last executing test programs: 59.726919357s ago: executing program 3 (id=89): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000fe8000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 50.456246494s ago: executing program 3 (id=89): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000fe8000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 39.685423832s ago: executing program 3 (id=89): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000fe8000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 29.044715099s ago: executing program 3 (id=89): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000fe8000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 18.949078966s ago: executing program 3 (id=89): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000fe8000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 7.128339288s ago: executing program 4 (id=739): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000bf0000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 6.84244862s ago: executing program 0 (id=741): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="0800030008000000080001"], 0x60}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='tlb_flush\x00', r1}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)=0x400002) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xfffdff01, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x10}, 0x18) r6 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0xfd}, 0x0, 0x0, 0x2, 0x3, 0x4, 0x718}, 0x20) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) pipe(0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x0, 0xf05, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 6.842305884s ago: executing program 4 (id=742): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) connect$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x1}}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) 6.332503546s ago: executing program 4 (id=744): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x25, &(0x7f0000000140)={@broadcast, @dev, @empty}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000000), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)="ae50d7ac251a5b14cfdd3949454bad4238b70e3237408fd6820c244e7a6be590a2fe1ac749e7a13eb05d274ad98c065683786657f8990779001cc32735f0ac12203c2f9aa544c297dd0d0f438d47bb11805c9d21a5d70567ab8fd9b205ceef8b9c0b22fc1b320edcb9e49d2b1abab0da09b5", &(0x7f0000000340), 0x619}, 0x38) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYRES32, @ANYBLOB="24002d801a0001"], 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x575e7c695dd541a3, 0x3a, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) 5.916204894s ago: executing program 4 (id=745): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010ab010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30"], 0xe4}}, 0x4000041) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, 0x3a, 0xb, 0x0, 0xff7ffffc, {0x1}, [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}]}]}, 0x20}}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'macvlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100001040000000000fe000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000200012800c0001006d6163766c616e00100002800a000900ffffffff"], 0x48}, 0x1, 0x0, 0x0, 0x40020}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6, 0x0, 0x80000001}, 0x18) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) socket$inet6(0xa, 0x5, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r9, 0x4004743a, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r10, 0x8b2a, &(0x7f0000000040)) pwritev(r7, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x2, 0x0, 0x0) 3.623446632s ago: executing program 2 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000480), &(0x7f00000004c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1]) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r5, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x44, r10, 0x5, 0x0, 0x0, {0x4, 0x74, 0x600}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x44}, 0x1, 0xffffffff00000003}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r10, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x1c}}, 0x20000000) 3.482976643s ago: executing program 0 (id=757): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x200, 0x6a}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4) r2 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="44000000210001050000000000000000020000000500000000000000080001000000000014000c"], 0x44}}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x4044080) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000d40)=ANY=[@ANYBLOB="180800000040000000000000000000008510000005000000850000000f000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0xb8}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x40}}, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000600)=ANY=[@ANYBLOB='b 753', @ANYRESHEX], 0xa) 3.355927119s ago: executing program 2 (id=759): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000440)={0x5, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) accept$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000f2ffffffffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10101, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0xffe0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='svcsock_tcp_recv_short\x00', r5, 0x0, 0x1b1}, 0x18) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000140)={0x0, 0x5c, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c000000010200ff000000000a0000000000000000000180080001dfab1e00010800020000000000"], 0x2c}}, 0x40000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) 3.016435767s ago: executing program 1 (id=761): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000500)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4044850}, 0x20048000) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0xc, {0x2, 0x4e23, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x1e, 0x4, 0x4000) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000180)=@req={0x3fc, 0x0, 0x0, 0x7}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x920000000000004c) 2.774717633s ago: executing program 1 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.649835753s ago: executing program 1 (id=763): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cpuacct.usage\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x60, r3, 0x5, 0x4, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8eb, 0x6, 0x7, 0x8, 0x33, 0x4, 0x4, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8000, 0x6, 0xba, 0x8, 0x8004, 0x6, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 2.541262615s ago: executing program 1 (id=764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newlink={0x40, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x400448cc, &(0x7f0000000400)="91549850c722f7f8696a70a46d18bc7a6297a42f8b91522a756343f2abf3daa3241957831e57804abc4649e346b0a2624b473daa4b72dc10cdb36905b2028dc0dd646316a45c16c23f425a25906e60f60830709e6bdfe783a0d64d7fc61985225957319cc0a61fe7ad4497633aedb96e49599a2211293d8983560af50111eb244c6a8e0e43e670d22b472ea55bea4a27907b6aa644071921a5219aaad9d882803b10adfc8383ac7cef0c12") r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f2f, 0x241, 0x38f, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) syz_emit_ethernet(0x1df, &(0x7f0000000580)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x8, 0x6, "3ff6b8", 0x1a9, 0x2f, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}, @remote, {[@srh={0x73, 0x2000000000000036, 0x4, 0x6, 0x0, 0x28, 0x10}, @fragment={0xc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x64}], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x3c, 0x1, [0x0, 0x40], "6a7dded3cca2aa4e4b2fca490242afdb7e7671016467efe69eeafaf881eb63212f791602dc2f3e16f8d26b488780a73a8646aecddb6f8ec0d805edc8"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0xfff9], "96060a58684e64ff3ef6a5b8ff698f98779563ad11d917e52554a2f564036a3cc04fd5451a6c4c2b94e9b662b3ed028e414d1c0eb8ba51ffc7c1"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [], "fc2cc4f158c4d031a46d615126c0b306644d17ba373b1326e574cf9f83d92d0c83b8cff900d9988e3c44df89e04d71bab55b484291e4b9bb7a4f5bedb33762fbf02004346dbb25d7c3c7c4aa7c37b5408d4c45580e46cc8b82ed34ed91cca02f910000000092198e4681e603557b40246ee6e780beb00a6b409b325debc8e9a7c4db2c9d"}, {0x8, 0x88be, 0x0, {{0xb, 0x1, 0x9, 0x0, 0x1, 0x1, 0x3, 0x9}, 0x1, {0x8000081}}}, {0x8, 0x22eb, 0x0, {{0x2, 0x2, 0x1, 0x3, 0x0, 0x2, 0x2}, 0x2, {0x5, 0x846, 0x2, 0x0, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x1, "f94d1ee69bb6208f8963078db9cb715f75392e84"}}}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_crypto(r5, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000800)=@getstat={0xe0, 0x15, 0x8, 0x70bd2c, 0x25dfdbfb, {{'drbg_nopr_hmac_sha256\x00'}, '\x00', '\x00', 0x3800, 0x6000}, ["", "", "", "", "", ""]}, 0xe0}}, 0x48040) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) 2.433601569s ago: executing program 0 (id=765): r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0xfd}, 0x1000000, 0x0, 0x2, 0x3, 0x4, 0x718}, 0x20) 2.290979482s ago: executing program 2 (id=766): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/14], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x200, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_GROUP={0x8, 0x1b, 0xc}]}, 0x44}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x0, 0x1000}, 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) syz_emit_ethernet(0x6a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/5, 0x209000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x800002}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003900000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x60, 0x3, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xe8f}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0xffff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x7a9b}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x64}}, 0x20048010) 2.258641218s ago: executing program 0 (id=767): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r3, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) connect$tipc(r0, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x1}}, 0x10) 2.033128491s ago: executing program 1 (id=768): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="080002", @ANYRES32, @ANYBLOB="0800030008000000080001"], 0x60}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b70300000000000085000000040000001801000020646c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='tlb_flush\x00', r1}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)=0x400002) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r5, 0x29, 0xc9, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xfffdff01, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001340)=@generic={0x0, 0x0, 0x10}, 0x18) r6 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0xfd}, 0x0, 0x0, 0x2, 0x3, 0x4, 0x718}, 0x20) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r9, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r8, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) pipe(0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, 0x0, 0xf05, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.932761193s ago: executing program 2 (id=769): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r1, &(0x7f0000000200)={0x0, 0x25, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00090008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1e0000000000000000400000209004e0aea71e565eb4cc53eecfb6fa763d0e2019d704ac9a11ec29de4c6ad4975c2e0b8885439bb2c10995030f4bf7dace6f50a3ed670068b8bceae1501e5aacba24eeb6e6433103b4a00526d13f33876228e7fb63d239ffc0b4821c", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=@updsa={0x158, 0x1a, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x43}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x73}, {@in=@local, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x80, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'xcbc(aes)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, 0x158}}, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc)=0x3, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004900)="e81d770692e1edc27cd17b38de3c988d1a6fa6560e1108522cb92911280c2b4c411b795faddd8bf50c8215c18bdee285583f80a307ad9cd469c817be9ad6f590388a4a3ce67e5a14d698af6629fd4d08227f1c526c6201059d21cf86155af3c01c6ee1d6cd75d30367c2c22a9d6e976d93217a1ab15d6163a35fbf16a48bfb2f399da581093f2d9c2b938bceaaa84cdbcc1c0f3b6514fe85e9b15b4d333093e5375973f581d7eaaa5bae", 0xaa}, {&(0x7f0000001240)="1eac4d20f8509e2139d2842c8faedef008bcac1025cbc63d2bfe0c7bbe51c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d056b8977df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bba60131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d944b0161c5c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d01d0f74e180df6eaa94651336e7713414e499586edd5693e587a186fcb68a973e823e61a072aaa4fb9e3a03ff4c17c9e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fb36bcde646385dcf5cb7adf1ec70baef4061d2da93d2f5eefae1081374d58ab54532755c1b8bf303584296145e9aad2e3ccef93f30da9c102db5cfe346baba2fd3f157cb6e825e607365ff8c6187e216dc4072e582874ce63166405e21644015f99d5713165a377bfdc3143928e8469b4e312ce1f9dff83fe7c8d9fca791af2b46f1650e3937c9ab589d5f93fb578503aa64042c66571649844d93257489c1b658140e4c194c329a1a2c0117d123a45b213a118dd608bd6bdb2e0a6782f785321ff48eac4158ad9efb3737a6cfbb21d0dba732558493aa09dfa7fa41b4922e4e205a4792c9694661a18eff0d932d824f6987aa3dafa7ddc9b0acd70d43263c78dde88b7c665abbeec1cf1016ddc321f713cc3c149eeda6443b5b278eb3a05b08d510650b055d3193c4d5bbe084431cc40a626e81827d8bf2379435ada42a99569b35faa3af53f90f4dcf7a7d1c2e6fe4d7739b135981d40ba00de019909748640d554a159e552c6a7a7c77b213fad40dd785cc4ee983266b3377fbc7845a44992f82656b8240c169697599074348a4bac29423612e4c0ba89a66d08033b54b4d8f8704ab9470fe6316dc6ba610b7f3c1b0428607b13d2cfbed5c82d9214a1e97edaa27ed011d42800467fd54cddec7841f2aa513e7c8956842ea69b6b80208a4acbe9b678a9ab48a26df1cebd283f0d8e2956d8e8a4aad5b563ae75ddaf9b167d70b0e96f42a4f1c5bef1e777fedcb380707fc7ac87e249f322a01660687c04d1bbeeefeecadf86c3ef805d79964a862877cfbff40eb340f7065bc759013cbdcb25305ba6812a853b8d8e19602278", 0x3d7}], 0x2}, 0x4000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000001c0)={r2, 0x5, 0xa75a, 0x7}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca20000fa000000a6020000f8ffffffb703000008000000b70400000000000085000000330000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000000), 0x8) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) 1.859057016s ago: executing program 0 (id=770): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r3, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040081}, 0x20000010) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x24, r2, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x41}]}, 0x24}}, 0x44004) 1.819206577s ago: executing program 3 (id=89): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000fe8000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 518.407237ms ago: executing program 4 (id=771): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r1], 0x448}}, 0x804) sendmmsg$inet(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x9, 0x1c, &(0x7f0000000640)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003600)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000500)="d01d4881040cc19a2d2902fdf1d9752173744eebf9f976c207090ab9fc54e1fb15e5ffa4c7270a3d53d0f32cc6327d256ad8a00d8e75f29964d103fdc71b9908bc4ab7d37ecfbbbf3bc0b0c479e116d2218b3925993d746023936cea5863e7848744fd9d5c6edbb2c1d983acf3c2306c2836e49c43ff2c73fd63e5053796d286fbc5668bd46a24b6bade7fd81722cdd380d6", 0x92}], 0x1}}], 0x1, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 455.063542ms ago: executing program 0 (id=772): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x10000, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket(0x10, 0x803, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@security={'security\x00', 0xe, 0x4, 0x710, 0xffffffff, 0x3d0, 0x0, 0x3d0, 0xffffffff, 0xffffffff, 0x640, 0x640, 0x640, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x17}, [0x0, 0x0, 0xffffffff, 0xffffff00], [0x0, 0x0, 0xff, 0xffffff00], 'vlan1\x00', 'lo\x00', {}, {0xff}, 0x33, 0x10, 0x2, 0x4}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x2bdb68ff, 0x7, 0x1, [0x3, 0x8, 0x7ff, 0x2, 0x3, 0x200, 0x1, 0xe7, 0x6, 0x4, 0x101, 0x800, 0x2, 0x6, 0x0, 0x3d], 0xb}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x9}}}, {{@ipv6={@private2, @empty, [0xffffff00, 0xff, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], 'macvtap0\x00', 'geneve0\x00', {0xff}, {}, 0x3b, 0x57, 0x6, 0x4}, 0x0, 0x270, 0x2b8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x9, 0x8, 0x5, @dev={0xfe, 0x80, '\x00', 0x35}, @loopback, @local, [0xffffff00, 0xff, 0xffffffff], [0x0, 0xffffffff, 0xffffffff, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff], 0x80, 0x22}}, @common=@rt={{0x138}, {0x360, [0x4, 0x1], 0x6, 0x30, 0x6, [@remote, @ipv4={'\x00', '\xff\xff', @local}, @private1, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @remote, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @mcast2, @rand_addr=' \x01\x00', @local, @mcast1, @private2], 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, 'veth1_to_bridge\x00', {0x544f}}}}, {{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @remote, [0xffffff00, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff, 0xffffff00, 0xff], 'dvmrp0\x00', 'bond_slave_1\x00', {}, {0xff}, 0xff, 0x0, 0x2, 0x10}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@hbh={{0x48}, {0x401, 0x0, 0x1, [0x0, 0xd5c0, 0x3, 0x800, 0x0, 0x5, 0x2, 0x1, 0x7, 0x8, 0x9, 0x1, 0x8, 0x64, 0x1, 0xc3bd], 0x6}}, @common=@rt={{0x138}, {0x1, [0xffff06b1, 0x9], 0x101, 0x1, 0x1, [@ipv4={'\x00', '\xff\xff', @private=0xa010102}, @ipv4={'\x00', '\xff\xff', @remote}, @empty, @local, @loopback, @ipv4={'\x00', '\xff\xff', @multicast2}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @rand_addr=' \x01\x00', @loopback, @mcast2], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x3, 'syz0\x00', {0x3a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x770) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x8, 0x80, 0x7, 0x18000, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x1, 0x0, @value, @void, @value}, 0x50) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]}, 0x78) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 433.416491ms ago: executing program 2 (id=773): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 165.644893ms ago: executing program 1 (id=774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x60, r1, 0x5, 0x4, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8eb, 0x6, 0x7, 0x8, 0x33, 0x4, 0x4, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x8000, 0x6, 0xba, 0x8, 0x8004, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 157.946409ms ago: executing program 4 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r1, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r1, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x10000001b) sendmsg$sock(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000900)="3aa1b1010d6c89", 0x7}], 0x1}, 0x8000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000380), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0286687, 0x0) syz_extract_tcp_res(&(0x7f00000003c0)={0x41424344, 0x41424344}, 0x3, 0x5) bind$alg(r4, &(0x7f0000002140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) syz_extract_tcp_res(&(0x7f0000000400)={0x41424344}, 0x6, 0xffff) write$tun(r4, &(0x7f00000021c0)=ANY=[@ANYBLOB="000088a20001250008000403bd054ad7108c0065000007069078640101007f000081830acd8e8689e98a1b9f880c8c06030030d13abc17938639fffffffe000e6568fa7c35dd8c90e91e452a0102cb72640e624eb7b90506b726c181010a6bfb2eafd1e64d8b0004d06406044e770603ab07031000004e204e220d58cb203be29dbd9df9eae3ffdf8b20eec0677dd8019ec36ea19d78bf44aa5ace0796bb8aa86f66984424f646557b82bdef8968f27bf867310ba647eacb6db6e09be71376137185ee467b620822a42765", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="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"], 0x109a) 0s ago: executing program 2 (id=776): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000440)={0x5, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x1d, 0x2, 0x6) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) accept$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000f2ffffffffffffff00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x10101, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0xffe0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000f40)="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", 0x3b5}], 0x1}}], 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='svcsock_tcp_recv_short\x00', r5, 0x0, 0x1b1}, 0x18) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000140)={0x0, 0x5c, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c000000010200ff000000000a0000000000000000000180080001dfab1e00010800020000000000"], 0x2c}}, 0x40000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1e9000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}, 0x8000}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): [ 167.834573][ T6703] bridge_slave_0: entered promiscuous mode [ 167.841899][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.850472][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.858003][ T6695] bridge_slave_1: entered allmulticast mode [ 167.866600][ T6695] bridge_slave_1: entered promiscuous mode [ 167.892624][ T6696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.902068][ T6703] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.909379][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.916939][ T6703] bridge_slave_1: entered allmulticast mode [ 167.923788][ T6703] bridge_slave_1: entered promiscuous mode [ 167.979957][ T6700] team0: Port device team_slave_0 added [ 167.989485][ T6700] team0: Port device team_slave_1 added [ 167.997909][ T6696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.024797][ T6695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.036983][ T6695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.070133][ T6696] team0: Port device team_slave_0 added [ 168.078652][ T6703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.117717][ T6696] team0: Port device team_slave_1 added [ 168.128973][ T6703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.159285][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.169608][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.197891][ T6700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.209916][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.217350][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.243705][ T6700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.279665][ T6695] team0: Port device team_slave_0 added [ 168.292339][ T6695] team0: Port device team_slave_1 added [ 168.320301][ T11] IPVS: stop unused estimator thread 0... [ 168.329653][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.336916][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.363351][ T6696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.380185][ T6703] team0: Port device team_slave_0 added [ 168.393871][ T5234] Bluetooth: hci0: command tx timeout [ 168.416323][ T6700] hsr_slave_0: entered promiscuous mode [ 168.422725][ T6700] hsr_slave_1: entered promiscuous mode [ 168.429337][ T6700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.437379][ T6700] Cannot create hsr debugfs directory [ 168.444462][ T6696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.451425][ T6696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.478553][ T6696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.499853][ T6703] team0: Port device team_slave_1 added [ 168.538917][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.546251][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.572392][ T6695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.585182][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.592160][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.618695][ T6695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.691140][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.698496][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.726509][ T6703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.741155][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.748447][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.774836][ T6703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.794274][ T5234] Bluetooth: hci1: command tx timeout [ 168.861027][ T6696] hsr_slave_0: entered promiscuous mode [ 168.867522][ T6696] hsr_slave_1: entered promiscuous mode [ 168.879037][ T6696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.887068][ T6696] Cannot create hsr debugfs directory [ 168.918425][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.954403][ T5519] Bluetooth: hci3: command tx timeout [ 168.958274][ T5234] Bluetooth: hci2: command tx timeout [ 168.960418][ T54] Bluetooth: hci4: command tx timeout [ 168.989565][ T6695] hsr_slave_0: entered promiscuous mode [ 168.997133][ T6695] hsr_slave_1: entered promiscuous mode [ 169.003169][ T6695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.012161][ T6695] Cannot create hsr debugfs directory [ 169.051103][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.131238][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.161797][ T6703] hsr_slave_0: entered promiscuous mode [ 169.168625][ T6703] hsr_slave_1: entered promiscuous mode [ 169.178376][ T6703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.186187][ T6703] Cannot create hsr debugfs directory [ 169.232735][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.502182][ T6692] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 169.543299][ T6700] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.582187][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.599642][ T6692] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 169.625149][ T6700] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.639346][ T6692] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 169.649154][ T6692] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 169.679944][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.711020][ T6700] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.751341][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.790023][ T6700] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.818318][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.871796][ T6692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.924029][ T6692] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.951349][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.958515][ T1601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.999269][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.006532][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.024885][ T6700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 170.059114][ T6700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 170.082896][ T6700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 170.098649][ T11] bridge_slave_1: left allmulticast mode [ 170.104905][ T11] bridge_slave_1: left promiscuous mode [ 170.110562][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.120610][ T11] bridge_slave_0: left allmulticast mode [ 170.127966][ T11] bridge_slave_0: left promiscuous mode [ 170.134942][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.483754][ T5519] Bluetooth: hci0: command tx timeout [ 170.575341][ T11] team0: Port device bridge1 removed [ 170.718503][ T11] team0: Port device bond0 removed [ 170.725674][ T11] bond0 (unregistering): Released all slaves [ 170.830313][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.841398][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.851853][ T11] bond0 (unregistering): Released all slaves [ 170.863077][ T6700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 170.883675][ T5519] Bluetooth: hci1: command tx timeout [ 171.036831][ T5519] Bluetooth: hci2: command tx timeout [ 171.043875][ T54] Bluetooth: hci4: command tx timeout [ 171.049378][ T5519] Bluetooth: hci3: command tx timeout [ 171.192472][ T6695] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.273950][ T6695] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.293410][ T6695] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.315027][ T6700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.334952][ T6695] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.354059][ T6692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.468020][ T6700] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.491882][ T11] hsr_slave_0: left promiscuous mode [ 171.498958][ T11] hsr_slave_1: left promiscuous mode [ 171.508298][ T11] hsr_slave_0: left promiscuous mode [ 171.519783][ T11] hsr_slave_1: left promiscuous mode [ 171.526084][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.534013][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.541769][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.549552][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.572666][ T11] veth1_macvtap: left promiscuous mode [ 171.578573][ T11] veth0_macvtap: left promiscuous mode [ 171.584426][ T11] veth1_vlan: left promiscuous mode [ 171.589714][ T11] veth0_vlan: left promiscuous mode [ 171.602400][ T11] veth1_macvtap: left promiscuous mode [ 171.608263][ T11] veth0_macvtap: left promiscuous mode [ 171.614471][ T11] veth1_vlan: left promiscuous mode [ 171.619776][ T11] veth0_vlan: left promiscuous mode [ 172.554564][ T5519] Bluetooth: hci0: command tx timeout [ 172.778702][ T11] team0 (unregistering): Port device team_slave_1 removed [ 172.816592][ T11] team0 (unregistering): Port device team_slave_0 removed [ 172.955205][ T5519] Bluetooth: hci1: command tx timeout [ 173.113696][ T5519] Bluetooth: hci3: command tx timeout [ 173.119168][ T5519] Bluetooth: hci4: command tx timeout [ 173.124757][ T54] Bluetooth: hci2: command tx timeout [ 173.136448][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.143620][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.153311][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.160506][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.288922][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.318534][ T6692] veth0_vlan: entered promiscuous mode [ 173.356910][ T6692] veth1_vlan: entered promiscuous mode [ 173.462075][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.511559][ T2509] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.518739][ T2509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.541420][ T2509] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.548573][ T2509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.570827][ T6696] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 173.609371][ T6696] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 173.668264][ T6696] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 173.712078][ T6696] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.723311][ T6692] veth0_macvtap: entered promiscuous mode [ 173.740230][ T6695] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.772867][ T6700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.796621][ T6692] veth1_macvtap: entered promiscuous mode [ 173.881501][ T11] IPVS: stop unused estimator thread 0... [ 173.907346][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.931740][ T11] IPVS: stop unused estimator thread 0... [ 173.971446][ T6692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.022512][ T6692] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.043832][ T6692] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.054771][ T6692] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.073676][ T6692] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.202552][ T6703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.226603][ T6695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.245424][ T6703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.277789][ T6703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.287183][ T6703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.305732][ T6700] veth0_vlan: entered promiscuous mode [ 174.316055][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.327314][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.353773][ T6700] veth1_vlan: entered promiscuous mode [ 174.416800][ T6696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.425725][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.439222][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.461393][ T6696] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.480598][ T6695] veth0_vlan: entered promiscuous mode [ 174.489143][ T6700] veth0_macvtap: entered promiscuous mode [ 174.511798][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.519067][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.539615][ T6695] veth1_vlan: entered promiscuous mode [ 174.583884][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.590969][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.602876][ T6700] veth1_macvtap: entered promiscuous mode [ 174.646064][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.657180][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.669938][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.702447][ T6700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.726996][ T6700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.738862][ T6700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.771653][ T6695] veth0_macvtap: entered promiscuous mode [ 174.801785][ T6700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.812291][ T6700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.827822][ T6700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.838895][ T6700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.908540][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.936214][ T6703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.944361][ T6695] veth1_macvtap: entered promiscuous mode [ 174.986877][ T6703] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.047242][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.060970][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.071611][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.082378][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 175.092971][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.107547][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.133276][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.156967][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.169314][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.179594][ T6695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.190769][ T6695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.202526][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.224515][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.231737][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.241282][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.248427][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.272444][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.305091][ T6695] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.319898][ T6695] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.330037][ T6695] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.338919][ T6695] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.401756][ T6696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.457747][ T6703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.484002][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.491871][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.625206][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.633906][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.687694][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.698740][ T65] bridge_slave_1: left allmulticast mode [ 175.716920][ T65] bridge_slave_1: left promiscuous mode [ 175.722988][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.730096][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.743129][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 175.753296][ T65] bridge_slave_0: left allmulticast mode [ 175.769447][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 175.773870][ T65] bridge_slave_0: left promiscuous mode [ 175.782652][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.782758][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 175.800698][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 175.810750][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 175.819154][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 176.110100][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.121233][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.132516][ T65] bond0 (unregistering): Released all slaves [ 176.238798][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.246882][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.460075][ T6703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.506188][ T6696] veth0_vlan: entered promiscuous mode [ 176.529281][ T6696] veth1_vlan: entered promiscuous mode [ 176.603134][ T6774] __nla_validate_parse: 1 callbacks suppressed [ 176.603153][ T6774] netlink: 64 bytes leftover after parsing attributes in process `syz.0.365'. [ 176.663364][ T6776] netlink: 'syz.4.366': attribute type 4 has an invalid length. [ 176.703537][ T29] audit: type=1107 audit(1728023782.383:2): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ILÌ' [ 176.735853][ T6696] veth0_macvtap: entered promiscuous mode [ 176.798114][ T6696] veth1_macvtap: entered promiscuous mode [ 176.864069][ T65] hsr_slave_0: left promiscuous mode [ 176.900264][ T65] hsr_slave_1: left promiscuous mode [ 176.921082][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.928721][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.936918][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.944651][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.965376][ T65] veth1_macvtap: left promiscuous mode [ 176.970959][ T65] veth0_macvtap: left promiscuous mode [ 176.976663][ T65] veth1_vlan: left promiscuous mode [ 176.981948][ T65] veth0_vlan: left promiscuous mode [ 177.394097][ T65] team0 (unregistering): Port device team_slave_1 removed [ 177.432958][ T65] team0 (unregistering): Port device team_slave_0 removed [ 177.836689][ T5519] Bluetooth: hci0: command tx timeout [ 177.838014][ T6703] veth0_vlan: entered promiscuous mode [ 177.860396][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.885538][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.903519][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.915963][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.928391][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.964624][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.975414][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.985475][ T6696] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.996284][ T6696] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.007405][ T6696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.026540][ T6703] veth1_vlan: entered promiscuous mode [ 178.136794][ T6696] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.145649][ T6696] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.154785][ T6696] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.163556][ T6696] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.195901][ T6797] netlink: 'syz.4.373': attribute type 9 has an invalid length. [ 178.227000][ T6797] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.373'. [ 178.278021][ T6759] chnl_net:caif_netlink_parms(): no params data found [ 178.342574][ T6802] x_tables: duplicate underflow at hook 2 [ 178.383192][ T6802] Bluetooth: MGMT ver 1.23 [ 178.401431][ T6800] netlink: 'syz.4.373': attribute type 9 has an invalid length. [ 178.410593][ T6800] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.373'. [ 178.434085][ T6703] veth0_macvtap: entered promiscuous mode [ 178.445356][ T6703] veth1_macvtap: entered promiscuous mode [ 178.461863][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.472794][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.483375][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.494548][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.504552][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.515058][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.526486][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.570337][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.582418][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.592770][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.606385][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.616697][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.627340][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.639241][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.650660][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.659175][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.667345][ T6759] bridge_slave_0: entered allmulticast mode [ 178.674493][ T6759] bridge_slave_0: entered promiscuous mode [ 178.702129][ T6703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.715146][ T6703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.724707][ T6703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.734551][ T6703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.748729][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.767848][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.777955][ T6759] bridge_slave_1: entered allmulticast mode [ 178.789833][ T6759] bridge_slave_1: entered promiscuous mode [ 178.937651][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.977241][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.001955][ T6810] netlink: 'syz.0.376': attribute type 9 has an invalid length. [ 179.021512][ T6810] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.376'. [ 179.088701][ T6759] team0: Port device team_slave_0 added [ 179.101528][ T6759] team0: Port device team_slave_1 added [ 179.110529][ T6813] x_tables: duplicate underflow at hook 2 [ 179.117119][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.125034][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.130172][ T6812] netlink: 'syz.0.376': attribute type 9 has an invalid length. [ 179.151529][ T6812] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.376'. [ 179.211185][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.218389][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.245885][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.278515][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.285704][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.317556][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.403274][ T6759] hsr_slave_0: entered promiscuous mode [ 179.412422][ T6759] hsr_slave_1: entered promiscuous mode [ 179.539525][ T2509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.546954][ T2523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.571520][ T2509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.582645][ T2523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.694959][ T1601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.735139][ T1601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.913941][ T5519] Bluetooth: hci0: command tx timeout [ 180.584392][ T6759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 180.678832][ T6759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 180.822457][ T6841] netlink: 'syz.2.383': attribute type 9 has an invalid length. [ 180.840137][ T6841] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.383'. [ 180.878940][ T6759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 180.945505][ T6759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 181.008066][ T6853] x_tables: duplicate underflow at hook 2 [ 181.061373][ T6851] netlink: 'syz.2.383': attribute type 9 has an invalid length. [ 181.085066][ T6851] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.383'. [ 181.340452][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.402520][ T6759] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.426752][ T6863] netlink: 68 bytes leftover after parsing attributes in process `syz.0.389'. [ 181.444770][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.452052][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.501491][ T2523] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.508690][ T2523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.583267][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 181.601756][ T6872] bM1®NuëöÉÑ30Ê: renamed from lo (while UP) [ 181.625828][ T6872] bM1®NuëöÉÑ30Ê: entered allmulticast mode [ 181.643112][ T6873] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 181.650021][ T6873] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 181.681010][ T6873] hsr_slave_0: left promiscuous mode [ 181.688098][ T6873] hsr_slave_1: left promiscuous mode [ 181.994890][ T5519] Bluetooth: hci0: command tx timeout [ 182.285276][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.396853][ T6759] veth0_vlan: entered promiscuous mode [ 182.464598][ T6759] veth1_vlan: entered promiscuous mode [ 182.528962][ T6895] netlink: 'syz.2.398': attribute type 9 has an invalid length. [ 182.542811][ T6759] veth0_macvtap: entered promiscuous mode [ 182.563061][ T6759] veth1_macvtap: entered promiscuous mode [ 182.576828][ T6895] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.398'. [ 182.608096][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.619251][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.631477][ T6900] x_tables: duplicate underflow at hook 2 [ 182.673348][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.700163][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.710672][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.721556][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.731590][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.742841][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.755514][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.780864][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.792729][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.802727][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.821942][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.833200][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.846377][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.856540][ T6759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.867654][ T6759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.881264][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.908286][ T6899] netlink: 'syz.2.398': attribute type 9 has an invalid length. [ 182.931186][ T6899] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.398'. [ 182.935196][ T6759] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.950868][ T6759] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.962969][ T6759] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.972242][ T6759] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.212592][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.245277][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.327669][ T1601] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.349015][ T1601] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.388248][ T6921] netlink: 'syz.0.404': attribute type 9 has an invalid length. [ 183.398113][ T6921] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.404'. [ 183.512665][ T6925] x_tables: duplicate underflow at hook 2 [ 183.651198][ T6923] netlink: 'syz.0.404': attribute type 9 has an invalid length. [ 183.774570][ T6923] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.404'. [ 184.472856][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.855534][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.065329][ T6937] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 185.103321][ T6938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 185.140550][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.155204][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.170357][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.231800][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.257861][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.271212][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.291194][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.340180][ T6948] netlink: 'syz.4.412': attribute type 2 has an invalid length. [ 185.406000][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.432944][ T6952] batman_adv: batadv0: Adding interface: dummy0 [ 185.452373][ T6952] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.488096][ T6952] batman_adv: batadv0: Interface activated: dummy0 [ 185.685818][ T12] bridge_slave_1: left allmulticast mode [ 185.710187][ T12] bridge_slave_1: left promiscuous mode [ 185.731418][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.741890][ T12] bridge_slave_0: left allmulticast mode [ 185.749783][ T12] bridge_slave_0: left promiscuous mode [ 185.756516][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.224433][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.274213][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.302139][ T12] bond0 (unregistering): Released all slaves [ 186.353883][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.416'. [ 186.828123][ T6939] chnl_net:caif_netlink_parms(): no params data found [ 187.060578][ T12] hsr_slave_0: left promiscuous mode [ 187.120251][ T12] hsr_slave_1: left promiscuous mode [ 187.177835][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.206191][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.225038][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.233066][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.317175][ T12] veth1_macvtap: left promiscuous mode [ 187.344308][ T12] veth0_macvtap: left promiscuous mode [ 187.357884][ T5519] Bluetooth: hci0: command tx timeout [ 187.371093][ T12] veth1_vlan: left promiscuous mode [ 187.400118][ T12] veth0_vlan: left promiscuous mode [ 187.982045][ T12] team0 (unregistering): Port device team_slave_1 removed [ 188.028462][ T12] team0 (unregistering): Port device team_slave_0 removed [ 188.470375][ T6984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.421'. [ 188.639827][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.665039][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.668348][ T7010] netlink: 'syz.1.428': attribute type 9 has an invalid length. [ 188.680777][ T6939] bridge_slave_0: entered allmulticast mode [ 188.694727][ T7010] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.428'. [ 188.700211][ T6939] bridge_slave_0: entered promiscuous mode [ 188.712698][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.720506][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.728616][ T6939] bridge_slave_1: entered allmulticast mode [ 188.736043][ T6939] bridge_slave_1: entered promiscuous mode [ 188.797029][ T7015] x_tables: duplicate underflow at hook 2 [ 188.873650][ T7013] netlink: 'syz.1.428': attribute type 9 has an invalid length. [ 188.881351][ T7013] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.428'. [ 188.892819][ T6939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.910155][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.030224][ T6939] team0: Port device team_slave_0 added [ 189.057009][ T6939] team0: Port device team_slave_1 added [ 189.124253][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.135272][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.162734][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.187762][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.207658][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.293492][ T6939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.311017][ T7024] syz_tun: entered promiscuous mode [ 189.438478][ T5519] Bluetooth: hci0: command tx timeout [ 189.626156][ T6939] hsr_slave_0: entered promiscuous mode [ 189.654874][ T7037] FAULT_INJECTION: forcing a failure. [ 189.654874][ T7037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.669420][ T6939] hsr_slave_1: entered promiscuous mode [ 189.670858][ T7037] CPU: 0 UID: 0 PID: 7037 Comm: syz.2.437 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 189.685576][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.695630][ T7037] Call Trace: [ 189.698897][ T7037] [ 189.701827][ T7037] dump_stack_lvl+0x241/0x360 [ 189.706525][ T7037] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.711717][ T7037] ? __pfx__printk+0x10/0x10 [ 189.716480][ T7037] ? __pfx_lock_release+0x10/0x10 [ 189.721538][ T7037] should_fail_ex+0x3b0/0x4e0 [ 189.726220][ T7037] _copy_from_iter+0x1ed/0x1d60 [ 189.731074][ T7037] ? __virt_addr_valid+0x183/0x530 [ 189.736184][ T7037] ? __pfx_lock_release+0x10/0x10 [ 189.741214][ T7037] ? __alloc_skb+0x28f/0x440 [ 189.745796][ T7037] ? __pfx__copy_from_iter+0x10/0x10 [ 189.751076][ T7037] ? __virt_addr_valid+0x183/0x530 [ 189.756230][ T7037] ? __virt_addr_valid+0x183/0x530 [ 189.761333][ T7037] ? __virt_addr_valid+0x45f/0x530 [ 189.766475][ T7037] ? __check_object_size+0x48e/0x900 [ 189.771762][ T7037] netlink_sendmsg+0x73d/0xcb0 [ 189.776546][ T7037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.781866][ T7037] ? aa_sock_msg_perm+0x91/0x160 [ 189.786804][ T7037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.792079][ T7037] __sock_sendmsg+0x221/0x270 [ 189.796758][ T7037] ____sys_sendmsg+0x52a/0x7e0 [ 189.801525][ T7037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 189.806818][ T7037] __sys_sendmsg+0x292/0x380 [ 189.811407][ T7037] ? __pfx___sys_sendmsg+0x10/0x10 [ 189.816554][ T7037] ? __pfx_vfs_write+0x10/0x10 [ 189.821338][ T7037] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.827669][ T7037] ? do_syscall_64+0x100/0x230 [ 189.832517][ T7037] ? do_syscall_64+0xb6/0x230 [ 189.837187][ T7037] do_syscall_64+0xf3/0x230 [ 189.841692][ T7037] ? clear_bhb_loop+0x35/0x90 [ 189.846364][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.852256][ T7037] RIP: 0033:0x7ff61817dff9 [ 189.856666][ T7037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.876271][ T7037] RSP: 002b:00007ff618fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.884700][ T7037] RAX: ffffffffffffffda RBX: 00007ff618336058 RCX: 00007ff61817dff9 [ 189.893188][ T7037] RDX: 00000000000408c4 RSI: 00000000200001c0 RDI: 0000000000000003 [ 189.901152][ T7037] RBP: 00007ff618fce090 R08: 0000000000000000 R09: 0000000000000000 [ 189.909117][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.917103][ T7037] R13: 0000000000000001 R14: 00007ff618336058 R15: 00007ffd4c15a078 [ 189.925096][ T7037] [ 190.260307][ T7051] netlink: 'syz.4.442': attribute type 9 has an invalid length. [ 190.294280][ T7051] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.442'. [ 190.381807][ T7055] netlink: 'syz.4.442': attribute type 9 has an invalid length. [ 190.410944][ T7051] x_tables: duplicate underflow at hook 2 [ 190.423045][ T7055] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.442'. [ 190.727840][ T6939] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.766651][ T6939] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.806563][ T6939] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.827259][ T6939] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.935811][ T7083] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.449'. [ 190.995877][ T6939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.023221][ T6939] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.036424][ T2509] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.043712][ T2509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.079130][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.086665][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.199752][ T7088] FAULT_INJECTION: forcing a failure. [ 191.199752][ T7088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.219874][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.0.452 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 191.230513][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 191.240583][ T7088] Call Trace: [ 191.243867][ T7088] [ 191.246794][ T7088] dump_stack_lvl+0x241/0x360 [ 191.251477][ T7088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.256673][ T7088] ? __pfx__printk+0x10/0x10 [ 191.261341][ T7088] ? __pfx_lock_release+0x10/0x10 [ 191.266383][ T7088] should_fail_ex+0x3b0/0x4e0 [ 191.271061][ T7088] _copy_from_iter+0x1ed/0x1d60 [ 191.275905][ T7088] ? __virt_addr_valid+0x183/0x530 [ 191.281013][ T7088] ? __pfx_lock_release+0x10/0x10 [ 191.286044][ T7088] ? __alloc_skb+0x28f/0x440 [ 191.290626][ T7088] ? __pfx__copy_from_iter+0x10/0x10 [ 191.295906][ T7088] ? __virt_addr_valid+0x183/0x530 [ 191.301008][ T7088] ? __virt_addr_valid+0x183/0x530 [ 191.306108][ T7088] ? __virt_addr_valid+0x45f/0x530 [ 191.311212][ T7088] ? __check_object_size+0x48e/0x900 [ 191.316493][ T7088] netlink_sendmsg+0x73d/0xcb0 [ 191.321254][ T7088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.326536][ T7088] ? aa_sock_msg_perm+0x91/0x160 [ 191.331469][ T7088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.336744][ T7088] __sock_sendmsg+0x221/0x270 [ 191.341429][ T7088] ____sys_sendmsg+0x52a/0x7e0 [ 191.346194][ T7088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.351496][ T7088] __sys_sendmsg+0x292/0x380 [ 191.356096][ T7088] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.361215][ T7088] ? __pfx_vfs_write+0x10/0x10 [ 191.365991][ T7088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 191.372328][ T7088] ? do_syscall_64+0x100/0x230 [ 191.377086][ T7088] ? do_syscall_64+0xb6/0x230 [ 191.381759][ T7088] do_syscall_64+0xf3/0x230 [ 191.386255][ T7088] ? clear_bhb_loop+0x35/0x90 [ 191.390929][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.396820][ T7088] RIP: 0033:0x7f3d0f97dff9 [ 191.401229][ T7088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.420854][ T7088] RSP: 002b:00007f3d1078c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.429268][ T7088] RAX: ffffffffffffffda RBX: 00007f3d0fb35f80 RCX: 00007f3d0f97dff9 [ 191.437237][ T7088] RDX: 00000000000408c4 RSI: 00000000200001c0 RDI: 0000000000000003 [ 191.445213][ T7088] RBP: 00007f3d1078c090 R08: 0000000000000000 R09: 0000000000000000 [ 191.453175][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.461138][ T7088] R13: 0000000000000000 R14: 00007f3d0fb35f80 R15: 00007fff09173158 [ 191.469119][ T7088] [ 191.518305][ T5519] Bluetooth: hci0: command tx timeout [ 191.610445][ T7095] dccp_v4_rcv: dropped packet with invalid checksum [ 191.718430][ T7098] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 191.745058][ T6939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.780869][ T6939] veth0_vlan: entered promiscuous mode [ 191.794057][ T6939] veth1_vlan: entered promiscuous mode [ 191.824882][ T6939] veth0_macvtap: entered promiscuous mode [ 191.834143][ T6939] veth1_macvtap: entered promiscuous mode [ 191.849479][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.862284][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.872572][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.883267][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.893359][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.905852][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.915952][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.926488][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.937751][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.963796][ T7098] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 192.100075][ T7114] netlink: 'syz.2.460': attribute type 4 has an invalid length. [ 192.114316][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.125385][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.146323][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.171131][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.195598][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.206771][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.217696][ T6939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.229125][ T6939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.269821][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.318889][ T6939] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.350494][ T6939] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.373788][ T6939] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.382536][ T6939] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.459761][ T7123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.462'. [ 192.647483][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.675609][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.740810][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.747344][ T7136] dccp_v4_rcv: dropped packet with invalid checksum [ 192.758228][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.908138][ T7138] netlink: 'syz.4.468': attribute type 9 has an invalid length. [ 192.916822][ T7138] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.468'. [ 192.991871][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 193.008411][ T7141] netlink: 'syz.4.468': attribute type 9 has an invalid length. [ 193.041897][ T7138] x_tables: duplicate underflow at hook 2 [ 193.154742][ T7143] FAULT_INJECTION: forcing a failure. [ 193.154742][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 193.167796][ T7143] CPU: 1 UID: 0 PID: 7143 Comm: syz.0.470 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 193.178512][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 193.188613][ T7143] Call Trace: [ 193.191928][ T7143] [ 193.194888][ T7143] dump_stack_lvl+0x241/0x360 [ 193.199609][ T7143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.204843][ T7143] ? __pfx__printk+0x10/0x10 [ 193.209482][ T7143] should_fail_ex+0x3b0/0x4e0 [ 193.214201][ T7143] ? skb_clone+0x20c/0x390 [ 193.218649][ T7143] should_failslab+0xac/0x100 [ 193.223415][ T7143] ? skb_clone+0x20c/0x390 [ 193.227867][ T7143] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 193.233274][ T7143] skb_clone+0x20c/0x390 [ 193.237548][ T7143] ? dev_queue_xmit_nit+0x220/0xc10 [ 193.242773][ T7143] dev_queue_xmit_nit+0x419/0xc10 [ 193.247827][ T7143] ? dev_queue_xmit_nit+0x2b/0xc10 [ 193.252944][ T7143] ? validate_xmit_skb+0x9f9/0x1120 [ 193.258148][ T7143] dev_hard_start_xmit+0x15f/0x7e0 [ 193.263261][ T7143] ? __pfx_validate_xmit_skb+0x10/0x10 [ 193.268725][ T7143] __dev_queue_xmit+0x1b11/0x3ed0 [ 193.273753][ T7143] ? kasan_save_track+0x51/0x80 [ 193.278621][ T7143] ? do_syscall_64+0xf3/0x230 [ 193.283307][ T7143] ? __dev_queue_xmit+0x2da/0x3ed0 [ 193.288430][ T7143] ? __pfx___dev_queue_xmit+0x10/0x10 [ 193.293816][ T7143] ? __copy_skb_header+0x437/0x5b0 [ 193.298942][ T7143] ? __asan_memcpy+0x40/0x70 [ 193.303542][ T7143] ? __copy_skb_header+0x437/0x5b0 [ 193.308700][ T7143] ? __skb_clone+0x454/0x6c0 [ 193.313308][ T7143] ? skb_clone+0x240/0x390 [ 193.317733][ T7143] __netlink_deliver_tap+0x54d/0x7c0 [ 193.323033][ T7143] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.328240][ T7143] netlink_deliver_tap+0x19d/0x1b0 [ 193.333357][ T7143] netlink_unicast+0x7c4/0x990 [ 193.338213][ T7143] ? __pfx_netlink_unicast+0x10/0x10 [ 193.343493][ T7143] ? __virt_addr_valid+0x183/0x530 [ 193.348625][ T7143] ? __check_object_size+0x48e/0x900 [ 193.353937][ T7143] netlink_sendmsg+0x8e4/0xcb0 [ 193.358803][ T7143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.364090][ T7143] ? aa_sock_msg_perm+0x91/0x160 [ 193.369041][ T7143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.374320][ T7143] __sock_sendmsg+0x221/0x270 [ 193.378998][ T7143] ____sys_sendmsg+0x52a/0x7e0 [ 193.383765][ T7143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.389072][ T7143] __sys_sendmsg+0x292/0x380 [ 193.393671][ T7143] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.398801][ T7143] ? __pfx_vfs_write+0x10/0x10 [ 193.403581][ T7143] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 193.409998][ T7143] ? do_syscall_64+0x100/0x230 [ 193.414761][ T7143] ? do_syscall_64+0xb6/0x230 [ 193.419434][ T7143] do_syscall_64+0xf3/0x230 [ 193.423931][ T7143] ? clear_bhb_loop+0x35/0x90 [ 193.428604][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.434496][ T7143] RIP: 0033:0x7f3d0f97dff9 [ 193.438906][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.458505][ T7143] RSP: 002b:00007f3d1078c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.466916][ T7143] RAX: ffffffffffffffda RBX: 00007f3d0fb35f80 RCX: 00007f3d0f97dff9 [ 193.474882][ T7143] RDX: 00000000000408c4 RSI: 00000000200001c0 RDI: 0000000000000003 [ 193.482933][ T7143] RBP: 00007f3d1078c090 R08: 0000000000000000 R09: 0000000000000000 [ 193.490897][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.498873][ T7143] R13: 0000000000000000 R14: 00007f3d0fb35f80 R15: 00007fff09173158 [ 193.506852][ T7143] [ 193.688706][ T7148] __nla_validate_parse: 1 callbacks suppressed [ 193.688726][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 193.755817][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 194.044732][ T7167] dccp_v4_rcv: dropped packet with invalid checksum [ 194.270787][ T7175] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 194.381844][ T7183] FAULT_INJECTION: forcing a failure. [ 194.381844][ T7183] name failslab, interval 1, probability 0, space 0, times 0 [ 194.404078][ T7183] CPU: 0 UID: 0 PID: 7183 Comm: syz.0.484 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 194.414731][ T7183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 194.424820][ T7183] Call Trace: [ 194.428129][ T7183] [ 194.431077][ T7183] dump_stack_lvl+0x241/0x360 [ 194.435785][ T7183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.441022][ T7183] ? __pfx__printk+0x10/0x10 [ 194.445654][ T7183] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 194.451235][ T7183] ? __pfx___might_resched+0x10/0x10 [ 194.456567][ T7183] should_fail_ex+0x3b0/0x4e0 [ 194.461285][ T7183] ? sk_prot_alloc+0x58/0x210 [ 194.466008][ T7183] should_failslab+0xac/0x100 [ 194.470723][ T7183] ? sk_prot_alloc+0x58/0x210 [ 194.475417][ T7183] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 194.480791][ T7183] ? __pfx_lock_release+0x10/0x10 [ 194.485820][ T7183] sk_prot_alloc+0x58/0x210 [ 194.490337][ T7183] ? sk_alloc+0x26/0x370 [ 194.494604][ T7183] sk_alloc+0x38/0x370 [ 194.498705][ T7183] inet_create+0x652/0xe70 [ 194.503151][ T7183] ? inet_create+0x9c/0xe70 [ 194.507770][ T7183] ? __sock_create+0x337/0x920 [ 194.512560][ T7183] __sock_create+0x490/0x920 [ 194.517192][ T7183] mptcp_subflow_create_socket+0x132/0xdf0 [ 194.523035][ T7183] ? look_up_lock_class+0x77/0x170 [ 194.528195][ T7183] ? register_lock_class+0x102/0x980 [ 194.533522][ T7183] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 194.539882][ T7183] ? __pfx_register_lock_class+0x10/0x10 [ 194.545558][ T7183] ? mark_lock+0x9a/0x360 [ 194.549926][ T7183] __mptcp_nmpc_sk+0x178/0x800 [ 194.554727][ T7183] ? __lock_acquire+0x1384/0x2050 [ 194.560229][ T7183] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 194.565562][ T7183] mptcp_connect+0x71/0xb20 [ 194.570108][ T7183] ? mark_lock+0x9a/0x360 [ 194.574469][ T7183] __inet_stream_connect+0x262/0xf30 [ 194.579793][ T7183] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.586161][ T7183] ? __local_bh_enable_ip+0x168/0x200 [ 194.591573][ T7183] ? lockdep_hardirqs_on+0x99/0x150 [ 194.596809][ T7183] ? __pfx___inet_stream_connect+0x10/0x10 [ 194.602649][ T7183] ? __local_bh_enable_ip+0x168/0x200 [ 194.608063][ T7183] ? inet_stream_connect+0x50/0xa0 [ 194.613220][ T7183] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 194.618989][ T7183] inet_stream_connect+0x65/0xa0 [ 194.623972][ T7183] ? __pfx_inet_stream_connect+0x10/0x10 [ 194.629642][ T7183] __sys_connect+0x2d1/0x300 [ 194.634270][ T7183] ? __pfx___sys_connect+0x10/0x10 [ 194.639424][ T7183] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 194.645785][ T7183] ? do_syscall_64+0x100/0x230 [ 194.650585][ T7183] __x64_sys_connect+0x7a/0x90 [ 194.655392][ T7183] do_syscall_64+0xf3/0x230 [ 194.659924][ T7183] ? clear_bhb_loop+0x35/0x90 [ 194.664631][ T7183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.670532][ T7183] RIP: 0033:0x7f3d0f97dff9 [ 194.674944][ T7183] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.694554][ T7183] RSP: 002b:00007f3d1078c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 194.702966][ T7183] RAX: ffffffffffffffda RBX: 00007f3d0fb35f80 RCX: 00007f3d0f97dff9 [ 194.711109][ T7183] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000007 [ 194.719075][ T7183] RBP: 00007f3d1078c090 R08: 0000000000000000 R09: 0000000000000000 [ 194.727051][ T7183] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.735017][ T7183] R13: 0000000000000000 R14: 00007f3d0fb35f80 R15: 00007fff09173158 [ 194.742999][ T7183] [ 194.763164][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.773522][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.237739][ T2538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.985833][ T7197] dccp_v4_rcv: dropped packet with invalid checksum [ 196.115298][ T2538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.318260][ T2538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.379429][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.389091][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.399274][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.409139][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.429499][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 196.438361][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.589165][ T7226] netlink: 'syz.2.498': attribute type 9 has an invalid length. [ 196.597086][ T7226] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.498'. [ 196.691784][ T7230] x_tables: duplicate underflow at hook 2 [ 196.752634][ T7232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.500'. [ 196.831259][ T2538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.873203][ T7229] netlink: 'syz.2.498': attribute type 9 has an invalid length. [ 197.031535][ T7229] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.498'. [ 197.042995][ T7215] chnl_net:caif_netlink_parms(): no params data found [ 197.057224][ T7238] netlink: 76 bytes leftover after parsing attributes in process `syz.4.502'. [ 197.158194][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 197.173716][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.503'. [ 197.184514][ T7240] netlink: 32 bytes leftover after parsing attributes in process `syz.0.503'. [ 197.207379][ T2538] bridge_slave_1: left allmulticast mode [ 197.231046][ T2538] bridge_slave_1: left promiscuous mode [ 197.247319][ T5519] block nbd0: Receive control failed (result -107) [ 197.268876][ T2538] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.302955][ T2538] bridge_slave_0: left allmulticast mode [ 197.309456][ T2538] bridge_slave_0: left promiscuous mode [ 197.315893][ T2538] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.323990][ T7247] dccp_v4_rcv: dropped packet with invalid checksum [ 197.615418][ T7258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.508'. [ 197.831927][ T2538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.843339][ T2538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.855135][ T2538] bond0 (unregistering): Released all slaves [ 198.069769][ T7271] FAULT_INJECTION: forcing a failure. [ 198.069769][ T7271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.079285][ T7215] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.124268][ T7215] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.125930][ T7271] CPU: 0 UID: 0 PID: 7271 Comm: syz.2.522 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 198.141921][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 198.151999][ T7271] Call Trace: [ 198.155014][ T7215] bridge_slave_0: entered allmulticast mode [ 198.155277][ T7271] [ 198.155289][ T7271] dump_stack_lvl+0x241/0x360 [ 198.168795][ T7271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.174024][ T7271] ? __pfx__printk+0x10/0x10 [ 198.178654][ T7271] ? __pfx_lock_release+0x10/0x10 [ 198.182156][ T7215] bridge_slave_0: entered promiscuous mode [ 198.183703][ T7271] should_fail_ex+0x3b0/0x4e0 [ 198.183740][ T7271] _copy_from_user+0x2f/0xe0 [ 198.183764][ T7271] copy_msghdr_from_user+0xae/0x680 [ 198.183794][ T7271] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 198.209857][ T7271] __sys_sendmsg+0x22d/0x380 [ 198.214483][ T7271] ? __pfx___sys_sendmsg+0x10/0x10 [ 198.219623][ T7271] ? __pfx_vfs_write+0x10/0x10 [ 198.224424][ T7271] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.230794][ T7271] ? do_syscall_64+0x100/0x230 [ 198.235594][ T7271] ? do_syscall_64+0xb6/0x230 [ 198.240295][ T7271] do_syscall_64+0xf3/0x230 [ 198.244834][ T7271] ? clear_bhb_loop+0x35/0x90 [ 198.249507][ T7271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.255410][ T7271] RIP: 0033:0x7ff61817dff9 [ 198.259839][ T7271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.279550][ T7271] RSP: 002b:00007ff618fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.287994][ T7271] RAX: ffffffffffffffda RBX: 00007ff618336058 RCX: 00007ff61817dff9 [ 198.296022][ T7271] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 198.304111][ T7271] RBP: 00007ff618fce090 R08: 0000000000000000 R09: 0000000000000000 [ 198.312115][ T7271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.320173][ T7271] R13: 0000000000000001 R14: 00007ff618336058 R15: 00007ffd4c15a078 [ 198.328243][ T7271] [ 198.419666][ T7215] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.427009][ T7215] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.443340][ T7215] bridge_slave_1: entered allmulticast mode [ 198.474241][ T5519] Bluetooth: hci0: command tx timeout [ 198.504278][ T7215] bridge_slave_1: entered promiscuous mode [ 198.528727][ T7275] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 198.683983][ T7293] dccp_v4_rcv: dropped packet with invalid checksum [ 198.931710][ T7215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.979140][ T7215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.029510][ T2538] hsr_slave_0: left promiscuous mode [ 199.047181][ T2538] hsr_slave_1: left promiscuous mode [ 199.061131][ T2538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.071429][ T2538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.083980][ T2538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.084049][ T7306] netlink: 'syz.0.521': attribute type 12 has an invalid length. [ 199.091540][ T2538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.125325][ T2538] veth1_macvtap: left promiscuous mode [ 199.131268][ T2538] veth0_macvtap: left promiscuous mode [ 199.139672][ T7306] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.521'. [ 199.140827][ T2538] veth1_vlan: left promiscuous mode [ 199.155809][ T2538] veth0_vlan: left promiscuous mode [ 200.019565][ T2538] team0 (unregistering): Port device team_slave_1 removed [ 200.080926][ T2538] team0 (unregistering): Port device team_slave_0 removed [ 200.553607][ T5519] Bluetooth: hci0: command tx timeout [ 200.703150][ T7302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.521'. [ 200.733000][ T7305] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 200.741113][ T7305] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 200.826383][ T7316] bridge_slave_0: left allmulticast mode [ 200.860972][ T7316] bridge_slave_0: left promiscuous mode [ 200.874066][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.902620][ T7316] bridge_slave_1: left allmulticast mode [ 200.913840][ T7316] bridge_slave_1: left promiscuous mode [ 200.919626][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.942081][ T7316] bond0: (slave bond_slave_0): Releasing backup interface [ 200.961262][ T7316] bond0: (slave bond_slave_1): Releasing backup interface [ 201.010282][ T7316] team0: Port device team_slave_0 removed [ 201.034942][ T7316] team0: Port device team_slave_1 removed [ 201.041435][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.060608][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.068859][ T7325] x_tables: duplicate underflow at hook 2 [ 201.085275][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.092739][ T7316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.135870][ T7317] netlink: 'syz.2.527': attribute type 10 has an invalid length. [ 201.164956][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.176473][ T7317] team0: Port device bond0 added [ 201.276112][ T7323] netlink: 'syz.1.529': attribute type 9 has an invalid length. [ 201.303745][ T7323] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.529'. [ 201.314709][ T7215] team0: Port device team_slave_0 added [ 201.336017][ T7328] dccp_v4_rcv: dropped packet with invalid checksum [ 201.357315][ T7215] team0: Port device team_slave_1 added [ 201.482072][ T7324] netlink: 'syz.1.529': attribute type 9 has an invalid length. [ 201.508525][ T7324] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.529'. [ 201.510779][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.546550][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.613136][ T7215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.646008][ T7215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.655103][ T7215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.690748][ T7215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.757202][ T7338] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 201.828267][ T7215] hsr_slave_0: entered promiscuous mode [ 201.868142][ T7215] hsr_slave_1: entered promiscuous mode [ 202.324193][ T7215] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 202.365770][ T7215] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 202.388821][ T7215] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 202.418552][ T7215] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 202.597928][ T7215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.631707][ T7215] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.643620][ T5519] Bluetooth: hci0: command tx timeout [ 202.657751][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.664976][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.682610][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.689834][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.933947][ T7370] dccp_v4_rcv: dropped packet with invalid checksum [ 203.170583][ T7215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.242224][ T7381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.547'. [ 203.265648][ T7381] netlink: 'syz.1.547': attribute type 12 has an invalid length. [ 203.285971][ T7381] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.547'. [ 203.299000][ T7215] veth0_vlan: entered promiscuous mode [ 203.320804][ T7215] veth1_vlan: entered promiscuous mode [ 203.367918][ T7384] netlink: 'syz.0.548': attribute type 1 has an invalid length. [ 203.397467][ T7384] netlink: 9328 bytes leftover after parsing attributes in process `syz.0.548'. [ 203.420067][ T7215] veth0_macvtap: entered promiscuous mode [ 203.442996][ T7215] veth1_macvtap: entered promiscuous mode [ 203.498235][ T7388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.575289][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.603686][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.624099][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.643552][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.669605][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.743682][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.767990][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.788177][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.810041][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.839639][ T7215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.858318][ T7396] netlink: 'syz.4.552': attribute type 9 has an invalid length. [ 203.873597][ T7215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.883697][ T7396] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.552'. [ 203.904824][ T7215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.977413][ T7397] netlink: 'syz.4.552': attribute type 9 has an invalid length. [ 203.986227][ T7215] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.008461][ T7215] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.017567][ T7397] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.552'. [ 204.033524][ T7215] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.042931][ T7215] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.290471][ T2538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.323539][ T2538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.402737][ T7403] netlink: 24 bytes leftover after parsing attributes in process `syz.4.553'. [ 204.477752][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.495715][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.714182][ T5519] Bluetooth: hci0: command tx timeout [ 204.799468][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 205.107683][ T7427] pim6reg1: entered promiscuous mode [ 205.113042][ T7427] pim6reg1: entered allmulticast mode [ 205.153586][ T7427] netlink: 'syz.1.562': attribute type 10 has an invalid length. [ 205.171643][ T7427] netlink: 40 bytes leftover after parsing attributes in process `syz.1.562'. [ 205.195924][ T7427] batman_adv: batadv0: Adding interface: virt_wifi0 [ 205.210374][ T7427] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.241491][ T7427] batman_adv: batadv0: Interface activated: virt_wifi0 [ 205.290435][ T7440] netlink: 104 bytes leftover after parsing attributes in process `syz.0.566'. [ 205.302901][ T7440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.566'. [ 205.419919][ T7447] FAULT_INJECTION: forcing a failure. [ 205.419919][ T7447] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.473873][ T7447] CPU: 1 UID: 0 PID: 7447 Comm: syz.1.570 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 205.484534][ T7447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.494790][ T7447] Call Trace: [ 205.498094][ T7447] [ 205.501048][ T7447] dump_stack_lvl+0x241/0x360 [ 205.505754][ T7447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.510990][ T7447] ? __pfx__printk+0x10/0x10 [ 205.515624][ T7447] ? __pfx_lock_release+0x10/0x10 [ 205.520692][ T7447] should_fail_ex+0x3b0/0x4e0 [ 205.525405][ T7447] _copy_from_iter+0x1ed/0x1d60 [ 205.530279][ T7447] ? __virt_addr_valid+0x183/0x530 [ 205.535416][ T7447] ? __pfx_lock_release+0x10/0x10 [ 205.540491][ T7447] ? __alloc_skb+0x28f/0x440 [ 205.545103][ T7447] ? __pfx__copy_from_iter+0x10/0x10 [ 205.550417][ T7447] ? __virt_addr_valid+0x183/0x530 [ 205.555554][ T7447] ? __virt_addr_valid+0x183/0x530 [ 205.560676][ T7447] ? __virt_addr_valid+0x45f/0x530 [ 205.565794][ T7447] ? __check_object_size+0x48e/0x900 [ 205.572235][ T7447] netlink_sendmsg+0x73d/0xcb0 [ 205.577033][ T7447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.582346][ T7447] ? aa_sock_msg_perm+0x91/0x160 [ 205.587303][ T7447] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.592585][ T7447] __sock_sendmsg+0x221/0x270 [ 205.597262][ T7447] ____sys_sendmsg+0x52a/0x7e0 [ 205.602028][ T7447] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.607326][ T7447] __sys_sendmsg+0x292/0x380 [ 205.611914][ T7447] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.617032][ T7447] ? __pfx_vfs_write+0x10/0x10 [ 205.621806][ T7447] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.628130][ T7447] ? do_syscall_64+0x100/0x230 [ 205.632898][ T7447] ? do_syscall_64+0xb6/0x230 [ 205.637657][ T7447] do_syscall_64+0xf3/0x230 [ 205.642154][ T7447] ? clear_bhb_loop+0x35/0x90 [ 205.646825][ T7447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.652713][ T7447] RIP: 0033:0x7f826b37dff9 [ 205.657124][ T7447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.676728][ T7447] RSP: 002b:00007f826c0fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.685142][ T7447] RAX: ffffffffffffffda RBX: 00007f826b535f80 RCX: 00007f826b37dff9 [ 205.693120][ T7447] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 205.701109][ T7447] RBP: 00007f826c0fd090 R08: 0000000000000000 R09: 0000000000000000 [ 205.709171][ T7447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.717135][ T7447] R13: 0000000000000000 R14: 00007f826b535f80 R15: 00007fffffbacdc8 [ 205.725111][ T7447] [ 205.786176][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.109683][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.349346][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.448214][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.546954][ T12] bridge_slave_1: left allmulticast mode [ 206.552649][ T12] bridge_slave_1: left promiscuous mode [ 206.561399][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.570987][ T12] bridge_slave_0: left allmulticast mode [ 206.577136][ T12] bridge_slave_0: left promiscuous mode [ 206.582842][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.883214][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 206.928362][ T5519] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.937967][ T5519] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.948305][ T5519] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.967681][ T5519] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.980047][ T5519] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 206.987588][ T5519] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.183875][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 207.257906][ T7479] dccp_v4_rcv: dropped packet with invalid checksum [ 207.541935][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.554686][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.567188][ T12] bond0 (unregistering): Released all slaves [ 207.772550][ T7486] netlink: 'syz.0.584': attribute type 9 has an invalid length. [ 207.793316][ T7486] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.584'. [ 207.902923][ T7493] x_tables: duplicate underflow at hook 2 [ 207.979393][ T12] hsr_slave_0: left promiscuous mode [ 207.985841][ T7490] netlink: 'syz.0.584': attribute type 9 has an invalid length. [ 208.003897][ T7490] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.584'. [ 208.025865][ T12] hsr_slave_1: left promiscuous mode [ 208.032657][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.041132][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.049521][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.057453][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.076955][ T12] veth1_macvtap: left promiscuous mode [ 208.082866][ T12] veth0_macvtap: left promiscuous mode [ 208.089449][ T12] veth1_vlan: left promiscuous mode [ 208.094930][ T12] veth0_vlan: left promiscuous mode [ 208.511071][ T12] team0 (unregistering): Port device team_slave_1 removed [ 208.552271][ T12] team0 (unregistering): Port device team_slave_0 removed [ 208.965471][ T7483] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 208.982934][ T7464] chnl_net:caif_netlink_parms(): no params data found [ 209.033678][ T5519] Bluetooth: hci0: command tx timeout [ 209.254288][ T7515] dccp_v4_rcv: dropped packet with invalid checksum [ 209.352891][ T7464] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.360519][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.405393][ T7464] bridge_slave_0: entered allmulticast mode [ 209.436844][ T7464] bridge_slave_0: entered promiscuous mode [ 209.460855][ T7464] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.468789][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.478406][ T7464] bridge_slave_1: entered allmulticast mode [ 209.485465][ T7464] bridge_slave_1: entered promiscuous mode [ 209.604909][ T7464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.649966][ T7464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.677115][ T7532] FAULT_INJECTION: forcing a failure. [ 209.677115][ T7532] name failslab, interval 1, probability 0, space 0, times 0 [ 209.697363][ T7532] CPU: 0 UID: 0 PID: 7532 Comm: syz.2.597 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 209.708016][ T7532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.718188][ T7532] Call Trace: [ 209.721494][ T7532] [ 209.724447][ T7532] dump_stack_lvl+0x241/0x360 [ 209.729149][ T7532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.734371][ T7532] ? __pfx__printk+0x10/0x10 [ 209.739001][ T7532] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 209.744483][ T7532] ? __pfx___might_resched+0x10/0x10 [ 209.749779][ T7532] should_fail_ex+0x3b0/0x4e0 [ 209.754469][ T7532] should_failslab+0xac/0x100 [ 209.759134][ T7532] ? rtnl_newlink+0xf2/0x20a0 [ 209.763800][ T7532] __kmalloc_cache_noprof+0x6c/0x2c0 [ 209.769077][ T7532] rtnl_newlink+0xf2/0x20a0 [ 209.773603][ T7532] ? __pfx_lock_acquire+0x10/0x10 [ 209.778620][ T7532] ? __mutex_lock+0x9a1/0xd70 [ 209.783284][ T7532] ? __pfx_lock_release+0x10/0x10 [ 209.788299][ T7532] ? do_raw_spin_lock+0x14f/0x370 [ 209.793593][ T7532] ? __pfx_rtnl_newlink+0x10/0x10 [ 209.798628][ T7532] ? do_raw_spin_unlock+0x13c/0x8b0 [ 209.803826][ T7532] ? __mutex_lock+0x9ab/0xd70 [ 209.808513][ T7532] ? __mutex_lock+0x52a/0xd70 [ 209.813181][ T7532] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 209.818282][ T7532] ? __pfx___mutex_lock+0x10/0x10 [ 209.823302][ T7532] ? __pfx_rtnl_newlink+0x10/0x10 [ 209.828313][ T7532] rtnetlink_rcv_msg+0x73f/0xcf0 [ 209.833240][ T7532] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 209.838343][ T7532] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.843797][ T7532] ? ref_tracker_free+0x643/0x7e0 [ 209.848808][ T7532] netlink_rcv_skb+0x1e3/0x430 [ 209.853567][ T7532] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 209.859014][ T7532] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.864301][ T7532] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.869503][ T7532] netlink_unicast+0x7f6/0x990 [ 209.874263][ T7532] ? __pfx_netlink_unicast+0x10/0x10 [ 209.879549][ T7532] ? __virt_addr_valid+0x183/0x530 [ 209.884656][ T7532] ? __check_object_size+0x48e/0x900 [ 209.889932][ T7532] netlink_sendmsg+0x8e4/0xcb0 [ 209.894693][ T7532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.899964][ T7532] ? aa_sock_msg_perm+0x91/0x160 [ 209.904891][ T7532] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.910158][ T7532] __sock_sendmsg+0x221/0x270 [ 209.914829][ T7532] ____sys_sendmsg+0x52a/0x7e0 [ 209.919583][ T7532] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.924863][ T7532] __sys_sendmsg+0x292/0x380 [ 209.929438][ T7532] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.934548][ T7532] ? __pfx_vfs_write+0x10/0x10 [ 209.939311][ T7532] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.945660][ T7532] ? do_syscall_64+0x100/0x230 [ 209.950488][ T7532] ? do_syscall_64+0xb6/0x230 [ 209.955170][ T7532] do_syscall_64+0xf3/0x230 [ 209.959685][ T7532] ? clear_bhb_loop+0x35/0x90 [ 209.964355][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.970242][ T7532] RIP: 0033:0x7ff61817dff9 [ 209.974647][ T7532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.994266][ T7532] RSP: 002b:00007ff618fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.002706][ T7532] RAX: ffffffffffffffda RBX: 00007ff618336058 RCX: 00007ff61817dff9 [ 210.010673][ T7532] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 210.018657][ T7532] RBP: 00007ff618fce090 R08: 0000000000000000 R09: 0000000000000000 [ 210.026647][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.034611][ T7532] R13: 0000000000000001 R14: 00007ff618336058 R15: 00007ffd4c15a078 [ 210.042596][ T7532] [ 210.155196][ T7464] team0: Port device team_slave_0 added [ 210.179079][ T7464] team0: Port device team_slave_1 added [ 210.287285][ T7546] Illegal XDP return value 4088409009 on prog (id 143) dev N/A, expect packet loss! [ 210.293610][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.314134][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.342223][ T7464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.358648][ T7464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.365758][ T7464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.397405][ T7464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.552808][ T7559] dccp_v4_rcv: dropped packet with invalid checksum [ 210.871523][ T7464] hsr_slave_0: entered promiscuous mode [ 210.914294][ T7464] hsr_slave_1: entered promiscuous mode [ 211.113633][ T5519] Bluetooth: hci0: command 0x041b tx timeout [ 211.374184][ T7578] FAULT_INJECTION: forcing a failure. [ 211.374184][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 211.401425][ T7578] CPU: 0 UID: 0 PID: 7578 Comm: syz.4.614 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 211.412079][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.422247][ T7578] Call Trace: [ 211.425545][ T7578] [ 211.428493][ T7578] dump_stack_lvl+0x241/0x360 [ 211.433199][ T7578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.434116][ T7580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.613'. [ 211.438412][ T7578] ? __pfx__printk+0x10/0x10 [ 211.451755][ T7578] ? __kmalloc_node_noprof+0xb7/0x440 [ 211.457132][ T7578] ? __pfx___might_resched+0x10/0x10 [ 211.462418][ T7578] should_fail_ex+0x3b0/0x4e0 [ 211.467099][ T7578] should_failslab+0xac/0x100 [ 211.471773][ T7578] __kmalloc_node_noprof+0xdf/0x440 [ 211.476967][ T7578] ? __kvmalloc_node_noprof+0x72/0x190 [ 211.482422][ T7578] ? __pfx_hsr_dev_setup+0x10/0x10 [ 211.487533][ T7578] __kvmalloc_node_noprof+0x72/0x190 [ 211.492814][ T7578] alloc_netdev_mqs+0x9b/0x1000 [ 211.497661][ T7578] ? __pfx_hsr_dev_setup+0x10/0x10 [ 211.502769][ T7578] ? bpf_lsm_capable+0x9/0x10 [ 211.507443][ T7578] rtnl_create_link+0x2f9/0xc20 [ 211.512291][ T7578] rtnl_newlink+0x1423/0x20a0 [ 211.516970][ T7578] ? rtnl_newlink+0xad1/0x20a0 [ 211.521751][ T7578] ? __pfx_rtnl_newlink+0x10/0x10 [ 211.526786][ T7578] ? do_raw_spin_unlock+0x13c/0x8b0 [ 211.532013][ T7578] ? __mutex_lock+0x9ab/0xd70 [ 211.536702][ T7578] ? __mutex_lock+0x52a/0xd70 [ 211.541398][ T7578] ? __pfx_rtnl_newlink+0x10/0x10 [ 211.546427][ T7578] rtnetlink_rcv_msg+0x73f/0xcf0 [ 211.551370][ T7578] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 211.556483][ T7578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.561943][ T7578] ? ref_tracker_free+0x643/0x7e0 [ 211.566973][ T7578] netlink_rcv_skb+0x1e3/0x430 [ 211.571761][ T7578] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.577217][ T7578] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.582516][ T7578] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.587712][ T7578] netlink_unicast+0x7f6/0x990 [ 211.592482][ T7578] ? __pfx_netlink_unicast+0x10/0x10 [ 211.597768][ T7578] ? __virt_addr_valid+0x183/0x530 [ 211.602876][ T7578] ? __check_object_size+0x48e/0x900 [ 211.608159][ T7578] netlink_sendmsg+0x8e4/0xcb0 [ 211.612924][ T7578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.618205][ T7578] ? aa_sock_msg_perm+0x91/0x160 [ 211.623146][ T7578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.628429][ T7578] __sock_sendmsg+0x221/0x270 [ 211.633114][ T7578] ____sys_sendmsg+0x52a/0x7e0 [ 211.637880][ T7578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.643206][ T7578] __sys_sendmsg+0x292/0x380 [ 211.647814][ T7578] ? __pfx___sys_sendmsg+0x10/0x10 [ 211.652932][ T7578] ? __pfx_vfs_write+0x10/0x10 [ 211.657713][ T7578] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.664043][ T7578] ? do_syscall_64+0x100/0x230 [ 211.668804][ T7578] ? do_syscall_64+0xb6/0x230 [ 211.673477][ T7578] do_syscall_64+0xf3/0x230 [ 211.677974][ T7578] ? clear_bhb_loop+0x35/0x90 [ 211.682656][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.688550][ T7578] RIP: 0033:0x7efcaa77dff9 [ 211.692961][ T7578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.712572][ T7578] RSP: 002b:00007efcab637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.720988][ T7578] RAX: ffffffffffffffda RBX: 00007efcaa935f80 RCX: 00007efcaa77dff9 [ 211.728960][ T7578] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 211.736926][ T7578] RBP: 00007efcab637090 R08: 0000000000000000 R09: 0000000000000000 [ 211.744895][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.752877][ T7578] R13: 0000000000000000 R14: 00007efcaa935f80 R15: 00007ffdfde3b548 [ 211.760857][ T7578] [ 212.235993][ T7603] netlink: 44 bytes leftover after parsing attributes in process `syz.0.623'. [ 212.551968][ T7464] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.569254][ T7464] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.580515][ T7464] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.593255][ T7464] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.707484][ T7464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.744794][ T7464] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.789362][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.796587][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.825352][ T2509] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.832705][ T2509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.127835][ T7464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.175043][ T7464] veth0_vlan: entered promiscuous mode [ 213.194279][ T5519] Bluetooth: hci0: command 0x041b tx timeout [ 213.198198][ T7464] veth1_vlan: entered promiscuous mode [ 213.262717][ T7464] veth0_macvtap: entered promiscuous mode [ 213.287474][ T7464] veth1_macvtap: entered promiscuous mode [ 213.309041][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.321952][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.333100][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.343973][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.361872][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.381280][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.392193][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.410158][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.422673][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.449889][ T7464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.468496][ T7464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.495795][ T7464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.518843][ T7464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.528401][ T7464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.540717][ T7464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.561195][ T7464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.774212][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.800151][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.876290][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.913718][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.977265][ T7662] netlink: 40 bytes leftover after parsing attributes in process `syz.0.643'. [ 214.769893][ T7709] FAULT_INJECTION: forcing a failure. [ 214.769893][ T7709] name failslab, interval 1, probability 0, space 0, times 0 [ 214.809886][ T7709] CPU: 0 UID: 0 PID: 7709 Comm: syz.4.658 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 214.820537][ T7709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 214.830624][ T7709] Call Trace: [ 214.834017][ T7709] [ 214.836971][ T7709] dump_stack_lvl+0x241/0x360 [ 214.841704][ T7709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.846935][ T7709] ? __pfx__printk+0x10/0x10 [ 214.851574][ T7709] should_fail_ex+0x3b0/0x4e0 [ 214.856286][ T7709] should_failslab+0xac/0x100 [ 214.860990][ T7709] ? __hw_addr_add_ex+0x1a8/0x610 [ 214.866049][ T7709] __kmalloc_cache_noprof+0x6c/0x2c0 [ 214.871378][ T7709] __hw_addr_add_ex+0x1a8/0x610 [ 214.876268][ T7709] dev_addr_init+0x143/0x230 [ 214.880899][ T7709] ? __pfx_dev_addr_init+0x10/0x10 [ 214.886056][ T7709] alloc_netdev_mqs+0x2a1/0x1000 [ 214.891033][ T7709] ? __pfx_hsr_dev_setup+0x10/0x10 [ 214.896190][ T7709] rtnl_create_link+0x2f9/0xc20 [ 214.901088][ T7709] rtnl_newlink+0x1423/0x20a0 [ 214.905801][ T7709] ? rtnl_newlink+0xad1/0x20a0 [ 214.910618][ T7709] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.915671][ T7709] ? __pfx___mutex_trylock_common+0x10/0x10 [ 214.921613][ T7709] ? rcu_is_watching+0x15/0xb0 [ 214.926393][ T7709] ? trace_contention_end+0x3c/0x120 [ 214.931680][ T7709] ? __mutex_lock+0x2ef/0xd70 [ 214.936378][ T7709] ? __pfx_lock_release+0x10/0x10 [ 214.941440][ T7709] ? __pfx_rtnl_newlink+0x10/0x10 [ 214.946479][ T7709] rtnetlink_rcv_msg+0x73f/0xcf0 [ 214.951423][ T7709] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 214.956537][ T7709] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.962003][ T7709] ? ref_tracker_free+0x643/0x7e0 [ 214.967040][ T7709] netlink_rcv_skb+0x1e3/0x430 [ 214.971808][ T7709] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 214.977266][ T7709] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.982572][ T7709] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.987781][ T7709] netlink_unicast+0x7f6/0x990 [ 214.992547][ T7709] ? __pfx_netlink_unicast+0x10/0x10 [ 214.997831][ T7709] ? __virt_addr_valid+0x183/0x530 [ 215.002949][ T7709] ? __check_object_size+0x48e/0x900 [ 215.008248][ T7709] netlink_sendmsg+0x8e4/0xcb0 [ 215.013024][ T7709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.018395][ T7709] ? aa_sock_msg_perm+0x91/0x160 [ 215.023332][ T7709] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.028627][ T7709] __sock_sendmsg+0x221/0x270 [ 215.033306][ T7709] ____sys_sendmsg+0x52a/0x7e0 [ 215.038072][ T7709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.043460][ T7709] __sys_sendmsg+0x292/0x380 [ 215.048046][ T7709] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.053161][ T7709] ? __pfx_vfs_write+0x10/0x10 [ 215.057936][ T7709] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.064287][ T7709] ? do_syscall_64+0x100/0x230 [ 215.069063][ T7709] ? do_syscall_64+0xb6/0x230 [ 215.073743][ T7709] do_syscall_64+0xf3/0x230 [ 215.078242][ T7709] ? clear_bhb_loop+0x35/0x90 [ 215.082914][ T7709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.088850][ T7709] RIP: 0033:0x7efcaa77dff9 [ 215.093261][ T7709] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.112869][ T7709] RSP: 002b:00007efcab637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.121284][ T7709] RAX: ffffffffffffffda RBX: 00007efcaa935f80 RCX: 00007efcaa77dff9 [ 215.129252][ T7709] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 215.137240][ T7709] RBP: 00007efcab637090 R08: 0000000000000000 R09: 0000000000000000 [ 215.145224][ T7709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.153189][ T7709] R13: 0000000000000000 R14: 00007efcaa935f80 R15: 00007ffdfde3b548 [ 215.161171][ T7709] [ 215.671220][ T65] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.168623][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.181620][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.191660][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.214040][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.226777][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 217.236036][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.269151][ T65] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.557473][ T65] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.586906][ T7764] netlink: 72 bytes leftover after parsing attributes in process `syz.1.676'. [ 217.608509][ T7770] netlink: 'syz.4.678': attribute type 9 has an invalid length. [ 217.628973][ T7764] netlink: 72 bytes leftover after parsing attributes in process `syz.1.676'. [ 217.633526][ T7770] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.678'. [ 217.694444][ T7773] x_tables: duplicate underflow at hook 2 [ 217.729194][ T65] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.758260][ T7764] netlink: 'syz.1.676': attribute type 10 has an invalid length. [ 217.786407][ T7764] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 217.798231][ T7764] team0: Failed to send options change via netlink (err -105) [ 217.805979][ T7764] team0: Port device netdevsim0 added [ 218.134605][ T65] bridge_slave_1: left allmulticast mode [ 218.140324][ T65] bridge_slave_1: left promiscuous mode [ 218.161442][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.205585][ T65] bridge_slave_0: left allmulticast mode [ 218.211295][ T65] bridge_slave_0: left promiscuous mode [ 218.225879][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.444250][ T5378] IPVS: starting estimator thread 0... [ 218.533859][ T7797] IPVS: using max 20 ests per chain, 48000 per kthread [ 218.853821][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.873356][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.899975][ T65] bond0 (unregistering): Released all slaves [ 218.934503][ T7753] chnl_net:caif_netlink_parms(): no params data found [ 219.175183][ T7812] netlink: 32 bytes leftover after parsing attributes in process `syz.1.687'. [ 219.273979][ T7821] FAULT_INJECTION: forcing a failure. [ 219.273979][ T7821] name failslab, interval 1, probability 0, space 0, times 0 [ 219.287252][ T7821] CPU: 0 UID: 0 PID: 7821 Comm: syz.2.689 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 219.297887][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 219.307972][ T7821] Call Trace: [ 219.311273][ T7821] [ 219.314237][ T7821] dump_stack_lvl+0x241/0x360 [ 219.318954][ T7821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.324201][ T7821] ? __pfx__printk+0x10/0x10 [ 219.328828][ T7821] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 219.334307][ T7821] ? __pfx___might_resched+0x10/0x10 [ 219.339610][ T7821] should_fail_ex+0x3b0/0x4e0 [ 219.344300][ T7821] should_failslab+0xac/0x100 [ 219.348977][ T7821] ? alloc_netdev_mqs+0xb9e/0x1000 [ 219.354092][ T7821] __kmalloc_cache_noprof+0x6c/0x2c0 [ 219.359386][ T7821] ? __xdp_rxq_info_reg+0x142/0x290 [ 219.364590][ T7821] alloc_netdev_mqs+0xb9e/0x1000 [ 219.369530][ T7821] rtnl_create_link+0x2f9/0xc20 [ 219.374386][ T7821] rtnl_newlink+0x1423/0x20a0 [ 219.379057][ T7821] ? rtnl_newlink+0xad1/0x20a0 [ 219.383833][ T7821] ? __pfx_rtnl_newlink+0x10/0x10 [ 219.388890][ T7821] ? do_raw_spin_unlock+0x13c/0x8b0 [ 219.394181][ T7821] ? __mutex_lock+0x9ab/0xd70 [ 219.398874][ T7821] ? __mutex_lock+0x52a/0xd70 [ 219.403577][ T7821] ? __pfx_rtnl_newlink+0x10/0x10 [ 219.408610][ T7821] rtnetlink_rcv_msg+0x73f/0xcf0 [ 219.413550][ T7821] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 219.418667][ T7821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 219.424133][ T7821] ? ref_tracker_free+0x643/0x7e0 [ 219.429154][ T7821] netlink_rcv_skb+0x1e3/0x430 [ 219.433920][ T7821] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 219.439377][ T7821] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 219.444676][ T7821] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.449874][ T7821] netlink_unicast+0x7f6/0x990 [ 219.454644][ T7821] ? __pfx_netlink_unicast+0x10/0x10 [ 219.459922][ T7821] ? __virt_addr_valid+0x183/0x530 [ 219.465030][ T7821] ? __check_object_size+0x48e/0x900 [ 219.470313][ T7821] netlink_sendmsg+0x8e4/0xcb0 [ 219.475081][ T7821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.480368][ T7821] ? aa_sock_msg_perm+0x91/0x160 [ 219.485324][ T7821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.490601][ T7821] __sock_sendmsg+0x221/0x270 [ 219.495280][ T7821] ____sys_sendmsg+0x52a/0x7e0 [ 219.500045][ T7821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.505348][ T7821] __sys_sendmsg+0x292/0x380 [ 219.509941][ T7821] ? __pfx___sys_sendmsg+0x10/0x10 [ 219.515061][ T7821] ? __pfx_vfs_write+0x10/0x10 [ 219.519836][ T7821] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 219.526159][ T7821] ? do_syscall_64+0x100/0x230 [ 219.530917][ T7821] ? do_syscall_64+0xb6/0x230 [ 219.535588][ T7821] do_syscall_64+0xf3/0x230 [ 219.540100][ T7821] ? clear_bhb_loop+0x35/0x90 [ 219.544774][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.550669][ T7821] RIP: 0033:0x7ff61817dff9 [ 219.555078][ T7821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.574677][ T7821] RSP: 002b:00007ff618fce038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.583085][ T7821] RAX: ffffffffffffffda RBX: 00007ff618336058 RCX: 00007ff61817dff9 [ 219.591051][ T7821] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 219.599015][ T7821] RBP: 00007ff618fce090 R08: 0000000000000000 R09: 0000000000000000 [ 219.606984][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 219.614951][ T7821] R13: 0000000000000001 R14: 00007ff618336058 R15: 00007ffd4c15a078 [ 219.622927][ T7821] [ 219.630343][ T54] Bluetooth: hci0: command tx timeout [ 219.719358][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.738818][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.747646][ T7753] bridge_slave_0: entered allmulticast mode [ 219.755723][ T7753] bridge_slave_0: entered promiscuous mode [ 219.798783][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.808457][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.818857][ T7753] bridge_slave_1: entered allmulticast mode [ 219.827901][ T7753] bridge_slave_1: entered promiscuous mode [ 219.895760][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.913254][ T65] hsr_slave_0: left promiscuous mode [ 219.919818][ T65] hsr_slave_1: left promiscuous mode [ 219.927307][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.959734][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.988869][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.002192][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.033060][ T65] veth1_macvtap: left promiscuous mode [ 220.039033][ T65] veth0_macvtap: left promiscuous mode [ 220.044815][ T65] veth1_vlan: left promiscuous mode [ 220.050169][ T65] veth0_vlan: left promiscuous mode [ 220.509949][ T7862] FAULT_INJECTION: forcing a failure. [ 220.509949][ T7862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.536369][ T7862] CPU: 0 UID: 0 PID: 7862 Comm: syz.4.700 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 220.547003][ T7862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.557055][ T7862] Call Trace: [ 220.560342][ T7862] [ 220.563284][ T7862] dump_stack_lvl+0x241/0x360 [ 220.567960][ T7862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.573150][ T7862] ? __pfx__printk+0x10/0x10 [ 220.577738][ T7862] ? __pfx_lock_release+0x10/0x10 [ 220.582768][ T7862] should_fail_ex+0x3b0/0x4e0 [ 220.587449][ T7862] _copy_from_user+0x2f/0xe0 [ 220.592052][ T7862] do_ipv6_setsockopt+0x2f1/0x3630 [ 220.597168][ T7862] ? __lock_acquire+0x1384/0x2050 [ 220.602207][ T7862] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 220.607755][ T7862] ? aa_label_sk_perm+0x4f3/0x6c0 [ 220.612777][ T7862] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 220.618153][ T7862] ? __pfx___might_resched+0x10/0x10 [ 220.623450][ T7862] ? __lock_acquire+0x1384/0x2050 [ 220.628491][ T7862] ipv6_setsockopt+0x5d/0x170 [ 220.633164][ T7862] rawv6_setsockopt+0x327/0x740 [ 220.638013][ T7862] ? __pfx_aa_sk_perm+0x10/0x10 [ 220.642866][ T7862] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 220.648231][ T7862] ? __fget_files+0x29/0x470 [ 220.652827][ T7862] ? aa_sock_opt_perm+0x79/0x120 [ 220.657768][ T7862] ? sock_common_setsockopt+0x37/0xc0 [ 220.663136][ T7862] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 220.669025][ T7862] do_sock_setsockopt+0x3af/0x720 [ 220.674046][ T7862] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 220.679581][ T7862] ? __fget_files+0x29/0x470 [ 220.684165][ T7862] ? __fget_files+0x3f3/0x470 [ 220.688832][ T7862] ? __fget_files+0x29/0x470 [ 220.693425][ T7862] __sys_setsockopt+0x1a2/0x250 [ 220.698279][ T7862] __x64_sys_setsockopt+0xb5/0xd0 [ 220.703297][ T7862] do_syscall_64+0xf3/0x230 [ 220.707792][ T7862] ? clear_bhb_loop+0x35/0x90 [ 220.712465][ T7862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.718356][ T7862] RIP: 0033:0x7efcaa77dff9 [ 220.722810][ T7862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.742417][ T7862] RSP: 002b:00007efcab637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 220.750843][ T7862] RAX: ffffffffffffffda RBX: 00007efcaa935f80 RCX: 00007efcaa77dff9 [ 220.758815][ T7862] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 220.766782][ T7862] RBP: 00007efcab637090 R08: 0000000000000020 R09: 0000000000000000 [ 220.774743][ T7862] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.782713][ T7862] R13: 0000000000000000 R14: 00007efcaa935f80 R15: 00007ffdfde3b548 [ 220.790697][ T7862] [ 221.108762][ T65] team0 (unregistering): Port device team_slave_1 removed [ 221.155265][ T65] team0 (unregistering): Port device team_slave_0 removed [ 221.566764][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.581925][ T7845] syzkaller0: entered promiscuous mode [ 221.589327][ T7845] syzkaller0: entered allmulticast mode [ 221.673535][ T54] Bluetooth: hci0: command tx timeout [ 221.756483][ T7753] team0: Port device team_slave_0 added [ 221.766920][ T7753] team0: Port device team_slave_1 added [ 221.824818][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.844086][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.895806][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.922588][ T7889] netlink: 80 bytes leftover after parsing attributes in process `syz.4.709'. [ 221.935553][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.945966][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.979581][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.080123][ T7753] hsr_slave_0: entered promiscuous mode [ 222.117218][ T7753] hsr_slave_1: entered promiscuous mode [ 222.316085][ T7901] netlink: 'syz.0.713': attribute type 9 has an invalid length. [ 222.328243][ T7901] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.713'. [ 222.419534][ T7904] netlink: 'syz.0.713': attribute type 9 has an invalid length. [ 222.427783][ T7901] x_tables: duplicate underflow at hook 2 [ 222.440941][ T7904] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.713'. [ 223.017557][ T7919] netlink: 80 bytes leftover after parsing attributes in process `syz.1.721'. [ 223.372660][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 223.397797][ T7917] FAULT_INJECTION: forcing a failure. [ 223.397797][ T7917] name failslab, interval 1, probability 0, space 0, times 0 [ 223.425511][ T7753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 223.446132][ T7917] CPU: 1 UID: 0 PID: 7917 Comm: syz.4.720 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 223.456784][ T7917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.466865][ T7917] Call Trace: [ 223.470163][ T7917] [ 223.473109][ T7917] dump_stack_lvl+0x241/0x360 [ 223.477903][ T7917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.483125][ T7917] ? __pfx__printk+0x10/0x10 [ 223.487741][ T7917] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 223.493749][ T7917] ? __pfx___might_resched+0x10/0x10 [ 223.499067][ T7917] should_fail_ex+0x3b0/0x4e0 [ 223.503775][ T7917] should_failslab+0xac/0x100 [ 223.508480][ T7917] ? __alloc_skb+0x1c3/0x440 [ 223.513090][ T7917] kmem_cache_alloc_node_noprof+0x71/0x320 [ 223.518931][ T7917] __alloc_skb+0x1c3/0x440 [ 223.523378][ T7917] ? __pfx___alloc_skb+0x10/0x10 [ 223.528337][ T7917] ? netlink_ack_tlv_len+0x6e/0x200 [ 223.533562][ T7917] netlink_ack+0x13f/0xa30 [ 223.538003][ T7917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.543502][ T7917] netlink_rcv_skb+0x262/0x430 [ 223.548300][ T7917] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.553785][ T7917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.559127][ T7917] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.564353][ T7917] netlink_unicast+0x7f6/0x990 [ 223.569149][ T7917] ? __pfx_netlink_unicast+0x10/0x10 [ 223.574460][ T7917] ? __virt_addr_valid+0x183/0x530 [ 223.579594][ T7917] ? __check_object_size+0x48e/0x900 [ 223.584903][ T7917] netlink_sendmsg+0x8e4/0xcb0 [ 223.589701][ T7917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.595009][ T7917] ? aa_sock_msg_perm+0x91/0x160 [ 223.599978][ T7917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.605289][ T7917] __sock_sendmsg+0x221/0x270 [ 223.609995][ T7917] ____sys_sendmsg+0x52a/0x7e0 [ 223.614788][ T7917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.620117][ T7917] __sys_sendmsg+0x292/0x380 [ 223.624734][ T7917] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.629881][ T7917] ? __pfx_vfs_write+0x10/0x10 [ 223.634688][ T7917] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.641061][ T7917] ? do_syscall_64+0x100/0x230 [ 223.645849][ T7917] ? do_syscall_64+0xb6/0x230 [ 223.650543][ T7917] do_syscall_64+0xf3/0x230 [ 223.655065][ T7917] ? clear_bhb_loop+0x35/0x90 [ 223.659766][ T7917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.665690][ T7917] RIP: 0033:0x7efcaa77dff9 [ 223.670131][ T7917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.689765][ T7917] RSP: 002b:00007efcab637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.698213][ T7917] RAX: ffffffffffffffda RBX: 00007efcaa935f80 RCX: 00007efcaa77dff9 [ 223.706204][ T7917] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 223.714285][ T7917] RBP: 00007efcab637090 R08: 0000000000000000 R09: 0000000000000000 [ 223.722277][ T7917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.730273][ T7917] R13: 0000000000000000 R14: 00007efcaa935f80 R15: 00007ffdfde3b548 [ 223.738283][ T7917] [ 223.776462][ T7753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 223.835795][ T54] Bluetooth: hci0: command tx timeout [ 223.848853][ T7753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 223.931388][ T7753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 224.155608][ T7932] netlink: 'syz.2.724': attribute type 1 has an invalid length. [ 224.371762][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.466950][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.513881][ T1601] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.521067][ T1601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.610515][ T1601] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.617714][ T1601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.761940][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 224.921391][ T7947] FAULT_INJECTION: forcing a failure. [ 224.921391][ T7947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.944157][ T7947] CPU: 1 UID: 0 PID: 7947 Comm: syz.4.730 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 224.954804][ T7947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 224.964889][ T7947] Call Trace: [ 224.968281][ T7947] [ 224.971235][ T7947] dump_stack_lvl+0x241/0x360 [ 224.976035][ T7947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.981258][ T7947] ? __pfx__printk+0x10/0x10 [ 224.985971][ T7947] ? __pfx_lock_release+0x10/0x10 [ 224.991026][ T7947] ? register_lock_class+0x102/0x980 [ 224.996346][ T7947] ? register_lock_class+0x102/0x980 [ 225.001665][ T7947] should_fail_ex+0x3b0/0x4e0 [ 225.006468][ T7947] _copy_from_user+0x2f/0xe0 [ 225.011095][ T7947] ipv6_flowlabel_opt+0x122/0x29c0 [ 225.016247][ T7947] ? __lock_acquire+0x1384/0x2050 [ 225.021320][ T7947] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 225.026900][ T7947] ? mark_lock+0x9a/0x360 [ 225.031255][ T7947] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 225.037284][ T7947] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.043654][ T7947] ? __local_bh_enable_ip+0x168/0x200 [ 225.049054][ T7947] ? lockdep_hardirqs_on+0x99/0x150 [ 225.054285][ T7947] ? __local_bh_enable_ip+0x168/0x200 [ 225.059686][ T7947] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 225.065439][ T7947] do_ipv6_setsockopt+0xe87/0x3630 [ 225.070588][ T7947] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 225.076168][ T7947] ? aa_label_sk_perm+0x4f3/0x6c0 [ 225.081222][ T7947] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 225.086629][ T7947] ? __pfx___might_resched+0x10/0x10 [ 225.091942][ T7947] ? __lock_acquire+0x1384/0x2050 [ 225.097012][ T7947] ipv6_setsockopt+0x5d/0x170 [ 225.101712][ T7947] rawv6_setsockopt+0x327/0x740 [ 225.106585][ T7947] ? __pfx_aa_sk_perm+0x10/0x10 [ 225.111465][ T7947] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 225.116857][ T7947] ? __fget_files+0x29/0x470 [ 225.121508][ T7947] ? aa_sock_opt_perm+0x79/0x120 [ 225.126560][ T7947] ? sock_common_setsockopt+0x37/0xc0 [ 225.131966][ T7947] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 225.137902][ T7947] do_sock_setsockopt+0x3af/0x720 [ 225.142961][ T7947] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 225.148528][ T7947] ? __fget_files+0x29/0x470 [ 225.153151][ T7947] ? __fget_files+0x3f3/0x470 [ 225.157859][ T7947] ? __fget_files+0x29/0x470 [ 225.162488][ T7947] __sys_setsockopt+0x1a2/0x250 [ 225.167371][ T7947] __x64_sys_setsockopt+0xb5/0xd0 [ 225.172440][ T7947] do_syscall_64+0xf3/0x230 [ 225.177418][ T7947] ? clear_bhb_loop+0x35/0x90 [ 225.182154][ T7947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.188106][ T7947] RIP: 0033:0x7efcaa77dff9 [ 225.192559][ T7947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.212199][ T7947] RSP: 002b:00007efcab637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 225.220656][ T7947] RAX: ffffffffffffffda RBX: 00007efcaa935f80 RCX: 00007efcaa77dff9 [ 225.228654][ T7947] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 225.236657][ T7947] RBP: 00007efcab637090 R08: 0000000000000020 R09: 0000000000000000 [ 225.244666][ T7947] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.252683][ T7947] R13: 0000000000000000 R14: 00007efcaa935f80 R15: 00007ffdfde3b548 [ 225.260708][ T7947] [ 225.450211][ T7951] netlink: 80 bytes leftover after parsing attributes in process `syz.1.732'. [ 225.913652][ T54] Bluetooth: hci0: command tx timeout [ 226.908388][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 226.923444][ C0] sched: DL replenish lagged too much [ 227.129936][ T7979] netlink: 56 bytes leftover after parsing attributes in process `syz.0.737'. [ 227.206073][ T7975] netlink: 'syz.0.737': attribute type 15 has an invalid length. [ 227.232863][ T7975] netlink: 666 bytes leftover after parsing attributes in process `syz.0.737'. [ 227.344870][ T7753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.563560][ T7753] veth0_vlan: entered promiscuous mode [ 227.620536][ T7753] veth1_vlan: entered promiscuous mode [ 227.822591][ T7753] veth0_macvtap: entered promiscuous mode [ 227.881371][ T7753] veth1_macvtap: entered promiscuous mode [ 227.966995][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.988540][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.033742][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.071700][ T7943] syz.2.728 (7943) used greatest stack depth: 18832 bytes left [ 228.084794][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.132142][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.265870][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.286695][ T7996] netlink: 80 bytes leftover after parsing attributes in process `syz.4.744'. [ 228.302629][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.316078][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.337400][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.383569][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.420080][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.452762][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.500845][ T7753] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.540356][ T7753] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.582689][ T7753] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.617065][ T7753] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.694879][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.745'. [ 228.730466][ T8002] netlink: 'syz.4.745': attribute type 9 has an invalid length. [ 228.949331][ T1601] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.999279][ T1601] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.122161][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.152563][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.353762][ T5519] Bluetooth: hci0: command 0x0405 tx timeout [ 230.031504][ T8020] FAULT_INJECTION: forcing a failure. [ 230.031504][ T8020] name failslab, interval 1, probability 0, space 0, times 0 [ 230.086583][ T8020] CPU: 1 UID: 0 PID: 8020 Comm: syz.1.750 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 230.097235][ T8020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.107365][ T8020] Call Trace: [ 230.110668][ T8020] [ 230.113623][ T8020] dump_stack_lvl+0x241/0x360 [ 230.118328][ T8020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.123554][ T8020] ? __pfx__printk+0x10/0x10 [ 230.128176][ T8020] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 230.133756][ T8020] ? __pfx___might_resched+0x10/0x10 [ 230.139077][ T8020] should_fail_ex+0x3b0/0x4e0 [ 230.143795][ T8020] should_failslab+0xac/0x100 [ 230.148499][ T8020] ? ipv6_flowlabel_opt+0x10cf/0x29c0 [ 230.153901][ T8020] __kmalloc_cache_noprof+0x6c/0x2c0 [ 230.159239][ T8020] ipv6_flowlabel_opt+0x10cf/0x29c0 [ 230.164555][ T8020] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 230.170136][ T8020] ? mark_lock+0x9a/0x360 [ 230.174574][ T8020] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.180586][ T8020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.186947][ T8020] ? __local_bh_enable_ip+0x168/0x200 [ 230.192343][ T8020] ? lockdep_hardirqs_on+0x99/0x150 [ 230.197571][ T8020] ? __local_bh_enable_ip+0x168/0x200 [ 230.202969][ T8020] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 230.208732][ T8020] do_ipv6_setsockopt+0xe87/0x3630 [ 230.213882][ T8020] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 230.219460][ T8020] ? aa_label_sk_perm+0x4f3/0x6c0 [ 230.224515][ T8020] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 230.230371][ T8020] ? __pfx___might_resched+0x10/0x10 [ 230.235693][ T8020] ? __lock_acquire+0x1384/0x2050 [ 230.240768][ T8020] ipv6_setsockopt+0x5d/0x170 [ 230.245476][ T8020] rawv6_setsockopt+0x327/0x740 [ 230.250354][ T8020] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.255226][ T8020] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 230.260620][ T8020] ? __fget_files+0x29/0x470 [ 230.265235][ T8020] ? aa_sock_opt_perm+0x79/0x120 [ 230.270195][ T8020] ? sock_common_setsockopt+0x37/0xc0 [ 230.275595][ T8020] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 230.281516][ T8020] do_sock_setsockopt+0x3af/0x720 [ 230.286564][ T8020] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 230.292140][ T8020] ? __fget_files+0x29/0x470 [ 230.296764][ T8020] ? __fget_files+0x3f3/0x470 [ 230.301470][ T8020] ? __fget_files+0x29/0x470 [ 230.306095][ T8020] __sys_setsockopt+0x1a2/0x250 [ 230.310975][ T8020] __x64_sys_setsockopt+0xb5/0xd0 [ 230.316023][ T8020] do_syscall_64+0xf3/0x230 [ 230.320551][ T8020] ? clear_bhb_loop+0x35/0x90 [ 230.325250][ T8020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.331169][ T8020] RIP: 0033:0x7f826b37dff9 [ 230.335607][ T8020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.355238][ T8020] RSP: 002b:00007f826c0fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 230.363681][ T8020] RAX: ffffffffffffffda RBX: 00007f826b535f80 RCX: 00007f826b37dff9 [ 230.371673][ T8020] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 230.379670][ T8020] RBP: 00007f826c0fd090 R08: 0000000000000020 R09: 0000000000000000 [ 230.387691][ T8020] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.395680][ T8020] R13: 0000000000000000 R14: 00007f826b535f80 R15: 00007fffffbacdc8 [ 230.403693][ T8020] [ 230.890359][ T8033] netlink: 80 bytes leftover after parsing attributes in process `syz.1.755'. [ 231.156984][ T8039] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'. [ 231.186672][ T8038] netlink: 48 bytes leftover after parsing attributes in process `syz.1.758'. [ 233.913908][ T8074] netlink: 'syz.2.769': attribute type 15 has an invalid length. [ 234.260846][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.340858][ T8085] netlink: 'syz.0.772': attribute type 9 has an invalid length. [ 234.405242][ T8085] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.772'. [ 234.513540][ T8082] x_tables: duplicate underflow at hook 2 [ 343.133387][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 343.140413][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8093/1:b..l [ 343.148809][ C1] rcu: (detected by 1, t=10503 jiffies, g=34009, q=702712 ncpus=2) [ 343.156812][ C1] task:syz-executor state:R running task stack:24944 pid:8093 tgid:8093 ppid:6703 flags:0x00004006 [ 343.169819][ C1] Call Trace: [ 343.173120][ C1] [ 343.176073][ C1] __schedule+0x1895/0x4b30 [ 343.180615][ C1] ? __kernel_text_address+0xd/0x40 [ 343.185836][ C1] ? unwind_get_return_address+0x4d/0x90 [ 343.191506][ C1] ? __pfx___schedule+0x10/0x10 [ 343.196393][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 343.202417][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 343.207740][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 343.212877][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 343.218624][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 343.223682][ C1] irqentry_exit+0x5e/0x90 [ 343.228123][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 343.234144][ C1] RIP: 0010:kasan_check_range+0x5/0x290 [ 343.239720][ C1] Code: 8e e8 af df e1 ff 90 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 [ 343.259354][ C1] RSP: 0018:ffffc9000921f9b8 EFLAGS: 00000246 [ 343.265466][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffffffff820b615e [ 343.273465][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801dd86b38 [ 343.281462][ C1] RBP: ffff88801dd86b38 R08: ffffffff820b6135 R09: 1ffff11003bb0d5d [ 343.289461][ C1] R10: dffffc0000000000 R11: ffffed1003bb0d5e R12: ffff88801dd86af0 [ 343.297464][ C1] R13: 1ffffffff34879b4 R14: 0000000000000003 R15: 0000000000000003 [ 343.305530][ C1] ? __page_table_check_zero+0x115/0x350 [ 343.311203][ C1] ? __page_table_check_zero+0x13e/0x350 [ 343.316874][ C1] __page_table_check_zero+0x13e/0x350 [ 343.322379][ C1] free_unref_page+0xd0f/0xf20 [ 343.327178][ C1] __put_partials+0xeb/0x130 [ 343.331791][ C1] put_cpu_partial+0x17c/0x250 [ 343.336580][ C1] ? put_cpu_partial+0x70/0x250 [ 343.341472][ C1] __slab_free+0x2ea/0x3d0 [ 343.345919][ C1] ? __phys_addr+0xba/0x170 [ 343.350456][ C1] qlist_free_all+0x9a/0x140 [ 343.355071][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 343.360557][ C1] __kasan_slab_alloc+0x23/0x80 [ 343.365472][ C1] __kmalloc_node_track_caller_noprof+0x1cd/0x440 [ 343.371917][ C1] ? shmem_symlink+0x22b/0x6c0 [ 343.376718][ C1] kmemdup_noprof+0x2a/0x60 [ 343.381258][ C1] shmem_symlink+0x22b/0x6c0 [ 343.385890][ C1] ? __pfx_shmem_symlink+0x10/0x10 [ 343.391031][ C1] ? inode_permission+0xff/0x460 [ 343.395999][ C1] ? bpf_lsm_inode_symlink+0x9/0x10 [ 343.401225][ C1] ? security_inode_symlink+0xbe/0x330 [ 343.406722][ C1] vfs_symlink+0x137/0x2e0 [ 343.411166][ C1] do_symlinkat+0x222/0x3a0 [ 343.415703][ C1] ? __pfx_do_symlinkat+0x10/0x10 [ 343.420761][ C1] ? getname_flags+0x1e3/0x540 [ 343.425556][ C1] __x64_sys_symlinkat+0x95/0xb0 [ 343.430526][ C1] do_syscall_64+0xf3/0x230 [ 343.435049][ C1] ? clear_bhb_loop+0x35/0x90 [ 343.439752][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.445688][ C1] RIP: 0033:0x7ff61817d577 [ 343.450126][ C1] RSP: 002b:00007ffd4c15a408 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 343.458564][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff61817d577 [ 343.466555][ C1] RDX: 00007ff6181f19b4 RSI: 00000000ffffff9c RDI: 00007ffd4c15a490 [ 343.474637][ C1] RBP: 00007ffd4c15a43c R08: 0000000000000017 R09: 00007ffd4c15a157 [ 343.482630][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000032 [ 343.490628][ C1] R13: 000000000003934c R14: 0000000000039306 R15: 00007ffd4c15a490 [ 343.498644][ C1] [ 343.501691][ C1] rcu: rcu_preempt kthread starved for 10533 jiffies! g34009 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 343.512901][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 343.522892][ C1] rcu: RCU grace-period kthread stack dump: [ 343.528796][ C1] task:rcu_preempt state:R running task stack:25888 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 343.540575][ C1] Call Trace: [ 343.543871][ C1] [ 343.546822][ C1] __schedule+0x1895/0x4b30 [ 343.551374][ C1] ? __pfx___schedule+0x10/0x10 [ 343.556272][ C1] ? __pfx_lock_release+0x10/0x10 [ 343.561323][ C1] ? __asan_memset+0x23/0x50 [ 343.565940][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 343.571775][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.578135][ C1] ? schedule+0x90/0x320 [ 343.582402][ C1] schedule+0x14b/0x320 [ 343.586589][ C1] schedule_timeout+0x1be/0x310 [ 343.591472][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 343.596872][ C1] ? __pfx_process_timeout+0x10/0x10 [ 343.602190][ C1] ? prepare_to_swait_event+0x330/0x350 [ 343.607771][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 343.612647][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 343.617896][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 343.624075][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 343.629381][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 343.635327][ C1] ? finish_swait+0xd4/0x1e0 [ 343.639950][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 343.644563][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 343.649781][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 343.655710][ C1] ? __kthread_parkme+0x169/0x1d0 [ 343.660766][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 343.665986][ C1] kthread+0x2f0/0x390 [ 343.670074][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 343.675289][ C1] ? __pfx_kthread+0x10/0x10 [ 343.679901][ C1] ret_from_fork+0x4b/0x80 [ 343.684344][ C1] ? __pfx_kthread+0x10/0x10 [ 343.688956][ C1] ret_from_fork_asm+0x1a/0x30 [ 343.693757][ C1] [ 343.696791][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 343.703136][ C1] Sending NMI from CPU 1 to CPUs 0: [ 343.708370][ C0] NMI backtrace for cpu 0 [ 343.708386][ C0] CPU: 0 UID: 0 PID: 937 Comm: kworker/0:2 Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 343.708406][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 343.708417][ C0] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 343.708444][ C0] RIP: 0010:__phys_addr+0x4/0x170 [ 343.708463][ C0] Code: e2 ed 51 00 e9 1b ff ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <41> 57 41 56 53 49 89 fe e8 af ed 51 00 48 bf ff ff ff 7f ff ff ff [ 343.708477][ C0] RSP: 0018:ffffc90000007068 EFLAGS: 00000292 [ 343.708490][ C0] RAX: 0000000000000001 RBX: ffffffff898a58e0 RCX: ffff888025f48000 [ 343.708502][ C0] RDX: 0000000000000100 RSI: ffffffff8c60f840 RDI: ffff88822d8d0000 [ 343.708514][ C0] RBP: ffff88822d8d02c0 R08: ffffffff898a587d R09: 1ffff11045b1a05c [ 343.708526][ C0] R10: dffffc0000000000 R11: ffffed1045b1a05d R12: ffff88822ca3143e [ 343.708539][ C0] R13: ffff88822d8d0000 R14: ffff88822d8d0000 R15: dffffc0000000000 [ 343.708551][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 343.708565][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 343.708577][ C0] CR2: 00007ffd4c159fc0 CR3: 0000000067780000 CR4: 00000000003526f0 [ 343.708591][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 343.708601][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 343.708612][ C0] Call Trace: [ 343.708618][ C0] [ 343.708625][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 343.708645][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 343.708668][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 343.708685][ C0] ? nmi_handle+0x2a/0x5a0 [ 343.708713][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 343.708733][ C0] ? nmi_handle+0x14f/0x5a0 [ 343.708748][ C0] ? nmi_handle+0x2a/0x5a0 [ 343.708764][ C0] ? __phys_addr+0x4/0x170 [ 343.708779][ C0] ? default_do_nmi+0x63/0x160 [ 343.708798][ C0] ? exc_nmi+0x123/0x1f0 [ 343.708815][ C0] ? end_repeat_nmi+0xf/0x53 [ 343.708831][ C0] ? skb_release_data+0x6a0/0x8a0 [ 343.708850][ C0] ? skb_release_data+0x63d/0x8a0 [ 343.708867][ C0] ? __phys_addr+0x4/0x170 [ 343.708883][ C0] ? __phys_addr+0x4/0x170 [ 343.708899][ C0] ? __phys_addr+0x4/0x170 [ 343.708914][ C0] [ 343.708919][ C0] [ 343.708925][ C0] kfree+0x71/0x440 [ 343.708943][ C0] ? __pfx_call_rcu+0x10/0x10 [ 343.708959][ C0] ? rcuref_put+0x1e3/0x240 [ 343.708976][ C0] skb_release_data+0x6a0/0x8a0 [ 343.708998][ C0] consume_skb+0x9f/0xf0 [ 343.709013][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 343.709037][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 343.709057][ C0] ? validate_chain+0x11e/0x5920 [ 343.709075][ C0] ? nf_ip_checksum+0x13a/0x500 [ 343.709099][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 343.709122][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 343.709146][ C0] ? __pfx_validate_chain+0x10/0x10 [ 343.709168][ C0] nft_do_chain+0x4ad/0x1da0 [ 343.709196][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 343.709216][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 343.709248][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 343.709266][ C0] nft_do_chain_inet+0x418/0x6b0 [ 343.709289][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 343.709308][ C0] ? ipt_do_table+0x312/0x1860 [ 343.709336][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 343.709356][ C0] nf_hook_slow+0xc3/0x220 [ 343.709393][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 343.709410][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 343.709427][ C0] NF_HOOK+0x29e/0x450 [ 343.709445][ C0] ? NF_HOOK+0x9a/0x450 [ 343.709461][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 343.709478][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 343.709497][ C0] ? ip_rcv_finish+0x406/0x560 [ 343.709515][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 343.709531][ C0] NF_HOOK+0x3a4/0x450 [ 343.709547][ C0] ? __lock_acquire+0x1384/0x2050 [ 343.709568][ C0] ? NF_HOOK+0x9a/0x450 [ 343.709584][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 343.709600][ C0] ? ip_rcv_core+0x801/0xd10 [ 343.709617][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 343.709637][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 343.709654][ C0] __netif_receive_skb+0x2bf/0x650 [ 343.709674][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 343.709694][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 343.709717][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 343.709738][ C0] ? __pfx_lock_release+0x10/0x10 [ 343.709759][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 343.709785][ C0] process_backlog+0x662/0x15b0 [ 343.709807][ C0] ? process_backlog+0x33b/0x15b0 [ 343.709829][ C0] ? __pfx_process_backlog+0x10/0x10 [ 343.709847][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 343.709870][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.709893][ C0] __napi_poll+0xcb/0x490 [ 343.709912][ C0] net_rx_action+0x89b/0x1240 [ 343.709941][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 343.709962][ C0] ? sched_clock+0x4a/0x70 [ 343.709987][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.710014][ C0] handle_softirqs+0x2c5/0x980 [ 343.710036][ C0] ? do_softirq+0x11b/0x1e0 [ 343.710056][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 343.710080][ C0] do_softirq+0x11b/0x1e0 [ 343.710097][ C0] [ 343.710103][ C0] [ 343.710109][ C0] ? __pfx_do_softirq+0x10/0x10 [ 343.710127][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 343.710149][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 343.710169][ C0] ? rcu_is_watching+0x15/0xb0 [ 343.710187][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 343.710207][ C0] ? wg_packet_encrypt_worker+0x2e8/0x1610 [ 343.710227][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 343.710247][ C0] ? wg_packet_encrypt_worker+0xd5/0x1610 [ 343.710269][ C0] wg_packet_encrypt_worker+0x2e8/0x1610 [ 343.710300][ C0] ? __pfx_wg_packet_encrypt_worker+0x10/0x10 [ 343.710328][ C0] ? look_up_lock_class+0x77/0x170 [ 343.710350][ C0] ? register_lock_class+0x102/0x980 [ 343.710370][ C0] ? try_to_wake_up+0x5f4/0x1480 [ 343.710385][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 343.710404][ C0] ? __pfx_lock_release+0x10/0x10 [ 343.710425][ C0] ? __pfx_register_lock_class+0x10/0x10 [ 343.710448][ C0] ? mark_lock+0x9a/0x360 [ 343.710465][ C0] ? __lock_acquire+0x1384/0x2050 [ 343.710499][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 343.710519][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 343.710542][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 343.710568][ C0] ? process_scheduled_works+0x976/0x1850 [ 343.710589][ C0] process_scheduled_works+0xa63/0x1850 [ 343.710621][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 343.710646][ C0] ? assign_work+0x364/0x3d0 [ 343.710667][ C0] worker_thread+0x870/0xd30 [ 343.710691][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 343.710717][ C0] ? __kthread_parkme+0x169/0x1d0 [ 343.710739][ C0] ? __pfx_worker_thread+0x10/0x10 [ 343.710759][ C0] kthread+0x2f0/0x390 [ 343.710774][ C0] ? __pfx_worker_thread+0x10/0x10 [ 343.710794][ C0] ? __pfx_kthread+0x10/0x10 [ 343.710809][ C0] ret_from_fork+0x4b/0x80 [ 343.710829][ C0] ? __pfx_kthread+0x10/0x10 [ 343.710844][ C0] ret_from_fork_asm+0x1a/0x30 [ 343.710871][ C0] [ 349.233837][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.240213][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 349.265924][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 349.272559][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=248 sent=0 n=-1 (errno 32: Broken pipe) [ 351.988307][ T5241] Bluetooth: hci1: command 0x0406 tx timeout [ 351.994473][ T5241] Bluetooth: hci4: command 0x0406 tx timeout [ 352.000522][ T5241] Bluetooth: hci2: command 0x0406 tx timeout [ 352.007320][ T5241] Bluetooth: hci3: command 0x0406 tx timeout [ 352.015621][ T8086] netlink: 'syz.0.772': attribute type 9 has an invalid length. [ 352.023297][ T8086] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.772'. [ 352.265326][ T8078] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 352.464129][ T8078] CPU: 1 UID: 0 PID: 8078 Comm: syz-executor Not tainted 6.12.0-rc1-syzkaller-00131-gf66ebf37d69c #0 [ 352.475044][ T8078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.485125][ T8078] Call Trace: [ 352.488417][ T8078] [ 352.491357][ T8078] dump_stack_lvl+0x241/0x360 [ 352.496061][ T8078] ? __pfx_dump_stack_lvl+0x10/0x10 [ 352.501273][ T8078] ? __pfx__printk+0x10/0x10 [ 352.505922][ T8078] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 352.512357][ T8078] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 352.518883][ T8078] warn_alloc+0x278/0x410 [ 352.523235][ T8078] ? __pfx_warn_alloc+0x10/0x10 [ 352.528105][ T8078] ? kcov_ioctl+0x56/0x640 [ 352.532543][ T8078] ? __get_vm_area_node+0x23d/0x270 [ 352.537769][ T8078] __vmalloc_node_range_noprof+0x691/0x13f0 [ 352.543704][ T8078] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 352.550052][ T8078] vmalloc_user_noprof+0x74/0x80 [ 352.555001][ T8078] ? kcov_ioctl+0x56/0x640 [ 352.559434][ T8078] kcov_ioctl+0x56/0x640 [ 352.563691][ T8078] ? __pfx_kcov_ioctl+0x10/0x10 [ 352.568574][ T8078] __se_sys_ioctl+0xf9/0x170 [ 352.573185][ T8078] do_syscall_64+0xf3/0x230 [ 352.577701][ T8078] ? clear_bhb_loop+0x35/0x90 [ 352.582393][ T8078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.588304][ T8078] RIP: 0033:0x7f0822f7dbfb [ 352.592729][ T8078] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 352.612359][ T8078] RSP: 002b:00007ffd712e31e0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 352.620888][ T8078] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f0822f7dbfb [ 352.628876][ T8078] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 352.636867][ T8078] RBP: 00007f0823135f40 R08: 00000000000000da R09: 0000000000000000 [ 352.644943][ T8078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.653102][ T8078] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 352.661106][ T8078] [ 352.932280][ T8078] Mem-Info: [ 352.938924][ T8078] active_anon:2795 inactive_anon:0 isolated_anon:0 [ 352.938924][ T8078] active_file:2323 inactive_file:37584 isolated_file:0 [ 352.938924][ T8078] unevictable:768 dirty:14 writeback:0 [ 352.938924][ T8078] slab_reclaimable:8942 slab_unreclaimable:1156307 [ 352.938924][ T8078] mapped:7623 shmem:1237 pagetables:379 [ 352.938924][ T8078] sec_pagetables:0 bounce:0 [ 352.938924][ T8078] kernel_misc_reclaimable:0 [ 352.938924][ T8078] free:284050 free_pcp:1625 free_cma:0 [ 352.995482][ T8078] Node 0 active_anon:11180kB inactive_anon:0kB active_file:9292kB inactive_file:150332kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:30492kB dirty:52kB writeback:0kB shmem:3412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10012kB pagetables:1516kB sec_pagetables:0kB all_unreclaimable? no [ 353.040026][ T8078] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no