last executing test programs: 1m0.654789544s ago: executing program 2 (id=714): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000000000000400000000000100009500000000000000360a020000000900180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 49.624357486s ago: executing program 2 (id=714): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000000000000400000000000100009500000000000000360a020000000900180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 38.313374343s ago: executing program 2 (id=714): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000000000000400000000000100009500000000000000360a020000000900180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 28.329117433s ago: executing program 2 (id=714): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000000000000400000000000100009500000000000000360a020000000900180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 17.435915758s ago: executing program 2 (id=714): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000000000000400000000000100009500000000000000360a020000000900180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 6.0341288s ago: executing program 2 (id=714): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000046608000000000001180000000000000400000000000100009500000000000000360a020000000900180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000100085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 2.873501595s ago: executing program 4 (id=2087): bind$alg(0xffffffffffffffff, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) recvmmsg$unix(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000003900)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="f2c32dc1a047dc064c79e20f16bc48b88aad07b68ae99b842d2d1494c74d082f68e1b19ff715de4aed74d823"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008ac0)=ANY=[], 0xff8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4c080) (async) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000000c0)="29000000140005b7ff000051915f95eb01010003a606a40e07fff024bb000000000000000040000000", 0x29) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, 0x0, 0x0) unshare(0x20000400) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, r3, 0x8871c000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = epoll_create1(0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000000c0)={0xc0002015}) epoll_pwait(r4, &(0x7f0000000180), 0x0, 0x80000400, 0x0, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @multicast2}, 0x2, 0x0, 0x10}}, 0x1d) ioctl$PPPIOCGL2TPSTATS(r6, 0x80487436, &(0x7f0000000180)) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f00000002c0)={0x2, 0x4e22, @broadcast}, 0x10) (async) listen(r8, 0x8) accept4(r8, 0x0, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000400)="160e2f5673f370217090343c7edb8bc8774fed01334ea40a559384cf0c2ae0231bee01c10caec0283bfddda1c81e552d67feafa5891eed0343dc3b58b25a1db6f863cf089730be0300dcca85d88b85ed14700746001bbccdae3d9281701905c8909af81cc5b5d1007df627bd73edb54435694fafb2f61ba5e929b05df00cab82a5bb64fa7103d872ca215f24cb966d3c36feddfa09ab8968800a47bff9485bbcbeba1281bb13dd07ae80ac163bcac331b923bb92308a187330756f89d91544ad905708", 0xc3}, {&(0x7f0000000000)="3398fe859f01909bfbe9ff9811d2fa6f9aed7111c1dc90f81df4eb8cac8f64e939ca", 0x22}, {&(0x7f0000000500)="bf416861a14ed3c83d2bfa98b4356956618321fb307c874f3448eccf9ff326d616726af5892f705c46c5b4ee409bbc2824322ac6954e71234e2e9e389c45e40b9a819676ed5f2d1f5def21f0a92715ffef33e3805543667753784b7abf076247cae9f85b6632ee33233010e2e46d89f575e6321717ba3257478be5b6244528bb7bf2f455be29e1ebf21c00bad4a01f68cd6b28d272cb114f9a5f85e1d7136288e06ec823fe76c82f5f88e9f852147a9d54ad47d164bfd99cffed96fe9a9ad62c4e0640917c2a9aae99d1d79a69bd4a11de3414ba0dae984518ab583d65ad450418e133170de7", 0xe6}], 0x3, &(0x7f0000000280), 0x0, 0x800}}], 0x1, 0x24000045) 2.747870269s ago: executing program 4 (id=2090): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x4000084) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x70bd28, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010028bd700002dcdf250900020073797a3100000854da374100736977001400330069703667726530000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc890}, 0x20000000) 2.204735604s ago: executing program 1 (id=2096): socket$inet(0x2, 0x6, 0x8) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3b071, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r0, &(0x7f0000000100)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x0, 0xfffffffc, @private0={0xfc, 0x0, '\x00', 0x4}, 0x7fff}, 0x1c, &(0x7f00000002c0)}}], 0x2, 0x75fbba48d6bde30f) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e32, 0x2, @empty, 0x2}}, 0x1b6, 0x6}, &(0x7f0000000340)=0x90) (async) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)=@null) 2.081899246s ago: executing program 0 (id=2098): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f0000000080)="a314472a3ebf07662bb26a717f3b", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x5) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$IPSET_CMD_TEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[], 0xfffffff3}, 0x1, 0x0, 0x0, 0xc000}, 0x48880) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1.969745919s ago: executing program 3 (id=2099): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x5, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8000, 0x1, 0x8001, 0xab, {{0xd, 0x4, 0x3, 0xe, 0x34, 0x67, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x1f, 0xf1, [@multicast1, @empty, @remote, @broadcast, @remote, @broadcast, @remote]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@bloom_filter={0x1e, 0x53e, 0x1, 0x800, 0x10a88, r0, 0x7, '\x00', r1, r2, 0x2, 0x1, 0x0, 0xc, @void, @value, @value=r3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, 0x0}, 0x20) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x50, 0x0, &(0x7f0000002b00)) 1.876344644s ago: executing program 1 (id=2100): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5400000004070108"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x2400c800) 1.762010778s ago: executing program 3 (id=2101): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000240)) accept4(r0, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.731746803s ago: executing program 1 (id=2102): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x800000, 0x3, 0x3}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000000000)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fab9b1b4e8a06a6580e88554b974a96a25f159c40ebb373", 0x39}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x34, 0x0, 0x7, {[@timestamp={0x44, 0x24, 0x23, 0x0, 0x3, [0x8, 0x8, 0x80000001, 0xfffffffa, 0x3, 0x3, 0x4, 0x0]}]}}}], 0x38}, 0xe900) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, @in6={0xa, 0x4e23, 0xb1, @local, 0x80000000}], 0x38) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000040)={0x1, 0x7fff, 0x12e, 0x9, 0x40}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x15, 0x5, &(0x7f00000001c0)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x1a}, [@alu={0x7, 0x1, 0x2, 0xa, 0x7, 0x10, 0xfffffffffffffff9}, @ldst={0x0, 0x3, 0x3, 0xb, 0x8, 0x100, 0x10}]}, &(0x7f0000000480)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff5c, &(0x7f0000000100)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) socketpair(0x23, 0x800, 0x9caa, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x7, @local, 0x3}], 0x1c) 1.492233662s ago: executing program 3 (id=2103): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb3}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @call={0x85, 0x0, 0x0, 0x7f}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xd1, &(0x7f00000000c0)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.43674019s ago: executing program 3 (id=2104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x44, 0xa, 0x6, 0x101, 0xd000000, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x44}}, 0x0) (fail_nth: 2) 1.020068428s ago: executing program 3 (id=2105): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="0130210100ff"}) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001a00010000000000000000001c00000014000800fc020000000001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) (async, rerun: 32) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (rerun: 32) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000180), r1) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X \x00\x00', @ANYRES16=r7, @ANYBLOB="00022abd7004fcdbdf250100000006000a004e22000014000700ff02000000000000000000000000000108000800e000000105000400010000000400050014000900"/82], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) (async, rerun: 32) r8 = socket(0x10, 0x3, 0xc) (rerun: 32) write(r8, &(0x7f0000000040), 0x0) unshare(0x40020000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket(0x2, 0x80805, 0x0) (async) unshare(0x62040200) socket$packet(0x11, 0x2, 0x300) 917.645627ms ago: executing program 4 (id=2106): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)={0x88, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x75, 0x0, 0x0, 0x1, [@typed={0xc, 0x135, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x64}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d16"]}]}, 0x88}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000100000002000018120000", @ANYBLOB="ec1502d2f665c5657635bb49211693807660641670112a9a37212ded4a71728952a79d8570362780d9324fae9095d49c1778d6712e51590d2890ddc4ebaf116c3213fc8006fcb04ba7073d67faf128322a9b9a1277a8b10bd8738ff0d88841310ec851b92fd69a1a505833fb29166580eb3d9effb978000175df015219771598b2a848156f20e8d2783e90ac2b6aaa0011327739b905c8ffe9e3169eec0362217132658703e85a18c77692dca1363811a789cdf3f65b16a2e94593355033f6804ca418b2fdbb23967b423ddd72c954a732ba56f0a16f670b3154c8fe05596300fb8a1669648f", @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000095", @ANYRES64=0x0, @ANYRESOCT=r0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0}, 0x40) socket$netlink(0x10, 0x3, 0x7) 890.698056ms ago: executing program 1 (id=2107): r0 = socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x18) bind$packet(r4, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x10, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x102, &(0x7f0000000840)=ANY=[], 0x0) 820.31668ms ago: executing program 0 (id=2108): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) 818.404399ms ago: executing program 0 (id=2109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xf, 0x4, 0x4, 0x571c, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000000040)=0xffffffff, 0x4) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@empty, @random="f6d54a0f3bde", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "209476", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x4}}}}}}}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f00000000c0)=0x2, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000850000001800000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r7 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r7) close(r5) 750.652069ms ago: executing program 3 (id=2110): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x36, 0x1d, 0x7f, 0x4, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8000, 0x20, 0x5, 0x1}}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f00000000c0)={@private2, r0}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', r0, 0x29, 0x0, 0x4, 0x7, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @empty, 0x700, 0x40, 0x2, 0x7}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x1c) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf4, 0xf4, 0xa, [@enum64={0xf, 0x8, 0x0, 0x13, 0x1, 0x8, [{0x9, 0x9, 0x5a0}, {0xd, 0x6}, {0x2, 0x6, 0x7d5}, {0xc, 0x2, 0x7}, {0xb, 0x1, 0xfffffff9}, {0x8, 0x6, 0xe5}, {0xe, 0x7f}, {0xe, 0x7, 0x1}]}, @volatile={0x8, 0x0, 0x0, 0x9, 0x5}, @typedef={0x1, 0x0, 0x0, 0x8, 0x5}, @decl_tag={0xe, 0x0, 0x0, 0x11, 0x4, 0x2}, @enum64={0x2, 0x7, 0x0, 0x13, 0x1, 0x4, [{0x7, 0x6, 0xc35}, {0x7, 0x8, 0x3ff}, {0x1, 0x8, 0x8000}, {0x10, 0x9, 0x5}, {0xb, 0x5, 0x5}, {0x6, 0x5, 0xfff}, {0xd, 0x5}]}]}, {0x0, [0x0, 0x61, 0x2e, 0x7, 0x30, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000380)=""/4096, 0x116, 0x1000, 0x1, 0xfffff801, 0x0, @void, @value}, 0x28) recvmmsg(r1, &(0x7f0000004100)=[{{&(0x7f00000013c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000001440)=""/151, 0x97}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/100, 0x64}, {&(0x7f0000002580)=""/87, 0x57}, {&(0x7f0000002600)=""/20, 0x14}, {&(0x7f0000002640)}], 0x6}, 0x5}, {{&(0x7f0000002700)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000002a80)=[{&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/216, 0xd8}, {&(0x7f00000028c0)=""/43, 0x2b}, {&(0x7f0000002900)=""/83, 0x53}, {&(0x7f0000002980)=""/14, 0xe}, {&(0x7f00000029c0)=""/156, 0x9c}], 0x6, &(0x7f0000002b00)=""/210, 0xd2}, 0x4}, {{&(0x7f0000002c00)=@qipcrtr, 0x80, &(0x7f0000003e80)=[{&(0x7f0000002c80)=""/152, 0x98}, {&(0x7f0000002d40)=""/129, 0x81}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/61, 0x3d}, {&(0x7f0000003e40)=""/16, 0x10}], 0x5, &(0x7f0000003f00)=""/130, 0x82}, 0x200}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003fc0)=""/59, 0x3b}], 0x1, &(0x7f0000004040)=""/138, 0x8a}, 0x8}], 0x4, 0x2000, &(0x7f0000004200)={0x0, 0x989680}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004240)={'veth0_macvtap\x00'}) sendmsg$kcm(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000004600)=[{&(0x7f0000004280)="8c56ffb444afa7e1b82e63c4a97e8b1a0e121f384ef9d9b6610b15b6d4d3e4df11c2c4dc3df86488c0bcbc84b34314d21296de35e2a087e4e96638570f97cf88f2db5aa7d6beff97a04a07edb6993a5ba81c2e796b49fdb0d70b91d554bba2cc461ea3f71c76f02324541ffcea4f324dfbeaa43494be167ba24bfa869134026618b94d9441e67c6a1e9420d595a87c42ae5d463293e13d9ee8777204b838585fc6bb12b4b3e754bedfa04225c7c94a6e49502f39f0c1a6eeab4f27596c3594a7400d4f1156dac0bcb9d1cb3456441177784f", 0xd2}, {&(0x7f0000004380)="637f0bb682eb0833e36ebb00b6ecf34d32fac95bec43bc0be667b7c5ff0f1e9afdf16d225a4571f581c8c106810b5d5694ef7410eb9480d8516f612a57490cb3b5a6a516a224c199e40890c27f3cbcf3bfcb394dce2c348e04ad0b", 0x5b}, {&(0x7f0000004400)="d1132765b00997fa64c66bd01b721043a25d268fdcbd23d8a5c3028b29593303d614ce50d330774f651238bce910eaff61ab18d56f76842e743ec083fc4218a9ebe03ac89690710087ec50b557b48014d0b4525ef347a5ac73e2b94df4fb0b24dfd6ad3b0ddb37e58d2c96a47b9d9849418fa6a20ed82946044bef54dbe00fabb787f1ab93046f78c1fba0c73075176171e052b7f994e80dc722791d1c0365208bbf1f002254df5e923980a857e2d0720a23b031800c91c7f597eeb1c131868d1247c6581f1d337bd4e82b08bb99610ee23a36dd", 0xd4}, {&(0x7f0000004500)="0bae79445f5798a50d5731efc5f1f526a64bf8098f16a23b00fb2c36754849e5369ac8e76ec1edfd3a7d507ded954adab7a264a49e4ad0b1ee42b19a1062399476608d2cb381fa1d730510c6425f8d68d44788c0d5187f59e84786bbaf0802943cf8e49d52cafc2f234d5a84ce377a8b3b0348229f95be07f4e6e344c388524cf5b4ca0023c7ee92b5f7713c37485980fdbb0bb1423fcf56b3fb9dd645db58e3259c2667f14d97cc11b58a8c567a196afe9bc0edbc9afa8307c72d7814d0e8236c62102dedc21b1a4bf62ff7ce59458f6e9efb24df36d550fa62713c891eb674b4f43ab5c357b4280305eb604e1af77e967f2def4e", 0xf5}], 0x4, &(0x7f0000004640)=[{0x58, 0x110, 0x9, "9d329a520cc99bffa4e1248847154e78e40deba064e7b76331f1ac7ec2c15bfd90098108660c4a5b5fab412cca35ee6a7d37a26e78d9f088b04b4749828e97c289cc5b"}, {0xf8, 0x103, 0x5495fff4, "56eeb902067bc999ff3b524a21e8ac98f721006fc8659cfc2c61c6ab2756d5ddec2e144a38eb160c26be1b06a7bfc908f52ee2d293d9070e49f5cc1f4db0bc209b1b95d83234131d0018f46c3125c1bd96da9c72d32dc7caeea97652a74938d5e3500237962ebdcd5ffbccfe48de3d5b44e9feb2a36fe702f60ea441e9ab58b2c684a14330eb00488eea16fff10250584818db41fa2fd00fac4965569c02e18adf3161f0fe6992ac8e6f27433e83e16f82cb2e8628fbc132a42f89a7382154e36463106a6e3a7c515bdbb97155dc70f20229ef06847377833213005e2153957d38"}], 0x150}, 0x400c85c) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000004800)={r3, 0x2, 0x401, 0x1, 0x8122, 0x1}, &(0x7f0000004840)=0x14) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000048c0), r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000004980)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004940)={&(0x7f0000004900)={0x24, r8, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f00000049c0)={0x0, @null, @rose={'rose', 0x0}, 0x1000, 'syz1\x00', @null, 0x1000, 0x5, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000004a40)={0x80000004}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000004a80)={r2, @in={{0x2, 0x4e21, @private=0xa010102}}, 0xaf1f, 0x6}, &(0x7f0000004b40)=0x90) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000004b80), 0x2002, 0x0) ioctl$TUNGETVNETHDRSZ(r10, 0x800454d7, &(0x7f0000004bc0)) getsockname$packet(r6, &(0x7f0000004c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004c40)=0x14) r11 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000005c80)={r11, r12, 0x1ff, 0x1000, &(0x7f0000004c80)="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", 0xea, 0x6, 0x7, 0x9, 0x9, 0x1, 0x6, 'syz0\x00'}) ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f0000005d40)={@bcast, @default, 0x2, 0x20}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005e40)={&(0x7f0000005d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@const]}, {0x0, [0x5f, 0x0, 0x5f, 0x30, 0x0, 0x30, 0x61, 0x2e]}}, &(0x7f0000005dc0)=""/128, 0x2e, 0x80, 0x0, 0x1, 0x0, @void, @value}, 0x28) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000005e80), r13) readv(r12, &(0x7f0000005f40)=[{&(0x7f0000005ec0)=""/103, 0x67}], 0x1) sendmsg$IEEE802154_ASSOCIATE_RESP(r13, &(0x7f0000006040)={&(0x7f0000005f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000006000)={&(0x7f0000005fc0)={0x24, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x20008041) 440.131549ms ago: executing program 0 (id=2111): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf, 0x304, &(0x7f0000000040)="b90703600000f007049e0ff088471fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x0, 0xfeb9, &(0x7f0000000640)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000100)}, 0x28) syz_emit_ethernet(0x5a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x24, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}, @exp_fastopen={0xfe, 0xb, 0xf989, "23c486d4219ab9"}]}}}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x42, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000ac0)="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", 0x86, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r1, &(0x7f0000000580), &(0x7f0000000540)=""/96}, 0x20) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0xfff}, 0x1c) 299.2282ms ago: executing program 0 (id=2112): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001900010928bd700000000000021800000000fd3c"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000d3060000000000000a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100000000000a20000000000a01040000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000006c000000060a010400000000000000000100000008000b400000000044000480240001800b000100657874686472000014000280080001400000000c08000640000000001c0001800c00010062697477697365000c00028008000140000000140900010073797a3000000000140000001100010000000000000000000000000a00000000000000"], 0xe0}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r6) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x154, 0x13, 0x4, 0x70bd2a, 0x25dfdbfc, {0x1a, 0x6, 0xe1, 0x80, {0x4e22, 0x4e20, [0x84b0, 0x429e, 0x1ff, 0xd883], [0x7ba, 0x9, 0x33, 0xffff], 0x0, [0x1, 0x1]}, 0x8, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x19, 0x1, "84b1ca1651c79e8f2e95ac8fa53e4a26fdefc4dccf"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "c5767023d0d94aa50e51ab81768f554a99ab23e00516d17059fc66750b0e4a3f61a02a670e0e5cab2f590262bdaf43c8826596e28576d8b47ce80efb569fb216552e80aa68a36a3fdc67c1a432a903bb7b48e382ec8c58cd7d01a5a2b74af086ced9f3645f55cfe72ae63f79c70f9f2a9b4a3a74ba67652d288566f932bf655d873ca60af556daf86e5c3f1db82a75a241d769c911280c1fed02f31549e3f7c7699a037fc21a311b06b3fbb18f6ef41ddf028ccb7b58639115ef4d5d0595d0f20041dd3e66db4623333e473cc351ba383b53e78eb7d6d4478cbeedac430409cdf101e2064291d9"}]}, 0x154}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 298.398246ms ago: executing program 4 (id=2113): unshare(0x22020600) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x40, 0x801}}}, 0x10) socket(0x10, 0x80002, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x82, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r2, 0x0) pipe(0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000100)}], 0x1) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300), 0x0, 0x1903d}}], 0x48}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x80, 0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7c, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[], 0x28}}, 0x4001) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001100)='htcp\x00', 0x5) sendmmsg$inet(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6906bb2b0eb2fe32d2f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600"/144, 0x90}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3", 0x2b}, {&(0x7f0000000a00)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa9169f5f7b51dd5319b8016623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bd98dbb2ab76919ba5c1020e80bd0659e82d861dc6fe4c62639134c504aa438689d28748c22ebfe2772d64b64e706d94864d785dcc6b24fff7858b2a4edb673503cf002e28e331bc529b433cd74ab6", 0xf3}, {&(0x7f0000000180)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100000000000000006a8f4f5405596e72f8fe08c33a33b275787892f61fbb621794716f96031931b55af30fa01d72aa5a53ee4c07ab7c96a4a9ed93f4d20269982ab6feb22d8e77afb7b861622ab963b07f0026fd64", 0xc8}, {&(0x7f0000001000)="bd2f6aa36cea0e4bccda24dc5bd69ad762e998d923018ec9f30d63c7059c3c786069915581888508ff589f82857ff546b23b88d6bd61f1efc982005bf6c9abc4fe2caf32ef3ff105b69346a4d09afd7b0b8bd5f8c25f0eab84d8ad1b6576552ee2acc2ef0a9b0f9964d5705db134bdd9f261b7349aeede1c42e31b1082eec37b959d16afb967f54c471f2c7922c3c069f6a67c6ffee04bb1106c7e99752f50c7efdfa8afc8bd11acfc7a82e59dc5ffc8", 0xb0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8", 0x15}], 0x2}}], 0x3, 0xc0) write(r4, &(0x7f0000003300)="ac", 0x1) 168.077503ms ago: executing program 1 (id=2114): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x19, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x6, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x2}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480, @void, @value}, 0x94) 134.511692ms ago: executing program 0 (id=2115): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0xb0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r3}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f, 0x2, 0xc2, 0x500, 0xb3, 0x4800040, r3}) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[], 0xb0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) (async) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @local, @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r3}) (async) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7f, 0x2, 0xc2, 0x500, 0xb3, 0x4800040, r3}) (async) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) (async) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) (async) 83.644186ms ago: executing program 4 (id=2116): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xa11, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0xec, r1, 0xb14, 0x70bd2c, 0x25dfdc00, {}, [@NL80211_ATTR_REG_RULES={0xffd9, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3cfe}]}, {0x4}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x82b1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x4}]}, {0x4}, {0x4}, {0x4}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x876b}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}, {0x1c}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x54}, @NL80211_ATTR_FREQ_RANGE_END={0x0, 0x3, 0x4478}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE]}, 0xec}, 0x1, 0x0, 0x0, 0x8001}, 0x8000) 260.91µs ago: executing program 1 (id=2117): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffed1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x200, @private1, 0xce6f}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000740)={0x0, 0xca}, &(0x7f0000000780)=0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0xb5, 0xfffff032}, {0x6}]}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0), r2) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x14, r3, 0x303, 0x70bd2a, 0x25dfdbff}, 0xec0}}, 0x80) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) r5 = accept4(r4, &(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @local}, &(0x7f0000000480)=0x80, 0x800) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @remote}, 0x4, 0x2, 0x3, 0x2}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="053f2ae6bf47e559426541f76324a236a4499bfa50", 0x15}], 0x1, &(0x7f0000000740)=[{0x48, 0x10c, 0x4, "62e0a26d2ee29c4e53deebb9b1e0a72340c90616bf8536ff2bbaa18d2b83fd763f2d2c49914858e260d178b0f1a9d5144d"}, {0x58, 0x0, 0xffff, "cab19292a67917199440776d6e48b22612821e771ec7b7d98fdeadd997359b6223e9862faf645bfdf0479e0028238daf0ada1c97a519bdcc1b9a31d0108c3aaf2c65"}, {0xe0, 0xb, 0x4, "2a8ee87df0c9470c17c614b575ee0d1602c77b610a7d53cbb20ac664c5bed84cb03d7624cab13850597e014f201b6a9d2c01b0d96d91183f3d848d42db4774bc6d62aa3ebf8e300aea35ce379ac86592170f558fe30c5ca7f86483585bdb973a1c4f7ba30a152331f0f6ad06e6cca77719dc0b73010d4c57785997f9eaf70e709e27fc4a248ba381539aff02cbec4b3cf908c7e605ba7a5470623a335fd13937a19c8dc812d4d8345e56deb896e62e0325c63ef259de878d9aa7b94f120985dbb3d740a77ed8ff10e58bc0c1d61e"}], 0x180}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000005c0)="c3383e85b195ecf58f559ab6ace3e817d27db9e2935b79a6a135e00dc32efa33c8a891a369490ca0b83bd4195d8a9006ad51d8a8c73176bce8114fca432a00211a7dab28aeec98c1a505c9753670618f2c", 0x51}, {&(0x7f00000008c0)="d545920694f09ba40138df2e02d74875dc496de768ef86bbf67caba1bc8828d399b93269eefed0ad49e636c0101c78baa5cdbad3017e4810e4740c535b9b62f143501b6cd1d0bdcb02322171d6498b2ea2ab4703426fcf513e2bf33f1378c0810c5b3fc3646a54e815061fe9fa7c46fb9e844acbf9baf50c0966430b55249d9f1a86687a5e4690811cfadef3090937fdd695fa2753913637ecaa4f0f65173db0887956ebb1f2acf30996738ffb5cc4b9c1c633e4019f24bebe85fafa7d7dd9cbb135926234bd82e447f53bca77a3f56ad33d318ef31bf0aa9285988f6ba5ea5c54", 0xe1}], 0x2, &(0x7f00000009c0)=[{0x70, 0x116, 0x3, "78ea2ae5a994849feadea8f1039856b5dfcf11351c47260103b9bdd57089b2b98e22bbf2dc372051bdb63f3308f0ba3c8774db6ed471fc214bf31ffae3ad3e0dac5118c050b14699cdfa3c3163268a58299081b9822fc10f954bd760d517d1"}, {0x30, 0x6, 0x9, "6d087956eb220f9ae4ada3fa681fad0cfb53ef0460d02cb8fe059a9d1a"}], 0xa0}}, {{&(0x7f0000000a80)=@qipcrtr={0x2a, 0xffffffffffffffff}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000b00)="935e4c0c1c5ef62717b2cb96049edec355f581add1989ee8082d3b28f4849be0f3fb084f13f71e501db16eb50a207341e2bf634a1b06e0971a9edd1753c0c9ffd14ddc1dc6856b00b5f7d14a2eec69f2336ef42380d5bd4d9e50d754c0b1f5c874221f1571d177f26df23285030d4beebd9eab0940997c76d84f6f5e76eaa77fb22b9eeaa2a443c6d0953b9164fe2aab9dc1b7b09ca5ec43076c9c217e35987e6d005f80e53966d0984bdff0bde70e8dadd13ba97eb00090ff16b674828f7d38c3966411253c537ea33580d77d197b27358a84cbbb38ef02f5e9903d598e1049d1c64e1e", 0xe4}, {&(0x7f0000000c00)="58c36a84762e1a8b6357a6680378fe90c1e9f9ff51b738038b19db8670a9818054fbf0e62cfeea40be63db6f318129b152c279a30ee61f0ab09412c183dff20a7432945cddd33b88de50c24d477a073631c8de327b1149e3d7ab37a878503aefdb14619a7c9b9d8bc2b9c65ae5840a90c1245297ecd09666c738c4ef111e5fc8c657d64eaee9bbd94959ab590bc0c0e1dc09aaa3bbff5af9fde06992b4a0b32977d29c093024aa", 0xa7}, {&(0x7f0000000680)="d7ea5c6f9c9fc044aa61ecc7f7605f691fa5ffa5d77064e6fcd66f5eafc38c", 0x1f}, {&(0x7f0000000cc0)="f1067ec8d17583a834ec9a9b285d0239947e76af50f07701e05a2c2301d8ae740d0328d5aa338305920c9960a129384342a02cc2a1bc830c4c2f36c6309b8e7c8d52aed862954ade5fe4028b8785a29a87fd5caccfcf964a181107ea4a25e6d6c2a10da80aad248067e6801a01cdf826469157408301298e9f189b003459b180cafd35dd2c83cc780981cea3a88b5cbea0367f67075d81dc3815ae64eeb0d2faf337951967069c92cbe957", 0xab}, {0x0}], 0x5}}, {{&(0x7f0000000e40)=@x25, 0x80, &(0x7f0000001080)=[{&(0x7f0000000ec0)="729bdbbc43b4adbb804b4316b0b35cf0eea9a0f6fbf5b1e2db9c54b816f48fd930e994cd5d4325d463250fb4be519720537838afb9741dc37e7135c4a809ab42378858c6080c792efaec889f5fd578cb01abd62d769817b146efa53f6f156a913745fe62e1e9e0e88d70c90e58a48a81c8b43431fa0f62c7b87f71ad753a9c47f38f3858c04c1837fdedabe6860bcda78e3fade089f7fbfff58b4b402dfbfd8161a84f8c51c4e27f8059356c9267e72e28e5d2faa8d026b2a48da0970843a6240c32fa4ef35f379fc74151015dd29371193a7dca3642a375b8ea1457", 0xdc}, {&(0x7f0000000fc0)="b62916e6f99038559ff5cdf32217fecfba955eefcf7e3d50b2b43179655070d17dbb63ec8f92a975743a10d9dcc1f371f7c04a471365bb05e7ab5b60a4b02c4ffa7cb0636650e179bb729dc1a74f02c4263ff82159bd6f61849d297ce5036c3b53fa9cd1e309c434dda45b7ae0676408063b3468c258bdac2d5772bf24a890fa229ba9cbae17d308b450073350a15bdc", 0x90}], 0x2, &(0x7f0000003540)=[{0x810, 0x104, 0x0, "e4c7033a45544e92ddec15e18f8af5f555a92636e21bed3b9255ca8ee74edd23e76665f9cb90175b5596fb23d49fbfcf45c00897e203d188cf94650e412215b978de961df4598060773522d48b0722eb756827a9b094b79de87b5c934b9611e84b76e49a5b645f64a0f8e4b01dc29739d854af10d02be3df20d7c9ace079ce1db0b7166bbbcab8a04f483a8690e0b546de5af1a02163ee484e33dff5dc416e5ab9fa08205caffa190d58f39a011262fc367b15a77d9ad2693ac725f4ec1b11b090eb8d7280fbb6dbca7d191ecc6e1e0fe4459fc0efc6e133de77c713eea3e9f24115417ba116f1ac7605792d799b886fd80581e8cb3ba0c7a3c8b5e451a5c0494431350c4a86650c612db5f2dd67a615177ce856b37d040706faaf9352c54f9dfe01eb5ebf3be2f6480c84c57b70ed3df95f3266a5a2bd8ef46d4741137ade2ee4b0513fdce065b272b07cf27e0b316d5d03605ed2288b7b70dafcdb53fcb4972512b01b39e9ed78e900b35a81f77c97f3191e73da0944e95c9cf7da3c6902c534d5d610b820b735a302574a0615e5608497e53e518dc5607175fbdf133178bd89857efdd21bb1e2a885d2a6362e42cc2d4d6b225ada79315cb0ceab8516694fc4c6323fbd649463a28f671bc1e03d29ae60a523d16fcb34191b30ce4f46d46e7fb6c35a23db5674dd54eb0224c87faae6b20d01c5e82956687ced2489d940399b2700fd992ea2f0a81c842881124d104c085774056cdf227cc3b1521c5a4da98153cfe2f384610dcc3bd854eecda6b6020707269228fd3bb4f53adc373a9496cdf482cd107150d561fd22984946ca808ac01143d78bfe6d930168d5e4d5d11535613ea5b321ba686885bc8c6648f10a414c49923626247fcdb48f9ba85e1a64fe5812e903f2659a7f57c0cc79fc3848863d6db81389a987c90811996d1ccf5e3f1bb5da98d1ee3d96944a86e6361cee26b12e2e9189b89a5d05191d3d48168e4212e7c786ba3e1a294161eb6d1c4f42a473d7026aa043b43b6b3b479490fdede0c5cb61ed8a101a7d53a1c1ae048cb2c87056e4be1223a4a7bc4ac843932239a4efd269b0c00237af5b16ef37ebd576b5b1ce7d986c98dcb8ce11714393c3ddfbda7bd770bb48aaa095e17ec13a6932ee2113bea9d5b84084944ec6f7d7c0e7cc4382a93d84d474412d22b377c0a96c9c4fdd4d09b038f39e16e1733d098f0eb1bfcd5cca3c975f9a48f3453d8aeae9921db8f122b729c16217190f52b6e6ef0c2caa08ce181c6d8c51790a0b969c14c430beb88bc1805908c799d347582b1df9d87d4998793c1b3746fb90a49e8a2c619f7a8703234d5f1893709e829bce4100d6cc67177e01a29b105f9a15badf09a76185c2d1cba39bb7211b9e5470e284187a848f2322d5e6b792b6425d7af18285c6041ceeb3ea81907833b5f227c21637476e28ff70f4cc2a796381f6865f508610112d432af15fe77e079c05a13a9a3de7f18ce12cd03a6b1fe9d35181bc723da1fd4d463bf061c6d16331c495a9e9e8b27c3799ff4a95957096738e7782a69ad945489167db3cf02e52ab8cb7f945949c4c767caba1e110223f63868a1adc170834d2c8a95e13234c9a0fa08b346c3c6100ab7684c5f5fc3a6c07dcf86de9f713533d30cb53d162c62eb1449f2c6a0846fecf29dc96e1572a5fe21911d8b5de0a1b54d597e6cf1d9f1cdf6675b4bf8ea0442da9be8bb5e4d420d7e774a60f8e4969028d3cfecf562aac08f9301edd62ba4a89b4366522f277ed949a8db968c185329819cca99fefc92b235e2cd8309e3aa19ceeddf08116dbff1aeb0e15e9c7657500b2b80a51d14397a1c90d15a2626ed797e782451ba1496974b854e3df0e14e95c2c25e10ba6a7667d644f6f9d370902ebd757566eb5689212365147725a3f963a49bda3f252df39da06b1b027956c42f508949e8b98071d8997622eaef6631ae4e3158859af229382f7496815b693dfa58d1154ffa904ca5b4a09bd238e5020a9812ec44a8a4b0163df9ce0392d79bc91c1053f94fe8579a571ee0cc8b9e594088062cf34f8389d9deca9208975ab67e5906cf7801710e5596a505e46dd469167e5d27feecdfee3728dce64b23c3852371baaa98a21cf35b79e9544e30e2073d64a34906dea8c4a34edc5abb2403ecfcb1156e8e0e5ea59d0c2e8593ad018c2a5bf3c3c0814867981b6b94f15c094cc8c7eb45aa66231dead5ba816bd03e830a8628a1dfc3cbce7bee59bd8fb5992a40d7e020c999e5de9c3f755d2f4643b26f19ec2d8e7e6e91d843af8677eb9c86895aa3e89ce6cb660306166013637a69a8620faf486099fa3232ad2fc6c95e7effb11b450f47998f5e504b3bca6b6b3e026e07e731ad00d358ff1f3f3a6d50a88baa8ccc359bb20be90da62427a1272c14ef99d422fc35131055d6b33a165065c11b42143df56379c242806853891aa7e308fef801acdb22085e59fbd9ba8ddf107ecabc77b293906bf6bfab75bc6907683036f7b0c504f817a57cb004c290df09cb2e115e7974a6f6446c57b89bd5c92a463f725068001cac04576a7e7da15466b634bf221dc345d60f65cc9dd5f2a975ac97d84b0d00e39d8dd7a8678784e71e5dfc8ad10742a51814c9f039a808c2abeda28a1fb62ca8147f0d086702f06d715ce8e43efc2e60309924fe22fe42ec81b4db5905a1203572a3d760964a50f3e8108661595cf73145c770eb10a817f441b21f3c0f69cdf165a347351f3afb89fb77d37ec288262206be038654de66b45d2774cbe1639f4fbc5428b89d8e75568cae39728da36e1dbc8688c1a2a047feb3f263c7bf201eab9936d901c3ccb714f0c41e3ef2a1f970e6b8fa2c24bebc9877336b1f552c62a9de65c4b33e4"}, {0xc0, 0x117, 0x8, "0ca3faa27c67d6bb46f26907707ae063f1163b6f6ef667d8713e53e6497db6c46186c44dbad13f41500b75ddea6266f5ce98b24ae1668240889bfcd368191c4d17c9dae18af176c99391cb73fd2b91d006bbf91d4855e0b34b022f6b509f4336f182c868487a6a21954c69adc5d0c2c2b2fb0d772f152a05fabd1b6dafe85897438b6bbad85d1bd5aec1b96012d86b699036696d8712e0196ed686f5862dd9aa7d4c059eccbadc3496715bdd2ba725"}, {0x88, 0x109, 0x8, "dd99a83fb84588f915447bd7be96e3fad76882269c15dabaaf6a5735b1507df1fc5154c9b9a7efbc64720849327858e41588f6ee3445a0968e89d98fc45606f12a9bba6a658cbd46027933dda12854d347dd1c512fbfadfd34b5764b23d9aff3dc3eb29b215c7ce712a8f164e462c7893c3d91e55c1769c1"}], 0x958}}], 0x4, 0x4000000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000000240), 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e23", 0x48}, {0x0}], 0x2}, 0x40000) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x1}, 0x20) socket$kcm(0x29, 0x5, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@local, 0x4, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000380)={@initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, 0x800, 0x1, 0x1, 0xb, 0x0, 0x100}, 0x20) socket$inet6_sctp(0xa, 0x3c45a81a93a4745a, 0x84) 0s ago: executing program 4 (id=2118): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x68, r1, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x2, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000085}, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000340)=0x1886, 0x4) sendmmsg$inet(r3, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001400010000000000fcdbdf25021f49cb", @ANYRES32, @ANYBLOB="08000200e000000114000300000000008c19d47118c4bf7050de842c"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): __pmd_alloc+0xba/0x350 [ 270.442157][T11086] __handle_mm_fault+0x926/0x5380 [ 270.442175][T11086] ? mt_find+0x15c/0x5f0 [ 270.442202][T11086] ? mt_find+0x46f/0x5f0 [ 270.442239][T11086] ? __pfx___handle_mm_fault+0x10/0x10 [ 270.442273][T11086] ? find_vma+0xe7/0x160 [ 270.442292][T11086] ? __pfx_find_vma+0x10/0x10 [ 270.442310][T11086] ? stack_trace_save+0x9c/0xe0 [ 270.442330][T11086] handle_mm_fault+0x3f6/0x8c0 [ 270.442358][T11086] do_user_addr_fault+0x764/0x1390 [ 270.442389][T11086] exc_page_fault+0x68/0x110 [ 270.442412][T11086] asm_exc_page_fault+0x26/0x30 [ 270.442427][T11086] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 270.442446][T11086] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 270.442459][T11086] RSP: 0018:ffffc900046e7b28 EFLAGS: 00050212 [ 270.442475][T11086] RAX: 000000000000000a RBX: 0000000000000034 RCX: 0000000000000034 [ 270.442485][T11086] RDX: 0000000000000000 RSI: ffffc900046e7bc0 RDI: 0000200000000300 [ 270.442497][T11086] RBP: ffffc900046e7cb0 R08: ffffc900046e7bf3 R09: 1ffff920008dcf7e [ 270.442508][T11086] R10: dffffc0000000000 R11: fffff520008dcf7f R12: 0000200000000334 [ 270.442520][T11086] R13: 00007ffffffff000 R14: ffffc900046e7bc0 R15: 0000200000000300 [ 270.442547][T11086] _copy_to_user+0x8a/0xb0 [ 270.442571][T11086] ax25_ioctl+0x6a5/0xca0 [ 270.442597][T11086] ? __pfx_ax25_ioctl+0x10/0x10 [ 270.442629][T11086] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 270.442654][T11086] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 270.442680][T11086] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 270.442711][T11086] sock_do_ioctl+0xd9/0x300 [ 270.442737][T11086] ? __pfx_sock_do_ioctl+0x10/0x10 [ 270.442761][T11086] ? __lock_acquire+0xaac/0xd20 [ 270.442794][T11086] sock_ioctl+0x576/0x790 [ 270.442819][T11086] ? __pfx_sock_ioctl+0x10/0x10 [ 270.442844][T11086] ? __fget_files+0x3a0/0x420 [ 270.442864][T11086] ? __fget_files+0x2a/0x420 [ 270.442888][T11086] ? bpf_lsm_file_ioctl+0x9/0x20 [ 270.442909][T11086] ? __pfx_sock_ioctl+0x10/0x10 [ 270.442930][T11086] __se_sys_ioctl+0xf9/0x170 [ 270.442950][T11086] do_syscall_64+0xf6/0x210 [ 270.442973][T11086] ? clear_bhb_loop+0x45/0xa0 [ 270.442994][T11086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.443009][T11086] RIP: 0033:0x7f87cb98e969 [ 270.443031][T11086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.443045][T11086] RSP: 002b:00007f87cc7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 270.443060][T11086] RAX: ffffffffffffffda RBX: 00007f87cbbb5fa0 RCX: 00007f87cb98e969 [ 270.443071][T11086] RDX: 0000200000000300 RSI: 00000000000089e9 RDI: 0000000000000004 [ 270.443082][T11086] RBP: 00007f87cc7f8090 R08: 0000000000000000 R09: 0000000000000000 [ 270.443091][T11086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.443100][T11086] R13: 0000000000000000 R14: 00007f87cbbb5fa0 R15: 00007ffcd4747528 [ 270.443125][T11086] [ 270.973165][T10978] team0: Port device team_slave_0 added [ 270.985084][ T756] bridge_slave_1: left allmulticast mode [ 271.000272][ T756] bridge_slave_1: left promiscuous mode [ 271.012517][ T756] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.033544][ T756] bridge_slave_0: left allmulticast mode [ 271.039504][ T756] bridge_slave_0: left promiscuous mode [ 271.060070][ T756] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.609976][ T756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.623559][ T756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.635446][ T756] bond0 (unregistering): Released all slaves [ 271.653927][T10978] team0: Port device team_slave_1 added [ 271.872928][T10978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.889344][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.952631][T10978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.972170][T10978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.979196][T10978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.015805][T10978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.081458][T11119] netlink: 'syz.4.1495': attribute type 10 has an invalid length. [ 272.287323][T11131] FAULT_INJECTION: forcing a failure. [ 272.287323][T11131] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 272.308925][T11131] CPU: 0 UID: 0 PID: 11131 Comm: syz.0.1499 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 272.308958][T11131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 272.308971][T11131] Call Trace: [ 272.308979][T11131] [ 272.308988][T11131] dump_stack_lvl+0x189/0x250 [ 272.309027][T11131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 272.309056][T11131] ? __pfx__printk+0x10/0x10 [ 272.309079][T11131] ? fs_reclaim_acquire+0x7d/0x100 [ 272.309127][T11131] should_fail_ex+0x414/0x560 [ 272.309164][T11131] prepare_alloc_pages+0x213/0x610 [ 272.309204][T11131] __alloc_frozen_pages_noprof+0x123/0x370 [ 272.309241][T11131] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 272.309279][T11131] ? __lock_acquire+0xaac/0xd20 [ 272.309309][T11131] ? policy_nodemask+0x27c/0x720 [ 272.309342][T11131] alloc_pages_mpol+0x232/0x4a0 [ 272.309374][T11131] alloc_pages_noprof+0xa9/0x190 [ 272.309403][T11131] pte_alloc_one+0x1e/0x160 [ 272.309429][T11131] __do_fault+0xd1/0x390 [ 272.309461][T11131] __handle_mm_fault+0x17f9/0x5380 [ 272.309485][T11131] ? mt_find+0x15c/0x5f0 [ 272.309530][T11131] ? __pfx___handle_mm_fault+0x10/0x10 [ 272.309570][T11131] ? find_vma+0xe7/0x160 [ 272.309594][T11131] ? __pfx_find_vma+0x10/0x10 [ 272.309615][T11131] ? stack_trace_save+0x9c/0xe0 [ 272.309640][T11131] handle_mm_fault+0x3f6/0x8c0 [ 272.309674][T11131] do_user_addr_fault+0x764/0x1390 [ 272.309710][T11131] exc_page_fault+0x68/0x110 [ 272.309738][T11131] asm_exc_page_fault+0x26/0x30 [ 272.309757][T11131] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 272.309778][T11131] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 272.309800][T11131] RSP: 0018:ffffc90003047b28 EFLAGS: 00050212 [ 272.309819][T11131] RAX: 000000000000000a RBX: 0000000000000034 RCX: 0000000000000034 [ 272.309831][T11131] RDX: 0000000000000000 RSI: ffffc90003047bc0 RDI: 0000200000000300 [ 272.309844][T11131] RBP: ffffc90003047cb0 R08: ffffc90003047bf3 R09: 1ffff92000608f7e [ 272.309859][T11131] R10: dffffc0000000000 R11: fffff52000608f7f R12: 0000200000000334 [ 272.309874][T11131] R13: 00007ffffffff000 R14: ffffc90003047bc0 R15: 0000200000000300 [ 272.309910][T11131] _copy_to_user+0x8a/0xb0 [ 272.309939][T11131] ax25_ioctl+0x6a5/0xca0 [ 272.309972][T11131] ? __pfx_ax25_ioctl+0x10/0x10 [ 272.310014][T11131] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 272.310045][T11131] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 272.310075][T11131] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 272.310123][T11131] sock_do_ioctl+0xd9/0x300 [ 272.310156][T11131] ? __pfx_sock_do_ioctl+0x10/0x10 [ 272.310186][T11131] ? __lock_acquire+0xaac/0xd20 [ 272.310229][T11131] sock_ioctl+0x576/0x790 [ 272.310260][T11131] ? __pfx_sock_ioctl+0x10/0x10 [ 272.310290][T11131] ? __fget_files+0x3a0/0x420 [ 272.310314][T11131] ? __fget_files+0x2a/0x420 [ 272.310342][T11131] ? bpf_lsm_file_ioctl+0x9/0x20 [ 272.310367][T11131] ? __pfx_sock_ioctl+0x10/0x10 [ 272.310394][T11131] __se_sys_ioctl+0xf9/0x170 [ 272.310418][T11131] do_syscall_64+0xf6/0x210 [ 272.310464][T11131] ? clear_bhb_loop+0x45/0xa0 [ 272.310489][T11131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.310508][T11131] RIP: 0033:0x7f87cb98e969 [ 272.310526][T11131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.310542][T11131] RSP: 002b:00007f87cc7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.310561][T11131] RAX: ffffffffffffffda RBX: 00007f87cbbb5fa0 RCX: 00007f87cb98e969 [ 272.310575][T11131] RDX: 0000200000000300 RSI: 00000000000089e9 RDI: 0000000000000004 [ 272.310587][T11131] RBP: 00007f87cc7f8090 R08: 0000000000000000 R09: 0000000000000000 [ 272.310599][T11131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.310611][T11131] R13: 0000000000000000 R14: 00007f87cbbb5fa0 R15: 00007ffcd4747528 [ 272.310643][T11131] [ 272.702852][ T5846] Bluetooth: hci4: command tx timeout [ 272.763818][ T756] hsr_slave_0: left promiscuous mode [ 272.771377][ T756] hsr_slave_1: left promiscuous mode [ 272.777713][ T756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.785284][ T756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.832715][ T756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.840196][ T756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.917350][ T756] veth1_macvtap: left promiscuous mode [ 272.933632][ T756] veth0_macvtap: left promiscuous mode [ 272.947228][T11145] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.968508][ T756] veth1_vlan: left promiscuous mode [ 272.982993][ T756] veth0_vlan: left promiscuous mode [ 273.531291][T11159] __nla_validate_parse: 3 callbacks suppressed [ 273.531313][T11159] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1506'. [ 273.546737][T11159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 273.657669][ T756] team0 (unregistering): Port device team_slave_1 removed [ 273.698000][ T756] team0 (unregistering): Port device team_slave_0 removed [ 274.157704][T10978] hsr_slave_0: entered promiscuous mode [ 274.165658][T10978] hsr_slave_1: entered promiscuous mode [ 274.172652][T10978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.180552][T10978] Cannot create hsr debugfs directory [ 274.218066][T11154] netlink: 'syz.4.1506': attribute type 23 has an invalid length. [ 274.226186][T11147] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 274.354578][T11163] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1508'. [ 274.368454][T11163] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.410709][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1509'. [ 274.503178][T11169] xt_recent: Unsupported userspace flags (00000048) [ 274.558666][T11170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1511'. [ 274.588191][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1510'. [ 274.609507][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1510'. [ 274.642076][T11176] FAULT_INJECTION: forcing a failure. [ 274.642076][T11176] name failslab, interval 1, probability 0, space 0, times 0 [ 274.688952][T11176] CPU: 1 UID: 0 PID: 11176 Comm: syz.3.1512 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 274.688983][T11176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 274.688995][T11176] Call Trace: [ 274.689002][T11176] [ 274.689010][T11176] dump_stack_lvl+0x189/0x250 [ 274.689046][T11176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.689075][T11176] ? __pfx__printk+0x10/0x10 [ 274.689100][T11176] ? __pfx___might_resched+0x10/0x10 [ 274.689118][T11176] ? fs_reclaim_acquire+0x7d/0x100 [ 274.689151][T11176] should_fail_ex+0x414/0x560 [ 274.689187][T11176] should_failslab+0xa8/0x100 [ 274.689216][T11176] kmem_cache_alloc_noprof+0x73/0x3c0 [ 274.689240][T11176] ? ptlock_alloc+0x20/0x70 [ 274.689269][T11176] ptlock_alloc+0x20/0x70 [ 274.689294][T11176] pte_alloc_one+0x6d/0x160 [ 274.689320][T11176] __do_fault+0xd1/0x390 [ 274.689351][T11176] __handle_mm_fault+0x17f9/0x5380 [ 274.689375][T11176] ? mt_find+0x15c/0x5f0 [ 274.689422][T11176] ? __pfx___handle_mm_fault+0x10/0x10 [ 274.689464][T11176] ? find_vma+0xe7/0x160 [ 274.689487][T11176] ? __pfx_find_vma+0x10/0x10 [ 274.689510][T11176] ? stack_trace_save+0x9c/0xe0 [ 274.689547][T11176] handle_mm_fault+0x3f6/0x8c0 [ 274.689583][T11176] do_user_addr_fault+0x764/0x1390 [ 274.689621][T11176] exc_page_fault+0x68/0x110 [ 274.689650][T11176] asm_exc_page_fault+0x26/0x30 [ 274.689670][T11176] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 274.689692][T11176] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 274.689709][T11176] RSP: 0018:ffffc90003627b28 EFLAGS: 00050212 [ 274.689727][T11176] RAX: 000000000000000a RBX: 0000000000000034 RCX: 0000000000000034 [ 274.689740][T11176] RDX: 0000000000000000 RSI: ffffc90003627bc0 RDI: 0000200000000300 [ 274.689754][T11176] RBP: ffffc90003627cb0 R08: ffffc90003627bf3 R09: 1ffff920006c4f7e [ 274.689769][T11176] R10: dffffc0000000000 R11: fffff520006c4f7f R12: 0000200000000334 [ 274.689783][T11176] R13: 00007ffffffff000 R14: ffffc90003627bc0 R15: 0000200000000300 [ 274.689818][T11176] _copy_to_user+0x8a/0xb0 [ 274.689847][T11176] ax25_ioctl+0x6a5/0xca0 [ 274.689880][T11176] ? __pfx_ax25_ioctl+0x10/0x10 [ 274.689921][T11176] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 274.689951][T11176] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 274.689983][T11176] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 274.690022][T11176] sock_do_ioctl+0xd9/0x300 [ 274.690054][T11176] ? __pfx_sock_do_ioctl+0x10/0x10 [ 274.690084][T11176] ? __lock_acquire+0xaac/0xd20 [ 274.690127][T11176] sock_ioctl+0x576/0x790 [ 274.690158][T11176] ? __pfx_sock_ioctl+0x10/0x10 [ 274.690188][T11176] ? __fget_files+0x3a0/0x420 [ 274.690212][T11176] ? __fget_files+0x2a/0x420 [ 274.690240][T11176] ? bpf_lsm_file_ioctl+0x9/0x20 [ 274.690266][T11176] ? __pfx_sock_ioctl+0x10/0x10 [ 274.690297][T11176] __se_sys_ioctl+0xf9/0x170 [ 274.690320][T11176] do_syscall_64+0xf6/0x210 [ 274.690348][T11176] ? clear_bhb_loop+0x45/0xa0 [ 274.690373][T11176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.690392][T11176] RIP: 0033:0x7f14f3b8e969 [ 274.690409][T11176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.690425][T11176] RSP: 002b:00007f14f4a89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 274.690445][T11176] RAX: ffffffffffffffda RBX: 00007f14f3db5fa0 RCX: 00007f14f3b8e969 [ 274.690460][T11176] RDX: 0000200000000300 RSI: 00000000000089e9 RDI: 0000000000000004 [ 274.690472][T11176] RBP: 00007f14f4a89090 R08: 0000000000000000 R09: 0000000000000000 [ 274.690484][T11176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.690496][T11176] R13: 0000000000000000 R14: 00007f14f3db5fa0 R15: 00007ffdb9552118 [ 274.690527][T11176] [ 275.119657][T11183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 275.247186][T11190] FAULT_INJECTION: forcing a failure. [ 275.247186][T11190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.381411][T11190] CPU: 0 UID: 0 PID: 11190 Comm: syz.0.1515 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 275.381445][T11190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 275.381458][T11190] Call Trace: [ 275.381466][T11190] [ 275.381475][T11190] dump_stack_lvl+0x189/0x250 [ 275.381508][T11190] ? __lock_acquire+0xaac/0xd20 [ 275.381541][T11190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.381570][T11190] ? __pfx__printk+0x10/0x10 [ 275.381591][T11190] ? __might_fault+0xb0/0x130 [ 275.381629][T11190] should_fail_ex+0x414/0x560 [ 275.381666][T11190] _copy_from_user+0x2d/0xb0 [ 275.381694][T11190] ___sys_recvmsg+0x12e/0x510 [ 275.381726][T11190] ? __pfx____sys_recvmsg+0x10/0x10 [ 275.381795][T11190] ? __might_fault+0xb0/0x130 [ 275.381825][T11190] do_recvmmsg+0x307/0x760 [ 275.381860][T11190] ? __pfx_do_recvmmsg+0x10/0x10 [ 275.381899][T11190] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 275.381948][T11190] __x64_sys_recvmmsg+0x190/0x240 [ 275.381973][T11190] ? rcu_is_watching+0x15/0xb0 [ 275.382006][T11190] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 275.382037][T11190] ? do_syscall_64+0xba/0x210 [ 275.382070][T11190] do_syscall_64+0xf6/0x210 [ 275.382100][T11190] ? clear_bhb_loop+0x45/0xa0 [ 275.382125][T11190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.382145][T11190] RIP: 0033:0x7f87cb98e969 [ 275.382162][T11190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.382180][T11190] RSP: 002b:00007f87cc7f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 275.382202][T11190] RAX: ffffffffffffffda RBX: 00007f87cbbb5fa0 RCX: 00007f87cb98e969 [ 275.382217][T11190] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003 [ 275.382231][T11190] RBP: 00007f87cc7f8090 R08: 0000000000000000 R09: 0000000000000000 [ 275.382244][T11190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.382256][T11190] R13: 0000000000000000 R14: 00007f87cbbb5fa0 R15: 00007ffcd4747528 [ 275.382288][T11190] [ 277.116451][T11218] FAULT_INJECTION: forcing a failure. [ 277.116451][T11218] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 277.130108][T11218] CPU: 0 UID: 0 PID: 11218 Comm: syz.3.1524 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 277.130148][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 277.130160][T11218] Call Trace: [ 277.130169][T11218] [ 277.130178][T11218] dump_stack_lvl+0x189/0x250 [ 277.130216][T11218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.130245][T11218] ? __pfx__printk+0x10/0x10 [ 277.130269][T11218] ? fs_reclaim_acquire+0x7d/0x100 [ 277.130312][T11218] should_fail_ex+0x414/0x560 [ 277.130348][T11218] prepare_alloc_pages+0x213/0x610 [ 277.130386][T11218] __alloc_frozen_pages_noprof+0x123/0x370 [ 277.130422][T11218] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 277.130463][T11218] ? policy_nodemask+0x27c/0x720 [ 277.130495][T11218] alloc_pages_mpol+0x232/0x4a0 [ 277.130527][T11218] folio_alloc_mpol_noprof+0x39/0x70 [ 277.130556][T11218] shmem_alloc_and_add_folio+0x447/0xf60 [ 277.130599][T11218] ? filemap_get_entry+0xad/0x2f0 [ 277.130629][T11218] ? filemap_get_entry+0xad/0x2f0 [ 277.130657][T11218] ? filemap_get_entry+0xad/0x2f0 [ 277.130692][T11218] ? shmem_huge_global_enabled+0x174/0x3a0 [ 277.130715][T11218] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 277.130746][T11218] ? shmem_allowable_huge_orders+0x414/0x420 [ 277.130776][T11218] shmem_get_folio_gfp+0x597/0x15f0 [ 277.130822][T11218] shmem_fault+0x179/0x390 [ 277.130858][T11218] __do_fault+0x135/0x390 [ 277.130891][T11218] __handle_mm_fault+0x17f9/0x5380 [ 277.130915][T11218] ? mt_find+0x15c/0x5f0 [ 277.130962][T11218] ? __pfx___handle_mm_fault+0x10/0x10 [ 277.131006][T11218] ? find_vma+0xe7/0x160 [ 277.131029][T11218] ? __pfx_find_vma+0x10/0x10 [ 277.131050][T11218] ? stack_trace_save+0x9c/0xe0 [ 277.131076][T11218] handle_mm_fault+0x3f6/0x8c0 [ 277.131112][T11218] do_user_addr_fault+0x764/0x1390 [ 277.131150][T11218] exc_page_fault+0x68/0x110 [ 277.131181][T11218] asm_exc_page_fault+0x26/0x30 [ 277.131200][T11218] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 277.131222][T11218] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 277.131239][T11218] RSP: 0018:ffffc90002e77b28 EFLAGS: 00050212 [ 277.131257][T11218] RAX: 000000000000000a RBX: 0000000000000034 RCX: 0000000000000034 [ 277.131270][T11218] RDX: 0000000000000000 RSI: ffffc90002e77bc0 RDI: 0000200000000300 [ 277.131284][T11218] RBP: ffffc90002e77cb0 R08: ffffc90002e77bf3 R09: 1ffff920005cef7e [ 277.131299][T11218] R10: dffffc0000000000 R11: fffff520005cef7f R12: 0000200000000334 [ 277.131313][T11218] R13: 00007ffffffff000 R14: ffffc90002e77bc0 R15: 0000200000000300 [ 277.131349][T11218] _copy_to_user+0x8a/0xb0 [ 277.131378][T11218] ax25_ioctl+0x6a5/0xca0 [ 277.131412][T11218] ? __pfx_ax25_ioctl+0x10/0x10 [ 277.131454][T11218] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 277.131485][T11218] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 277.131517][T11218] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 277.131556][T11218] sock_do_ioctl+0xd9/0x300 [ 277.131597][T11218] ? __pfx_sock_do_ioctl+0x10/0x10 [ 277.131627][T11218] ? __lock_acquire+0xaac/0xd20 [ 277.131670][T11218] sock_ioctl+0x576/0x790 [ 277.131701][T11218] ? __pfx_sock_ioctl+0x10/0x10 [ 277.131732][T11218] ? __fget_files+0x3a0/0x420 [ 277.131757][T11218] ? __fget_files+0x2a/0x420 [ 277.131787][T11218] ? bpf_lsm_file_ioctl+0x9/0x20 [ 277.131812][T11218] ? __pfx_sock_ioctl+0x10/0x10 [ 277.131839][T11218] __se_sys_ioctl+0xf9/0x170 [ 277.131863][T11218] do_syscall_64+0xf6/0x210 [ 277.131894][T11218] ? clear_bhb_loop+0x45/0xa0 [ 277.131918][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.131938][T11218] RIP: 0033:0x7f14f3b8e969 [ 277.131955][T11218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.131972][T11218] RSP: 002b:00007f14f4a89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.131992][T11218] RAX: ffffffffffffffda RBX: 00007f14f3db5fa0 RCX: 00007f14f3b8e969 [ 277.132007][T11218] RDX: 0000200000000300 RSI: 00000000000089e9 RDI: 0000000000000004 [ 277.132020][T11218] RBP: 00007f14f4a89090 R08: 0000000000000000 R09: 0000000000000000 [ 277.132032][T11218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.132044][T11218] R13: 0000000000000000 R14: 00007f14f3db5fa0 R15: 00007ffdb9552118 [ 277.132077][T11218] [ 277.584542][T11213] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 277.594272][T11213] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 277.738700][T11223] FAULT_INJECTION: forcing a failure. [ 277.738700][T11223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.752083][T11223] CPU: 0 UID: 0 PID: 11223 Comm: syz.4.1527 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 277.752110][T11223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 277.752122][T11223] Call Trace: [ 277.752129][T11223] [ 277.752137][T11223] dump_stack_lvl+0x189/0x250 [ 277.752167][T11223] ? __lock_acquire+0xaac/0xd20 [ 277.752197][T11223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.752225][T11223] ? __pfx__printk+0x10/0x10 [ 277.752246][T11223] ? __might_fault+0xb0/0x130 [ 277.752283][T11223] should_fail_ex+0x414/0x560 [ 277.752320][T11223] _copy_from_user+0x2d/0xb0 [ 277.752346][T11223] ___sys_recvmsg+0x12e/0x510 [ 277.752377][T11223] ? __pfx____sys_recvmsg+0x10/0x10 [ 277.752435][T11223] ? __might_fault+0xb0/0x130 [ 277.752465][T11223] do_recvmmsg+0x307/0x760 [ 277.752499][T11223] ? __pfx_do_recvmmsg+0x10/0x10 [ 277.752538][T11223] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 277.752595][T11223] __x64_sys_recvmmsg+0x190/0x240 [ 277.752621][T11223] ? rcu_is_watching+0x15/0xb0 [ 277.752651][T11223] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 277.752677][T11223] ? do_syscall_64+0xba/0x210 [ 277.752706][T11223] do_syscall_64+0xf6/0x210 [ 277.752731][T11223] ? clear_bhb_loop+0x45/0xa0 [ 277.752752][T11223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.752769][T11223] RIP: 0033:0x7f465318e969 [ 277.752786][T11223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.752801][T11223] RSP: 002b:00007f4653ff3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 277.752820][T11223] RAX: ffffffffffffffda RBX: 00007f46533b5fa0 RCX: 00007f465318e969 [ 277.752833][T11223] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003 [ 277.752845][T11223] RBP: 00007f4653ff3090 R08: 0000000000000000 R09: 0000000000000000 [ 277.752855][T11223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.752866][T11223] R13: 0000000000000000 R14: 00007f46533b5fa0 R15: 00007ffd922a4928 [ 277.752894][T11223] [ 277.993863][T11221] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1526'. [ 278.037309][T11228] netlink: 'syz.4.1528': attribute type 21 has an invalid length. [ 278.074559][T10978] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.091746][T11229] netlink: 'syz.4.1528': attribute type 39 has an invalid length. [ 278.107882][T10978] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.175259][T11228] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1528'. [ 278.224687][T10978] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 278.240043][T10978] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.382123][T11239] netlink: 'syz.0.1533': attribute type 6 has an invalid length. [ 278.393499][T11239] netlink: 'syz.0.1533': attribute type 5 has an invalid length. [ 278.636385][T10978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.694899][T10978] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.733806][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.741126][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.777454][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.784663][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.872029][T11254] FAULT_INJECTION: forcing a failure. [ 278.872029][T11254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.888438][T11256] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 278.928287][T11256] __nla_validate_parse: 3 callbacks suppressed [ 278.928307][T11256] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1537'. [ 278.942413][T11254] CPU: 1 UID: 0 PID: 11254 Comm: syz.0.1536 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 278.942449][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 278.942463][T11254] Call Trace: [ 278.942479][T11254] [ 278.942489][T11254] dump_stack_lvl+0x189/0x250 [ 278.942531][T11254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.942562][T11254] ? __pfx__printk+0x10/0x10 [ 278.942600][T11254] should_fail_ex+0x414/0x560 [ 278.942639][T11254] _copy_to_user+0x31/0xb0 [ 278.942671][T11254] simple_read_from_buffer+0xe1/0x170 [ 278.942703][T11254] proc_fail_nth_read+0x1df/0x250 [ 278.942738][T11254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.942771][T11254] ? rw_verify_area+0x258/0x650 [ 278.942794][T11254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 278.942826][T11254] vfs_read+0x1fd/0x980 [ 278.942855][T11254] ? __pfx___mutex_lock+0x10/0x10 [ 278.942888][T11254] ? __pfx_vfs_read+0x10/0x10 [ 278.942914][T11254] ? __fget_files+0x2a/0x420 [ 278.942946][T11254] ? __fget_files+0x3a0/0x420 [ 278.942972][T11254] ? __fget_files+0x2a/0x420 [ 278.943010][T11254] ksys_read+0x145/0x250 [ 278.943032][T11254] ? __fget_files+0x2a/0x420 [ 278.943059][T11254] ? __pfx_ksys_read+0x10/0x10 [ 278.943088][T11254] ? do_syscall_64+0xba/0x210 [ 278.943124][T11254] do_syscall_64+0xf6/0x210 [ 278.943155][T11254] ? clear_bhb_loop+0x45/0xa0 [ 278.943183][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.943204][T11254] RIP: 0033:0x7f87cb98d37c [ 278.943224][T11254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 278.943243][T11254] RSP: 002b:00007f87cc7f8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 278.943266][T11254] RAX: ffffffffffffffda RBX: 00007f87cbbb5fa0 RCX: 00007f87cb98d37c [ 278.943281][T11254] RDX: 000000000000000f RSI: 00007f87cc7f80a0 RDI: 0000000000000003 [ 278.943295][T11254] RBP: 00007f87cc7f8090 R08: 0000000000000000 R09: 0000000000000000 [ 278.943309][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.943321][T11254] R13: 0000000000000000 R14: 00007f87cbbb5fa0 R15: 00007ffcd4747528 [ 278.943356][T11254] [ 278.962759][T10978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.194723][T11265] FAULT_INJECTION: forcing a failure. [ 279.194723][T11265] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.224504][T11265] CPU: 1 UID: 0 PID: 11265 Comm: syz.0.1539 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 279.224538][T11265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 279.224551][T11265] Call Trace: [ 279.224558][T11265] [ 279.224567][T11265] dump_stack_lvl+0x189/0x250 [ 279.224599][T11265] ? __lock_acquire+0xaac/0xd20 [ 279.224631][T11265] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.224660][T11265] ? __pfx__printk+0x10/0x10 [ 279.224681][T11265] ? __might_fault+0xb0/0x130 [ 279.224719][T11265] should_fail_ex+0x414/0x560 [ 279.224755][T11265] _copy_from_user+0x2d/0xb0 [ 279.224782][T11265] ___sys_recvmsg+0x12e/0x510 [ 279.224814][T11265] ? __pfx____sys_recvmsg+0x10/0x10 [ 279.224874][T11265] ? __might_fault+0xb0/0x130 [ 279.224904][T11265] do_recvmmsg+0x307/0x760 [ 279.224938][T11265] ? __pfx_do_recvmmsg+0x10/0x10 [ 279.224976][T11265] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.225024][T11265] __x64_sys_recvmmsg+0x190/0x240 [ 279.225049][T11265] ? rcu_is_watching+0x15/0xb0 [ 279.225081][T11265] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 279.225112][T11265] ? do_syscall_64+0xba/0x210 [ 279.225145][T11265] do_syscall_64+0xf6/0x210 [ 279.225174][T11265] ? clear_bhb_loop+0x45/0xa0 [ 279.225197][T11265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.225217][T11265] RIP: 0033:0x7f87cb98e969 [ 279.225234][T11265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.225252][T11265] RSP: 002b:00007f87cc7f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 279.225273][T11265] RAX: ffffffffffffffda RBX: 00007f87cbbb5fa0 RCX: 00007f87cb98e969 [ 279.225288][T11265] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003 [ 279.225302][T11265] RBP: 00007f87cc7f8090 R08: 0000000000000000 R09: 0000000000000000 [ 279.225315][T11265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 279.225327][T11265] R13: 0000000000000000 R14: 00007f87cbbb5fa0 R15: 00007ffcd4747528 [ 279.225359][T11265] [ 279.458151][T10978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.523166][T11270] netlink: 'syz.0.1541': attribute type 6 has an invalid length. [ 279.826191][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1542'. [ 280.098388][T10978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.159495][T11302] netlink: 'syz.1.1547': attribute type 10 has an invalid length. [ 280.200144][T11302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1547'. [ 280.226664][T11302] bridge0: port 3(batadv0) entered blocking state [ 280.233385][T11302] bridge0: port 3(batadv0) entered forwarding state [ 280.261156][T11302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.262874][T11307] netlink: 'syz.1.1547': attribute type 10 has an invalid length. [ 280.283034][T10978] veth0_vlan: entered promiscuous mode [ 280.308636][T10978] veth1_vlan: entered promiscuous mode [ 280.326943][T11307] bridge0: port 5(gretap0) entered disabled state [ 280.333701][T11307] bridge0: port 3(batadv0) entered disabled state [ 280.365785][T11307] bridge0: port 5(gretap0) entered blocking state [ 280.372483][T11307] bridge0: port 5(gretap0) entered forwarding state [ 280.379458][T11307] bridge0: port 3(batadv0) entered blocking state [ 280.386113][T11307] bridge0: port 3(batadv0) entered forwarding state [ 280.408423][T11307] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.463569][T11307] netlink: 900 bytes leftover after parsing attributes in process `syz.1.1547'. [ 280.604535][T10978] veth0_macvtap: entered promiscuous mode [ 280.627143][T10978] veth1_macvtap: entered promiscuous mode [ 280.694895][T10978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.743575][T10978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.794598][T10978] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.822872][T10978] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.841971][T10978] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.866932][T10978] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.129869][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.158362][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.245869][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.275816][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.484748][T11355] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1556'. [ 281.838564][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1560'. [ 282.097275][T11384] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1564'. [ 282.531461][ T8835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.856376][ T8835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.049826][ T8835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.125946][ T8835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.239859][ T8835] bridge_slave_1: left allmulticast mode [ 283.245925][ T8835] bridge_slave_1: left promiscuous mode [ 283.256424][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.267320][ T8835] bridge_slave_0: left allmulticast mode [ 283.278383][ T8835] bridge_slave_0: left promiscuous mode [ 283.284585][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.602721][ T8835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.614703][ T8835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.625973][ T8835] bond0 (unregistering): Released all slaves [ 283.959259][T11408] netlink: 'syz.0.1566': attribute type 2 has an invalid length. [ 283.985390][T11408] xt_CT: You must specify a L4 protocol and not use inversions on it [ 284.000253][ T8835] hsr_slave_0: left promiscuous mode [ 284.044722][ T8835] hsr_slave_1: left promiscuous mode [ 284.071640][ T8835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.092446][ T8835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.113641][ T8835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.138747][ T8835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.169434][T11420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1569'. [ 284.207704][ T8835] veth1_macvtap: left promiscuous mode [ 284.221546][ T8835] veth0_macvtap: left promiscuous mode [ 284.238587][ T8835] veth1_vlan: left promiscuous mode [ 284.250943][T11422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1569'. [ 284.264191][ T8835] veth0_vlan: left promiscuous mode [ 284.273893][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1569'. [ 284.422655][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 284.432736][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 284.445690][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 284.454024][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 284.462348][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 284.543995][T11431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1574'. [ 284.553620][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1574'. [ 284.565079][T11431] netlink: 'syz.1.1574': attribute type 6 has an invalid length. [ 284.893659][ T8835] team0 (unregistering): Port device team_slave_1 removed [ 284.966821][ T8835] team0 (unregistering): Port device team_slave_0 removed [ 284.997255][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1575'. [ 285.071718][T11434] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1575'. [ 285.420210][T11414] netlink: 'syz.4.1569': attribute type 3 has an invalid length. [ 285.581370][T11439] xt_SECMARK: invalid mode: 0 [ 285.632388][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1578'. [ 285.904805][T11460] netlink: 'syz.4.1579': attribute type 1 has an invalid length. [ 286.431884][T11480] netlink: 'syz.1.1585': attribute type 1 has an invalid length. [ 286.439701][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1585'. [ 286.560757][ T5846] Bluetooth: hci4: command tx timeout [ 286.854980][T11427] chnl_net:caif_netlink_parms(): no params data found [ 287.346848][T11427] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.359235][T11427] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.366812][T11427] bridge_slave_0: entered allmulticast mode [ 287.376663][T11427] bridge_slave_0: entered promiscuous mode [ 287.448053][T11427] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.461056][T11427] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.476275][T11427] bridge_slave_1: entered allmulticast mode [ 287.502487][T11427] bridge_slave_1: entered promiscuous mode [ 287.624777][T11427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.659557][T11427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.761754][T11427] team0: Port device team_slave_0 added [ 287.789933][T11427] team0: Port device team_slave_1 added [ 287.887579][T11427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.899671][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.935682][T11427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.025895][T11427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.050620][T11427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.106205][T11538] sctp: [Deprecated]: syz.3.1594 (pid 11538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 288.106205][T11538] Use struct sctp_sack_info instead [ 288.130603][T11427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.216985][T11540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1593'. [ 288.581807][T11427] hsr_slave_0: entered promiscuous mode [ 288.588536][T11427] hsr_slave_1: entered promiscuous mode [ 288.620201][T11427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.635445][T11427] Cannot create hsr debugfs directory [ 288.641260][ T5846] Bluetooth: hci4: command tx timeout [ 288.988888][T11572] x_tables: unsorted underflow at hook 1 [ 290.373717][T11590] bond0: entered promiscuous mode [ 290.379259][T11590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.475758][T11602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1607'. [ 290.692420][ T30] audit: type=1800 audit(1746121580.045:11): pid=11592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1607" name="cgroup.controllers" dev="tmpfs" ino=1792 res=0 errno=0 [ 290.716758][T11611] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 290.730577][T11611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1611'. [ 290.734927][ T5846] Bluetooth: hci4: command tx timeout [ 290.820664][T11613] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1612'. [ 290.919787][T11427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 290.972458][T11427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 290.994586][T11427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 291.029180][T11427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 291.272425][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1619'. [ 291.295650][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1619'. [ 291.315154][T11632] netlink: 'syz.4.1619': attribute type 20 has an invalid length. [ 291.370999][T11637] syz.4.1619: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.460423][T11637] CPU: 1 UID: 0 PID: 11637 Comm: syz.4.1619 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 291.460461][T11637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 291.460475][T11637] Call Trace: [ 291.460483][T11637] [ 291.460493][T11637] dump_stack_lvl+0x189/0x250 [ 291.460532][T11637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.460562][T11637] ? __pfx__printk+0x10/0x10 [ 291.460583][T11637] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.460617][T11637] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.460650][T11637] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 291.460686][T11637] warn_alloc+0x214/0x310 [ 291.460716][T11637] ? __pfx___schedule+0x10/0x10 [ 291.460747][T11637] ? __pfx_warn_alloc+0x10/0x10 [ 291.460775][T11637] ? kasan_save_track+0x4f/0x80 [ 291.460798][T11637] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 291.460823][T11637] ? xskq_create+0x56/0x170 [ 291.460850][T11637] ? __x64_sys_setsockopt+0x18b/0x220 [ 291.460872][T11637] ? do_syscall_64+0xf6/0x210 [ 291.460900][T11637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.460933][T11637] __vmalloc_node_range_noprof+0x125/0x12c0 [ 291.460996][T11637] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.461029][T11637] ? __kasan_kmalloc+0x93/0xb0 [ 291.461061][T11637] vmalloc_user_noprof+0x74/0x80 [ 291.461090][T11637] ? xskq_create+0xbf/0x170 [ 291.461115][T11637] xskq_create+0xbf/0x170 [ 291.461146][T11637] xsk_init_queue+0xb0/0x110 [ 291.461176][T11637] xsk_setsockopt+0x4de/0x710 [ 291.461218][T11637] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.461251][T11637] ? aa_sock_opt_perm+0x74/0x110 [ 291.461276][T11637] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 291.461299][T11637] ? __pfx_xsk_setsockopt+0x10/0x10 [ 291.461324][T11637] do_sock_setsockopt+0x257/0x3e0 [ 291.461348][T11637] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 291.461369][T11637] ? __fget_files+0x2a/0x420 [ 291.461401][T11637] ? __fget_files+0x3a0/0x420 [ 291.461426][T11637] ? __fget_files+0x2a/0x420 [ 291.461462][T11637] __x64_sys_setsockopt+0x18b/0x220 [ 291.461493][T11637] do_syscall_64+0xf6/0x210 [ 291.461532][T11637] ? clear_bhb_loop+0x45/0xa0 [ 291.461558][T11637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.461578][T11637] RIP: 0033:0x7f465318e969 [ 291.461597][T11637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.461615][T11637] RSP: 002b:00007f4653fd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 291.461638][T11637] RAX: ffffffffffffffda RBX: 00007f46533b6080 RCX: 00007f465318e969 [ 291.461653][T11637] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 291.461665][T11637] RBP: 00007f4653210ab1 R08: 0000000000000004 R09: 0000000000000000 [ 291.461679][T11637] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 291.461692][T11637] R13: 0000000000000000 R14: 00007f46533b6080 R15: 00007ffd922a4928 [ 291.461720][T11637] [ 291.461741][T11637] Mem-Info: [ 291.608104][T11427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.780049][T11637] active_anon:22541 inactive_anon:0 isolated_anon:0 [ 291.780049][T11637] active_file:1501 inactive_file:38414 isolated_file:0 [ 291.780049][T11637] unevictable:768 dirty:234 writeback:0 [ 291.780049][T11637] slab_reclaimable:10988 slab_unreclaimable:104801 [ 291.780049][T11637] mapped:31179 shmem:5706 pagetables:762 [ 291.780049][T11637] sec_pagetables:0 bounce:0 [ 291.780049][T11637] kernel_misc_reclaimable:0 [ 291.780049][T11637] free:1320125 free_pcp:813 free_cma:0 [ 291.830780][T11637] Node 0 active_anon:91164kB inactive_anon:0kB active_file:6004kB inactive_file:153580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125516kB dirty:936kB writeback:0kB shmem:22288kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12932kB pagetables:3048kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.888077][T11637] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 291.982740][T11637] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.027068][T11427] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.074526][ T756] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.081783][ T756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.107504][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.114798][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.146861][T11637] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 292.197933][T11637] Node 0 DMA32 free:1348948kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:92352kB inactive_anon:0kB active_file:6004kB inactive_file:153480kB unevictable:1536kB writepending:944kB present:3129332kB managed:2564100kB mlocked:0kB bounce:0kB free_pcp:6392kB local_pcp:2136kB free_cma:0kB [ 292.267142][T11637] lowmem_reserve[]: 0 0 0 0 0 [ 292.291248][T11637] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.325253][T11637] lowmem_reserve[]: 0 0 0 0 0 [ 292.330150][T11637] Node 1 Normal free:3911068kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 292.440400][T11637] lowmem_reserve[]: 0 0 0 0 0 [ 292.451358][T11637] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.504806][T11637] Node 0 DMA32: 245*4kB (M) 275*8kB (ME) 225*16kB (UME) 334*32kB (UME) 356*64kB (UME) 52*128kB (UME) 45*256kB (UM) 25*512kB (UM) 15*1024kB (UM) 8*2048kB (UM) 308*4096kB (UME) = 1364540kB [ 292.582264][T11637] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 292.617054][T11637] Node 1 Normal: 146*4kB (UE) 45*8kB (UME) 42*16kB (UME) 204*32kB (UME) 90*64kB (UME) 29*128kB (UME) 17*256kB (UME) 8*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3911120kB [ 292.669091][T11637] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.716787][T11637] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.740614][T11637] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.764401][T11637] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.802271][ T5846] Bluetooth: hci4: command tx timeout [ 292.821633][T11637] 41337 total pagecache pages [ 292.826402][T11637] 0 pages in swap cache [ 292.830934][T11637] Free swap = 124996kB [ 292.835124][T11637] Total swap = 124996kB [ 292.841671][T11637] 2097051 pages RAM [ 292.845691][T11637] 0 pages HighMem/MovableOnly [ 292.851334][T11427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.871789][T11637] 424368 pages reserved [ 292.876015][T11637] 0 pages cma reserved [ 292.918550][T11427] veth0_vlan: entered promiscuous mode [ 292.946881][T11672] gtp0: entered promiscuous mode [ 292.972845][T11672] gtp0: entered allmulticast mode [ 292.999097][T11427] veth1_vlan: entered promiscuous mode [ 293.086128][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1629'. [ 293.088952][T11679] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1630'. [ 293.106400][T11427] veth0_macvtap: entered promiscuous mode [ 293.124056][T11427] veth1_macvtap: entered promiscuous mode [ 293.229888][T11427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.249190][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1631'. [ 293.278888][T11689] openvswitch: netlink: nsh attribute has 65531 unknown bytes. [ 293.289345][T11689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.361326][T11427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.406739][T11427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.426270][T11427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.446645][T11427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.461644][T11427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.466545][T11700] xt_limit: Overflow, try lower: 330673899/4200216962 [ 293.479884][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1635'. [ 293.846470][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.875764][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.950157][ T756] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.978807][ T756] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.046167][T11714] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 294.167394][T11714] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 294.350800][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'. [ 294.663434][T11739] Bluetooth: MGMT ver 1.23 [ 295.238084][ T756] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.668300][ T756] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.822443][ T756] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.912437][ T756] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.072734][ T756] bridge_slave_1: left allmulticast mode [ 296.078447][ T756] bridge_slave_1: left promiscuous mode [ 296.089331][ T756] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.099705][ T756] bridge_slave_0: left allmulticast mode [ 296.111365][ T756] bridge_slave_0: left promiscuous mode [ 296.117206][ T756] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.609682][ T756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.624449][ T756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.634986][ T756] bond0 (unregistering): Released all slaves [ 296.878718][T11797] FAULT_INJECTION: forcing a failure. [ 296.878718][T11797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.892432][T11797] CPU: 0 UID: 0 PID: 11797 Comm: syz.4.1651 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 296.892462][T11797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 296.892475][T11797] Call Trace: [ 296.892483][T11797] [ 296.892491][T11797] dump_stack_lvl+0x189/0x250 [ 296.892523][T11797] ? __lock_acquire+0xaac/0xd20 [ 296.892553][T11797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.892582][T11797] ? __pfx__printk+0x10/0x10 [ 296.892603][T11797] ? __might_fault+0xb0/0x130 [ 296.892641][T11797] should_fail_ex+0x414/0x560 [ 296.892678][T11797] _copy_from_user+0x2d/0xb0 [ 296.892715][T11797] ___sys_recvmsg+0x12e/0x510 [ 296.892748][T11797] ? __pfx____sys_recvmsg+0x10/0x10 [ 296.892807][T11797] ? __might_fault+0xb0/0x130 [ 296.892837][T11797] do_recvmmsg+0x307/0x760 [ 296.892872][T11797] ? __pfx_do_recvmmsg+0x10/0x10 [ 296.892910][T11797] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 296.892959][T11797] __x64_sys_recvmmsg+0x190/0x240 [ 296.892983][T11797] ? rcu_is_watching+0x15/0xb0 [ 296.893015][T11797] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 296.893045][T11797] ? do_syscall_64+0xba/0x210 [ 296.893079][T11797] do_syscall_64+0xf6/0x210 [ 296.893108][T11797] ? clear_bhb_loop+0x45/0xa0 [ 296.893133][T11797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.893152][T11797] RIP: 0033:0x7f465318e969 [ 296.893171][T11797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.893188][T11797] RSP: 002b:00007f4653ff3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 296.893209][T11797] RAX: ffffffffffffffda RBX: 00007f46533b5fa0 RCX: 00007f465318e969 [ 296.893224][T11797] RDX: 015cbc1ab4c0933f RSI: 0000200000001980 RDI: 0000000000000003 [ 296.893238][T11797] RBP: 00007f4653ff3090 R08: 0000000000000000 R09: 0000000000000000 [ 296.893250][T11797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.893262][T11797] R13: 0000000000000000 R14: 00007f46533b5fa0 R15: 00007ffd922a4928 [ 296.893293][T11797] [ 296.922487][T11801] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 297.142659][T11801] netlink: 'syz.0.1648': attribute type 3 has an invalid length. [ 297.177812][T11801] netlink: 'syz.0.1648': attribute type 1 has an invalid length. [ 297.190951][T11808] delete_channel: no stack [ 297.201026][T11808] delete_channel: no stack [ 297.209540][T11801] __nla_validate_parse: 8 callbacks suppressed [ 297.209561][T11801] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1648'. [ 297.254658][T11801] NCSI netlink: No device for ifindex 0 [ 297.312695][ T756] hsr_slave_0: left promiscuous mode [ 297.338722][ T756] hsr_slave_1: left promiscuous mode [ 297.377164][T11801] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1648'. [ 297.377245][ T756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.427064][ T756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.446216][ T756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.470574][ T756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.529936][ T756] veth1_macvtap: left promiscuous mode [ 297.560647][ T756] veth0_macvtap: left promiscuous mode [ 297.566388][ T756] veth1_vlan: left promiscuous mode [ 297.585480][ T756] veth0_vlan: left promiscuous mode [ 297.679107][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.692831][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.714358][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.726321][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.736010][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.848495][T11826] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1658'. [ 297.952074][T11832] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1660'. [ 298.039121][T11833] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1659'. [ 298.293935][ T756] team0 (unregistering): Port device team_slave_1 removed [ 298.336396][ T756] team0 (unregistering): Port device team_slave_0 removed [ 298.767767][T11828] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 298.900854][T11835] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1661'. [ 299.015377][T11841] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1663'. [ 299.279247][T11854] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1668'. [ 299.306053][T11854] vlan2: entered allmulticast mode [ 299.320433][T11854] macvtap0: entered allmulticast mode [ 299.397442][T11823] chnl_net:caif_netlink_parms(): no params data found [ 299.577370][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 299.608158][T11823] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.615911][T11823] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.623282][T11823] bridge_slave_0: entered allmulticast mode [ 299.644646][T11823] bridge_slave_0: entered promiscuous mode [ 299.662459][T11823] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.669658][T11823] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.681864][T11823] bridge_slave_1: entered allmulticast mode [ 299.690843][T11823] bridge_slave_1: entered promiscuous mode [ 299.843732][ T5846] Bluetooth: hci4: command tx timeout [ 299.868855][T11823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.959321][T11823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.034812][T11882] geneve0: left allmulticast mode [ 300.058193][T11882] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 300.101510][T11882] hsr0: left allmulticast mode [ 300.106474][T11882] hsr_slave_0: left allmulticast mode [ 300.126879][T11882] hsr_slave_1: left allmulticast mode [ 300.142947][T11882] hsr0: left promiscuous mode [ 300.167498][T11882] macvlan3: left promiscuous mode [ 300.180768][T11882] macvlan3: left allmulticast mode [ 300.270721][T11889] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 300.419314][T11823] team0: Port device team_slave_0 added [ 300.509317][T11823] team0: Port device team_slave_1 added [ 300.814941][T11890] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.855520][T11823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.874979][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.935382][T11823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.967649][T11910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1681'. [ 300.991175][T11823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.010232][T11823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.077187][T11823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.221083][T11823] hsr_slave_0: entered promiscuous mode [ 301.227537][T11823] hsr_slave_1: entered promiscuous mode [ 301.241262][T11823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.248885][T11823] Cannot create hsr debugfs directory [ 301.459849][T11923] syzkaller0: left allmulticast mode [ 301.695039][T11923] team0 (unregistering): Port device team_slave_0 removed [ 301.708198][T11923] team0 (unregistering): Port device team_slave_1 removed [ 301.922215][ T5846] Bluetooth: hci4: command tx timeout [ 301.947160][T11944] syz_tun: entered allmulticast mode [ 301.956114][T11942] syzkaller1: entered promiscuous mode [ 301.961870][T11942] syzkaller1: entered allmulticast mode [ 301.972123][T11943] syz_tun: left allmulticast mode [ 302.174419][T11823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 302.187511][T11823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 302.212707][T11823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.251985][T11823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 302.347815][T11955] gretap0: left allmulticast mode [ 302.365878][T11955] gretap0: left promiscuous mode [ 302.380169][T11955] bridge0: port 5(gretap0) entered disabled state [ 302.396959][T11959] __nla_validate_parse: 1 callbacks suppressed [ 302.396982][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1696'. [ 302.418233][T11955] bond0: (slave bridge0): Releasing backup interface [ 302.436085][T11955] bridge0: port 3(batadv0) entered disabled state [ 302.493472][T11955] bond0: (slave team0): Releasing backup interface [ 302.506428][T11955] bridge0: port 3(batadv0) entered disabled state [ 302.523149][T11963] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1697'. [ 302.542740][T11955] ¾x9ÿ: left allmulticast mode [ 302.555479][T11955] ¾x9ÿ: left promiscuous mode [ 302.583731][T11955] bridge0: port 1(1¾x9ÿ) entered disabled state [ 302.616074][T11955] bridge_slave_1: left allmulticast mode [ 302.622649][T11955] bridge_slave_1: left promiscuous mode [ 302.647997][T11955] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.668682][T11955] bond0: (slave bond_slave_0): Releasing backup interface [ 302.686464][T11955] bond0: (slave bond_slave_1): Releasing backup interface [ 302.699537][T11955] team0: Port device team_slave_0 removed [ 302.710040][T11955] team0: Port device team_slave_1 removed [ 302.724255][T11955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.737169][T11955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.753223][T11955] team0: Port device geneve0 removed [ 302.774225][T11955] bond0: (slave wlan1): Releasing backup interface [ 302.787518][T11955] batman_adv: batadv0: Removing interface: ip6gretap1 [ 302.795272][T11955] batman_adv: batadv0: Removing interface: macvlan2 [ 302.810017][T11955] veth3: left promiscuous mode [ 302.815246][T11955] bridge0: port 4(veth3) entered disabled state [ 302.836918][T11961] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1697'. [ 302.860696][T11962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1696'. [ 303.004832][T11980] sit0: entered promiscuous mode [ 303.012874][T11980] sit0: left allmulticast mode [ 303.020078][T11980] netlink: 'syz.0.1701': attribute type 1 has an invalid length. [ 303.029690][T11980] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1701'. [ 303.083742][T11823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.162080][T11823] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.183746][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.191036][ T8846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.223039][ T8846] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.230419][ T8846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.341515][T11989] tipc: Started in network mode [ 303.347684][T11989] tipc: Node identity ff, cluster identity 4711 [ 303.358366][T11989] tipc: Enabling of bearer rejected, failed to enable media [ 303.588618][T11998] netlink: 412 bytes leftover after parsing attributes in process `syz.3.1708'. [ 303.640964][T11998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'. [ 304.000683][ T5846] Bluetooth: hci4: command tx timeout [ 304.165511][T11823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.342033][T12027] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 304.452770][T11823] veth0_vlan: entered promiscuous mode [ 304.492071][T11823] veth1_vlan: entered promiscuous mode [ 304.587308][T11823] veth0_macvtap: entered promiscuous mode [ 304.608170][T11823] veth1_macvtap: entered promiscuous mode [ 304.639519][T11823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.664528][T11823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.701772][T11823] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.724627][T11823] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.752180][T11823] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.772832][T11823] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.075450][ T8835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.093800][ T8835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.179407][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.220481][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.811497][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1728'. [ 305.847883][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1728'. [ 305.886613][T12072] netlink: 'syz.1.1728': attribute type 5 has an invalid length. [ 305.908711][T12072] netlink: 'syz.1.1728': attribute type 6 has an invalid length. [ 306.105166][ T756] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.153874][T12080] C: renamed from team_slave_0 [ 306.175421][T12080] netlink: 'syz.4.1731': attribute type 1 has an invalid length. [ 306.186907][T12080] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1731'. [ 306.198678][T12080] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 306.456668][ T756] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.816842][ T756] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.958000][ T756] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.084568][ T756] bridge_slave_1: left allmulticast mode [ 307.090245][ T756] bridge_slave_1: left promiscuous mode [ 307.096575][ T756] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.105847][ T756] bridge_slave_0: left allmulticast mode [ 307.111749][ T756] bridge_slave_0: left promiscuous mode [ 307.117498][ T756] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.450235][ T756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.462041][ T756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.473912][ T756] bond0 (unregistering): Released all slaves [ 307.709085][T12094] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1736'. [ 307.732950][T12094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1736'. [ 307.782375][T12094] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1736'. [ 307.792785][T12096] netlink: 'syz.1.1734': attribute type 39 has an invalid length. [ 307.816387][T12094] erspan0: entered allmulticast mode [ 307.988431][T12106] ksmbd: Unknown IPC event: 3, ignore. [ 307.994232][ T756] hsr_slave_0: left promiscuous mode [ 308.020559][ T756] hsr_slave_1: left promiscuous mode [ 308.036930][ T756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.064907][ T756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.089533][ T756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.096121][T12109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 308.139607][ T756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.208119][ T756] veth1_macvtap: left promiscuous mode [ 308.220547][ T756] veth0_macvtap: left promiscuous mode [ 308.228655][ T756] veth1_vlan: left promiscuous mode [ 308.239807][ T756] veth0_vlan: left promiscuous mode [ 308.294890][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.309339][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.318006][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.327238][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.335966][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.879515][ T756] team0 (unregistering): Port device team_slave_1 removed [ 308.925104][ T756] team0 (unregistering): Port device team_slave_0 removed [ 310.063014][T12115] chnl_net:caif_netlink_parms(): no params data found [ 310.116066][T12152] x_tables: duplicate underflow at hook 1 [ 310.131325][T12152] x_tables: duplicate underflow at hook 2 [ 310.272849][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1753'. [ 310.400583][ T5846] Bluetooth: hci4: command tx timeout [ 310.432001][T12170] netlink: 'syz.4.1753': attribute type 10 has an invalid length. [ 310.497189][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1753'. [ 310.653545][T12178] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1757'. [ 310.700876][T12173] team0 (unregistering): Port device C removed [ 310.714320][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 310.723739][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 310.725694][T12173] team0 (unregistering): Port device team_slave_1 removed [ 310.732968][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1757'. [ 310.751436][T12173] team0 (unregistering): Port device geneve0 removed [ 310.810572][T12115] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.830379][T12115] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.858206][T12115] bridge_slave_0: entered allmulticast mode [ 310.878888][T12115] bridge_slave_0: entered promiscuous mode [ 310.910258][T12178] 0ªX¹¦À: renamed from caif0 [ 310.929829][T12178] 0ªX¹¦À: entered allmulticast mode [ 310.950382][T12178] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 310.974911][T12115] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.983207][T12115] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.990621][T12115] bridge_slave_1: entered allmulticast mode [ 311.001899][T12115] bridge_slave_1: entered promiscuous mode [ 311.091827][T12115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.107549][T12115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.175390][T12115] team0: Port device team_slave_0 added [ 311.186707][T12115] team0: Port device team_slave_1 added [ 311.227641][T12115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.234907][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.261881][T12115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.275253][T12115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.282322][T12115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.308548][T12115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.387857][T12115] hsr_slave_0: entered promiscuous mode [ 311.397941][T12115] hsr_slave_1: entered promiscuous mode [ 311.411418][T12115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.419515][T12115] Cannot create hsr debugfs directory [ 311.856460][ T5846] block nbd0: Receive control failed (result -32) [ 312.178945][T12231] Bluetooth: MGMT ver 1.23 [ 312.481081][ T5846] Bluetooth: hci4: command tx timeout [ 312.736937][T12248] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1776'. [ 312.762675][T12245] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1775'. [ 312.952922][T12115] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.125885][T12115] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.170517][T12115] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.198823][T12115] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.361936][T12265] netlink: 'syz.3.1779': attribute type 39 has an invalid length. [ 313.485138][T12115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.563059][T12115] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.594493][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.601746][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.658234][T12272] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1782'. [ 313.659923][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.674568][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.437652][T12115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.560460][ T5846] Bluetooth: hci4: command tx timeout [ 314.750656][T12115] veth0_vlan: entered promiscuous mode [ 314.788940][T12304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1792'. [ 314.846497][T12115] veth1_vlan: entered promiscuous mode [ 314.915891][T12304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1792'. [ 314.982568][T12115] veth0_macvtap: entered promiscuous mode [ 314.999056][T12115] veth1_macvtap: entered promiscuous mode [ 315.261946][T12314] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1796'. [ 315.328965][T12115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.349382][T12115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.470735][T12115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.497985][T12115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.520464][T12115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.528998][T12323] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1799'. [ 315.529221][T12115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.559627][T12325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1800'. [ 315.801473][T12331] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1803'. [ 315.824548][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.840688][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.975857][T12340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1804'. [ 315.997469][ T8846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.011629][ T8846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.085528][T12343] netlink: 'syz.3.1805': attribute type 10 has an invalid length. [ 316.098532][T12343] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 316.109039][T12343] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 316.130390][T12343] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 316.325485][T12349] gretap0: left allmulticast mode [ 316.333019][T12349] gretap0: left promiscuous mode [ 316.338363][T12349] bridge0: port 4(gretap0) entered disabled state [ 316.348251][T12349] bridge_slave_0: left allmulticast mode [ 316.354194][T12349] bridge_slave_0: left promiscuous mode [ 316.360097][T12349] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.370706][T12349] bridge_slave_1: left allmulticast mode [ 316.377831][T12349] bridge_slave_1: left promiscuous mode [ 316.387191][T12349] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.401404][T12349] bond0: (slave bond_slave_0): Releasing backup interface [ 316.411302][T12349] bond_slave_0: left promiscuous mode [ 316.438228][T12349] bond0: (slave bond_slave_1): Releasing backup interface [ 316.446486][T12349] bond_slave_1: left promiscuous mode [ 316.467951][T12349] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.487647][T12349] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.512927][T12349] bond4: left allmulticast mode [ 316.530711][T12349] bond4: left promiscuous mode [ 316.535708][T12349] bridge0: port 3(bond4) entered disabled state [ 316.683637][T12353] vlan0: entered allmulticast mode [ 316.703204][T12353] bond0: entered allmulticast mode [ 316.775667][ T6042] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.892804][ T6042] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.227145][ T6042] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.358887][ T6042] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.471030][ T6042] bridge_slave_1: left allmulticast mode [ 317.476705][ T6042] bridge_slave_1: left promiscuous mode [ 317.482944][ T6042] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.492380][ T6042] bridge_slave_0: left allmulticast mode [ 317.498126][ T6042] bridge_slave_0: left promiscuous mode [ 317.504253][ T6042] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.829525][ T6042] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.841016][ T6042] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.851398][ T6042] bond0 (unregistering): Released all slaves [ 318.085801][ T6042] hsr_slave_0: left promiscuous mode [ 318.120858][ T6042] hsr_slave_1: left promiscuous mode [ 318.127012][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.136297][T12364] __nla_validate_parse: 1 callbacks suppressed [ 318.136318][T12364] netlink: 476 bytes leftover after parsing attributes in process `syz.0.1810'. [ 318.170544][ T6042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.193135][ T6042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.210470][ T6042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.232682][T12370] Unsupported ieee802154 address type: 0 [ 318.276909][ T6042] veth1_macvtap: left promiscuous mode [ 318.286172][ T6042] veth0_macvtap: left promiscuous mode [ 318.299444][ T6042] veth1_vlan: left promiscuous mode [ 318.310767][ T6042] veth0_vlan: left promiscuous mode [ 318.563328][T12378] netlink: 'syz.4.1815': attribute type 10 has an invalid length. [ 318.586830][T12377] netlink: 'syz.4.1815': attribute type 10 has an invalid length. [ 318.635742][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.648137][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.659441][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.685573][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.695812][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.990161][ T6042] team0 (unregistering): Port device team_slave_1 removed [ 319.084141][ T6042] team0 (unregistering): Port device team_slave_0 removed [ 319.737918][T12364] bond_slave_0: entered promiscuous mode [ 319.743927][T12364] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1810'. [ 319.753217][T12364] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 319.832224][T12393] bridge0: port 1(erspan0) entered blocking state [ 319.854363][T12393] bridge0: port 1(erspan0) entered disabled state [ 319.864155][T12393] erspan0: entered allmulticast mode [ 319.873599][T12393] erspan0: left allmulticast mode [ 320.121595][T12411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'. [ 320.151685][T12411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1822'. [ 320.389485][T12417] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.725215][ T5846] Bluetooth: hci4: command tx timeout [ 320.777776][T12432] netlink: 'syz.0.1825': attribute type 10 has an invalid length. [ 320.861971][T12430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.903592][T12430] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.146535][T12379] chnl_net:caif_netlink_parms(): no params data found [ 321.616780][T12379] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.630526][T12379] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.637820][T12379] bridge_slave_0: entered allmulticast mode [ 321.652256][T12379] bridge_slave_0: entered promiscuous mode [ 321.672316][T12379] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.679792][T12379] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.690600][T12379] bridge_slave_1: entered allmulticast mode [ 321.717117][T12379] bridge_slave_1: entered promiscuous mode [ 321.861159][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1833'. [ 321.880716][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1833'. [ 321.972222][T12475] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1836'. [ 321.986275][T12379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.036820][T12379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.273094][T12379] team0: Port device team_slave_0 added [ 322.275947][T12486] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 322.299607][T12379] team0: Port device team_slave_1 added [ 322.327907][T12486] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 322.389220][T12484] tipc: Started in network mode [ 322.394491][T12484] tipc: Node identity 4, cluster identity 4711 [ 322.408243][T12484] tipc: Node number set to 4 [ 322.483504][T12379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.492105][T12379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.519078][T12379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.552451][T12379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.583126][T12379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.627850][T12379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.801306][ T5846] Bluetooth: hci4: command tx timeout [ 322.977349][T12379] hsr_slave_0: entered promiscuous mode [ 322.986373][T12379] hsr_slave_1: entered promiscuous mode [ 323.002080][T12379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.009913][T12379] Cannot create hsr debugfs directory [ 323.511902][T12505] SET target dimension over the limit! [ 323.529617][T12505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 324.041575][T12520] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.138703][T12379] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 324.176679][T12379] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 324.206959][T12379] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 324.225145][T12379] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 324.447969][T12379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.510199][T12379] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.544212][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.551493][ T6028] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.603676][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.610997][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.880720][ T5846] Bluetooth: hci4: command tx timeout [ 324.923219][T12528] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.961438][T12529] netlink: 'syz.1.1851': attribute type 2 has an invalid length. [ 325.014503][T12528] 0ªX¹¦À: left allmulticast mode [ 325.030622][T12528] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 325.055300][T12533] netlink: 'syz.0.1853': attribute type 1 has an invalid length. [ 325.063588][T12533] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1853'. [ 325.079596][T12531] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1852'. [ 325.327311][T12379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.485720][T12379] veth0_vlan: entered promiscuous mode [ 325.518857][T12379] veth1_vlan: entered promiscuous mode [ 325.599168][T12379] veth0_macvtap: entered promiscuous mode [ 325.629055][T12379] veth1_macvtap: entered promiscuous mode [ 325.639539][T12559] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1861'. [ 325.704869][T12379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.712407][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1860'. [ 325.736339][T12379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.790006][T12379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.807085][T12379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.819852][T12379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.833450][T12379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.846235][T12564] syzkaller1: entered allmulticast mode [ 326.077509][T12575] bond21 (unregistering): Released all slaves [ 326.127688][ T6028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.139345][ T6028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.286804][ T8845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.303141][ T8845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.823078][T12601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1873'. [ 326.881212][T12603] netlink: 'syz.4.1874': attribute type 1 has an invalid length. [ 326.969305][T12603] 8021q: adding VLAN 0 to HW filter on device bond21 [ 326.999340][T12603] bond21: (slave gretap1): making interface the new active one [ 327.023287][T12603] bond21: (slave gretap1): Enslaving as an active interface with an up link [ 327.074650][T12603] syz.4.1874 (12603) used greatest stack depth: 19032 bytes left [ 327.407311][T12636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1882'. [ 327.420756][ T6028] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.456834][T12636] bridge: RTM_NEWNEIGH with invalid ether address [ 327.761405][ T6028] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.048316][ T6028] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.138795][ T6028] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.233963][ T6028] bridge_slave_1: left allmulticast mode [ 328.239643][ T6028] bridge_slave_1: left promiscuous mode [ 328.245981][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.255691][ T6028] bridge_slave_0: left allmulticast mode [ 328.261820][ T6028] bridge_slave_0: left promiscuous mode [ 328.267546][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.609908][ T6028] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.624048][ T6028] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.634818][ T6028] bond0 (unregistering): Released all slaves [ 328.897101][ T6028] hsr_slave_0: left promiscuous mode [ 328.903207][ T6028] hsr_slave_1: left promiscuous mode [ 328.909079][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.916951][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.924865][ T6028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.935051][ T6028] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.956998][ T6028] veth1_macvtap: left promiscuous mode [ 328.962690][ T6028] veth0_macvtap: left promiscuous mode [ 328.968377][ T6028] veth1_vlan: left promiscuous mode [ 328.974011][ T6028] veth0_vlan: left promiscuous mode [ 329.199588][T12649] xt_hashlimit: size too large, truncated to 1048576 [ 329.627400][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.639988][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.651062][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.662901][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.671784][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.030025][ T6028] team0 (unregistering): Port device team_slave_1 removed [ 330.073189][ T6028] team0 (unregistering): Port device team_slave_0 removed [ 330.608824][T12655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1888'. [ 330.695078][T12659] netlink: 'syz.1.1889': attribute type 4 has an invalid length. [ 330.898953][T12671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1893'. [ 331.174855][T12651] chnl_net:caif_netlink_parms(): no params data found [ 331.760390][ T5840] Bluetooth: hci4: command tx timeout [ 331.835419][T12651] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.859717][T12651] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.867191][T12651] bridge_slave_0: entered allmulticast mode [ 331.875758][T12651] bridge_slave_0: entered promiscuous mode [ 331.888322][T12651] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.914240][T12651] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.925515][T12651] bridge_slave_1: entered allmulticast mode [ 331.942560][T12651] bridge_slave_1: entered promiscuous mode [ 331.970857][T12712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1903'. [ 331.999024][T12711] netlink: 'syz.0.1904': attribute type 1 has an invalid length. [ 332.047192][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1905'. [ 332.079846][T12651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.107564][T12651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.162191][T12718] bond1: (slave ip6gretap3): Enslaving as a backup interface with an up link [ 332.211429][ T13] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 332.234047][T12711] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.279110][T12711] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1904'. [ 332.331741][ T8846] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 332.391647][T12718] veth3: entered promiscuous mode [ 332.416706][T12718] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 332.492601][T12651] team0: Port device team_slave_0 added [ 332.513609][T12651] team0: Port device team_slave_1 added [ 332.611325][T12651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.629329][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.698550][T12651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.742941][T12651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.749944][T12651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.838434][T12651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.918237][T12746] netlink: 'syz.1.1911': attribute type 10 has an invalid length. [ 333.023543][T12752] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.1911'. [ 333.197558][T12651] hsr_slave_0: entered promiscuous mode [ 333.241494][T12651] hsr_slave_1: entered promiscuous mode [ 333.277635][T12651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.310572][T12651] Cannot create hsr debugfs directory [ 333.842744][ T5840] Bluetooth: hci4: command tx timeout [ 334.378421][T12651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 334.401323][T12651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 334.426270][T12651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 334.445542][T12808] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1929'. [ 334.445765][T12651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 334.455268][T12808] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 334.739724][T12817] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1931'. [ 334.750701][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1931'. [ 334.793064][T12651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.867982][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1931'. [ 334.870931][T12651] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.914344][ T6042] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.921631][ T6042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.027910][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.035163][ T6028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.499819][T12844] ªªªªªª: renamed from veth0_to_hsr [ 335.629676][T12651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.686972][T12651] veth0_vlan: entered promiscuous mode [ 335.744495][T12651] veth1_vlan: entered promiscuous mode [ 335.852485][T12866] netlink: 'syz.1.1944': attribute type 1 has an invalid length. [ 335.920694][ T5840] Bluetooth: hci4: command tx timeout [ 336.007266][T12874] xt_hashlimit: overflow, rate too high: 1125899906842624 [ 336.091550][T12866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 336.101634][T12870] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 336.201575][T12651] veth0_macvtap: entered promiscuous mode [ 336.255591][T12651] veth1_macvtap: entered promiscuous mode [ 336.307088][T12651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.379997][T12651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.423884][T12651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.453807][T12651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.480932][T12651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.502493][T12651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.590816][T12887] mac80211_hwsim hwsim3 : renamed from wlan1 [ 336.795208][T12894] __nla_validate_parse: 3 callbacks suppressed [ 336.795231][T12894] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1949'. [ 336.884603][T12887] SET target dimension over the limit! [ 336.886101][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 336.943818][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.078859][ T6028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.107603][ T6028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.187905][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1955'. [ 337.379150][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1957'. [ 337.433682][T12915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.534382][T12915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.550897][T12924] netlink: 'syz.4.1957': attribute type 10 has an invalid length. [ 337.561522][T12924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1957'. [ 337.657251][T12915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.817240][T12934] vlan0: entered promiscuous mode [ 337.833437][T12934] ip6gretap0: entered promiscuous mode [ 337.985972][T12937] syzkaller1: entered promiscuous mode [ 337.993562][T12937] syzkaller1: entered allmulticast mode [ 338.155303][T12956] netlink: 'syz.3.1966': attribute type 1 has an invalid length. [ 338.155355][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 338.173812][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1966'. [ 338.190819][T12958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1967'. [ 338.269785][T12962] netlink: 'syz.3.1966': attribute type 10 has an invalid length. [ 338.529835][ T8835] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.703119][ T8835] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.777015][ T8835] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.846592][ T8835] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.963961][ T8835] bridge_slave_1: left allmulticast mode [ 338.969642][ T8835] bridge_slave_1: left promiscuous mode [ 338.975621][ T8835] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.985628][ T8835] bridge_slave_0: left allmulticast mode [ 338.991638][ T8835] bridge_slave_0: left promiscuous mode [ 338.997347][ T8835] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.326759][ T8835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.338104][ T8835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.348380][ T8835] bond0 (unregistering): Released all slaves [ 339.568894][ T8835] hsr_slave_0: left promiscuous mode [ 339.575247][ T8835] hsr_slave_1: left promiscuous mode [ 339.581602][ T8835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.589033][ T8835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.597063][ T8835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.606947][ T8835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.630769][ T8835] veth1_macvtap: left promiscuous mode [ 339.636306][ T8835] veth0_macvtap: left promiscuous mode [ 339.642050][ T8835] veth1_vlan: left promiscuous mode [ 339.647371][ T8835] veth0_vlan: left promiscuous mode [ 340.179003][T12973] xt_l2tp: invalid flags combination: c [ 340.191713][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1968'. [ 340.232959][T12974] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1968'. [ 340.497435][ T8835] team0 (unregistering): Port device team_slave_1 removed [ 340.566150][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 340.587302][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 340.595236][ T8835] team0 (unregistering): Port device team_slave_0 removed [ 340.595284][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 340.615179][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 340.634325][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 341.114708][T12994] netlink: 'syz.3.1974': attribute type 8 has an invalid length. [ 341.360717][T12997] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1975'. [ 341.935689][T13016] bridge0: port 1(vlan0) entered blocking state [ 341.942393][T13016] bridge0: port 1(vlan0) entered disabled state [ 341.948950][T13016] vlan0: entered allmulticast mode [ 342.205625][T13024] __nla_validate_parse: 2 callbacks suppressed [ 342.205647][T13024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1983'. [ 342.438236][T12985] chnl_net:caif_netlink_parms(): no params data found [ 342.631966][T13050] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 342.670568][ T8846] bond1: (slave ip6gretap3): link status up again after 0 ms [ 342.690527][ T6028] bond1: (slave ip6gretap3): link status up again after 0 ms [ 342.712288][ T8846] bond1: (slave ip6gretap3): link status up again after 0 ms [ 342.720473][ T5846] Bluetooth: hci4: command tx timeout [ 342.740701][ T8845] bond1: (slave ip6gretap3): link status up again after 0 ms [ 342.771345][ T8846] bond1: (slave ip6gretap3): link status up again after 0 ms [ 342.822113][ T8846] bond1: (slave ip6gretap3): link status up again after 0 ms [ 342.880861][ T6028] bond1: (slave ip6gretap3): link status up again after 0 ms [ 342.913085][ T8846] bond1: (slave ip6gretap3): link status up again after 0 ms [ 342.953723][ T8845] bond1: (slave ip6gretap3): link status up again after 0 ms [ 343.002421][ T6028] bond1: (slave ip6gretap3): link status up again after 0 ms [ 343.022805][T13076] x_tables: duplicate underflow at hook 2 [ 343.035498][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.050089][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.064333][T12985] bridge_slave_0: entered allmulticast mode [ 343.072488][T12985] bridge_slave_0: entered promiscuous mode [ 343.121416][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.163247][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.181575][T12985] bridge_slave_1: entered allmulticast mode [ 343.188597][T13081] x_tables: duplicate underflow at hook 2 [ 343.200079][T12985] bridge_slave_1: entered promiscuous mode [ 343.216815][T13085] netlink: 'syz.1.1998': attribute type 21 has an invalid length. [ 343.242028][T13085] IPv6: NLM_F_CREATE should be specified when creating new route [ 343.269156][T13085] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.276493][T13085] IPv6: NLM_F_CREATE should be set when creating new route [ 343.283873][T13085] IPv6: NLM_F_CREATE should be set when creating new route [ 343.291256][T13085] IPv6: NLM_F_CREATE should be set when creating new route [ 343.337846][T12985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.357800][T13088] netlink: 'syz.1.1998': attribute type 15 has an invalid length. [ 343.375483][T12985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.446414][T13094] bridge_slave_0: default FDB implementation only supports local addresses [ 343.540220][T12985] team0: Port device team_slave_0 added [ 343.575551][T12985] team0: Port device team_slave_1 added [ 343.633333][T13106] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2006'. [ 343.704247][T12985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.720416][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.759388][T12985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.777751][T12985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.785337][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.812547][T12985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.824266][T13108] bridge0: port 1(hsr0) entered blocking state [ 343.835651][T13108] bridge0: port 1(hsr0) entered disabled state [ 343.842252][T13108] hsr0: entered allmulticast mode [ 343.847645][T13108] hsr_slave_0: entered allmulticast mode [ 343.857026][T13108] hsr_slave_1: entered allmulticast mode [ 343.868794][T13108] hsr0: entered promiscuous mode [ 343.884845][T13108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2007'. [ 343.958000][T13108] IPVS: Unknown mcast interface: wg0 [ 343.986991][T12985] hsr_slave_0: entered promiscuous mode [ 344.018468][T12985] hsr_slave_1: entered promiscuous mode [ 344.036004][T12985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.050410][T12985] Cannot create hsr debugfs directory [ 344.141733][T13126] netlink: 'syz.0.2011': attribute type 5 has an invalid length. [ 344.149531][T13126] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.2011'. [ 344.295004][T13132] Bluetooth: MGMT ver 1.23 [ 344.507428][T13138] batadv_slave_0: entered promiscuous mode [ 344.534455][T13138] batadv_slave_0: left promiscuous mode [ 344.800625][ T5846] Bluetooth: hci4: command tx timeout [ 344.978294][T13164] ip6gretap0: entered allmulticast mode [ 345.033910][T13168] bridge0: port 2(ipvlan2) entered blocking state [ 345.050507][T13168] bridge0: port 2(ipvlan2) entered disabled state [ 345.057292][T13168] ipvlan2: entered allmulticast mode [ 345.070351][T13168] bridge0: entered allmulticast mode [ 345.100900][T13168] ipvlan2: left allmulticast mode [ 345.105994][T13168] bridge0: left allmulticast mode [ 345.297497][T13180] netlink: 'syz.0.2030': attribute type 16 has an invalid length. [ 345.319437][T13180] netlink: 'syz.0.2030': attribute type 3 has an invalid length. [ 345.347524][T13180] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.2030'. [ 345.570164][T12985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 345.604120][T12985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 345.625794][T12985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 345.658419][T12985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 345.943778][T12985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 346.001442][T12985] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.036173][ T8835] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.043448][ T8835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.089627][T13216] nbd: must specify at least one socket [ 346.111592][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.118814][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.422940][T13231] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2046'. [ 346.706467][T13235] netlink: 'syz.3.2047': attribute type 2 has an invalid length. [ 346.728720][T12985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.735845][T13235] netlink: 'syz.3.2047': attribute type 1 has an invalid length. [ 346.760444][T13235] netlink: 'syz.3.2047': attribute type 1 has an invalid length. [ 346.880652][ T5846] Bluetooth: hci4: command tx timeout [ 346.944269][T12985] veth0_vlan: entered promiscuous mode [ 346.958732][T12985] veth1_vlan: entered promiscuous mode [ 347.015737][T12985] veth0_macvtap: entered promiscuous mode [ 347.037987][T12985] veth1_macvtap: entered promiscuous mode [ 347.098128][T12985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.164442][T12985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.185092][T12985] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.208404][T12985] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.230166][T12985] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.253116][T12985] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.425894][ T5846] block nbd1: Receive control failed (result -32) [ 347.732326][ T6042] net_ratelimit: 51 callbacks suppressed [ 347.732361][ T6042] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 347.758194][ T8845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.787395][ T8845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.882872][T13299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2063'. [ 347.901197][ T13] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 347.902663][ T8846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.934184][ T8846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.938040][T13299] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2063'. [ 348.028759][ T8846] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 348.241693][ T756] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 348.268221][T13311] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2067'. [ 348.268265][T13312] veth1_to_bond: entered promiscuous mode [ 348.290657][T13312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2067'. [ 348.304179][T13314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2066'. [ 348.392682][ T8846] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 348.436403][T13321] netlink: 'syz.0.2068': attribute type 10 has an invalid length. [ 348.446410][T13320] tipc: Enabled bearer , priority 27 [ 348.466918][T13321] batadv0: left allmulticast mode [ 348.499823][T13323] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 348.511980][T13323] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 348.534340][ T6028] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 348.558550][T13326] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2070'. [ 348.597315][T13331] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 348.610486][T13331] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 348.646560][T13333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2072'. [ 348.663493][T13333] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2072'. [ 348.673536][T13333] tipc: Invalid UDP bearer configuration [ 348.673595][T13333] tipc: Enabling of bearer rejected, failed to enable media [ 348.691235][ T6028] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 348.720042][T13333] netlink: 'syz.0.2072': attribute type 3 has an invalid length. [ 348.811265][ T756] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 348.868680][T13343] siw: device registration error -23 [ 348.912991][T13343] lo: entered allmulticast mode [ 348.918226][T13343] tunl0: entered allmulticast mode [ 348.923758][T13343] gre0: entered allmulticast mode [ 348.929195][T13343] gretap0: entered allmulticast mode [ 348.938495][T13343] erspan0: entered allmulticast mode [ 348.944776][T13343] ip_vti0: entered allmulticast mode [ 348.950812][T13343] ip6_vti0: entered allmulticast mode [ 348.956530][T13343] sit0: entered allmulticast mode [ 348.962582][T13343] ip6tnl0: entered allmulticast mode [ 348.968210][T13343] ip6gre0: entered allmulticast mode [ 348.973919][T13343] ip6gretap0: entered allmulticast mode [ 348.980149][T13343] bridge0: entered allmulticast mode [ 348.986187][T13343] dummy0: entered allmulticast mode [ 349.006652][T13343] nlmon0: entered allmulticast mode [ 349.012280][T13343] batadv0: entered allmulticast mode [ 349.017918][T13343] vxcan0: entered allmulticast mode [ 349.024945][T13343] vxcan1: entered allmulticast mode [ 349.033290][T13343] veth0: entered allmulticast mode [ 349.038645][T13343] veth1: entered allmulticast mode [ 349.045436][T13343] wg1: entered allmulticast mode [ 349.050945][T13343] wg2: entered allmulticast mode [ 349.056218][T13343] veth0_to_bridge: entered allmulticast mode [ 349.062893][T13343] bridge_slave_0: entered allmulticast mode [ 349.080661][T13343] veth1_to_bridge: entered allmulticast mode [ 349.086898][T13343] bridge_slave_1: entered allmulticast mode [ 349.121552][T13343] veth0_to_bond: entered allmulticast mode [ 349.131598][T13343] bond_slave_0: entered allmulticast mode [ 349.137570][T13343] veth1_to_bond: left promiscuous mode [ 349.160521][T13343] veth1_to_bond: entered allmulticast mode [ 349.166593][T13343] bond_slave_1: entered allmulticast mode [ 349.180708][T13343] veth0_to_team: entered allmulticast mode [ 349.186783][T13343] team_slave_0: entered allmulticast mode [ 349.192851][T13343] veth1_to_team: entered allmulticast mode [ 349.198888][T13343] team_slave_1: entered allmulticast mode [ 349.206035][T13343] veth0_to_batadv: entered allmulticast mode [ 349.212332][T13343] batadv_slave_0: entered allmulticast mode [ 349.218586][T13343] veth1_to_batadv: entered allmulticast mode [ 349.225105][T13343] batadv_slave_1: entered allmulticast mode [ 349.231368][T13343] xfrm0: entered allmulticast mode [ 349.236707][T13343] veth0_to_hsr: entered allmulticast mode [ 349.247902][T13343] hsr_slave_0: entered allmulticast mode [ 349.254345][T13343] veth1_to_hsr: entered allmulticast mode [ 349.261815][T13343] hsr_slave_1: entered allmulticast mode [ 349.267683][T13343] hsr0: entered allmulticast mode [ 349.273026][T13343] veth1_virt_wifi: entered allmulticast mode [ 349.279222][T13343] veth0_virt_wifi: entered allmulticast mode [ 349.285840][T13343] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 349.293456][T13343] veth1_macvtap: entered allmulticast mode [ 349.299524][T13343] veth0_macvtap: entered allmulticast mode [ 349.306107][T13343] macvtap0: entered allmulticast mode [ 349.311888][T13343] macsec0: entered allmulticast mode [ 349.317380][T13343] geneve0: entered allmulticast mode [ 349.323020][T13343] geneve1: entered allmulticast mode [ 349.328522][T13343] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 349.336308][T13343] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 349.345702][T13343] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 349.353952][T13343] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 349.362125][T13343] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 349.369824][T13343] mac80211_hwsim hwsim3 : entered allmulticast mode [ 349.406876][T13343] bond1: entered allmulticast mode [ 349.412300][T13343] syztnl1: entered allmulticast mode [ 349.417802][T13343] syztnl2: entered allmulticast mode [ 349.428876][T13343] erspan1: entered allmulticast mode [ 349.434422][T13343] geneve2: entered allmulticast mode [ 349.439928][T13343] bridge_slave_1.: entered allmulticast mode [ 349.455289][T13343] ip6tnl1: entered allmulticast mode [ 349.466291][T13343] geneve3: entered allmulticast mode [ 349.470833][ T6103] tipc: Node number set to 4278190080 [ 349.474306][T13343] mac80211_hwsim hwsim13 wlan2: entered allmulticast mode [ 349.485629][T13343] bond2: entered allmulticast mode [ 349.491188][T13343] ip6gretap1: entered allmulticast mode [ 349.496980][T13343] bridge1: entered allmulticast mode [ 349.502845][T13343] syztnl0: entered allmulticast mode [ 349.508474][T13343] bond3: entered allmulticast mode [ 349.514001][T13343] batadv1: entered allmulticast mode [ 349.519568][T13343] bond4: entered allmulticast mode [ 349.529865][T13343] ip6gretap2: entered allmulticast mode [ 349.535703][T13343] veth2: entered allmulticast mode [ 349.541330][T13343] veth3: entered allmulticast mode [ 349.547052][T13343] sit1: entered allmulticast mode [ 349.554056][T13343] ip6tnl2: entered allmulticast mode [ 349.631023][ T6042] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 349.695899][ T8845] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.740781][ T13] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 349.990170][ T8845] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.068178][ T8845] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.126663][ T8845] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.237855][ T8845] bridge_slave_1: left allmulticast mode [ 350.243988][ T8845] bridge_slave_1: left promiscuous mode [ 350.249713][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.259103][ T8845] bridge_slave_0: left allmulticast mode [ 350.265034][ T8845] bridge_slave_0: left promiscuous mode [ 350.271633][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.637667][ T8845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.649306][ T8845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.661442][ T8845] bond0 (unregistering): Released all slaves [ 350.928651][ T8845] hsr_slave_0: left promiscuous mode [ 350.935199][ T8845] hsr_slave_1: left promiscuous mode [ 350.941191][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.948618][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.962089][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.969591][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.992782][ T8845] veth1_macvtap: left promiscuous mode [ 350.998389][ T8845] veth0_macvtap: left promiscuous mode [ 351.004259][ T8845] veth1_vlan: left promiscuous mode [ 351.009687][ T8845] veth0_vlan: left promiscuous mode [ 351.095941][T13358] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.658154][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 351.669844][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 351.684048][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 351.702595][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 351.710543][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 351.964375][ T8845] team0 (unregistering): Port device team_slave_1 removed [ 352.023520][ T8845] team0 (unregistering): Port device team_slave_0 removed [ 352.527174][T13369] sit0: entered promiscuous mode [ 352.532688][T13369] sit0: left allmulticast mode [ 352.542249][T13369] netlink: 'syz.3.2082': attribute type 1 has an invalid length. [ 352.550035][T13369] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2082'. [ 352.651383][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2083'. [ 352.950418][ T756] net_ratelimit: 8 callbacks suppressed [ 352.950439][ T756] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 353.140897][ T756] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 353.273592][ T13] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 353.316077][T13427] x_tables: duplicate underflow at hook 2 [ 353.361519][T13380] chnl_net:caif_netlink_parms(): no params data found [ 353.760877][ T5840] Bluetooth: hci4: command tx timeout [ 353.784234][ T13] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 353.794014][T13451] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2100'. [ 353.913156][T13380] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.935986][T13380] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.958942][T13380] bridge_slave_0: entered allmulticast mode [ 353.972409][T13380] bridge_slave_0: entered promiscuous mode [ 353.994906][ T6042] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 354.007881][T13456] ªªªªªª: renamed from lo (while UP) [ 354.036810][T13380] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.044507][T13380] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.051993][T13380] bridge_slave_1: entered allmulticast mode [ 354.060100][T13380] bridge_slave_1: entered promiscuous mode [ 354.135269][T13414] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2090'. [ 354.150667][T13380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.186186][T13380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.229982][T13465] FAULT_INJECTION: forcing a failure. [ 354.229982][T13465] name failslab, interval 1, probability 0, space 0, times 0 [ 354.277081][T13465] CPU: 0 UID: 0 PID: 13465 Comm: syz.3.2104 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 354.277113][T13465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 354.277130][T13465] Call Trace: [ 354.277142][T13465] [ 354.277153][T13465] dump_stack_lvl+0x189/0x250 [ 354.277192][T13465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.277224][T13465] ? __pfx__printk+0x10/0x10 [ 354.277251][T13465] ? __pfx___might_resched+0x10/0x10 [ 354.277276][T13465] should_fail_ex+0x414/0x560 [ 354.277315][T13465] should_failslab+0xa8/0x100 [ 354.277344][T13465] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 354.277372][T13465] ? __alloc_skb+0x112/0x2d0 [ 354.277400][T13465] __alloc_skb+0x112/0x2d0 [ 354.277427][T13465] netlink_sendmsg+0x5c6/0xb30 [ 354.277461][T13465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.277487][T13465] ? aa_sock_msg_perm+0x94/0x160 [ 354.277511][T13465] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 354.277535][T13465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.277558][T13465] __sock_sendmsg+0x219/0x270 [ 354.277593][T13465] ____sys_sendmsg+0x505/0x830 [ 354.277624][T13465] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.277661][T13465] ? import_iovec+0x74/0xa0 [ 354.277692][T13465] ___sys_sendmsg+0x21f/0x2a0 [ 354.277720][T13465] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.277786][T13465] ? __fget_files+0x2a/0x420 [ 354.277813][T13465] ? __fget_files+0x3a0/0x420 [ 354.277852][T13465] __x64_sys_sendmsg+0x19b/0x260 [ 354.277880][T13465] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.277924][T13465] ? do_syscall_64+0xba/0x210 [ 354.277959][T13465] do_syscall_64+0xf6/0x210 [ 354.277990][T13465] ? clear_bhb_loop+0x45/0xa0 [ 354.278026][T13465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.278047][T13465] RIP: 0033:0x7f14f3b8e969 [ 354.278064][T13465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.278083][T13465] RSP: 002b:00007f14f4a89038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.278105][T13465] RAX: ffffffffffffffda RBX: 00007f14f3db5fa0 RCX: 00007f14f3b8e969 [ 354.278121][T13465] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 354.278134][T13465] RBP: 00007f14f4a89090 R08: 0000000000000000 R09: 0000000000000000 [ 354.278146][T13465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.278158][T13465] R13: 0000000000000000 R14: 00007f14f3db5fa0 R15: 00007ffdb9552118 [ 354.278191][T13465] [ 354.614638][ T8845] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 354.626355][T13467] !: renamed from dummy0 [ 354.670649][T13380] team0: Port device team_slave_0 added [ 354.684235][T13380] team0: Port device team_slave_1 added [ 354.841823][T13477] netlink: 'syz.4.2106': attribute type 309 has an invalid length. [ 355.010472][ T13] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 355.314532][T13380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.330485][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.358853][T13495] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2112'. [ 355.373910][T13380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.377583][T13494] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.410866][ T13] bond1: (slave ip6gretap3): failed to get link speed/duplex [ 355.422910][T13380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.455034][T13380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.489295][T13380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.548241][T13501] ------------[ cut here ]------------ [ 355.553935][T13501] memcpy: detected field-spanning write (size 24) of single field "pfx->in6_u.u6_addr8" at ./include/net/ipv6.h:614 (size 16) [ 355.571867][T13501] WARNING: CPU: 1 PID: 13501 at ./include/net/ipv6.h:614 ipv6_addr_prefix+0x124/0x1d0 [ 355.581737][T13501] Modules linked in: [ 355.585709][T13501] CPU: 1 UID: 0 PID: 13501 Comm: syz.0.2115 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 355.597862][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 355.608111][T13501] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 355.613871][T13501] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 355.634719][T13501] RSP: 0018:ffffc900046e7920 EFLAGS: 00010246 [ 355.641359][T13501] RAX: 09f6b60c8bbb8100 RBX: ffff88807989fc68 RCX: ffff888050f40000 [ 355.650934][T13501] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 355.658935][T13501] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 355.667322][T13501] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000018 [ 355.675895][T13501] R13: 1ffff920008dcf4e R14: ffffc900046e7a94 R15: 0000000000000018 [ 355.684393][T13501] FS: 00007f87cc7f86c0(0000) GS:ffff8881261c4000(0000) knlGS:0000000000000000 [ 355.693620][T13501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 355.700225][T13501] CR2: 00007f4653ee56c0 CR3: 0000000057a9a000 CR4: 00000000003526f0 [ 355.708596][T13501] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 355.717065][T13501] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 355.725494][T13501] Call Trace: [ 355.728807][T13501] [ 355.731980][T13501] ip6_route_info_create+0x629/0xa70 [ 355.737343][T13501] ip6_route_add+0x29/0x2f0 [ 355.741935][T13501] ? ipv6_route_ioctl+0x313/0x480 [ 355.747005][T13501] ipv6_route_ioctl+0x35c/0x480 [ 355.751958][T13501] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 355.757409][T13501] inet6_ioctl+0x219/0x280 [ 355.762118][T13501] ? __pfx_inet6_ioctl+0x10/0x10 [ 355.767087][T13501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 355.773129][T13501] sock_do_ioctl+0xd9/0x300 [ 355.777655][T13501] ? __pfx_sock_do_ioctl+0x10/0x10 [ 355.782854][T13501] ? __lock_acquire+0xaac/0xd20 [ 355.787748][T13501] sock_ioctl+0x576/0x790 [ 355.792143][T13501] ? __pfx_sock_ioctl+0x10/0x10 [ 355.797015][T13501] ? __fget_files+0x3a0/0x420 [ 355.801758][T13501] ? __fget_files+0x2a/0x420 [ 355.806395][T13501] ? bpf_lsm_file_ioctl+0x9/0x20 [ 355.811427][T13501] ? __pfx_sock_ioctl+0x10/0x10 [ 355.816317][T13501] __se_sys_ioctl+0xf9/0x170 [ 355.821005][T13501] do_syscall_64+0xf6/0x210 [ 355.825529][T13501] ? clear_bhb_loop+0x45/0xa0 [ 355.830220][T13501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.836316][T13501] RIP: 0033:0x7f87cb98e969 [ 355.840836][T13501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.850495][ T5840] Bluetooth: hci4: command tx timeout [ 355.860510][T13501] RSP: 002b:00007f87cc7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.860542][T13501] RAX: ffffffffffffffda RBX: 00007f87cbbb5fa0 RCX: 00007f87cb98e969 [ 355.860559][T13501] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 355.860573][T13501] RBP: 00007f87cba10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 355.860587][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.860600][T13501] R13: 0000000000000000 R14: 00007f87cbbb5fa0 R15: 00007ffcd4747528 [ 355.860635][T13501] [ 355.860657][T13501] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 355.860672][T13501] CPU: 1 UID: 0 PID: 13501 Comm: syz.0.2115 Not tainted 6.15.0-rc3-syzkaller-00644-gdeeed351e982 #0 PREEMPT(full) [ 355.860698][T13501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 355.860712][T13501] Call Trace: [ 355.860721][T13501] [ 355.860729][T13501] dump_stack_lvl+0x99/0x250 [ 355.860763][T13501] ? __asan_memcpy+0x40/0x70 [ 355.860791][T13501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.860820][T13501] ? __pfx__printk+0x10/0x10 [ 355.860856][T13501] panic+0x2db/0x790 [ 355.860895][T13501] ? __pfx_panic+0x10/0x10 [ 355.860925][T13501] ? show_trace_log_lvl+0x4fb/0x550 [ 355.860978][T13501] __warn+0x31b/0x4b0 [ 355.861005][T13501] ? ipv6_addr_prefix+0x124/0x1d0 [ 355.861041][T13501] ? ipv6_addr_prefix+0x124/0x1d0 [ 355.861072][T13501] report_bug+0x2be/0x4f0 [ 355.861100][T13501] ? ipv6_addr_prefix+0x124/0x1d0 [ 355.861132][T13501] ? ipv6_addr_prefix+0x124/0x1d0 [ 355.861163][T13501] ? ipv6_addr_prefix+0x126/0x1d0 [ 355.861194][T13501] handle_bug+0x84/0x160 [ 355.861216][T13501] exc_invalid_op+0x1a/0x50 [ 355.861249][T13501] asm_exc_invalid_op+0x1a/0x20 [ 355.861271][T13501] RIP: 0010:ipv6_addr_prefix+0x124/0x1d0 [ 355.861303][T13501] Code: cc e8 80 c4 b2 f7 c6 05 c7 34 5c 05 01 90 b9 10 00 00 00 48 c7 c7 20 51 7d 8c 4c 89 fe 48 c7 c2 40 58 7d 8c e8 5d 23 77 f7 90 <0f> 0b 90 90 e9 33 ff ff ff e8 4e c4 b2 f7 44 89 e6 48 c7 c7 00 07 [ 355.861321][T13501] RSP: 0018:ffffc900046e7920 EFLAGS: 00010246 [ 355.861342][T13501] RAX: 09f6b60c8bbb8100 RBX: ffff88807989fc68 RCX: ffff888050f40000 [ 355.861359][T13501] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 355.861373][T13501] RBP: 0000000000000002 R08: 0000000000000003 R09: 0000000000000004 [ 355.861385][T13501] R10: dffffc0000000000 R11: fffffbfff1bba4b4 R12: 0000000000000018 [ 355.861402][T13501] R13: 1ffff920008dcf4e R14: ffffc900046e7a94 R15: 0000000000000018 [ 355.861444][T13501] ip6_route_info_create+0x629/0xa70 [ 355.861477][T13501] ip6_route_add+0x29/0x2f0 [ 355.861499][T13501] ? ipv6_route_ioctl+0x313/0x480 [ 355.861526][T13501] ipv6_route_ioctl+0x35c/0x480 [ 355.861559][T13501] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 355.861622][T13501] inet6_ioctl+0x219/0x280 [ 355.861654][T13501] ? __pfx_inet6_ioctl+0x10/0x10 [ 355.861696][T13501] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 355.861739][T13501] sock_do_ioctl+0xd9/0x300 [ 355.861785][T13501] ? __pfx_sock_do_ioctl+0x10/0x10 [ 355.861817][T13501] ? __lock_acquire+0xaac/0xd20 [ 355.861863][T13501] sock_ioctl+0x576/0x790 [ 355.861897][T13501] ? __pfx_sock_ioctl+0x10/0x10 [ 355.861931][T13501] ? __fget_files+0x3a0/0x420 [ 355.861960][T13501] ? __fget_files+0x2a/0x420 [ 355.861991][T13501] ? bpf_lsm_file_ioctl+0x9/0x20 [ 355.862020][T13501] ? __pfx_sock_ioctl+0x10/0x10 [ 355.862049][T13501] __se_sys_ioctl+0xf9/0x170 [ 355.862076][T13501] do_syscall_64+0xf6/0x210 [ 355.862108][T13501] ? clear_bhb_loop+0x45/0xa0 [ 355.862135][T13501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.862157][T13501] RIP: 0033:0x7f87cb98e969 [ 355.862177][T13501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.862195][T13501] RSP: 002b:00007f87cc7f8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.862219][T13501] RAX: ffffffffffffffda RBX: 00007f87cbbb5fa0 RCX: 00007f87cb98e969 [ 355.862236][T13501] RDX: 00002000000000c0 RSI: 000000000000890b RDI: 0000000000000004 [ 355.862251][T13501] RBP: 00007f87cba10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 355.862265][T13501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.862280][T13501] R13: 0000000000000000 R14: 00007f87cbbb5fa0 R15: 00007ffcd4747528 [ 355.862316][T13501] [ 355.866466][T13501] Kernel Offset: disabled