.1.3279': attribute type 7 has an invalid length. [ 265.630634][T14579] netlink: 'syz.4.3281': attribute type 11 has an invalid length. [ 267.007527][T14669] tipc: Enabling of bearer rejected, failed to enable media [ 267.483691][T14696] __nla_validate_parse: 14 callbacks suppressed [ 267.483712][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3330'. [ 267.693828][T14708] validate_nla: 1 callbacks suppressed [ 267.693848][T14708] netlink: 'syz.1.3336': attribute type 3 has an invalid length. [ 267.698149][T14711] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3339'. [ 267.716917][T14708] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3336'. [ 267.750445][T14711] vlan2: entered promiscuous mode [ 267.758286][T14711] dummy0: entered promiscuous mode [ 267.770364][T14716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3340'. [ 267.911851][T14712] can: request_module (can-proto-0) failed. [ 268.269561][T14746] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3350'. [ 268.312606][T14749] batman_adv: batadv0: Adding interface: gretap5 [ 268.346176][T14749] batman_adv: batadv0: The MTU of interface gretap5 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.380150][T14749] batman_adv: batadv0: Not using interface gretap5 (retrying later): interface not active [ 268.400234][T14752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3351'. [ 268.420567][T14752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3351'. [ 268.428096][T14755] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.739130][T14782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3363'. [ 268.938935][T14803] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3367'. [ 269.050319][T14808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3370'. [ 269.089357][T14808] vlan1: entered promiscuous mode [ 269.112934][T14808] macvlan0: entered promiscuous mode [ 269.186661][T14808] macvlan0: left promiscuous mode [ 269.288963][T14821] tipc: Enabling of bearer rejected, failed to enable media [ 269.369476][T14823] netlink: 'syz.2.3375': attribute type 10 has an invalid length. [ 269.408917][T14823] bond0: (slave netdevsim0): Releasing backup interface [ 269.446611][T14826] netlink: 'syz.1.3376': attribute type 3 has an invalid length. [ 269.493191][T14823] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 269.537687][T14823] team0: Port device netdevsim0 added [ 269.606815][T14827] netlink: 'syz.2.3375': attribute type 10 has an invalid length. [ 269.667840][T14827] team0: Port device netdevsim0 removed [ 269.675007][T14827] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 269.719866][T14827] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 270.047088][T14857] vlan3: entered promiscuous mode [ 270.052386][T14857] team0: entered promiscuous mode [ 270.058693][T14857] team_slave_0: entered promiscuous mode [ 270.064677][T14857] team_slave_1: entered promiscuous mode [ 270.082195][T14857] team0: left promiscuous mode [ 270.088323][T14857] team_slave_0: left promiscuous mode [ 270.094011][T14857] team_slave_1: left promiscuous mode [ 270.288926][T14868] netlink: 'syz.2.3389': attribute type 2 has an invalid length. [ 270.544175][T14881] netlink: 'syz.1.3391': attribute type 3 has an invalid length. [ 270.579424][T14881] netlink: 'syz.1.3391': attribute type 3 has an invalid length. [ 270.670285][T14879] netlink: 'syz.3.3392': attribute type 10 has an invalid length. [ 270.821632][T14879] team0: Port device netdevsim0 added [ 270.870543][T14883] netlink: 'syz.3.3392': attribute type 10 has an invalid length. [ 270.943625][T14883] team0: Port device netdevsim0 removed [ 270.981119][T14883] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 271.231472][T14902] netlink: 'syz.3.3398': attribute type 4 has an invalid length. [ 271.531683][T14917] Cannot find add_set index 0 as target [ 271.699006][T14922] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 271.751735][T14924] veth0_vlan: left promiscuous mode [ 271.933549][T14931] veth0: entered promiscuous mode [ 271.956749][T14931] veth0: left promiscuous mode [ 271.967997][T14916] delete_channel: no stack [ 272.418427][T14950] team1: Mode "" not found [ 273.431060][T15025] __nla_validate_parse: 8 callbacks suppressed [ 273.431081][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3448'. [ 273.521709][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3449'. [ 273.847751][T15049] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3457'. [ 273.906880][T15056] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 274.081225][T15063] validate_nla: 3 callbacks suppressed [ 274.081246][T15063] netlink: 'syz.4.3464': attribute type 2 has an invalid length. [ 274.122150][T15063] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3464'. [ 274.273583][ C0] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 72 [ 274.391918][T15078] bridge0: entered promiscuous mode [ 274.447943][T15083] netlink: 'syz.2.3470': attribute type 21 has an invalid length. [ 274.461165][T15083] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3470'. [ 274.583842][T15076] bridge0: left promiscuous mode [ 274.593931][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3473'. [ 274.623979][T15090] netlink: 312 bytes leftover after parsing attributes in process `syz.1.3472'. [ 274.888153][T15109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3482'. [ 275.054146][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3483'. [ 275.068764][T15118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3485'. [ 275.552510][T15145] netlink: 'syz.0.3498': attribute type 5 has an invalid length. [ 275.758783][T15158] netlink: 'syz.4.3503': attribute type 11 has an invalid length. [ 275.984944][T15171] netlink: 'syz.4.3507': attribute type 10 has an invalid length. [ 276.109741][T15179] netlink: 'syz.2.3512': attribute type 11 has an invalid length. [ 276.149460][T15179] netlink: 'syz.2.3512': attribute type 11 has an invalid length. [ 276.187621][T15179] debugfs: Directory 'netdev:' with parent 'phy7' already present! [ 276.291098][T15182] 8021q: adding VLAN 0 to HW filter on device bond4 [ 276.376062][T15182] sctp: [Deprecated]: syz.1.3513 (pid 15182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 276.376062][T15182] Use struct sctp_sack_info instead [ 276.400026][T15196] netlink: 'syz.0.3518': attribute type 1 has an invalid length. [ 276.410695][T15196] tipc: Enabling of bearer rejected, failed to enable media [ 276.616388][T15206] netlink: 'syz.2.3520': attribute type 7 has an invalid length. [ 276.838815][T15217] netlink: 'syz.0.3525': attribute type 4 has an invalid length. [ 277.068287][T15222] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 277.281888][T15230] netlink: 'syz.4.3531': attribute type 4 has an invalid length. [ 277.314424][T15230] netlink: 'syz.4.3531': attribute type 10 has an invalid length. [ 277.404658][T15236] team0: Port device netdevsim0 removed [ 277.420512][T15236] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 277.506858][T15238] can: request_module (can-proto-0) failed. [ 278.166905][T15269] bond0: (slave netdevsim0): Releasing backup interface [ 278.192816][T15269] team0: Port device netdevsim0 added [ 278.269528][T15269] team0: Port device netdevsim0 removed [ 278.324331][T15269] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.403743][T15279] bond0: (slave netdevsim0): Releasing backup interface [ 278.441816][T15279] team0: Port device netdevsim0 added [ 278.509028][T15271] team0: Port device netdevsim0 removed [ 278.540021][T15271] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 278.551932][T15284] tipc: Enabling of bearer rejected, failed to enable media [ 279.104308][T15323] raw_sendmsg: syz.0.3570 forgot to set AF_INET. Fix it! [ 279.151371][T15327] validate_nla: 8 callbacks suppressed [ 279.151392][T15327] netlink: 'syz.4.3571': attribute type 1 has an invalid length. [ 279.191199][T15327] __nla_validate_parse: 12 callbacks suppressed [ 279.191301][T15327] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3571'. [ 279.384392][T15338] netlink: 'syz.3.3575': attribute type 10 has an invalid length. [ 279.408223][ T4491] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 279.423275][T15338] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3575'. [ 279.483348][T15350] netlink: 'syz.2.3579': attribute type 1 has an invalid length. [ 279.494818][T15350] netlink: 9372 bytes leftover after parsing attributes in process `syz.2.3579'. [ 279.506689][T15350] netlink: 'syz.2.3579': attribute type 1 has an invalid length. [ 279.578748][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3574'. [ 279.604272][T15340] vlan1: entered promiscuous mode [ 279.622657][T15340] team0: entered promiscuous mode [ 279.658100][T15340] team_slave_0: entered promiscuous mode [ 279.671346][T15340] team_slave_1: entered promiscuous mode [ 279.684251][T15340] team0: left promiscuous mode [ 279.710844][T15340] team_slave_0: left promiscuous mode [ 279.723177][T15340] team_slave_1: left promiscuous mode [ 279.783959][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3578'. [ 279.818558][T15365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3584'. [ 279.837993][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3578'. [ 279.903106][T15368] Bluetooth: hci3: invalid len left 7, exp >= 227 [ 280.361851][T15396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3597'. [ 280.433273][T15401] IPVS: set_ctl: invalid protocol: 51 172.20.20.36:20000 [ 280.567610][T15411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3603'. [ 280.594072][T15411] vlan3: entered promiscuous mode [ 280.613267][T15411] vlan0: entered promiscuous mode [ 280.637847][T15411] vlan0: left promiscuous mode [ 280.671096][T15418] netlink: 191416 bytes leftover after parsing attributes in process `syz.2.3607'. [ 280.841070][T15427] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 281.364227][T15461] veth0: entered promiscuous mode [ 281.411509][T15461] veth0: left promiscuous mode [ 281.562017][T15470] team4: Mode "" not found [ 281.577711][T15469] vlan0: entered promiscuous mode [ 281.594542][T15469] team0: entered promiscuous mode [ 281.626775][T15469] team_slave_0: entered promiscuous mode [ 281.636943][T15469] team_slave_1: entered promiscuous mode [ 281.659383][T15469] team0: left promiscuous mode [ 281.664312][T15469] team_slave_0: left promiscuous mode [ 281.681049][T15469] team_slave_1: left promiscuous mode [ 281.847453][T15485] netlink: 'syz.3.3632': attribute type 3 has an invalid length. [ 282.478503][T15530] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.884036][T15614] netlink: 'syz.4.3683': attribute type 6 has an invalid length. [ 284.012462][T15623] dccp_invalid_packet: P.Data Offset(0) too small [ 284.239532][T15639] __nla_validate_parse: 10 callbacks suppressed [ 284.239553][T15639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3692'. [ 284.422334][T15649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3696'. [ 284.670811][T15663] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3702'. [ 284.780539][T15667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3703'. [ 284.974336][T15680] netlink: 'syz.3.3707': attribute type 1 has an invalid length. [ 285.027917][T15680] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3707'. [ 285.051177][T15684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3708'. [ 285.240974][T15700] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3713'. [ 285.277355][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3713'. [ 285.442584][T15712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'. [ 285.471535][T15712] dummy0: entered promiscuous mode [ 285.501526][T15716] netlink: 'syz.3.3719': attribute type 21 has an invalid length. [ 285.527831][T15716] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3719'. [ 285.542390][T15716] netlink: 'syz.3.3719': attribute type 1 has an invalid length. [ 285.698948][T15727] veth2: entered allmulticast mode [ 286.384773][T15760] netlink: 'syz.1.3735': attribute type 4 has an invalid length. [ 286.430095][T15760] netlink: 'syz.1.3735': attribute type 10 has an invalid length. [ 286.518184][T15760] bond0: (slave netdevsim0): Releasing backup interface [ 286.563481][T15760] team0: Port device netdevsim0 added [ 286.573129][T15779] netlink: 'syz.0.3741': attribute type 4 has an invalid length. [ 286.583921][T15771] netlink: 'syz.1.3735': attribute type 10 has an invalid length. [ 286.648038][T15771] team0: Port device netdevsim0 removed [ 286.690055][T15771] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 286.727969][T15776] netlink: 'syz.2.3736': attribute type 4 has an invalid length. [ 286.954245][T15797] netlink: 'syz.1.3744': attribute type 11 has an invalid length. [ 287.462792][T15820] tipc: Enabling of bearer rejected, failed to enable media [ 287.473999][T15816] syz.4.3753[15816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.474153][T15816] syz.4.3753[15816] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 287.603311][T15819] netlink: 'syz.2.3754': attribute type 4 has an invalid length. [ 287.663879][T15816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.667018][T15824] bond0: (slave netdevsim0): Releasing backup interface [ 287.701833][ T5144] wlan1: No basic rates, using min rate instead [ 287.701998][T15824] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 287.718840][ T5144] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 287.744583][ T5144] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 287.756947][T15824] team0: Port device netdevsim0 added [ 287.789329][T15819] team0: Port device netdevsim0 removed [ 287.821846][T15819] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 287.852188][T15819] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 287.864951][ T8023] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 288.008694][ T8023] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 288.127191][ T8028] wlan1: authentication with 08:02:11:00:00:00 timed out [ 288.374901][T15864] netlink: zone id is out of range [ 288.408400][T15860] bond0: (slave netdevsim0): Releasing backup interface [ 288.416560][T15864] netlink: zone id is out of range [ 288.436772][T15864] netlink: zone id is out of range [ 288.458833][T15860] team0: Port device netdevsim0 added [ 288.541592][T15871] team0: Port device netdevsim0 removed [ 288.584392][T15871] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 288.603986][T15877] nft_compat: unsupported protocol 0 [ 288.709740][T15881] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 288.736111][T15877] team0: Device veth1_vlan failed to register rx_handler [ 289.189136][T15918] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 289.261746][T15910] bond0: (slave netdevsim0): Releasing backup interface [ 289.313883][T15910] team0: Port device netdevsim0 added [ 289.349350][T15923] __nla_validate_parse: 20 callbacks suppressed [ 289.349374][T15923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3793'. [ 289.384199][T15923] vlan3: entered promiscuous mode [ 289.467696][T15925] team0: Port device netdevsim0 removed [ 289.489871][T15930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3798'. [ 289.495002][T15925] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 289.753083][T15936] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 289.899230][T15936] macvlan2: entered allmulticast mode [ 289.913421][T15936] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 289.923036][T15936] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode [ 289.941793][T15936] team0: Port device macvlan2 added [ 289.972296][T15953] veth0: entered promiscuous mode [ 290.027487][T15953] veth0: left promiscuous mode [ 290.140840][T15958] validate_nla: 14 callbacks suppressed [ 290.140868][T15958] netlink: 'syz.0.3809': attribute type 3 has an invalid length. [ 290.523526][T15984] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.849718][T16004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.212687][T16020] netlink: 'syz.0.3834': attribute type 4 has an invalid length. [ 291.231646][T16020] netlink: 'syz.0.3834': attribute type 10 has an invalid length. [ 291.272786][T16020] bond0: (slave netdevsim0): Releasing backup interface [ 291.292312][T16020] team0: Port device netdevsim0 added [ 291.309629][T16023] netlink: 'syz.0.3834': attribute type 10 has an invalid length. [ 291.373120][T16023] team0: Port device netdevsim0 removed [ 291.419977][T16023] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 291.480918][T16029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3838'. [ 291.528629][T16031] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3839'. [ 292.108197][T16067] FAULT_INJECTION: forcing a failure. [ 292.108197][T16067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.168713][T16073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3854'. [ 292.179219][T16067] CPU: 0 PID: 16067 Comm: syz.3.3852 Not tainted 6.10.0-rc7-syzkaller-02012-g51b35d4f9d88 #0 [ 292.189413][T16067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 292.199509][T16067] Call Trace: [ 292.202826][T16067] [ 292.205790][T16067] dump_stack_lvl+0x241/0x360 [ 292.210503][T16067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 292.215735][T16067] ? __pfx__printk+0x10/0x10 [ 292.220366][T16067] ? __pfx_lock_release+0x10/0x10 [ 292.225422][T16067] ? vfs_write+0x7c4/0xc90 [ 292.229881][T16067] should_fail_ex+0x3b0/0x4e0 [ 292.234597][T16067] _copy_from_user+0x2f/0xe0 [ 292.239221][T16067] __sys_bpf+0x1a4/0x810 [ 292.243502][T16067] ? __pfx___sys_bpf+0x10/0x10 [ 292.248307][T16067] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 292.254323][T16067] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.260694][T16067] ? do_syscall_64+0x100/0x230 [ 292.265492][T16067] __x64_sys_bpf+0x7c/0x90 [ 292.269938][T16067] do_syscall_64+0xf3/0x230 [ 292.274469][T16067] ? clear_bhb_loop+0x35/0x90 [ 292.279169][T16067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.285105][T16067] RIP: 0033:0x7f12b7175bd9 [ 292.289548][T16067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.309266][T16067] RSP: 002b:00007f12b7e8e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 292.317715][T16067] RAX: ffffffffffffffda RBX: 00007f12b7303f60 RCX: 00007f12b7175bd9 [ 292.325712][T16067] RDX: 0000000000000090 RSI: 0000000020000140 RDI: 0000000000000005 [ 292.333707][T16067] RBP: 00007f12b7e8e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 292.341708][T16067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.349709][T16067] R13: 000000000000004d R14: 00007f12b7303f60 R15: 00007ffd4ff2b518 [ 292.357725][T16067] [ 292.485002][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3856'. [ 292.633785][T16091] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3857'. [ 292.667481][T16090] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3858'. [ 292.721130][T16090] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3858'. [ 292.737985][T16096] netlink: 'syz.0.3859': attribute type 6 has an invalid length. [ 292.833116][T16100] netlink: 'syz.3.3861': attribute type 8 has an invalid length. [ 292.924047][T16105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3864'. [ 293.290651][T16124] netlink: 'syz.0.3871': attribute type 2 has an invalid length. [ 293.417320][T16128] vlan1: entered promiscuous mode [ 293.753429][T16151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.773382][T16151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.784807][T16151] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 293.861805][T16153] veth2: entered allmulticast mode [ 293.892246][T16158] netlink: 'syz.3.3886': attribute type 13 has an invalid length. [ 293.933180][T16154] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 294.164866][T16175] netlink: 'syz.4.3893': attribute type 1 has an invalid length. [ 294.194932][T16175] tipc: Enabling of bearer rejected, failed to enable media [ 294.389942][T16186] __nla_validate_parse: 10 callbacks suppressed [ 294.389961][T16186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3896'. [ 294.459539][T16188] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3897'. [ 294.520388][T16186] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.587753][T16199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3901'. [ 294.640036][T16199] netlink: 'syz.1.3901': attribute type 10 has an invalid length. [ 294.766795][T16199] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 294.789331][T16210] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3905'. [ 294.907281][T16211] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3901'. [ 295.102295][T16229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3911'. [ 295.296440][T16242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3915'. [ 295.392642][T16242] ieee802154 phy1 wpan1: encryption failed: -22 [ 295.423597][T16247] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3919'. [ 295.662015][T16259] validate_nla: 2 callbacks suppressed [ 295.662036][T16259] netlink: 'syz.2.3924': attribute type 3 has an invalid length. [ 295.671013][T16263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3925'. [ 295.804330][T16268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3929'. [ 295.912437][T16273] sctp: [Deprecated]: syz.2.3931 (pid 16273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.912437][T16273] Use struct sctp_sack_info instead [ 296.361250][T16292] can: request_module (can-proto-0) failed. [ 296.714283][T16325] Cannot find del_set index 3 as target [ 297.541456][T16362] netlink: 'syz.0.3964': attribute type 3 has an invalid length. [ 297.954944][T16384] netlink: 'syz.4.3974': attribute type 10 has an invalid length. [ 297.991043][T16387] netlink: 'syz.2.3976': attribute type 4 has an invalid length. [ 298.003113][T16386] SET target dimension over the limit! [ 298.056842][T16384] bond0: (slave netdevsim0): Releasing backup interface [ 298.117591][T16384] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 298.152287][T16384] team0: Failed to send options change via netlink (err -105) [ 298.170641][T16384] team0: Port device netdevsim0 added [ 298.208545][T16394] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.410978][T16466] __nla_validate_parse: 16 callbacks suppressed [ 299.410999][T16466] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4003'. [ 300.317511][T16509] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 300.427277][T16517] netlink: 'syz.1.4023': attribute type 2 has an invalid length. [ 300.454470][T16517] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4023'. [ 300.881825][T16542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4031'. [ 301.039192][T16549] netlink: 'syz.0.4032': attribute type 9 has an invalid length. [ 301.067352][T16549] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.4032'. [ 301.862739][T16571] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4041'. [ 301.899452][T16571] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 301.915684][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.920658][T16571] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 301.947369][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.960910][ T2859] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.979578][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.999039][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.021013][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 302.029995][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.037201][T16578] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 302.146413][ T2859] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.378980][ T2859] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.560399][T16600] x_tables: duplicate entry at hook 1 [ 302.576959][ T2859] team0: Port device netdevsim0 removed [ 302.588620][ T2859] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.601814][T16598] FAULT_INJECTION: forcing a failure. [ 302.601814][T16598] name failslab, interval 1, probability 0, space 0, times 0 [ 302.632959][T16604] netlink: 'syz.3.4052': attribute type 1 has an invalid length. [ 302.642110][T16598] CPU: 0 PID: 16598 Comm: syz.1.4050 Not tainted 6.10.0-rc7-syzkaller-02012-g51b35d4f9d88 #0 [ 302.652299][T16598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 302.662389][T16598] Call Trace: [ 302.665685][T16598] [ 302.668636][T16598] dump_stack_lvl+0x241/0x360 [ 302.673363][T16598] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.678599][T16598] ? __pfx__printk+0x10/0x10 [ 302.683215][T16598] ? __pfx___might_resched+0x10/0x10 [ 302.688535][T16598] should_fail_ex+0x3b0/0x4e0 [ 302.693267][T16598] ? sock_kmalloc+0xd7/0x160 [ 302.697888][T16598] should_failslab+0x9/0x20 [ 302.702417][T16598] __kmalloc_noprof+0xd8/0x400 [ 302.707210][T16598] sock_kmalloc+0xd7/0x160 [ 302.711652][T16598] skcipher_recvmsg+0x5ff/0x1230 [ 302.716642][T16598] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 302.722043][T16598] ? aa_sock_msg_perm+0x91/0x160 [ 302.727006][T16598] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 302.732313][T16598] ? security_socket_recvmsg+0x90/0xb0 [ 302.737805][T16598] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 302.743214][T16598] sock_recvmsg+0x22f/0x280 [ 302.747754][T16598] ____sys_recvmsg+0x1db/0x470 [ 302.752555][T16598] ? __pfx_____sys_recvmsg+0x10/0x10 [ 302.757864][T16598] do_recvmmsg+0x474/0xae0 [ 302.762298][T16598] ? __pfx_lock_release+0x10/0x10 [ 302.767340][T16598] ? __pfx_do_recvmmsg+0x10/0x10 [ 302.772297][T16598] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 302.778186][T16598] ? ksys_write+0x23e/0x2c0 [ 302.782688][T16598] ? __pfx_lock_release+0x10/0x10 [ 302.787716][T16598] ? vfs_write+0x7c4/0xc90 [ 302.792136][T16598] ? __mutex_unlock_slowpath+0x21d/0x750 [ 302.797781][T16598] ? __fget_files+0x3f6/0x470 [ 302.802493][T16598] __x64_sys_recvmmsg+0x199/0x250 [ 302.807525][T16598] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 302.813069][T16598] ? do_syscall_64+0x100/0x230 [ 302.817835][T16598] ? do_syscall_64+0xb6/0x230 [ 302.822513][T16598] do_syscall_64+0xf3/0x230 [ 302.827015][T16598] ? clear_bhb_loop+0x35/0x90 [ 302.831688][T16598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.837584][T16598] RIP: 0033:0x7fe1f9375bd9 [ 302.841992][T16598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.861617][T16598] RSP: 002b:00007fe1fa0a2048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 302.870034][T16598] RAX: ffffffffffffffda RBX: 00007fe1f9503f60 RCX: 00007fe1f9375bd9 [ 302.878004][T16598] RDX: 0000000000000001 RSI: 0000000020000680 RDI: 0000000000000004 [ 302.885972][T16598] RBP: 00007fe1fa0a20a0 R08: 0000000000000000 R09: 0000000000000000 [ 302.893940][T16598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.901918][T16598] R13: 000000000000004d R14: 00007fe1f9503f60 R15: 00007ffdbf034cb8 [ 302.910004][T16598] [ 302.942597][T16575] chnl_net:caif_netlink_parms(): no params data found [ 303.347947][T16575] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.384797][T16575] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.423802][T16575] bridge_slave_0: entered allmulticast mode [ 303.447145][T16575] bridge_slave_0: entered promiscuous mode [ 303.500344][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4063'. [ 303.549334][T16575] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.557814][T16575] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.578214][T16575] bridge_slave_1: entered allmulticast mode [ 303.596039][T16575] bridge_slave_1: entered promiscuous mode [ 303.603085][ T2859] bridge_slave_1: left allmulticast mode [ 303.626260][ T2859] bridge_slave_1: left promiscuous mode [ 303.636856][ T2859] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.660809][ T2859] bridge_slave_0: left allmulticast mode [ 303.667967][ T2859] bridge_slave_0: left promiscuous mode [ 303.678414][ T2859] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.136343][ T53] Bluetooth: hci2: command tx timeout [ 304.206584][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 304.240848][ T2859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.256856][ T2859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.269492][ T2859] bond0 (unregistering): Released all slaves [ 304.437561][T16575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.468727][T16575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.572434][T16575] team0: Port device team_slave_0 added [ 304.632349][T16575] team0: Port device team_slave_1 added [ 304.773207][T16575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.792871][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.820729][T16575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.842257][T16575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.860522][T16575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.893013][T16575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.076809][T16662] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 305.139478][T16575] hsr_slave_0: entered promiscuous mode [ 305.149832][T16575] hsr_slave_1: entered promiscuous mode [ 305.162172][T16575] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.172241][T16575] Cannot create hsr debugfs directory [ 305.181790][T16671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4071'. [ 305.251105][ T2859] hsr_slave_0: left promiscuous mode [ 305.269060][ T2859] hsr_slave_1: left promiscuous mode [ 305.280400][ T2859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 305.296067][ T2859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 305.359430][ T2859] dummy0: left promiscuous mode [ 305.361218][T16683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4077'. [ 305.374869][ T2859] veth1_macvtap: left promiscuous mode [ 305.385965][ T2859] veth0_macvtap: left promiscuous mode [ 305.391713][ T2859] veth1_vlan: left promiscuous mode [ 305.524070][T16686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4078'. [ 306.102918][ T2859] team0 (unregistering): Port device team_slave_1 removed [ 306.157934][ T2859] team0 (unregistering): Port device team_slave_0 removed [ 306.208678][ T4491] Bluetooth: hci2: command tx timeout [ 306.330304][T16688] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4079'. [ 306.744093][T16675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4075'. [ 306.758746][T16675] macvtap2: entered promiscuous mode [ 306.764168][T16675] macvtap2: entered allmulticast mode [ 306.781616][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4075'. [ 306.812158][T16690] netlink: 'syz.3.4080': attribute type 6 has an invalid length. [ 306.924177][T16694] netlink: 'syz.1.4081': attribute type 8 has an invalid length. [ 306.951284][T16696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4082'. [ 307.242549][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4087'. [ 307.432614][T16716] batadv_slave_1: entered promiscuous mode [ 307.464413][T16716] netlink: 75 bytes leftover after parsing attributes in process `syz.1.4090'. [ 307.521394][T16714] batadv_slave_1: left promiscuous mode [ 307.658720][T16723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4096'. [ 307.914760][T16575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.938281][T16575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.950317][T16575] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.970569][T16739] batman_adv: batadv0: Adding interface: gretap2 [ 307.978588][T16739] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.004336][T16739] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 308.017205][T16575] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.182846][T16575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.230516][T16575] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.247286][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.254478][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.282297][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.289512][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.298052][ T4491] Bluetooth: hci2: command tx timeout [ 308.550037][T16755] SET target dimension over the limit! [ 308.580569][T16755] tipc: Started in network mode [ 308.586676][T16755] tipc: Node identity ac1414aa, cluster identity 4711 [ 308.593604][T16755] tipc: Enabling of bearer rejected, failed to enable media [ 308.621480][T16575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.832843][T16766] bond0: option arp_all_targets: invalid value (3) [ 308.852359][T16766] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 308.909683][T16575] veth0_vlan: entered promiscuous mode [ 308.949784][T16575] veth1_vlan: entered promiscuous mode [ 309.002713][T16575] veth0_macvtap: entered promiscuous mode [ 309.021572][T16575] veth1_macvtap: entered promiscuous mode [ 309.044099][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.058199][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.069400][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.083892][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.095669][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.111194][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.122596][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.133446][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.152525][T16575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.188134][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.209084][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.225070][T16575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.246288][T16575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.272002][T16575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.298614][T16575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.326059][T16575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.334821][T16575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.350719][T16575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.779920][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.809596][T16797] vlan1: entered promiscuous mode [ 309.822667][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.836374][T16797] ip6gre1: entered promiscuous mode [ 310.050640][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.085870][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.170702][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 310.196443][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 310.207447][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 310.222684][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 310.233522][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 310.256242][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.351141][T16822] __nla_validate_parse: 4 callbacks suppressed [ 310.351164][T16822] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.4122'. [ 310.360191][T16820] netlink: 'syz.0.4120': attribute type 10 has an invalid length. [ 310.379527][ T4491] Bluetooth: hci2: command tx timeout [ 310.436287][T16820] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.449891][T16826] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4123'. [ 310.463035][T16820] bond0: (slave team0): Enslaving as an active interface with an up link [ 310.510858][T16817] netlink: 'syz.0.4120': attribute type 10 has an invalid length. [ 310.534410][T16817] bond0: (slave team0): Releasing backup interface [ 310.551794][T16817] bridge0: port 3(team0) entered blocking state [ 310.602220][T16817] bridge0: port 3(team0) entered disabled state [ 310.621240][T16817] team0: entered allmulticast mode [ 310.631175][T16817] team_slave_0: entered allmulticast mode [ 310.656185][T16817] team_slave_1: entered allmulticast mode [ 310.683564][T16817] team0: entered promiscuous mode [ 310.700966][T16817] team_slave_0: entered promiscuous mode [ 310.713762][T16817] team_slave_1: entered promiscuous mode [ 310.768193][T16839] vlan3: entered promiscuous mode [ 310.774380][T16839] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 310.797987][T16839] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 310.857553][T16847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4130'. [ 310.873878][T16847] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4130'. [ 311.119211][T16864] netlink: 'syz.0.4136': attribute type 46 has an invalid length. [ 311.371224][T16811] chnl_net:caif_netlink_parms(): no params data found [ 311.614558][T16811] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.636851][T16811] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.644245][T16811] bridge_slave_0: entered allmulticast mode [ 311.654577][T16811] bridge_slave_0: entered promiscuous mode [ 311.666168][T16811] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.673999][T16811] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.693648][T16811] bridge_slave_1: entered allmulticast mode [ 311.703569][T16811] bridge_slave_1: entered promiscuous mode [ 311.750098][T16899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4150'. [ 311.873849][T16811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.951270][T16902] team1: Mode "" not found [ 311.968209][T16811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.993430][ C1] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 16 [ 312.073991][T16811] team0: Port device team_slave_0 added [ 312.092388][T16911] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4155'. [ 312.163339][T16911] bond2: (slave vcan0): Releasing backup interface [ 312.186746][T16911] bond2: Destroying bond [ 312.203038][T16911] bond2 (unregistering): Released all slaves [ 312.287676][T16811] team0: Port device team_slave_1 added [ 312.371229][ T4491] Bluetooth: hci5: command tx timeout [ 312.418455][T16930] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4161'. [ 312.428382][T16929] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4161'. [ 312.478282][T16929] Êü: entered promiscuous mode [ 312.497023][T16933] vlan2: entered promiscuous mode [ 312.502545][T16933] bridge0: entered promiscuous mode [ 312.528456][T16933] team0: Port device vlan2 added [ 312.539697][T16811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.548168][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.577753][T16811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.589874][T16930] openvswitch: Êü: Dropping previously announced user features [ 312.600382][T16939] netlink: 'syz.1.4163': attribute type 5 has an invalid length. [ 312.631934][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4163'. [ 312.634707][T16811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.652854][T16811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 312.680668][T16811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.850176][T16811] hsr_slave_0: entered promiscuous mode [ 312.869912][T16811] hsr_slave_1: entered promiscuous mode [ 312.896185][T16811] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 312.914045][T16811] Cannot create hsr debugfs directory [ 313.031676][T16953] netlink: 'syz.3.4169': attribute type 1 has an invalid length. [ 313.052231][T16953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4169'. [ 313.071651][T16953] x_tables: duplicate underflow at hook 2 [ 313.423899][T16811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.448210][T16811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.473157][T16811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 313.715987][T16811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.741387][T16811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.771678][T16811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 313.902106][T16811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 313.922928][T16811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.938692][T16811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 314.153726][T16811] bond0: (slave netdevsim0): Releasing backup interface [ 314.181512][T16811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.202589][T16811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.214691][T16811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 314.446259][ T4491] Bluetooth: hci5: command tx timeout [ 314.662580][T17017] netlink: 'syz.0.4192': attribute type 1 has an invalid length. [ 314.696272][T17017] tipc: Enabling of bearer rejected, failed to enable media [ 314.823731][T16811] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.929405][T16811] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.971927][T16811] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 315.012520][T16811] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 315.355745][T17057] netlink: 'syz.0.4202': attribute type 4 has an invalid length. [ 315.471567][T16811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.542245][T16811] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.588961][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.596185][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.668695][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.675925][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.760192][T16811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.799205][T17083] __nla_validate_parse: 10 callbacks suppressed [ 315.799227][T17083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4211'. [ 315.930028][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4212'. [ 315.976484][T17092] netlink: 'syz.0.4214': attribute type 13 has an invalid length. [ 315.992612][T17087] vlan0: entered promiscuous mode [ 316.003303][T17091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4213'. [ 316.178600][T17098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4216'. [ 316.237291][T16811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.422878][T16811] veth0_vlan: entered promiscuous mode [ 316.479286][T16811] veth1_vlan: entered promiscuous mode [ 316.498836][T17110] vlan1: entered promiscuous mode [ 316.519119][T17115] tipc: Enabling of bearer rejected, failed to enable media [ 316.529266][ T4491] Bluetooth: hci5: command tx timeout [ 316.639710][T17110] vlan1 (unregistering): left promiscuous mode [ 316.704157][T17123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4225'. [ 316.810456][T16811] veth0_macvtap: entered promiscuous mode [ 316.839668][T16811] veth1_macvtap: entered promiscuous mode [ 316.892305][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.928078][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.950842][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.966101][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.981067][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.992794][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.006081][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.018283][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.030761][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.042900][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.066399][T16811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.086858][T17144] netlink: 'syz.0.4229': attribute type 4 has an invalid length. [ 317.107694][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.136232][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.157521][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.190057][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.213527][T16811] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.226818][T16811] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.257829][T16811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.274395][T17130] netlink: 'syz.0.4229': attribute type 10 has an invalid length. [ 317.311839][T17130] bond0: (slave netdevsim0): Releasing backup interface [ 317.368673][T17130] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 317.388251][T17130] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 317.407625][T17130] team0: Port device netdevsim0 added [ 317.418146][T17139] netlink: 'syz.0.4229': attribute type 10 has an invalid length. [ 317.468914][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4242'. [ 317.473595][T17139] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 317.490567][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.517361][T17139] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 317.528786][T17139] team0: Port device netdevsim0 removed [ 317.542894][T17139] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 317.634596][T16811] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.666888][T16811] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.688465][T16811] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.716203][T16811] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.739965][T17167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4245'. [ 317.756348][T17167] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4245'. [ 317.844541][T17178] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.4250'. [ 317.906931][T17182] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4251'. [ 317.927506][T17181] netlink: 'syz.1.4252': attribute type 10 has an invalid length. [ 318.267609][T17181] team0 (unregistering): Port device team_slave_0 removed [ 318.290130][T17181] team0 (unregistering): Port device team_slave_1 removed [ 318.340979][T17199] netlink: 'syz.4.4257': attribute type 4 has an invalid length. [ 318.355826][T17201] netlink: 'syz.4.4257': attribute type 10 has an invalid length. [ 318.410302][T17201] team0: Port device netdevsim0 added [ 318.430072][T17206] netlink: 'syz.4.4257': attribute type 10 has an invalid length. [ 318.465872][T17206] team0: Port device netdevsim0 removed [ 318.477297][T17206] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 318.609607][ T4491] Bluetooth: hci5: command tx timeout [ 318.689462][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.707822][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.725967][T17219] Cannot find del_set index 0 as target [ 318.762127][T17216] bond0: Unable to set up delay as MII monitoring is disabled [ 318.820649][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.831214][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.852330][T17224] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 319.076530][T17236] netlink: 'syz.2.4111': attribute type 3 has an invalid length. [ 319.164271][T17240] netlink: 'syz.4.4273': attribute type 4 has an invalid length. [ 319.207039][T17240] netlink: 'syz.4.4273': attribute type 10 has an invalid length. [ 319.273055][T17240] bond0: (slave netdevsim0): Releasing backup interface [ 319.317412][T17240] team0: Port device netdevsim0 added [ 319.346991][T17247] netlink: 'syz.4.4273': attribute type 10 has an invalid length. [ 319.424952][T17247] team0: Port device netdevsim0 removed [ 319.448223][T17247] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 319.466926][T17254] netlink: 'syz.0.4278': attribute type 1 has an invalid length. [ 319.496756][T17252] syz_tun: entered promiscuous mode [ 319.539710][T17252] batadv_slave_0: entered promiscuous mode [ 319.562933][T17252] syz_tun: left promiscuous mode [ 319.588686][T17252] batadv_slave_0: left promiscuous mode [ 319.899964][T17271] netlink: 'syz.4.4286': attribute type 10 has an invalid length. [ 319.946409][T17271] bond0: entered promiscuous mode [ 319.962765][T17271] bond_slave_0: entered promiscuous mode [ 320.003855][T17271] bond_slave_1: entered promiscuous mode [ 320.029681][T17271] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 320.048653][T17271] bond0: entered allmulticast mode [ 320.056112][T17271] bond_slave_0: entered allmulticast mode [ 320.082812][T17271] bond_slave_1: entered allmulticast mode [ 320.124899][T17271] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 320.147515][T17271] bridge0: port 3(bond0) entered blocking state [ 320.164302][T17271] bridge0: port 3(bond0) entered disabled state [ 320.216165][T17271] bridge0: port 3(bond0) entered blocking state [ 320.222626][T17271] bridge0: port 3(bond0) entered forwarding state [ 320.292329][T17286] team0: Port device netdevsim0 added [ 320.388036][T17295] team0: Port device netdevsim0 removed [ 320.409309][T17295] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 320.683661][T17323] ÊügáG: entered promiscuous mode [ 320.764592][T17329] veth1_macvtap: left promiscuous mode [ 320.776681][T17329] macsec0: entered allmulticast mode [ 320.859640][T17332] IPv6: Can't replace route, no match found [ 321.129947][T17338] mac80211_hwsim hwsim27 wlan0 (unregistering): left allmulticast mode [ 321.276516][T17338] team0: Port device macvlan2 removed [ 321.464623][T17351] __nla_validate_parse: 9 callbacks suppressed [ 321.464644][T17351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4313'. [ 321.974065][T17373] bond0: (slave netdevsim0): Releasing backup interface [ 321.990727][T17385] syz.4.4324[17385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.990963][T17385] syz.4.4324[17385] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.051975][T17373] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 322.117329][T17373] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 322.130873][T17373] team0: Port device netdevsim0 added [ 322.151689][T17380] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 322.159565][T17380] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 322.169594][T17380] team0: Port device netdevsim0 removed [ 322.179826][T17380] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 322.224364][T17391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4327'. [ 322.244459][T17391] tipc: Enabling of bearer rejected, failed to enable media [ 322.278773][T17394] veth4: entered allmulticast mode [ 322.429192][T17404] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4333'. [ 322.453172][T17404] vlan2: entered promiscuous mode [ 322.518339][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4334'. [ 322.528015][T17410] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4334'. [ 322.543641][T17414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4335'. [ 322.949275][T17433] validate_nla: 10 callbacks suppressed [ 322.949298][T17433] netlink: 'syz.2.4343': attribute type 4 has an invalid length. [ 322.987650][T17430] netlink: 'syz.0.4342': attribute type 2 has an invalid length. [ 323.007327][T17435] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4344'. [ 323.036629][T17430] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4342'. [ 323.310656][T17450] vlan2: entered promiscuous mode [ 323.528611][T17457] netlink: 'syz.4.4351': attribute type 13 has an invalid length. [ 323.646578][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4353'. [ 323.826589][T17474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.891551][T17481] netlink: 'syz.4.4362': attribute type 41 has an invalid length. [ 324.233557][T17500] FAULT_INJECTION: forcing a failure. [ 324.233557][T17500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.252372][T17500] CPU: 1 PID: 17500 Comm: syz.0.4371 Not tainted 6.10.0-rc7-syzkaller-02012-g51b35d4f9d88 #0 [ 324.262574][T17500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 324.272639][T17500] Call Trace: [ 324.275921][T17500] [ 324.278856][T17500] dump_stack_lvl+0x241/0x360 [ 324.283540][T17500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.288746][T17500] ? __pfx__printk+0x10/0x10 [ 324.293350][T17500] ? snprintf+0xda/0x120 [ 324.297598][T17500] should_fail_ex+0x3b0/0x4e0 [ 324.302282][T17500] _copy_to_user+0x2f/0xb0 [ 324.306702][T17500] simple_read_from_buffer+0xca/0x150 [ 324.312074][T17500] proc_fail_nth_read+0x1e9/0x250 [ 324.317099][T17500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.323165][T17500] ? rw_verify_area+0x520/0x6b0 [ 324.328013][T17500] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.333554][T17500] vfs_read+0x204/0xbc0 [ 324.337712][T17500] ? __pfx_lock_release+0x10/0x10 [ 324.342733][T17500] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 324.348282][T17500] ? __pfx_vfs_read+0x10/0x10 [ 324.352959][T17500] ? __fget_files+0x29/0x470 [ 324.357549][T17500] ? __fget_files+0x3f6/0x470 [ 324.362233][T17500] ksys_read+0x1a0/0x2c0 [ 324.366480][T17500] ? __pfx_ksys_read+0x10/0x10 [ 324.371245][T17500] ? do_syscall_64+0x100/0x230 [ 324.376016][T17500] ? do_syscall_64+0xb6/0x230 [ 324.380697][T17500] do_syscall_64+0xf3/0x230 [ 324.385206][T17500] ? clear_bhb_loop+0x35/0x90 [ 324.389895][T17500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.395799][T17500] RIP: 0033:0x7fbc07f746bc [ 324.400219][T17500] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 324.419837][T17500] RSP: 002b:00007fbc08cd5040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.428254][T17500] RAX: ffffffffffffffda RBX: 00007fbc08103f60 RCX: 00007fbc07f746bc [ 324.436221][T17500] RDX: 000000000000000f RSI: 00007fbc08cd50b0 RDI: 0000000000000004 [ 324.444193][T17500] RBP: 00007fbc08cd50a0 R08: 0000000000000000 R09: 0000000000000000 [ 324.452170][T17500] R10: 000000000000008e R11: 0000000000000246 R12: 0000000000000001 [ 324.460148][T17500] R13: 000000000000004d R14: 00007fbc08103f60 R15: 00007fff3cd5bd58 [ 324.468137][T17500] [ 324.687169][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 324.793554][T17518] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4375'. [ 325.616030][T17570] vlan3: entered promiscuous mode [ 325.626131][T17570] vlan0: entered promiscuous mode [ 325.662861][T17570] vlan0: left promiscuous mode [ 325.922560][T17597] xt_TCPMSS: Only works on TCP SYN packets [ 326.173938][T17612] netlink: 'syz.2.4409': attribute type 10 has an invalid length. [ 326.224206][T17612] bond0: (slave netdevsim0): Releasing backup interface [ 326.272176][T17612] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 326.295890][T17612] team0: Failed to send options change via netlink (err -105) [ 326.309071][T17612] team0: Port device netdevsim0 added [ 326.409102][T17630] netlink: 'syz.4.4415': attribute type 1 has an invalid length. [ 326.422468][T17630] netlink: 'syz.4.4415': attribute type 1 has an invalid length. [ 326.498600][T17630] syzkaller0: entered allmulticast mode [ 326.560024][T17638] __nla_validate_parse: 5 callbacks suppressed [ 326.560043][T17638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4418'. [ 326.743162][T17642] netlink: 'syz.3.4419': attribute type 10 has an invalid length. [ 326.818418][T17647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4421'. [ 326.863869][T17642] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 327.061060][T17657] FAULT_INJECTION: forcing a failure. [ 327.061060][T17657] name failslab, interval 1, probability 0, space 0, times 0 [ 327.089970][T17657] CPU: 0 PID: 17657 Comm: syz.3.4426 Not tainted 6.10.0-rc7-syzkaller-02012-g51b35d4f9d88 #0 [ 327.097117][T17660] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4428'. [ 327.100159][T17657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 327.100177][T17657] Call Trace: [ 327.122445][T17657] [ 327.123915][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4428'. [ 327.125370][T17657] dump_stack_lvl+0x241/0x360 [ 327.125405][T17657] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.135050][T17663] netlink: 'syz.0.4429': attribute type 4 has an invalid length. [ 327.138979][T17657] ? __pfx__printk+0x10/0x10 [ 327.156598][T17657] ? netlink_insert+0x10b7/0x14b0 [ 327.161641][T17657] should_fail_ex+0x3b0/0x4e0 [ 327.166325][T17657] ? __alloc_skb+0x1c3/0x440 [ 327.170908][T17657] should_failslab+0x9/0x20 [ 327.175404][T17657] kmem_cache_alloc_node_noprof+0x71/0x320 [ 327.181206][T17657] __alloc_skb+0x1c3/0x440 [ 327.185621][T17657] ? __pfx___alloc_skb+0x10/0x10 [ 327.190552][T17657] ? netlink_autobind+0xd6/0x2f0 [ 327.195493][T17657] ? netlink_autobind+0x2b0/0x2f0 [ 327.200541][T17657] netlink_sendmsg+0x638/0xcb0 [ 327.205314][T17657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.210599][T17657] ? __import_iovec+0x536/0x820 [ 327.215443][T17657] ? aa_sock_msg_perm+0x91/0x160 [ 327.220373][T17657] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 327.225657][T17657] ? security_socket_sendmsg+0x87/0xb0 [ 327.231111][T17657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.236388][T17657] __sock_sendmsg+0x221/0x270 [ 327.241061][T17657] ____sys_sendmsg+0x525/0x7d0 [ 327.245833][T17657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.251131][T17657] __sys_sendmsg+0x2b0/0x3a0 [ 327.255718][T17657] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.260821][T17657] ? vfs_write+0x7c4/0xc90 [ 327.265300][T17657] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.271632][T17657] ? do_syscall_64+0x100/0x230 [ 327.276394][T17657] ? do_syscall_64+0xb6/0x230 [ 327.281066][T17657] do_syscall_64+0xf3/0x230 [ 327.285563][T17657] ? clear_bhb_loop+0x35/0x90 [ 327.290232][T17657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.296123][T17657] RIP: 0033:0x7f12b7175bd9 [ 327.300535][T17657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.320139][T17657] RSP: 002b:00007f12b7e8e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.328560][T17657] RAX: ffffffffffffffda RBX: 00007f12b7303f60 RCX: 00007f12b7175bd9 [ 327.336530][T17657] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000004 [ 327.344491][T17657] RBP: 00007f12b7e8e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 327.352461][T17657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.360425][T17657] R13: 000000000000004d R14: 00007f12b7303f60 R15: 00007ffd4ff2b518 [ 327.368495][T17657] [ 327.386233][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4430'. [ 327.441935][T17667] netlink: 'syz.0.4429': attribute type 4 has an invalid length. [ 327.544598][T17672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4431'. [ 327.573243][T17669] bond3: (slave vcan0): The slave device specified does not support setting the MAC address [ 327.616725][T17669] bond3: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 327.659025][T17669] bond3: (slave vcan0): making interface the new active one [ 327.670851][T17669] bond3: (slave vcan0): Enslaving as an active interface with an up link [ 327.809180][T17689] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4438'. [ 327.876570][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4437'. [ 328.159119][T17716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4443'. [ 328.193912][T17717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.230717][T17717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.271673][T17717] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 328.380971][T17729] bridge0: port 3(team0) entered blocking state [ 328.390239][T17729] bridge0: port 3(team0) entered disabled state [ 328.398014][T17729] team0: entered allmulticast mode [ 328.404467][T17729] team_slave_0: entered allmulticast mode [ 328.412753][T17729] team_slave_1: entered allmulticast mode [ 328.428770][T17729] team0: entered promiscuous mode [ 328.436201][T17729] team_slave_0: entered promiscuous mode [ 328.447954][T17729] team_slave_1: entered promiscuous mode [ 328.459164][T17735] validate_nla: 2 callbacks suppressed [ 328.459185][T17735] netlink: 'syz.1.4450': attribute type 23 has an invalid length. [ 328.478149][T17729] bridge0: port 3(team0) entered blocking state [ 328.484561][T17729] bridge0: port 3(team0) entered forwarding state [ 328.494717][T17731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4450'. [ 328.513661][T17731] netlink: 'syz.1.4450': attribute type 25 has an invalid length. [ 329.167866][T17763] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.529628][T17779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.536950][T17779] IPv6: NLM_F_CREATE should be set when creating new route [ 329.544209][T17779] IPv6: NLM_F_CREATE should be set when creating new route [ 329.713965][T17786] netlink: 'syz.1.4472': attribute type 4 has an invalid length. [ 329.758300][T17786] netlink: 'syz.1.4472': attribute type 10 has an invalid length. [ 329.838762][T17786] bond0: (slave netdevsim0): Releasing backup interface [ 329.849881][T17796] netlink: 'syz.1.4472': attribute type 10 has an invalid length. [ 329.863821][T17796] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 330.322536][T17825] netlink: zone id is out of range [ 330.340611][T17825] netlink: zone id is out of range [ 330.353831][T17825] netlink: zone id is out of range [ 330.497030][T17838] netlink: 'syz.0.4491': attribute type 4 has an invalid length. [ 330.542572][T17838] netlink: 'syz.0.4491': attribute type 10 has an invalid length. [ 330.613826][T17838] bond0: (slave netdevsim0): Releasing backup interface [ 330.636405][T17838] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 330.651767][T17855] netlink: 'syz.3.4497': attribute type 1 has an invalid length. [ 330.656031][T17838] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 330.729392][T17838] team0: Port device netdevsim0 added [ 330.763210][T17852] netlink: 'syz.0.4491': attribute type 10 has an invalid length. [ 330.822848][T17852] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 330.838276][T17852] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 330.877667][T17852] team0: Port device netdevsim0 removed [ 330.889465][T17852] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 331.014628][T17874] vlan3: entered promiscuous mode [ 331.127850][T17879] vlan3: entered promiscuous mode [ 331.437906][T17900] netlink: 'syz.1.4511': attribute type 3 has an invalid length. [ 331.820257][T17927] x_tables: duplicate underflow at hook 3 [ 331.827046][T17926] __nla_validate_parse: 19 callbacks suppressed [ 331.827063][T17926] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4523'. [ 331.896499][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4525'. [ 332.036386][T17940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4530'. [ 332.042762][T17941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4529'. [ 332.180606][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4531'. [ 332.237844][T17951] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.245718][T17951] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.319871][T17951] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4532'. [ 332.654377][T17976] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4542'. [ 332.780121][T17981] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4544'. [ 332.804366][T17984] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 332.840233][T17981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4544'. [ 332.899092][T17987] vlan3: entered promiscuous mode [ 332.904269][T17987] team0: Device vlan3 is already an upper device of the team interface [ 333.124093][T18000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4554'. [ 333.193334][T18005] sctp: [Deprecated]: syz.1.4551 (pid 18005) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.193334][T18005] Use struct sctp_sack_info instead [ 333.237617][T17996] syz.1.4551 (17996) used greatest stack depth: 18672 bytes left [ 333.276497][T17995] sctp: [Deprecated]: syz.1.4551 (pid 17995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 333.276497][T17995] Use struct sctp_sack_info instead [ 333.791404][T18038] batman_adv: batadv0: Adding interface: gretap1 [ 333.846828][T18038] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.896163][T18038] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 334.083464][T18054] validate_nla: 3 callbacks suppressed [ 334.083485][T18054] netlink: 'syz.3.4574': attribute type 8 has an invalid length. [ 334.531390][T18082] veth4: entered allmulticast mode [ 334.714398][T18089] netlink: 'syz.0.4587': attribute type 1 has an invalid length. [ 334.736282][T18089] netlink: 'syz.0.4587': attribute type 2 has an invalid length. [ 334.873495][T18091] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 334.916142][T18091] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 335.578933][T18128] tipc: Enabling of bearer rejected, failed to enable media [ 335.750813][T18138] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 335.778777][T18138] macvlan2: entered allmulticast mode [ 335.794560][T18138] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 335.819822][T18138] mac80211_hwsim hwsim42 wlan0: left promiscuous mode [ 336.031501][T18147] netlink: 'syz.1.4608': attribute type 6 has an invalid length. [ 336.992060][T18210] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 337.056801][T18214] netlink: 'syz.1.4631': attribute type 4 has an invalid length. [ 337.064585][T18214] __nla_validate_parse: 12 callbacks suppressed [ 337.064602][T18214] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4631'. [ 337.441926][T18233] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4637'. [ 337.539316][T18240] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4640'. [ 337.576197][T18240] team0: left allmulticast mode [ 337.586071][T18240] team_slave_0: left allmulticast mode [ 337.608882][T18240] team_slave_1: left allmulticast mode [ 337.618895][T18240] team0: left promiscuous mode [ 337.623839][T18240] team_slave_0: left promiscuous mode [ 337.630476][T18240] team_slave_1: left promiscuous mode [ 337.637108][T18240] bridge0: port 3(team0) entered disabled state [ 337.665988][T18240] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.680465][T18240] bridge_slave_0: left allmulticast mode [ 337.689853][T18240] bridge_slave_0: left promiscuous mode [ 337.710511][T18240] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.880563][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4644'. [ 337.907328][T18256] netlink: 'syz.0.4645': attribute type 4 has an invalid length. [ 337.949712][T18249] netlink: 'syz.0.4645': attribute type 10 has an invalid length. [ 338.031808][T18249] bond0: (slave netdevsim0): Releasing backup interface [ 338.124059][T18249] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 338.146198][T18249] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 338.171952][T18249] team0: Port device netdevsim0 added [ 338.196134][T18253] netlink: 'syz.0.4645': attribute type 10 has an invalid length. [ 338.247136][T18253] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 338.260754][T18253] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 338.280715][T18253] team0: Port device netdevsim0 removed [ 338.297437][T18253] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 338.533851][T18292] vlan2: entered promiscuous mode [ 338.701989][T18305] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4665'. [ 338.827853][T18310] netlink: 'syz.2.4667': attribute type 27 has an invalid length. [ 338.866239][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4668'. [ 339.063507][T18322] team0: Mode "" not found [ 339.107447][T18316] netlink: 'syz.3.4670': attribute type 4 has an invalid length. [ 339.129068][T18316] netlink: 'syz.3.4670': attribute type 10 has an invalid length. [ 339.187878][T18337] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4674'. [ 339.240816][T18316] bond0: (slave netdevsim0): Releasing backup interface [ 339.280084][T18316] team0: Port device netdevsim0 added [ 339.287799][T18332] netlink: 'syz.0.4673': attribute type 6 has an invalid length. [ 339.297073][T18323] netlink: 'syz.3.4670': attribute type 10 has an invalid length. [ 339.354821][T18323] team0: Port device netdevsim0 removed [ 339.384564][T18323] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 339.410341][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'. [ 339.426716][T18341] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4676'. [ 339.457465][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4676'. [ 339.480427][T18341] vlan1: entered promiscuous mode [ 339.577662][T18354] netlink: 'syz.0.4678': attribute type 12 has an invalid length. [ 339.618565][T18353] batman_adv: batadv0: Adding interface: gretap6 [ 339.662508][T18353] batman_adv: batadv0: The MTU of interface gretap6 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.697308][T18353] batman_adv: batadv0: Not using interface gretap6 (retrying later): interface not active [ 339.859991][T18369] netlink: 'syz.1.4685': attribute type 1 has an invalid length. [ 339.922841][T18374] bond5: (slave vcan0): The slave device specified does not support setting the MAC address [ 339.942540][T18374] bond5: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 339.960259][T18374] bond5: (slave vcan0): making interface the new active one [ 339.970615][T18374] bond5: (slave vcan0): Enslaving as an active interface with an up link [ 339.990962][T18375] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 340.035788][T18375] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 340.433673][T18401] hsr0: entered promiscuous mode [ 340.797074][T18421] netlink: 'syz.3.4703': attribute type 5 has an invalid length. [ 340.819453][T18425] netlink: 'syz.4.4702': attribute type 1 has an invalid length. [ 340.928813][T18427] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.936156][T18427] IPv6: NLM_F_CREATE should be set when creating new route [ 341.147211][T18439] vlan1: entered promiscuous mode [ 341.167921][T18439] dummy0: entered promiscuous mode [ 341.181242][T18439] dummy0: left promiscuous mode [ 341.651324][T18461] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 341.736795][T18472] netlink: 'syz.3.4717': attribute type 4 has an invalid length. [ 342.258916][T18507] __nla_validate_parse: 14 callbacks suppressed [ 342.258937][T18507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4738'. [ 342.340485][T18508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4739'. [ 342.431013][T18508] netlink: 15 bytes leftover after parsing attributes in process `syz.0.4739'. [ 342.483013][T18517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.634630][T18515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.683866][T18515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.719933][T18531] netlink: 'syz.0.4747': attribute type 3 has an invalid length. [ 342.858712][T18538] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 342.891992][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4749'. [ 342.932934][T18533] vlan1: entered promiscuous mode [ 343.066850][T18548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4753'. [ 343.423231][T18564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4761'. [ 343.716992][T18579] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4766'. [ 343.772447][T18583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.439706][T18618] netlink: 'syz.1.4776': attribute type 46 has an invalid length. [ 344.489818][T18617] veth0: entered promiscuous mode [ 344.530658][T18617] veth0: left promiscuous mode [ 344.831906][T18634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4783'. [ 344.858496][T18637] netlink: 'syz.4.4784': attribute type 9 has an invalid length. [ 344.859516][T18634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4783'. [ 344.918121][T18635] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.147071][T18653] batman_adv: batadv0: Adding interface: gretap7 [ 345.152411][T18655] netlink: 'syz.4.4790': attribute type 3 has an invalid length. [ 345.174475][T18653] batman_adv: batadv0: The MTU of interface gretap7 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.177122][T18655] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.4790'. [ 345.207700][T18659] FAULT_INJECTION: forcing a failure. [ 345.207700][T18659] name failslab, interval 1, probability 0, space 0, times 0 [ 345.227321][T18659] CPU: 0 PID: 18659 Comm: syz.2.4791 Not tainted 6.10.0-rc7-syzkaller-02012-g51b35d4f9d88 #0 [ 345.237512][T18659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 345.238547][T18653] batman_adv: batadv0: Not using interface gretap7 (retrying later): interface not active [ 345.247567][T18659] Call Trace: [ 345.247583][T18659] [ 345.247591][T18659] dump_stack_lvl+0x241/0x360 [ 345.247623][T18659] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.247646][T18659] ? __pfx__printk+0x10/0x10 [ 345.247670][T18659] ? __pfx___might_resched+0x10/0x10 [ 345.247699][T18659] should_fail_ex+0x3b0/0x4e0 [ 345.288213][T18659] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 345.294484][T18659] should_failslab+0x9/0x20 [ 345.298995][T18659] __kmalloc_noprof+0xd8/0x400 [ 345.303777][T18659] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 345.309877][T18659] genl_rcv_msg+0x802/0xec0 [ 345.314394][T18659] ? mark_lock+0x9a/0x350 [ 345.318735][T18659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.323776][T18659] ? __pfx_lock_acquire+0x10/0x10 [ 345.328809][T18659] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 345.334267][T18659] ? __pfx_nl802154_del_llsec_devkey+0x10/0x10 [ 345.340416][T18659] ? __pfx_nl802154_post_doit+0x10/0x10 [ 345.345972][T18659] ? __pfx___might_resched+0x10/0x10 [ 345.351261][T18659] netlink_rcv_skb+0x1e3/0x430 [ 345.356026][T18659] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.361053][T18659] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.366359][T18659] genl_rcv+0x28/0x40 [ 345.370333][T18659] netlink_unicast+0x7f0/0x990 [ 345.375108][T18659] ? __pfx_netlink_unicast+0x10/0x10 [ 345.380408][T18659] ? __virt_addr_valid+0x183/0x530 [ 345.385531][T18659] ? __check_object_size+0x49c/0x900 [ 345.390811][T18659] ? bpf_lsm_netlink_send+0x9/0x10 [ 345.395922][T18659] netlink_sendmsg+0x8e4/0xcb0 [ 345.400713][T18659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.406010][T18659] ? __import_iovec+0x536/0x820 [ 345.411043][T18659] ? aa_sock_msg_perm+0x91/0x160 [ 345.415986][T18659] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 345.421270][T18659] ? security_socket_sendmsg+0x87/0xb0 [ 345.426737][T18659] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.432019][T18659] __sock_sendmsg+0x221/0x270 [ 345.436695][T18659] ____sys_sendmsg+0x525/0x7d0 [ 345.441465][T18659] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.446754][T18659] __sys_sendmsg+0x2b0/0x3a0 [ 345.451341][T18659] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.456445][T18659] ? vfs_write+0x7c4/0xc90 [ 345.460890][T18659] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.467210][T18659] ? do_syscall_64+0x100/0x230 [ 345.471974][T18659] ? do_syscall_64+0xb6/0x230 [ 345.476738][T18659] do_syscall_64+0xf3/0x230 [ 345.481241][T18659] ? clear_bhb_loop+0x35/0x90 [ 345.485917][T18659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.491819][T18659] RIP: 0033:0x7f1fc5175bd9 [ 345.496231][T18659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.515833][T18659] RSP: 002b:00007f1fc5fb0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.524243][T18659] RAX: ffffffffffffffda RBX: 00007f1fc5303f60 RCX: 00007f1fc5175bd9 [ 345.532220][T18659] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000004 [ 345.540194][T18659] RBP: 00007f1fc5fb00a0 R08: 0000000000000000 R09: 0000000000000000 [ 345.548159][T18659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.556123][T18659] R13: 000000000000004d R14: 00007f1fc5303f60 R15: 00007ffe70e40b48 [ 345.564146][T18659] [ 345.800005][T18666] netlink: 'syz.0.4795': attribute type 1 has an invalid length. [ 345.923432][T18675] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 345.950938][T18675] bond2: (slave vcan0): Setting fail_over_mac to active for active-backup mode [ 345.971197][T18675] bond2: (slave vcan0): making interface the new active one [ 345.991212][T18675] bond2: (slave vcan0): Enslaving as an active interface with an up link [ 346.171660][T18692] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 346.301619][T18692] can: request_module (can-proto-0) failed. [ 346.649921][T18713] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 347.107243][T18728] ip6t_srh: unknown srh invflags 4811 [ 347.250953][T18744] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.484195][T18756] __nla_validate_parse: 5 callbacks suppressed [ 347.484216][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4824'. [ 347.568827][T18756] vlan1: entered promiscuous mode [ 347.588384][T18756] dummy0: entered promiscuous mode [ 347.611762][T18756] dummy0: left promiscuous mode [ 347.733332][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4830'. [ 347.752258][T18766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4830'. [ 347.921164][T18775] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.4833'. [ 347.956768][T18775] netlink: zone id is out of range [ 347.961959][T18775] netlink: zone id is out of range [ 347.989476][T18775] netlink: zone id is out of range [ 348.113315][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4836'. [ 348.188182][T18780] veth0: entered promiscuous mode [ 348.193361][T18780] macsec2: entered promiscuous mode [ 348.237065][T18780] macsec2: entered allmulticast mode [ 348.242689][T18780] veth0: entered allmulticast mode [ 348.272562][T18797] netlink: 'syz.4.4841': attribute type 4 has an invalid length. [ 348.314113][T18797] netlink: 'syz.4.4841': attribute type 10 has an invalid length. [ 348.423878][T18797] bond0: (slave netdevsim0): Releasing backup interface [ 348.489299][T18797] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 348.531478][T18797] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 348.571639][T18797] team0: Port device netdevsim0 added [ 348.586578][T18806] netlink: 'syz.4.4841': attribute type 10 has an invalid length. [ 348.619468][T18806] team0: Port device netdevsim0 removed [ 348.648100][T18806] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 348.686911][T18806] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 348.697548][T18806] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 348.726730][T18812] netlink: 'syz.1.4842': attribute type 4 has an invalid length. [ 348.987974][T18840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4852'. [ 349.338288][T18858] netlink: 'syz.2.4860': attribute type 4 has an invalid length. [ 349.349284][T18855] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 349.373890][T18858] netlink: 'syz.2.4860': attribute type 10 has an invalid length. [ 349.432942][T18858] team0: Port device netdevsim0 removed [ 349.452008][T18858] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 349.608935][T18872] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4863'. [ 349.654109][T18875] validate_nla: 1 callbacks suppressed [ 349.654137][T18875] netlink: 'syz.2.4865': attribute type 3 has an invalid length. [ 349.821166][T18887] netlink: 'syz.3.4869': attribute type 9 has an invalid length. [ 349.847376][T18887] netlink: 'syz.3.4869': attribute type 7 has an invalid length. [ 349.858788][T18887] netlink: 'syz.3.4869': attribute type 8 has an invalid length. [ 350.033581][T18892] bond0: entered promiscuous mode [ 350.051586][T18892] bond_slave_0: entered promiscuous mode [ 350.063202][T18892] bond_slave_1: entered promiscuous mode [ 350.070713][T18892] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 350.099002][T18898] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 350.279777][T18909] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4876'. [ 350.326558][T18909] (unnamed net_device) (uninitialized): option ad_select: invalid value (36) [ 350.716768][T18931] x_tables: duplicate underflow at hook 2 [ 350.879314][T18942] vlan3: entered promiscuous mode [ 350.889914][T18942] bridge0: entered promiscuous mode [ 350.929636][T18942] team0: Port device vlan3 added [ 350.951574][T18943] netlink: 'syz.3.4889': attribute type 10 has an invalid length. [ 350.973848][T18947] netlink: 'syz.0.4892': attribute type 1 has an invalid length. [ 350.982949][T18947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4892'. [ 351.021727][T18943] bond0: (slave netdevsim0): Releasing backup interface [ 351.028877][T18947] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4892'. [ 351.080547][T18943] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 351.131782][T18943] team0: Failed to send options change via netlink (err -105) [ 351.166992][T18943] team0: Port device netdevsim0 added [ 351.213082][T18952] syz_tun: entered promiscuous mode [ 351.252158][T18952] batadv_slave_0: entered promiscuous mode [ 351.290031][T18952] syz_tun: left promiscuous mode [ 351.347895][T18952] batadv_slave_0: left promiscuous mode [ 351.442835][T18968] netlink: 'syz.0.4896': attribute type 21 has an invalid length. [ 351.610046][T18978] netlink: 'syz.3.4898': attribute type 2 has an invalid length. [ 351.752928][T18985] netlink: 'syz.1.4902': attribute type 10 has an invalid length. [ 351.828697][T18985] geneve0: entered promiscuous mode [ 351.887575][T18985] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 351.952678][T18998] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.069568][T19004] netlink: 'syz.2.4912': attribute type 2 has an invalid length. [ 352.919875][T19053] __nla_validate_parse: 12 callbacks suppressed [ 352.919896][T19053] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.4930'. [ 352.968953][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4928'. [ 353.362133][T19066] bond0: (slave netdevsim0): Releasing backup interface [ 353.392500][T19084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4939'. [ 353.429436][T19080] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 353.553506][T19092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4943'. [ 353.602749][T19096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 353.610068][T19096] IPv6: NLM_F_CREATE should be set when creating new route [ 353.981082][T19092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4943'. [ 354.009829][T19092] bridge0: port 3(bond0) entered disabled state [ 354.103528][T19092] bridge_slave_1: left allmulticast mode [ 354.129020][T19092] bridge_slave_1: left promiscuous mode [ 354.148070][T19092] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.183948][T19092] bridge_slave_0: left allmulticast mode [ 354.207900][T19092] bridge_slave_0: left promiscuous mode [ 354.225066][T19092] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.277894][T19092] bridge0: left promiscuous mode [ 354.368485][T19092] team0: Port device vlan2 removed [ 354.451114][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4953'. [ 354.483013][T19126] vlan0: entered promiscuous mode [ 354.641836][T19128] bond0: (slave netdevsim0): Releasing backup interface [ 354.692164][T19128] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 354.721884][T19128] team0: Port device netdevsim0 added [ 354.747440][T19138] validate_nla: 11 callbacks suppressed [ 354.747473][T19138] netlink: 'syz.2.4954': attribute type 10 has an invalid length. [ 354.830747][T19138] team0: Port device netdevsim0 removed [ 354.842094][T19138] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 354.863243][T19138] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 355.007284][T19150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4962'. [ 355.052369][T19150] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4962'. [ 355.142361][T19156] netlink: 'syz.4.4965': attribute type 10 has an invalid length. [ 355.232980][T19156] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 355.262978][T19156] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 355.284129][T19156] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 355.304632][T19163] mac80211_hwsim hwsim43 syzkaller0: renamed from wlan1 (while UP) [ 355.321101][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4970'. [ 355.441570][T19176] xt_l2tp: v2 doesn't support IP mode [ 355.580814][T19189] netlink: 'syz.3.4974': attribute type 4 has an invalid length. [ 355.632594][T19189] netlink: 'syz.3.4974': attribute type 10 has an invalid length. [ 355.676930][T19189] netlink: 'syz.3.4974': attribute type 10 has an invalid length. [ 355.743712][T19189] team0: Port device netdevsim0 removed [ 355.768793][T19200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4979'. [ 355.782142][T19189] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 355.991748][T19213] netlink: 'syz.4.4980': attribute type 1 has an invalid length. [ 356.030313][T19213] netlink: 'syz.4.4980': attribute type 1 has an invalid length. [ 356.087296][T19215] netlink: 'syz.2.4982': attribute type 2 has an invalid length. [ 356.456829][T19240] netlink: 'syz.3.4986': attribute type 1 has an invalid length. [ 356.599929][T19246] x_tables: duplicate underflow at hook 1 [ 356.868820][T19262] netlink: 'syz.3.4994': attribute type 4 has an invalid length. [ 356.952006][T19262] bond0: (slave netdevsim0): Releasing backup interface [ 357.042097][T19262] team0: Port device netdevsim0 added [ 357.114871][T19271] team0: Port device netdevsim0 removed [ 357.140232][T19271] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 357.844245][T19313] bond0: (slave netdevsim0): Releasing backup interface [ 357.923952][T19321] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 358.418277][T19345] bond0: (slave netdevsim0): Releasing backup interface [ 358.602352][T19354] __nla_validate_parse: 9 callbacks suppressed [ 358.602372][T19354] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5028'. [ 358.677737][T19356] bond0: (slave netdevsim0): Releasing backup interface [ 358.692772][T19356] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 358.713745][T19356] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 358.752566][T19356] team0: Port device netdevsim0 added [ 358.824026][T19359] team0: Port device netdevsim0 removed [ 358.859867][T19359] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 358.886868][T19359] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 358.897482][T19359] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 359.118510][T19380] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5035'. [ 359.217832][T19381] bond0: (slave netdevsim0): Releasing backup interface [ 359.233733][T19381] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 359.273851][T19381] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 359.299253][T19381] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 359.329108][T19381] team0: Failed to send options change via netlink (err -105) [ 359.338002][T19381] team0: Port device netdevsim0 added [ 359.344642][T19384] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5039'. [ 359.367359][T19384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5039'. [ 359.379096][T19389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5041'. [ 359.488286][T19393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5043'. [ 359.708992][T19407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5047'. [ 359.724263][T19405] bond0: (slave netdevsim0): Releasing backup interface [ 359.760541][T19405] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 359.820869][T19405] team0: Port device netdevsim0 added [ 359.898345][T19411] validate_nla: 16 callbacks suppressed [ 359.898367][T19411] netlink: 'syz.2.5049': attribute type 10 has an invalid length. [ 359.954660][T19411] team0: Port device netdevsim0 removed [ 360.059704][T19411] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 360.080594][T19411] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 360.374606][T19451] netlink: 'syz.0.5057': attribute type 2 has an invalid length. [ 360.530985][T19463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5061'. [ 360.609549][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5062'. [ 360.744959][T19473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5064'. [ 360.858265][T19475] netlink: 'syz.2.5065': attribute type 4 has an invalid length. [ 360.890919][T19475] netlink: 'syz.2.5065': attribute type 10 has an invalid length. [ 360.927522][T19475] bond0: (slave netdevsim0): Releasing backup interface [ 360.943485][T19475] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 360.970320][T19475] team0: Port device netdevsim0 added [ 360.987306][T19485] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.000121][T19485] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.028390][T19485] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 361.062336][T19488] netlink: 'syz.2.5065': attribute type 10 has an invalid length. [ 361.139345][T19488] team0: Port device netdevsim0 removed [ 361.197961][T19488] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 361.237695][T19488] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 361.937569][T19526] tipc: Enabling of bearer rejected, failed to enable media [ 362.128730][T19531] bond0: (slave wlan1): Releasing backup interface [ 362.160734][T19531] [ 362.163109][T19531] ====================================================== [ 362.170137][T19531] WARNING: possible circular locking dependency detected [ 362.177165][T19531] 6.10.0-rc7-syzkaller-02012-g51b35d4f9d88 #0 Not tainted [ 362.184287][T19531] ------------------------------------------------------ [ 362.191318][T19531] syz.3.5083/19531 is trying to acquire lock: [ 362.197393][T19531] ffff888067ca8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_open+0xe7/0x200 [ 362.206581][T19531] [ 362.206581][T19531] but task is already holding lock: [ 362.213958][T19531] ffff8880725b0d40 (team->team_lock_key#14){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 362.223741][T19531] [ 362.223741][T19531] which lock already depends on the new lock. [ 362.223741][T19531] [ 362.234158][T19531] [ 362.234158][T19531] the existing dependency chain (in reverse order) is: [ 362.243183][T19531] [ 362.243183][T19531] -> #1 (team->team_lock_key#14){+.+.}-{3:3}: [ 362.251470][T19531] lock_acquire+0x1ed/0x550 [ 362.256516][T19531] __mutex_lock+0x136/0xd70 [ 362.261560][T19531] team_port_change_check+0x51/0x1e0 [ 362.267391][T19531] team_device_event+0x161/0x5b0 [ 362.272878][T19531] notifier_call_chain+0x19f/0x3e0 [ 362.278546][T19531] dev_close_many+0x33c/0x4c0 [ 362.283773][T19531] unregister_netdevice_many_notify+0x50b/0x1c40 [ 362.290648][T19531] macvlan_device_event+0x7e0/0x870 [ 362.296399][T19531] notifier_call_chain+0x19f/0x3e0 [ 362.302063][T19531] unregister_netdevice_many_notify+0xd81/0x1c40 [ 362.308936][T19531] unregister_netdevice_queue+0x303/0x370 [ 362.315198][T19531] _cfg80211_unregister_wdev+0x162/0x560 [ 362.321377][T19531] ieee80211_if_remove+0x25d/0x3a0 [ 362.327079][T19531] ieee80211_del_iface+0x19/0x30 [ 362.332561][T19531] cfg80211_remove_virtual_intf+0x23f/0x410 [ 362.339012][T19531] genl_rcv_msg+0xb14/0xec0 [ 362.344070][T19531] netlink_rcv_skb+0x1e3/0x430 [ 362.349375][T19531] genl_rcv+0x28/0x40 [ 362.353903][T19531] netlink_unicast+0x7f0/0x990 [ 362.359213][T19531] netlink_sendmsg+0x8e4/0xcb0 [ 362.364526][T19531] __sock_sendmsg+0x221/0x270 [ 362.369755][T19531] ____sys_sendmsg+0x525/0x7d0 [ 362.375072][T19531] __sys_sendmsg+0x2b0/0x3a0 [ 362.380215][T19531] do_syscall_64+0xf3/0x230 [ 362.385269][T19531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.391703][T19531] [ 362.391703][T19531] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 362.399426][T19531] validate_chain+0x18e0/0x5900 [ 362.404802][T19531] __lock_acquire+0x1346/0x1fd0 [ 362.410192][T19531] lock_acquire+0x1ed/0x550 [ 362.415236][T19531] __mutex_lock+0x136/0xd70 [ 362.420285][T19531] ieee80211_open+0xe7/0x200 [ 362.425423][T19531] __dev_open+0x2d3/0x450 [ 362.430305][T19531] dev_open+0xae/0x1b0 [ 362.434914][T19531] team_add_slave+0x9c8/0x2760 [ 362.440202][T19531] do_setlink+0xe70/0x41f0 [ 362.445140][T19531] rtnl_newlink+0x180d/0x20a0 [ 362.450343][T19531] rtnetlink_rcv_msg+0x73f/0xcf0 [ 362.455886][T19531] netlink_rcv_skb+0x1e3/0x430 [ 362.461191][T19531] netlink_unicast+0x7f0/0x990 [ 362.466523][T19531] netlink_sendmsg+0x8e4/0xcb0 [ 362.471827][T19531] __sock_sendmsg+0x221/0x270 [ 362.477049][T19531] ____sys_sendmsg+0x525/0x7d0 [ 362.482345][T19531] __sys_sendmsg+0x2b0/0x3a0 [ 362.487471][T19531] do_syscall_64+0xf3/0x230 [ 362.492506][T19531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.498944][T19531] [ 362.498944][T19531] other info that might help us debug this: [ 362.498944][T19531] [ 362.509162][T19531] Possible unsafe locking scenario: [ 362.509162][T19531] [ 362.516610][T19531] CPU0 CPU1 [ 362.521989][T19531] ---- ---- [ 362.527361][T19531] lock(team->team_lock_key#14); [ 362.532392][T19531] lock(&rdev->wiphy.mtx); [ 362.539434][T19531] lock(team->team_lock_key#14); [ 362.546997][T19531] lock(&rdev->wiphy.mtx); [ 362.551493][T19531] [ 362.551493][T19531] *** DEADLOCK *** [ 362.551493][T19531] [ 362.559620][T19531] 2 locks held by syz.3.5083/19531: [ 362.564810][T19531] #0: ffffffff8f5ed5c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 362.574247][T19531] #1: ffff8880725b0d40 (team->team_lock_key#14){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 362.584422][T19531] [ 362.584422][T19531] stack backtrace: [ 362.590300][T19531] CPU: 0 PID: 19531 Comm: syz.3.5083 Not tainted 6.10.0-rc7-syzkaller-02012-g51b35d4f9d88 #0 [ 362.600465][T19531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 362.610527][T19531] Call Trace: [ 362.613810][T19531] [ 362.616747][T19531] dump_stack_lvl+0x241/0x360 [ 362.621445][T19531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.626652][T19531] ? print_circular_bug+0x130/0x1a0 [ 362.631883][T19531] check_noncircular+0x36a/0x4a0 [ 362.636841][T19531] ? __pfx_check_noncircular+0x10/0x10 [ 362.642328][T19531] ? lockdep_lock+0x123/0x2b0 [ 362.647006][T19531] ? validate_chain+0x11e/0x5900 [ 362.651962][T19531] ? mark_lock+0x9a/0x350 [ 362.656314][T19531] validate_chain+0x18e0/0x5900 [ 362.661181][T19531] ? __pfx_validate_chain+0x10/0x10 [ 362.666382][T19531] ? __lock_acquire+0x1346/0x1fd0 [ 362.671425][T19531] ? __pfx_validate_chain+0x10/0x10 [ 362.676617][T19531] ? mark_lock+0x9a/0x350 [ 362.680949][T19531] ? __lock_acquire+0x1346/0x1fd0 [ 362.685981][T19531] ? mark_lock+0x9a/0x350 [ 362.690318][T19531] __lock_acquire+0x1346/0x1fd0 [ 362.695176][T19531] lock_acquire+0x1ed/0x550 [ 362.699671][T19531] ? ieee80211_open+0xe7/0x200 [ 362.704443][T19531] ? __pfx_lock_acquire+0x10/0x10 [ 362.709475][T19531] ? __pfx___might_resched+0x10/0x10 [ 362.714775][T19531] ? ib_device_get_by_netdev+0x595/0x5e0 [ 362.720430][T19531] ? ib_device_get_by_netdev+0x85/0x5e0 [ 362.725998][T19531] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 362.731986][T19531] ? net_generic+0x1f/0x240 [ 362.736494][T19531] ? net_generic+0x1f0/0x240 [ 362.741094][T19531] __mutex_lock+0x136/0xd70 [ 362.745613][T19531] ? ieee80211_open+0xe7/0x200 [ 362.750400][T19531] ? rxe_notify+0xef/0x4c0 [ 362.754831][T19531] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 362.760655][T19531] ? __pfx_rxe_notify+0x10/0x10 [ 362.765525][T19531] ? is_hsr_master+0x19/0x70 [ 362.770139][T19531] ? ieee80211_open+0xe7/0x200 [ 362.774927][T19531] ? __pfx___mutex_lock+0x10/0x10 [ 362.779950][T19531] ? ip6_route_dev_notify+0x99/0x600 [ 362.785239][T19531] ieee80211_open+0xe7/0x200 [ 362.789849][T19531] __dev_open+0x2d3/0x450 [ 362.794200][T19531] ? __pfx___dev_open+0x10/0x10 [ 362.799048][T19531] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 362.804515][T19531] dev_open+0xae/0x1b0 [ 362.808588][T19531] ? __pfx_dev_open+0x10/0x10 [ 362.813278][T19531] ? rcu_is_watching+0x15/0xb0 [ 362.818057][T19531] ? team_add_slave+0x69e/0x2760 [ 362.823009][T19531] ? team_add_slave+0x8b5/0x2760 [ 362.827959][T19531] team_add_slave+0x9c8/0x2760 [ 362.832743][T19531] ? __dev_change_flags+0x515/0x6f0 [ 362.837960][T19531] ? __pfx_team_add_slave+0x10/0x10 [ 362.843185][T19531] ? mutex_is_locked+0x12/0x50 [ 362.847966][T19531] do_setlink+0xe70/0x41f0 [ 362.852482][T19531] ? stack_trace_save+0x118/0x1d0 [ 362.857502][T19531] ? __pfx_stack_trace_save+0x10/0x10 [ 362.862892][T19531] ? __pfx_do_setlink+0x10/0x10 [ 362.867768][T19531] ? __nla_validate_parse+0x26ce/0x3090 [ 362.873365][T19531] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 362.878758][T19531] ? rtnl_newlink+0xf2/0x20a0 [ 362.883475][T19531] ? __pfx___nla_validate_parse+0x10/0x10 [ 362.889243][T19531] ? nla_strscpy+0x100/0x180 [ 362.893861][T19531] ? full_name_hash+0x93/0xe0 [ 362.898559][T19531] ? validate_linkmsg+0x71e/0x900 [ 362.903581][T19531] rtnl_newlink+0x180d/0x20a0 [ 362.908275][T19531] ? __pfx_rtnl_newlink+0x10/0x10 [ 362.913288][T19531] ? __pfx___mutex_trylock_common+0x10/0x10 [ 362.919189][T19531] ? __pfx_lock_release+0x10/0x10 [ 362.924221][T19531] ? __pfx_rtnl_newlink+0x10/0x10 [ 362.929239][T19531] rtnetlink_rcv_msg+0x73f/0xcf0 [ 362.934169][T19531] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 362.939450][T19531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.944906][T19531] ? ref_tracker_free+0x643/0x7e0 [ 362.949924][T19531] netlink_rcv_skb+0x1e3/0x430 [ 362.954683][T19531] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 362.960152][T19531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 362.965460][T19531] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.970677][T19531] netlink_unicast+0x7f0/0x990 [ 362.975446][T19531] ? __pfx_netlink_unicast+0x10/0x10 [ 362.980728][T19531] ? __virt_addr_valid+0x183/0x530 [ 362.985869][T19531] ? __check_object_size+0x49c/0x900 [ 362.991152][T19531] ? bpf_lsm_netlink_send+0x9/0x10 [ 362.996266][T19531] netlink_sendmsg+0x8e4/0xcb0 [ 363.001042][T19531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.006329][T19531] ? __import_iovec+0x536/0x820 [ 363.011180][T19531] ? aa_sock_msg_perm+0x91/0x160 [ 363.016120][T19531] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 363.021409][T19531] ? security_socket_sendmsg+0x87/0xb0 [ 363.026867][T19531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 363.032152][T19531] __sock_sendmsg+0x221/0x270 [ 363.036825][T19531] ____sys_sendmsg+0x525/0x7d0 [ 363.041586][T19531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 363.046881][T19531] __sys_sendmsg+0x2b0/0x3a0 [ 363.051472][T19531] ? __pfx___sys_sendmsg+0x10/0x10 [ 363.056592][T19531] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 363.062912][T19531] ? do_syscall_64+0x100/0x230 [ 363.067676][T19531] ? do_syscall_64+0xb6/0x230 [ 363.072351][T19531] do_syscall_64+0xf3/0x230 [ 363.076847][T19531] ? clear_bhb_loop+0x35/0x90 [ 363.081516][T19531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.087406][T19531] RIP: 0033:0x7f12b7175bd9 [ 363.091816][T19531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.111505][T19531] RSP: 002b:00007f12b7e8e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 363.119925][T19531] RAX: ffffffffffffffda RBX: 00007f12b7303f60 RCX: 00007f12b7175bd9 [ 363.127893][T19531] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000009 [ 363.135853][T19531] RBP: 00007f12b71e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 363.143816][T19531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.151780][T19531] R13: 000000000000004d R14: 00007f12b7303f60 R15: 00007ffd4ff2b518 [ 363.159841][T19531] [ 363.177814][T19531] team0: Port device wlan1 added