last executing test programs: 28.493262352s ago: executing program 1 (id=1276): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) socket$alg(0x26, 0x5, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r1], 0x3c}}, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000005c0)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x1, 0x0, 0x13, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7800, 0xfff, 0x28}}) 28.279040705s ago: executing program 1 (id=1280): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000340)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x21, &(0x7f0000000580)=@raw=[@call={0x85, 0x0, 0x0, 0xa6}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffff800}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x9, 0x4, 0x7, 0x7ffffffffffffea8, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x95}}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}], &(0x7f00000000c0)='GPL\x00', 0xe53, 0x3a, &(0x7f0000000100)=""/58, 0x40f00, 0x11, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x8, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r2], &(0x7f0000000480)=[{0x2, 0xfffffffe, 0xb, 0x1}, {0x0, 0x3, 0x0, 0x1}, {0x1, 0x1, 0x6, 0x1}], 0x10, 0x4, @void, @value}, 0x94) r3 = socket$inet(0x2, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800500030010"], 0x48}}, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='xfrm0\x00', 0x10) 28.184251272s ago: executing program 1 (id=1282): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r3 = socket(0x11, 0x2, 0x0) getsockopt$nfc_llcp(r3, 0x107, 0x13, 0x0, 0x20600000) 27.783535626s ago: executing program 1 (id=1286): getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) socket$l2tp(0x2, 0x2, 0x73) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rcu_utilization\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r3, &(0x7f0000004580), 0x0, 0x44080) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000e2ff84000000750000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r5}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfd", 0x2}], 0x1}, 0x810) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000018000000000000495", @ANYRES8=r5], &(0x7f0000000000)='GPL\x00', 0x2c, 0x0, 0x0, 0x0, 0x5a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r9, &(0x7f0000000040)="05000000010001", 0x7) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000240)}], 0x1}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="28000000100003050000e1ffff0100000000d733", @ANYRES32=0x0, @ANYBLOB="050302000000000008000500", @ANYRES32=0x0, @ANYBLOB], 0x28}}, 0x0) 27.230956251s ago: executing program 4 (id=1289): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000080)) bpf$MAP_LOOKUP_ELEM(0x22, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) recvmsg$unix(r0, &(0x7f00000038c0)={&(0x7f0000000380)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0xffffff97}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40000001) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) accept4(r6, &(0x7f0000000300)=@tipc=@name, &(0x7f0000000280)=0x80, 0x800) connect$can_bcm(r7, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000002"], 0x48}, 0x300}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) 26.950993036s ago: executing program 1 (id=1292): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x101) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a00000007002100626200001c0022"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x0, 0x0, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}}, 0x4048848) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x37f}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3c6da1e28f23f455e96a02001fc3fb089ed", 0x22}], 0x2}}], 0x2, 0x48000) 25.9627861s ago: executing program 4 (id=1296): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b62f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746243ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d7ea2c27d041ca34a28965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b65a7ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e386d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848afcbb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4acee0e48c7d6d63cec5457a449eaf339d9807cd02f8784487cc9d4733788b3749d2e5560c8f30b11735389106f8d0ea4e3a802cc7eb620dc0e88fac3fbed19ab29c01ab3a068520270ab4f63004a291fbd157700e45cf8a033a658be59dfe6c0d6e7254aaa28b70d5a5f9cd1df60606660eba7870d8aa5935f2c7f5a67764afecad6748b09e28da3cfc1fa0dae3cc0209be966f83402836e66f7a9975217173c3ede094c3f2f4a7ade9627daca3ff34e40"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x2c}}, 0x40000) r9 = socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r10, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7}) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40200080}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x40040004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x191}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc, 0x1e, 0x6}]}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=@newtaction={0x898, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404}], [@TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x4, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x8, 0x2, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_RATE64={0xc}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r11 = socket$inet6(0xa, 0x6, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r13, 0xf2ad297e22f0b841, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r14}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 24.839888371s ago: executing program 4 (id=1306): r0 = socket$igmp6(0xa, 0x3, 0x2) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r4, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000840000000500000010ff"], 0x18}}], 0x2, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[], 0x10}, 0x24044890) 24.598135207s ago: executing program 4 (id=1311): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002540)=@delchain={0x11c, 0x65, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_u32={{0x8}, {0x40, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'vlan0\x00'}, @TCA_U32_DIVISOR={0x8, 0x4, 0x67}, @TCA_U32_HASH={0x8, 0x2, 0xdb87}, @TCA_U32_CLASSID={0x8, 0x1, {0x5, 0xe}}, @TCA_U32_DIVISOR={0x8, 0x4, 0x84}, @TCA_U32_HASH={0x8, 0x2, 0x5}]}}, @TCA_CHAIN={0x8, 0xb, 0x401}, @filter_kind_options=@f_bpf={{0x8}, {0x98, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x4, 0x2, 0xf8, 0x3}, {0xf18e, 0x3, 0x2, 0xf4}, {0xf801, 0x80, 0x6, 0xcbbf}, {0x1, 0x6, 0x80, 0x8}, {0x0, 0x9, 0x8, 0x10001}, {0x1, 0x4, 0x88, 0xa}]}}, @TCA_BPF_POLICE={0x48, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xff9, 0x4, 0x2, 0x6, 0x0, {0x8, 0x0, 0x8, 0x9, 0xa4, 0x100}, {0x6, 0x2, 0x0, 0x4, 0x0, 0x9}, 0xff, 0x924, 0x9}}, @TCA_POLICE_RESULT={0x8, 0x5, 0xfffff220}]}]}}]}, 0x11c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 24.103100791s ago: executing program 4 (id=1316): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x40) (async, rerun: 32) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r6}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 12.749533813s ago: executing program 4 (id=1316): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@bridge_newvlan={0x24, 0x71, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}}, 0x40) (async, rerun: 32) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r2, 0x4) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r6}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95f24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 11.529143687s ago: executing program 1 (id=1292): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x101) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a00000007002100626200001c0022"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x0, 0x0, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}}, 0x4048848) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x37f}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3c6da1e28f23f455e96a02001fc3fb089ed", 0x22}], 0x2}}], 0x2, 0x48000) 6.416799315s ago: executing program 3 (id=1404): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000002e0001002abd70000000000008000000", @ANYRES32=r3, @ANYBLOB="08686030000a00018099000000"], 0x2c}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {0x0, 0xffffffffffffffff}}]}, 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002ac0)={&(0x7f00000019c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x3, [@fwd={0xe}, @union={0x1, 0x8, 0x0, 0x5, 0x0, 0x6a9, [{0x8}, {0x3, 0x2, 0x5}, {0x10, 0x1, 0x9}, {0x7, 0x2, 0x78}, {0x2, 0x4, 0x3ff}, {0x8, 0x2, 0x7}, {0x4, 0x5, 0x8b6d}, {0xc, 0x1, 0x94a}]}, @fwd={0xa}, @enum={0x3, 0x2, 0x0, 0x6, 0x4, [{0x9, 0x8001}, {0x2, 0xc}]}, @var={0xc, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e]}}, &(0x7f0000001ac0)=""/4096, 0xcb, 0x1000, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_netfilter(r1, &(0x7f00000018c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001880)={&(0x7f0000000200)={0x1650, 0xd, 0xa, 0x301, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x1}, [@typed={0x8, 0xe1, 0x0, 0x0, @u32=0x10}, @generic="05a399cbd47a4af346e7919d89bec1a7c29b07816a87f398aca42de4114b7246be982ebd3d35ed3e2416da61c1173d80bea6665557683be5a13736e41fb03d96f59a1c56128f53c9f196ba7896eecc324b622f351350e5761f59d98b73718ed0f5c1ce0a0340bdd6a96e91a9f2c23e13a653e8d5a6f09d615f440aaacac8d19d3d2bbdbf370a17458bbd16c55007c05728ddb96c3f6ee6c1b28252b5bfb56b03fc46b72a00e4fd16b42b9eea913517089b8f67f0b0773765e306a767a43563588b2108", @nested={0x1b7, 0x10c, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @ipv4=@multicast2}, @generic="09be043eb3dae64824eca68f993ce419ddbcfb8c9e9c698878c64a65126a8dd716", @generic="35aad4efef", @typed={0x8, 0x122, 0x0, 0x0, @ipv4=@broadcast}, @generic="b23f25611cf3e306338f51bc430c35734c83b5e5de75e0028ed84a5a14ad0b5a7f300dc8d917c7243eda0e86c068cc79d09ece3afaac75410bc59cd4ccc3b048d742c9c701e0366226b42aff4397dde442d4457b607cb00ba0e4d535065fd211de7543ff7f26c613df9a1267d265717e2f6a835f304e88fd7f14c0a78576cca7c47bc0975af6e5a277de2610835183da832c1ef07154657ece729164117ee1fcf140d718dd8a438e7e50106dd5", @generic="77e842a57dddeea96f79b171d7d5fa0429bbd4687dbc9f529dc3ce680bbbc0a9b7d74d47026c6a4465b1af0b180fc862e2d9dfae018add55e7bf6eb43f020a3a24177f2c86221801b459137690b1a5ded372e14d557553bc8d4ab47d1bea16b09c15562f705cc718626b2273cfda2047d30ccd8da268e56b772767ee0302ae3203c942d11d1e9b068c198fbac2f04e78beff590b3ffec79d3e58b15fda705d7b1d518cbd0de872d3ebe575d2c1de9e5f4fc9c7dd2704aa951cec571bf49e8e904f14638123960028d5f6d8932678ccc6"]}, @nested={0x1232, 0x11a, 0x0, 0x1, [@typed={0x8, 0x10e, 0x0, 0x0, @u32=0x5}, @generic="940fca2ef1f14001625ad34ceb0032fdaec2", @generic="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", @generic="c35e67fc5e0af4f52394ebc4836ce7067e4170ed4d2a0982aaf369111927802924597c84f877c6a98910819e71f2308e41e96301383322d0cd8b6cccccab833a240c0d1fb41bea2ecd72f7300568cebab8877131494391d9b159606723ef2244192efb89", @typed={0x71, 0x4e, 0x0, 0x0, @binary="c450ec9db84c297283279a579a40388ae6e06a807bb7b9dc7785f82d9f2f7a625b438b1f9d7d89561ee333edf9e705e627defbf11a4707b2f2136f2dd1a77b136a54612e35c4ac914b6070ffc4ab7a6513a468fa5af997730e51a12e1d36e887ebdfda574ee7c2ea61e23f2077"}, @generic="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", @typed={0x8, 0x4c, 0x0, 0x0, @ipv4=@remote}, @generic="9783d079933c0e08fd48a14a766fe1c714663dddcc359868f49c4b09217b0d7719d5ab6adaec1809e1ae03009064570ae44d410ff4a0"]}, @typed={0x83, 0xf8, 0x0, 0x0, @binary="691d5c522775b92c388fa849e286c511e288010661eb83019742d6edef0d9f01162789c69473ac45a3b67d69232676a1a2e116de0455afee582af549452775f46d327ba16acf0b457d723b53cdd44f830b46cc9ebcb38a8d51a0910e951e357d7ebd53a5c8c1006a64efbaedaebfaf868fb09ab46a373a620f8eab3ff06266"}, @nested={0xd7, 0x84, 0x0, 0x1, [@generic="2cba01acb58a32ea5fbdcb213e5a503852e3f313aabcebe5721b839babb87e26d5db341fb81874d221a09d702f701e06d980809a4f94fabb0de005d7f508159275eac09aee011c6d7573f2f2834c1b759572a278c7e4c9659c10b49be1201c81d00663725f275a83dc213778ec43e9bfa58ff7b78ab5c23863fca06319877963e738e1dd", @generic="1863ca741d304ff77f485170c587193572a56ac7daad2c50f81f292226f59be119b89d5841a4cdb85ca5e435220d005c6c323a9058d1ca", @typed={0x8, 0x12e, 0x0, 0x0, @uid=0xee00}, @typed={0x8, 0xf4, 0x0, 0x0, @uid=r3}, @typed={0x8, 0x102, 0x0, 0x0, @uid}]}, @generic="01487b9e", @generic="62cf3ba4d8cff96f19206f00ffa7bb0be222c290025b4e339611f18dde4d49cd7bddcb75"]}, 0x1650}, 0x1, 0x0, 0x0, 0x4000}, 0x4850) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4b, &(0x7f0000000040)=0x5, 0x4) r5 = accept4$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000180)=0x1c, 0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000001900)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x4, 0xfffe, 0x10000, 0x20, 0xc8, 0x3, 0x3}, 0x9c) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) 2.187222411s ago: executing program 2 (id=1424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000011c0)={0x48, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x48}}, 0x0) (fail_nth: 6) 1.694929139s ago: executing program 2 (id=1425): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRES8, @ANYRESOCT], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x6, 0x0, &(0x7f0000000140)="3d6ee2e04b91", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x5, 0x0, 0x0, 0x40c, r1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x8000000000004, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000faffffff0000000000000000000300"], 0x28}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x1e, 0x5, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x1e, 0x3}, 0xc, 0x0}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d800000019008111e00212ba0d8105040a600000ff0f040b067c55a1bc000900b80006990300000015000500fe8081780d001500030001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) recvmsg$can_bcm(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)=""/138, 0x8a}], 0x1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x45, 0x0, 0x0, 0x80000001}, {0x35}, {0x6}]}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r6, @ANYBLOB="200001"], 0x38}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, &(0x7f0000000080)) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) shutdown(0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 1.694339923s ago: executing program 3 (id=1426): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.508020934s ago: executing program 0 (id=1427): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_getnexthop={0x38, 0x6a, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_GROUPS={0x4}, @NHA_GROUPS={0x4}]}, 0x38}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000001a00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "c00100", 0x18, 0x0, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x2e}, {[@routing={0x3a, 0x2, 0x1, 0x0, 0x0, [@private2]}]}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="34000000140009050000000000000000021f0080", @ANYRES32=r1, @ANYBLOB="080002007f"], 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x2}) 1.489368453s ago: executing program 2 (id=1428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newnexthop={0x24, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}]}, 0x24}}, 0x4000) (fail_nth: 3) 1.453812242s ago: executing program 3 (id=1429): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x158, 0x940c, 0x3002, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@ah={{0x30}}, @common=@unspec=@owner={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv_slave_1\x00', 'pimreg0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0xf, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001500)=ANY=[@ANYBLOB="a800000076000109000000000000000008000000", @ANYRES32, @ANYBLOB="8d000d"], 0xa8}], 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c4b13282fb46970985afacb9ecb3ae5e9720a6b799f6631a446943b2d903a56f6af882c5abd7e", @ANYRES16=r6, @ANYBLOB="65572abd7000f9dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xd}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r8, 0x1, {0x72d8cc35e83bbea9, 0xf, 0x3}}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x158, 0x940c, 0x3002, 0x0, 0x2c0, 0x250, 0x3d8, 0x3d8, 0x250, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@ah={{0x30}}, @common=@unspec=@owner={{0x38}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv_slave_1\x00', 'pimreg0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) setsockopt(r3, 0x10d, 0xf, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001500)=ANY=[@ANYBLOB="a800000076000109000000000000000008000000", @ANYRES32, @ANYBLOB="8d000d"], 0xa8}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r4) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="0c4b13282fb46970985afacb9ecb3ae5e9720a6b799f6631a446943b2d903a56f6af882c5abd7e", @ANYRES16=r6, @ANYBLOB="65572abd7000f9dbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x65, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xd}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r8, 0x1, {0x72d8cc35e83bbea9, 0xf, 0x3}}, 0x18) (async) 1.341312649s ago: executing program 2 (id=1430): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x1ff) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='}', 0xffca, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) accept$inet(r0, 0x0, 0x0) 1.340742618s ago: executing program 0 (id=1431): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, @map_idx, @call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ldst]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x811}, @sack={0x5, 0x2}]}}}}}}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) 1.079145584s ago: executing program 3 (id=1432): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 978.210817ms ago: executing program 0 (id=1433): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='sys_exit\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000035000b45d3000000000000000cd25a80", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000600000000000000051c8273000000185200000e000000000000000000000085100000880000003a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000000380)=0x48000000, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x24, @short={0x2, 0x2, 0xaaa3}}, 0x14, &(0x7f00000004c0)={&(0x7f0000000280)="9e161f1c8df7de3159e63abb0d3f30813fe348bebce23cba30d07b295b67f4aef648ccf529951453d3f933611b49c7544228c4ad7476a6cea91bf134971c17adb02c20427191636f2bd4b510535c5efb03ef272780f8cbee9c9adf6693d013d2570a99bdea0c73e0b5837fea82e0d52228416d114ac4d6da75c7afa8c47c6cffad6b98473e880ee020271797d77d4195f997638dbb11c5a82b7e6f4c8a042bae6471fde7f9cd7057e72bf5a65cf568fb59905ca00cab4c53ad5c73b3b4fff0a6586e01ca9bdf0368fd03ad24018f996c406d76a56700c5d27e83c83b34edb83ab179a0b4a561a4bdbed242f9638757d0d2ce50", 0xf3}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @private1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 954.988894ms ago: executing program 3 (id=1434): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000305000000000000000000000000760579", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e000018000280060010004e230000060011004e24000004001200"], 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000d80)={0x524, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x50, 0xfa, "7d577cfb22b373fa22a47a7f9dfb560ec5e89341380dc5c88c37784ce7c13db8aebfdc20b502fdca82c7eb16a2c137b510f36197da8a2074764730c5d6d3140d816a9d6b660cd259441d8f86"}, @NL80211_ATTR_FILS_ERP_RRK={0x7b, 0xfc, "7f4433717c977b77e136ae54249d35c494b6cf91e770504dc0057ec221539c11da5a83693c161e0acc8a577739a5e83153359d417125fa9e49b1420f7240abda026290c38c44e08091639235ae02662afcbcae6d6e81074b15b8ebb11a8ee40389d9e9a0a86984e5683d138837b5983539d3f372c7ca8d"}, @NL80211_ATTR_FILS_ERP_RRK={0x6a, 0xfc, "acf99c3a46bb374311711939783d1846d249ed9b3552f20884722d525f5113269aa658035e48019b3327e3fbeed91eae20ce89f917a95fc245d3f5a205aa44fc14d8424aff4cb851f59a4c189ffdf4dfda131504993b4b1e8ff40ef6c1e2fe6e2a667c6feca6"}, @NL80211_ATTR_FILS_ERP_RRK={0x8d, 0xfc, "c00af83784dce6c8b5187eed154de39fc641c0e555d4571472dd0c0974655336d8445064e2fb9d0d0780cd721fee867577ab4203417e902ab3cdcf9556b4167496443e144e2466e45fd5ff80bf52373c298ae75758a06dbcdc86ff84f823dd932739867a91d5df413532ac737d9c9c3068bd6aa20307e8a63e5255e70581c541aae028854b0396f701"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "a89a367393160e88d233245e9344"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x12, 0xf9, "2433d94b413ad1647e23cdb07db6"}, @NL80211_ATTR_FILS_ERP_RRK={0xd8, 0xfc, "7ba97013eca8f5adf30bf8503fd5bd2258d70dc8e242f4181c1d5703393246b57aebb49a7636c25c73d92e625aaa2e4acef4c0f93a375bb226f0f0a32f946e80e9c7588b0aa715abc5ec822461495b4f83bf76c10209ba6c2e6a5b338b8f2596b55e652090271c6ff8320c63ad5153362650062c18e0d2d4d49b5e29ca8fde46144695ff5767d25d39e9fbb1015ab0dfb5ca9a171ea02c16587cf4254186fdbfe9f673f60683fc12fd9ef5d9c33dd822e85959c816b364bf2a2a316408542374a6af44eff57ed2dfbce107d7c79c9e76d03ac637"}], @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "7ac37a"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "2513a44959328eef8c"}, @NL80211_ATTR_FILS_ERP_RRK={0x2a, 0xfc, "966a0fcd7eb1e510865fe62bb9ca1e699f4242ea2b785f0261e15f0e99dc54c9aea6c2014191"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xf4, 0xfc, "397205392742b54240c37cded3da8628ff95f1e9821206311374af98cb6cc23a91cacac173f24ccbb85c0767beeb87297d64a8a4501ef29da4fdf8938adc8b29bd85a7cef578a43915322dc6b4f447e4a6f8519fee7846a179317fcfc8b375723fcf291a9132d5890d4d29b55ba714612e7046566fda96a279a760370e9000d00c093b153dd70cc1d9a6493ed3e3f4c931d7b0b62ff2cebe1b4c8ba90f8e0c2c01165ba44118cf32756af67e21bf238567f14f6b4665907a4ec7d810fe8250a188413cc67aeb84e44ddfa44e62772c7cc98146ca25979d6d36c6b52912a31ce1ba525bc917834a1b4e157844ca882ec1"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0xc}, @NL80211_ATTR_FILS_ERP_REALM={0xa0, 0xfa, "734bca3722b999eecad1f21a3f14e6e9fec245385e86d6fa7f8ade95aa0310ab5cd9e1322453778555e1242c4f2f602f1d259f466ae4053973ae0afa72b73cc7fe3a86007b5de6d4e0981614b0e2e0c45b043a22baa9121a70d88fa0a0e357a28fd5431f94af7280d8d4e3a6c0b857a507ad5013e1eabde03123f8eea2decc76aa89bfca15e59b98ac33138ea269c48c6031a0f074a3f79ce8f51542"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "361fe79eee20"}], @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "ead717269a48c82f"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "05"}], @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x34, 0xfc, "8cf2a79127860026bdeee28b684af2a1ec5750efbaa2a42f237f60b3219b85e05343082536ddc602785b723f9a21f534"}]]}, 0x524}, 0x1, 0x0, 0x0, 0x8004}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'macvlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x0) 740.017536ms ago: executing program 0 (id=1435): r0 = socket$inet6(0xa, 0x6, 0x0) listen(r0, 0x101) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001a00000007002100626200001c0022"], 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x0, 0x0, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x4f77}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}}, 0x4048848) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="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", 0x37f}, {&(0x7f00000003c0)="439e9c06fc666cabc8569d63a866b31ff3c6da1e28f23f455e96a02001fc3fb089ed", 0x22}], 0x2}}], 0x2, 0x48000) 431.160731ms ago: executing program 2 (id=1436): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet(0x2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x18, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, @map_idx, @call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @ldst]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x811}, @sack={0x5, 0x2}]}}}}}}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) 115.780846ms ago: executing program 0 (id=1437): r0 = socket(0x22, 0x2, 0x2) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000340)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a01040000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c0003800800024000000000080001400000000018000380140001006e657464657673696d30"], 0xa8}}, 0x0) socket(0x28, 0x80000, 0x5) 60.235207ms ago: executing program 3 (id=1438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bridge_slave_1\x00', 0x100}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0100, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000002c03f92c0000000000000000000000000000000000000000000000000000000000000000000069d9bf8d8d908fa8f9c9fc0000000000000000000000000000000000000000000000000009000000000000000000000000000008"], 0xb8}}, 0x0) close(r1) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f00000000c0)) r4 = socket$netlink(0x10, 0x3, 0x4) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="030000005ad8218b45d9266a08000e8d887ce470e626d1a815d7a7f93f9eba5db1ecc1b710237d20b6766e0cfaeafdf4622889580fb7fb8f75593e3c6aac21905df84c806f42e9cff1646f44ecb79c9605651b0bdd70d2830cd6d326113238938d5762de9e5e38d0b356048bb2762e0259c7d88cd08c829c", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf2514000000440009800800020007000000080002000000000008000100020000000800020000000080080002000b0000000800010002000000080001000700000008000200050000000c0006800800060004000000"], 0x64}}, 0x24004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f00000002c0)='blkio.bfq.time_recursive\x00', 0x0, 0x0) preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x24048840) accept4$inet(r8, &(0x7f0000000400)={0x2, 0x0, @loopback}, &(0x7f0000000440)=0x10, 0x80800) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 14.250312ms ago: executing program 0 (id=1439): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000006000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(r1, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000680)=ANY=[@ANYBLOB="df3ef1bbedbbde56e61bd5339ac5f5284dea449d27e60fc22738d0b9bc2da18321c1b5c28f17bed7d4dfb1f2e99a6e0c7c041ec24b69b83f98e615d974b9b31fcf2604e2ebdb6540c56eae6d4f", @ANYRES16, @ANYBLOB="040028bd7000fedbdf25070000000c00018008000100", @ANYBLOB, @ANYRESHEX=0x0, @ANYBLOB="080001", @ANYRES32, @ANYBLOB, @ANYRES8=r0, @ANYBLOB="08000300010000000800010014e7e8917db888d8ea44559ac0ba36bdd18a94d564e11c94d42aef7af8a1acfa0abf9a15156506f32d7b82d7676ffd27084b6548e20807ea8553304f5d0a302d236aa6e30bff32e114cfb5ca62329d471d8181056dfadef03812", @ANYRES32, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x40005) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000001000100030000000000000082400000", @ANYRES32=r1, @ANYBLOB="e28200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="0100000003000000000000000800"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x40000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000080)="441f080100000000", 0x8) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200142c01fe800000000000005a070083b7140fd0105840b2fe80000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780008"], 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$rxrpc(0x21, 0x2, 0xa) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x2, &(0x7f00000000c0)=0x1bc6, 0x4) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r4, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/59, 0x3b}], 0x1}}], 0x1, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000640)) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b23867772c615b8004f5071a7715f73be32aea3bb1ecc3e0814fb9b752a6d48b1d4d68a4282f76c2c6535ec3ec0fe9843311a22b58a46ed495465703756e040dd9002584b5f9ae54dd851daed0c915d40f3a3fb324415ea188556f05a94c5a063dcf7be1743c393ed5fd0563366b67048a89f49375cd26cdbbe7f4b9f7d02fb8c26996da27d63c84e31f1b8a8b942e2b7b25354a25c9b79d6dfbd7f7d9ee7c0767dc1e21f382382ac9a01aa1fb75a182d9d410079b15e59a58c12e44ea45aaf6021bf0179b6a99c4b47de940e8c244a8ab542700028dbd1950c70f022dc6", 0xe9}, {&(0x7f0000000180)="224a1f4b1161baddab286f59366916998e7ac05aef5807ab52a488c02ae9987c1bc1ac68", 0x24}, {&(0x7f0000003940)="cb5310a368be4d9d608d0206477400a213bbe0bafb5428a2e705df7610ddf6c9d8853dd82e9f92b2022646e9edef08adc089bb18c83e97cc5d3387a1eb4bc1f452de715a25151a300e07d3d4e08a98476c293ed51deac36299fbb9e4f4f865e0b151ac2ea08c217dabbe43633d175e543b6e709c547673c15c6a05a6c60a4445650976a83303407a7722350f4eb490166551444632b9d843cac8223a1392010bc308998f52ad97d1341c2fcf51bdd0591c8b4a71fee93e8a07a0e8dea2", 0xbd}], 0x3, &(0x7f0000001800)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) 0s ago: executing program 2 (id=1440): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0x1e, 0x1, 0x0) shutdown(r1, 0x2) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @timestamp_reply={0xe, 0x0, 0x0, 0x6, 0x6, 0x9, 0x6, 0x80000001}}}}}, 0x0) sendmmsg$sock(r0, &(0x7f0000000d00)=[{{&(0x7f0000000340)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000a40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0x30}}], 0x1, 0x20000800) kernel console output (not intermixed with test programs): l_usercopy, interval 1, probability 0, space 0, times 0 [ 239.430087][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.1.1049 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 239.440873][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.450949][ T8295] Call Trace: [ 239.454227][ T8295] [ 239.457154][ T8295] dump_stack_lvl+0x241/0x360 [ 239.461850][ T8295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.467045][ T8295] ? __pfx__printk+0x10/0x10 [ 239.471637][ T8295] ? __pfx_lock_release+0x10/0x10 [ 239.476667][ T8295] should_fail_ex+0x3b0/0x4e0 [ 239.481345][ T8295] _copy_from_iter+0x1ed/0x1d60 [ 239.486278][ T8295] ? __virt_addr_valid+0x183/0x530 [ 239.491384][ T8295] ? __pfx_lock_release+0x10/0x10 [ 239.496452][ T8295] ? __alloc_skb+0x28f/0x440 [ 239.501059][ T8295] ? __pfx__copy_from_iter+0x10/0x10 [ 239.506351][ T8295] ? __virt_addr_valid+0x183/0x530 [ 239.511463][ T8295] ? __virt_addr_valid+0x183/0x530 [ 239.516597][ T8295] ? __virt_addr_valid+0x45f/0x530 [ 239.521815][ T8295] ? __check_object_size+0x48e/0x900 [ 239.527115][ T8295] netlink_sendmsg+0x73d/0xcb0 [ 239.531890][ T8295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.537180][ T8295] ? aa_sock_msg_perm+0x91/0x160 [ 239.542119][ T8295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.547398][ T8295] __sock_sendmsg+0x221/0x270 [ 239.552174][ T8295] ____sys_sendmsg+0x52a/0x7e0 [ 239.556945][ T8295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.562237][ T8295] __sys_sendmsg+0x292/0x380 [ 239.566823][ T8295] ? __pfx___sys_sendmsg+0x10/0x10 [ 239.571952][ T8295] ? __pfx_vfs_write+0x10/0x10 [ 239.576726][ T8295] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.583111][ T8295] ? do_syscall_64+0x100/0x230 [ 239.588037][ T8295] ? do_syscall_64+0xb6/0x230 [ 239.592730][ T8295] do_syscall_64+0xf3/0x230 [ 239.597237][ T8295] ? clear_bhb_loop+0x35/0x90 [ 239.601918][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.607806][ T8295] RIP: 0033:0x7f94ce37dff9 [ 239.612215][ T8295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.631826][ T8295] RSP: 002b:00007f94cf200038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.640248][ T8295] RAX: ffffffffffffffda RBX: 00007f94ce535f80 RCX: 00007f94ce37dff9 [ 239.648233][ T8295] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 239.656212][ T8295] RBP: 00007f94cf200090 R08: 0000000000000000 R09: 0000000000000000 [ 239.664196][ T8295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.672170][ T8295] R13: 0000000000000000 R14: 00007f94ce535f80 R15: 00007ffc4c86e8d8 [ 239.680160][ T8295] [ 239.945635][ T8297] delete_channel: no stack [ 240.062329][ T8297] delete_channel: no stack [ 240.081266][ T8297] delete_channel: no stack [ 240.098252][ T8297] delete_channel: no stack [ 240.108646][ T8297] delete_channel: no stack [ 240.113344][ T8297] delete_channel: no stack [ 240.119374][ T8297] delete_channel: no stack [ 240.124561][ T8297] delete_channel: no stack [ 240.129872][ T8297] delete_channel: no stack [ 240.134626][ T8297] delete_channel: no stack [ 240.152576][ T8297] delete_channel: no stack [ 240.163024][ T8297] delete_channel: no stack [ 240.174530][ T8297] delete_channel: no stack [ 240.184266][ T8297] delete_channel: no stack [ 240.198231][ T8297] delete_channel: no stack [ 240.215419][ T8297] delete_channel: no stack [ 240.227088][ T8297] delete_channel: no stack [ 240.239219][ T8297] delete_channel: no stack [ 240.250220][ T8297] delete_channel: no stack [ 240.263365][ T8297] delete_channel: no stack [ 240.271686][ T8321] bridge1: entered promiscuous mode [ 240.277179][ T8297] delete_channel: no stack [ 240.284375][ T8321] bridge1: entered allmulticast mode [ 240.294193][ T8297] delete_channel: no stack [ 240.303776][ T8297] delete_channel: no stack [ 240.313069][ T8297] delete_channel: no stack [ 240.324400][ T8297] delete_channel: no stack [ 240.335638][ T8297] delete_channel: no stack [ 240.356469][ T8297] delete_channel: no stack [ 240.373038][ T8297] delete_channel: no stack [ 240.390244][ T8297] delete_channel: no stack [ 240.401187][ T8297] delete_channel: no stack [ 240.411625][ T8297] delete_channel: no stack [ 240.419438][ T8297] delete_channel: no stack [ 240.424714][ T8297] delete_channel: no stack [ 240.431020][ T8297] delete_channel: no stack [ 240.445499][ T8297] delete_channel: no stack [ 240.450843][ T8297] delete_channel: no stack [ 240.455515][ T8297] delete_channel: no stack [ 240.478576][ T8297] delete_channel: no stack [ 240.487520][ T8297] delete_channel: no stack [ 240.496965][ T8297] delete_channel: no stack [ 240.505491][ T8297] delete_channel: no stack [ 240.514838][ T8297] delete_channel: no stack [ 240.521207][ T8297] delete_channel: no stack [ 240.536687][ T8297] delete_channel: no stack [ 240.562410][ T8297] delete_channel: no stack [ 240.567209][ T8297] delete_channel: no stack [ 240.576045][ T8297] delete_channel: no stack [ 240.601362][ T8297] delete_channel: no stack [ 240.612779][ T8297] delete_channel: no stack [ 240.621622][ T8297] delete_channel: no stack [ 240.630478][ T8297] delete_channel: no stack [ 240.638465][ T8297] delete_channel: no stack [ 240.644004][ T8297] delete_channel: no stack [ 240.653074][ T8297] delete_channel: no stack [ 240.668503][ T8297] delete_channel: no stack [ 240.685028][ T8297] delete_channel: no stack [ 240.695692][ T8297] delete_channel: no stack [ 240.723974][ T8297] delete_channel: no stack [ 240.743882][ T8297] delete_channel: no stack [ 240.762330][ T8297] delete_channel: no stack [ 240.776160][ T8297] delete_channel: no stack [ 240.800555][ T8297] delete_channel: no stack [ 240.820995][ T8297] delete_channel: no stack [ 240.835011][ T8297] delete_channel: no stack [ 240.847296][ T8297] delete_channel: no stack [ 240.928478][ T8337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 241.161267][ T8345] FAULT_INJECTION: forcing a failure. [ 241.161267][ T8345] name failslab, interval 1, probability 0, space 0, times 0 [ 241.210598][ T8345] CPU: 1 UID: 0 PID: 8345 Comm: syz.3.1063 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 241.221519][ T8345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 241.231786][ T8345] Call Trace: [ 241.235084][ T8345] [ 241.238295][ T8345] dump_stack_lvl+0x241/0x360 [ 241.242996][ T8345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.248213][ T8345] ? __pfx__printk+0x10/0x10 [ 241.252875][ T8345] ? __kmalloc_noprof+0xb0/0x400 [ 241.257874][ T8345] ? __pfx___might_resched+0x10/0x10 [ 241.263210][ T8345] should_fail_ex+0x3b0/0x4e0 [ 241.267926][ T8345] ? ip_options_get+0x9c/0x570 [ 241.272720][ T8345] should_failslab+0xac/0x100 [ 241.277424][ T8345] ? ip_options_get+0x9c/0x570 [ 241.282255][ T8345] __kmalloc_noprof+0xd8/0x400 [ 241.287063][ T8345] ip_options_get+0x9c/0x570 [ 241.291683][ T8345] ? __local_bh_enable_ip+0x168/0x200 [ 241.297256][ T8345] ? __pfx_ip_options_get+0x10/0x10 [ 241.302491][ T8345] do_ip_setsockopt+0x2451/0x3cd0 [ 241.307546][ T8345] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 241.312944][ T8345] ? __pfx___might_resched+0x10/0x10 [ 241.318251][ T8345] ? __lock_acquire+0x1384/0x2050 [ 241.323309][ T8345] ip_setsockopt+0x63/0x100 [ 241.327837][ T8345] dccp_setsockopt+0x17c/0x12c0 [ 241.332709][ T8345] ? __pfx_dccp_setsockopt+0x10/0x10 [ 241.338018][ T8345] ? __fget_files+0x29/0x470 [ 241.342619][ T8345] ? aa_sock_opt_perm+0x79/0x120 [ 241.347576][ T8345] ? sock_common_setsockopt+0x37/0xc0 [ 241.352971][ T8345] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 241.358888][ T8345] do_sock_setsockopt+0x3af/0x720 [ 241.363938][ T8345] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 241.369499][ T8345] ? __fget_files+0x29/0x470 [ 241.374107][ T8345] ? __fget_files+0x3f3/0x470 [ 241.378798][ T8345] ? __fget_files+0x29/0x470 [ 241.383433][ T8345] __sys_setsockopt+0x1a2/0x250 [ 241.388309][ T8345] __x64_sys_setsockopt+0xb5/0xd0 [ 241.393356][ T8345] do_syscall_64+0xf3/0x230 [ 241.397876][ T8345] ? clear_bhb_loop+0x35/0x90 [ 241.402571][ T8345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.408482][ T8345] RIP: 0033:0x7fd6f937dff9 [ 241.412914][ T8345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.432627][ T8345] RSP: 002b:00007fd6fa08e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.441062][ T8345] RAX: ffffffffffffffda RBX: 00007fd6f9535f80 RCX: 00007fd6f937dff9 [ 241.449047][ T8345] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 241.457116][ T8345] RBP: 00007fd6fa08e090 R08: 0000000000000005 R09: 0000000000000000 [ 241.465107][ T8345] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.473102][ T8345] R13: 0000000000000000 R14: 00007fd6f9535f80 R15: 00007ffebfa2d388 [ 241.481113][ T8345] [ 241.885652][ T8358] __nla_validate_parse: 2 callbacks suppressed [ 241.885674][ T8358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1070'. [ 243.699179][ T8369] validate_nla: 14 callbacks suppressed [ 243.699197][ T8369] netlink: 'syz.1.1072': attribute type 29 has an invalid length. [ 243.729100][ T8378] netlink: 'syz.0.1074': attribute type 21 has an invalid length. [ 243.739504][ T8378] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1074'. [ 243.768123][ T8383] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.909078][ T8392] FAULT_INJECTION: forcing a failure. [ 243.909078][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 243.970956][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.0.1080 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 243.981704][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 243.991801][ T8392] Call Trace: [ 243.995098][ T8392] [ 243.998030][ T8392] dump_stack_lvl+0x241/0x360 [ 244.002712][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.007903][ T8392] ? __pfx__printk+0x10/0x10 [ 244.012489][ T8392] ? fs_reclaim_acquire+0x93/0x130 [ 244.017599][ T8392] ? __pfx___might_resched+0x10/0x10 [ 244.022886][ T8392] ? dynamic_dname+0x141/0x1b0 [ 244.027649][ T8392] should_fail_ex+0x3b0/0x4e0 [ 244.032330][ T8392] ? tomoyo_encode+0x26f/0x540 [ 244.037090][ T8392] should_failslab+0xac/0x100 [ 244.041762][ T8392] ? tomoyo_encode+0x26f/0x540 [ 244.046521][ T8392] __kmalloc_noprof+0xd8/0x400 [ 244.051301][ T8392] tomoyo_encode+0x26f/0x540 [ 244.055905][ T8392] ? __pfx_sockfs_dname+0x10/0x10 [ 244.060927][ T8392] tomoyo_realpath_from_path+0x59e/0x5e0 [ 244.066572][ T8392] tomoyo_path_number_perm+0x23a/0x880 [ 244.072037][ T8392] ? tomoyo_path_number_perm+0x208/0x880 [ 244.077666][ T8392] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 244.083672][ T8392] ? __fget_files+0x29/0x470 [ 244.088259][ T8392] ? __fget_files+0x3f3/0x470 [ 244.092933][ T8392] security_file_ioctl+0xc6/0x2a0 [ 244.097962][ T8392] __se_sys_ioctl+0x47/0x170 [ 244.102553][ T8392] do_syscall_64+0xf3/0x230 [ 244.107054][ T8392] ? clear_bhb_loop+0x35/0x90 [ 244.111728][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.117624][ T8392] RIP: 0033:0x7fd8c1b7dff9 [ 244.122037][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.141637][ T8392] RSP: 002b:00007fd8c2a21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.150047][ T8392] RAX: ffffffffffffffda RBX: 00007fd8c1d35f80 RCX: 00007fd8c1b7dff9 [ 244.158012][ T8392] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 244.165975][ T8392] RBP: 00007fd8c2a21090 R08: 0000000000000000 R09: 0000000000000000 [ 244.173938][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.181902][ T8392] R13: 0000000000000000 R14: 00007fd8c1d35f80 R15: 00007ffee72dc028 [ 244.189878][ T8392] [ 244.240028][ T8392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.341420][ T8405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1084'. [ 244.356167][ T8405] netlink: 5684 bytes leftover after parsing attributes in process `syz.1.1084'. [ 244.507022][ T8417] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1090'. [ 244.621938][ T8425] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.917168][ T8433] FAULT_INJECTION: forcing a failure. [ 244.917168][ T8433] name failslab, interval 1, probability 0, space 0, times 0 [ 244.941111][ T8434] FAULT_INJECTION: forcing a failure. [ 244.941111][ T8434] name failslab, interval 1, probability 0, space 0, times 0 [ 244.975466][ T8433] CPU: 0 UID: 0 PID: 8433 Comm: syz.2.1094 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 244.986217][ T8433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 244.996303][ T8433] Call Trace: [ 244.999609][ T8433] [ 245.002555][ T8433] dump_stack_lvl+0x241/0x360 [ 245.007252][ T8433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.012479][ T8433] ? __pfx__printk+0x10/0x10 [ 245.017100][ T8433] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 245.023108][ T8433] ? __pfx___might_resched+0x10/0x10 [ 245.028429][ T8433] should_fail_ex+0x3b0/0x4e0 [ 245.033152][ T8433] should_failslab+0xac/0x100 [ 245.037848][ T8433] ? __alloc_skb+0x1c3/0x440 [ 245.042458][ T8433] kmem_cache_alloc_node_noprof+0x71/0x320 [ 245.048292][ T8433] __alloc_skb+0x1c3/0x440 [ 245.052736][ T8433] ? dccp_feat_finalise_settings+0x34d/0x3d0 [ 245.058762][ T8433] ? __pfx___alloc_skb+0x10/0x10 [ 245.063724][ T8433] ? ipv4_mtu+0x2bc/0x3d0 [ 245.068088][ T8433] dccp_connect+0x3d8/0x890 [ 245.072624][ T8433] dccp_v4_connect+0xbc9/0x1380 [ 245.077511][ T8433] __inet_stream_connect+0x262/0xf30 [ 245.082831][ T8433] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.089199][ T8433] ? __local_bh_enable_ip+0x168/0x200 [ 245.094683][ T8433] ? lockdep_hardirqs_on+0x99/0x150 [ 245.099905][ T8433] ? __pfx___inet_stream_connect+0x10/0x10 [ 245.105740][ T8433] ? __local_bh_enable_ip+0x168/0x200 [ 245.111148][ T8433] ? inet_stream_connect+0x50/0xa0 [ 245.116292][ T8433] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 245.122051][ T8433] inet_stream_connect+0x65/0xa0 [ 245.127020][ T8433] ? __pfx_inet_stream_connect+0x10/0x10 [ 245.132679][ T8433] __sys_connect+0x2d1/0x300 [ 245.137284][ T8433] ? __pfx___sys_connect+0x10/0x10 [ 245.142421][ T8433] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.148784][ T8433] ? do_syscall_64+0x100/0x230 [ 245.153580][ T8433] __x64_sys_connect+0x7a/0x90 [ 245.158366][ T8433] do_syscall_64+0xf3/0x230 [ 245.162891][ T8433] ? clear_bhb_loop+0x35/0x90 [ 245.167579][ T8433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.173490][ T8433] RIP: 0033:0x7ff1edf7dff9 [ 245.177932][ T8433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.197569][ T8433] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 245.206021][ T8433] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 245.214020][ T8433] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000009 [ 245.222027][ T8433] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 245.230028][ T8433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.238037][ T8433] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 245.246050][ T8433] [ 245.250297][ T8434] CPU: 1 UID: 0 PID: 8434 Comm: syz.4.1093 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 245.261022][ T8434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 245.271087][ T8434] Call Trace: [ 245.274365][ T8434] [ 245.277292][ T8434] dump_stack_lvl+0x241/0x360 [ 245.281977][ T8434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.287169][ T8434] ? __pfx__printk+0x10/0x10 [ 245.291757][ T8434] ? __pfx_lock_acquire+0x10/0x10 [ 245.296779][ T8434] ? nf_ct_pernet+0x45/0x270 [ 245.301367][ T8434] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.307348][ T8434] should_fail_ex+0x3b0/0x4e0 [ 245.312032][ T8434] ? __nf_conntrack_alloc+0x8f/0x380 [ 245.317312][ T8434] should_failslab+0xac/0x100 [ 245.321985][ T8434] ? __nf_conntrack_alloc+0x8f/0x380 [ 245.327264][ T8434] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 245.332638][ T8434] __nf_conntrack_alloc+0x8f/0x380 [ 245.337746][ T8434] init_conntrack+0x3c3/0x1310 [ 245.342594][ T8434] ? __pfx_init_conntrack+0x10/0x10 [ 245.347789][ T8434] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 245.353766][ T8434] ? __local_bh_enable_ip+0x168/0x200 [ 245.359168][ T8434] nf_conntrack_in+0xd5c/0x1890 [ 245.364030][ T8434] ? __pfx_nf_conntrack_in+0x10/0x10 [ 245.369344][ T8434] ? __pfx_ipv6_conntrack_local+0x10/0x10 [ 245.375059][ T8434] nf_hook_slow+0xc3/0x220 [ 245.379479][ T8434] ? __ip6_local_out+0x4dc/0x800 [ 245.384411][ T8434] __ip6_local_out+0x6fa/0x800 [ 245.389172][ T8434] ? __pfx___ip6_local_out+0x10/0x10 [ 245.394459][ T8434] ? __pfx_dst_output+0x10/0x10 [ 245.399313][ T8434] ? ip6_make_skb+0x48b/0x530 [ 245.404075][ T8434] ip6_local_out+0x26/0x70 [ 245.408493][ T8434] ip6_send_skb+0x1b1/0x3b0 [ 245.412986][ T8434] ? ip6_send_skb+0xfd/0x3b0 [ 245.417568][ T8434] udp_v6_send_skb+0xbf5/0x1870 [ 245.422429][ T8434] udpv6_sendmsg+0x23bc/0x32b0 [ 245.427204][ T8434] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 245.432748][ T8434] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 245.437859][ T8434] ? __pfx___might_resched+0x10/0x10 [ 245.443151][ T8434] ? aa_sk_perm+0x96d/0xab0 [ 245.447647][ T8434] ? irqentry_exit+0x63/0x90 [ 245.452240][ T8434] ? sock_rps_record_flow+0x1a/0x400 [ 245.457528][ T8434] ? inet_send_prepare+0x21/0x260 [ 245.462548][ T8434] ? inet_send_prepare+0x5a/0x260 [ 245.467568][ T8434] __sock_sendmsg+0xef/0x270 [ 245.472160][ T8434] ____sys_sendmsg+0x52a/0x7e0 [ 245.476925][ T8434] ? __pfx_____sys_sendmsg+0x10/0x10 [ 245.482217][ T8434] __sys_sendmmsg+0x3ab/0x730 [ 245.486891][ T8434] ? __pfx___sys_sendmmsg+0x10/0x10 [ 245.492090][ T8434] ? __pfx_lock_release+0x10/0x10 [ 245.497107][ T8434] ? kstrtouint_from_user+0x128/0x190 [ 245.502491][ T8434] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 245.508642][ T8434] ? ksys_write+0x229/0x2b0 [ 245.513134][ T8434] ? __pfx_lock_release+0x10/0x10 [ 245.518159][ T8434] ? vfs_write+0x7bf/0xc90 [ 245.522572][ T8434] ? kmem_cache_free+0x1a2/0x420 [ 245.527506][ T8434] ? __mutex_unlock_slowpath+0x21d/0x750 [ 245.533399][ T8434] ? __fget_files+0x3f3/0x470 [ 245.538077][ T8434] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 245.544053][ T8434] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 245.550377][ T8434] ? do_syscall_64+0x100/0x230 [ 245.555140][ T8434] __x64_sys_sendmmsg+0xa0/0xb0 [ 245.559995][ T8434] do_syscall_64+0xf3/0x230 [ 245.564492][ T8434] ? clear_bhb_loop+0x35/0x90 [ 245.569166][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.575050][ T8434] RIP: 0033:0x7f3873f7dff9 [ 245.579477][ T8434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.599249][ T8434] RSP: 002b:00007f38739ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 245.607658][ T8434] RAX: ffffffffffffffda RBX: 00007f3874136058 RCX: 00007f3873f7dff9 [ 245.615624][ T8434] RDX: 00000000000004ff RSI: 00000000200092c0 RDI: 0000000000000004 [ 245.623593][ T8434] RBP: 00007f38739ff090 R08: 0000000000000000 R09: 0000000000000000 [ 245.631560][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.639521][ T8434] R13: 0000000000000000 R14: 00007f3874136058 R15: 00007fff60cf5078 [ 245.647501][ T8434] [ 245.864615][ T8438] FAULT_INJECTION: forcing a failure. [ 245.864615][ T8438] name failslab, interval 1, probability 0, space 0, times 0 [ 245.908215][ T8438] CPU: 0 UID: 0 PID: 8438 Comm: syz.0.1097 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 245.918971][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 245.929060][ T8438] Call Trace: [ 245.932361][ T8438] [ 245.935316][ T8438] dump_stack_lvl+0x241/0x360 [ 245.940023][ T8438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.945247][ T8438] ? __pfx__printk+0x10/0x10 [ 245.949861][ T8438] ? __kmalloc_noprof+0xb0/0x400 [ 245.954879][ T8438] ? __pfx___might_resched+0x10/0x10 [ 245.960194][ T8438] should_fail_ex+0x3b0/0x4e0 [ 245.964901][ T8438] ? security_sk_alloc+0x53/0x360 [ 245.969950][ T8438] should_failslab+0xac/0x100 [ 245.974650][ T8438] ? security_sk_alloc+0x53/0x360 [ 245.979695][ T8438] __kmalloc_noprof+0xd8/0x400 [ 245.984522][ T8438] ? sk_prot_alloc+0x58/0x210 [ 245.989225][ T8438] security_sk_alloc+0x53/0x360 [ 245.994104][ T8438] sk_prot_alloc+0xfa/0x210 [ 245.998634][ T8438] sk_alloc+0x38/0x370 [ 246.002724][ T8438] ? rcu_read_unlock+0x87/0xa0 [ 246.007516][ T8438] unix_create1+0xb4/0x7a0 [ 246.011973][ T8438] unix_create+0x14e/0x200 [ 246.016440][ T8438] ? __sock_create+0x337/0x940 [ 246.021264][ T8438] __sock_create+0x490/0x940 [ 246.025890][ T8438] __sys_socketpair+0x2ca/0x720 [ 246.030768][ T8438] ? __pfx___sys_socketpair+0x10/0x10 [ 246.036162][ T8438] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.042174][ T8438] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.048533][ T8438] __x64_sys_socketpair+0x9b/0xb0 [ 246.053665][ T8438] do_syscall_64+0xf3/0x230 [ 246.058191][ T8438] ? clear_bhb_loop+0x35/0x90 [ 246.062891][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.068808][ T8438] RIP: 0033:0x7fd8c1b7dff9 [ 246.073241][ T8438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.092867][ T8438] RSP: 002b:00007fd8c2a21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 246.101315][ T8438] RAX: ffffffffffffffda RBX: 00007fd8c1d35f80 RCX: 00007fd8c1b7dff9 [ 246.109312][ T8438] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 246.117308][ T8438] RBP: 00007fd8c2a21090 R08: 0000000000000000 R09: 0000000000000000 [ 246.125312][ T8438] R10: 0000000020000600 R11: 0000000000000246 R12: 0000000000000001 [ 246.133393][ T8438] R13: 0000000000000000 R14: 00007fd8c1d35f80 R15: 00007ffee72dc028 [ 246.141414][ T8438] [ 248.286555][ T8446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1100'. [ 248.313288][ T8448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 248.477540][ T8454] FAULT_INJECTION: forcing a failure. [ 248.477540][ T8454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.514057][ T8456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 248.543898][ T8454] CPU: 0 UID: 0 PID: 8454 Comm: syz.0.1104 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 248.554645][ T8454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.564781][ T8454] Call Trace: [ 248.568084][ T8454] [ 248.571036][ T8454] dump_stack_lvl+0x241/0x360 [ 248.575743][ T8454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.580971][ T8454] ? __pfx__printk+0x10/0x10 [ 248.585591][ T8454] ? __pfx_lock_release+0x10/0x10 [ 248.590659][ T8454] should_fail_ex+0x3b0/0x4e0 [ 248.595373][ T8454] _copy_from_iter+0x1ed/0x1d60 [ 248.600249][ T8454] ? __virt_addr_valid+0x183/0x530 [ 248.605393][ T8454] ? __pfx_lock_release+0x10/0x10 [ 248.610456][ T8454] ? __alloc_skb+0x28f/0x440 [ 248.615074][ T8454] ? __pfx__copy_from_iter+0x10/0x10 [ 248.620394][ T8454] ? __virt_addr_valid+0x183/0x530 [ 248.625539][ T8454] ? __virt_addr_valid+0x183/0x530 [ 248.630681][ T8454] ? __virt_addr_valid+0x45f/0x530 [ 248.635821][ T8454] ? __check_object_size+0x48e/0x900 [ 248.641142][ T8454] netlink_sendmsg+0x73d/0xcb0 [ 248.645951][ T8454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.651266][ T8454] ? aa_sock_msg_perm+0x91/0x160 [ 248.656238][ T8454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 248.661570][ T8454] __sock_sendmsg+0x221/0x270 [ 248.666278][ T8454] ____sys_sendmsg+0x52a/0x7e0 [ 248.671073][ T8454] ? __pfx_____sys_sendmsg+0x10/0x10 [ 248.676399][ T8454] __sys_sendmsg+0x292/0x380 [ 248.681034][ T8454] ? __pfx___sys_sendmsg+0x10/0x10 [ 248.686187][ T8454] ? __pfx_vfs_write+0x10/0x10 [ 248.691042][ T8454] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 248.697405][ T8454] ? do_syscall_64+0x100/0x230 [ 248.702235][ T8454] ? do_syscall_64+0xb6/0x230 [ 248.706938][ T8454] do_syscall_64+0xf3/0x230 [ 248.711473][ T8454] ? clear_bhb_loop+0x35/0x90 [ 248.716202][ T8454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.722204][ T8454] RIP: 0033:0x7fd8c1b7dff9 [ 248.726653][ T8454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.746555][ T8454] RSP: 002b:00007fd8c2a21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.755002][ T8454] RAX: ffffffffffffffda RBX: 00007fd8c1d35f80 RCX: 00007fd8c1b7dff9 [ 248.763000][ T8454] RDX: 0000000024008084 RSI: 00000000200004c0 RDI: 0000000000000004 [ 248.771001][ T8454] RBP: 00007fd8c2a21090 R08: 0000000000000000 R09: 0000000000000000 [ 248.779009][ T8454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.787002][ T8454] R13: 0000000000000000 R14: 00007fd8c1d35f80 R15: 00007ffee72dc028 [ 248.795021][ T8454] [ 248.978893][ T8467] syzkaller1: entered promiscuous mode [ 248.992940][ T8467] syzkaller1: entered allmulticast mode [ 249.406845][ T8493] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.455840][ T8495] FAULT_INJECTION: forcing a failure. [ 249.455840][ T8495] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.470836][ T8495] CPU: 1 UID: 0 PID: 8495 Comm: syz.1.1119 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 249.481553][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.491637][ T8495] Call Trace: [ 249.494942][ T8495] [ 249.497893][ T8495] dump_stack_lvl+0x241/0x360 [ 249.502606][ T8495] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.507827][ T8495] ? __pfx__printk+0x10/0x10 [ 249.512446][ T8495] ? __pfx_lock_release+0x10/0x10 [ 249.517493][ T8495] should_fail_ex+0x3b0/0x4e0 [ 249.522195][ T8495] _copy_from_iter+0x1ed/0x1d60 [ 249.527059][ T8495] ? __virt_addr_valid+0x183/0x530 [ 249.532191][ T8495] ? __pfx_lock_release+0x10/0x10 [ 249.537260][ T8495] ? __alloc_skb+0x28f/0x440 [ 249.541957][ T8495] ? __pfx__copy_from_iter+0x10/0x10 [ 249.547325][ T8495] ? __virt_addr_valid+0x183/0x530 [ 249.552502][ T8495] ? __virt_addr_valid+0x183/0x530 [ 249.557708][ T8495] ? __virt_addr_valid+0x45f/0x530 [ 249.562890][ T8495] ? __check_object_size+0x48e/0x900 [ 249.568217][ T8495] netlink_sendmsg+0x73d/0xcb0 [ 249.573020][ T8495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.578347][ T8495] ? aa_sock_msg_perm+0x91/0x160 [ 249.583335][ T8495] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.588672][ T8495] __sock_sendmsg+0x221/0x270 [ 249.593388][ T8495] ____sys_sendmsg+0x52a/0x7e0 [ 249.598207][ T8495] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.603533][ T8495] __sys_sendmsg+0x292/0x380 [ 249.608152][ T8495] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.613309][ T8495] ? __pfx_vfs_write+0x10/0x10 [ 249.618120][ T8495] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.624479][ T8495] ? do_syscall_64+0x100/0x230 [ 249.629270][ T8495] ? do_syscall_64+0xb6/0x230 [ 249.633971][ T8495] do_syscall_64+0xf3/0x230 [ 249.638500][ T8495] ? clear_bhb_loop+0x35/0x90 [ 249.643202][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.649127][ T8495] RIP: 0033:0x7f94ce37dff9 [ 249.653563][ T8495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.664665][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1120'. [ 249.673270][ T8495] RSP: 002b:00007f94cf200038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.673303][ T8495] RAX: ffffffffffffffda RBX: 00007f94ce535f80 RCX: 00007f94ce37dff9 [ 249.673317][ T8495] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 249.673329][ T8495] RBP: 00007f94cf200090 R08: 0000000000000000 R09: 0000000000000000 [ 249.673340][ T8495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.673350][ T8495] R13: 0000000000000000 R14: 00007f94ce535f80 R15: 00007ffc4c86e8d8 [ 249.673376][ T8495] [ 249.683844][ T8507] Bluetooth: MGMT ver 1.23 [ 249.700451][ T8501] netlink: 5684 bytes leftover after parsing attributes in process `syz.0.1120'. [ 249.939009][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 249.948397][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 249.957792][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1124'. [ 250.060824][ T8511] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.186404][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 250.201246][ T8511] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.329497][ T8511] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.352556][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1130'. [ 250.480605][ T8511] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.550661][ T8530] lo speed is unknown, defaulting to 1000 [ 250.627308][ T8511] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.683343][ T8511] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.735683][ T8511] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.770447][ T8511] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.052896][ T8546] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1140'. [ 251.354924][ T8557] FAULT_INJECTION: forcing a failure. [ 251.354924][ T8557] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.370445][ T8557] CPU: 1 UID: 0 PID: 8557 Comm: syz.4.1144 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 251.381169][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.391335][ T8557] Call Trace: [ 251.394630][ T8557] [ 251.397574][ T8557] dump_stack_lvl+0x241/0x360 [ 251.402365][ T8557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.407582][ T8557] ? __pfx__printk+0x10/0x10 [ 251.412196][ T8557] ? __pfx_lock_release+0x10/0x10 [ 251.417276][ T8557] should_fail_ex+0x3b0/0x4e0 [ 251.421994][ T8557] _copy_from_iter+0x1ed/0x1d60 [ 251.426874][ T8557] ? __virt_addr_valid+0x183/0x530 [ 251.432016][ T8557] ? __pfx_lock_release+0x10/0x10 [ 251.437072][ T8557] ? __alloc_skb+0x28f/0x440 [ 251.441689][ T8557] ? __pfx__copy_from_iter+0x10/0x10 [ 251.447003][ T8557] ? __virt_addr_valid+0x183/0x530 [ 251.452135][ T8557] ? __virt_addr_valid+0x183/0x530 [ 251.457268][ T8557] ? __virt_addr_valid+0x45f/0x530 [ 251.462406][ T8557] ? __check_object_size+0x48e/0x900 [ 251.467723][ T8557] netlink_sendmsg+0x73d/0xcb0 [ 251.472526][ T8557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.478027][ T8557] ? aa_sock_msg_perm+0x91/0x160 [ 251.482993][ T8557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.488297][ T8557] __sock_sendmsg+0x221/0x270 [ 251.493004][ T8557] ____sys_sendmsg+0x52a/0x7e0 [ 251.497797][ T8557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.503118][ T8557] __sys_sendmsg+0x292/0x380 [ 251.507731][ T8557] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.512872][ T8557] ? __pfx_vfs_write+0x10/0x10 [ 251.517674][ T8557] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.524042][ T8557] ? do_syscall_64+0x100/0x230 [ 251.528841][ T8557] ? do_syscall_64+0xb6/0x230 [ 251.533540][ T8557] do_syscall_64+0xf3/0x230 [ 251.538051][ T8557] ? clear_bhb_loop+0x35/0x90 [ 251.542742][ T8557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.548638][ T8557] RIP: 0033:0x7f3873f7dff9 [ 251.553057][ T8557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.572658][ T8557] RSP: 002b:00007f3874c99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.581080][ T8557] RAX: ffffffffffffffda RBX: 00007f3874135f80 RCX: 00007f3873f7dff9 [ 251.589052][ T8557] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 251.597061][ T8557] RBP: 00007f3874c99090 R08: 0000000000000000 R09: 0000000000000000 [ 251.605029][ T8557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.613252][ T8557] R13: 0000000000000000 R14: 00007f3874135f80 R15: 00007fff60cf5078 [ 251.621281][ T8557] [ 251.943481][ T8565] bond0: Unable to set up delay as MII monitoring is disabled [ 252.028978][ T8565] veth0: entered promiscuous mode [ 252.057112][ T8565] veth0: left promiscuous mode [ 252.146908][ T8575] lo speed is unknown, defaulting to 1000 [ 252.277570][ T8577] lo speed is unknown, defaulting to 1000 [ 252.326840][ T8582] xt_SECMARK: invalid mode: 0 [ 252.506403][ T8591] FAULT_INJECTION: forcing a failure. [ 252.506403][ T8591] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.531188][ T8592] FAULT_INJECTION: forcing a failure. [ 252.531188][ T8592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.534680][ T8591] CPU: 0 UID: 0 PID: 8591 Comm: syz.4.1156 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 252.554948][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 252.565027][ T8591] Call Trace: [ 252.568310][ T8591] [ 252.571496][ T8591] dump_stack_lvl+0x241/0x360 [ 252.576177][ T8591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.581460][ T8591] ? __pfx__printk+0x10/0x10 [ 252.586165][ T8591] ? __pfx_lock_release+0x10/0x10 [ 252.591379][ T8591] should_fail_ex+0x3b0/0x4e0 [ 252.596061][ T8591] _copy_from_iter+0x1ed/0x1d60 [ 252.600906][ T8591] ? __virt_addr_valid+0x183/0x530 [ 252.606018][ T8591] ? __pfx_lock_release+0x10/0x10 [ 252.611154][ T8591] ? __alloc_skb+0x28f/0x440 [ 252.615739][ T8591] ? __pfx__copy_from_iter+0x10/0x10 [ 252.621059][ T8591] ? __virt_addr_valid+0x183/0x530 [ 252.626165][ T8591] ? __virt_addr_valid+0x183/0x530 [ 252.631272][ T8591] ? __virt_addr_valid+0x45f/0x530 [ 252.636382][ T8591] ? __check_object_size+0x48e/0x900 [ 252.641670][ T8591] netlink_sendmsg+0x73d/0xcb0 [ 252.646446][ T8591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.651729][ T8591] ? aa_sock_msg_perm+0x91/0x160 [ 252.656672][ T8591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.661961][ T8591] __sock_sendmsg+0x221/0x270 [ 252.666643][ T8591] ____sys_sendmsg+0x52a/0x7e0 [ 252.671415][ T8591] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.676714][ T8591] __sys_sendmsg+0x292/0x380 [ 252.681304][ T8591] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.686425][ T8591] ? __pfx_vfs_write+0x10/0x10 [ 252.691210][ T8591] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.697555][ T8591] ? do_syscall_64+0x100/0x230 [ 252.702319][ T8591] ? do_syscall_64+0xb6/0x230 [ 252.706996][ T8591] do_syscall_64+0xf3/0x230 [ 252.711502][ T8591] ? clear_bhb_loop+0x35/0x90 [ 252.716193][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.722098][ T8591] RIP: 0033:0x7f3873f7dff9 [ 252.726518][ T8591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.746138][ T8591] RSP: 002b:00007f3874c99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.754553][ T8591] RAX: ffffffffffffffda RBX: 00007f3874135f80 RCX: 00007f3873f7dff9 [ 252.762543][ T8591] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 252.770526][ T8591] RBP: 00007f3874c99090 R08: 0000000000000000 R09: 0000000000000000 [ 252.778539][ T8591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.786546][ T8591] R13: 0000000000000000 R14: 00007f3874135f80 R15: 00007fff60cf5078 [ 252.794559][ T8591] [ 252.799547][ T8592] CPU: 1 UID: 0 PID: 8592 Comm: syz.1.1155 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 252.810381][ T8592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 252.820471][ T8592] Call Trace: [ 252.823793][ T8592] [ 252.826760][ T8592] dump_stack_lvl+0x241/0x360 [ 252.831469][ T8592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.836702][ T8592] ? __pfx__printk+0x10/0x10 [ 252.841328][ T8592] ? __pfx_lock_release+0x10/0x10 [ 252.846398][ T8592] should_fail_ex+0x3b0/0x4e0 [ 252.851137][ T8592] _copy_to_iter+0x434/0x1d60 [ 252.855835][ T8592] ? __virt_addr_valid+0x183/0x530 [ 252.860985][ T8592] ? _copy_to_iter+0x539/0x1d60 [ 252.865873][ T8592] ? __pfx__copy_to_iter+0x10/0x10 [ 252.871039][ T8592] ? __virt_addr_valid+0x183/0x530 [ 252.876176][ T8592] ? __virt_addr_valid+0x183/0x530 [ 252.881322][ T8592] ? __virt_addr_valid+0x45f/0x530 [ 252.886463][ T8592] ? __phys_addr_symbol+0x2f/0x70 [ 252.891508][ T8592] ? __check_object_size+0x48e/0x900 [ 252.896819][ T8592] __skb_datagram_iter+0x107/0x900 [ 252.901965][ T8592] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 252.907626][ T8592] ? __check_object_size+0x48e/0x900 [ 252.912938][ T8592] __skb_datagram_iter+0x6e4/0x900 [ 252.918083][ T8592] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 252.923745][ T8592] skb_copy_datagram_iter+0xd1/0x250 [ 252.929060][ T8592] rawv6_recvmsg+0x484/0xeb0 [ 252.933690][ T8592] ? __pfx_rawv6_recvmsg+0x10/0x10 [ 252.938834][ T8592] ? aa_sk_perm+0x96d/0xab0 [ 252.943369][ T8592] ? iovec_from_user+0x87/0x240 [ 252.948251][ T8592] sock_common_recvmsg+0x123/0x250 [ 252.953398][ T8592] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 252.959159][ T8592] ? iovec_from_user+0x1b0/0x240 [ 252.964125][ T8592] ? aa_sock_msg_perm+0x91/0x160 [ 252.969088][ T8592] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 252.974405][ T8592] ? __pfx_sock_common_recvmsg+0x10/0x10 [ 252.980071][ T8592] sock_recvmsg+0x22f/0x280 [ 252.984598][ T8592] ____sys_recvmsg+0x1c6/0x480 [ 252.989391][ T8592] ? __pfx_____sys_recvmsg+0x10/0x10 [ 252.994718][ T8592] __sys_recvmsg+0x2e6/0x3d0 [ 252.999335][ T8592] ? __pfx___sys_recvmsg+0x10/0x10 [ 253.004466][ T8592] ? __mutex_unlock_slowpath+0x21d/0x750 [ 253.010150][ T8592] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.016513][ T8592] ? do_syscall_64+0x100/0x230 [ 253.021299][ T8592] ? do_syscall_64+0xb6/0x230 [ 253.025982][ T8592] do_syscall_64+0xf3/0x230 [ 253.030485][ T8592] ? clear_bhb_loop+0x35/0x90 [ 253.035207][ T8592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.041114][ T8592] RIP: 0033:0x7f94ce37dff9 [ 253.045526][ T8592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.065129][ T8592] RSP: 002b:00007f94cf200038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 253.073541][ T8592] RAX: ffffffffffffffda RBX: 00007f94ce535f80 RCX: 00007f94ce37dff9 [ 253.081505][ T8592] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 253.089471][ T8592] RBP: 00007f94cf200090 R08: 0000000000000000 R09: 0000000000000000 [ 253.097438][ T8592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.105404][ T8592] R13: 0000000000000000 R14: 00007f94ce535f80 R15: 00007ffc4c86e8d8 [ 253.113379][ T8592] [ 253.459368][ T8606] FAULT_INJECTION: forcing a failure. [ 253.459368][ T8606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.509415][ T8606] CPU: 1 UID: 0 PID: 8606 Comm: syz.3.1161 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 253.520152][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.530217][ T8606] Call Trace: [ 253.533493][ T8606] [ 253.536421][ T8606] dump_stack_lvl+0x241/0x360 [ 253.541118][ T8606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.546328][ T8606] ? __pfx__printk+0x10/0x10 [ 253.550922][ T8606] ? __pfx_lock_release+0x10/0x10 [ 253.555956][ T8606] should_fail_ex+0x3b0/0x4e0 [ 253.560634][ T8606] _copy_from_iter+0x1ed/0x1d60 [ 253.565480][ T8606] ? __virt_addr_valid+0x183/0x530 [ 253.570588][ T8606] ? __pfx_lock_release+0x10/0x10 [ 253.575620][ T8606] ? __alloc_skb+0x28f/0x440 [ 253.580202][ T8606] ? __pfx__copy_from_iter+0x10/0x10 [ 253.585483][ T8606] ? __virt_addr_valid+0x183/0x530 [ 253.590589][ T8606] ? __virt_addr_valid+0x183/0x530 [ 253.595690][ T8606] ? __virt_addr_valid+0x45f/0x530 [ 253.600796][ T8606] ? __check_object_size+0x48e/0x900 [ 253.606077][ T8606] netlink_sendmsg+0x73d/0xcb0 [ 253.610842][ T8606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.616136][ T8606] ? aa_sock_msg_perm+0x91/0x160 [ 253.621070][ T8606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.626349][ T8606] __sock_sendmsg+0x221/0x270 [ 253.631030][ T8606] ____sys_sendmsg+0x52a/0x7e0 [ 253.635795][ T8606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.641085][ T8606] __sys_sendmsg+0x292/0x380 [ 253.645672][ T8606] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.650787][ T8606] ? __pfx_vfs_write+0x10/0x10 [ 253.655562][ T8606] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.661893][ T8606] ? do_syscall_64+0x100/0x230 [ 253.666655][ T8606] ? do_syscall_64+0xb6/0x230 [ 253.671330][ T8606] do_syscall_64+0xf3/0x230 [ 253.675829][ T8606] ? clear_bhb_loop+0x35/0x90 [ 253.680512][ T8606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.686398][ T8606] RIP: 0033:0x7fd6f937dff9 [ 253.690814][ T8606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.710416][ T8606] RSP: 002b:00007fd6fa08e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.718834][ T8606] RAX: ffffffffffffffda RBX: 00007fd6f9535f80 RCX: 00007fd6f937dff9 [ 253.726893][ T8606] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 253.734861][ T8606] RBP: 00007fd6fa08e090 R08: 0000000000000000 R09: 0000000000000000 [ 253.742833][ T8606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.750805][ T8606] R13: 0000000000000000 R14: 00007fd6f9535f80 R15: 00007ffebfa2d388 [ 253.758783][ T8606] [ 253.918638][ T8610] __nla_validate_parse: 4 callbacks suppressed [ 253.918661][ T8610] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1164'. [ 254.023225][ T8612] netlink: 'syz.3.1165': attribute type 10 has an invalid length. [ 254.082490][ T8612] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 254.195046][ T8621] netlink: 'syz.4.1169': attribute type 7 has an invalid length. [ 254.463937][ T8629] lo speed is unknown, defaulting to 1000 [ 254.599946][ T8636] netlink: 'syz.4.1174': attribute type 10 has an invalid length. [ 254.621522][ T8636] bridge0: port 3(team0) entered disabled state [ 254.639478][ T8636] team0: left allmulticast mode [ 254.645408][ T8636] team_slave_0: left allmulticast mode [ 254.664027][ T8636] team_slave_1: left allmulticast mode [ 254.679875][ T8636] team0: left promiscuous mode [ 254.691877][ T8636] team_slave_0: left promiscuous mode [ 254.705769][ T8636] team_slave_1: left promiscuous mode [ 254.720819][ T8636] bridge0: port 3(team0) entered disabled state [ 254.743758][ T8636] batman_adv: batadv0: Adding interface: team0 [ 254.756998][ T8636] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.794594][ T8636] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 254.823287][ T8637] netlink: 'syz.4.1174': attribute type 10 has an invalid length. [ 254.858183][ T8637] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1174'. [ 254.868749][ T8637] team0: entered promiscuous mode [ 254.874483][ T8637] team_slave_0: entered promiscuous mode [ 254.881529][ T8637] team_slave_1: entered promiscuous mode [ 254.889832][ T8637] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.897065][ T8637] batman_adv: batadv0: Interface activated: team0 [ 254.904475][ T8637] batman_adv: batadv0: Interface deactivated: team0 [ 254.911848][ T8637] batman_adv: batadv0: Removing interface: team0 [ 254.944528][ T8637] bridge0: port 3(team0) entered blocking state [ 254.953154][ T8637] bridge0: port 3(team0) entered disabled state [ 254.966177][ T8637] team0: entered allmulticast mode [ 254.972042][ T8637] team_slave_0: entered allmulticast mode [ 254.984867][ T8637] team_slave_1: entered allmulticast mode [ 254.993242][ T8637] bridge0: port 3(team0) entered blocking state [ 254.999689][ T8637] bridge0: port 3(team0) entered forwarding state [ 255.409302][ T8642] netlink: 'syz.4.1176': attribute type 10 has an invalid length. [ 255.436483][ T8642] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1176'. [ 255.501081][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1175'. [ 255.677212][ T8652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1179'. [ 255.688725][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1177'. [ 255.710806][ T8651] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1180'. [ 255.731503][ T8651] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1180'. [ 255.768624][ T8651] xt_SECMARK: invalid mode: 0 [ 255.991937][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.002249][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.018584][ T8658] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.058972][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 256.117334][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1186'. [ 256.148550][ T54] Bluetooth: hci1: command 0x0405 tx timeout [ 256.264047][ T8658] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.654137][ T8658] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.770304][ T8658] bond0: (slave netdevsim0): Releasing backup interface [ 256.787780][ T8658] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.954826][ T8692] netlink: 'syz.2.1195': attribute type 10 has an invalid length. [ 256.991783][ T8693] netlink: 'syz.4.1196': attribute type 7 has an invalid length. [ 257.042718][ T8658] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.122895][ T8658] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.155271][ T8658] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.185499][ T8658] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.645046][ T8715] netlink: 'syz.0.1204': attribute type 11 has an invalid length. [ 258.169341][ T8724] netlink: 'syz.4.1206': attribute type 29 has an invalid length. [ 258.214806][ T8724] netlink: 'syz.4.1206': attribute type 29 has an invalid length. [ 258.229174][ T8726] ipt_REJECT: TCP_RESET invalid for non-tcp [ 258.538119][ T8732] netlink: 'syz.3.1208': attribute type 7 has an invalid length. [ 258.720379][ T8735] batman_adv: batadv0: Adding interface: team0 [ 258.726604][ T8735] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.914973][ T8735] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 258.976404][ T8738] __nla_validate_parse: 9 callbacks suppressed [ 258.976424][ T8738] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1210'. [ 259.101536][ T8738] team0: entered promiscuous mode [ 259.148696][ T8738] team_slave_0: entered promiscuous mode [ 259.191487][ T8738] team_slave_1: entered promiscuous mode [ 259.240389][ T8738] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.276934][ T8757] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1214'. [ 259.300790][ T8738] batman_adv: batadv0: Interface activated: team0 [ 259.331856][ T8738] batman_adv: batadv0: Interface deactivated: team0 [ 259.340219][ T8757] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1214'. [ 259.390355][ T8738] batman_adv: batadv0: Removing interface: team0 [ 259.424378][ T8761] xt_SECMARK: invalid mode: 0 [ 259.485538][ T8738] bridge0: port 3(team0) entered blocking state [ 259.526003][ T8738] bridge0: port 3(team0) entered disabled state [ 259.556076][ T8738] team0: entered allmulticast mode [ 259.561445][ T8738] team_slave_0: entered allmulticast mode [ 259.567335][ T8738] team_slave_1: entered allmulticast mode [ 259.597131][ T8738] bridge0: port 3(team0) entered blocking state [ 259.603587][ T8738] bridge0: port 3(team0) entered forwarding state [ 259.629246][ T8766] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1215'. [ 259.648201][ T8766] netlink: 732 bytes leftover after parsing attributes in process `syz.4.1215'. [ 259.702386][ T8770] xt_SECMARK: invalid mode: 0 [ 259.862690][ T8774] lo speed is unknown, defaulting to 1000 [ 260.070128][ T8790] validate_nla: 2 callbacks suppressed [ 260.070149][ T8790] netlink: 'syz.3.1222': attribute type 7 has an invalid length. [ 260.313622][ T8799] hsr0: entered promiscuous mode [ 260.438446][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 260.538769][ T8810] netlink: 5684 bytes leftover after parsing attributes in process `syz.4.1226'. [ 260.733555][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1232'. [ 260.777144][ T8827] bM: renamed from lo (while UP) [ 260.818828][ T8830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1230'. [ 260.991146][ T8827] bM: entered allmulticast mode [ 261.208682][ T8845] FAULT_INJECTION: forcing a failure. [ 261.208682][ T8845] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.284435][ T8845] CPU: 0 UID: 0 PID: 8845 Comm: syz.2.1236 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 261.295191][ T8845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.305283][ T8845] Call Trace: [ 261.308612][ T8845] [ 261.311582][ T8845] dump_stack_lvl+0x241/0x360 [ 261.316300][ T8845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.321600][ T8845] ? __pfx__printk+0x10/0x10 [ 261.326241][ T8845] ? __pfx_lock_release+0x10/0x10 [ 261.331322][ T8845] should_fail_ex+0x3b0/0x4e0 [ 261.336044][ T8845] _copy_from_user+0x2f/0xe0 [ 261.340674][ T8845] __sys_bpf+0x1a4/0x810 [ 261.344949][ T8845] ? __pfx___sys_bpf+0x10/0x10 [ 261.349847][ T8845] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 261.355874][ T8845] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 261.362257][ T8845] ? do_syscall_64+0x100/0x230 [ 261.367069][ T8845] __x64_sys_bpf+0x7c/0x90 [ 261.371522][ T8845] do_syscall_64+0xf3/0x230 [ 261.376062][ T8845] ? clear_bhb_loop+0x35/0x90 [ 261.380787][ T8845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.386713][ T8845] RIP: 0033:0x7ff1edf7dff9 [ 261.391155][ T8845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.410792][ T8845] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.419250][ T8845] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 261.427264][ T8845] RDX: 0000000000000020 RSI: 0000000020000300 RDI: 0000000000000002 [ 261.435272][ T8845] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 261.443278][ T8845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.451283][ T8845] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 261.459301][ T8845] [ 262.612967][ T8897] netlink: 'syz.3.1250': attribute type 11 has an invalid length. [ 263.424971][ T8909] veth1_macvtap: left promiscuous mode [ 263.434630][ T8909] macsec0: entered promiscuous mode [ 263.443187][ T8909] macsec0: entered allmulticast mode [ 263.463032][ T8909] veth1_macvtap: entered promiscuous mode [ 263.483686][ T8909] veth1_macvtap: entered allmulticast mode [ 263.490480][ T8909] macsec0: left promiscuous mode [ 263.495626][ T8909] macsec0: left allmulticast mode [ 263.501181][ T8909] veth1_macvtap: left allmulticast mode [ 263.660784][ T8920] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 263.995565][ T8936] vlan0: entered promiscuous mode [ 264.751146][ T8945] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1268'. [ 264.778615][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1268'. [ 265.056549][ T54] Bluetooth: hci1: command 0x0405 tx timeout [ 265.220501][ T8982] FAULT_INJECTION: forcing a failure. [ 265.220501][ T8982] name failslab, interval 1, probability 0, space 0, times 0 [ 265.267877][ T8982] CPU: 1 UID: 0 PID: 8982 Comm: syz.4.1281 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 265.278635][ T8982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.288719][ T8982] Call Trace: [ 265.292021][ T8982] [ 265.294971][ T8982] dump_stack_lvl+0x241/0x360 [ 265.299682][ T8982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.304906][ T8982] ? __pfx__printk+0x10/0x10 [ 265.309533][ T8982] ? ref_tracker_alloc+0x332/0x490 [ 265.314671][ T8982] should_fail_ex+0x3b0/0x4e0 [ 265.319384][ T8982] ? skb_clone+0x20c/0x390 [ 265.323826][ T8982] should_failslab+0xac/0x100 [ 265.328529][ T8982] ? skb_clone+0x20c/0x390 [ 265.332968][ T8982] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 265.338367][ T8982] skb_clone+0x20c/0x390 [ 265.342641][ T8982] __netlink_deliver_tap+0x3cc/0x7c0 [ 265.347962][ T8982] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.353188][ T8982] netlink_deliver_tap+0x19d/0x1b0 [ 265.358323][ T8982] netlink_unicast+0x7c4/0x990 [ 265.363130][ T8982] ? __pfx_netlink_unicast+0x10/0x10 [ 265.368441][ T8982] ? __virt_addr_valid+0x183/0x530 [ 265.373573][ T8982] ? __check_object_size+0x48e/0x900 [ 265.378864][ T8982] netlink_sendmsg+0x8e4/0xcb0 [ 265.383632][ T8982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.389002][ T8982] ? aa_sock_msg_perm+0x91/0x160 [ 265.393939][ T8982] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.399218][ T8982] __sock_sendmsg+0x221/0x270 [ 265.403902][ T8982] ____sys_sendmsg+0x52a/0x7e0 [ 265.408668][ T8982] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.413967][ T8982] __sys_sendmsg+0x292/0x380 [ 265.418558][ T8982] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.423702][ T8982] ? __pfx_vfs_write+0x10/0x10 [ 265.428481][ T8982] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.434807][ T8982] ? do_syscall_64+0x100/0x230 [ 265.439571][ T8982] ? do_syscall_64+0xb6/0x230 [ 265.444248][ T8982] do_syscall_64+0xf3/0x230 [ 265.448748][ T8982] ? clear_bhb_loop+0x35/0x90 [ 265.453426][ T8982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.459314][ T8982] RIP: 0033:0x7f3873f7dff9 [ 265.463725][ T8982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.483417][ T8982] RSP: 002b:00007f3874c99038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.491831][ T8982] RAX: ffffffffffffffda RBX: 00007f3874135f80 RCX: 00007f3873f7dff9 [ 265.499796][ T8982] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 265.507766][ T8982] RBP: 00007f3874c99090 R08: 0000000000000000 R09: 0000000000000000 [ 265.515728][ T8982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.523703][ T8982] R13: 0000000000000000 R14: 00007f3874135f80 R15: 00007fff60cf5078 [ 265.531693][ T8982] [ 265.537746][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'. [ 265.565202][ T8994] netlink: 5684 bytes leftover after parsing attributes in process `syz.2.1285'. [ 265.719315][ T8998] FAULT_INJECTION: forcing a failure. [ 265.719315][ T8998] name failslab, interval 1, probability 0, space 0, times 0 [ 265.732718][ T8998] CPU: 1 UID: 0 PID: 8998 Comm: syz.0.1288 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 265.743431][ T8998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.753601][ T8998] Call Trace: [ 265.756899][ T8998] [ 265.759849][ T8998] dump_stack_lvl+0x241/0x360 [ 265.764572][ T8998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.769812][ T8998] ? __pfx__printk+0x10/0x10 [ 265.774445][ T8998] ? ref_tracker_alloc+0x332/0x490 [ 265.779581][ T8998] should_fail_ex+0x3b0/0x4e0 [ 265.784292][ T8998] ? skb_clone+0x20c/0x390 [ 265.788736][ T8998] should_failslab+0xac/0x100 [ 265.793426][ T8998] ? skb_clone+0x20c/0x390 [ 265.797845][ T8998] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 265.803228][ T8998] skb_clone+0x20c/0x390 [ 265.807474][ T8998] __netlink_deliver_tap+0x3cc/0x7c0 [ 265.812765][ T8998] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.817962][ T8998] netlink_deliver_tap+0x19d/0x1b0 [ 265.823077][ T8998] netlink_unicast+0x7c4/0x990 [ 265.827845][ T8998] ? __pfx_netlink_unicast+0x10/0x10 [ 265.833137][ T8998] ? __virt_addr_valid+0x183/0x530 [ 265.838248][ T8998] ? __check_object_size+0x48e/0x900 [ 265.843533][ T8998] netlink_sendmsg+0x8e4/0xcb0 [ 265.848299][ T8998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.853583][ T8998] ? aa_sock_msg_perm+0x91/0x160 [ 265.858521][ T8998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.863889][ T8998] __sock_sendmsg+0x221/0x270 [ 265.868567][ T8998] ____sys_sendmsg+0x52a/0x7e0 [ 265.873332][ T8998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.878624][ T8998] __sys_sendmsg+0x292/0x380 [ 265.883216][ T8998] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.888349][ T8998] ? __pfx_vfs_write+0x10/0x10 [ 265.893159][ T8998] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.899504][ T8998] ? do_syscall_64+0x100/0x230 [ 265.904276][ T8998] ? do_syscall_64+0xb6/0x230 [ 265.908958][ T8998] do_syscall_64+0xf3/0x230 [ 265.913471][ T8998] ? clear_bhb_loop+0x35/0x90 [ 265.918157][ T8998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.924051][ T8998] RIP: 0033:0x7fd8c1b7dff9 [ 265.928464][ T8998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.948178][ T8998] RSP: 002b:00007fd8c2a21038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.956606][ T8998] RAX: ffffffffffffffda RBX: 00007fd8c1d35f80 RCX: 00007fd8c1b7dff9 [ 265.964578][ T8998] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 265.972549][ T8998] RBP: 00007fd8c2a21090 R08: 0000000000000000 R09: 0000000000000000 [ 265.980515][ T8998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.988481][ T8998] R13: 0000000000000000 R14: 00007fd8c1d35f80 R15: 00007ffee72dc028 [ 265.996458][ T8998] [ 266.515617][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.656748][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.963786][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 266.975625][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 266.996452][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 267.004847][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 267.013785][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 267.021485][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 267.140432][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.256591][ T9007] lo speed is unknown, defaulting to 1000 [ 267.605115][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.631633][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.671492][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.748534][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.833731][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.877526][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.913786][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.954268][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.980315][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.090366][ T9039] bridge3: entered promiscuous mode [ 268.607816][ T9007] chnl_net:caif_netlink_parms(): no params data found [ 268.963501][ T9007] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.973474][ T9007] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.984446][ T9007] bridge_slave_0: entered allmulticast mode [ 268.994393][ T9007] bridge_slave_0: entered promiscuous mode [ 269.066484][ T9007] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.073910][ T9007] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.081255][ T9007] bridge_slave_1: entered allmulticast mode [ 269.088372][ T9007] bridge_slave_1: entered promiscuous mode [ 269.095439][ T52] team0: left allmulticast mode [ 269.108474][ T5234] Bluetooth: hci0: command tx timeout [ 269.109588][ T52] team_slave_0: left allmulticast mode [ 269.120033][ T52] team_slave_1: left allmulticast mode [ 269.143877][ T52] bridge0: port 3(team0) entered disabled state [ 269.164604][ T52] bridge_slave_1: left allmulticast mode [ 269.170939][ T52] bridge_slave_1: left promiscuous mode [ 269.176677][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.185494][ T52] bridge_slave_0: left allmulticast mode [ 269.191761][ T52] bridge_slave_0: left promiscuous mode [ 269.197491][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.575228][ T52] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 269.627170][ T6357] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.636539][ T6357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.650853][ T6357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.669890][ T6357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.681812][ T6357] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.689539][ T6357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.858500][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.874833][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.886076][ T52] bond0 (unregistering): Released all slaves [ 269.926582][ T9007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.059741][ T9007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.109487][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1318'. [ 270.194672][ T9090] lo speed is unknown, defaulting to 1000 [ 270.199732][ T9007] team0: Port device team_slave_0 added [ 270.207082][ T9112] netlink: 5684 bytes leftover after parsing attributes in process `syz.3.1318'. [ 270.312261][ T9007] team0: Port device team_slave_1 added [ 270.444544][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.478169][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.528127][ T9007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.549987][ T9007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.556976][ T9007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.610237][ T9007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.650459][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1324'. [ 270.726681][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.734389][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.743758][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.752152][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.774702][ T52] veth1_macvtap: left promiscuous mode [ 270.780446][ T52] veth0_macvtap: left promiscuous mode [ 270.786198][ T52] veth1_vlan: left promiscuous mode [ 270.792513][ T52] veth0_vlan: left promiscuous mode [ 271.188415][ T5234] Bluetooth: hci0: command 0x041b tx timeout [ 271.334197][ T52] team_slave_1 (unregistering): left promiscuous mode [ 271.346921][ T52] team0 (unregistering): Port device team_slave_1 removed [ 271.418709][ T52] team_slave_0 (unregistering): left promiscuous mode [ 271.427527][ T52] team0 (unregistering): Port device team_slave_0 removed [ 271.748561][ T5234] Bluetooth: hci1: command tx timeout [ 271.957566][ T9123] syzkaller1: entered promiscuous mode [ 271.977355][ T9123] syzkaller1: entered allmulticast mode [ 272.255148][ T9007] hsr_slave_0: entered promiscuous mode [ 272.266121][ T9007] hsr_slave_1: entered promiscuous mode [ 272.457389][ T9090] chnl_net:caif_netlink_parms(): no params data found [ 272.520723][ T9143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1329'. [ 272.533944][ T9143] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 272.722796][ T9090] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.741517][ T9090] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.757861][ T9090] bridge_slave_0: entered allmulticast mode [ 272.767621][ T9090] bridge_slave_0: entered promiscuous mode [ 272.818475][ T9090] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.841539][ T9090] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.860565][ T9090] bridge_slave_1: entered allmulticast mode [ 272.877099][ T9090] bridge_slave_1: entered promiscuous mode [ 272.934639][ T9090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.956474][ T9090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.092500][ T9090] team0: Port device team_slave_0 added [ 273.121709][ T9090] team0: Port device team_slave_1 added [ 273.146189][ T9158] Bluetooth: MGMT ver 1.23 [ 273.189534][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.208283][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.241305][ T9090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.268612][ T9160] FAULT_INJECTION: forcing a failure. [ 273.268612][ T9160] name failslab, interval 1, probability 0, space 0, times 0 [ 273.281806][ T5234] Bluetooth: hci0: command 0x041b tx timeout [ 273.296102][ T9090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.304992][ T9090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.331316][ T9160] CPU: 0 UID: 0 PID: 9160 Comm: syz.2.1334 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 273.342025][ T9160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.352104][ T9160] Call Trace: [ 273.355401][ T9160] [ 273.358349][ T9160] dump_stack_lvl+0x241/0x360 [ 273.363055][ T9160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.368269][ T9160] ? __pfx__printk+0x10/0x10 [ 273.372862][ T9160] ? __kmalloc_noprof+0xb0/0x400 [ 273.377798][ T9160] ? __pfx___might_resched+0x10/0x10 [ 273.383083][ T9160] should_fail_ex+0x3b0/0x4e0 [ 273.387761][ T9160] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 273.393999][ T9160] should_failslab+0xac/0x100 [ 273.398677][ T9160] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 273.404914][ T9160] __kmalloc_noprof+0xd8/0x400 [ 273.409684][ T9160] ? apparmor_capable+0x13b/0x1b0 [ 273.414714][ T9160] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 273.420788][ T9160] genl_rcv_msg+0x802/0xec0 [ 273.425380][ T9160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.430423][ T9160] ? __pfx_lock_acquire+0x10/0x10 [ 273.435447][ T9160] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 273.440904][ T9160] ? __pfx_nl802154_del_llsec_devkey+0x10/0x10 [ 273.447060][ T9160] ? __pfx_nl802154_post_doit+0x10/0x10 [ 273.452599][ T9160] ? __pfx___might_resched+0x10/0x10 [ 273.457895][ T9160] netlink_rcv_skb+0x1e3/0x430 [ 273.462680][ T9160] ? __pfx_genl_rcv_msg+0x10/0x10 [ 273.467703][ T9160] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 273.473009][ T9160] genl_rcv+0x28/0x40 [ 273.476984][ T9160] netlink_unicast+0x7f6/0x990 [ 273.481757][ T9160] ? __pfx_netlink_unicast+0x10/0x10 [ 273.487039][ T9160] ? __virt_addr_valid+0x183/0x530 [ 273.492147][ T9160] ? __check_object_size+0x48e/0x900 [ 273.497433][ T9160] netlink_sendmsg+0x8e4/0xcb0 [ 273.502199][ T9160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.507493][ T9160] ? aa_sock_msg_perm+0x91/0x160 [ 273.512438][ T9160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 273.517720][ T9160] __sock_sendmsg+0x221/0x270 [ 273.522501][ T9160] ____sys_sendmsg+0x52a/0x7e0 [ 273.527268][ T9160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 273.532559][ T9160] __sys_sendmsg+0x292/0x380 [ 273.537148][ T9160] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.542262][ T9160] ? __pfx_vfs_write+0x10/0x10 [ 273.547041][ T9160] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.553368][ T9160] ? do_syscall_64+0x100/0x230 [ 273.558129][ T9160] ? do_syscall_64+0xb6/0x230 [ 273.562800][ T9160] do_syscall_64+0xf3/0x230 [ 273.567297][ T9160] ? clear_bhb_loop+0x35/0x90 [ 273.571971][ T9160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.577855][ T9160] RIP: 0033:0x7ff1edf7dff9 [ 273.582265][ T9160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.601867][ T9160] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.610279][ T9160] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 273.618268][ T9160] RDX: 0000000024008084 RSI: 00000000200004c0 RDI: 0000000000000004 [ 273.626235][ T9160] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 273.634197][ T9160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.642161][ T9160] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 273.650139][ T9160] [ 273.664907][ T9163] FAULT_INJECTION: forcing a failure. [ 273.664907][ T9163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.688118][ T9090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.710776][ T9163] CPU: 1 UID: 0 PID: 9163 Comm: syz.0.1335 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 273.721506][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.731580][ T9163] Call Trace: [ 273.734874][ T9163] [ 273.737816][ T9163] dump_stack_lvl+0x241/0x360 [ 273.742520][ T9163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.747751][ T9163] ? __pfx__printk+0x10/0x10 [ 273.752366][ T9163] ? __pfx_lock_release+0x10/0x10 [ 273.757420][ T9163] should_fail_ex+0x3b0/0x4e0 [ 273.762120][ T9163] _copy_from_user+0x2f/0xe0 [ 273.766736][ T9163] kvmemdup_bpfptr_noprof+0x7d/0xf0 [ 273.771963][ T9163] map_update_elem+0x4d0/0x6f0 [ 273.776762][ T9163] __sys_bpf+0x76f/0x810 [ 273.781031][ T9163] ? __pfx___sys_bpf+0x10/0x10 [ 273.785825][ T9163] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 273.791839][ T9163] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.798195][ T9163] ? do_syscall_64+0x100/0x230 [ 273.802980][ T9163] __x64_sys_bpf+0x7c/0x90 [ 273.807411][ T9163] do_syscall_64+0xf3/0x230 [ 273.811931][ T9163] ? clear_bhb_loop+0x35/0x90 [ 273.816645][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.822572][ T9163] RIP: 0033:0x7fd8c1b7dff9 [ 273.827002][ T9163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.846612][ T9163] RSP: 002b:00007fd8c2a00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.855025][ T9163] RAX: ffffffffffffffda RBX: 00007fd8c1d36058 RCX: 00007fd8c1b7dff9 [ 273.862991][ T9163] RDX: 0000000000000020 RSI: 0000000020000740 RDI: 0000000000000002 [ 273.870956][ T9163] RBP: 00007fd8c2a00090 R08: 0000000000000000 R09: 0000000000000000 [ 273.878926][ T9163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.886892][ T9163] R13: 0000000000000000 R14: 00007fd8c1d36058 R15: 00007ffee72dc028 [ 273.894872][ T9163] [ 273.959591][ T54] Bluetooth: hci1: command tx timeout [ 274.038310][ T9007] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 274.061756][ T9007] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 274.083986][ T9090] hsr_slave_0: entered promiscuous mode [ 274.097823][ T9090] hsr_slave_1: entered promiscuous mode [ 274.107617][ T9090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.115429][ T9090] Cannot create hsr debugfs directory [ 274.133516][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 274.145040][ T9007] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 274.180067][ T9165] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 274.190732][ T9165] batman_adv: batadv0: Adding interface: ip6gretap1 [ 274.197357][ T9165] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.223002][ T9165] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 274.252562][ T9007] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 274.264504][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1336'. [ 274.273627][ T9171] batman_adv: batadv0: Removing interface: team0 [ 274.281111][ T9171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.288716][ T9171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.298615][ T9171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.306153][ T9171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.318355][ T9171] batman_adv: batadv0: Removing interface: ip6gretap1 [ 274.411892][ T9167] netlink: 'syz.2.1337': attribute type 11 has an invalid length. [ 274.425077][ T9167] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1337'. [ 274.624081][ T9090] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.769722][ T9090] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.789675][ T9175] lo speed is unknown, defaulting to 1000 [ 274.868988][ T9090] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.896864][ T9007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.946905][ T9007] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.979477][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.986672][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.013092][ T9090] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.033344][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.040551][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.056941][ T9180] syzkaller1: entered promiscuous mode [ 275.063055][ T9180] syzkaller1: entered allmulticast mode [ 275.214916][ T9090] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.225613][ T9090] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.226910][ T9183] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1341'. [ 275.247208][ T9090] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.262695][ T9183] netlink: 732 bytes leftover after parsing attributes in process `syz.3.1341'. [ 275.266340][ T9090] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.281714][ T9185] xt_SECMARK: invalid mode: 0 [ 275.348762][ T5234] Bluetooth: hci0: command 0x041b tx timeout [ 275.402070][ T9090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.447379][ T9090] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.462921][ T9190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1342'. [ 275.483176][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1342'. [ 275.514601][ T9007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.601063][ T8333] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.608252][ T8333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.679216][ T8333] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.683177][ T9199] FAULT_INJECTION: forcing a failure. [ 275.683177][ T9199] name failslab, interval 1, probability 0, space 0, times 0 [ 275.686403][ T8333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.702340][ T9199] CPU: 1 UID: 0 PID: 9199 Comm: syz.2.1344 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 275.716775][ T9199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.726855][ T9199] Call Trace: [ 275.730151][ T9199] [ 275.733101][ T9199] dump_stack_lvl+0x241/0x360 [ 275.737788][ T9199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.742994][ T9199] ? __pfx__printk+0x10/0x10 [ 275.747613][ T9199] ? ref_tracker_alloc+0x332/0x490 [ 275.752750][ T9199] should_fail_ex+0x3b0/0x4e0 [ 275.757462][ T9199] ? skb_clone+0x20c/0x390 [ 275.761907][ T9199] should_failslab+0xac/0x100 [ 275.766611][ T9199] ? skb_clone+0x20c/0x390 [ 275.771046][ T9199] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 275.776416][ T9199] skb_clone+0x20c/0x390 [ 275.780669][ T9199] __netlink_deliver_tap+0x3cc/0x7c0 [ 275.785976][ T9199] ? netlink_deliver_tap+0x2e/0x1b0 [ 275.791166][ T9199] netlink_deliver_tap+0x19d/0x1b0 [ 275.796274][ T9199] netlink_unicast+0x7c4/0x990 [ 275.801051][ T9199] ? __pfx_netlink_unicast+0x10/0x10 [ 275.806344][ T9199] ? __virt_addr_valid+0x183/0x530 [ 275.811480][ T9199] ? __check_object_size+0x48e/0x900 [ 275.816803][ T9199] netlink_sendmsg+0x8e4/0xcb0 [ 275.821593][ T9199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.826879][ T9199] ? aa_sock_msg_perm+0x91/0x160 [ 275.831812][ T9199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.837090][ T9199] __sock_sendmsg+0x221/0x270 [ 275.841854][ T9199] ____sys_sendmsg+0x52a/0x7e0 [ 275.846638][ T9199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.851923][ T9199] __sys_sendmsg+0x292/0x380 [ 275.856520][ T9199] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.861658][ T9199] ? __pfx_vfs_write+0x10/0x10 [ 275.866449][ T9199] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 275.872783][ T9199] ? do_syscall_64+0x100/0x230 [ 275.877556][ T9199] ? do_syscall_64+0xb6/0x230 [ 275.882234][ T9199] do_syscall_64+0xf3/0x230 [ 275.886729][ T9199] ? clear_bhb_loop+0x35/0x90 [ 275.891404][ T9199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.897288][ T9199] RIP: 0033:0x7ff1edf7dff9 [ 275.901698][ T9199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.921477][ T9199] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.929905][ T9199] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 275.931556][ T9205] netlink: 'syz.0.1345': attribute type 22 has an invalid length. [ 275.937880][ T9199] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 275.937902][ T9199] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 275.937914][ T9199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.937927][ T9199] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 275.937957][ T9199] [ 275.988579][ T5234] Bluetooth: hci1: command tx timeout [ 276.110772][ T9007] veth0_vlan: entered promiscuous mode [ 276.122832][ T9007] veth1_vlan: entered promiscuous mode [ 276.144615][ T9209] pim6reg527: entered allmulticast mode [ 276.255445][ T9007] veth0_macvtap: entered promiscuous mode [ 276.300900][ T9007] veth1_macvtap: entered promiscuous mode [ 276.352790][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.378240][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.392379][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.404194][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1350'. [ 276.428272][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.439472][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.454601][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.465849][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.491177][ T9224] netlink: 5684 bytes leftover after parsing attributes in process `syz.3.1350'. [ 276.513637][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.548187][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.566433][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.584218][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.596335][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.619364][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.624228][ T9229] FAULT_INJECTION: forcing a failure. [ 276.624228][ T9229] name failslab, interval 1, probability 0, space 0, times 0 [ 276.649700][ T9007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.671028][ T9226] lo speed is unknown, defaulting to 1000 [ 276.672506][ T9007] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.690542][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.2.1353 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 276.701253][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.708013][ T9007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.711305][ T9229] Call Trace: [ 276.711316][ T9229] [ 276.720023][ T9007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.723220][ T9229] dump_stack_lvl+0x241/0x360 [ 276.726138][ T9007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.734783][ T9229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.734808][ T9229] ? __pfx__printk+0x10/0x10 [ 276.757956][ T9229] ? ref_tracker_alloc+0x332/0x490 [ 276.763195][ T9229] should_fail_ex+0x3b0/0x4e0 [ 276.767907][ T9229] ? skb_clone+0x20c/0x390 [ 276.772350][ T9229] should_failslab+0xac/0x100 [ 276.777671][ T9229] ? skb_clone+0x20c/0x390 [ 276.782111][ T9229] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 276.787516][ T9229] skb_clone+0x20c/0x390 [ 276.791801][ T9229] __netlink_deliver_tap+0x3cc/0x7c0 [ 276.797121][ T9229] ? netlink_deliver_tap+0x2e/0x1b0 [ 276.802360][ T9229] netlink_deliver_tap+0x19d/0x1b0 [ 276.807497][ T9229] netlink_unicast+0x7c4/0x990 [ 276.812300][ T9229] ? __pfx_netlink_unicast+0x10/0x10 [ 276.817610][ T9229] ? __virt_addr_valid+0x183/0x530 [ 276.822748][ T9229] ? __check_object_size+0x48e/0x900 [ 276.828068][ T9229] netlink_sendmsg+0x8e4/0xcb0 [ 276.832923][ T9229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.838325][ T9229] ? aa_sock_msg_perm+0x91/0x160 [ 276.843289][ T9229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.848602][ T9229] __sock_sendmsg+0x221/0x270 [ 276.853325][ T9229] ____sys_sendmsg+0x52a/0x7e0 [ 276.858137][ T9229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.863471][ T9229] __sys_sendmsg+0x292/0x380 [ 276.868097][ T9229] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.873248][ T9229] ? __pfx_vfs_write+0x10/0x10 [ 276.878062][ T9229] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.884438][ T9229] ? do_syscall_64+0x100/0x230 [ 276.889230][ T9229] ? do_syscall_64+0xb6/0x230 [ 276.893934][ T9229] do_syscall_64+0xf3/0x230 [ 276.898459][ T9229] ? clear_bhb_loop+0x35/0x90 [ 276.903166][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.909084][ T9229] RIP: 0033:0x7ff1edf7dff9 [ 276.913527][ T9229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.933160][ T9229] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.941606][ T9229] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 276.949646][ T9229] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 276.957825][ T9229] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 276.965825][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.973827][ T9229] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 276.981840][ T9229] [ 277.012605][ T9090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.074889][ T9229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1353'. [ 277.370371][ T8335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.409954][ T8335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.444982][ T5234] Bluetooth: hci0: command 0x041b tx timeout [ 277.473888][ T9243] FAULT_INJECTION: forcing a failure. [ 277.473888][ T9243] name failslab, interval 1, probability 0, space 0, times 0 [ 277.487151][ T9243] CPU: 0 UID: 0 PID: 9243 Comm: syz.2.1356 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 277.497942][ T9243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 277.508021][ T9243] Call Trace: [ 277.511324][ T9243] [ 277.514280][ T9243] dump_stack_lvl+0x241/0x360 [ 277.518985][ T9243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.524215][ T9243] ? __pfx__printk+0x10/0x10 [ 277.528838][ T9243] ? ref_tracker_alloc+0x332/0x490 [ 277.533973][ T9243] should_fail_ex+0x3b0/0x4e0 [ 277.538678][ T9243] ? skb_clone+0x20c/0x390 [ 277.543122][ T9243] should_failslab+0xac/0x100 [ 277.547906][ T9243] ? skb_clone+0x20c/0x390 [ 277.552345][ T9243] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 277.557752][ T9243] skb_clone+0x20c/0x390 [ 277.562021][ T9243] __netlink_deliver_tap+0x3cc/0x7c0 [ 277.567346][ T9243] ? netlink_deliver_tap+0x2e/0x1b0 [ 277.572559][ T9243] netlink_deliver_tap+0x19d/0x1b0 [ 277.577675][ T9243] netlink_unicast+0x7c4/0x990 [ 277.582444][ T9243] ? __pfx_netlink_unicast+0x10/0x10 [ 277.587726][ T9243] ? __virt_addr_valid+0x183/0x530 [ 277.592836][ T9243] ? __check_object_size+0x48e/0x900 [ 277.598123][ T9243] netlink_sendmsg+0x8e4/0xcb0 [ 277.602890][ T9243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.608174][ T9243] ? aa_sock_msg_perm+0x91/0x160 [ 277.613112][ T9243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.618389][ T9243] __sock_sendmsg+0x221/0x270 [ 277.623064][ T9243] ____sys_sendmsg+0x52a/0x7e0 [ 277.627825][ T9243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.633119][ T9243] __sys_sendmsg+0x292/0x380 [ 277.637703][ T9243] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.642819][ T9243] ? __pfx_vfs_write+0x10/0x10 [ 277.647596][ T9243] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 277.653927][ T9243] ? do_syscall_64+0x100/0x230 [ 277.658690][ T9243] ? do_syscall_64+0xb6/0x230 [ 277.663364][ T9243] do_syscall_64+0xf3/0x230 [ 277.667859][ T9243] ? clear_bhb_loop+0x35/0x90 [ 277.672538][ T9243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.678436][ T9243] RIP: 0033:0x7ff1edf7dff9 [ 277.682847][ T9243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.702533][ T9243] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.710948][ T9243] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 277.718917][ T9243] RDX: 0000000000000840 RSI: 0000000020000140 RDI: 000000000000000d [ 277.726883][ T9243] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 277.734848][ T9243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.742812][ T9243] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 277.750789][ T9243] [ 277.822389][ T8335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.857596][ T9243] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1356'. [ 277.878889][ T8335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.020437][ T9249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1358'. [ 278.088107][ T5234] Bluetooth: hci1: command 0x0419 tx timeout [ 278.128194][ T9252] FAULT_INJECTION: forcing a failure. [ 278.128194][ T9252] name failslab, interval 1, probability 0, space 0, times 0 [ 278.225547][ T9252] CPU: 1 UID: 0 PID: 9252 Comm: syz.2.1359 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 278.236308][ T9252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 278.246383][ T9252] Call Trace: [ 278.249676][ T9252] [ 278.252618][ T9252] dump_stack_lvl+0x241/0x360 [ 278.257335][ T9252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.262553][ T9252] ? __pfx__printk+0x10/0x10 [ 278.267167][ T9252] ? __kmalloc_node_noprof+0xb7/0x440 [ 278.272562][ T9252] ? __pfx___might_resched+0x10/0x10 [ 278.277873][ T9252] should_fail_ex+0x3b0/0x4e0 [ 278.282577][ T9252] should_failslab+0xac/0x100 [ 278.287281][ T9252] __kmalloc_node_noprof+0xdf/0x440 [ 278.292497][ T9252] ? __kvmalloc_node_noprof+0x72/0x190 [ 278.297973][ T9252] __kvmalloc_node_noprof+0x72/0x190 [ 278.303278][ T9252] bpf_test_run_xdp_live+0x290/0x2160 [ 278.308668][ T9252] ? arch_stack_walk+0xfd/0x150 [ 278.313546][ T9252] ? stack_trace_save+0x118/0x1d0 [ 278.318596][ T9252] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 278.324419][ T9252] ? mark_lock+0x9a/0x360 [ 278.328811][ T9252] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 278.334726][ T9252] ? __might_fault+0xaa/0x120 [ 278.339416][ T9252] ? __might_fault+0xc6/0x120 [ 278.344114][ T9252] ? _copy_from_user+0xa6/0xe0 [ 278.348919][ T9252] ? bpf_test_init+0x15a/0x180 [ 278.353695][ T9252] ? xdp_convert_md_to_buff+0x5b/0x330 [ 278.359177][ T9252] bpf_prog_test_run_xdp+0x805/0x11e0 [ 278.364572][ T9252] ? __pfx_lock_release+0x10/0x10 [ 278.369628][ T9252] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 278.375454][ T9252] ? __fget_files+0x29/0x470 [ 278.380077][ T9252] ? fput+0x1a8/0x230 [ 278.384078][ T9252] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 278.389907][ T9252] bpf_prog_test_run+0x2e4/0x360 [ 278.394866][ T9252] __sys_bpf+0x48d/0x810 [ 278.399126][ T9252] ? __pfx___sys_bpf+0x10/0x10 [ 278.403932][ T9252] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 278.409937][ T9252] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.416292][ T9252] __x64_sys_bpf+0x7c/0x90 [ 278.420729][ T9252] do_syscall_64+0xf3/0x230 [ 278.425295][ T9252] ? clear_bhb_loop+0x35/0x90 [ 278.429995][ T9252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.435912][ T9252] RIP: 0033:0x7ff1edf7dff9 [ 278.440343][ T9252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.459966][ T9252] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 278.468405][ T9252] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 278.476396][ T9252] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 278.484383][ T9252] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 278.492369][ T9252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.500439][ T9252] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 278.508451][ T9252] [ 278.766805][ T9090] veth0_vlan: entered promiscuous mode [ 278.830499][ T9090] veth1_vlan: entered promiscuous mode [ 278.985484][ T9090] veth0_macvtap: entered promiscuous mode [ 279.017291][ T9090] veth1_macvtap: entered promiscuous mode [ 279.102132][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.163873][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.181180][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.195624][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.214077][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.225487][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.251069][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.273778][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.292959][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.314068][ T9268] Cannot find add_set index 0 as target [ 279.360498][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.398381][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.463830][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.495483][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.541114][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.587789][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.628256][ T9090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.666079][ T9090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.697299][ T9090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.728382][ T9273] netlink: 'syz.2.1366': attribute type 10 has an invalid length. [ 279.738204][ T9273] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1366'. [ 279.767870][ T9090] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.782831][ T9090] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.808916][ T9090] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.817751][ T9090] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.013242][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.054569][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.163381][ T8338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.165662][ T5234] Bluetooth: hci1: command 0x0419 tx timeout [ 280.175678][ T8338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.368472][ T9291] __nla_validate_parse: 1 callbacks suppressed [ 280.368492][ T9291] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1372'. [ 280.463625][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1376'. [ 280.475759][ T9295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1376'. [ 280.519938][ T9302] netlink: 'syz.3.1377': attribute type 1 has an invalid length. [ 280.527817][ T9302] netlink: 'syz.3.1377': attribute type 2 has an invalid length. [ 280.577886][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1378'. [ 280.671869][ T52] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.688839][ T9309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1379'. [ 280.716443][ T9309] netlink: 5684 bytes leftover after parsing attributes in process `syz.3.1379'. [ 280.730767][ T9311] lo speed is unknown, defaulting to 1000 [ 280.800330][ T52] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.917373][ T52] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.929656][ T9314] FAULT_INJECTION: forcing a failure. [ 280.929656][ T9314] name failslab, interval 1, probability 0, space 0, times 0 [ 280.984737][ T9314] CPU: 0 UID: 0 PID: 9314 Comm: syz.2.1381 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 280.995486][ T9314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.005577][ T9314] Call Trace: [ 281.008880][ T9314] [ 281.011837][ T9314] dump_stack_lvl+0x241/0x360 [ 281.016544][ T9314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.021779][ T9314] ? __pfx__printk+0x10/0x10 [ 281.026392][ T9314] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 281.032399][ T9314] ? __pfx___might_resched+0x10/0x10 [ 281.037719][ T9314] should_fail_ex+0x3b0/0x4e0 [ 281.042425][ T9314] should_failslab+0xac/0x100 [ 281.047126][ T9314] ? __alloc_skb+0x1c3/0x440 [ 281.051740][ T9314] kmem_cache_alloc_node_noprof+0x71/0x320 [ 281.057576][ T9314] __alloc_skb+0x1c3/0x440 [ 281.062022][ T9314] ? __pfx___alloc_skb+0x10/0x10 [ 281.066982][ T9314] ? __pfx___might_resched+0x10/0x10 [ 281.072293][ T9314] alloc_skb_with_frags+0xc3/0x820 [ 281.077439][ T9314] sock_alloc_send_pskb+0x91a/0xa60 [ 281.082678][ T9314] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 281.088427][ T9314] ? __pfx_validate_chain+0x10/0x10 [ 281.093660][ T9314] ? dev_get_by_index+0x23/0x2d0 [ 281.098627][ T9314] packet_sendmsg+0x3fad/0x6910 [ 281.103520][ T9314] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 281.108931][ T9314] ? __pfx___might_resched+0x10/0x10 [ 281.114250][ T9314] ? __pfx_packet_sendmsg+0x10/0x10 [ 281.119469][ T9314] ? aa_sk_perm+0x96d/0xab0 [ 281.124008][ T9314] ? __pfx_aa_sk_perm+0x10/0x10 [ 281.128892][ T9314] ? aa_sock_msg_perm+0x91/0x160 [ 281.129205][ T6357] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 281.133877][ T9314] ? __pfx_packet_sendmsg+0x10/0x10 [ 281.133905][ T9314] __sock_sendmsg+0x221/0x270 [ 281.133933][ T9314] ____sys_sendmsg+0x52a/0x7e0 [ 281.133963][ T9314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.143714][ T6357] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 281.146179][ T9314] __sys_sendmsg+0x292/0x380 [ 281.146217][ T9314] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.152259][ T6357] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 281.155703][ T9314] ? __pfx_vfs_write+0x10/0x10 [ 281.155751][ T9314] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.162636][ T6357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 281.168053][ T9314] ? do_syscall_64+0x100/0x230 [ 281.168085][ T9314] ? do_syscall_64+0xb6/0x230 [ 281.168107][ T9314] do_syscall_64+0xf3/0x230 [ 281.168127][ T9314] ? clear_bhb_loop+0x35/0x90 [ 281.168151][ T9314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.175126][ T6357] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 281.177814][ T9314] RIP: 0033:0x7ff1edf7dff9 [ 281.177838][ T9314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.177854][ T9314] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 [ 281.185723][ T6357] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 281.189508][ T9314] ORIG_RAX: 000000000000002e [ 281.189522][ T9314] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 281.189537][ T9314] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 281.189549][ T9314] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 281.189560][ T9314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.189572][ T9314] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 281.189598][ T9314] [ 281.480233][ T52] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.523223][ T9316] lo speed is unknown, defaulting to 1000 [ 281.532101][ T9321] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1383'. [ 281.548695][ T9319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1382'. [ 281.839657][ T9316] chnl_net:caif_netlink_parms(): no params data found [ 281.977233][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.106613][ T52] bridge_slave_1: left allmulticast mode [ 282.114501][ T52] bridge_slave_1: left promiscuous mode [ 282.128455][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.155368][ T52] bridge_slave_0: left allmulticast mode [ 282.168186][ T52] bridge_slave_0: left promiscuous mode [ 282.180695][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.549005][ T5237] Bluetooth: hci2: command 0x0405 tx timeout [ 282.669795][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 282.679020][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 282.700301][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 282.715367][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 282.739594][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 282.759481][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 282.940578][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.955525][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.968574][ T52] bond0 (unregistering): Released all slaves [ 283.110055][ T9341] lo speed is unknown, defaulting to 1000 [ 283.250869][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.268795][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.276061][ T9316] bridge_slave_0: entered allmulticast mode [ 283.299127][ T9316] bridge_slave_0: entered promiscuous mode [ 283.361531][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.378119][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.385402][ T9316] bridge_slave_1: entered allmulticast mode [ 283.392637][ T9316] bridge_slave_1: entered promiscuous mode [ 283.423435][ T9349] bridge0: port 3(team0) entered disabled state [ 283.428320][ T5237] Bluetooth: hci0: command tx timeout [ 283.429894][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.442826][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.489573][ T9316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.589205][ T9316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.713752][ T52] hsr_slave_0: left promiscuous mode [ 283.723270][ T52] hsr_slave_1: left promiscuous mode [ 283.768082][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.775589][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.802321][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.813387][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.839192][ T52] veth1_macvtap: left promiscuous mode [ 283.844759][ T52] veth0_macvtap: left promiscuous mode [ 283.850542][ T52] veth1_vlan: left promiscuous mode [ 283.856115][ T52] veth0_vlan: left promiscuous mode [ 284.501078][ T52] team0 (unregistering): Port device team_slave_1 removed [ 284.605504][ T52] team0 (unregistering): Port device team_slave_0 removed [ 284.640932][ T5237] Bluetooth: hci2: command 0x0405 tx timeout [ 284.791376][ T54] Bluetooth: hci1: command tx timeout [ 285.265404][ T9316] team0: Port device team_slave_0 added [ 285.281011][ T9316] team0: Port device team_slave_1 added [ 285.343349][ T9341] chnl_net:caif_netlink_parms(): no params data found [ 285.395513][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.406526][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.436190][ T9316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.466204][ T9381] FAULT_INJECTION: forcing a failure. [ 285.466204][ T9381] name failslab, interval 1, probability 0, space 0, times 0 [ 285.467146][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.496570][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.508245][ T54] Bluetooth: hci0: command tx timeout [ 285.528656][ T9316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.538346][ T9381] CPU: 1 UID: 0 PID: 9381 Comm: syz.2.1399 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 285.549870][ T9381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 285.559945][ T9381] Call Trace: [ 285.563234][ T9381] [ 285.566161][ T9381] dump_stack_lvl+0x241/0x360 [ 285.570844][ T9381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 285.576039][ T9381] ? __pfx__printk+0x10/0x10 [ 285.580628][ T9381] ? __kmalloc_noprof+0xb0/0x400 [ 285.585561][ T9381] ? __pfx___might_resched+0x10/0x10 [ 285.590853][ T9381] should_fail_ex+0x3b0/0x4e0 [ 285.595535][ T9381] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 285.601780][ T9381] should_failslab+0xac/0x100 [ 285.606454][ T9381] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 285.612693][ T9381] __kmalloc_noprof+0xd8/0x400 [ 285.617460][ T9381] ? apparmor_capable+0x13b/0x1b0 [ 285.622483][ T9381] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 285.628548][ T9381] genl_rcv_msg+0x802/0xec0 [ 285.633054][ T9381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.638104][ T9381] ? __pfx_lock_acquire+0x10/0x10 [ 285.643130][ T9381] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 285.649019][ T9381] ? __pfx___might_resched+0x10/0x10 [ 285.654311][ T9381] netlink_rcv_skb+0x1e3/0x430 [ 285.659069][ T9381] ? __pfx_genl_rcv_msg+0x10/0x10 [ 285.664091][ T9381] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 285.669377][ T9381] ? __netlink_deliver_tap+0x77e/0x7c0 [ 285.674837][ T9381] genl_rcv+0x28/0x40 [ 285.678813][ T9381] netlink_unicast+0x7f6/0x990 [ 285.683579][ T9381] ? __pfx_netlink_unicast+0x10/0x10 [ 285.688858][ T9381] ? __virt_addr_valid+0x183/0x530 [ 285.693965][ T9381] ? __check_object_size+0x48e/0x900 [ 285.699257][ T9381] netlink_sendmsg+0x8e4/0xcb0 [ 285.704025][ T9381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.709305][ T9381] ? aa_sock_msg_perm+0x91/0x160 [ 285.714238][ T9381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 285.719534][ T9381] __sock_sendmsg+0x221/0x270 [ 285.724237][ T9381] ____sys_sendmsg+0x52a/0x7e0 [ 285.729014][ T9381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 285.734308][ T9381] __sys_sendmsg+0x292/0x380 [ 285.738896][ T9381] ? __pfx___sys_sendmsg+0x10/0x10 [ 285.744013][ T9381] ? __pfx_vfs_write+0x10/0x10 [ 285.748787][ T9381] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 285.755114][ T9381] ? do_syscall_64+0x100/0x230 [ 285.759902][ T9381] ? do_syscall_64+0xb6/0x230 [ 285.764577][ T9381] do_syscall_64+0xf3/0x230 [ 285.769073][ T9381] ? clear_bhb_loop+0x35/0x90 [ 285.773744][ T9381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.779718][ T9381] RIP: 0033:0x7ff1edf7dff9 [ 285.784127][ T9381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 285.803738][ T9381] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 285.812152][ T9381] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 285.820123][ T9381] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 285.828086][ T9381] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 285.836046][ T9381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 285.844011][ T9381] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 285.851991][ T9381] [ 285.991712][ T9316] hsr_slave_0: entered promiscuous mode [ 286.034981][ T9316] hsr_slave_1: entered promiscuous mode [ 286.066949][ T9316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.081293][ T9316] Cannot create hsr debugfs directory [ 286.097368][ T9382] lo speed is unknown, defaulting to 1000 [ 286.145585][ T9379] lo speed is unknown, defaulting to 1000 [ 286.159083][ T9398] vlan2: entered promiscuous mode [ 286.164212][ T9398] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 286.287421][ T9341] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.295059][ T9341] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.303116][ T9341] bridge_slave_0: entered allmulticast mode [ 286.311353][ T9341] bridge_slave_0: entered promiscuous mode [ 286.365849][ T9341] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.373822][ T9341] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.386229][ T9341] bridge_slave_1: entered allmulticast mode [ 286.394878][ T9341] bridge_slave_1: entered promiscuous mode [ 286.416504][ T9400] lo speed is unknown, defaulting to 1000 [ 286.420921][ T9341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.468226][ T9341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.531440][ T9341] team0: Port device team_slave_0 added [ 286.540139][ T9341] team0: Port device team_slave_1 added [ 286.593667][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.606854][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.635257][ T9341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.651276][ T9341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.658375][ T9341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.687477][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.765523][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.841943][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.869452][ T5237] Bluetooth: hci1: command tx timeout [ 286.877320][ T9341] hsr_slave_0: entered promiscuous mode [ 286.887470][ T9341] hsr_slave_1: entered promiscuous mode [ 286.895900][ T9341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.915939][ T9341] Cannot create hsr debugfs directory [ 287.016197][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.089037][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 287.184279][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.191729][ T9421] netlink: 5684 bytes leftover after parsing attributes in process `syz.3.1404'. [ 287.381124][ T9316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.417238][ T9316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.462219][ T9316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.481148][ T9316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 287.589644][ T5237] Bluetooth: hci0: command tx timeout [ 287.643584][ T9433] FAULT_INJECTION: forcing a failure. [ 287.643584][ T9433] name failslab, interval 1, probability 0, space 0, times 0 [ 287.688580][ T62] bridge_slave_1: left allmulticast mode [ 287.694314][ T62] bridge_slave_1: left promiscuous mode [ 287.710584][ T9433] CPU: 1 UID: 0 PID: 9433 Comm: syz.2.1412 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 287.716328][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.721308][ T9433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 287.721352][ T9433] Call Trace: [ 287.721359][ T9433] [ 287.721368][ T9433] dump_stack_lvl+0x241/0x360 [ 287.749485][ T9433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.754717][ T9433] ? __pfx__printk+0x10/0x10 [ 287.759331][ T9433] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 287.764900][ T9433] ? __pfx___might_resched+0x10/0x10 [ 287.770227][ T9433] should_fail_ex+0x3b0/0x4e0 [ 287.774945][ T9433] ? skb_clone+0x20c/0x390 [ 287.779398][ T9433] should_failslab+0xac/0x100 [ 287.784107][ T9433] ? skb_clone+0x20c/0x390 [ 287.788557][ T9433] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 287.793963][ T9433] skb_clone+0x20c/0x390 [ 287.798240][ T9433] dccp_connect+0x4ef/0x890 [ 287.802770][ T9433] dccp_v4_connect+0xbc9/0x1380 [ 287.807657][ T9433] __inet_stream_connect+0x262/0xf30 [ 287.812979][ T9433] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.819352][ T9433] ? __local_bh_enable_ip+0x168/0x200 [ 287.824760][ T9433] ? lockdep_hardirqs_on+0x99/0x150 [ 287.829989][ T9433] ? __pfx___inet_stream_connect+0x10/0x10 [ 287.835823][ T9433] ? __local_bh_enable_ip+0x168/0x200 [ 287.841222][ T9433] ? inet_stream_connect+0x50/0xa0 [ 287.846359][ T9433] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 287.852120][ T9433] inet_stream_connect+0x65/0xa0 [ 287.857084][ T9433] ? __pfx_inet_stream_connect+0x10/0x10 [ 287.862745][ T9433] __sys_connect+0x2d1/0x300 [ 287.867361][ T9433] ? __pfx___sys_connect+0x10/0x10 [ 287.872512][ T9433] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 287.878871][ T9433] ? do_syscall_64+0x100/0x230 [ 287.883671][ T9433] __x64_sys_connect+0x7a/0x90 [ 287.888460][ T9433] do_syscall_64+0xf3/0x230 [ 287.892997][ T9433] ? clear_bhb_loop+0x35/0x90 [ 287.897783][ T9433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.903698][ T9433] RIP: 0033:0x7ff1edf7dff9 [ 287.908132][ T9433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.927782][ T9433] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 287.936228][ T9433] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 287.944223][ T9433] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000009 [ 287.952220][ T9433] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 287.960224][ T9433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.968223][ T9433] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 287.976237][ T9433] [ 287.994639][ T62] bridge_slave_0: left allmulticast mode [ 288.009106][ T62] bridge_slave_0: left promiscuous mode [ 288.015014][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.612870][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.625234][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.638736][ T62] bond0 (unregistering): Released all slaves [ 288.949390][ T5237] Bluetooth: hci1: command 0x040f tx timeout [ 289.258144][ T62] hsr_slave_0: left promiscuous mode [ 289.267651][ T62] hsr_slave_1: left promiscuous mode [ 289.283414][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.298945][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.328818][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.336293][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.380166][ T62] veth1_macvtap: left promiscuous mode [ 289.386010][ T62] veth0_macvtap: left promiscuous mode [ 289.398177][ T62] veth1_vlan: left promiscuous mode [ 289.403542][ T62] veth0_vlan: left promiscuous mode [ 289.668441][ T5237] Bluetooth: hci0: command tx timeout [ 290.131802][ T62] team0 (unregistering): Port device team_slave_1 removed [ 290.241207][ T62] team0 (unregistering): Port device team_slave_0 removed [ 290.853412][ T9316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.931417][ T9316] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.981430][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.988623][ T8338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.028213][ T5237] Bluetooth: hci1: command 0x040f tx timeout [ 291.035807][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.042967][ T8338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.121290][ T9470] bond1: entered promiscuous mode [ 291.148650][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 291.184834][ T9470] bond1: entered allmulticast mode [ 291.205666][ T9470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 291.234715][ T9475] FAULT_INJECTION: forcing a failure. [ 291.234715][ T9475] name failslab, interval 1, probability 0, space 0, times 0 [ 291.285300][ T9475] CPU: 0 UID: 0 PID: 9475 Comm: syz.2.1424 Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 291.296045][ T9475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.306214][ T9475] Call Trace: [ 291.309518][ T9475] [ 291.312465][ T9475] dump_stack_lvl+0x241/0x360 [ 291.317172][ T9475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.322418][ T9475] ? __pfx__printk+0x10/0x10 [ 291.327036][ T9475] ? __kmalloc_noprof+0xb0/0x400 [ 291.331999][ T9475] ? __pfx___might_resched+0x10/0x10 [ 291.337328][ T9475] should_fail_ex+0x3b0/0x4e0 [ 291.342048][ T9475] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 291.348327][ T9475] should_failslab+0xac/0x100 [ 291.353040][ T9475] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 291.359305][ T9475] __kmalloc_noprof+0xd8/0x400 [ 291.364075][ T9475] ? apparmor_capable+0x13b/0x1b0 [ 291.369110][ T9475] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 291.375183][ T9475] genl_rcv_msg+0x802/0xec0 [ 291.379870][ T9475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.384918][ T9475] ? __pfx_lock_acquire+0x10/0x10 [ 291.389942][ T9475] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 291.395833][ T9475] ? __pfx___might_resched+0x10/0x10 [ 291.401120][ T9475] netlink_rcv_skb+0x1e3/0x430 [ 291.405879][ T9475] ? __pfx_genl_rcv_msg+0x10/0x10 [ 291.410899][ T9475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 291.416182][ T9475] ? __netlink_deliver_tap+0x77e/0x7c0 [ 291.421643][ T9475] genl_rcv+0x28/0x40 [ 291.425620][ T9475] netlink_unicast+0x7f6/0x990 [ 291.430395][ T9475] ? __pfx_netlink_unicast+0x10/0x10 [ 291.435679][ T9475] ? __virt_addr_valid+0x183/0x530 [ 291.440788][ T9475] ? __check_object_size+0x48e/0x900 [ 291.446072][ T9475] netlink_sendmsg+0x8e4/0xcb0 [ 291.450861][ T9475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.456145][ T9475] ? aa_sock_msg_perm+0x91/0x160 [ 291.461080][ T9475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.466357][ T9475] __sock_sendmsg+0x221/0x270 [ 291.471108][ T9475] ____sys_sendmsg+0x52a/0x7e0 [ 291.475869][ T9475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.481767][ T9475] __sys_sendmsg+0x292/0x380 [ 291.486527][ T9475] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.491640][ T9475] ? __pfx_vfs_write+0x10/0x10 [ 291.496414][ T9475] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.502737][ T9475] ? do_syscall_64+0x100/0x230 [ 291.507496][ T9475] ? do_syscall_64+0xb6/0x230 [ 291.512183][ T9475] do_syscall_64+0xf3/0x230 [ 291.516694][ T9475] ? clear_bhb_loop+0x35/0x90 [ 291.521467][ T9475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.527372][ T9475] RIP: 0033:0x7ff1edf7dff9 [ 291.531789][ T9475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.551399][ T9475] RSP: 002b:00007ff1eedf2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.559810][ T9475] RAX: ffffffffffffffda RBX: 00007ff1ee135f80 RCX: 00007ff1edf7dff9 [ 291.567775][ T9475] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 291.575740][ T9475] RBP: 00007ff1eedf2090 R08: 0000000000000000 R09: 0000000000000000 [ 291.583706][ T9475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.591671][ T9475] R13: 0000000000000000 R14: 00007ff1ee135f80 R15: 00007ffe8677cc68 [ 291.599650][ T9475] [ 291.731092][ T9470] bond1 (unregistering): Released all slaves [ 291.800353][ T9341] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.872894][ T9341] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.917693][ T9341] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.943969][ T9341] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 291.995666][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.080924][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.098042][ T9341] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.132550][ T9341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.143271][ T9341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.163808][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.170990][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.185918][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.193144][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.231208][ T9316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.437080][ T62] team0: left allmulticast mode [ 292.452534][ T62] team_slave_0: left allmulticast mode [ 292.486735][ T62] team_slave_1: left allmulticast mode [ 292.498572][ T62] bridge0: port 3(team0) entered disabled state [ 292.507154][ T62] bridge_slave_1: left allmulticast mode [ 292.528066][ T62] bridge_slave_1: left promiscuous mode [ 292.534032][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.546668][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.102529][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.108556][ T54] Bluetooth: hci1: command 0x040f tx timeout [ 293.118944][ T62] bond_slave_0: left promiscuous mode [ 293.127310][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.136602][ T62] bond_slave_1: left promiscuous mode [ 293.144223][ T62] bond0 (unregistering): Released all slaves [ 293.156505][ T9511] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1434'. [ 293.519933][ T9316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.545832][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.225183][ T54] Bluetooth: hci1: command 0x040f tx timeout [ 299.353013][ T24] sched: DL replenish lagged too much [ 325.791438][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.430114][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.324938][ T4626] Bluetooth: hci2: command 0x0405 tx timeout [ 353.533617][ T4626] Bluetooth: hci6: command 0x0406 tx timeout [ 353.554486][ T4626] Bluetooth: hci7: command tx timeout [ 410.854387][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 410.870585][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 423.994118][ T5242] Bluetooth: hci0: command 0x0406 tx timeout [ 424.039829][ T5242] Bluetooth: hci1: command 0x040f tx timeout [ 466.986691][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.018483][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 497.683844][ T30] INFO: task kworker/0:0:8 blocked for more than 172 seconds. [ 497.781932][ T30] Not tainted 6.12.0-rc2-syzkaller-00543-g6aac56631831 #0 [ 497.860104][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 498.039120][ T30] task:kworker/0:0 state:D stack:23160 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 498.134660][ T30] Workqueue: events disconnect_work [ 498.196802][ T30] Call Trace: [ 498.300364][ T30] [ 498.303372][ T30] __schedule+0x1895/0x4b30 [ 498.307914][ T30] ? schedule+0x90/0x320 [ 498.389451][ T30] ? __pfx___schedule+0x10/0x10 [ 498.407513][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 498.565375][ T30] ? __pfx_lock_release+0x10/0x10 [ 498.660130][ T30] ? kick_pool+0x1bd/0x620 [ 498.664640][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.734490][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 498.881042][ T30] ? schedule+0x90/0x320 [ 498.885375][ T30] schedule+0x14b/0x320 [ 498.977529][ T30] schedule_preempt_disabled+0x13/0x30 [ 499.096335][ T30] __mutex_lock+0x6a7/0xd70 [ 499.146625][ T30] ? __mutex_lock+0x52a/0xd70 [ 499.218827][ T30] ? disconnect_work+0x1c/0x240 [ 499.223768][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 499.334231][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 499.417222][ T30] ? process_scheduled_works+0x976/0x1850 [ 499.480595][ T30] disconnect_work+0x1c/0x240 [ 499.485358][ T30] ? process_scheduled_works+0x976/0x1850