last executing test programs: 2m22.399779535s ago: executing program 2 (id=344): unshare(0x20000600) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x10, 0xffffffffffffffff, 0x5ce15000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414bb0000000000000000bcc2a500000000e000d1fc0d88cec77137182fb2000100000000cd000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000ac1e0001000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000030000000000000002000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r3, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0xe22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000001c0)=0x3c) socket$nl_generic(0x10, 0x3, 0x10) 2m22.074695025s ago: executing program 2 (id=350): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000440)={0x6, {{0x2, 0x0, @multicast2}}}, 0x90) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @dev}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e90e5b", 0xc, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000004d80), 0x493, 0xa, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="540000000226050000000000000000000000000005000100070000000900020073797a31000000000c000780080006000000000010000300686173683a69702c6d616300050005000200000005000400000000009773bf844be12f0ecc3f1a877b35dfbf500a0cc80c11becfa2591d2fd0000bb1e50b2f8ad960cc6f371374455350eb681c55e16c59715b47b68e85e01efa3e814fecf139d22b189a9f746efaaf1f974c1b73aa7a4cf2d52ccae8d412bda322b93e92c84d2597a66ec26f"], 0x54}}, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)="d8000000180081000181f782db4cb904021d0800fe007c05e8fe50a10a000700014002020c600e41b0000900ac000a0514000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5a02000000ca9ec855eff0eb3f365d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505dba36efab70cdb67e8d1cc5c7b06b1eab31f7b05da962834cedde6fdfcf45add8e51ff159ca9680d0", 0xd8}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xb}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x13, 0x10, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) r7 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000240)={'syztnl1\x00', 0x0}) r8 = socket(0x40000000015, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd2a, 0x25dfdbfe, 0x1, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x100) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) 2m21.543905904s ago: executing program 2 (id=355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x40) shutdown(r0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xac}}, 0x0) 2m21.359808257s ago: executing program 2 (id=359): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xa, 0x80, 0x80, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), 0xbde, r2}, 0x38) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x409, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x200, 0x16001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x3}]}}}]}, 0x44}}, 0x2) 2m20.872364745s ago: executing program 2 (id=363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000002aaff0200000000000000000000000000013a"], 0xfdef) 2m20.511418949s ago: executing program 2 (id=366): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, 0xfffffffffffffffe) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) read(r1, &(0x7f00000002c0)=""/17, 0x11) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac00000012000105000000000000014000"/56, @ANYBLOB="00000000000000feffffff0000000000040002005c0001"], 0xac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 2m5.478506078s ago: executing program 32 (id=366): r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r0, 0x80044942, 0xfffffffffffffffe) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) read(r1, &(0x7f00000002c0)=""/17, 0x11) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r1, &(0x7f0000000200)={0x1d, r2}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r5}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac00000012000105000000000000014000"/56, @ANYBLOB="00000000000000feffffff0000000000040002005c0001"], 0xac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 59.607617977s ago: executing program 5 (id=1481): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 46.491733432s ago: executing program 5 (id=1481): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 36.902521059s ago: executing program 5 (id=1481): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 25.504689177s ago: executing program 5 (id=1481): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 14.398628135s ago: executing program 5 (id=1481): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 3.247759385s ago: executing program 3 (id=2177): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001800dd8d0000000000000000021400000000fe0500"], 0x2c}}, 0x0) 3.095809445s ago: executing program 3 (id=2181): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x4040840) socket(0x11, 0x3, 0x80000000) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xd00, 0xe}, 0x80, 0x0}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) 2.817186156s ago: executing program 1 (id=2188): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x83, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x44044}, 0x20000080) 2.667407353s ago: executing program 1 (id=2191): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x1}]}, 0x1c}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x0, 0x0}, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x800000003, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4080) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) 2.634673716s ago: executing program 1 (id=2193): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ff", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) 2.527757513s ago: executing program 1 (id=2195): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000a00)="a715fc733180c5d7639c07673fd113b34dccbc7ebd133dce9c8f1cbb515e691defc2dd6b4b94062019abcb17d419405adcdd00f975cda1586310db975dc3873df773e9be576d5fb9d714295431c5c84212692a73f0f137358d7f41693ccf94", 0x5f}], 0x1}}], 0x1, 0x0) 2.525633345s ago: executing program 0 (id=2196): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9b1aef3a3e34e33d712d22afd7e8997232f2b8db0049d90491ceaebfd26d4ee", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x5}], 0x2) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 2.367977855s ago: executing program 0 (id=2198): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0xd, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10d72, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r0, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000037000000", @ANYBLOB="080026009015000008"], 0x2c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 2.273588705s ago: executing program 0 (id=2200): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x17, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2.210970428s ago: executing program 4 (id=2202): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001800dd8d00000000000000000200000000000006000000000600150004000000100000088008000180"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000003400168030000180"], 0x5c}}, 0x0) 2.155852205s ago: executing program 3 (id=2203): setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000)=0x8, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 2.14856363s ago: executing program 0 (id=2204): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@local, 0x0, r2}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000100)={'veth1\x00', 0x100}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x40c0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000200000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 2.097005758s ago: executing program 3 (id=2205): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000300)=[@window, @window, @window={0x3, 0x8, 0x4}, @timestamp, @timestamp, @timestamp], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) shutdown(r0, 0x1) 1.995791118s ago: executing program 4 (id=2206): sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0xb0, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x70}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff0}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x9, @private2, 0x49}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) 1.99552136s ago: executing program 3 (id=2207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)={0x1c, r1, 0x11, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080), 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 1.995193814s ago: executing program 5 (id=1481): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a6361b80cdd64bdf00000000000869045aac0000659f55df08f9b90788ff7f00000010000029c21ebbcde61d8ab5920aef6c3e007fe61241638962cf0b89ef506cfd3f1d4163d3cfca3733b30070a7cf53021a95fdaf3c7220a0e23db436659a8c54328a702688f92b6b71569d65e33d46f8d8ae24ba69c657afac04379cb536008c219991704f11c51b1d076f03b0f917c766f3a7598bbc00feb3bc8e88f79df517b37b56bcbc290080000000000000e675458a43b8a8935bf9cf0be7d0aeaac41405e341cd0ba0d6fd562489dad595712a4051bb6cf826ab757193fc09d305f95c55d5746419000000000000007b61803bd430ef06000000000000001e93f640f159320c8b088f4d6497682eb312d4967aff9e4c14c66c90000054ed82c7cba4c81f91d6dfed18767bf0df584b4b6c4204df411f921e3aa02a67dd324b8176020e9c024751e539c05727f82c92046bfe64babb6d7ba86526b7886a0c2481c5812812a6fa3fca3758cbd8c32b25c28be225bd1f16297baa065f5bf96330fad0aaa4388c06c0eb2ecdf829af9577fcd868cc269b740000b7ad193c5e5850df01aff96877d73a63246ce6f0467167626329ab910b7a13d9ec9a64e7f6b56aeab8c38f69a213c96e2d2ad7978c9d721c270f27e7025d576535198742d403ec43572d7d0baf00e882617b260627805ca44200335ea4363066944d0aa6feb9705b09ba40d4642519281151f875cbf13a582f90ad719f0eccf02a473dd508a16138904933689ea6050041206473075eaeff2b69c2f2bf6f691c3560e068743a08e9771280da61fd8fdc3f7a35ea352e35753c59ebc1bd27ab6603e6afb1b3f057fbb7ed3aabe702b3c6301d3f5c295d1d69d1541d0e64631c95d6c0999e27e8d1a58f6a00f19102d2bfaf53f25a45637b1c577ae50c4c5669b13a4ed999dd10d2f091dcda39d9abc40c64a20c14ff0b1bf4d23fe07ae90fa0eba9c64bf89b26e7d8d70710b04f9ece5969023acadbb4582272e5b3a0429a5645b0c824ad36f7cc8be12b3874d5a19349b0ede845e9dddcab4a78b08ed60104002aabb17eb1840bc8e0ed1dd8b9b7eeaf32a185d80250a7f2252775905eeeb756eadafe20bbc616bc44b347abc8caf722b2c3b06884c1d3690f23b06fa4541bb2a81073b452764f04bd39008b65ee222cf697ac21b087548e9708dffaff2859e973b1e88668c8022cc6dac8548167e5798ec9c7d288a7fa7749f07513187cd8f060abbbc5e37dd1ba3aab927be1b409be733b7408534e5b0951e9ecfd0a1c77e3a29be47e896aecac0bc4093330124615056e3ce0ce6ac91b1242d3bb2e787a186dc2ec284d60e9d8a03884a22eeaa1efa497ee88c6cb565b164a260afb5157e392b1ebb1a4d4f992011ecbac4a0a7ff5bdcef7994a422bb2761edd2d8f20f5f879a88f89d48b8314f862585e4b7a9d6a6681f40e8b82cc6555dce2db951d164cc9a70e640ac8974faa2587a6e3af3b9458f7d4b4077b3002536b10ea24d73307a33090c4c270909a5322eac32cb175e68fa83457b21465c08c02dcefccc0c714c2862ddbe567755f05c1e671328d160d3752345ca1db6e74c720e42afca982ba6befd96c5575f1dd8f87ff6606301c0000000000000000000000000000000000000004d0d54b4caf78018766cdb971e8b168d4763c1f00000003d4e1d842caf457797f93db93e4f38a9dbd79f6bf5dc40b55fdbf9b856665061b2e2924f27eb2d2b5a181ccfd9eeb11dec165b6f12433f00bb06124041ffdcdcdc91f3b3b76635a689c9249cf69bcae654bfa81e75b7c7002b883c56026d83520395b7d511f607cf2f899c7b1c75e2192f775d72247167285857588ace1115fbebfee3c16b84cf7036d41c493a63c09f2ce46c1f5995c2d7fe58c15e64bb4cb7e7f336cc22fa1ea1363bce375bd3d579be1dddb08ed5147b629e4b3f0e65783ee5e20d9270802f2a7500738d95216743bc36a04ba8d486fb26252d684b84fa24639089064ca7b93057c041f12d544dab4d24a4f952b4f265a69ba279929959991b7ac63786055b3c029a0e8b6e42ad33cba2661957cff0700000000000029bb61462623a58556cd62844d4d23cc738ee5b36c71d2c010b089251d5806000b1ade92dd9f441468967c052aecd9de81b4b55d06670597991f37ddc4fa19a6369d5bf76c474633a337f676ad255869881da5cadcf49ce9188129cc978977f87b32bd4945717075cbb4d3e01e67ff087644f52fcf0a3c732b0586cb87972c43d2616bf4e521dc310fbf1760243d51a197d3ecfd74bd625e9f496175513f3e97854ea76e26e96a8639a297871485a8609f8ca842b3321932c4d9e224a0cec5946cec9e359fd3687415cad5fb8c678136f36d9f781fade9f2469477748f4dfa0f56c326c89bb5d07f35aaf95303b5a620fc84e1c73557b2277831f8f633f0d293c0e3f4f93149887271e645f50a4e57010a9b76457f6ad73231a905206bbb1b95248aed85a9df9dea64cc1fd1f06a98530000000000000045fcc1fb138fce0faec0a423e860d5b308d7849381b294106af25f15fec047d5b844a99f36e342165df728e381b48c20e0900f8d265157467d3494f2b93c7f3c817688cec2d226f50edb115c2e075f3c663a4b4169bc6fd7d4fbce205f2a1ae263ae0db900fa0a13cf796e0d7a9dad86953c13ed6241206d682e194c64c491de6a531e9bd45abe705f07000a82ccd41a2c1b23bac44b7371a3a0aeab3647c56f0680cd30ca260189dffed79c2cfae39d8160d3fac695b75654a4a5695b9edec673e75d97950fd4d80bdf8e2d83a3232768b1231b09ef4d995a783eb8f731523e9f6c2ee9119d567acd471bc391bd4f07600d5b04b71c1f1fd7e219b8df5123e4c529db3ce74353e8a39e2d21ce0954334951d509cdce531fb14230fa3b7331a943e7223b0ac8725a0d45a213fa249a8801959480ecdc5999c9df72debe8510d0620fce7be7086d5b72e857243f0a7883d9749b1f40936b51631e0060a0d9901d730000000000000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000100)="e460cdfbef2408002900119386dd6a000000000711eb3014cd3ec85a946fbd8b38ee4a7aa8d6d8be7803547ac6150ea755c1e1380081ffad0004", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000e80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.126513968s ago: executing program 0 (id=2208): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x8}], 0x1, 0x2, 0x0) 1.126182936s ago: executing program 1 (id=2209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 1.125985369s ago: executing program 3 (id=2210): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff2500000008000300", @ANYRES32=r2], 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.125698765s ago: executing program 4 (id=2211): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f00004ef000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r1, 0xffffd000) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="298a106356", 0x5}], 0x1) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 921.459543ms ago: executing program 1 (id=2212): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x34, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x34}}, 0x0) 847.730976ms ago: executing program 4 (id=2213): write$tun(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd020032"], 0xfdef) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x40}], 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fff, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}], 0x1, 0x20040840) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) 768.160257ms ago: executing program 4 (id=2214): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x1, 0x0, 0x0, 0xb, 0x1, 0xc45, 0xfff9, 0x3, 0xdb5fdbe2cef11a88, 0x8, 'syz0\x00'}) 723.167301ms ago: executing program 4 (id=2215): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000000c0)=0x1, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000002, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getpeername$packet(0xffffffffffffffff, &(0x7f0000000d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000dc0)=0x14) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="a80e316d2f6ac222b0402a8adcaaeb995c363aaf10d77772b422b7c3cd4e5808928499ef03ae8b61fe4b9f6b999f303177418e9fd4de198acb97325bef062faa51b12250a808e091b32f07", 0x4b}, {0x0}], 0x2, &(0x7f0000002080)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x33, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0xb51}, @padn]}}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x62, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0xd}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0x6, [0x8, 0x0, 0x3ff, 0x42, 0x4]}}, @pad1]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1}}}, @rthdr={{0x18, 0x29, 0x39, {0x88, 0x0, 0x0, 0x1}}}], 0xf0}}], 0x3, 0x4004) 0s ago: executing program 0 (id=2216): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0xe, 0x1, 0x0, 0xe, 0x0, 0xa, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x9, 0x7, 0x6e923fbc}, 0x10) kernel console output (not intermixed with test programs): 16 bytes leftover after parsing attributes in process `syz.0.1205'. [ 143.429925][ T9525] bond0: option ad_select: unable to set because the bond device is up [ 143.461325][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1204'. [ 143.537823][ T9529] netlink: 'syz.4.1208': attribute type 39 has an invalid length. [ 143.766981][ T9542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1214'. [ 143.939732][ T9554] netlink: 'syz.0.1216': attribute type 21 has an invalid length. [ 143.957905][ T9554] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1216'. [ 143.975494][ T9557] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1219'. [ 144.006788][ T9557] bond0: option ad_select: unable to set because the bond device is up [ 144.241973][ T9572] netlink: 'syz.3.1223': attribute type 39 has an invalid length. [ 144.584879][ T9595] netlink: 'syz.3.1231': attribute type 10 has an invalid length. [ 144.595954][ T9595] batman_adv: batadv0: Adding interface: vlan1 [ 144.602595][ T9595] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.653038][ T9595] batman_adv: batadv0: Interface activated: vlan1 [ 144.669636][ T9599] netlink: 'syz.0.1234': attribute type 10 has an invalid length. [ 144.680821][ T9599] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.746227][ T9604] netlink: 'syz.4.1235': attribute type 1 has an invalid length. [ 144.854603][ T9610] netlink: 'syz.3.1237': attribute type 39 has an invalid length. [ 144.875399][ T9604] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 146.071859][ T9626] xt_ecn: cannot match TCP bits for non-tcp packets [ 146.554781][ T9628] __nla_validate_parse: 9 callbacks suppressed [ 146.554800][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 146.587196][ T9548] bond0: (slave wlan1): interface is now down [ 146.591933][ T9634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1244'. [ 146.606166][ T9634] bond0: option ad_select: unable to set because the bond device is up [ 146.615277][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1243'. [ 146.640522][ T9549] bond0: (slave wlan1): interface is now down [ 146.689919][ T9549] bond0: (slave wlan1): interface is now down [ 146.704977][ T9549] bond0: now running without any active interface! [ 146.771830][ T9641] netlink: 'syz.3.1247': attribute type 10 has an invalid length. [ 146.951588][ T9649] dvmrp1: entered allmulticast mode [ 147.198724][ T9666] pim6reg: entered allmulticast mode [ 147.261382][ T9666] pim6reg: left allmulticast mode [ 147.829315][ T9693] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1265'. [ 148.112556][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1270'. [ 148.284039][ T9715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1273'. [ 148.340602][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1275'. [ 148.371526][ T9722] netlink: 'syz.1.1274': attribute type 1 has an invalid length. [ 148.394081][ T9722] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1274'. [ 148.777089][ T9702] delete_channel: no stack [ 149.163058][ T9740] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1279'. [ 149.219724][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1281'. [ 150.261313][ T9776] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 150.295649][ T9776] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.361222][ T9781] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.368497][ T9781] bond4: (slave vti1): The slave device specified does not support setting the MAC address [ 150.394334][ T9781] bond4: (slave vti1): Error -95 calling set_mac_address [ 150.708331][ T5859] Bluetooth: hci5: command tx timeout [ 150.806558][ T9803] tun0: tun_chr_ioctl cmd 2147767511 [ 150.824910][ T9802] IPv6: sit1: Disabled Multicast RS [ 150.862423][ T29] audit: type=1107 audit(1730932582.868:2): pid=9800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 150.892820][ T9810] delete_channel: no stack [ 151.031684][ T9807] bridge0: port 2(vlan2) entered blocking state [ 151.042663][ T9807] bridge0: port 2(vlan2) entered disabled state [ 151.051913][ T9807] vlan2: entered allmulticast mode [ 151.057241][ T9807] gretap0: entered allmulticast mode [ 151.069041][ T9807] vlan2: entered promiscuous mode [ 151.074218][ T9807] gretap0: entered promiscuous mode [ 151.096032][ T9807] bridge0: port 2(vlan2) entered blocking state [ 151.102462][ T9807] bridge0: port 2(vlan2) entered forwarding state [ 151.630070][ T9851] FAULT_INJECTION: forcing a failure. [ 151.630070][ T9851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.641003][ T9850] __nla_validate_parse: 4 callbacks suppressed [ 151.641022][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1315'. [ 151.656825][ T9851] CPU: 1 UID: 0 PID: 9851 Comm: syz.4.1316 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 151.669332][ T9851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.679417][ T9851] Call Trace: [ 151.682721][ T9851] [ 151.685673][ T9851] dump_stack_lvl+0x241/0x360 [ 151.690406][ T9851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.695645][ T9851] ? __pfx__printk+0x10/0x10 [ 151.700278][ T9851] ? __pfx_lock_release+0x10/0x10 [ 151.705342][ T9851] should_fail_ex+0x3b0/0x4e0 [ 151.710147][ T9851] _copy_from_user+0x2f/0xc0 [ 151.714779][ T9851] __sys_bpf+0x1a4/0x810 [ 151.719066][ T9851] ? __pfx___sys_bpf+0x10/0x10 [ 151.723874][ T9851] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.729896][ T9851] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.736257][ T9851] ? do_syscall_64+0x100/0x230 [ 151.741040][ T9851] __x64_sys_bpf+0x7c/0x90 [ 151.745473][ T9851] do_syscall_64+0xf3/0x230 [ 151.749981][ T9851] ? clear_bhb_loop+0x35/0x90 [ 151.754658][ T9851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.760549][ T9851] RIP: 0033:0x7f4446b7e719 [ 151.764959][ T9851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.784562][ T9851] RSP: 002b:00007f44478e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 151.792983][ T9851] RAX: ffffffffffffffda RBX: 00007f4446d35f80 RCX: 00007f4446b7e719 [ 151.800958][ T9851] RDX: 0000000000000094 RSI: 0000000020000840 RDI: 0000000000000005 [ 151.808928][ T9851] RBP: 00007f44478e7090 R08: 0000000000000000 R09: 0000000000000000 [ 151.816895][ T9851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.824865][ T9851] R13: 0000000000000000 R14: 00007f4446d35f80 R15: 00007ffe0e4b3d28 [ 151.832851][ T9851] [ 152.024967][ T9862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1321'. [ 152.425116][ T9873] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1324'. [ 152.514780][ T9887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 152.559006][ T9887] bond2: entered promiscuous mode [ 152.586758][ T9887] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.596359][ T9887] bond3: entered promiscuous mode [ 152.604771][ T9887] bond2: (slave bond3): Enslaving as an active interface with an up link [ 152.628494][ T9891] netlink: 'syz.5.1330': attribute type 64 has an invalid length. [ 152.651264][ T9895] bond2 (unregistering): (slave bond3): Releasing backup interface [ 152.693983][ T9895] bond3: left promiscuous mode [ 152.711080][ T9895] bond2 (unregistering): Released all slaves [ 152.719524][ T9902] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1332'. [ 152.966731][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1337'. [ 152.967598][ T9914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1337'. [ 153.060616][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1337'. [ 153.280991][ T9881] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 153.412260][ T9929] netlink: 'syz.1.1341': attribute type 1 has an invalid length. [ 153.453795][ T9929] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 153.835442][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1344'. [ 153.846172][ T9943] bond0: option ad_select: unable to set because the bond device is up [ 154.053170][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1348'. [ 154.217686][ T9956] netlink: 'syz.0.1347': attribute type 12 has an invalid length. [ 154.328457][ T9973] netdevsim netdevsim5: Direct firmware load for ./file0 failed with error -2 [ 154.353925][ T9973] netdevsim netdevsim5: Falling back to sysfs fallback for: ./file0 [ 154.417619][ T9979] Cannot find add_set index 32768 as target [ 154.425595][ T9981] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 154.507097][ T9985] dccp_invalid_packet: P.Data Offset(172) too large [ 154.897057][T10018] bond0: option ad_select: unable to set because the bond device is up [ 154.950162][T10019] xt_ecn: cannot match TCP bits for non-tcp packets [ 155.009025][T10021] : renamed from bond0 (while UP) [ 155.167597][T10034] netlink: 'syz.5.1374': attribute type 6 has an invalid length. [ 156.423958][T10080] gretap0: entered promiscuous mode [ 156.446749][T10080] vlan3: entered promiscuous mode [ 156.482106][T10080] gretap0: left promiscuous mode [ 157.308442][T10106] __nla_validate_parse: 4 callbacks suppressed [ 157.308460][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1392'. [ 157.340656][T10116] openvswitch: netlink: Message has 8 unknown bytes. [ 157.358194][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1393'. [ 157.487951][T10120] gretap0: entered promiscuous mode [ 157.496461][T10120] vlan3: entered promiscuous mode [ 157.505277][T10120] gretap0: left promiscuous mode [ 157.691861][T10131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1402'. [ 158.613691][T10178] netlink: 'syz.3.1412': attribute type 39 has an invalid length. [ 158.815158][T10187] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 158.909067][T10189] gretap0: entered promiscuous mode [ 158.917255][T10189] vlan2: entered promiscuous mode [ 158.987079][T10189] gretap0: left promiscuous mode [ 159.256427][T10214] netlink: 'syz.0.1426': attribute type 39 has an invalid length. [ 159.331554][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1428'. [ 159.425781][T10225] netlink: 'syz.0.1429': attribute type 3 has an invalid length. [ 159.434879][T10225] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1429'. [ 159.687555][T10235] SET target dimension over the limit! [ 159.716938][T10237] team0: left allmulticast mode [ 159.729628][T10237] bridge0: port 1(team0) entered disabled state [ 159.761030][T10237] bond0: (slave wlan1): Releasing backup interface [ 159.816243][T10237] team0: Port device bridge3 removed [ 159.825177][T10237] vlan2: left allmulticast mode [ 159.831764][T10237] gretap0: left allmulticast mode [ 159.837008][T10237] vlan2: left promiscuous mode [ 159.842104][T10237] gretap0: left promiscuous mode [ 159.847450][T10237] bridge0: port 2(vlan2) entered disabled state [ 159.862703][T10239] netlink: 'syz.1.1434': attribute type 21 has an invalid length. [ 159.875534][T10239] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1434'. [ 160.243107][T10256] netlink: 'syz.5.1438': attribute type 39 has an invalid length. [ 160.561437][T10277] x_tables: ip_tables: tcpmss match: only valid for protocol 6 [ 160.583936][T10287] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1447'. [ 160.612158][T10288] netlink: 'syz.1.1449': attribute type 9 has an invalid length. [ 160.681112][T10295] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1450'. [ 160.691707][T10295] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1450'. [ 160.724837][T10295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1450'. [ 162.135837][T10359] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 162.589191][T10384] netlink: 'syz.1.1485': attribute type 1 has an invalid length. [ 162.609683][T10388] netlink: 'syz.3.1486': attribute type 39 has an invalid length. [ 162.618324][T10384] __nla_validate_parse: 5 callbacks suppressed [ 162.618343][T10384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'. [ 162.684187][T10392] netlink: 'syz.4.1487': attribute type 39 has an invalid length. [ 162.800219][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1488'. [ 162.863391][T10395] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 162.929285][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 162.939784][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 162.947653][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 162.974915][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 162.988461][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 162.996772][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 163.168767][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 163.226618][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 163.260380][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 163.297261][T10421] gretap0: entered promiscuous mode [ 163.303120][T10421] vlan3: entered promiscuous mode [ 163.313418][T10421] gretap0: left promiscuous mode [ 163.347340][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 163.366992][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 163.420787][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 163.456052][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 163.488291][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'. [ 163.537499][T10431] netlink: 'syz.4.1499': attribute type 1 has an invalid length. [ 163.729545][T10443] team3 (uninitialized): Failed to send options change via netlink (err -105) [ 163.765120][T10405] chnl_net:caif_netlink_parms(): no params data found [ 163.843008][T10445] vlan2: entered promiscuous mode [ 163.848236][T10445] gretap0: entered promiscuous mode [ 163.853571][T10445] vlan2: entered allmulticast mode [ 163.860376][T10445] gretap0: entered allmulticast mode [ 163.871384][T10445] gretap0: left allmulticast mode [ 163.876561][T10445] gretap0: left promiscuous mode [ 164.407560][T10447] team0 (unregistering): left allmulticast mode [ 164.414351][T10447] team0 (unregistering): left promiscuous mode [ 164.421911][T10447] bridge0: port 1(team0) entered disabled state [ 164.500715][T10405] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.512998][T10405] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.543530][T10405] bridge_slave_0: entered allmulticast mode [ 164.569574][T10405] bridge_slave_0: entered promiscuous mode [ 164.592670][T10479] bond_slave_0: entered promiscuous mode [ 164.598705][T10479] bond_slave_1: entered promiscuous mode [ 164.607733][T10405] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.616989][T10405] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.659801][T10405] bridge_slave_1: entered allmulticast mode [ 164.676198][T10405] bridge_slave_1: entered promiscuous mode [ 164.751896][T10405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.766472][T10405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.869752][T10405] team0: Port device team_slave_0 added [ 164.910158][T10405] team0: Port device team_slave_1 added [ 164.962962][T10405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.972753][T10405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.002264][T10405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.029282][T10405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.046310][T10405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.076839][T10405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.099801][ T53] Bluetooth: hci5: command tx timeout [ 165.183303][T10405] hsr_slave_0: entered promiscuous mode [ 165.190327][T10405] hsr_slave_1: entered promiscuous mode [ 165.196372][T10405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.204134][T10405] Cannot create hsr debugfs directory [ 165.210149][T10510] bond0: option ad_select: unable to set because the bond device is up [ 165.265448][T10508] netlink: 'syz.4.1526': attribute type 1 has an invalid length. [ 165.377838][T10517] netlink: 'syz.1.1529': attribute type 1 has an invalid length. [ 165.486488][T10523] bond4: (slave xfrm2): The slave device specified does not support setting the MAC address [ 165.513961][T10523] bond4: (slave xfrm2): Setting fail_over_mac to active for active-backup mode [ 165.544228][T10523] bond4: (slave xfrm2): making interface the new active one [ 165.577350][T10523] bond4: (slave xfrm2): Enslaving as an active interface with an up link [ 165.671669][T10405] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.737229][T10517] bond4 (unregistering): (slave xfrm2): Releasing backup interface [ 165.770180][T10517] bond4 (unregistering): Released all slaves [ 165.914807][T10405] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.958504][T10535] netlink: 'syz.4.1534': attribute type 18 has an invalid length. [ 166.041052][T10405] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.157258][T10405] bond0: (slave netdevsim0): Releasing backup interface [ 166.193246][T10405] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.536448][T10405] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.559050][T10405] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.576199][T10405] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.597333][T10405] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.745875][T10405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.774179][T10405] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.786145][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.793293][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.810601][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.817746][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.856159][T10405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.873155][T10405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 167.001998][T10405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.188190][ T53] Bluetooth: hci5: command tx timeout [ 167.208444][T10577] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 167.473325][T10405] veth0_vlan: entered promiscuous mode [ 167.510124][T10405] veth1_vlan: entered promiscuous mode [ 167.571594][T10405] veth0_macvtap: entered promiscuous mode [ 167.587440][T10405] veth1_macvtap: entered promiscuous mode [ 167.627893][T10405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.638604][T10405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.648949][T10405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.659820][T10405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.669765][T10405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.680666][T10405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.691674][T10405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.707409][T10405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.719077][T10600] __nla_validate_parse: 46 callbacks suppressed [ 167.719098][T10600] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1554'. [ 167.735895][T10405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.747870][T10405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.758755][T10405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.775667][T10405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.786914][T10405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.817745][T10405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.946820][T10608] netlink: 'syz.1.1556': attribute type 21 has an invalid length. [ 167.958704][T10608] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1556'. [ 168.571570][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1560'. [ 168.731681][T10625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 169.258673][ T53] Bluetooth: hci5: command tx timeout [ 169.775401][T10405] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.784232][T10405] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.793341][T10405] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.802499][T10405] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.814761][T10616] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1560'. [ 169.828483][T10616] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1560'. [ 170.005518][T10637] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1566'. [ 170.135154][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.148290][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.227782][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.244077][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.455481][T10655] syzkaller1: entered promiscuous mode [ 170.463050][T10655] syzkaller1: entered allmulticast mode [ 170.637917][T10675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1579'. [ 171.216329][T10695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1587'. [ 171.239532][T10704] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 171.250539][T10704] TCP: tcp_parse_options: Illegal window scaling value 112 > 14 received [ 171.634719][ T5859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 171.653119][ T5859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 171.661925][ T5859] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 171.675429][ T5859] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 171.683323][ T5859] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 171.691778][ T5859] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 173.369825][ T1007] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.433316][T10722] netlink: zone id is out of range [ 173.440969][T10722] netlink: zone id is out of range [ 173.461153][T10722] netlink: set zone limit has 4 unknown bytes [ 173.562474][ T1007] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.610670][T10727] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1595'. [ 173.648954][T10727] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1595'. [ 173.735320][T10732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'. [ 173.746909][ T5859] Bluetooth: hci5: command tx timeout [ 173.876352][ T1007] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.952064][ T29] audit: type=1107 audit(1730932605.938:3): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 174.020404][ T1007] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.341835][T10750] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1602'. [ 174.424650][T10761] IPv6: Can't replace route, no match found [ 174.564130][T10710] chnl_net:caif_netlink_parms(): no params data found [ 174.684930][ T1007] bridge_slave_1: left allmulticast mode [ 174.692782][ T1007] bridge_slave_1: left promiscuous mode [ 174.700768][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.718707][T10787] xt_l2tp: v2 sid > 0xffff: 262144 [ 174.743845][ T1007] bridge_slave_0: left allmulticast mode [ 174.763108][ T1007] bridge_slave_0: left promiscuous mode [ 174.783317][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.318440][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.334164][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.350731][ T1007] bond0 (unregistering): Released all slaves [ 175.630193][T10710] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.645423][T10710] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.655156][T10710] bridge_slave_0: entered allmulticast mode [ 175.674739][T10710] bridge_slave_0: entered promiscuous mode [ 175.732848][T10710] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.746942][T10710] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.755139][T10710] bridge_slave_1: entered allmulticast mode [ 175.763583][T10710] bridge_slave_1: entered promiscuous mode [ 175.770473][T10819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1623'. [ 175.819809][ T5859] Bluetooth: hci5: command tx timeout [ 175.905969][T10710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.932978][T10710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.954979][T10819] tap0: tun_chr_ioctl cmd 1074025677 [ 175.963951][T10819] tap0: linktype set to 805 [ 175.984515][T10827] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1625'. [ 176.014998][T10833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.037257][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 176.037441][T10832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.046902][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1626'. [ 176.095150][T10831] netlink: 'syz.1.1627': attribute type 10 has an invalid length. [ 176.123513][T10710] team0: Port device team_slave_0 added [ 176.162638][T10710] team0: Port device team_slave_1 added [ 176.188743][T10837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.287899][T10710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.320811][T10843] ieee802154 phy1 wpan1: encryption failed: -22 [ 176.328091][T10710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.360353][T10710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.373038][T10710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.399118][T10710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.447053][T10710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.459534][T10843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.516642][ T1007] hsr_slave_0: left promiscuous mode [ 176.526007][ T1007] hsr_slave_1: left promiscuous mode [ 176.537593][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.548354][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.566316][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.588339][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.622819][ T1007] veth1_macvtap: left promiscuous mode [ 176.633103][ T1007] veth0_macvtap: left promiscuous mode [ 176.640341][ T1007] veth1_vlan: left promiscuous mode [ 176.646449][ T1007] veth0_vlan: left promiscuous mode [ 177.172211][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 177.226779][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 177.722978][T10858] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 177.765265][T10710] hsr_slave_0: entered promiscuous mode [ 177.789532][T10710] hsr_slave_1: entered promiscuous mode [ 177.808890][T10710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.816503][T10710] Cannot create hsr debugfs directory [ 177.852843][T10873] netlink: 'syz.1.1635': attribute type 21 has an invalid length. [ 177.870142][T10873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1635'. [ 177.902642][ T5859] Bluetooth: hci5: command tx timeout [ 177.971349][T10877] Cannot find del_set index 286 as target [ 178.189582][T10890] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 178.198138][T10890] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 178.205862][T10890] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.341359][T10896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1644'. [ 178.637500][T10903] gretap0: entered promiscuous mode [ 178.642973][T10903] vlan3: entered promiscuous mode [ 178.655803][T10903] gretap0: left promiscuous mode [ 178.786977][T10710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 178.817106][T10912] __nla_validate_parse: 1 callbacks suppressed [ 178.817125][T10912] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1650'. [ 178.848464][T10710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 178.859911][T10710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 178.873758][T10710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.052348][T10710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.072750][T10924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 179.082691][T10924] team4 (uninitialized): Failed to send options change via netlink (err -105) [ 179.155071][T10926] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 179.193994][T10928] netlink: 'syz.1.1658': attribute type 4 has an invalid length. [ 179.243696][T10928] netlink: 'syz.1.1658': attribute type 4 has an invalid length. [ 179.307671][T10710] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.340423][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.347575][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.379061][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.386228][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.444007][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1660'. [ 179.496302][T10947] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 36143 - 0 [ 179.508387][T10947] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 36143 - 0 [ 179.532367][T10947] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 36143 - 0 [ 179.553916][T10947] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 36143 - 0 [ 179.567636][T10947] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 60955 - 0 [ 179.604800][T10947] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 60955 - 0 [ 179.616566][T10947] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 60955 - 0 [ 179.625641][T10947] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 60955 - 0 [ 179.641555][T10947] geneve3: entered promiscuous mode [ 179.646898][T10947] geneve3: entered allmulticast mode [ 179.682627][T10951] netlink: 'syz.4.1664': attribute type 10 has an invalid length. [ 179.706099][T10951] FAULT_INJECTION: forcing a failure. [ 179.706099][T10951] name failslab, interval 1, probability 0, space 0, times 0 [ 179.719200][T10951] CPU: 0 UID: 0 PID: 10951 Comm: syz.4.1664 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 179.729986][T10951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.740077][T10951] Call Trace: [ 179.743370][T10951] [ 179.746302][T10951] dump_stack_lvl+0x241/0x360 [ 179.750985][T10951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.756185][T10951] ? __pfx__printk+0x10/0x10 [ 179.760779][T10951] should_fail_ex+0x3b0/0x4e0 [ 179.765472][T10951] should_failslab+0xac/0x100 [ 179.770179][T10951] ? __hw_addr_add_ex+0x1a8/0x610 [ 179.775240][T10951] __kmalloc_cache_noprof+0x6c/0x2c0 [ 179.780546][T10951] __hw_addr_add_ex+0x1a8/0x610 [ 179.785426][T10951] __hw_addr_sync+0x127/0x280 [ 179.790150][T10951] ieee80211_set_multicast_list+0x153/0x210 [ 179.796068][T10951] ? __pfx_ieee80211_set_multicast_list+0x10/0x10 [ 179.802528][T10951] dev_set_rx_mode+0x233/0x2e0 [ 179.807306][T10951] __dev_change_flags+0x19c/0x6f0 [ 179.812332][T10951] ? __pfx___dev_change_flags+0x10/0x10 [ 179.817875][T10951] ? validate_linkmsg+0x825/0xa30 [ 179.822895][T10951] ? __wake_up_klogd+0xd5/0x110 [ 179.827738][T10951] ? vprintk_emit+0x7ed/0xa10 [ 179.832411][T10951] ? __pfx_validate_linkmsg+0x10/0x10 [ 179.837822][T10951] dev_change_flags+0x8b/0x1a0 [ 179.842583][T10951] do_setlink+0xc90/0x4210 [ 179.847012][T10951] ? __nla_validate_parse+0x4f4/0x3090 [ 179.852563][T10951] ? __pfx__printk+0x10/0x10 [ 179.857150][T10951] ? __pfx_do_setlink+0x10/0x10 [ 179.862016][T10951] ? __nla_validate_parse+0x26ce/0x3090 [ 179.867579][T10951] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 179.873150][T10951] ? rtnl_newlink+0x107/0x1550 [ 179.877935][T10951] ? aa_get_newest_label+0xff/0x6f0 [ 179.883144][T10951] ? __pfx_aa_get_newest_label+0x10/0x10 [ 179.888783][T10951] ? __pfx_aa_get_newest_label+0x10/0x10 [ 179.894424][T10951] ? apparmor_capable+0x13b/0x1b0 [ 179.899450][T10951] ? bpf_lsm_capable+0x9/0x10 [ 179.904123][T10951] ? security_capable+0x7e/0x2d0 [ 179.909058][T10951] ? ns_capable+0x8a/0xf0 [ 179.913387][T10951] ? rtnl_link_get_net_capable+0x103/0x2d0 [ 179.919191][T10951] rtnl_newlink+0xeec/0x1550 [ 179.923812][T10951] ? __pfx_rtnl_newlink+0x10/0x10 [ 179.928862][T10951] ? __mutex_lock+0x9ab/0xd70 [ 179.933548][T10951] ? __mutex_lock+0x52a/0xd70 [ 179.938223][T10951] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 179.943343][T10951] ? __pfx___mutex_lock+0x10/0x10 [ 179.948370][T10951] ? __pfx_rtnl_newlink+0x10/0x10 [ 179.953433][T10951] rtnetlink_rcv_msg+0x73f/0xcf0 [ 179.958369][T10951] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 179.963482][T10951] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.968944][T10951] ? ref_tracker_free+0x643/0x7e0 [ 179.973968][T10951] netlink_rcv_skb+0x1e3/0x430 [ 179.978733][T10951] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.984199][T10951] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.989593][T10951] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.994788][T10951] netlink_unicast+0x7f6/0x990 [ 179.999554][T10951] ? __pfx_netlink_unicast+0x10/0x10 [ 180.004830][T10951] ? __virt_addr_valid+0x183/0x530 [ 180.009939][T10951] ? __check_object_size+0x48e/0x900 [ 180.015221][T10951] netlink_sendmsg+0x8e4/0xcb0 [ 180.019997][T10951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.025285][T10951] ? aa_sock_msg_perm+0x91/0x160 [ 180.030224][T10951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.035513][T10951] __sock_sendmsg+0x221/0x270 [ 180.040194][T10951] ____sys_sendmsg+0x52a/0x7e0 [ 180.044976][T10951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.050276][T10951] __sys_sendmsg+0x292/0x380 [ 180.054880][T10951] ? __pfx___sys_sendmsg+0x10/0x10 [ 180.059999][T10951] ? __pfx_vfs_write+0x10/0x10 [ 180.064787][T10951] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.071117][T10951] ? do_syscall_64+0x100/0x230 [ 180.075876][T10951] ? do_syscall_64+0xb6/0x230 [ 180.080571][T10951] do_syscall_64+0xf3/0x230 [ 180.085079][T10951] ? clear_bhb_loop+0x35/0x90 [ 180.089765][T10951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.095661][T10951] RIP: 0033:0x7f4446b7e719 [ 180.100093][T10951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.119721][T10951] RSP: 002b:00007f44478c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.128143][T10951] RAX: ffffffffffffffda RBX: 00007f4446d36058 RCX: 00007f4446b7e719 [ 180.136143][T10951] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000007 [ 180.144123][T10951] RBP: 00007f44478c6090 R08: 0000000000000000 R09: 0000000000000000 [ 180.152181][T10951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.160153][T10951] R13: 0000000000000000 R14: 00007f4446d36058 R15: 00007ffe0e4b3d28 [ 180.168137][T10951] [ 180.178118][ T5860] Bluetooth: hci5: command tx timeout [ 180.290847][T10710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.423136][T10967] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1669'. [ 180.445501][T10967] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1669'. [ 180.484876][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1669'. [ 180.501050][T10975] pim6reg: entered allmulticast mode [ 180.507542][T10975] pim6reg: left allmulticast mode [ 180.543210][T10974] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1671'. [ 180.556938][T10974] syz_tun: entered promiscuous mode [ 180.566208][T10974] syz_tun: left promiscuous mode [ 180.733156][T10710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.766217][T10989] netlink: 'syz.4.1675': attribute type 39 has an invalid length. [ 181.266559][ T5860] Bluetooth: hci3: command 0x0406 tx timeout [ 181.272211][T10710] veth0_vlan: entered promiscuous mode [ 181.273167][ T5153] Bluetooth: hci1: command 0x0406 tx timeout [ 181.284597][ T5854] Bluetooth: hci2: command 0x0406 tx timeout [ 181.310830][T10710] veth1_vlan: entered promiscuous mode [ 181.367526][T10710] veth0_macvtap: entered promiscuous mode [ 181.378065][T10710] veth1_macvtap: entered promiscuous mode [ 181.463980][T10710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.474870][T10710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.495934][T10710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.536697][T10710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.547193][T10710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.558094][T10710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.571008][T10710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.606213][T11038] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1687'. [ 181.617327][T11040] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 181.643764][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'. [ 181.645930][T11024] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1687'. [ 181.726846][T10710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.738428][T10710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.748525][T10710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.759437][T10710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.769508][T10710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.780022][T10710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.791461][T10710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.803081][T10710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.811922][T10710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.820939][T10710] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.830071][T10710] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.917458][T11050] macvtap1: entered promiscuous mode [ 181.922933][T11050] vlan0: entered promiscuous mode [ 182.059909][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.068187][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.086845][T11057] netlink: 'syz.0.1692': attribute type 2 has an invalid length. [ 182.121338][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.188617][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.274368][T11067] tipc: Invalid UDP bearer configuration [ 182.274407][T11067] tipc: Enabling of bearer rejected, failed to enable media [ 182.449399][T11066] ebtables: ebtables: counters copy to user failed while replacing table [ 184.148741][T11078] __nla_validate_parse: 4 callbacks suppressed [ 184.148762][T11078] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1698'. [ 184.173198][T11078] syz_tun: entered promiscuous mode [ 184.180193][T11082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1700'. [ 184.394653][ T1007] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.789557][T11113] netlink: 'syz.0.1705': attribute type 1 has an invalid length. [ 184.794967][T11115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1707'. [ 184.797770][T11113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'. [ 184.923669][ T1007] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.094419][ T1007] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.224270][ T1007] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.247164][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.258612][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.273519][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.308430][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.316152][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 185.323783][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.491040][T11143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1712'. [ 185.803182][T11135] chnl_net:caif_netlink_parms(): no params data found [ 185.822469][ T1007] bridge_slave_1: left allmulticast mode [ 185.838858][ T1007] bridge_slave_1: left promiscuous mode [ 185.845116][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.857709][ T1007] bridge_slave_0: left allmulticast mode [ 185.874419][ T1007] bridge_slave_0: left promiscuous mode [ 185.882464][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.237685][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.257490][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.270948][ T1007] bond0 (unregistering): Released all slaves [ 186.647577][T11185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1723'. [ 186.665421][T11185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1723'. [ 186.703123][T11135] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.713741][T11135] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.726567][T11135] bridge_slave_0: entered allmulticast mode [ 186.735777][T11135] bridge_slave_0: entered promiscuous mode [ 186.754618][T11135] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.772983][T11135] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.787632][T11135] bridge_slave_1: entered allmulticast mode [ 186.800912][T11135] bridge_slave_1: entered promiscuous mode [ 186.825755][T11189] pim6reg: entered allmulticast mode [ 186.904840][T11189] pim6reg: left allmulticast mode [ 187.013171][ T1007] hsr_slave_0: left promiscuous mode [ 187.050163][ T1007] hsr_slave_1: left promiscuous mode [ 187.056314][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.078457][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.099704][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.103041][T11202] FAULT_INJECTION: forcing a failure. [ 187.103041][T11202] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.107136][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.153221][T11202] CPU: 0 UID: 0 PID: 11202 Comm: syz.4.1728 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 187.164040][T11202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 187.174124][T11202] Call Trace: [ 187.177426][T11202] [ 187.180390][T11202] dump_stack_lvl+0x241/0x360 [ 187.185118][T11202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.190347][T11202] ? __pfx__printk+0x10/0x10 [ 187.194969][T11202] ? __pfx_lock_release+0x10/0x10 [ 187.200028][T11202] should_fail_ex+0x3b0/0x4e0 [ 187.204774][T11202] _copy_from_user+0x2f/0xc0 [ 187.209407][T11202] copy_msghdr_from_user+0xae/0x680 [ 187.214644][T11202] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 187.220492][T11202] __sys_sendmmsg+0x36d/0x730 [ 187.225204][T11202] ? __pfx___sys_sendmmsg+0x10/0x10 [ 187.230435][T11202] ? __pfx_lock_release+0x10/0x10 [ 187.235485][T11202] ? kstrtouint_from_user+0x128/0x190 [ 187.240906][T11202] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 187.246826][T11202] ? ksys_write+0x229/0x2b0 [ 187.251349][T11202] ? __pfx_lock_release+0x10/0x10 [ 187.256405][T11202] ? vfs_write+0x730/0xd30 [ 187.260854][T11202] ? __mutex_unlock_slowpath+0x21d/0x750 [ 187.266528][T11202] ? __fget_files+0x3f3/0x470 [ 187.271242][T11202] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 187.277250][T11202] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.283643][T11202] ? do_syscall_64+0x100/0x230 [ 187.288432][T11202] __x64_sys_sendmmsg+0xa0/0xb0 [ 187.293322][T11202] do_syscall_64+0xf3/0x230 [ 187.297850][T11202] ? clear_bhb_loop+0x35/0x90 [ 187.302549][T11202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.308475][T11202] RIP: 0033:0x7f4446b7e719 [ 187.312924][T11202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.332557][T11202] RSP: 002b:00007f44478e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 187.341007][T11202] RAX: ffffffffffffffda RBX: 00007f4446d35f80 RCX: 00007f4446b7e719 [ 187.349007][T11202] RDX: 0000000000000002 RSI: 0000000020005000 RDI: 0000000000000003 [ 187.357001][T11202] RBP: 00007f44478e7090 R08: 0000000000000000 R09: 0000000000000000 [ 187.364993][T11202] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 187.372988][T11202] R13: 0000000000000000 R14: 00007f4446d35f80 R15: 00007ffe0e4b3d28 [ 187.381001][T11202] [ 187.420206][ T53] Bluetooth: hci5: command tx timeout [ 187.442521][ T1007] veth1_macvtap: left promiscuous mode [ 187.457197][ T1007] veth0_macvtap: left promiscuous mode [ 187.505909][ T1007] veth1_vlan: left promiscuous mode [ 187.528258][ T1007] veth0_vlan: left promiscuous mode [ 188.387015][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 188.467822][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 188.965445][T11135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.975513][T11203] netlink: 'syz.0.1729': attribute type 10 has an invalid length. [ 188.984091][T11203] team0: left promiscuous mode [ 188.999906][T11203] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.009903][T11203] bond0: (slave team0): Enslaving as an active interface with a down link [ 189.020547][T11204] netlink: 'syz.0.1729': attribute type 10 has an invalid length. [ 189.029562][T11204] bond0: (slave team0): Releasing backup interface [ 189.046519][T11214] netlink: 'syz.3.1733': attribute type 14 has an invalid length. [ 189.066837][T11226] gretap0: entered promiscuous mode [ 189.088814][T11226] macsec3: entered promiscuous mode [ 189.094423][T11226] macsec3: entered allmulticast mode [ 189.129730][T11226] gretap0: entered allmulticast mode [ 189.149048][T11226] gretap0: left allmulticast mode [ 189.157134][T11226] gretap0: left promiscuous mode [ 189.241128][T11135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.382037][T11135] team0: Port device team_slave_0 added [ 189.397480][T11135] team0: Port device team_slave_1 added [ 189.439238][T11246] netlink: 'syz.4.1742': attribute type 3 has an invalid length. [ 189.447203][T11246] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1742'. [ 189.456368][T11246] netlink: 'syz.4.1742': attribute type 3 has an invalid length. [ 189.471277][T11246] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1742'. [ 189.494222][T11246] x_tables: ip_tables: osf match: only valid for protocol 6 [ 189.508432][ T53] Bluetooth: hci5: command tx timeout [ 189.599774][T11245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1741'. [ 189.628818][T11245] bond0: option ad_select: unable to set because the bond device is up [ 189.655481][T11253] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1744'. [ 189.666074][T11135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.673949][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.732062][T11135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.764780][T11135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.793210][T11253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 189.808312][T11135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.852767][T11135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.022196][T11274] sctp: [Deprecated]: syz.3.1752 (pid 11274) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.022196][T11274] Use struct sctp_sack_info instead [ 190.057565][T11135] hsr_slave_0: entered promiscuous mode [ 190.077809][T11135] hsr_slave_1: entered promiscuous mode [ 190.090036][T11135] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.100187][T11135] Cannot create hsr debugfs directory [ 190.346120][T11294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1756'. [ 190.482133][T11298] batadv0: entered promiscuous mode [ 190.509104][T11302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.734558][T11309] netlink: 'syz.1.1765': attribute type 5 has an invalid length. [ 190.879064][T11316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1768'. [ 191.030529][T11135] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 191.091508][T11135] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 191.134073][T11135] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 191.159702][T11135] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 191.233107][T11337] xt_l2tp: invalid flags combination: 4 [ 191.324927][T11339] netlink: 'syz.4.1775': attribute type 1 has an invalid length. [ 191.332162][T11135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.343292][T11339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1775'. [ 191.372506][T11135] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.392679][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.399842][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.432019][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.439191][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.588966][ T53] Bluetooth: hci5: command tx timeout [ 191.694121][T11135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.925548][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1784'. [ 192.047814][T11135] veth0_vlan: entered promiscuous mode [ 192.065016][T11135] veth1_vlan: entered promiscuous mode [ 192.100227][T11135] veth0_macvtap: entered promiscuous mode [ 192.107556][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1782'. [ 192.145668][T11135] veth1_macvtap: entered promiscuous mode [ 192.219865][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.239930][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.255227][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.265869][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.283554][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.294279][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.306061][T11135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.345032][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.376337][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.395683][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.407346][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.417766][T11135] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 192.429262][T11135] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.442035][T11135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.472287][T11135] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.492561][T11135] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.517855][T11135] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.538495][T11135] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.555458][T11392] pim6reg: entered allmulticast mode [ 192.571518][T11392] pim6reg: left allmulticast mode [ 192.684057][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.697638][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.775667][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.825361][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.920412][T11400] netlink: 'syz.3.1790': attribute type 3 has an invalid length. [ 193.107016][T11408] Cannot find del_set index 4 as target [ 193.182965][T11416] netlink: 'syz.0.1795': attribute type 1 has an invalid length. [ 193.448704][T11440] IPv6: addrconf: prefix option has invalid lifetime [ 193.560258][T11447] team5 (uninitialized): Failed to send options change via netlink (err -105) [ 193.702717][T11454] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 193.983514][T11471] IPv6: addrconf: prefix option has invalid lifetime [ 194.062039][ T1007] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.091527][T11473] team0 (uninitialized): Failed to send options change via netlink (err -105) [ 194.543842][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.622745][T11478] __nla_validate_parse: 7 callbacks suppressed [ 194.622765][T11478] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1817'. [ 194.674811][T11478] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1817'. [ 194.719140][T11478] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1817'. [ 194.970167][ T1007] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.036568][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.051731][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.061130][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 195.071545][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 195.091824][ T5862] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 195.100080][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 195.140441][ T1007] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.160578][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1824'. [ 195.173135][T11505] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1824'. [ 195.205842][T11507] netlink: 'syz.1.1825': attribute type 1 has an invalid length. [ 195.236325][ T1007] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.255482][T11507] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1825'. [ 195.327136][T11509] gretap0: entered promiscuous mode [ 195.334209][T11509] vlan2: entered promiscuous mode [ 195.341767][T11509] gretap0: left promiscuous mode [ 195.614714][ T1007] bridge_slave_1: left allmulticast mode [ 195.622192][ T1007] bridge_slave_1: left promiscuous mode [ 195.628499][ T1007] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.639625][ T1007] bridge_slave_0: left allmulticast mode [ 195.645938][ T1007] bridge_slave_0: left promiscuous mode [ 195.652478][ T1007] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.669139][T11519] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1828'. [ 196.106595][ T1007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 196.123078][ T1007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 196.135196][ T1007] bond0 (unregistering): Released all slaves [ 196.153510][T11518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 196.163200][T11518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1830'. [ 196.175355][T11519] netlink: 'syz.0.1828': attribute type 4 has an invalid length. [ 196.234291][T11525] netlink: 'syz.0.1828': attribute type 4 has an invalid length. [ 196.263554][T11530] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1829'. [ 196.349997][T11532] team0: entered promiscuous mode [ 196.387199][T11535] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 196.395638][T11514] team0: left promiscuous mode [ 196.507816][T11541] bond0: option ad_select: unable to set because the bond device is up [ 196.918731][T11498] chnl_net:caif_netlink_parms(): no params data found [ 196.984944][ T1007] hsr_slave_0: left promiscuous mode [ 197.007819][ T1007] hsr_slave_1: left promiscuous mode [ 197.018973][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.026453][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.061921][ T1007] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.076724][T11566] syz.1.1843: vmalloc error: size 268435456, failed to allocated page array size 524288, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 197.095437][T11566] CPU: 1 UID: 0 PID: 11566 Comm: syz.1.1843 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 197.106238][T11566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 197.116313][T11566] Call Trace: [ 197.119595][T11566] [ 197.122546][T11566] dump_stack_lvl+0x241/0x360 [ 197.127259][T11566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.132477][T11566] ? __pfx__printk+0x10/0x10 [ 197.137080][T11566] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 197.143512][T11566] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 197.150031][T11566] warn_alloc+0x278/0x410 [ 197.154368][T11566] ? __pfx_warn_alloc+0x10/0x10 [ 197.159223][T11566] ? __do_replace+0xcc/0xc40 [ 197.163819][T11566] ? __get_vm_area_node+0x23d/0x270 [ 197.169028][T11566] __vmalloc_node_range_noprof+0x691/0x13f0 [ 197.174928][T11566] ? translate_table+0x17f8/0x21f0 [ 197.180058][T11566] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 197.186399][T11566] ? __do_replace+0xcc/0xc40 [ 197.191002][T11566] vzalloc_noprof+0x79/0x90 [ 197.195504][T11566] ? __do_replace+0xcc/0xc40 [ 197.200093][T11566] __do_replace+0xcc/0xc40 [ 197.204526][T11566] ? __might_fault+0xaa/0x120 [ 197.209203][T11566] ? __pfx_translate_table+0x10/0x10 [ 197.214488][T11566] ? __pfx___do_replace+0x10/0x10 [ 197.219514][T11566] ? __might_fault+0xaa/0x120 [ 197.224190][T11566] ? __might_fault+0xc6/0x120 [ 197.228876][T11566] ? _copy_from_user+0x99/0xc0 [ 197.233639][T11566] ? copy_from_sockptr_offset+0x6b/0xb0 [ 197.239186][T11566] do_arpt_set_ctl+0x10de/0x1650 [ 197.244127][T11566] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 197.249412][T11566] ? __pfx___might_resched+0x10/0x10 [ 197.254693][T11566] ? nf_setsockopt+0x240/0x2c0 [ 197.259453][T11566] ? __pfx_lock_release+0x10/0x10 [ 197.264484][T11566] ? __mutex_lock+0x2ef/0xd70 [ 197.269157][T11566] ? __mutex_unlock_slowpath+0x21d/0x750 [ 197.274781][T11566] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 197.280155][T11566] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.286127][T11566] ? aa_sk_perm+0x96d/0xab0 [ 197.290630][T11566] ? __pfx_aa_sk_perm+0x10/0x10 [ 197.295476][T11566] nf_setsockopt+0x295/0x2c0 [ 197.300068][T11566] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 197.305953][T11566] do_sock_setsockopt+0x3af/0x720 [ 197.310988][T11566] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 197.316530][T11566] ? __fget_files+0x29/0x470 [ 197.321133][T11566] ? __fget_files+0x3f3/0x470 [ 197.325803][T11566] ? __fget_files+0x29/0x470 [ 197.330395][T11566] __sys_setsockopt+0x1a2/0x250 [ 197.335245][T11566] __x64_sys_setsockopt+0xb5/0xd0 [ 197.340269][T11566] do_syscall_64+0xf3/0x230 [ 197.344767][T11566] ? clear_bhb_loop+0x35/0x90 [ 197.349440][T11566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.355334][T11566] RIP: 0033:0x7f4062b7e719 [ 197.359744][T11566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.379347][T11566] RSP: 002b:00007f40638ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 197.387755][T11566] RAX: ffffffffffffffda RBX: 00007f4062d35f80 RCX: 00007f4062b7e719 [ 197.395724][T11566] RDX: 0000000000000060 RSI: 0000000000000000 RDI: 0000000000000005 [ 197.403692][T11566] RBP: 00007f4062bf139e R08: 0000000000000068 R09: 0000000000000000 [ 197.411661][T11566] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000000 [ 197.419626][T11566] R13: 0000000000000000 R14: 00007f4062d35f80 R15: 00007ffdd5b6fe38 [ 197.427602][T11566] [ 197.436857][ T5862] Bluetooth: hci5: command tx timeout [ 197.438329][ T1007] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.459788][T11566] Mem-Info: [ 197.466727][T11566] active_anon:5404 inactive_anon:0 isolated_anon:0 [ 197.466727][T11566] active_file:1564 inactive_file:38255 isolated_file:0 [ 197.466727][T11566] unevictable:768 dirty:260 writeback:0 [ 197.466727][T11566] slab_reclaimable:10882 slab_unreclaimable:108108 [ 197.466727][T11566] mapped:24456 shmem:1393 pagetables:689 [ 197.466727][T11566] sec_pagetables:0 bounce:0 [ 197.466727][T11566] kernel_misc_reclaimable:0 [ 197.466727][T11566] free:1323507 free_pcp:2346 free_cma:0 [ 197.512680][T11566] Node 0 active_anon:21716kB inactive_anon:0kB active_file:6256kB inactive_file:152944kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97824kB dirty:1040kB writeback:0kB shmem:4036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11560kB pagetables:2756kB sec_pagetables:0kB all_unreclaimable? no [ 197.526095][ T1007] veth1_macvtap: left promiscuous mode [ 197.547717][T11566] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 197.564526][ T1007] veth0_macvtap: left promiscuous mode [ 197.587885][ T1007] veth1_vlan: left promiscuous mode [ 197.593790][ T1007] veth0_vlan: left promiscuous mode [ 197.598367][T11577] netlink: 'syz.3.1845': attribute type 2 has an invalid length. [ 197.600382][T11566] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 197.635146][T11566] lowmem_reserve[]: 0 2463 2464 0 0 [ 197.649612][T11566] Node 0 DMA32 free:1369952kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:21676kB inactive_anon:0kB active_file:6256kB inactive_file:152380kB unevictable:1536kB writepending:1036kB present:3129332kB managed:2550484kB mlocked:0kB bounce:0kB free_pcp:9408kB local_pcp:756kB free_cma:0kB [ 197.693391][T11566] lowmem_reserve[]: 0 0 0 0 0 [ 197.702340][T11566] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 197.740875][T11566] lowmem_reserve[]: 0 0 0 0 0 [ 197.745873][T11566] Node 1 Normal free:3908008kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:492kB local_pcp:248kB free_cma:0kB [ 197.775799][T11566] lowmem_reserve[]: 0 0 0 0 0 [ 197.780637][T11566] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 197.795171][T11566] Node 0 DMA32: 3*4kB (UME) 6*8kB (UME) 8*16kB (ME) 24*32kB (UE) 8*64kB (UME) 18*128kB (UM) 18*256kB (UM) 8*512kB (UM) 5*1024kB (UM) 4*2048kB (UM) 330*4096kB (UME) = 1377468kB [ 197.832809][T11566] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 197.845346][T11566] Node 1 Normal: 76*4kB (UME) 51*8kB (UE) 38*16kB (UME) 182*32kB (UME) 97*64kB (UME) 27*128kB (UME) 14*256kB (UM) 9*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 946*4096kB (ME) = 3908008kB [ 197.863840][T11566] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.874004][T11566] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.883502][T11566] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 197.893237][T11566] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.911437][T11566] 41212 total pagecache pages [ 197.916173][T11566] 0 pages in swap cache [ 197.920836][T11566] Free swap = 124996kB [ 197.925071][T11566] Total swap = 124996kB [ 197.930323][T11566] 2097051 pages RAM [ 197.934330][T11566] 0 pages HighMem/MovableOnly [ 197.939933][T11566] 427644 pages reserved [ 197.944111][T11566] 0 pages cma reserved [ 198.368311][ T1007] team0 (unregistering): Port device team_slave_1 removed [ 198.409972][ T1007] team0 (unregistering): Port device team_slave_0 removed [ 198.831312][T11571] netlink: 'syz.0.1844': attribute type 10 has an invalid length. [ 198.852651][T11571] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 198.914967][T11577] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 198.923598][T11578] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 198.953632][T11581] bond0: left promiscuous mode [ 198.958903][T11581] bond0: left allmulticast mode [ 199.169481][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.176811][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.184670][T11498] bridge_slave_0: entered allmulticast mode [ 199.192164][T11498] bridge_slave_0: entered promiscuous mode [ 199.215353][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.223241][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.230622][T11498] bridge_slave_1: entered allmulticast mode [ 199.238473][T11498] bridge_slave_1: entered promiscuous mode [ 199.343520][T11498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.365401][T11607] netlink: 'syz.1.1856': attribute type 5 has an invalid length. [ 199.380710][T11498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.404016][T11610] netlink: 'syz.0.1857': attribute type 1 has an invalid length. [ 199.432635][T11609] batman_adv: batadv0: Interface deactivated: vlan1 [ 199.510932][ T5862] Bluetooth: hci5: command tx timeout [ 199.542614][T11609] batman_adv: batadv0: Removing interface: vlan1 [ 199.590435][T11498] team0: Port device team_slave_0 added [ 199.620074][T11498] team0: Port device team_slave_1 added [ 199.643845][T11619] netlink: 'syz.1.1858': attribute type 1 has an invalid length. [ 199.651964][T11619] __nla_validate_parse: 7 callbacks suppressed [ 199.651983][T11619] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1858'. [ 199.944610][T11498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.969644][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.023814][T11498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.045318][T11498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.055774][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.127694][T11498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.148584][T11625] batadv_slave_1: entered promiscuous mode [ 200.177142][T11627] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1861'. [ 200.200849][T11627] bond0: option ad_select: unable to set because the bond device is up [ 200.212040][T11625] batadv_slave_1: left promiscuous mode [ 200.389928][T11498] hsr_slave_0: entered promiscuous mode [ 200.396503][T11498] hsr_slave_1: entered promiscuous mode [ 200.410541][T11498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.418545][T11498] Cannot create hsr debugfs directory [ 200.430373][T11638] netlink: 'syz.0.1865': attribute type 4 has an invalid length. [ 201.064649][T11670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1875'. [ 201.171113][T11672] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1876'. [ 201.327319][T11682] FAULT_INJECTION: forcing a failure. [ 201.327319][T11682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 201.378590][T11686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 201.389808][T11682] CPU: 1 UID: 0 PID: 11682 Comm: syz.0.1879 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 201.393990][T11686] team4 (uninitialized): Failed to send options change via netlink (err -105) [ 201.400594][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.400612][T11682] Call Trace: [ 201.400621][T11682] [ 201.400631][T11682] dump_stack_lvl+0x241/0x360 [ 201.400662][T11682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.400687][T11682] ? __pfx__printk+0x10/0x10 [ 201.400712][T11682] ? __pfx_lock_release+0x10/0x10 [ 201.400742][T11682] should_fail_ex+0x3b0/0x4e0 [ 201.400764][T11682] _copy_from_user+0x2f/0xc0 [ 201.400789][T11682] xt_copy_counters+0x225/0x520 [ 201.400813][T11682] ? __pfx_xt_copy_counters+0x10/0x10 [ 201.400836][T11682] ? apparmor_capable+0x13b/0x1b0 [ 201.400863][T11682] ? bpf_lsm_capable+0x9/0x10 [ 201.400883][T11682] ? security_capable+0x7e/0x2d0 [ 201.400911][T11682] do_ipt_set_ctl+0x188/0x1250 [ 201.400940][T11682] ? __pfx___might_resched+0x10/0x10 [ 201.400964][T11682] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 201.400993][T11682] ? rcu_is_watching+0x15/0xb0 [ 201.401014][T11682] ? trace_contention_end+0x3c/0x120 [ 201.401036][T11682] ? __mutex_lock+0x2ef/0xd70 [ 201.401059][T11682] ? __mutex_unlock_slowpath+0x21d/0x750 [ 201.401077][T11682] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 201.401102][T11682] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.401119][T11682] ? aa_sk_perm+0x96d/0xab0 [ 201.529480][T11498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.531644][T11682] ? __pfx_aa_sk_perm+0x10/0x10 [ 201.543221][T11682] nf_setsockopt+0x295/0x2c0 [ 201.547846][T11682] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 201.553767][T11682] do_sock_setsockopt+0x3af/0x720 [ 201.558829][T11682] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 201.564405][T11682] ? __fget_files+0x29/0x470 [ 201.569026][T11682] ? __fget_files+0x3f3/0x470 [ 201.573725][T11682] ? __fget_files+0x29/0x470 [ 201.578356][T11682] __sys_setsockopt+0x1a2/0x250 [ 201.578488][ T5862] Bluetooth: hci5: command tx timeout [ 201.583214][T11682] __x64_sys_setsockopt+0xb5/0xd0 [ 201.583244][T11682] do_syscall_64+0xf3/0x230 [ 201.583263][T11682] ? clear_bhb_loop+0x35/0x90 [ 201.602807][T11682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.608714][T11682] RIP: 0033:0x7f6c2337e719 [ 201.613146][T11682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.632761][T11682] RSP: 002b:00007f6c241a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 201.641188][T11682] RAX: ffffffffffffffda RBX: 00007f6c23535f80 RCX: 00007f6c2337e719 [ 201.649170][T11682] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000003 [ 201.657159][T11682] RBP: 00007f6c241a7090 R08: 0000000000000048 R09: 0000000000000000 [ 201.665167][T11682] R10: 0000000020000fc0 R11: 0000000000000246 R12: 0000000000000001 [ 201.673141][T11682] R13: 0000000000000000 R14: 00007f6c23535f80 R15: 00007ffe61856d88 [ 201.681122][T11682] [ 201.697030][T11498] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.720693][T11498] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.736107][T11498] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.906690][T11703] x_tables: duplicate underflow at hook 1 [ 202.027301][T11498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.057193][T11708] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1889'. [ 202.080629][T11498] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.113071][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.120602][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.169281][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.176438][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.227184][T11498] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.237841][T11498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.281384][T11717] netlink: 'syz.0.1894': attribute type 21 has an invalid length. [ 202.297409][T11717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1894'. [ 202.507284][T11498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.823173][T11756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 203.074891][T11498] veth0_vlan: entered promiscuous mode [ 203.097065][T11498] veth1_vlan: entered promiscuous mode [ 203.122083][T11498] veth0_macvtap: entered promiscuous mode [ 203.147274][T11756] macsec2: entered promiscuous mode [ 203.153294][T11756] macvlan1: entered promiscuous mode [ 203.164495][T11756] macvlan1: left promiscuous mode [ 203.231347][T11778] netlink: 'syz.1.1912': attribute type 10 has an invalid length. [ 203.245899][T11778] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 203.259135][T11498] veth1_macvtap: entered promiscuous mode [ 203.296963][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.309829][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.320230][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.349704][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.367591][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.386725][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.408339][T11498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.429318][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1917'. [ 203.439289][T11790] team6 (uninitialized): Failed to send options change via netlink (err -105) [ 203.480692][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.504654][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.521472][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.541487][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.552807][T11498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.563975][T11498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.575872][T11498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.588987][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1918'. [ 203.611919][T11498] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.639016][T11498] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.658338][ T5862] Bluetooth: hci5: command tx timeout [ 203.665786][T11498] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.674965][T11498] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.824697][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.850873][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.921740][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.939645][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.952060][T11805] netlink: 'syz.3.1922': attribute type 1 has an invalid length. [ 204.463691][T11829] netlink: 'syz.0.1927': attribute type 39 has an invalid length. [ 204.997549][T11846] __nla_validate_parse: 1 callbacks suppressed [ 205.005453][T11846] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1934'. [ 205.082904][T11853] netlink: 'syz.3.1936': attribute type 1 has an invalid length. [ 205.098938][T11853] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1936'. [ 205.510699][ T9549] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.802397][ T9549] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.032546][ T9549] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.085418][ T9549] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.207421][T11878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1943'. [ 206.235739][T11878] bond0: option ad_select: unable to set because the bond device is up [ 206.254531][T11881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1941'. [ 206.322105][ T9549] bridge_slave_1: left allmulticast mode [ 206.345725][ T9549] bridge_slave_1: left promiscuous mode [ 206.358509][ T9549] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.373887][ T9549] bridge_slave_0: left allmulticast mode [ 206.388483][ T9549] bridge_slave_0: left promiscuous mode [ 206.401897][ T9549] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.577033][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.595227][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.603481][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 206.616589][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 206.634141][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 206.644197][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 206.926618][ T9549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.944011][ T9549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.955538][ T9549] bond0 (unregistering): Released all slaves [ 206.966428][T11885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1946'. [ 206.977452][T11896] netlink: 'syz.0.1949': attribute type 21 has an invalid length. [ 206.998243][T11896] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1949'. [ 207.028495][T11900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1948'. [ 207.070434][T11900] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1948'. [ 207.110332][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1946'. [ 207.121275][T11904] netlink: 'syz.4.1946': attribute type 3 has an invalid length. [ 207.247281][T11913] bridge0: entered promiscuous mode [ 207.272236][T11917] xt_TCPMSS: Only works on TCP SYN packets [ 207.283555][T11913] vlan1: entered promiscuous mode [ 207.309875][T11913] bridge0: left promiscuous mode [ 207.640856][T11935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1957'. [ 207.722836][T11938] bond0: option ad_select: unable to set because the bond device is up [ 207.876291][T11942] netlink: 'syz.0.1960': attribute type 39 has an invalid length. [ 207.974491][T11949] netlink: 'syz.3.1962': attribute type 21 has an invalid length. [ 208.018384][T11954] gretap0: entered promiscuous mode [ 208.028248][T11954] vlan1: entered promiscuous mode [ 208.069577][T11954] gretap0: left promiscuous mode [ 208.141620][ T9549] hsr_slave_0: left promiscuous mode [ 208.152199][ T9549] hsr_slave_1: left promiscuous mode [ 208.161398][ T9549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.182051][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.204955][ T9549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.223695][ T9549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.271277][ T9549] veth1_macvtap: left promiscuous mode [ 208.276871][ T9549] veth0_macvtap: left promiscuous mode [ 208.282756][ T9549] veth1_vlan: left promiscuous mode [ 208.288446][ T9549] veth0_vlan: left promiscuous mode [ 208.701154][ T5862] Bluetooth: hci5: command tx timeout [ 208.827612][ T9549] team0 (unregistering): Port device team_slave_1 removed [ 208.872597][ T9549] team0 (unregistering): Port device team_slave_0 removed [ 209.326628][T11977] veth0_vlan: left promiscuous mode [ 209.384965][T11983] nbd: must specify a size in bytes for the device [ 209.562877][T11899] chnl_net:caif_netlink_parms(): no params data found [ 209.596483][T11999] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 209.754655][T12005] team4 (uninitialized): Failed to send options change via netlink (err -105) [ 210.008940][T11899] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.016084][T11899] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.048709][T11899] bridge_slave_0: entered allmulticast mode [ 210.067811][T11899] bridge_slave_0: entered promiscuous mode [ 210.112327][T12013] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 48730 - 0 [ 210.148201][T12013] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 48730 - 0 [ 210.157860][T12013] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 48730 - 0 [ 210.176377][T12013] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 48730 - 0 [ 210.187918][T12013] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 33486 - 0 [ 210.209140][T12013] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 33486 - 0 [ 210.226374][T12013] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 33486 - 0 [ 210.236670][T12013] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 33486 - 0 [ 210.262776][T12013] geneve2: entered promiscuous mode [ 210.272541][T12013] geneve2: entered allmulticast mode [ 210.283137][T11899] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.310228][T11899] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.325103][T11899] bridge_slave_1: entered allmulticast mode [ 210.339352][T12027] FAULT_INJECTION: forcing a failure. [ 210.339352][T12027] name failslab, interval 1, probability 0, space 0, times 0 [ 210.353514][T11899] bridge_slave_1: entered promiscuous mode [ 210.362957][T12027] CPU: 0 UID: 0 PID: 12027 Comm: syz.1.1984 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 210.373753][T12027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.383815][T12027] Call Trace: [ 210.387088][T12027] [ 210.390017][T12027] dump_stack_lvl+0x241/0x360 [ 210.394701][T12027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.399906][T12027] ? __pfx__printk+0x10/0x10 [ 210.404498][T12027] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 210.410999][T12027] ? __pfx___might_resched+0x10/0x10 [ 210.416290][T12027] should_fail_ex+0x3b0/0x4e0 [ 210.420970][T12027] should_failslab+0xac/0x100 [ 210.425647][T12027] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 210.431971][T12027] ? __request_module+0x2d5/0x650 [ 210.436995][T12027] ? __request_module+0x2b9/0x650 [ 210.442024][T12027] kstrdup+0x3a/0x80 [ 210.445923][T12027] __request_module+0x2d5/0x650 [ 210.450780][T12027] ? crypto_alg_mod_lookup+0x85/0x760 [ 210.456153][T12027] ? __pfx___request_module+0x10/0x10 [ 210.461528][T12027] ? __up_read+0x2c2/0x6b0 [ 210.465941][T12027] ? __pfx___up_read+0x10/0x10 [ 210.470709][T12027] ? crypto_alg_lookup+0x2dc/0x360 [ 210.475825][T12027] crypto_alg_mod_lookup+0xa2/0x760 [ 210.481025][T12027] crypto_add_alg+0x1c0/0x310 [ 210.485703][T12027] ? __pfx_crypto_add_alg+0x10/0x10 [ 210.490903][T12027] crypto_user_rcv_msg+0x4f5/0x670 [ 210.496013][T12027] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 210.501666][T12027] ? __mutex_trylock_common+0x183/0x2e0 [ 210.507210][T12027] ? __pfx___might_resched+0x10/0x10 [ 210.512500][T12027] netlink_rcv_skb+0x1e3/0x430 [ 210.517265][T12027] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 210.522991][T12027] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.528297][T12027] crypto_netlink_rcv+0x2a/0x40 [ 210.533144][T12027] netlink_unicast+0x7f6/0x990 [ 210.537909][T12027] ? __pfx_netlink_unicast+0x10/0x10 [ 210.543188][T12027] ? __virt_addr_valid+0x183/0x530 [ 210.548335][T12027] ? __check_object_size+0x48e/0x900 [ 210.553621][T12027] netlink_sendmsg+0x8e4/0xcb0 [ 210.558389][T12027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.563672][T12027] ? aa_sock_msg_perm+0x91/0x160 [ 210.568618][T12027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.573902][T12027] __sock_sendmsg+0x221/0x270 [ 210.578588][T12027] ____sys_sendmsg+0x52a/0x7e0 [ 210.583376][T12027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.588672][T12027] __sys_sendmsg+0x292/0x380 [ 210.593261][T12027] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.598379][T12027] ? __pfx_vfs_write+0x10/0x10 [ 210.603167][T12027] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.609494][T12027] ? do_syscall_64+0x100/0x230 [ 210.614255][T12027] ? do_syscall_64+0xb6/0x230 [ 210.618928][T12027] do_syscall_64+0xf3/0x230 [ 210.623425][T12027] ? clear_bhb_loop+0x35/0x90 [ 210.628097][T12027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.633987][T12027] RIP: 0033:0x7f4062b7e719 [ 210.638398][T12027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.658001][T12027] RSP: 002b:00007f40638ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.666418][T12027] RAX: ffffffffffffffda RBX: 00007f4062d35f80 RCX: 00007f4062b7e719 [ 210.674392][T12027] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 210.682359][T12027] RBP: 00007f40638ca090 R08: 0000000000000000 R09: 0000000000000000 [ 210.690326][T12027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.698293][T12027] R13: 0000000000000000 R14: 00007f4062d35f80 R15: 00007ffdd5b6fe38 [ 210.706272][T12027] [ 210.779245][ T5862] Bluetooth: hci5: command tx timeout [ 210.877440][T11899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.931027][T11899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.044533][T11899] team0: Port device team_slave_0 added [ 211.052731][T11899] team0: Port device team_slave_1 added [ 211.071170][T12038] netlink: 'syz.3.1989': attribute type 1 has an invalid length. [ 211.079585][T12038] __nla_validate_parse: 9 callbacks suppressed [ 211.079603][T12038] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1989'. [ 211.148685][T12043] sctp: [Deprecated]: syz.0.1988 (pid 12043) Use of int in max_burst socket option. [ 211.148685][T12043] Use struct sctp_assoc_value instead [ 211.175214][T11899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.184807][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.219766][T11899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.269602][T11899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.276748][T11899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.314854][T11899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.500073][T11899] hsr_slave_0: entered promiscuous mode [ 211.520710][T11899] hsr_slave_1: entered promiscuous mode [ 211.543448][T11899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.555401][T11899] Cannot create hsr debugfs directory [ 211.678424][T12064] netlink: 'syz.1.1996': attribute type 21 has an invalid length. [ 211.686955][T12064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1996'. [ 211.843787][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1999'. [ 211.862125][T12072] team5 (uninitialized): Failed to send options change via netlink (err -105) [ 212.102400][T12082] netlink: 'syz.3.2004': attribute type 39 has an invalid length. [ 212.241387][T12091] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 212.251209][T12091] team5 (uninitialized): Failed to send options change via netlink (err -105) [ 212.555518][T11899] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 212.606109][T11899] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 212.632971][T11899] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 212.663696][T11899] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 212.702171][T12115] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2013'. [ 212.723602][T12115] team6 (uninitialized): Failed to send options change via netlink (err -105) [ 212.753400][T12117] gretap0: entered promiscuous mode [ 212.763351][T12117] vlan1: entered promiscuous mode [ 212.788942][T12117] gretap0: left promiscuous mode [ 212.859425][ T5862] Bluetooth: hci5: command tx timeout [ 213.003696][T11899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.010776][T12133] FAULT_INJECTION: forcing a failure. [ 213.010776][T12133] name failslab, interval 1, probability 0, space 0, times 0 [ 213.028655][T11899] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.049210][T12133] CPU: 0 UID: 0 PID: 12133 Comm: syz.3.2020 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 213.060028][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.070109][T12133] Call Trace: [ 213.071290][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.073386][T12133] [ 213.080487][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.083314][T12133] dump_stack_lvl+0x241/0x360 [ 213.095228][T12133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.099827][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.100435][T12133] ? __pfx__printk+0x10/0x10 [ 213.100468][T12133] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 213.107516][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.112034][T12133] ? __pfx___might_resched+0x10/0x10 [ 213.112063][T12133] should_fail_ex+0x3b0/0x4e0 [ 213.112086][T12133] should_failslab+0xac/0x100 [ 213.112108][T12133] ? __request_module+0x2b9/0x650 [ 213.144375][T12133] __kmalloc_cache_noprof+0x6c/0x2c0 [ 213.149676][T12133] __request_module+0x2b9/0x650 [ 213.154532][T12133] ? crypto_alg_mod_lookup+0xb5/0x760 [ 213.159909][T12133] ? __pfx___request_module+0x10/0x10 [ 213.165281][T12133] ? __up_read+0x2c2/0x6b0 [ 213.169700][T12133] ? __pfx___up_read+0x10/0x10 [ 213.174470][T12133] ? crypto_alg_lookup+0x2dc/0x360 [ 213.179593][T12133] crypto_alg_mod_lookup+0xe7/0x760 [ 213.184790][T12133] crypto_add_alg+0x1c0/0x310 [ 213.189487][T12133] ? __pfx_crypto_add_alg+0x10/0x10 [ 213.194700][T12133] crypto_user_rcv_msg+0x4f5/0x670 [ 213.199832][T12133] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 213.205492][T12133] ? __mutex_trylock_common+0x183/0x2e0 [ 213.211053][T12133] ? __pfx___might_resched+0x10/0x10 [ 213.216358][T12133] netlink_rcv_skb+0x1e3/0x430 [ 213.221126][T12133] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 213.226764][T12133] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.232068][T12133] crypto_netlink_rcv+0x2a/0x40 [ 213.236915][T12133] netlink_unicast+0x7f6/0x990 [ 213.241682][T12133] ? __pfx_netlink_unicast+0x10/0x10 [ 213.246960][T12133] ? __virt_addr_valid+0x183/0x530 [ 213.252070][T12133] ? __check_object_size+0x48e/0x900 [ 213.257353][T12133] netlink_sendmsg+0x8e4/0xcb0 [ 213.262124][T12133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.267506][T12133] ? aa_sock_msg_perm+0x91/0x160 [ 213.272452][T12133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.277733][T12133] __sock_sendmsg+0x221/0x270 [ 213.282406][T12133] ____sys_sendmsg+0x52a/0x7e0 [ 213.287174][T12133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.292464][T12133] __sys_sendmsg+0x292/0x380 [ 213.297055][T12133] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.302170][T12133] ? __pfx_vfs_write+0x10/0x10 [ 213.306952][T12133] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 213.313280][T12133] ? do_syscall_64+0x100/0x230 [ 213.318043][T12133] ? do_syscall_64+0xb6/0x230 [ 213.322716][T12133] do_syscall_64+0xf3/0x230 [ 213.327210][T12133] ? clear_bhb_loop+0x35/0x90 [ 213.331880][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.337772][T12133] RIP: 0033:0x7f99cbd7e719 [ 213.342182][T12133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.361786][T12133] RSP: 002b:00007f99cb7ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.370203][T12133] RAX: ffffffffffffffda RBX: 00007f99cbf35f80 RCX: 00007f99cbd7e719 [ 213.378171][T12133] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 213.386137][T12133] RBP: 00007f99cb7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 213.394360][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.402323][T12133] R13: 0000000000000000 R14: 00007f99cbf35f80 R15: 00007fffc907ac88 [ 213.410304][T12133] [ 213.431711][T12137] gretap0: entered promiscuous mode [ 213.437156][T12137] macsec1: entered promiscuous mode [ 213.448404][T12137] macsec1: entered allmulticast mode [ 213.454623][T12137] gretap0: entered allmulticast mode [ 213.505110][T12137] gretap0: left allmulticast mode [ 213.511136][T12137] gretap0: left promiscuous mode [ 213.583177][T11899] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.594271][T11899] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.613597][T12152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2025'. [ 213.623145][T12152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2025'. [ 213.637716][T12145] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 213.658312][T12145] netlink: 'syz.4.2023': attribute type 10 has an invalid length. [ 213.732963][T12155] netlink: 'syz.3.2024': attribute type 12 has an invalid length. [ 213.881917][T12164] ip6gretap2: entered allmulticast mode [ 213.938421][T12170] netlink: 'syz.0.2029': attribute type 21 has an invalid length. [ 213.941880][T12166] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2028'. [ 213.967949][T12170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2029'. [ 213.991269][T11899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.007037][T12166] unsupported nlmsg_type 40 [ 214.165902][T12181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2033'. [ 214.509933][T11899] veth0_vlan: entered promiscuous mode [ 214.551513][T11899] veth1_vlan: entered promiscuous mode [ 214.650914][T11899] veth0_macvtap: entered promiscuous mode [ 214.672851][T11899] veth1_macvtap: entered promiscuous mode [ 214.711395][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.757767][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.791503][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.824394][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.877777][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.900083][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.911826][T11899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.936580][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.947171][ T5862] Bluetooth: hci5: command tx timeout [ 214.961525][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.986782][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.012963][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.029334][T11899] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.041005][T11899] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.053107][T11899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.151417][T11899] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.181657][T11899] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.223880][T11899] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.240689][T11899] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.470905][ T9548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.498492][ T9548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.589977][ T9548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.597873][ T9548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.065250][ T61] syzkaller0: tun_net_xmit 76 [ 216.076040][ T61] syzkaller0: tun_net_xmit 48 [ 216.098321][ T3689] syzkaller0: tun_net_xmit 76 [ 216.105634][T12245] syzkaller0: create flow: hash 595379271 index 2 [ 216.232608][T12243] syzkaller0: delete flow: hash 595379271 index 2 [ 216.238842][ T6024] syzkaller0: tun_net_xmit 76 [ 216.258341][ T5846] syzkaller0: tun_net_xmit 76 [ 217.368540][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.386955][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.408155][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.430601][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.451702][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.468302][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 218.372010][ T11] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.437096][T12273] __nla_validate_parse: 4 callbacks suppressed [ 218.437116][T12273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2061'. [ 218.487027][T12278] vlan1: entered promiscuous mode [ 218.500986][T12278] ip6gretap0: entered promiscuous mode [ 218.506612][T12278] vlan1: entered allmulticast mode [ 218.512843][T12278] ip6gretap0: entered allmulticast mode [ 218.531565][T12278] ip6gretap0: left allmulticast mode [ 218.536914][T12278] ip6gretap0: left promiscuous mode [ 218.542443][T12287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2067'. [ 218.771811][ T11] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.914924][ T11] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.999027][T12308] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2073'. [ 219.101178][ T11] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.122709][T12308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2073'. [ 219.474528][ T11] bridge_slave_1: left allmulticast mode [ 219.488431][ T11] bridge_slave_1: left promiscuous mode [ 219.505449][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.550270][ T11] bridge_slave_0: left allmulticast mode [ 219.568227][ T11] bridge_slave_0: left promiscuous mode [ 219.578958][ T53] Bluetooth: hci5: command tx timeout [ 219.579634][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.797720][T12333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2082'. [ 219.986694][T12338] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 220.009208][T12338] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2083'. [ 220.186152][T12345] netlink: 'syz.3.2086': attribute type 10 has an invalid length. [ 220.203664][T12345] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2086'. [ 220.230953][T12342] FAULT_INJECTION: forcing a failure. [ 220.230953][T12342] name failslab, interval 1, probability 0, space 0, times 0 [ 220.245418][T12342] CPU: 0 UID: 0 PID: 12342 Comm: syz.1.2085 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 220.256252][T12342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 220.266345][T12342] Call Trace: [ 220.269646][T12342] [ 220.272599][T12342] dump_stack_lvl+0x241/0x360 [ 220.277313][T12342] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.282542][T12342] ? __pfx__printk+0x10/0x10 [ 220.287178][T12342] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 220.292666][T12342] ? __pfx___might_resched+0x10/0x10 [ 220.297985][T12342] should_fail_ex+0x3b0/0x4e0 [ 220.302692][T12342] should_failslab+0xac/0x100 [ 220.307394][T12342] ? cryptomgr_notify+0x84/0xb10 [ 220.312620][T12342] __kmalloc_cache_noprof+0x6c/0x2c0 [ 220.317940][T12342] ? lockdep_init_map_type+0xa1/0x910 [ 220.323434][T12342] cryptomgr_notify+0x84/0xb10 [ 220.328241][T12342] notifier_call_chain+0x19f/0x3e0 [ 220.333398][T12342] blocking_notifier_call_chain+0x69/0x90 [ 220.339178][T12342] crypto_alg_mod_lookup+0x372/0x760 [ 220.344506][T12342] crypto_add_alg+0x1c0/0x310 [ 220.349208][T12342] ? __pfx_crypto_add_alg+0x10/0x10 [ 220.354435][T12342] crypto_user_rcv_msg+0x4f5/0x670 [ 220.359576][T12342] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 220.365258][T12342] ? __mutex_trylock_common+0x183/0x2e0 [ 220.370831][T12342] ? __pfx___might_resched+0x10/0x10 [ 220.376160][T12342] netlink_rcv_skb+0x1e3/0x430 [ 220.380956][T12342] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 220.386628][T12342] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.391970][T12342] crypto_netlink_rcv+0x2a/0x40 [ 220.396852][T12342] netlink_unicast+0x7f6/0x990 [ 220.401664][T12342] ? __pfx_netlink_unicast+0x10/0x10 [ 220.406971][T12342] ? __virt_addr_valid+0x183/0x530 [ 220.412103][T12342] ? __check_object_size+0x48e/0x900 [ 220.417405][T12342] netlink_sendmsg+0x8e4/0xcb0 [ 220.422177][T12342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.427476][T12342] ? aa_sock_msg_perm+0x91/0x160 [ 220.432430][T12342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.437711][T12342] __sock_sendmsg+0x221/0x270 [ 220.442380][T12342] ____sys_sendmsg+0x52a/0x7e0 [ 220.447146][T12342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.452453][T12342] __sys_sendmsg+0x292/0x380 [ 220.457056][T12342] ? __pfx___sys_sendmsg+0x10/0x10 [ 220.462185][T12342] ? __pfx_vfs_write+0x10/0x10 [ 220.466967][T12342] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 220.473303][T12342] ? do_syscall_64+0x100/0x230 [ 220.478062][T12342] ? do_syscall_64+0xb6/0x230 [ 220.482728][T12342] do_syscall_64+0xf3/0x230 [ 220.487223][T12342] ? clear_bhb_loop+0x35/0x90 [ 220.491890][T12342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.497785][T12342] RIP: 0033:0x7f4062b7e719 [ 220.502206][T12342] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.521841][T12342] RSP: 002b:00007f40638ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.530273][T12342] RAX: ffffffffffffffda RBX: 00007f4062d35f80 RCX: 00007f4062b7e719 [ 220.538251][T12342] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 220.546280][T12342] RBP: 00007f40638ca090 R08: 0000000000000000 R09: 0000000000000000 [ 220.554267][T12342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 220.562233][T12342] R13: 0000000000000000 R14: 00007f4062d35f80 R15: 00007ffdd5b6fe38 [ 220.570211][T12342] [ 220.707509][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.725765][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.747932][ T11] bond0 (unregistering): Released all slaves [ 220.865045][T12267] chnl_net:caif_netlink_parms(): no params data found [ 221.069475][T12267] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.083954][T12267] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.096631][T12267] bridge_slave_0: entered allmulticast mode [ 221.104063][T12267] bridge_slave_0: entered promiscuous mode [ 221.197918][T12267] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.221028][T12267] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.238466][T12267] bridge_slave_1: entered allmulticast mode [ 221.247113][T12267] bridge_slave_1: entered promiscuous mode [ 221.278794][T12377] macvlan1: entered promiscuous mode [ 221.288941][T12377] batadv_slave_0: entered promiscuous mode [ 221.481210][T12267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.530286][T12267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.658478][ T53] Bluetooth: hci5: command tx timeout [ 221.756347][ T11] hsr_slave_0: left promiscuous mode [ 221.878689][ T11] hsr_slave_1: left promiscuous mode [ 221.912471][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.928253][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.942809][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.958207][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.044575][T12411] netlink: 'syz.1.2098': attribute type 3 has an invalid length. [ 222.046297][T12407] netlink: 'syz.1.2098': attribute type 3 has an invalid length. [ 222.066529][ T11] veth1_macvtap: left promiscuous mode [ 222.078398][ T11] veth0_macvtap: left promiscuous mode [ 222.098611][ T11] veth1_vlan: left promiscuous mode [ 222.104595][ T11] veth0_vlan: left promiscuous mode [ 222.116772][T12409] FAULT_INJECTION: forcing a failure. [ 222.116772][T12409] name failslab, interval 1, probability 0, space 0, times 0 [ 222.130536][T12409] CPU: 1 UID: 0 PID: 12409 Comm: syz.3.2099 Not tainted 6.12.0-rc5-syzkaller-01187-ga84e8c05f583 #0 [ 222.141322][T12409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.151393][T12409] Call Trace: [ 222.154681][T12409] [ 222.157622][T12409] dump_stack_lvl+0x241/0x360 [ 222.162326][T12409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.167554][T12409] ? __pfx__printk+0x10/0x10 [ 222.172170][T12409] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 222.177641][T12409] ? __pfx___might_resched+0x10/0x10 [ 222.182925][T12409] ? lockdep_init_map_type+0xa1/0x910 [ 222.188310][T12409] should_fail_ex+0x3b0/0x4e0 [ 222.192994][T12409] should_failslab+0xac/0x100 [ 222.197665][T12409] ? __kthread_create_on_node+0xee/0x3c0 [ 222.203297][T12409] __kmalloc_cache_noprof+0x6c/0x2c0 [ 222.208608][T12409] ? __init_swait_queue_head+0xae/0x150 [ 222.214174][T12409] ? __pfx_cryptomgr_probe+0x10/0x10 [ 222.219497][T12409] __kthread_create_on_node+0xee/0x3c0 [ 222.224958][T12409] ? __pfx___kthread_create_on_node+0x10/0x10 [ 222.231035][T12409] ? __pfx_cryptomgr_probe+0x10/0x10 [ 222.236326][T12409] kthread_create_on_node+0xde/0x130 [ 222.241612][T12409] ? cryptomgr_notify+0x81d/0xb10 [ 222.246632][T12409] ? __pfx_kthread_create_on_node+0x10/0x10 [ 222.252525][T12409] ? __kasan_kmalloc+0x98/0xb0 [ 222.257280][T12409] ? cryptomgr_notify+0x84/0xb10 [ 222.262219][T12409] ? cryptomgr_notify+0x3b5/0xb10 [ 222.267241][T12409] cryptomgr_notify+0x87f/0xb10 [ 222.272097][T12409] notifier_call_chain+0x19f/0x3e0 [ 222.277215][T12409] blocking_notifier_call_chain+0x69/0x90 [ 222.282937][T12409] crypto_alg_mod_lookup+0x372/0x760 [ 222.288230][T12409] crypto_add_alg+0x1c0/0x310 [ 222.292907][T12409] ? __pfx_crypto_add_alg+0x10/0x10 [ 222.298118][T12409] crypto_user_rcv_msg+0x4f5/0x670 [ 222.303237][T12409] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 222.308884][T12409] ? __mutex_trylock_common+0x183/0x2e0 [ 222.314423][T12409] ? __pfx___might_resched+0x10/0x10 [ 222.319724][T12409] netlink_rcv_skb+0x1e3/0x430 [ 222.324497][T12409] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 222.330131][T12409] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.335433][T12409] crypto_netlink_rcv+0x2a/0x40 [ 222.340282][T12409] netlink_unicast+0x7f6/0x990 [ 222.345048][T12409] ? __pfx_netlink_unicast+0x10/0x10 [ 222.350324][T12409] ? __virt_addr_valid+0x183/0x530 [ 222.355428][T12409] ? __check_object_size+0x48e/0x900 [ 222.360710][T12409] netlink_sendmsg+0x8e4/0xcb0 [ 222.365483][T12409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.370766][T12409] ? aa_sock_msg_perm+0x91/0x160 [ 222.375702][T12409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.380984][T12409] __sock_sendmsg+0x221/0x270 [ 222.385668][T12409] ____sys_sendmsg+0x52a/0x7e0 [ 222.390438][T12409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.395738][T12409] __sys_sendmsg+0x292/0x380 [ 222.400325][T12409] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.405440][T12409] ? __pfx_vfs_write+0x10/0x10 [ 222.410226][T12409] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.416552][T12409] ? do_syscall_64+0x100/0x230 [ 222.421311][T12409] ? do_syscall_64+0xb6/0x230 [ 222.425981][T12409] do_syscall_64+0xf3/0x230 [ 222.430487][T12409] ? clear_bhb_loop+0x35/0x90 [ 222.435161][T12409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.441052][T12409] RIP: 0033:0x7f99cbd7e719 [ 222.445462][T12409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.465071][T12409] RSP: 002b:00007f99cb7ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.473485][T12409] RAX: ffffffffffffffda RBX: 00007f99cbf35f80 RCX: 00007f99cbd7e719 [ 222.481453][T12409] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000003 [ 222.489427][T12409] RBP: 00007f99cb7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 222.497391][T12409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 222.505354][T12409] R13: 0000000000000000 R14: 00007f99cbf35f80 R15: 00007fffc907ac88 [ 222.513334][T12409] [ 223.134594][ T11] team0 (unregistering): Port device team_slave_1 removed [ 223.175857][ T11] team0 (unregistering): Port device team_slave_0 removed [ 223.587076][T12267] team0: Port device team_slave_0 added [ 223.609788][T12420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'. [ 223.660000][T12267] team0: Port device team_slave_1 added [ 223.738378][ T53] Bluetooth: hci5: command tx timeout [ 223.774763][T12267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.782042][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.808322][T12267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.846214][T12267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.853531][T12267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.890208][T12267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.056792][T12267] hsr_slave_0: entered promiscuous mode [ 224.071717][T12267] hsr_slave_1: entered promiscuous mode [ 224.080941][T12267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.098220][T12267] Cannot create hsr debugfs directory [ 224.121460][T12443] bond0: (slave syz_tun): Releasing backup interface [ 224.749656][T12267] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 224.771923][T12267] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 224.798309][T12267] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 224.815283][T12267] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 224.936626][T12267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.953372][T12267] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.986014][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.993184][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.058578][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.065677][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.462037][T12267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.819116][ T5862] Bluetooth: hci5: command tx timeout [ 225.896768][T12267] veth0_vlan: entered promiscuous mode [ 225.924311][T12267] veth1_vlan: entered promiscuous mode [ 225.986309][T12267] veth0_macvtap: entered promiscuous mode [ 226.028484][T12267] veth1_macvtap: entered promiscuous mode [ 226.174584][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 226.184679][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2146'. [ 226.252123][T12545] syz.1.2149[12545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.252224][T12545] syz.1.2149[12545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.277201][T12267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.294459][T12545] syz.1.2149[12545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.321162][T12267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.347064][T12545] syz.1.2149[12545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.347165][T12545] syz.1.2149[12545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.356794][T12267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.383341][T12545] syz.1.2149[12545] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.395663][T12267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.429859][T12267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.440882][T12267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.471463][T12267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.503009][T12267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.523869][T12267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.548224][T12267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.564244][T12267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.585997][T12267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.610254][T12267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.635753][T12267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.659821][T12267] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.685520][T12267] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.704130][T12267] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.713360][T12267] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.735860][T12569] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 226.945876][T12579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.040473][ T9548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.066348][ T9548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.077267][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2167'. [ 227.120933][T12579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.128562][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.138983][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.287150][T12595] netlink: 'syz.3.2172': attribute type 4 has an invalid length. [ 227.592183][T12607] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2177'. [ 227.898324][ T5862] Bluetooth: hci5: command 0x0405 tx timeout [ 228.205591][T12646] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 228.225808][T12646] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 228.241007][T12645] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 228.250752][T12645] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 228.451651][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2198'. [ 228.656169][T12671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2202'. [ 228.745785][T12674] veth1: entered promiscuous mode [ 228.881865][ T9353] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.166659][ T9353] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.236016][ T9353] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.295703][ T9353] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.371805][ T9353] bridge_slave_1: left allmulticast mode [ 229.377473][ T9353] bridge_slave_1: left promiscuous mode [ 229.386160][ T9353] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.395297][ T9353] bridge_slave_0: left allmulticast mode [ 229.401379][ T9353] bridge_slave_0: left promiscuous mode [ 229.407040][ T9353] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.682259][T12684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2210'. [ 229.896785][ T5862] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 229.906763][ T5862] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 229.914921][ T5862] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 229.931616][ T5862] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 229.941067][ T5862] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 229.949552][ T5862] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 230.064813][ T9353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.082987][ T9353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.115011][ T9353] bond0 (unregistering): Released all slaves [ 230.758699][ T7037] unregister_netdevice: waiting for vcan0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 232.068861][ T5862] Bluetooth: hci5: command tx timeout [ 234.141095][ T5862] Bluetooth: hci5: command tx timeout [ 236.218225][ T5862] Bluetooth: hci5: command tx timeout [ 238.298440][ T5862] Bluetooth: hci5: command tx timeout