last executing test programs: 55.605561349s ago: executing program 0 (id=1948): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback=0x7f000089}, {@remote}, {@private}, {@dev}, {@private}, {@local}, {@dev}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x63) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) close(r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) 38.121084154s ago: executing program 0 (id=1948): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback=0x7f000089}, {@remote}, {@private}, {@dev}, {@private}, {@local}, {@dev}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x63) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) close(r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) 19.878597866s ago: executing program 0 (id=1948): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback=0x7f000089}, {@remote}, {@private}, {@dev}, {@private}, {@local}, {@dev}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x63) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) close(r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) 6.88839179s ago: executing program 4 (id=3790): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r0, @ANYBLOB="010f0000000000000000"], 0x1c}}, 0x0) 6.683051834s ago: executing program 4 (id=3795): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x66202aa1, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80000}, 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000006d40)=[{{&(0x7f0000001a80)={0x2, 0x20, @multicast2}, 0x10, 0x0}}], 0x1, 0x0) writev(r2, &(0x7f0000000340)=[{&(0x7f00000002c0)='~', 0x1}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0xffff, 0x4000, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x14, 0x2, [0x0, 0x0, 0x0, 0xa40d, 0x0, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x4000, 0x0, @private1}, 0x1c) sendto$inet6(r5, &(0x7f00000011c0)="a0", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x0, 0x20}, &(0x7f00000008c0)=0x18) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) nanosleep(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 6.594407687s ago: executing program 4 (id=3797): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="240003000f140100000080000000000008000100000000000c00450072646d615f636d"], 0x24}}, 0x0) 6.254328945s ago: executing program 0 (id=1948): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback=0x7f000089}, {@remote}, {@private}, {@dev}, {@private}, {@local}, {@dev}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x63) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) close(r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) 6.254187148s ago: executing program 4 (id=3802): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)={0x54, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x28, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x54}}, 0x0) 3.800435454s ago: executing program 2 (id=3809): mmap(&(0x7f00006fb000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffb}, &(0x7f0000000040)=0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0x6, 0x6}, &(0x7f00000000c0)=0xc) r6 = socket$inet_sctp(0x2, 0x4, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffff05ff", @ANYRES16, @ANYBLOB="200028bd7000fcdbdf2507000000080001002700000008000300", @ANYRES32=r8, @ANYBLOB="08000500000000000800050007000000"], 0x34}, 0x1, 0x0, 0x0, 0x1844}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001140)={0x40, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{}, {}, @device_a, @device_b}, 0x0, 0x0, @default, @val, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x9140100}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x280, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xca000000, 0x4}}}}, [@NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xb, 0xf}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0xf}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x86, 0xfc, "24082ab9891bd82f01adb789dae809253f664287a9d98a82712deac29bec48087eb8368060cdfedecb084c75598741ee4c8b6963336514d9fcbecf31e76b31149b0f1c99dbfb78ee348c57b9d0661c9ae1ad4c8b2e3c7538f80c87b6087685ea91bec777713cce94805d4000baa96fb03c3f7bc8ef2dcd1ae4b641da55c90b09639e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "136d7113dec15c4b34f75c878ebb2d9d"}, @NL80211_ATTR_FILS_ERP_RRK={0x68, 0xfc, "5477813ffd19c8ae8f0a08722b5fdfdfe59e1385f21d8ae839e8c63483feb589285050064100000000789134582c4f1281ec6209516aa7d028748682980a4b7a2d5ad77268b1c72ce5f92c0aa580f3bc50282ff4bfffcbb1e2ded81575be3502c7e65ad0"}, @NL80211_ATTR_FILS_ERP_REALM={0x71, 0xfa, "9dab66edd5a07f01bbe511248052b0ace3222933b3388942dcfd606cc9878cffec0652ba9ede06d8e968f0d43b2196d72e32670e307d471d6d0429d53931f3d5feaaa8f6619178ba39a3f3a7cb24ae4dd73b10ab8cbe5b3232f16459544c44ee25dd23eefa158fa559cf313393"}, @NL80211_ATTR_FILS_ERP_REALM={0x99, 0xfa, "e3e13445e41f2c1dfe39fb0da6fe9dd2022326881daba60b82adc45db2a24cf05c6ca0dc0f5bf30926a8156cee791dbd71318a235f5c435b6563f7dcc755e71088a1f84ea6db71a70076d4160c7eea84c7c45fdf1200add352a723475e72c934650d5b603004c7a2ac329c4e4108be80135b8e7865010710da0026368c152f09ef5a091d1ff78fee41b3e40bd92607de28a02df298"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "fce42e9d4ee756ad7ad8"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 'a'}]]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x2}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08003300001c000000000001907800000000e00000010800907800000000"], 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r15, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 3.647567635s ago: executing program 0 (id=1948): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@loopback=0x7f000089}, {@remote}, {@private}, {@dev}, {@private}, {@local}, {@dev}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, 0x63) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x24) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) close(r6) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) 2.918622214s ago: executing program 1 (id=3811): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x1170, 0x1170, 0x110, 0x1170, 0x250, 0x1398, 0x1398, 0x250, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x5, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@private0, @private2, [], [], 'ip6gretap0\x00', 'gre0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@multiport={{0x50}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r7, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414"], 0x70}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0x0, r10}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_ADDRESS={0x8}]}, 0x28}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0) 2.913566337s ago: executing program 2 (id=3812): sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0xffffff7f00000000, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x60}}, 0x0) 2.750391535s ago: executing program 2 (id=3814): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f00000019c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061112000000000009500000000000000a4cf40af93bed4c104a1f10ad231ed45c3fd530e742e8d21d5e3923dfbce35d4a41aaa59a370b9eaf42326bf98525dad36bf960914fe3e48ac7f5facfb7e42d8b9c45f4267f39bfccb0d595084ebdcf5af8d4b09b6339a4edeb5eaf2bd1eed1f99e4b091c8ac28a236be70bbdc5a0489e965165c67c97a"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60000000}, 0x70) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003700), r0) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000003b80)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x25dfdbfb, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x380}]}, 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000011c0)={'hsr0\x00', 0x0}) sendto$packet(r6, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8100, r7, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$ITER_CREATE(0x21, 0x0, 0x0) bind$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000200)={0x10, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x2}, 0xe) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x39, &(0x7f0000000340)={0x9, {{0xa, 0x4e20, 0x6e, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x96}}, {{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7fffffff}}}, 0x108) socket$inet(0x2, 0x3, 0x2) setsockopt$bt_BT_SECURITY(r9, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) 2.660440664s ago: executing program 4 (id=3803): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xd, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @broadcast, {[@rr={0x7, 0x13, 0x0, [@local, @dev, @local, @multicast2]}, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x0, [@multicast1]}]}}}}}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x9}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) 2.223076254s ago: executing program 1 (id=3816): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5b}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x34}, 0x48) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000181100"/20, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100c0ff00000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xfc, &(0x7f0000000dc0)=""/252}, 0x90) (async) socket(0x22, 0x80017, 0x2) 2.222382878s ago: executing program 3 (id=3817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.186794955s ago: executing program 1 (id=3818): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070012000523"], 0xfe33) 2.094568123s ago: executing program 3 (id=3819): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x0, @in=@private}}, 0xe8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x12, 0x0, 0x20040001, 0x0, 0x1}}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x114}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r5}, 0x18) connect$can_j1939(r3, &(0x7f0000000200)={0x1d, r5, 0x1}, 0x18) sendmmsg(r3, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x3ffffffffffff06, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev}]}]}, 0x28}}, 0x0) getsockopt$IPT_SO_GET_INFO(r7, 0x0, 0x40, &(0x7f0000000300)={'security\x00', 0x0, [0x0, 0x8, 0x9, 0x1c000000, 0xdbf7]}, &(0x7f0000000280)=0x54) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="014557c99b0d35d863b5acaa503b00070000001400018005000200010000000800060001000000"], 0x28}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0) 1.83085771s ago: executing program 1 (id=3820): mmap(&(0x7f00006fb000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffb}, &(0x7f0000000040)=0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0x6, 0x6}, &(0x7f00000000c0)=0xc) r6 = socket$inet_sctp(0x2, 0x4, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffff05ff", @ANYRES16, @ANYBLOB="200028bd7000fcdbdf2507000000080001002700000008000300", @ANYRES32=r8, @ANYBLOB="08000500000000000800050007000000"], 0x34}, 0x1, 0x0, 0x0, 0x1844}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001140)={0x40, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{}, {}, @device_a, @device_b}, 0x0, 0x0, @default, @val, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x9140100}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x280, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xca000000, 0x4}}}}, [@NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xb, 0xf}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0xf}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x86, 0xfc, "24082ab9891bd82f01adb789dae809253f664287a9d98a82712deac29bec48087eb8368060cdfedecb084c75598741ee4c8b6963336514d9fcbecf31e76b31149b0f1c99dbfb78ee348c57b9d0661c9ae1ad4c8b2e3c7538f80c87b6087685ea91bec777713cce94805d4000baa96fb03c3f7bc8ef2dcd1ae4b641da55c90b09639e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "136d7113dec15c4b34f75c878ebb2d9d"}, @NL80211_ATTR_FILS_ERP_RRK={0x68, 0xfc, "5477813ffd19c8ae8f0a08722b5fdfdfe59e1385f21d8ae839e8c63483feb589285050064100000000789134582c4f1281ec6209516aa7d028748682980a4b7a2d5ad77268b1c72ce5f92c0aa580f3bc50282ff4bfffcbb1e2ded81575be3502c7e65ad0"}, @NL80211_ATTR_FILS_ERP_REALM={0x71, 0xfa, "9dab66edd5a07f01bbe511248052b0ace3222933b3388942dcfd606cc9878cffec0652ba9ede06d8e968f0d43b2196d72e32670e307d471d6d0429d53931f3d5feaaa8f6619178ba39a3f3a7cb24ae4dd73b10ab8cbe5b3232f16459544c44ee25dd23eefa158fa559cf313393"}, @NL80211_ATTR_FILS_ERP_REALM={0x99, 0xfa, "e3e13445e41f2c1dfe39fb0da6fe9dd2022326881daba60b82adc45db2a24cf05c6ca0dc0f5bf30926a8156cee791dbd71318a235f5c435b6563f7dcc755e71088a1f84ea6db71a70076d4160c7eea84c7c45fdf1200add352a723475e72c934650d5b603004c7a2ac329c4e4108be80135b8e7865010710da0026368c152f09ef5a091d1ff78fee41b3e40bd92607de28a02df298"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "fce42e9d4ee756ad7ad8"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 'a'}]]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x2}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08003300001c000000000001907800000000e00000010800907800000000"], 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r15, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) 1.756202187s ago: executing program 2 (id=3821): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000002d40)=[{&(0x7f0000000780)="d8a418126a9ddd79dda91238b0e534d68b225305f5d88d8af3d6915de4145f1d6e849bc309e555961a990205e3b0b6bdbfee61212e43fd7e4f7739830564d28c0714679c5cb8a895ddf86e0ba9bab861ed570813c05d50838f38d9d937ac1983ae668a5efc9b8d9f662eeae44fca668dfe948e310e98b49a2ff6b24095bb2d9cfea937a1efc0d9a4566f3a4b78b6cac354215341c2cb2308ee54ed56932c7db798d29c795c2ed433e78d1847c41225cf46137089422bee076b3ed4b43bec3de3163c3f3f9512936fa639a5f3f0a5eb50a9dc53013a85b5ff6f6dd3701445728169effa15d45ca56b13ce391b56b448930d1afcfdd50d176b3d42919da6595c7c8bcb4935d096870958580fe644b6d5ecc573c9803ec52603a7ab6dbcf973e2fa97190b7d151babbd79e81af868e2de4db86c3236eae561276c0cdd8cb8441bc48df91b0c6aedaef2c4268376751bba181594a69589072e500dbf795e4a5e17b2fd525b2da3af112ced028b9887f0a2bd3e6d1a79a72016282a06499033f29a26480b53fab484a09cc17e04e5fc0f1ead77663945fbc6d01295dd42aba1e1dbcddff86f04338a22596d7c37c52ecd812638af9a55b218ba8ced6c7366da9872499c880c39d6449ec44e65b57ae5c12fe9a9c2cc327cc20b81f3c32e49cfc41072be2d40e3b1ee889085cc5fe50b03e89382c4f8cb961e1ff327681abf8a2bcd59ab3b2b107d7873253d3a08068158d1cb224dda701057972cd5c31983d4e7e76621c170a7a77d50805f1cc55891ef21f1e3773bbd40dfa8b3676a1a11be80cafaae048cbd351e9c11033052b35a8a01b510d1aad4e635875e06dbcf172f23c193bd2da7113266810cfa1ff829437f34a2d551575106303a05027f606fade70d1142d931245ffcb731c12c0b2d41eab05915a92c813eb102ef14fb010a4acf9c26c2de0296fea45cae0b03e8eb655942c925e70b3062830eb19246556e724751308dc20e96f03fb720bbd851c330412670de2bb91bd18adecdbb00a64b36135d2e93e164bcf2566661f12e0fa70099876594126e03aed5f777e47223f31289ba81651f3d54fa6b5207813fafded2b0fa146d1bc56e3b6b7fde6411ee43f2be3ce708628c7082a3c63d667ab70929c038914275c2aa2c5d7cbfee328dd99d03718be0dd8d0f19e54abb81a08571c60613d714ab0262cb4d8ad95494cef80db6068c805a067b6a6d3fdfb615c213ce050f870686ade6d6596929b868dcf29d2579ccbbe1ce6d6cb1eeb3ed1d78c8528b35c67d74101b09c024243d9fb9c3715daf3e5330b6966feda3c6169872762504e7b1bb69748c9e2cf4696d846233497c0c401b8015afdf74b0fcb41ddfdd5f14058f9da73cb5b70768e227046984b6ca676f7c31266e9f72279f4bc0e6a35b55c1d594cc275f82c368fb3e33d9b089db66675e0317a28ed12e65f31c3851c194aff2300074ef6cb4f74073f4a68a7744f9969c79549bb2da2fce441a8cd40421a8e6aad59408328e25ba0195c386cd3a32f7bf83597499b5ed028c4e1898dc8597f34fd9a9232e39d871239b60109c9460be1340bb7fda3e72c7135c9a4f50de8228d95aca17d3029a14a3cf9996fbb66c3148762d556326dac9467dc06de1bf175d43f79e0e4c1464551e072f36481c86e3cb0932463aa5d127558f53134d7212c00ffe049cccf64caaa2e6afa299e798a5dfa7f31f38ef8966aea6b37e1ee19173d11be01a79b37b148d8cc46d264769cfcb9bb16f38290e3231ab6f66247c18a8b36520a1623b9b4dca3072f87c83b497622503df7174ff271f3e0acca58b4e6a337a269c83c1ab498aaa9912c43db53f97642f24d5b218c4b8d7cb9db5d7c25695262690a8eaceeb65c3e762503bc70e91865e99ef17e8113dc32055a0c60a2e860849912cd275af412a219606fd128d2da38f804059b1d37a32c097a8cddad9aef7eb5a1cd7d9029f8d0d8dc68a8b66cb4dbb9940018e5bd9c3563347aea60b215ab3e0e6c8fcd3575e71524af83bd006b8f397d0e6f6a379f53d5cf49a8ece6cfd93c47f26bb238860ca54ff931a16796f0a0bd602c064fa7ea8a96e9e2b8d4951015d49f05765584bcc2d4adac25fe03ecdcfce66d0f4dce018f934a3bc79ead55cd69375c9c8f6a3091fa477adcf3f2252c46879d40ec3ef355aa937ed29230051f848dff8615a69ba160cc00c641913eed69837df8b26eabf9ea162e5f2f44f6b9706fcb782496ea2320d3109e8c535994d30f4aab58ec118a937e407ef6e144ac7952e4ac1c2c69f86bcfec921d015d978f61feead0103bed18937fd867d9a5786c0b44e585df176ba2d45472e7461d11a2861f165d7a4afb573705f1f6ffddbe054429752e1a6fe882a0731ff7fbb0fa1e37316146b33e408469ad1e4f435f1cc09f48257b416899e1b08db4a4d463b068b93825672d83e4c7dd9eee52d4c71a51f7ad259fbf53414dab71459e3ad77dc268f6e18d3390ae38a8ed1616e2d533124ec6e002b25fd9eddffadeebf257b2efde8051cdc44151cdfb476b16c0b199e6e0a5f84b15dd7cdff899a67d116208ae8d245a6070de7d9f89d34de80f92d678a144c6d18eb57e5e50b31b08ea6bea3c1152ee92db9d4c6af25dabc4de5d6fb89cc4174e601b9942ceb7c6a1472f3bc3c94556affcc9344120a68fd9bf7b25d39a26979589a15820e3f7795eaacbe2c39d979062f288f2b92ef9cdd559af17905f74d5728bf06fff03b7ff1a6cd97caf83c53d41602fb9e4f3435b808c84c3b735823583e8ccaeb065827ff8784b53226bbc7fc8974ad326bf5e18a4138a158dd659622e3806504d7083fb932e8e6b2a7aed5ab1d51297cc381c236b4968e5ea52362c576458c55dbc55fd81962c423181b8fe7f56882f19814affacaef217616efa12e6f59025906466b2b17e3b8d373697b3f389df2d43a32b3bafd141c4dc8fbce5b09284d31e58b88a1841c86ea7c52198add258c37d8793e5cf519dfa0a93f745dda05641b5b63cc19159f6a666b3c9b34f6b0d3bae39f051f6f81108ace4b94182e8f631739b7e5f331", 0x881}], 0x1, 0x0, 0x600}}], 0x1, 0x0) 1.578120158s ago: executing program 2 (id=3822): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x81000000, 0x0, {0x2}}, 0x18}}, 0x0) 1.28538494s ago: executing program 1 (id=3823): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0xfff0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b0000001a000100003212086114b7fb80"], 0x24}}, 0x0) 1.257730329s ago: executing program 0 (id=3810): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@printk={@ld}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x2b00, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 730.532313ms ago: executing program 1 (id=3825): socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000020603000000000000000000000000001400078008001140000000000500150000000000050001"], 0x5c}}, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002200b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) unshare(0x22020400) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x5f9, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x21}, 0x70) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r8, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003400000008000300", @ANYRES32=r9, @ANYBLOB="14005500f2a061aa1180009b0e07efaadd67505c0a0006000802110000010000050020013f00000008001f0116000000"], 0x4c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r10], 0xf) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x5}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={r11, 0x50, &(0x7f0000000440)=[@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f00000004c0)=0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r10, 0x1, 0x0, 0x5, 0x101, 0x2, 0x7ff, 0x2, {r11, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x25}}}, 0x0, 0xfffff000, 0x8, 0x6, 0x1}}, &(0x7f00000002c0)=0xb0) 730.16545ms ago: executing program 2 (id=3826): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="822a0a65bd8c002b2004000e0580a7b6070d63e286a5cefe", 0x18) 576.678439ms ago: executing program 3 (id=3827): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006aba590e98f6fb3c71000000000000000000000008000e0004000000"], 0x20}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}], {0x14, 0x10}}, 0xb8}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@empty, 0x0}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x4, 0x4000, 0x8, 0x4, 0x1, 0x8001, 0x2, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x71, &(0x7f0000000100)={r8, 0x963}, &(0x7f0000000140)=0x8) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000840)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001007274000014000280080001400000000008000240000000040900010073797a30000000000900020073797a32"], 0x78}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000002ee00040000000000000000000000000900010073797a3100000000"], 0x20}}, 0x0) 576.180931ms ago: executing program 4 (id=3815): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r1, 0x541b, &(0x7f0000000000)) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x2, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}}, 0x0) 343.449896ms ago: executing program 3 (id=3829): syz_emit_ethernet(0x56, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xd, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010a00, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@broadcast}]}, @ssrr={0x89, 0x7, 0xce, [@multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 163.077317ms ago: executing program 3 (id=3830): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaacce3906777428100000086dd60f32bb2770cbb0500052f00fc010000000000000000000000000000fe800000"], 0x0) (async) splice(r0, 0x0, r2, 0x0, 0x10003, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000180018010000696c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f0ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000040)='syzkaller\x00', 0x1}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r3, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) (async) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) syz_emit_ethernet(0x8a, &(0x7f0000000040)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x4, "03c0"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @timestamp={0x8, 0xa}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "7232407c80067615774fdbb46eb86cc8"}, @generic={0x0, 0x9, "111fad2ea74348"}]}}}}}}}}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000000c0), 0x8) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f00000001c0)) (async) write$tun(r1, &(0x7f00000005c0)={@void, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x3, @random="956d1668d1a2", @dev={0xfe, 0x80, '\x00', 0x43}, @random="9b35089a2c2e", @local}}, 0x34) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00'}, 0x10) ppoll(&(0x7f0000000240)=[{r5, 0x4020}], 0x1, &(0x7f00000002c0), &(0x7f0000000340)={[0xc]}, 0x8) (async) r6 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r6, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r7, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @private=0x80000000}}) (async) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x0, 0xffffa512, 0x0, 0xffffffffffffffff, 0x1f, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0xb}, 0x48) (async) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) close(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x3c}}, 0x0) 0s ago: executing program 3 (id=3831): mmap(&(0x7f00006fb000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xfffffffb}, &(0x7f0000000040)=0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000070000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0x6, 0x6}, &(0x7f00000000c0)=0xc) r6 = socket$inet_sctp(0x2, 0x4, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="ffff05ff", @ANYRES16, @ANYBLOB="200028bd7000fcdbdf2507000000080001002700000008000300", @ANYRES32=r8, @ANYBLOB="08000500000000000800050007000000"], 0x34}, 0x1, 0x0, 0x0, 0x1844}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r6) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001140)={0x40, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{}, {}, @device_a, @device_b}, 0x0, 0x0, @default, @val, @void}}]}, 0x40}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x9140100}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x280, r9, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0xca000000, 0x4}}}}, [@NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xb, 0xf}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x0, 0xf}}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x6}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x86, 0xfc, "24082ab9891bd82f01adb789dae809253f664287a9d98a82712deac29bec48087eb8368060cdfedecb084c75598741ee4c8b6963336514d9fcbecf31e76b31149b0f1c99dbfb78ee348c57b9d0661c9ae1ad4c8b2e3c7538f80c87b6087685ea91bec777713cce94805d4000baa96fb03c3f7bc8ef2dcd1ae4b641da55c90b09639e"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "136d7113dec15c4b34f75c878ebb2d9d"}, @NL80211_ATTR_FILS_ERP_RRK={0x68, 0xfc, "5477813ffd19c8ae8f0a08722b5fdfdfe59e1385f21d8ae839e8c63483feb589285050064100000000789134582c4f1281ec6209516aa7d028748682980a4b7a2d5ad77268b1c72ce5f92c0aa580f3bc50282ff4bfffcbb1e2ded81575be3502c7e65ad0"}, @NL80211_ATTR_FILS_ERP_REALM={0x71, 0xfa, "9dab66edd5a07f01bbe511248052b0ace3222933b3388942dcfd606cc9878cffec0652ba9ede06d8e968f0d43b2196d72e32670e307d471d6d0429d53931f3d5feaaa8f6619178ba39a3f3a7cb24ae4dd73b10ab8cbe5b3232f16459544c44ee25dd23eefa158fa559cf313393"}, @NL80211_ATTR_FILS_ERP_REALM={0x99, 0xfa, "e3e13445e41f2c1dfe39fb0da6fe9dd2022326881daba60b82adc45db2a24cf05c6ca0dc0f5bf30926a8156cee791dbd71318a235f5c435b6563f7dcc755e71088a1f84ea6db71a70076d4160c7eea84c7c45fdf1200add352a723475e72c934650d5b603004c7a2ac329c4e4108be80135b8e7865010710da0026368c152f09ef5a091d1ff78fee41b3e40bd92607de28a02df298"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "fce42e9d4ee756ad7ad8"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, 'a'}]]}, 0x280}, 0x1, 0x0, 0x0, 0x10}, 0x0) r13 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r13, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x2}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08003300001c000000000001907800000000e00000010800907800000000"], 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r15, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}}, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000100)={r2, 0x9, 0x4, 0xf}, &(0x7f0000000140)=0xffffffffffffff18) kernel console output (not intermixed with test programs): ice team0 [ 435.592941][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.600208][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.640735][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.648018][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.066082][ T5109] Bluetooth: hci0: command tx timeout [ 436.122099][T16248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3260'. [ 436.131476][T16248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3260'. [ 436.142435][T16248] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3260'. [ 436.520366][T16121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.524689][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'. [ 436.564193][T16257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3262'. [ 436.718076][T16121] veth0_vlan: entered promiscuous mode [ 436.759753][T16121] veth1_vlan: entered promiscuous mode [ 436.774925][T16264] Bluetooth: MGMT ver 1.22 [ 436.835287][T16264] bridge: RTM_NEWNEIGH with invalid ether address [ 436.870963][T16121] veth0_macvtap: entered promiscuous mode [ 436.893590][T16121] veth1_macvtap: entered promiscuous mode [ 436.941815][T16271] sctp: [Deprecated]: syz.4.3266 (pid 16271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 436.941815][T16271] Use struct sctp_sack_info instead [ 436.968165][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.982550][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.002347][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.013199][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.025163][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.053929][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.092706][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.126815][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.165187][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.206318][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.239264][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.273034][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.289943][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 437.313102][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.347071][T16121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.396161][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.415538][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.438892][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.467992][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.498145][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.519648][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.544226][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.565667][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.583976][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.610693][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.621027][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.643710][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.654449][T16121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.666300][T16121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.679599][T16121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.750655][T16121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.815276][T16121] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.838438][T16121] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.854391][T16121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.058235][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.084760][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.155092][ T5109] Bluetooth: hci0: command tx timeout [ 438.183304][T10690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.206859][T10690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.971948][T16316] netlink: 'syz.4.3279': attribute type 5 has an invalid length. [ 439.103332][T16323] sctp: [Deprecated]: syz.1.3281 (pid 16323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.103332][T16323] Use struct sctp_sack_info instead [ 439.766458][T16354] netlink: 'syz.2.3293': attribute type 13 has an invalid length. [ 439.787215][T16354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.035639][T16358] __nla_validate_parse: 21 callbacks suppressed [ 440.035661][T16358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3297'. [ 440.070676][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3297'. [ 440.109596][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 440.142367][T16356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3295'. [ 440.173814][T16356] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3295'. [ 440.179168][ T1109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.227017][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 440.243326][ T1109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.259561][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 440.268490][ T1109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 59637 - 0 [ 440.279889][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 440.284209][ T1109] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 55678 - 0 [ 440.295216][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 440.307111][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 440.314770][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 440.476989][ T1109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.489577][ T1109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.510735][ T1109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59637 - 0 [ 440.524428][ T1109] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 55678 - 0 [ 440.696719][ T1109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.728076][ T1109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.739022][ T1109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59637 - 0 [ 440.761439][ T1109] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 55678 - 0 [ 440.837286][ T1109] batman_adv: batadv1: Removing interface: netdevsim0 [ 440.846240][ T1109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 440.858592][ T1109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.869300][ T1109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59637 - 0 [ 440.880047][ T1109] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 55678 - 0 [ 441.060808][T16362] chnl_net:caif_netlink_parms(): no params data found [ 441.097572][ T1109] bridge_slave_1: left allmulticast mode [ 441.103446][ T1109] bridge_slave_1: left promiscuous mode [ 441.110749][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.121390][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.671563][ T1109] team0: Port device bridge3 removed [ 441.878795][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.889409][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.907298][ T1109] bond0 (unregistering): Released all slaves [ 441.922292][ T1109] bond1 (unregistering): Released all slaves [ 441.940812][ T1109] bond2 (unregistering): Released all slaves [ 442.343926][ T5105] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.357723][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.364408][T16393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3306'. [ 442.375314][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.384549][ T5105] Bluetooth: hci0: command tx timeout [ 442.392517][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.405755][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 442.414695][ T5105] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.424427][T16399] sctp: [Deprecated]: syz.3.3306 (pid 16399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 442.424427][T16399] Use struct sctp_sack_info instead [ 442.441061][T16398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3308'. [ 442.441096][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3308'. [ 442.441114][T16398] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3308'. [ 442.513536][T16362] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.537069][T16362] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.537544][T16400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3307'. [ 442.547897][T16362] bridge_slave_0: entered allmulticast mode [ 442.562180][T16362] bridge_slave_0: entered promiscuous mode [ 442.593288][T16362] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.625935][T16362] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.634212][ T5104] Bluetooth: hci4: command 0x0405 tx timeout [ 442.641613][T16362] bridge_slave_1: entered allmulticast mode [ 442.652026][T16362] bridge_slave_1: entered promiscuous mode [ 442.758886][T16362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.795842][T16362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.013324][T16362] team0: Port device team_slave_0 added [ 443.046448][T16362] team0: Port device team_slave_1 added [ 443.239699][T16362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.318999][T16362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.356807][T16362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.409135][T16362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.416913][T16362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.459247][T16362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.541442][ T1109] batadv0: left promiscuous mode [ 443.559302][ T1109] veth0: left promiscuous mode [ 443.594587][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.602252][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.613896][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.621542][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.651604][ T1109] veth1_macvtap: left promiscuous mode [ 443.659723][ T1109] veth1_vlan: left promiscuous mode [ 443.665949][ T1109] veth0_vlan: left promiscuous mode [ 444.406444][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 444.460506][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 444.479490][ T5104] Bluetooth: hci1: command tx timeout [ 444.488764][ T5109] Bluetooth: hci0: command tx timeout [ 445.070012][T16362] hsr_slave_0: entered promiscuous mode [ 445.110000][T16362] hsr_slave_1: entered promiscuous mode [ 445.125919][T16362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.133533][T16362] Cannot create hsr debugfs directory [ 445.167823][T16432] __nla_validate_parse: 3 callbacks suppressed [ 445.167845][T16432] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3321'. [ 445.342157][T16441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3324'. [ 445.364466][T16441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3324'. [ 445.627770][T16449] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 445.642181][T16449] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 445.702451][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 445.752702][T16451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3328'. [ 445.778225][T16451] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3328'. [ 446.054511][T16457] batadv0: entered promiscuous mode [ 446.140764][ T1109] IPVS: stop unused estimator thread 0... [ 446.153224][T16394] chnl_net:caif_netlink_parms(): no params data found [ 446.252477][ T5109] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 446.264300][ T5109] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 446.273327][ T5109] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 446.296331][ T5109] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 446.304429][ T5109] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 446.313658][ T5109] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 446.544086][ T5104] Bluetooth: hci0: command tx timeout [ 446.554038][ T5109] Bluetooth: hci1: command tx timeout [ 446.728861][T16394] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.747034][T16394] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.763461][T16394] bridge_slave_0: entered allmulticast mode [ 446.771553][T16394] bridge_slave_0: entered promiscuous mode [ 446.793589][T16394] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.807242][T16394] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.824306][T16394] bridge_slave_1: entered allmulticast mode [ 446.847548][T16394] bridge_slave_1: entered promiscuous mode [ 446.877330][T16483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3339'. [ 446.898008][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3339'. [ 446.918682][T16483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3339'. [ 447.019272][ T1109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.045005][ T1109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.230460][ T1109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.254735][ T1109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.287982][T16394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.308161][T16496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3345'. [ 447.333678][T16496] openvswitch: netlink: Multiple metadata blocks provided [ 447.379782][T16394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.456324][ T1109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.467871][ T1109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.547062][T16394] team0: Port device team_slave_0 added [ 447.563143][T16501] No such timeout policy "syz0" [ 447.563277][T16394] team0: Port device team_slave_1 added [ 447.604053][ T1109] bond0: (slave netdevsim0): Releasing backup interface [ 447.620351][ T1109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.632203][ T1109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.710567][T16503] netlink: 'syz.3.3348': attribute type 10 has an invalid length. [ 447.767473][T16503] batadv0: left allmulticast mode [ 447.772624][T16503] batadv0: left promiscuous mode [ 447.798853][T16503] bridge0: port 3(batadv0) entered disabled state [ 447.822355][T16503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.849182][T16503] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 447.915552][T16394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.922635][T16394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.949266][T16394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.960986][T16504] netem: change failed [ 448.079098][T16394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.101628][T16394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.133862][T16394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.238974][T16362] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.279216][T16394] hsr_slave_0: entered promiscuous mode [ 448.290466][T16394] hsr_slave_1: entered promiscuous mode [ 448.299072][T16394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.320009][T16394] Cannot create hsr debugfs directory [ 448.326055][T16362] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 448.349389][T16362] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 448.384437][ T5109] Bluetooth: hci2: command tx timeout [ 448.426066][T16362] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 448.624172][ T5109] Bluetooth: hci1: command tx timeout [ 448.634210][ T5109] Bluetooth: hci0: command tx timeout [ 448.733610][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.780331][T16464] chnl_net:caif_netlink_parms(): no params data found [ 448.859229][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.891394][T16538] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.976010][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.180138][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.358222][T16464] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.371630][T16464] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.387736][T16464] bridge_slave_0: entered allmulticast mode [ 449.405134][T16464] bridge_slave_0: entered promiscuous mode [ 449.515426][T16464] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.522716][T16464] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.534959][T16464] bridge_slave_1: entered allmulticast mode [ 449.543403][T16464] bridge_slave_1: entered promiscuous mode [ 449.651404][T16464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.681797][T16464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.711300][T16362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.833657][ T1109] bridge_slave_0: left allmulticast mode [ 449.839747][ T1109] bridge_slave_0: left promiscuous mode [ 449.847226][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.888714][ T1109] veth1_to_bond: left allmulticast mode [ 449.904893][ T1109] veth1_to_bond: left promiscuous mode [ 449.912233][ T1109] bridge4: port 2(veth1_to_bond) entered disabled state [ 449.928736][ T1109] bridge_slave_1: left allmulticast mode [ 449.943950][ T1109] bridge_slave_1: left promiscuous mode [ 449.953194][ T1109] bridge4: port 1(bridge_slave_1) entered disabled state [ 449.985710][ T1109] bridge_slave_1: left allmulticast mode [ 449.993446][ T1109] bridge_slave_1: left promiscuous mode [ 450.000700][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.011256][ T1109] bridge_slave_0: left allmulticast mode [ 450.033930][ T1109] bridge_slave_0: left promiscuous mode [ 450.039759][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.474202][ T5109] Bluetooth: hci2: command tx timeout [ 450.701636][ T1109] team0: Port device geneve1 removed [ 450.707795][ T5109] Bluetooth: hci1: command tx timeout [ 451.379120][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.392522][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.404431][ T1109] bond0 (unregistering): Released all slaves [ 451.542637][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.557105][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.572252][ T1109] bond0 (unregistering): Released all slaves [ 451.587941][T16572] __nla_validate_parse: 14 callbacks suppressed [ 451.587966][T16572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 451.619373][T16464] team0: Port device team_slave_0 added [ 451.779448][T16464] team0: Port device team_slave_1 added [ 451.881340][ T1109] tipc: Left network mode [ 451.902403][T16587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3371'. [ 451.930845][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3371'. [ 451.937120][T16464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.973371][T16464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.975006][T16587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3371'. [ 452.010028][T16464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.043370][T16590] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 452.049974][T16590] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 452.058205][T16464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.070831][T16464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.110950][T16464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.165558][T16362] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.379518][T16464] hsr_slave_0: entered promiscuous mode [ 452.396124][T16464] hsr_slave_1: entered promiscuous mode [ 452.414709][T16464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.423298][T16464] Cannot create hsr debugfs directory [ 452.517567][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.524851][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.537626][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.544868][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.552512][ T5109] Bluetooth: hci2: command tx timeout [ 452.919385][T16394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.044120][T16394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.140498][T16394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.181165][T16394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.445179][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3382'. [ 453.454509][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3382'. [ 453.463451][T16618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3382'. [ 453.759218][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3383'. [ 453.800413][ T1109] hsr_slave_0: left promiscuous mode [ 453.811065][T16627] sctp: [Deprecated]: syz.1.3383 (pid 16627) Use of struct sctp_assoc_value in delayed_ack socket option. [ 453.811065][T16627] Use struct sctp_sack_info instead [ 453.834320][ T1109] hsr_slave_1: left promiscuous mode [ 453.852427][ T1109] batman_adv: batadv0: Removing interface: team0 [ 453.874142][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.881771][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.907997][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.945654][ T1109] hsr_slave_0: left promiscuous mode [ 453.954209][ T1109] hsr_slave_1: left promiscuous mode [ 453.965081][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.972689][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.982111][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.991353][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.034083][ T1109] batadv0: left allmulticast mode [ 454.039982][ T1109] batadv0: left promiscuous mode [ 454.046905][ T1109] veth1_vlan: left promiscuous mode [ 454.052225][ T1109] veth0_vlan: left promiscuous mode [ 454.059260][ T1109] veth1_macvtap: left promiscuous mode [ 454.065106][ T1109] veth0_macvtap: left promiscuous mode [ 454.070807][ T1109] veth1_vlan: left promiscuous mode [ 454.076366][ T1109] veth0_vlan: left promiscuous mode [ 454.625110][ T5109] Bluetooth: hci2: command tx timeout [ 454.807486][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 454.844628][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 455.797894][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 455.851894][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 456.546278][T16637] netlink: 'syz.1.3388': attribute type 1 has an invalid length. [ 456.562628][T16637] netlink: 'syz.1.3388': attribute type 4 has an invalid length. [ 456.572797][T16637] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.3388'. [ 456.575343][T16640] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3389'. [ 456.755227][T16394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.769645][T16362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.860860][T16394] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.895515][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 456.918165][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.925473][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.938012][T16644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3391'. [ 456.961121][T16644] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3391'. [ 457.010127][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.017386][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.075839][T16648] netlink: 'syz.3.3392': attribute type 10 has an invalid length. [ 457.102076][T16464] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 457.155052][T16648] netem: change failed [ 457.175245][T16464] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 457.232748][T16464] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 457.269058][T16464] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 457.303352][T16394] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.479134][T16661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3395'. [ 457.606426][T16362] veth0_vlan: entered promiscuous mode [ 457.627175][T16666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3396'. [ 457.680932][T16669] sctp: [Deprecated]: syz.3.3396 (pid 16669) Use of struct sctp_assoc_value in delayed_ack socket option. [ 457.680932][T16669] Use struct sctp_sack_info instead [ 457.708895][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3397'. [ 457.718884][T16668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3397'. [ 457.750220][T16362] veth1_vlan: entered promiscuous mode [ 457.834790][T16464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.951020][T16464] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.977212][T16362] veth0_macvtap: entered promiscuous mode [ 458.019017][T16394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.032929][T16362] veth1_macvtap: entered promiscuous mode [ 458.059784][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.067055][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.084787][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.092030][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.185772][T16362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.196786][T16362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.207604][T16362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.218427][T16362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.229310][T16362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.240031][T16362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.251356][T16362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.262291][T16362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.272795][T16362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.284996][T16362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.297107][T16362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.365299][T16362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.376450][T16362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.387275][T16362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.402470][T16362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.412598][T16362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.423228][T16362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.433762][T16362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.444930][T16362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.456232][T16362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.468235][T16362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.481961][T16362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.496764][T16362] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.505796][T16362] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.516653][T16362] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.526383][T16362] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.656402][T16394] veth0_vlan: entered promiscuous mode [ 458.692844][T16681] syzkaller1: entered promiscuous mode [ 458.699970][T16681] syzkaller1: entered allmulticast mode [ 458.795727][T16394] veth1_vlan: entered promiscuous mode [ 458.864177][ T3903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.882964][ T3903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.964560][T16693] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3403'. [ 458.997637][T10623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.023582][T10623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.028384][T16394] veth0_macvtap: entered promiscuous mode [ 459.123373][T16464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.156946][T16394] veth1_macvtap: entered promiscuous mode [ 459.255190][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3406'. [ 459.277467][T16702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3406'. [ 459.284384][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.311261][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.321596][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.332780][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.345447][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.357102][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.359317][T16698] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.367262][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.367292][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.367315][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.367334][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.367355][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.367373][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.369767][T16394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.505771][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.528771][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.541252][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.558785][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.570463][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.584837][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.595895][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.606470][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.616403][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.627172][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.637852][T16394] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 459.661765][T16394] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.678455][T16394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.719345][T16394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.740087][T16394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.764207][T16394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.782596][T16717] xt_policy: too many policy elements [ 459.794542][T16394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.879763][T16464] veth0_vlan: entered promiscuous mode [ 459.967724][T16464] veth1_vlan: entered promiscuous mode [ 460.078931][T16727] syzkaller1: entered promiscuous mode [ 460.088547][T16727] syzkaller1: entered allmulticast mode [ 460.186394][T10690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.203992][T10690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.310897][T16464] veth0_macvtap: entered promiscuous mode [ 460.341872][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.342428][T16731] netlink: 'syz.1.3415': attribute type 1 has an invalid length. [ 460.356666][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.370616][T16464] veth1_macvtap: entered promiscuous mode [ 460.409596][T16731] netlink: 'syz.1.3415': attribute type 2 has an invalid length. [ 460.483073][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.500277][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.511652][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.523082][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.534125][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.547999][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.564645][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.578451][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.588676][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.600280][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.610510][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.633572][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.655243][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.683481][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.709115][T16464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.849955][T16741] FAULT_INJECTION: forcing a failure. [ 460.849955][T16741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.876715][T16741] CPU: 0 PID: 16741 Comm: syz.1.3418 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 460.886951][T16741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 460.897026][T16741] Call Trace: [ 460.900319][T16741] [ 460.903266][T16741] dump_stack_lvl+0x241/0x360 [ 460.908061][T16741] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.913270][T16741] ? __pfx__printk+0x10/0x10 [ 460.917888][T16741] ? snprintf+0xda/0x120 [ 460.922148][T16741] should_fail_ex+0x3b0/0x4e0 [ 460.926937][T16741] _copy_to_user+0x2f/0xb0 [ 460.931412][T16741] simple_read_from_buffer+0xca/0x150 [ 460.936818][T16741] proc_fail_nth_read+0x1e9/0x250 [ 460.941866][T16741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.947443][T16741] ? rw_verify_area+0x520/0x6b0 [ 460.952398][T16741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 460.957957][T16741] vfs_read+0x204/0xbc0 [ 460.962130][T16741] ? __pfx_lock_release+0x10/0x10 [ 460.967167][T16741] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 460.972734][T16741] ? __pfx_vfs_read+0x10/0x10 [ 460.977521][T16741] ? __fget_files+0x29/0x470 [ 460.982128][T16741] ? __fget_files+0x3f6/0x470 [ 460.986837][T16741] ksys_read+0x1a0/0x2c0 [ 460.991100][T16741] ? __pfx_ksys_read+0x10/0x10 [ 460.995884][T16741] ? do_syscall_64+0x100/0x230 [ 461.000662][T16741] ? do_syscall_64+0xb6/0x230 [ 461.005351][T16741] do_syscall_64+0xf3/0x230 [ 461.009863][T16741] ? clear_bhb_loop+0x35/0x90 [ 461.014554][T16741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.020458][T16741] RIP: 0033:0x7f135cf746bc [ 461.024896][T16741] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 461.044542][T16741] RSP: 002b:00007f135dd59040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 461.053060][T16741] RAX: ffffffffffffffda RBX: 00007f135d103f60 RCX: 00007f135cf746bc [ 461.061042][T16741] RDX: 000000000000000f RSI: 00007f135dd590b0 RDI: 0000000000000007 [ 461.069023][T16741] RBP: 00007f135dd590a0 R08: 0000000000000000 R09: 0000000000000000 [ 461.077009][T16741] R10: 0000000000000046 R11: 0000000000000246 R12: 0000000000000001 [ 461.085001][T16741] R13: 000000000000000b R14: 00007f135d103f60 R15: 00007ffe1457d838 [ 461.093446][T16741] [ 461.246898][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.262397][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.287895][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.308976][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.353978][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.380859][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.404166][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.424006][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.441926][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.462793][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.483226][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.506836][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.533885][T16464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.560690][T16464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.579340][T16464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.609255][T16748] syzkaller1: entered promiscuous mode [ 461.617176][T16748] syzkaller1: entered allmulticast mode [ 461.749464][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.803123][T16464] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.825179][T16464] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.843984][T16464] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.863014][T16464] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.048984][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.198250][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.350007][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.363959][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.425757][T10690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.435060][T10690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.537694][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.710911][ T12] bridge_slave_1: left allmulticast mode [ 462.717528][ T12] bridge_slave_1: left promiscuous mode [ 462.733661][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.756578][ T12] bridge_slave_0: left allmulticast mode [ 462.762285][ T12] bridge_slave_0: left promiscuous mode [ 462.768560][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.583419][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.676659][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.721029][ T12] bond0 (unregistering): Released all slaves [ 463.729021][T16773] __nla_validate_parse: 5 callbacks suppressed [ 463.729043][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3425'. [ 463.854332][T16779] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3428'. [ 463.894367][T16779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 464.084433][T16785] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 464.145043][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 464.157987][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 464.174303][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 464.194241][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 464.206359][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 464.214098][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.274760][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3432'. [ 464.325353][T16789] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3432'. [ 464.334888][T16795] FAULT_INJECTION: forcing a failure. [ 464.334888][T16795] name failslab, interval 1, probability 0, space 0, times 0 [ 464.363960][T16789] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3432'. [ 464.384147][T16795] CPU: 1 PID: 16795 Comm: syz.3.3434 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 464.394388][T16795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 464.404489][T16795] Call Trace: [ 464.407808][T16795] [ 464.410777][T16795] dump_stack_lvl+0x241/0x360 [ 464.415510][T16795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.420803][T16795] ? __pfx__printk+0x10/0x10 [ 464.425457][T16795] ? __pfx___might_resched+0x10/0x10 [ 464.430829][T16795] ? mark_lock+0x9a/0x350 [ 464.435223][T16795] should_fail_ex+0x3b0/0x4e0 [ 464.439962][T16795] ? __kernfs_new_node+0xd8/0x870 [ 464.445030][T16795] should_failslab+0x9/0x20 [ 464.449566][T16795] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 464.454970][T16795] __kernfs_new_node+0xd8/0x870 [ 464.459844][T16795] ? __pfx___kernfs_new_node+0x10/0x10 [ 464.465328][T16795] ? __pfx_lock_acquire+0x10/0x10 [ 464.470374][T16795] ? __pfx___might_resched+0x10/0x10 [ 464.475676][T16795] ? sysfs_create_dir_ns+0x189/0x3a0 [ 464.480981][T16795] ? sysfs_create_dir_ns+0x1cf/0x3a0 [ 464.486290][T16795] kernfs_new_node+0x137/0x240 [ 464.491070][T16795] __kernfs_create_file+0x49/0x2e0 [ 464.496203][T16795] sysfs_add_file_mode_ns+0x24a/0x310 [ 464.501605][T16795] sysfs_create_file_ns+0x197/0x2a0 [ 464.506827][T16795] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 464.512573][T16795] ? kobject_init+0x83/0x1f0 [ 464.517175][T16795] ? __dev_fwnode+0x50/0x80 [ 464.521697][T16795] ? device_create_file+0xf2/0x1c0 [ 464.526834][T16795] device_add+0x522/0xbf0 [ 464.531224][T16795] ? device_initialize+0x266/0x460 [ 464.536358][T16795] wakeup_source_sysfs_add+0x1aa/0x270 [ 464.541839][T16795] wakeup_source_register+0x171/0x250 [ 464.547234][T16795] ep_insert+0xd8c/0x1ac0 [ 464.551599][T16795] ? __pfx_ep_insert+0x10/0x10 [ 464.556483][T16795] ? bpf_lsm_capable+0x9/0x10 [ 464.561188][T16795] do_epoll_ctl+0x8d2/0xf70 [ 464.565727][T16795] ? do_epoll_ctl+0x801/0xf70 [ 464.570431][T16795] __x64_sys_epoll_ctl+0x161/0x1a0 [ 464.575586][T16795] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 464.581237][T16795] ? do_syscall_64+0x100/0x230 [ 464.586015][T16795] ? do_syscall_64+0xb6/0x230 [ 464.590706][T16795] do_syscall_64+0xf3/0x230 [ 464.595224][T16795] ? clear_bhb_loop+0x35/0x90 [ 464.599918][T16795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.605824][T16795] RIP: 0033:0x7f05e3775bd9 [ 464.610247][T16795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.629861][T16795] RSP: 002b:00007f05e4573048 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 464.638286][T16795] RAX: ffffffffffffffda RBX: 00007f05e3903f60 RCX: 00007f05e3775bd9 [ 464.646268][T16795] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 464.654254][T16795] RBP: 00007f05e45730a0 R08: 0000000000000000 R09: 0000000000000000 [ 464.662236][T16795] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000002 [ 464.670218][T16795] R13: 000000000000000b R14: 00007f05e3903f60 R15: 00007ffc4e444308 [ 464.678219][T16795] [ 465.284179][T16804] syzkaller1: entered promiscuous mode [ 465.303890][T16804] syzkaller1: entered allmulticast mode [ 465.333384][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 465.522715][ T12] hsr_slave_0: left promiscuous mode [ 465.544741][ T12] hsr_slave_1: left promiscuous mode [ 465.554264][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.571504][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.603722][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.605966][T16826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 465.621417][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3446'. [ 465.645832][T16826] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3446'. [ 465.667961][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.752819][ T12] veth1_macvtap: left promiscuous mode [ 465.764294][ T12] veth0_macvtap: left promiscuous mode [ 465.774889][ T12] veth1_vlan: left promiscuous mode [ 465.783677][ T12] veth0_vlan: left promiscuous mode [ 466.308651][ T5109] Bluetooth: hci1: command tx timeout [ 466.562521][ T12] team0 (unregistering): Port device team_slave_1 removed [ 466.618943][ T12] team0 (unregistering): Port device team_slave_0 removed [ 467.410538][T16848] FAULT_INJECTION: forcing a failure. [ 467.410538][T16848] name failslab, interval 1, probability 0, space 0, times 0 [ 467.446865][T16848] CPU: 1 PID: 16848 Comm: syz.1.3450 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 467.457100][T16848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 467.460860][T16851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 467.467196][T16848] Call Trace: [ 467.467213][T16848] [ 467.467225][T16848] dump_stack_lvl+0x241/0x360 [ 467.467261][T16848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.498517][T16848] ? __pfx__printk+0x10/0x10 [ 467.503177][T16848] ? netlink_insert+0x10b7/0x14b0 [ 467.508253][T16848] should_fail_ex+0x3b0/0x4e0 [ 467.512990][T16848] ? __alloc_skb+0x1c3/0x440 [ 467.517628][T16848] should_failslab+0x9/0x20 [ 467.522180][T16848] kmem_cache_alloc_node_noprof+0x71/0x320 [ 467.528050][T16848] __alloc_skb+0x1c3/0x440 [ 467.532535][T16848] ? __pfx___alloc_skb+0x10/0x10 [ 467.537526][T16848] ? netlink_autobind+0xd6/0x2f0 [ 467.542507][T16848] ? netlink_autobind+0x2b0/0x2f0 [ 467.547575][T16848] netlink_sendmsg+0x638/0xcb0 [ 467.552373][T16848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.557674][T16848] ? __import_iovec+0x536/0x820 [ 467.562532][T16848] ? aa_sock_msg_perm+0x91/0x160 [ 467.567506][T16848] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 467.572796][T16848] ? security_socket_sendmsg+0x87/0xb0 [ 467.578270][T16848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.583567][T16848] __sock_sendmsg+0x221/0x270 [ 467.588260][T16848] ____sys_sendmsg+0x525/0x7d0 [ 467.593048][T16848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 467.598381][T16848] __sys_sendmsg+0x2b0/0x3a0 [ 467.602992][T16848] ? __pfx___sys_sendmsg+0x10/0x10 [ 467.608115][T16848] ? vfs_write+0x7c4/0xc90 [ 467.612577][T16848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 467.618918][T16848] ? do_syscall_64+0x100/0x230 [ 467.623697][T16848] ? do_syscall_64+0xb6/0x230 [ 467.628390][T16848] do_syscall_64+0xf3/0x230 [ 467.632932][T16848] ? clear_bhb_loop+0x35/0x90 [ 467.637661][T16848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.643568][T16848] RIP: 0033:0x7f135cf75bd9 [ 467.648000][T16848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.667614][T16848] RSP: 002b:00007f135dd59048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.676037][T16848] RAX: ffffffffffffffda RBX: 00007f135d103f60 RCX: 00007f135cf75bd9 [ 467.684015][T16848] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 467.692016][T16848] RBP: 00007f135dd590a0 R08: 0000000000000000 R09: 0000000000000000 [ 467.699998][T16848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.708020][T16848] R13: 000000000000000b R14: 00007f135d103f60 R15: 00007ffe1457d838 [ 467.716048][T16848] [ 467.880932][T16787] chnl_net:caif_netlink_parms(): no params data found [ 468.249474][T16787] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.278810][T16787] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.313288][T16787] bridge_slave_0: entered allmulticast mode [ 468.353533][T16787] bridge_slave_0: entered promiscuous mode [ 468.384626][ T5109] Bluetooth: hci1: command tx timeout [ 468.454858][T16787] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.496152][T16787] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.503466][T16787] bridge_slave_1: entered allmulticast mode [ 468.534596][T16787] bridge_slave_1: entered promiscuous mode [ 468.643608][T16787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.815026][T16787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.980505][T16787] team0: Port device team_slave_0 added [ 469.026691][T16787] team0: Port device team_slave_1 added [ 469.183125][T16787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.200831][T16787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.261490][T16787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.335049][T16787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.346579][T16787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.385666][T16787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.398695][T16920] __nla_validate_parse: 3 callbacks suppressed [ 469.398716][T16920] netlink: 208 bytes leftover after parsing attributes in process `syz.2.3472'. [ 469.429947][T16916] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3472'. [ 469.486409][T16920] netlink: 'syz.2.3472': attribute type 1 has an invalid length. [ 469.636867][T16930] FAULT_INJECTION: forcing a failure. [ 469.636867][T16930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.681255][T16787] hsr_slave_0: entered promiscuous mode [ 469.687865][T16930] CPU: 0 PID: 16930 Comm: syz.4.3477 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 469.698082][T16930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 469.708186][T16930] Call Trace: [ 469.711484][T16930] [ 469.714431][T16930] dump_stack_lvl+0x241/0x360 [ 469.719130][T16930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 469.724349][T16930] ? __pfx__printk+0x10/0x10 [ 469.728972][T16930] ? __pfx_lock_release+0x10/0x10 [ 469.734184][T16930] ? vfs_write+0x7c4/0xc90 [ 469.738615][T16930] should_fail_ex+0x3b0/0x4e0 [ 469.743315][T16930] _copy_from_user+0x2f/0xe0 [ 469.747924][T16930] __sys_bpf+0x1a4/0x810 [ 469.752187][T16930] ? __pfx___sys_bpf+0x10/0x10 [ 469.756978][T16930] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 469.762985][T16930] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 469.769339][T16930] ? do_syscall_64+0x100/0x230 [ 469.774123][T16930] __x64_sys_bpf+0x7c/0x90 [ 469.778556][T16930] do_syscall_64+0xf3/0x230 [ 469.783068][T16930] ? clear_bhb_loop+0x35/0x90 [ 469.787768][T16930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.793678][T16930] RIP: 0033:0x7f86e2975bd9 [ 469.798104][T16930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.817730][T16930] RSP: 002b:00007f86e3761048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 469.826158][T16930] RAX: ffffffffffffffda RBX: 00007f86e2b03f60 RCX: 00007f86e2975bd9 [ 469.834139][T16930] RDX: 0000000000000020 RSI: 0000000020000dc0 RDI: 0000000000000012 [ 469.842126][T16930] RBP: 00007f86e37610a0 R08: 0000000000000000 R09: 0000000000000000 [ 469.850188][T16930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.858189][T16930] R13: 000000000000000b R14: 00007f86e2b03f60 R15: 00007ffc81b04f78 [ 469.866301][T16930] [ 469.888663][T16935] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 470.046583][T16787] hsr_slave_1: entered promiscuous mode [ 470.125825][T16946] netlink: 'syz.4.3481': attribute type 75 has an invalid length. [ 470.464563][ T5109] Bluetooth: hci1: command tx timeout [ 470.848732][T16971] netlink: 'syz.3.3488': attribute type 10 has an invalid length. [ 471.450944][T16983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3491'. [ 472.110896][T16787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 472.135335][T16787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 472.229651][T16787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 472.243234][T16787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 472.546298][ T5109] Bluetooth: hci1: command tx timeout [ 472.580873][T16787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 472.610600][T16787] 8021q: adding VLAN 0 to HW filter on device team0 [ 472.653032][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.660267][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.700740][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.708168][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.997025][T17003] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3497'. [ 473.336564][T17018] FAULT_INJECTION: forcing a failure. [ 473.336564][T17018] name failslab, interval 1, probability 0, space 0, times 0 [ 473.367629][T16787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 473.385306][T17018] CPU: 0 PID: 17018 Comm: syz.2.3501 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 473.395536][T17018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 473.405638][T17018] Call Trace: [ 473.408954][T17018] [ 473.411910][T17018] dump_stack_lvl+0x241/0x360 [ 473.416636][T17018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.421884][T17018] ? __pfx__printk+0x10/0x10 [ 473.426539][T17018] ? __pfx___might_resched+0x10/0x10 [ 473.431885][T17018] should_fail_ex+0x3b0/0x4e0 [ 473.436625][T17018] should_failslab+0x9/0x20 [ 473.441185][T17018] kmalloc_node_trace_noprof+0x74/0x300 [ 473.446789][T17018] ? page_pool_create_percpu+0x77/0x7c0 [ 473.452398][T17018] page_pool_create_percpu+0x77/0x7c0 [ 473.457838][T17018] bpf_test_run_xdp_live+0x2cd/0x2110 [ 473.463274][T17018] ? arch_stack_walk+0x16d/0x1b0 [ 473.468295][T17018] ? __lock_acquire+0x1346/0x1fd0 [ 473.473384][T17018] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 473.479242][T17018] ? mark_lock+0x9a/0x350 [ 473.483683][T17018] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 473.489640][T17018] ? __might_fault+0xaa/0x120 [ 473.494379][T17018] ? __might_fault+0xc6/0x120 [ 473.499117][T17018] ? _copy_from_user+0xa6/0xe0 [ 473.503925][T17018] ? bpf_test_init+0x15a/0x180 [ 473.508734][T17018] ? xdp_convert_md_to_buff+0x5b/0x330 [ 473.514249][T17018] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 473.519693][T17018] ? __pfx_lock_release+0x10/0x10 [ 473.524779][T17018] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 473.530640][T17018] ? __fget_files+0x29/0x470 [ 473.535304][T17018] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 473.541163][T17018] bpf_prog_test_run+0x33a/0x3b0 [ 473.546151][T17018] __sys_bpf+0x48d/0x810 [ 473.550457][T17018] ? __pfx___sys_bpf+0x10/0x10 [ 473.555293][T17018] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 473.561315][T17018] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 473.567694][T17018] ? do_syscall_64+0x100/0x230 [ 473.572515][T17018] __x64_sys_bpf+0x7c/0x90 [ 473.576994][T17018] do_syscall_64+0xf3/0x230 [ 473.581554][T17018] ? clear_bhb_loop+0x35/0x90 [ 473.586281][T17018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.587127][T16787] veth0_vlan: entered promiscuous mode [ 473.592197][T17018] RIP: 0033:0x7f8e9f975bd9 [ 473.592223][T17018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.592243][T17018] RSP: 002b:00007f8ea06c6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 473.592270][T17018] RAX: ffffffffffffffda RBX: 00007f8e9fb03f60 RCX: 00007f8e9f975bd9 [ 473.638213][T17018] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 473.646228][T17018] RBP: 00007f8ea06c60a0 R08: 0000000000000000 R09: 0000000000000000 [ 473.654245][T17018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.659836][T16787] veth1_vlan: entered promiscuous mode [ 473.662406][T17018] R13: 000000000000000b R14: 00007f8e9fb03f60 R15: 00007ffec07c2798 [ 473.662449][T17018] [ 473.746017][T17026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3503'. [ 473.817701][T17026] nbd: nbd0 already in use [ 473.908345][T16787] veth0_macvtap: entered promiscuous mode [ 473.938069][T16787] veth1_macvtap: entered promiscuous mode [ 474.015552][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.053947][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.093819][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.124287][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.146400][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.177948][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.189175][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.204463][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.214740][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.226253][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.245723][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.261568][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.271811][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.284978][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.302805][T16787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.386635][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.416941][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.427110][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.443786][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.453669][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.455921][T17053] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 474.465721][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.486996][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.501148][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.511339][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.522566][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.532848][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.543609][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.555577][T17060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.566157][T16787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.576890][T16787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.590227][T16787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.604888][T17060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.617049][T17052] syzkaller1: entered promiscuous mode [ 474.623527][T17052] syzkaller1: entered allmulticast mode [ 474.647928][T17060] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3513'. [ 474.717917][T16787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.727306][T16787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.736106][T16787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.745833][T16787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.939207][T10690] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.960789][T10690] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.974918][T17066] FAULT_INJECTION: forcing a failure. [ 474.974918][T17066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.994173][T17066] CPU: 1 PID: 17066 Comm: syz.3.3516 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 475.004404][T17066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 475.014523][T17066] Call Trace: [ 475.017938][T17066] [ 475.020908][T17066] dump_stack_lvl+0x241/0x360 [ 475.025642][T17066] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.030897][T17066] ? __pfx__printk+0x10/0x10 [ 475.035551][T17066] ? snprintf+0xda/0x120 [ 475.039841][T17066] should_fail_ex+0x3b0/0x4e0 [ 475.044581][T17066] _copy_to_user+0x2f/0xb0 [ 475.049048][T17066] simple_read_from_buffer+0xca/0x150 [ 475.054478][T17066] proc_fail_nth_read+0x1e9/0x250 [ 475.059555][T17066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 475.065199][T17066] ? rw_verify_area+0x520/0x6b0 [ 475.070102][T17066] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 475.075789][T17066] vfs_read+0x204/0xbc0 [ 475.079998][T17066] ? __pfx_lock_release+0x10/0x10 [ 475.085084][T17066] ? __pfx_vfs_read+0x10/0x10 [ 475.089820][T17066] ? __fget_files+0x29/0x470 [ 475.094470][T17066] ? __fget_files+0x3f6/0x470 [ 475.099217][T17066] ksys_read+0x1a0/0x2c0 [ 475.103519][T17066] ? __pfx_ksys_read+0x10/0x10 [ 475.108338][T17066] ? do_syscall_64+0x100/0x230 [ 475.113177][T17066] ? do_syscall_64+0xb6/0x230 [ 475.117908][T17066] do_syscall_64+0xf3/0x230 [ 475.120565][T17073] netlink: 23 bytes leftover after parsing attributes in process `syz.4.3515'. [ 475.122441][T17066] ? clear_bhb_loop+0x35/0x90 [ 475.122482][T17066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.142058][T17066] RIP: 0033:0x7f05e37746bc [ 475.146527][T17066] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 475.166179][T17066] RSP: 002b:00007f05e4573040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 475.174651][T17066] RAX: ffffffffffffffda RBX: 00007f05e3903f60 RCX: 00007f05e37746bc [ 475.175293][T10690] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.182639][T17066] RDX: 000000000000000f RSI: 00007f05e45730b0 RDI: 0000000000000004 [ 475.182661][T17066] RBP: 00007f05e45730a0 R08: 0000000000000000 R09: 0000000000000000 [ 475.182678][T17066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.182694][T17066] R13: 000000000000000b R14: 00007f05e3903f60 R15: 00007ffc4e444308 [ 475.200530][T10690] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.206452][T17066] [ 475.389140][T17080] FAULT_INJECTION: forcing a failure. [ 475.389140][T17080] name failslab, interval 1, probability 0, space 0, times 0 [ 475.401934][T17080] CPU: 1 PID: 17080 Comm: syz.3.3519 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 475.412139][T17080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 475.422240][T17080] Call Trace: [ 475.425556][T17080] [ 475.428523][T17080] dump_stack_lvl+0x241/0x360 [ 475.433248][T17080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 475.438483][T17080] ? __pfx__printk+0x10/0x10 [ 475.443219][T17080] ? sk_filter_trim_cap+0x1b3/0xa80 [ 475.448481][T17080] ? sk_filter_trim_cap+0x5bf/0xa80 [ 475.453735][T17080] should_fail_ex+0x3b0/0x4e0 [ 475.458464][T17080] ? sctp_chunkify+0x59/0x230 [ 475.463170][T17080] should_failslab+0x9/0x20 [ 475.467697][T17080] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 475.473113][T17080] sctp_chunkify+0x59/0x230 [ 475.477659][T17080] sctp_rcv+0x191b/0x2580 [ 475.482018][T17080] ? __pfx_sctp_rcv+0x10/0x10 [ 475.486742][T17080] ? raw_local_deliver+0xe16/0xf20 [ 475.491885][T17080] ? raw_local_deliver+0x327/0xf20 [ 475.497023][T17080] ? __pfx_sctp4_rcv+0x10/0x10 [ 475.501822][T17080] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 475.506691][T17080] ip_protocol_deliver_rcu+0x2e6/0x440 [ 475.512172][T17080] ? ip_local_deliver_finish+0x230/0x5f0 [ 475.517826][T17080] ip_local_deliver_finish+0x341/0x5f0 [ 475.523306][T17080] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 475.529302][T17080] NF_HOOK+0x3a4/0x450 [ 475.533392][T17080] ? NF_HOOK+0x9a/0x450 [ 475.537708][T17080] ? __pfx_NF_HOOK+0x10/0x10 [ 475.542333][T17080] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 475.548465][T17080] ? ip_rcv_finish+0x406/0x560 [ 475.553272][T17080] ? __pfx_ip_rcv_finish+0x10/0x10 [ 475.558405][T17080] NF_HOOK+0x3a4/0x450 [ 475.562508][T17080] ? NF_HOOK+0x9a/0x450 [ 475.566679][T17080] ? __pfx_NF_HOOK+0x10/0x10 [ 475.571285][T17080] ? ip_rcv_core+0x801/0xd10 [ 475.576019][T17080] ? __pfx_ip_rcv_finish+0x10/0x10 [ 475.581158][T17080] ? __pfx_ip_rcv+0x10/0x10 [ 475.585676][T17080] __netif_receive_skb+0x2bf/0x650 [ 475.590843][T17080] ? __pfx_lock_acquire+0x10/0x10 [ 475.595894][T17080] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 475.602169][T17080] ? __pfx___netif_receive_skb+0x10/0x10 [ 475.607857][T17080] ? read_tsc+0x9/0x20 [ 475.611963][T17080] ? timekeeping_get_ns+0x2c0/0x420 [ 475.617220][T17080] ? netif_receive_skb+0x131/0x890 [ 475.622370][T17080] ? netif_receive_skb+0x131/0x890 [ 475.627511][T17080] netif_receive_skb+0x1e8/0x890 [ 475.632482][T17080] ? tun_rx_batched+0x160/0x8f0 [ 475.637350][T17080] ? __pfx_netif_receive_skb+0x10/0x10 [ 475.642841][T17080] ? tun_rx_batched+0x160/0x8f0 [ 475.647711][T17080] tun_rx_batched+0x1b7/0x8f0 [ 475.652405][T17080] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 475.658748][T17080] ? __pfx_lock_acquire+0x10/0x10 [ 475.663784][T17080] ? __pfx_tun_rx_batched+0x10/0x10 [ 475.669018][T17080] tun_get_user+0x2f3b/0x4560 [ 475.673717][T17080] ? tun_get_user+0x2a35/0x4560 [ 475.678608][T17080] ? __pfx_tun_get_user+0x10/0x10 [ 475.683651][T17080] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 475.689134][T17080] ? tun_get+0x1e/0x2f0 [ 475.693325][T17080] ? tun_get+0x1e/0x2f0 [ 475.697495][T17080] ? tun_get+0x27d/0x2f0 [ 475.701773][T17080] tun_chr_write_iter+0x113/0x1f0 [ 475.706827][T17080] vfs_write+0xa72/0xc90 [ 475.711114][T17080] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 475.716696][T17080] ? __pfx_vfs_write+0x10/0x10 [ 475.721517][T17080] ksys_write+0x1a0/0x2c0 [ 475.725871][T17080] ? __pfx_ksys_write+0x10/0x10 [ 475.730742][T17080] ? do_syscall_64+0x100/0x230 [ 475.735956][T17080] ? do_syscall_64+0xb6/0x230 [ 475.740658][T17080] do_syscall_64+0xf3/0x230 [ 475.745176][T17080] ? clear_bhb_loop+0x35/0x90 [ 475.749877][T17080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.755809][T17080] RIP: 0033:0x7f05e3775bd9 [ 475.760239][T17080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.779876][T17080] RSP: 002b:00007f05e4573048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 475.788391][T17080] RAX: ffffffffffffffda RBX: 00007f05e3903f60 RCX: 00007f05e3775bd9 [ 475.796372][T17080] RDX: 000000000000004e RSI: 0000000020000280 RDI: 0000000000000003 [ 475.804353][T17080] RBP: 00007f05e45730a0 R08: 0000000000000000 R09: 0000000000000000 [ 475.812330][T17080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 475.820421][T17080] R13: 000000000000000b R14: 00007f05e3903f60 R15: 00007ffc4e444308 [ 475.828440][T17080] [ 476.191574][T17087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3521'. [ 476.301885][T17084] netlink: 'syz.1.3521': attribute type 1 has an invalid length. [ 476.345490][T17086] tipc: Started in network mode [ 476.374197][T17086] tipc: Node identity ac1414aa, cluster identity 4711 [ 476.382248][T17086] tipc: Enabled bearer , priority 10 [ 476.428980][T17092] xt_ecn: cannot match TCP bits for non-tcp packets [ 476.458324][ T3903] bridge_slave_1: left allmulticast mode [ 476.475712][ T3903] bridge_slave_1: left promiscuous mode [ 476.481680][T17095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.512559][ T3903] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.545325][T17095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.572516][ T3903] bridge_slave_0: left promiscuous mode [ 476.580434][ T3903] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.374237][ T8] tipc: Node number set to 2886997162 [ 477.878931][ T3903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.914846][ T3903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.927618][ T3903] bond0 (unregistering): Released all slaves [ 478.100771][ T9] bridge0: port 3(macsec0) entered disabled state [ 478.139038][ T3903] tipc: Left network mode [ 478.734888][T17115] FAULT_INJECTION: forcing a failure. [ 478.734888][T17115] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 478.785293][T17115] CPU: 0 PID: 17115 Comm: syz.4.3529 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 478.795924][T17115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 478.806011][T17115] Call Trace: [ 478.809311][T17115] [ 478.812251][T17115] dump_stack_lvl+0x241/0x360 [ 478.816950][T17115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.822162][T17115] ? __pfx__printk+0x10/0x10 [ 478.826783][T17115] should_fail_ex+0x3b0/0x4e0 [ 478.831487][T17115] prepare_alloc_pages+0x1da/0x5d0 [ 478.836630][T17115] __alloc_pages_noprof+0x166/0x6c0 [ 478.841853][T17115] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 478.847592][T17115] ? validate_chain+0x11e/0x5900 [ 478.852653][T17115] alloc_pages_mpol_noprof+0x3e8/0x680 [ 478.858137][T17115] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 478.864194][T17115] vma_alloc_folio_noprof+0xf3/0x1f0 [ 478.869517][T17115] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 478.875444][T17115] ? do_raw_spin_unlock+0x13c/0x8b0 [ 478.880669][T17115] folio_prealloc+0x31/0x170 [ 478.885300][T17115] do_wp_page+0x11cc/0x52f0 [ 478.889856][T17115] ? __pfx_do_wp_page+0x10/0x10 [ 478.894743][T17115] ? __pfx_lock_acquire+0x10/0x10 [ 478.899797][T17115] ? do_raw_spin_lock+0x14f/0x370 [ 478.904877][T17115] handle_pte_fault+0x117e/0x7090 [ 478.909918][T17115] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 478.916289][T17115] ? __pfx_validate_chain+0x10/0x10 [ 478.921519][T17115] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 478.927453][T17115] ? lockdep_hardirqs_on+0x99/0x150 [ 478.932706][T17115] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 478.938638][T17115] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 478.944990][T17115] ? __pfx_handle_pte_fault+0x10/0x10 [ 478.950384][T17115] ? __lock_acquire+0x1346/0x1fd0 [ 478.955438][T17115] ? reacquire_held_locks+0x3eb/0x690 [ 478.960827][T17115] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 478.966058][T17115] ? __pfx_reacquire_held_locks+0x10/0x10 [ 478.971812][T17115] handle_mm_fault+0x10df/0x1ba0 [ 478.977003][T17115] ? __pfx_handle_mm_fault+0x10/0x10 [ 478.982327][T17115] ? lock_vma_under_rcu+0x592/0x6e0 [ 478.987578][T17115] ? exc_page_fault+0x113/0x8c0 [ 478.992457][T17115] exc_page_fault+0x459/0x8c0 [ 478.997168][T17115] asm_exc_page_fault+0x26/0x30 [ 479.002031][T17115] RIP: 0033:0x7f86e292f4b5 [ 479.006466][T17115] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 479.026084][T17115] RSP: 002b:00007f86e375fdf0 EFLAGS: 00010293 [ 479.032170][T17115] RAX: 0000000000000008 RBX: 00007f86e3637d60 RCX: 0000000000000000 [ 479.040151][T17115] RDX: 0000000000000000 RSI: 00007f86e2a1827e RDI: 00007f86e3637d60 [ 479.048128][T17115] RBP: 00007f86e375ff10 R08: 0000000000000000 R09: 0000000000000005 [ 479.056107][T17115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86e2a17e80 [ 479.064090][T17115] R13: 0000000000000016 R14: 00007f86e2ad4440 R15: 0000000000000000 [ 479.072086][T17115] [ 479.096304][T17115] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 479.455798][ T3903] hsr_slave_0: left promiscuous mode [ 479.483035][ T3903] hsr_slave_1: left promiscuous mode [ 479.513244][ T3903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 479.526481][ T3903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.545996][ T3903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 479.555546][ T3903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 479.582581][ T3903] veth1_macvtap: left promiscuous mode [ 479.596624][ T3903] veth0_macvtap: left promiscuous mode [ 479.604424][ T3903] veth1_vlan: left promiscuous mode [ 479.609809][ T3903] veth0_vlan: left promiscuous mode [ 480.453297][ T3903] team0 (unregistering): Port device team_slave_1 removed [ 480.509216][ T3903] team0 (unregistering): Port device team_slave_0 removed [ 481.129322][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 481.252818][T17120] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3531'. [ 481.279781][T17120] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3531'. [ 481.593869][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3532'. [ 481.626852][T17130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3532'. [ 481.881673][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 481.896356][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 481.911927][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 481.923700][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 481.932849][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 481.941539][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 482.032946][T17143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3535'. [ 482.052048][T17143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3535'. [ 482.063232][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3535'. [ 482.067031][ T3903] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.106855][T17136] delete_channel: no stack [ 482.111609][T17136] delete_channel: no stack [ 482.279634][ T3903] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.466469][ T3903] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.552148][T17167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3540'. [ 482.685953][T17172] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3543'. [ 482.703647][ T3903] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.876972][T17174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3545'. [ 482.964225][ T3903] bridge_slave_1: left allmulticast mode [ 482.977291][ T3903] bridge_slave_1: left promiscuous mode [ 482.989426][ T3903] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.003039][ T3903] bridge_slave_0: left allmulticast mode [ 483.015161][ T3903] bridge_slave_0: left promiscuous mode [ 483.021117][ T3903] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.650183][ T3903] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.663241][ T3903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.680442][ T3903] bond0 (unregistering): Released all slaves [ 483.984368][ T5109] Bluetooth: hci1: command tx timeout [ 484.303210][T17223] net veth1_virt_wifi ÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 484.697687][ T3903] hsr_slave_0: left promiscuous mode [ 484.721652][ T3903] hsr_slave_1: left promiscuous mode [ 484.742074][ T3903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.754238][ T3903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.776252][ T3903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.803990][ T3903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.880248][ T3903] veth1_macvtap: left promiscuous mode [ 484.902152][ T3903] veth0_macvtap: left promiscuous mode [ 484.910351][ T3903] veth1_vlan: left promiscuous mode [ 484.923365][ T3903] veth0_vlan: left promiscuous mode [ 484.930158][T17242] FAULT_INJECTION: forcing a failure. [ 484.930158][T17242] name failslab, interval 1, probability 0, space 0, times 0 [ 484.986377][T17242] CPU: 1 PID: 17242 Comm: syz.4.3565 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 484.996610][T17242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 485.006712][T17242] Call Trace: [ 485.010038][T17242] [ 485.013018][T17242] dump_stack_lvl+0x241/0x360 [ 485.017769][T17242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.023028][T17242] ? __pfx__printk+0x10/0x10 [ 485.027780][T17242] ? nf_ct_pernet+0x45/0x270 [ 485.032420][T17242] ? __pfx_lock_release+0x10/0x10 [ 485.037488][T17242] ? nf_conntrack_find_get+0x46d/0x680 [ 485.043000][T17242] ? nf_conntrack_find_get+0x102/0x680 [ 485.048538][T17242] should_fail_ex+0x3b0/0x4e0 [ 485.053243][T17242] ? __nf_conntrack_alloc+0x8f/0x380 [ 485.058560][T17242] should_failslab+0x9/0x20 [ 485.063186][T17242] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 485.068600][T17242] __nf_conntrack_alloc+0x8f/0x380 [ 485.073736][T17242] ctnetlink_new_conntrack+0x662/0x2240 [ 485.079304][T17242] ? __mutex_trylock_common+0x183/0x2e0 [ 485.084876][T17242] ? __pfx___might_resched+0x10/0x10 [ 485.090183][T17242] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 485.096183][T17242] ? rcu_is_watching+0x15/0xb0 [ 485.100988][T17242] ? trace_contention_end+0x3c/0x120 [ 485.106306][T17242] ? __mutex_lock+0x2ef/0xd70 [ 485.111009][T17242] ? __pfx___mutex_lock+0x10/0x10 [ 485.116061][T17242] ? nfnetlink_rcv_msg+0x225/0x1180 [ 485.121273][T17242] nfnetlink_rcv_msg+0xbec/0x1180 [ 485.126311][T17242] ? kernel_text_address+0xa7/0xe0 [ 485.131460][T17242] ? nfnetlink_rcv_msg+0x225/0x1180 [ 485.136714][T17242] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 485.142237][T17242] ? netlink_deliver_tap+0x19d/0x1b0 [ 485.147544][T17242] ? netlink_unicast+0x7be/0x990 [ 485.152493][T17242] ? netlink_sendmsg+0x8e4/0xcb0 [ 485.157438][T17242] ? __sock_sendmsg+0x221/0x270 [ 485.162300][T17242] ? ____sys_sendmsg+0x525/0x7d0 [ 485.167252][T17242] ? __sys_sendmsg+0x2b0/0x3a0 [ 485.172045][T17242] ? do_syscall_64+0xf3/0x230 [ 485.176761][T17242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.182850][T17242] netlink_rcv_skb+0x1e3/0x430 [ 485.187646][T17242] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 485.193118][T17242] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.198428][T17242] ? apparmor_capable+0x138/0x1b0 [ 485.203469][T17242] ? bpf_lsm_capable+0x9/0x10 [ 485.208158][T17242] ? security_capable+0x90/0xb0 [ 485.213032][T17242] nfnetlink_rcv+0x297/0x2a90 [ 485.217725][T17242] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 485.223461][T17242] ? __dev_queue_xmit+0x2da/0x3e90 [ 485.228592][T17242] ? __dev_queue_xmit+0x1763/0x3e90 [ 485.233807][T17242] ? kasan_save_track+0x51/0x80 [ 485.238675][T17242] ? do_syscall_64+0xf3/0x230 [ 485.243361][T17242] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 485.248486][T17242] ? __dev_queue_xmit+0x2da/0x3e90 [ 485.253708][T17242] ? __pfx___dev_queue_xmit+0x10/0x10 [ 485.259119][T17242] ? ref_tracker_free+0x643/0x7e0 [ 485.264178][T17242] ? __asan_memcpy+0x40/0x70 [ 485.268777][T17242] ? __pfx_ref_tracker_free+0x10/0x10 [ 485.274195][T17242] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.279399][T17242] ? skb_clone+0x240/0x390 [ 485.283831][T17242] ? __pfx_lock_release+0x10/0x10 [ 485.288864][T17242] ? __netlink_deliver_tap+0x77e/0x7c0 [ 485.294342][T17242] ? netlink_deliver_tap+0x2e/0x1b0 [ 485.299564][T17242] netlink_unicast+0x7f0/0x990 [ 485.304347][T17242] ? __pfx_netlink_unicast+0x10/0x10 [ 485.309641][T17242] ? __virt_addr_valid+0x183/0x520 [ 485.314770][T17242] ? __check_object_size+0x49c/0x900 [ 485.320072][T17242] ? bpf_lsm_netlink_send+0x9/0x10 [ 485.325200][T17242] netlink_sendmsg+0x8e4/0xcb0 [ 485.329993][T17242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.335291][T17242] ? __import_iovec+0x536/0x820 [ 485.340148][T17242] ? aa_sock_msg_perm+0x91/0x160 [ 485.345120][T17242] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 485.350433][T17242] ? security_socket_sendmsg+0x87/0xb0 [ 485.355928][T17242] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.361230][T17242] __sock_sendmsg+0x221/0x270 [ 485.365926][T17242] ____sys_sendmsg+0x525/0x7d0 [ 485.370718][T17242] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.376050][T17242] __sys_sendmsg+0x2b0/0x3a0 [ 485.380657][T17242] ? __pfx___sys_sendmsg+0x10/0x10 [ 485.385786][T17242] ? vfs_write+0x7c4/0xc90 [ 485.390262][T17242] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 485.396601][T17242] ? do_syscall_64+0x100/0x230 [ 485.401376][T17242] ? do_syscall_64+0xb6/0x230 [ 485.406063][T17242] do_syscall_64+0xf3/0x230 [ 485.410572][T17242] ? clear_bhb_loop+0x35/0x90 [ 485.415262][T17242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.421165][T17242] RIP: 0033:0x7f86e2975bd9 [ 485.425588][T17242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 485.445306][T17242] RSP: 002b:00007f86e3761048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.453747][T17242] RAX: ffffffffffffffda RBX: 00007f86e2b03f60 RCX: 00007f86e2975bd9 [ 485.461747][T17242] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 485.469914][T17242] RBP: 00007f86e37610a0 R08: 0000000000000000 R09: 0000000000000000 [ 485.477901][T17242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.485967][T17242] R13: 000000000000000b R14: 00007f86e2b03f60 R15: 00007ffc81b04f78 [ 485.493973][T17242] [ 486.064466][ T5109] Bluetooth: hci1: command tx timeout [ 486.697074][ T3903] team0 (unregistering): Port device team_slave_1 removed [ 486.750507][ T3903] team0 (unregistering): Port device team_slave_0 removed [ 487.399146][T17133] chnl_net:caif_netlink_parms(): no params data found [ 487.866329][T17133] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.887916][T17133] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.906689][T17133] bridge_slave_0: entered allmulticast mode [ 487.915341][T17133] bridge_slave_0: entered promiscuous mode [ 487.925788][T17133] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.938565][T17133] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.952884][T17133] bridge_slave_1: entered allmulticast mode [ 487.968244][T17133] bridge_slave_1: entered promiscuous mode [ 488.034726][T17306] __nla_validate_parse: 8 callbacks suppressed [ 488.034750][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 488.052787][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 488.111152][T17306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3587'. [ 488.131288][T17133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.144809][ T5109] Bluetooth: hci1: command tx timeout [ 488.167570][T17133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.175354][T17314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3589'. [ 488.214516][T17314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3589'. [ 488.293232][T17314] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3589'. [ 488.315013][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3591'. [ 488.334013][T17133] team0: Port device team_slave_0 added [ 488.341351][T17318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3591'. [ 488.357017][T17133] team0: Port device team_slave_1 added [ 488.384107][T17318] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3591'. [ 488.592419][T17133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.616198][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.677775][T17133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.737734][T17133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.761100][T17133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 488.826803][T17133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.025132][T17347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.061377][T17347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 489.085759][T17133] hsr_slave_0: entered promiscuous mode [ 489.096094][T17133] hsr_slave_1: entered promiscuous mode [ 489.165366][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3604'. [ 490.113568][T17386] macvlan2: entered promiscuous mode [ 490.121026][T17386] vlan1: entered promiscuous mode [ 490.136058][T17386] team0: Port device macvlan2 added [ 490.162159][T17386] x_tables: duplicate underflow at hook 3 [ 490.224402][ T5109] Bluetooth: hci1: command tx timeout [ 490.829023][T17415] sctp: [Deprecated]: syz.4.3626 (pid 17415) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.829023][T17415] Use struct sctp_sack_info instead [ 490.836796][T17133] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 490.890597][T17133] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 490.937809][T17133] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 490.996047][T17133] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 491.370379][T17133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 491.437365][T17133] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.481392][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.488647][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.500909][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.508210][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.029793][T17451] sctp: [Deprecated]: syz.4.3637 (pid 17451) Use of int in maxseg socket option. [ 492.029793][T17451] Use struct sctp_assoc_value instead [ 492.052954][T17454] netlink: zone id is out of range [ 492.090527][T17133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.098261][T17454] netlink: zone id is out of range [ 492.128509][T17454] netlink: zone id is out of range [ 492.156240][T17454] netlink: zone id is out of range [ 492.161418][T17454] netlink: zone id is out of range [ 492.253956][T17454] netlink: zone id is out of range [ 492.277229][T17454] netlink: zone id is out of range [ 492.291791][T17454] netlink: zone id is out of range [ 492.309865][T17133] veth0_vlan: entered promiscuous mode [ 492.316429][T17454] netlink: zone id is out of range [ 492.331837][T17454] netlink: zone id is out of range [ 492.355526][T17133] veth1_vlan: entered promiscuous mode [ 492.491048][T17133] veth0_macvtap: entered promiscuous mode [ 492.522699][T17133] veth1_macvtap: entered promiscuous mode [ 492.566681][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.598334][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.621556][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.654019][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.674248][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.688810][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.704397][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.728201][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.744016][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.763511][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.778443][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.809954][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.835284][T17133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.988391][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.001742][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.012799][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.028523][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.039350][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.063830][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.076664][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.102355][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.123541][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.148963][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.169001][T17133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.187921][T17133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.200417][T17133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.221129][T17484] __nla_validate_parse: 21 callbacks suppressed [ 493.221154][T17484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3647'. [ 493.283674][T17133] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.312970][T17133] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.334674][T17133] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.349605][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3648'. [ 493.356146][T17133] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.529047][T17489] syzkaller0: entered promiscuous mode [ 493.543149][T17489] syzkaller0: entered allmulticast mode [ 493.984479][T17503] netlink: 'syz.2.3653': attribute type 4 has an invalid length. [ 494.167771][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.178765][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.213459][T17506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3654'. [ 494.237721][T17506] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3654'. [ 494.263128][T17506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3654'. [ 496.172661][ T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 496.213703][ T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 496.493480][T17526] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3663'. [ 497.062350][T17545] FAULT_INJECTION: forcing a failure. [ 497.062350][T17545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.066691][T17543] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3667'. [ 497.076354][T17545] CPU: 0 PID: 17545 Comm: syz.4.3668 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 497.094784][T17545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 497.104882][T17545] Call Trace: [ 497.108287][T17545] [ 497.111252][T17545] dump_stack_lvl+0x241/0x360 [ 497.116066][T17545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.121308][T17545] ? __pfx__printk+0x10/0x10 [ 497.125954][T17545] ? __pfx_lock_release+0x10/0x10 [ 497.131042][T17545] should_fail_ex+0x3b0/0x4e0 [ 497.132245][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3667'. [ 497.135757][T17545] _copy_from_user+0x2f/0xe0 [ 497.135790][T17545] copy_msghdr_from_user+0xae/0x680 [ 497.135824][T17545] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 497.135869][T17545] __sys_sendmsg+0x23d/0x3a0 [ 497.135906][T17545] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.135938][T17545] ? vfs_write+0x7c4/0xc90 [ 497.136013][T17545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 497.136044][T17545] ? do_syscall_64+0x100/0x230 [ 497.136072][T17545] ? do_syscall_64+0xb6/0x230 [ 497.190751][T17545] do_syscall_64+0xf3/0x230 [ 497.195306][T17545] ? clear_bhb_loop+0x35/0x90 [ 497.200039][T17545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.205979][T17545] RIP: 0033:0x7f86e2975bd9 [ 497.210436][T17545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.230092][T17545] RSP: 002b:00007f86e3761048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.238565][T17545] RAX: ffffffffffffffda RBX: 00007f86e2b03f60 RCX: 00007f86e2975bd9 [ 497.246583][T17545] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 497.254598][T17545] RBP: 00007f86e37610a0 R08: 0000000000000000 R09: 0000000000000000 [ 497.262613][T17545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.270632][T17545] R13: 000000000000000b R14: 00007f86e2b03f60 R15: 00007ffc81b04f78 [ 497.278675][T17545] [ 497.541516][ T131] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.634741][T17557] net_ratelimit: 874 callbacks suppressed [ 497.634775][T17557] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 497.708070][ T131] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.780123][ T131] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.863398][ T131] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.992919][ T131] bridge_slave_1: left allmulticast mode [ 497.998917][ T131] bridge_slave_1: left promiscuous mode [ 498.004949][ T131] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.014556][ T131] bridge_slave_0: left allmulticast mode [ 498.020342][ T131] bridge_slave_0: left promiscuous mode [ 498.026742][ T131] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.463526][ T131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.477244][ T131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.489853][ T131] bond0 (unregistering): Released all slaves [ 498.872563][ T131] hsr_slave_0: left promiscuous mode [ 498.879200][ T131] hsr_slave_1: left promiscuous mode [ 498.893467][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.901858][ T131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.913890][ T131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.921412][ T131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.952921][ T131] veth1_macvtap: left promiscuous mode [ 498.958647][ T131] veth0_macvtap: left promiscuous mode [ 498.965452][ T131] veth1_vlan: left promiscuous mode [ 498.971803][ T131] veth0_vlan: left promiscuous mode [ 499.662826][T17574] Bluetooth: MGMT ver 1.22 [ 499.851260][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 499.865069][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 499.877732][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 499.900856][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 499.912220][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 499.922926][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 500.070035][ T131] team0 (unregistering): Port device team_slave_1 removed [ 500.169019][ T131] team0 (unregistering): Port device team_slave_0 removed [ 500.885181][T17598] netlink: 'syz.2.3683': attribute type 9 has an invalid length. [ 500.896477][T17598] netlink: 'syz.2.3683': attribute type 7 has an invalid length. [ 500.932126][T17598] netlink: 'syz.2.3683': attribute type 8 has an invalid length. [ 500.992851][T17598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3683'. [ 501.677007][T17591] chnl_net:caif_netlink_parms(): no params data found [ 501.768265][T17626] FAULT_INJECTION: forcing a failure. [ 501.768265][T17626] name failslab, interval 1, probability 0, space 0, times 0 [ 501.781034][T17626] CPU: 0 PID: 17626 Comm: syz.3.3691 Not tainted 6.10.0-rc6-syzkaller-01218-g390b14b5e9f6 #0 [ 501.791241][T17626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 501.801335][T17626] Call Trace: [ 501.804646][T17626] [ 501.807635][T17626] dump_stack_lvl+0x241/0x360 [ 501.812356][T17626] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.817601][T17626] ? __pfx__printk+0x10/0x10 [ 501.822261][T17626] should_fail_ex+0x3b0/0x4e0 [ 501.827076][T17626] ? skb_clone+0x20c/0x390 [ 501.831577][T17626] should_failslab+0x9/0x20 [ 501.836138][T17626] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 501.841570][T17626] skb_clone+0x20c/0x390 [ 501.845866][T17626] ? dev_queue_xmit_nit+0x220/0xc10 [ 501.851119][T17626] dev_queue_xmit_nit+0x419/0xc10 [ 501.856188][T17626] ? dev_queue_xmit_nit+0x2b/0xc10 [ 501.861349][T17626] ? validate_xmit_skb+0x9f9/0x1120 [ 501.866604][T17626] dev_hard_start_xmit+0x15f/0x7e0 [ 501.871789][T17626] ? __pfx_validate_xmit_skb+0x10/0x10 [ 501.877309][T17626] __dev_queue_xmit+0x1b63/0x3e90 [ 501.882396][T17626] ? kasan_save_track+0x51/0x80 [ 501.887310][T17626] ? do_syscall_64+0xf3/0x230 [ 501.892128][T17626] ? __dev_queue_xmit+0x2da/0x3e90 [ 501.897325][T17626] ? __pfx___dev_queue_xmit+0x10/0x10 [ 501.902772][T17626] ? __copy_skb_header+0x437/0x5b0 [ 501.907936][T17626] ? __asan_memcpy+0x40/0x70 [ 501.912569][T17626] ? __copy_skb_header+0x437/0x5b0 [ 501.917735][T17626] ? __skb_clone+0x454/0x6c0 [ 501.922382][T17626] ? skb_clone+0x240/0x390 [ 501.926853][T17626] __netlink_deliver_tap+0x54d/0x7c0 [ 501.932195][T17626] ? netlink_deliver_tap+0x2e/0x1b0 [ 501.937429][T17626] netlink_deliver_tap+0x19d/0x1b0 [ 501.942581][T17626] netlink_unicast+0x7be/0x990 [ 501.947397][T17626] ? __pfx_netlink_unicast+0x10/0x10 [ 501.952728][T17626] ? __virt_addr_valid+0x183/0x520 [ 501.957904][T17626] ? __check_object_size+0x49c/0x900 [ 501.963246][T17626] ? bpf_lsm_netlink_send+0x9/0x10 [ 501.968419][T17626] netlink_sendmsg+0x8e4/0xcb0 [ 501.973335][T17626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.978671][T17626] ? __import_iovec+0x536/0x820 [ 501.983562][T17626] ? aa_sock_msg_perm+0x91/0x160 [ 501.986887][ T5104] Bluetooth: hci1: command tx timeout [ 501.988534][T17626] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 501.999593][T17626] ? security_socket_sendmsg+0x87/0xb0 [ 502.005101][T17626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.010442][T17626] __sock_sendmsg+0x221/0x270 [ 502.015202][T17626] ____sys_sendmsg+0x525/0x7d0 [ 502.020034][T17626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.025392][T17626] __sys_sendmsg+0x2b0/0x3a0 [ 502.030037][T17626] ? __pfx___sys_sendmsg+0x10/0x10 [ 502.035209][T17626] ? vfs_write+0x7c4/0xc90 [ 502.039731][T17626] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 502.046110][T17626] ? do_syscall_64+0x100/0x230 [ 502.050934][T17626] ? do_syscall_64+0xb6/0x230 [ 502.055659][T17626] do_syscall_64+0xf3/0x230 [ 502.060206][T17626] ? clear_bhb_loop+0x35/0x90 [ 502.064932][T17626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.070856][T17626] RIP: 0033:0x7f05e3775bd9 [ 502.075289][T17626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.094935][T17626] RSP: 002b:00007f05e4573048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.103376][T17626] RAX: ffffffffffffffda RBX: 00007f05e3903f60 RCX: 00007f05e3775bd9 [ 502.111367][T17626] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 502.119351][T17626] RBP: 00007f05e45730a0 R08: 0000000000000000 R09: 0000000000000000 [ 502.127340][T17626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.135320][T17626] R13: 000000000000000b R14: 00007f05e3903f60 R15: 00007ffc4e444308 [ 502.143321][T17626] [ 502.359790][T17591] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.375702][T17591] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.393306][T17591] bridge_slave_0: entered allmulticast mode [ 502.408668][T17591] bridge_slave_0: entered promiscuous mode [ 502.476488][T17591] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.520044][T17591] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.532691][T17642] dccp_close: ABORT with 32 bytes unread [ 502.541919][T17591] bridge_slave_1: entered allmulticast mode [ 502.549921][T17591] bridge_slave_1: entered promiscuous mode [ 502.698199][T17591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.760599][T17591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.924703][T17591] team0: Port device team_slave_0 added [ 502.957211][T17591] team0: Port device team_slave_1 added [ 503.009223][T17654] netem: unknown loss type 0 [ 503.045375][T17654] netem: change failed [ 503.106813][T17591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.121318][T17591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.151339][T17591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.201930][T17591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.219097][T17591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.295821][T17591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.449976][T17591] hsr_slave_0: entered promiscuous mode [ 503.464821][T17591] hsr_slave_1: entered promiscuous mode [ 504.035280][T17698] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 504.064380][ T5104] Bluetooth: hci1: command tx timeout [ 505.061226][T17591] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 505.109014][T17591] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 505.160636][T17591] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 505.181706][T17591] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 505.452233][T17738] netlink: 'syz.2.3730': attribute type 10 has an invalid length. [ 505.509689][T17738] team0: Port device netdevsim0 added [ 505.633645][T17591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.793448][T17591] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.868861][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.876275][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 505.915086][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.922388][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.070919][T17756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3735'. [ 506.110801][T17756] netlink: 'syz.1.3735': attribute type 19 has an invalid length. [ 506.147079][ T5104] Bluetooth: hci1: command tx timeout [ 506.752787][T17591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.850230][T17774] syzkaller0: entered promiscuous mode [ 506.857287][T17774] syzkaller0: entered allmulticast mode [ 506.940598][T17591] veth0_vlan: entered promiscuous mode [ 506.989786][T17591] veth1_vlan: entered promiscuous mode [ 507.097561][T17591] veth0_macvtap: entered promiscuous mode [ 507.144889][T17591] veth1_macvtap: entered promiscuous mode [ 507.219666][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.261340][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.298636][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.317023][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.330626][T17800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3752'. [ 507.337816][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.364298][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.370553][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3752'. [ 507.381380][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.403638][T17800] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3752'. [ 507.404523][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.438855][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.449618][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.460731][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 507.472431][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.486965][T17591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.499923][T17801] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3753'. [ 507.568288][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.594039][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.613840][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.642775][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.664585][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.684992][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.709496][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.722989][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.742834][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.754483][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.767368][T17591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.778936][T17591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.782188][T17820] No such timeout policy "syz0" [ 507.791718][T17591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.809695][T17805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3754'. [ 507.819609][T17805] netlink: 'syz.4.3754': attribute type 19 has an invalid length. [ 507.888246][T17591] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.911487][T17591] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.932124][T17591] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.945310][T17591] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.222672][T10623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.224680][ T5104] Bluetooth: hci1: command tx timeout [ 508.246467][T10623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.301728][T17835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3761'. [ 508.694445][T17844] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3765'. [ 508.736663][T17844] bridge_slave_1: left allmulticast mode [ 508.742389][T17844] bridge_slave_1: left promiscuous mode [ 508.774259][T17844] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.803491][T17844] bridge_slave_0: left allmulticast mode [ 508.810545][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3767'. [ 508.824179][T17844] bridge_slave_0: left promiscuous mode [ 508.832887][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3767'. [ 508.842826][T17844] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.992866][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.022295][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.888539][T17895] syzkaller1: entered promiscuous mode [ 509.894620][T17895] syzkaller1: entered allmulticast mode [ 510.195945][T17919] netlink: 'syz.4.3787': attribute type 10 has an invalid length. [ 510.218586][T17920] netlink: 'syz.1.3788': attribute type 1 has an invalid length. [ 510.250938][T17920] netlink: 'syz.1.3788': attribute type 1 has an invalid length. [ 510.294812][T17919] team0: Port device netdevsim0 added [ 510.618098][T17937] vlan2: entered promiscuous mode [ 510.623209][T17937] vlan2: entered allmulticast mode [ 511.076532][T17959] netlink: 'syz.3.3801': attribute type 10 has an invalid length. [ 511.249533][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.289975][T17960] wg2: entered promiscuous mode [ 511.305576][T17960] wg2: entered allmulticast mode [ 511.388593][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.501373][ T5109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 511.504515][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.524958][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 511.535849][ T5109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 511.545948][ T5109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 511.554995][ T5109] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 511.563231][ T5109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.600186][ T12] team0: Port device netdevsim0 removed [ 511.612012][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.873196][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.965394][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.075434][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.129160][T17962] chnl_net:caif_netlink_parms(): no params data found [ 512.169128][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.320877][T17962] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.330491][T17962] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.337999][T17962] bridge_slave_0: entered allmulticast mode [ 512.346397][T17962] bridge_slave_0: entered promiscuous mode [ 512.370348][T17962] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.377896][T17962] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.388690][T17962] bridge_slave_1: entered allmulticast mode [ 512.396471][T17962] bridge_slave_1: entered promiscuous mode [ 512.476293][ T12] bridge_slave_1: left allmulticast mode [ 512.482016][ T12] bridge_slave_1: left promiscuous mode [ 512.499044][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.521058][ T12] bridge_slave_0: left allmulticast mode [ 512.533441][ T12] bridge_slave_0: left promiscuous mode [ 512.544040][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.320213][T17979] netlink: 'syz.3.3805': attribute type 5 has an invalid length. [ 513.683959][ T5104] Bluetooth: hci0: command tx timeout [ 513.958957][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.971131][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.984602][ T12] bond0 (unregistering): Released all slaves [ 514.110775][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.123981][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.137035][ T12] bond0 (unregistering): Released all slaves [ 514.160044][T17962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.174827][T17962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 514.294564][ T12] tipc: Disabling bearer [ 514.300364][ T12] tipc: Left network mode [ 514.430727][T18002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.543392][T18007] __nla_validate_parse: 12 callbacks suppressed [ 514.543415][T18007] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3811'. [ 514.629959][T18007] netlink: 'syz.1.3811': attribute type 2 has an invalid length. [ 514.648433][T18011] hsr0: VLAN not yet supported [ 514.721424][T18005] syzkaller0: tun_chr_ioctl cmd 1074025681 [ 514.820507][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 514.831734][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 514.845640][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 514.877835][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 514.888358][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 514.898854][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 515.250885][T18025] netlink: 'syz.1.3818': attribute type 1 has an invalid length. [ 515.269520][T18025] netlink: 'syz.1.3818': attribute type 4 has an invalid length. [ 515.284103][T18025] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.3818'. [ 515.477814][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 515.488766][ T5109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 515.499308][ T5109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 515.509845][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 515.517870][ T5109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 515.525572][ T5109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 516.520289][ T12] hsr_slave_0: left promiscuous mode [ 516.564429][T18046] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3825'. [ 516.594230][ T12] hsr_slave_1: left promiscuous mode [ 516.644506][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.652116][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.710127][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.723313][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.793546][ T12] hsr_slave_0: left promiscuous mode [ 516.814531][ T12] hsr_slave_1: left promiscuous mode [ 516.838039][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.853880][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.862900][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.887405][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.946093][ T5109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 516.957566][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.966789][ T5109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.977310][ T5109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.988214][ T5109] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 516.996599][ T5109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 517.145126][ T12] veth1_macvtap: left promiscuous mode [ 517.163983][ T12] veth0_macvtap: left promiscuous mode [ 517.169721][ T12] veth1_vlan: left promiscuous mode [ 517.171907][T18057] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 517.207556][ T12] veth0_vlan: left promiscuous mode [ 517.246015][ T12] veth1_macvtap: left promiscuous mode [ 517.251644][ T12] veth0_macvtap: left promiscuous mode [ 517.274135][ T12] veth1_vlan: left promiscuous mode [ 517.277986][ T5109] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 517.284273][ T12] veth0_vlan: left promiscuous mode [ 517.302699][ T5109] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 517.313947][ T5109] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 517.327329][ T5109] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 517.338271][ T5109] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 517.354752][ T5109] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 518.353450][ T12] team0 (unregistering): Port device team_slave_1 removed [ 518.412127][ T12] team0 (unregistering): Port device team_slave_0 removed SYZFAIL: proc resp pipe read failed n=-1 (errno 11: Resource temporarily unavailable) [ 519.025377][ T5104] Bluetooth: hci0: command tx timeout [ 519.425925][ T5104] Bluetooth: hci1: command tx timeout [ 519.468003][ T12] team0 (unregistering): Port device team_slave_1 removed [ 519.512136][ T12] team0 (unregistering): Port device team_slave_0 removed [ 520.649735][T18046] syz_tun (unregistering): left promiscuous mode [ 521.134364][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.222823][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.295309][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.345736][ T12] team0: Port device netdevsim0 removed [ 521.354250][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.456618][ T12] bridge_slave_1: left allmulticast mode [ 521.462353][ T12] bridge_slave_1: left promiscuous mode [ 521.468621][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.478220][ T12] bridge_slave_0: left allmulticast mode [ 521.484608][ T12] bridge_slave_0: left promiscuous mode [ 521.490390][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.503122][ T12] bridge_slave_1: left allmulticast mode [ 521.509125][ T12] bridge_slave_1: left promiscuous mode [ 521.515131][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.525169][ T12] bridge_slave_0: left allmulticast mode [ 521.530855][ T12] bridge_slave_0: left promiscuous mode [ 521.537834][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.159041][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.173057][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.187207][ T12] bond0 (unregistering): Released all slaves [ 522.201680][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.215332][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 522.230997][ T12] bond0 (unregistering): Released all slaves [ 523.022888][ T12] hsr_slave_0: left promiscuous mode [ 523.029699][ T12] hsr_slave_1: left promiscuous mode [ 523.043443][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.051178][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.060153][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.067705][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.090382][ T12] veth0_macvtap: left promiscuous mode [ 523.096753][ T12] veth1_vlan: left promiscuous mode [ 523.102105][ T12] veth0_vlan: left promiscuous mode [ 523.638244][ T12] team0 (unregistering): Port device team_slave_1 removed [ 523.689664][ T12] team0 (unregistering): Port device team_slave_0 removed