last executing test programs: 1m9.013238548s ago: executing program 1 (id=3131): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 53.124018823s ago: executing program 1 (id=3131): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 40.581480863s ago: executing program 1 (id=3131): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 27.774399364s ago: executing program 1 (id=3131): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 15.946008656s ago: executing program 1 (id=3131): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 4.817993663s ago: executing program 0 (id=4415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000003004400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000440023800500110001000000080014"], 0x6c}, 0x1, 0x0, 0x0, 0x4008095}, 0x4) 4.627360963s ago: executing program 4 (id=4417): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newrule={0x24, 0x1e, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x1}, [@FRA_DST={0x8, 0x1, @empty}]}, 0xfdef}, 0x1, 0x0, 0x0, 0x2}, 0x0) 4.535039672s ago: executing program 2 (id=4420): syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 4.463185155s ago: executing program 4 (id=4421): r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0xfffff493, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20048881, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r3 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0000b4ef00"], &(0x7f0000000a80)='GPL\x00', 0x9bf, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) sendmmsg$inet6(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000005c0)="fa29906886dee21d02dd765ed0aec0c88398f042330b41f77340acdb99551bdc3fb8f541e5e5ff7788a27b211e9ff286ca05de3a89a2b2b4d6f2ac332ee4cfc87335830ae52b5b9d6d49f09e8094f1659e4acc15eb3d614febcab6dd739590b1a495ae0ae024b36090da17252ac4519e7e6e99cf0af48ac3556879e72879ec48add3b7860ccad097a1ff34e45c26914c3b6aa8a8783d76bca55e51552a507d2f3321cdca58d7a1331dcb54806f084fae557603fe5f5df00b04d78cd8e6771550bd997c4e7067a621678129dd0dacdd8301514adfae7c77534ad0cb074c35078fc024416bd84d27dfaf395133a3e7", 0xee}, {&(0x7f00000006c0)="041aa3e93de2eec9968efe83f1e8c7bbef283254709c8d48730da5062b24cfb1460e7c5464b1718e6c9f1b32675e84e856a219399cb0160706b12f40247ebb7cdbc93a0dbd85c73533a1b511bd872279ef871837218cc05028dfd2378934cccc7d4187a177f45764d781c8fcf4efe5", 0x6f}, {&(0x7f0000000740)="8971ad009a06b5bb448a20c6350a0fa59f102d3e78c46408d8f0ecc1870cb7a2cba05a3b62287231b35f66d4e0f30798a9de3675685f7ffcf47f3d9734169a7b8a0c6bfe972382d87d56100ec54dfeff45966dc47ee41fa7da5d403693b3149d37736edbe507fc47bed1d4d9fad424c7fd54ad25973d7e2e5b", 0x79}, {&(0x7f0000000840)="2239864d6fd8b4b09ca5cf1272e40648ff6c7b4bff8a5aca1bf5f0ea600c46a35eaab600da512872c231a202d268b2409de0f2ceb1bcf78e5de568e9c24e26b2faafc34f0670870ba4d6ec0e4751d7eb236b8c607dbdf720b4189473a2648339e6780b2c5a64c3851f7fa51ec95910feb62bc1ebedfab5b8f20cb6306e30a6772ef55ce6c7668494f634db365176bdbd737eae3dad95b3a473dab390559aa5fd05ee0050", 0xa4}, {&(0x7f00000001c0)="a5c61b3f862777e2738b8cebf12c6d", 0xf}, {&(0x7f0000000240)="54d4a65f972e2e481676117ed43ad4e3b250", 0x12}], 0x6}}, {{&(0x7f0000000ac0)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}, 0x6f}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000b80)="81e46f38be1d87cd8cabd4c72544c69771628a8224a9e08de22ec5ac4e7156faf6243cc262367c213a46a4d72b8ee7e7497159695cf5f8d5aeb55f37423376", 0x3f}, {&(0x7f0000000c00)="0e45f66e2caab44cfaa2fd82e8db5574a1f35a7d5966ab48acf738cae5d7d0ed69c7168aa46ba8ea93af169847b14fb50da4a2bb41d7baa553f43f5d964300651a5c369a5476287504d93a2c18f52363d4f669b9d442a5c920c7774946c9ac7a8ce2d079186079e1b73a5e480ad7dbfabcf597e5ff04ed7b1403294dfa135e3a34a7dee8ccfbfbc557feb3f5c99138bb33181b7178576030f86d2114c708c09f1d1eea6dd81ccdc1019b190da8c292b961d435bf6036eb6ca318840167605ba37e3543d60d9e118f6535890b3d8e", 0xce}, {&(0x7f0000000d00)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80), 0x0, &(0x7f0000001040)=[@tclass={{0x14, 0x29, 0x43, 0x80}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x7, 0xd, '\x00', [@generic={0x1}, @ra={0x5, 0x2, 0xfff7}, @jumbo={0xc2, 0x4, 0xfffffff8}, @generic={0x2, 0x57, "90c2b0b66251eac411a7611bbc9b8e494b20579584773a00cad320fc344baa3d18b76aaef5871ebb604c022f1c1670839e5c0da554dea287985f26ec3c358b0a73c0b51db3b781da2e5efb7b77d506abf6fe6b14fbbf15"}, @enc_lim={0x4, 0x1, 0x8}]}}}, @hopopts={{0x18, 0x29, 0x36, {0xff}}}], 0xb0}}], 0x3, 0x4000001) 4.462847614s ago: executing program 0 (id=4422): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd7000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x4c}}, 0x0) 4.448903495s ago: executing program 3 (id=4423): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x158, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in6=@loopback}, {@in=@loopback, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x5}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @encap={0x1c, 0x4, {0x0, 0x1}}]}, 0x158}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) 4.366764672s ago: executing program 2 (id=4424): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x30, &(0x7f0000001ac0)={&(0x7f00000020c0)={0x28, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x11, 0x11, 0x0, 0x1, [@generic="04af486355d81deed1c38b1595"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc}, 0x20000094) 4.361272528s ago: executing program 4 (id=4425): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (fail_nth: 65) 4.353004888s ago: executing program 1 (id=3131): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 4.331525586s ago: executing program 0 (id=4426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xf8, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x22000000}, 0x40) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0xa0c}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x240000c0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f0000002780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002740)={&(0x7f00000003c0)={0x2354, 0x13, 0x10, 0x70bd2c, 0x25dfdbfc, {0x1, 0x0, 0x6, 0x1, {0x4e23, 0x4e23, [0x4, 0x8, 0x1, 0x3], [0x9, 0x4c8, 0x1, 0x3], r3, [0x9, 0xd52]}, 0x3, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "2b41d312e73cbdbcb0b4d67340a7762f953b4c15fd7fff850520a21bec334f7fccec273a9a1964f02856f722b81794c274c5dc7815c5a4aa1cfb5bb0cd06f7d1ce62ad702bc6cb600ac3235861be8cffa910594b6bce76273c456425a0d246019b39970c815d2ee8585f4f472d4362a314895ac93746af407cad2fe1d82b3b444aa7d363bd6fa424a6510baf84aa4c02fd6e4f15e0152324a524b68fb85c9e6b15b846213115030841a2a4d75992bcafb1da38d0d6960253e7971c275feb5681b12006aab280189ec994340a287ba7574369614349209b39a72b9f3eaf506c54ad11f3eef3282a24a8eaced1d0588f3b90e9cfbafdd2abfd5a1a0b9fae66cc34e29398fe98b2ae23180eedb6bbdceff7ab0d70868f9ec0a8ea244e2efd53ef5fc20b66dbb5a3ef354deb10e249dccdb56f88afa52642e29a8f3f7dbdd48ae7be1bba939c9ee3d9d56fd4c1a75a75eebdf278e8da200e082b058cf2045704f251b7dd1af3f108c1ffe5886850e6bc43bf82012ef59d30127f67af00067fa213c7d1785f0cae983f8f624f6a9ed0655e7973f2b96a5ee5cb31100d0e3aeab4d822e08537446b5e4bfdccf302f6b771d29ec6e40f13ee1a84b6d5c67ce1bae6ad93844f26efc27e43ec1cb26c213fb245a09529f25507731fecefdb57f960d8203d82adeca15d152b11c979ad2a71d43b5f85d007777acb92e6ef164cb17af422feed68cc5df422f358cb6071528566bd49b76173c0b12ef7f4008d2c9ee8f497063a26c3a4e4d76a6243755c9d2d9a9e35f8a1826ad0ed36dbc9777c892297d1062050e6a91fe6b9d21cba8ebca89d33e15740e19430736b01957d2c6fa9c6711afec68bcf17decbb8e0db0032abce33878d04f31872f18dc62088a35584353c0fabaa3cc80f02203ad65fd1b81e1465888cadf174d152435b8bbd0037a5c7372ddb2163e4312945d5f434656ff976b4813239d1a313e18587423018a2c8fd736ed75ef190701d02dd15250ea9251d89c21ddf195d3671bfbf994c93444c7bf68f47698dafc5ac98c53dfa8bdca4adda1eabd2c2cdb68139d1367f086587103f5017ccf2398d7dd3d38994eda64437a4d4d92539a2f3f676dbf0e788d13ddce76f6abd0b2540c9cdc0883498551a8f4bdb709b690dc57f11118de3b40cee9aef4b47ec8f7693fa12dfc698484ce1b2d262f0ef0be47ccbe414ec28593d2275d21575f03e7947df9684108234e84b98bd1d276f4d1a6dd786b6dd2e09fd859a2df592f3e0a8bb6126dbb2306aed3251eaab975b4f620bf19cb07a531da64306d28043204a8f58ab27b2304c655aac948429a6c3fb84f339554b61e738bd73ebc86c5f4c2dc3abd5e16b0fab81fe5f0cbdf57005548ec0829d6a8c162c8d4c38e45a3a7cebc7f67501210e03ea63aaabf46a8200d3eb9590dda9d34b3575917ccfbaa4e2172d2b017f06c43876c0d759ae063526dfe0531233a99a0575a88cf2ca2923ff15fb2136e2928d5c09c884827c7d995d1313985fb5bc9cdf2ef82d3accce885c3dc722f091da8b3a0d25e029f9751c4e640a4125e101f5124ac24104b1c0cbbc4dff067024b0755e7adfa3e0bf8977e8b0f0a83ed397123c211cdce39ff743eb1331f2d839ca2b3acc379824d02697155eb096f13df0522eba8d8504580afc7d046f49c4c4b96a080fc64376e82ac024b57b02c4adbd305dbb0e201eae83f031931262bef23527611ae48ba773557052649fb4399b01f4b30105339c1b69a0acce6390e1bd73ca5ece4aa2b1c170082bf1bd1939d08ddf0e3b902be1d9cf8be5e50415db66d2dd39bb2fec45fe02f475862a0fb189c237dcdb3fbd4ac8866526b650fe56ef49cea8af9ac515b4e8083d5d4b6de0f67cdf20a056437a11c3e6260dd8bf3125f3b727bcd2a5085977a04b2af4485bc1c75994a09435207a10410e87f18815f86a96e3b88ff9e6d88ae6045e40f67c4b1497fd30b8bb8a4f2947830df1ba75ff5bcbaa923bab28be0f93adf8d8b103e9c6addf46bad1886f1712268bf1aba8d003899b7b9b3f586648fa0762813a2dd9b0e2c445323c158c5d1aff9efc5a9949bd40644607a7de3bd5f23e4c01eae875cf64305f9f7fb89d054850fb2001db144e325fa134571e47b3c4ef0eda552d9237c6e80412517431049053bb496841ec01d94469e724b00b7f938769d83d6a26c7b916f62f1ab4b15e4f213831fff01d996eb8da3a4b7b40388cb9b577d39bc07c5ffa36fbd3a970ef65f40453c06f020480c9844b0137e593c4b912a2699ddaf83eed9d4d4f75c2fd5ab77955f6c86286ffd05477eee427af3721efda03bbbe93700b8b4481c40ffc89fbff7f77d80fd870a1c5b43b3807e9865a96a65170329b3bfaa3bf7678f6476cd1741ac942dd7501bb0527e3cbfe8c657631cc168ca9c616d35dbc9ff0183204470768f15edd4e0f5da4e913fb9f0346cbf0463b2d305bfa618022ea46d57ec0066f3fd923b2a0093068f8c44fdf341aa70191123ecc677decec2638af294331c85e589f19e7fd40d6af4889399ef22845cebe0e16fe1d5e95538a06d333fbb1279acb9630a04d29d3fa81d68e0922b0b3c1ed6a9bf2114d6fbe0ed667e4e0e45a1d4559900f8bda2e45d8ad941a781b56b11e8d91fce213bb5aaf2cda077079a9be277dcf6fb831f91c89934e77b772e1e28806808a9962da0f12c2b66a8cd5ed71ed30f2058c3b1fa6505a36ac1839e7466d606d55eef911f7082f4dfbee0f933356d77763e9c3f7cc48c7cfef979296c5bd768b093709a2503b475ddb409aed67b9e20ff740a9ce6257a2777afe366288fde53c73754b3f155f736324e68753bdaabb3a89fc068c9c2c4ba955692bb9df2143c3ea608050eb3a813467f15ba599ac39e3425502f8882c7e9ff7234b934a998578cac9c18609eb5e1597b9f1c642295757d33e82a49cfa6841a92639fd2884b40bff047e8973793a74935273abd4c2c87fe92570eea4152d1e1aa8d0f3357373ebc8d674df41964cdf98abccd7a01a5f7a92d6267da37e5f375a9bf8e381fc92a39729ce2829373e44acc6d8ab12e1792319f9513d155b8d02eef6468a654589f16f6587711b79faca26120d3d3a07dc6372d6b87d5cf94014e0c0a721359cf3b270a1d661451cbe8acc4a4e0cecbc85d81109085e1a3e1f6e0d12618ac86b75a0a2674b3413e41cb27304fa36e200d6f414e41611f350977b4cab401dfa0e1aedd6c4f6a94c13a441f0c23aa0d3a8632038ec1c8677ce057fc0cd688c72af39e3a9582860b5271d97d1fc6b53fb3bf863c7da26656f1ce7fd19dd85e10d7d5788b2cea003c787403ec06a2ca93d02a867ac0935e68237c919a9aef9743de60194e766125d14dcc556624b712f4bd48d5ae908ac2327cad0ebd1c1f09a95ae315e97f16b7a07a95293330bc293af182c32f0c1fcc9a9ffc547675c7a9a987d7d6c356669104becc272e2d35164d0bfd5987d4994cc49c80e14434168be5bc899d8458692122d89d448855a696649b26c636aa29bf3ead86a35413f2c3094f33c107273e41770dcf489fbe300d377f95e7a2dde87f2856e1ac9cbaceb41a3436e2be30ef50e1a229d936a5b3e7474d1857dd79abcc3f214e294d98359005d4a346d58418e6cc1bf2ce1bf5bbacf4555bf302352278ab8579e9796085ff451e0776bd912193cc5e37f0be3a031428cc8b8e084b95a3d2f123096a8ec230bcb80c592c72d5a2021036b300a0454922176c944e9ea5f9a89937cbd7aaedebbc8d14c5824aa8eb60f85df68a4c38833c4ec06059d1a95087570ebfbba6d09eb1863242c376e4a7042e4745999da084e5d61fd6791a6540d26780adc1ab3c686d743ab9d6ef128d56296a8a7bf0f1809d9ba422bae6c0335918dc02ee37d3deb62db56038c39cac42b291d17fc1aeb3e120e175509c3b1f973fedee37f416d661801eacde0b44fa26c803840dbd8ea264880a6e0029b8c52075b367e53127d74116884f51faefb02e0b09eafdf278f45bde3234577609fa8abe02e39f421e5823bbbf562986f873a6ed40a129c903e41f427d58c4ff0240d8d5d5fccb724be2b51a6b68fa57b62a750d4542059e28cf7b42ea1fe7fe4b3d1ef26832cfd7291c6425a5a729c124a14c1a62a4db9e601daf6c03513324b10fed2f683f8452aa595b01b75b9d33d1d5c8fb6aeab65e61746edc0cad1356c55cca70cfd1d07934e46345ef6e4cea40369e9ebcf6c288be2115a659e94a61b14509f33817968b0aaadb80b19da1c1ae60adfe321f439a611ed048e0e47c5890274c4f170847376b483bc8f7a4cbc73d4fce63570c1b6d0a63e25ed9968177480996b7a957c82449745efe259ec6794adb9dbdba3bcd9bd78c7277dccee97bba1e6da4ae5e0ee0b582438f9f495b95b781085a069291df5f45d7c993523401f610da9899ed5bf88d1e2856353b89a45fe3e302af1c928f69832fdd6248d29623f54bb33682da4b2e3ea41e89cf93f0d5074911b084387b842d71c028b7dc5c39d036c603ec05518da52bb6e2c0e264c88d6e152026799766c315d68fcfa722e7a4c6fbf4c569788f2e2c7b35392fe8f8c76d0133d08225b2670bcfea2e0ce2d3e8dfc65a9491a0647aae3a7bec33f34d123d67e9b263df1e36f9abe10b6f4b2225b7bcadedb614391295028ba45b60ff94558394a0a5e7cc511e5b9f60cf31080fa75f0128a747c577e82d08b08593f49e32f1321548c9a4d7100320d08586ac93f479c09863917a9daa27d815827627fcd0ff762e2fbd94a6b32504ffe596a55eb0e6483e96b8a5b0c5e676715d890c2cd8de1c979ada9af1a622c4355542697059a67a945dba56aa99b81cc433b25641f055ae2485534f7a0ce642d135adfb6fc54bf55fc646d3b7e92126424ec4dfe0cd87673db51945acf7991fa7cff4b5a1534401fb98b57a2bdd813f8a275d5d5cb21c4e0a639247fa61068b1d277b2617b9d53403a7bb42268cb16703ff21941003327b362301ce13e6b18bbf00f4f32a41a5977e150e286948a1078e4f3120fb111297644c278897fea1bf9f0b10bdca1515557529eadc2fa70db9ec4b1f67a69e6445c3a16568eb2e3216431236e90e817b18d8a053648067c190c2a223f75a9226990432c4a04ad69b0c546e12ad644be807bd659b05d07fbad9d0b712d673b217f253aba11c980faf7cf7e8a58292e48225e4cbd44ef9efcbc18abe902e073e03d238202536c9227677064fedc0c3f6aeb3bd053ae58309ac3fae76fd2f03b9cbee972f258cab718c835a4444e5aa795764c32632276df32cd4995c1fd8a8a3f250a47af248a9f94fca12204b42a91fe89f184581d0ec18fad61f1e0c826f397a696c7f3be8c3e6a579436038f1cad6172e8097a0a6e9cac9827e13d972614f71cc11057bd14e4fd870aea136e5f7e715e800dccb55a50323daef8803d82acb48e5e79aec41d7ff813bb6df2ef8376cf8f8e77405e017259a1e4a366f4926667b2d8ca7be9a5e3c58dd001dc459bf0740144f186be7454d524f57b55db6f2e7d088bda521ec243c0f2ba901cf128dc2c330a9ab611904b50860028bed33c59426a77eae60bb5f0d00ac47115b341280feac45d99ab2e0f0fa8c098c67ea91c36cccd36aa9e198b81e9c15352c5beff9f20a754fd4d65281e7fde0d35071ce7895feffadc123dd90c76229ebb590324f2e96ae5ed1ace2520603fdc4769d32fece0d247b950bedc25bdc1bcd097c47bb2eca3fa352e3c1f50cf7b8083019bf424d44d399dd5"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "2d97ac5a5416d54c67f97aecf8f5297fbfe93980425104ba314c5c6bb9e41025aae1b920fff5"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x6c, 0x1, "bf695b56e515f377b5f4a0e22932440957d211edb6f7d57a9fad8c6b0d969684063bc6166b38986bfaf23a1359dd36e4acb949a14db8f3a1904c50592cd56710b926c2c6d6e4deaffe6ad2452b162cd84b1a0253225515aacfc5eae0636dbaa68201197fb3e4cb42"}, @INET_DIAG_REQ_BYTECODE={0x7e, 0x1, "b710c9efb7fc1894ab5fedc7ae96fcded0991269e5dbe5e87f22c5f9840912fb53c1fea6b1156f49c1622ac742d96dd9811aad8c179db761e7aa498020928e92614b20fc85e48346e961de53b3bbcc045e67ca31dd1727f392b80873a6a985f987e05f065b2b7ece33289eddb1161cfbcfed3010ace859f1676f"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "5b241692a44848beef0d9e3fbbff93f34731d3d2f059f9c46a10a3b0591b85faf84b795630cd66cb9f21038b7e29e141b765ef6a118e0c5745d0f3fd1222b24ebf8fa0c69bb531efc936680083fa07780e8a8c163606a97222d2f5e37170cc63be7290494cbfd2e621642c460946cf3bdbee046a58caf01e92ff3091a3dfe398c7497480909d"}, @INET_DIAG_REQ_BYTECODE={0x7b, 0x1, "1a61e4f71df849920bfff040c3df675220345babb7bb96c23d80b0d8759c495092b3b005b9bc760e07ae8234dafab10b9d33a84b41f19f19701bd5fe285ec994d1ea3da57d9eb2997455db3fdcc0ca67dd96c35f98acd82f424b545600fad2691f328ec3f0f3996ed342b5257e5789a1af4563fc66111b"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "698550399d93ad3be35b498e2780da02d73963046b51b54877f67cd6aa6a587945bc80088e790ed51dc4ed059bb1e51eb0bee7da8410d491609d6300d3b18be94ea87614a7ec178d2d9f9e154ab2c92c4962e0e8b6075f8fb412e77b3e44c54a8152a74b5b945bcb7ddbeba032d5c65dd658cc283279134532c115580fc1c59931adbdfdb075791cce853a96fbd59229ddae518a743f1bdcc9b2933359b8e3e1542cb7ab4c0ac3bb70e2598814648e8774071b96bdc9dcde04d67961290497dfa9bf9beb01a062f2c3f2b99923ffa04031c2af09b065f4b6468e69"}]}, 0x2354}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x28, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa9c9}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002900), r0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f00000029c0)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002980)={&(0x7f0000002940)={0x30, r4, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20000805) (async) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000002a00)={0x0, 0x4, 0xfff, 0x69, 0x81, 0x1ff, 0xff, 0x1a4c26a5, {0x0, @in6={{0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffeff}}, 0x3da9, 0xf5, 0x4d, 0x0, 0x9}}, &(0x7f0000002ac0)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000002b80)={r6, 0x64, &(0x7f0000002b00)=[@in6={0xa, 0x4e21, 0x5, @empty}, @in6={0xa, 0x4e21, 0x3ff, @loopback, 0x5}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e23, 0x0, @local, 0x7}]}, &(0x7f0000002bc0)=0x10) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002c00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000002c40)=0x0) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000002c80), r0) (async, rerun: 64) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000002f00)={0x0}, &(0x7f0000002f40)=0xc) (async, rerun: 32) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000005340)=0x0) (async, rerun: 32) r15 = getgid() (async) r16 = getpid() (async) r17 = getgid() (async) r18 = socket$kcm(0x29, 0x7, 0x0) sendmsg$netlink(r12, &(0x7f0000005440)={&(0x7f0000002cc0)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc, &(0x7f00000052c0)=[{&(0x7f0000002d00)={0x18, 0x3f, 0x100, 0x70bd29, 0x25dfdbfc, "", [@typed={0x5, 0xc1, 0x0, 0x0, @str='\x00'}]}, 0x18}, {&(0x7f0000002d40)={0x1b8, 0x2f, 0x8, 0x70bd28, 0x25dfdbfc, "", [@nested={0x1a0, 0xf0, 0x0, 0x1, [@generic="28971c96c26bf51524f322148ce2208ff014b27e46e2f87729b473b44d1254bbce64eb3a5e09c49ad7688ed2273aef4530915c64da5bd44509fb900fb08c655de9c56b27f06a23cdfec60c781a60dad274eda4fe4e5efae24e056f5b735b4aa9ddfeacf798c8c13cce60cd8c4c5c1250fbd8b3164733dce6a0c60160e4f76b6eed0dbd95489d9514033022ed4307754568e37148524493a382df88bb91d12a8c79048db4405450497ac01a1df1625e640ab9be2375eeb60bf372755f", @generic="0bae6df703aee713265274ca5191a369cbed9d9e3df6c43d9eaeed2c882ce9bffb22863931e53ea380518c5760025163283c3bd9883f133d79cbf85aa3b8b1139335694b93516f570732c1694cc75a132f198040f9a7b013780225ccbc7d14b0cef6f5305a2c9f6724c7b821c7f30811fe2c907a72448140ab38d3652fcb2db355b669451864fec3351bbf2a9e5ccb74cbb7cf7f26b711d8d061aabc61af23b125fc7b36ac82", @generic='?DG', @typed={0x1c, 0x9a, 0x0, 0x0, @str='source_mac_is_multicast\x00'}, @generic="c4ef1a", @nested={0x4, 0xaf}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x13}}]}, @typed={0x8, 0x14b, 0x0, 0x0, @u32=0x8}]}, 0x1b8}, {&(0x7f0000002f80)={0x11ac, 0x2f, 0x20, 0x70bd2b, 0x25dfdbfd, "", [@nested={0x18, 0xf7, 0x0, 0x1, [@nested={0x4, 0x144}, @nested={0x4, 0x107}, @nested={0x4, 0x4f}, @typed={0x8, 0xd1, 0x0, 0x0, @uid=r9}]}, @nested={0x1100, 0x86, 0x0, 0x1, [@generic="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", @typed={0x8, 0x56, 0x0, 0x0, @pid=r13}, @nested={0x4, 0x2c}, @nested={0x4, 0xf9}, @generic="01f96b8f21b5ef449653cad864abf1280f822a4a6c50a7c0fa8a236f33ef722690a05e2fbd16ba7fe298de21dc273b91aab66bdb7bd4199046b5ab04eb48f40f86304543e7778c7c9525c3d9c3797d8b34f59e2d14f0583ff059b8717e75ef0ca093653a3d18756134f645ed17430ce8c8906bb65982e1097001fad7af9dacd18dab3a5cda059e7b75bf7a5527b4db85bdcbd84f4bb0abdccae86411a9c26204015eff1e6dd00db850c1c9cfdd9c6c95d7818f4b0d74c0660b8bec4450dcacd9e4b917bbdfe3422bf09f731e3864f64f76605b9d1898ad2c34399e5869b672e6", @typed={0x8, 0x106, 0x0, 0x0, @u32}, @typed={0x4, 0xa9}]}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r11}, @generic="5ffb72b00723404722d72f97ea0450afcd6ee5cc83ec140269a3c0884ad4165ac2298357b27215e72d844baad1fb6ff40988c11b553df0253f3ccffca7881a5d3cec1508b3d0944b0d2328e009ec8ac948d0ec0a32e58cc9cf98e16b355c2d5fa25c009a59bf66d954c9fb70b83373b24616193582716acbb233"]}, 0x11ac}, {&(0x7f0000004140)={0x78, 0x2a, 0x4, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x34, 0x143, 0x0, 0x1, [@nested={0x4, 0x9a}, @nested={0x4, 0x2d}, @nested={0x4, 0x120}, @typed={0x8, 0xb4, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x8b}, @typed={0x4, 0xb7}, @typed={0x14, 0x7f, 0x0, 0x0, @ipv6=@remote}]}, @generic="67166b99d4131342d9ab49e8fe1a59d6f0fbc18d9353d6652aa05b38356aa668bfebb4d66d1cb08b1a56bb0ad5086be64b"]}, 0x78}, {&(0x7f00000041c0)={0x101c, 0x40, 0x200, 0x70bd27, 0x25dfdbfe, "", [@nested={0x100c, 0xff, 0x0, 0x1, [@typed={0x4, 0x15}, @nested={0x4, 0xfd}, @generic="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"]}]}, 0x101c}, {&(0x7f0000005200)={0x8c, 0x3c, 0x4, 0x70bd27, 0x5, "", [@nested={0x7b, 0x38, 0x0, 0x1, [@typed={0x8, 0x146, 0x0, 0x0, @fd=r2}, @nested={0x4, 0xac}, @nested={0x4, 0x141}, @typed={0xa, 0x10b, 0x0, 0x0, @str='-^)^#\x00'}, @generic="a72acecc73b69a13cf1a352692d75ebc37a6279d8806df692f093558cf4fec068657d1c3f5fe770cc01d5d6b1d74eecfa79fda712ec4dcbab334851b35e4c3972ef307e8f3f56accb2900ee448998ebc277ed2a59c0aac", @nested={0x4, 0xbb}]}]}, 0x8c}], 0x6, &(0x7f0000005380)=[@rights={{0x18, 0x1, 0x1, [r8, r10]}}, @cred={{0x1c, 0x1, 0x2, {r14, r9, r15}}}, @cred={{0x1c, 0x1, 0x2, {r16, r9, r17}}}, @rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [r7, r7, r8, r18, r5, r10, r10, r10, r11, r8]}}], 0xa8, 0x4000804}, 0x200088c0) (async) r19 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r19, &(0x7f0000005980)={&(0x7f0000005480)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000005880)=[{&(0x7f0000005500)=""/93, 0x5d}, {&(0x7f0000005580)=""/199, 0xc7}, {&(0x7f0000005680)=""/48, 0x30}, {&(0x7f00000056c0)=""/110, 0x6e}, {&(0x7f0000005740)=""/49, 0x31}, {&(0x7f0000005780)=""/133, 0x85}, {&(0x7f0000005840)=""/30, 0x1e}], 0x7, &(0x7f0000005900)=""/82, 0x52}, 0x2101) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000059c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x9, 0x0, 0xff, 0x0, 0x4, 0x5}, 0x20) getpeername(0xffffffffffffffff, &(0x7f0000005a00)=@l2tp6={0xa, 0x0, 0x0, @remote}, &(0x7f0000005a80)=0x80) 2.447279518s ago: executing program 0 (id=4427): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x1098, 0x64, 0xf31, 0xfffbfffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xfff3, 0xffff}, {0x4, 0x1b}}, [@filter_kind_options=@f_route={{0xa}, {0x1068, 0x2, [@TCA_ROUTE4_ACT={0x1064, 0x6, [@m_gact={0x1060, 0x19, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x6, 0x5, 0x400, 0xd4c1}}, @TCA_GACT_PARMS={0x18, 0x2, {0xc0d, 0x9, 0x2, 0x9, 0x4}}]}, {0x1004, 0x6, "4d2811e8797bad832dd4eea52055e77508a3c58c13ffda7b73b4c3409e7754226471c27ac7b7fd0f0df494e3e843ca0ecacd369d16b31e356e69a3e4d2b89eabfb1b7be438d570f6857b91769f958d067b47ed9cfaab869227eff9ab29bd3f929834a4c266eb62bc87f434c31cfcb1342d0e73973cae32969047fd6d59dfb6d770cf35b4022e1513cab7f66572ff8d935102957c63920811b9437c2a6f65910ed90a07f8c60c8c1a700be1f9c503e106d4e7ea2c2f5126d9a56c2f922e76e428aefce5e47d806e5542c54fcd319a4ed99b08f1945938c73f507279c57efdcccb3d5eb04b053f2cba2233729b96d7d7912c20231d0ec17d9442bb6791a56e2a4ec075dd7af6461f3cb88608e62dcb6c5a367a23d3ba9d29f30337ab5db0941be16bae1bf5100994810e827ecacf3afe04a87bdefba461d635077601bb1aee4f607f2febe4a1b8826753862ac6a6489e53c358d804ec3df1102175a108c085230a5c7ef0e90049d896d48a0b205750765a26e0a8d690b608abe2f1a6af25a87864c8b767c7ae8bdcdf50690b3e9005ea852c5919ac7d320ae8009daa266df947b01535c4b08b17d4e8aaca4c28930b42f83f3e631a689633265e242cf40c728e426b2ce753c41cc34a3664f90a469503968c16511db71f4408d1b54fb47937204947ac25c27cf98773718cbec98ef7e0875f0fa0b8b4a9df1d472b63f0a063338ce08a5a64bc2e3ab332910f78e7eb1cd5ed73a9632787524bcbe5eb4c85e78112e9c85a9ff38d22e4de5f90f7cc3051e4f6945556a2e68bd4b2d7556b05167744943c736a5610358f03ac030ccb3d55ef27df783bb0fe743ca228b4879d3d43ec7bd541527f9ac11fe40f1bc15ea7fb2bad220a04e8dbc44c4a98cba998ab72dacce85a6f8e8dc516a077d48ef2f0b64232ff557d7accc04b49f44dddf72fb0e5a1a83e5282ed299063921449bbfb00c2f802d1be5b12a9fcd8a47576e5d29ddb2de300ca05ca52ba1b93e849f0bea6bc50dfc42402f7b3539133d153eafc6c7365c2ca544bcc330ebfc71ac2b306ca724bdd298854840a41b6edb62d2f1f05ba92660867c540c44f28292429f382690874cab78ab6e207df2062243defcc13cad1d35727e496dd95111ab21ce6d3c11c1ada5cb4d8bacd735658240ef598fc8f42a7e05a96cea0ad072573ec42dda7a365b85a822bd3a5784a6b3ea87af58b156405596f82d03a2cc3ab0ee153099779669ea9fbefa98ec5578f6ccc56798867d9c9181b0d7c5cd3cec9639be396b01b56aae4ffd164c3cc8da132ef7d425136721ee3f636fd3414d173baf4269682743d79ac2b8f73fd4a05059ad4cfdf055c41e9ebd20734a87e86e3c4ccc65c2dc3bbd5ba91800e7535acc1420ef268236f74b7a673afdfd704bd9d726258d48298cd7f6e478655b433ac69ee88bbfab7dfa70f8db5a0296db50b03154a39721744f8f68170fdf8672274551d309c82c4d5355c1e7ba67a2c3e43196c6ad2f263a0e023f00f46289eae4a61cf2b53071c09c93f9cd9ad602e3eff1522b206d5205c9ee35f940475ebe7d96b1614507669872ebf1d16b06587d70a59e3269396ca78880e6981f6d41c0612aef794c8d41b8041c03e9d89128d6c24e78739fca75d7ffb2f20ba0199500faa243569b15bda4557ca143a0f06f4c77990adfd2cd2327916ea5a94f5aa3ad73c85fb58316982fe4a7ecc2cc65093e15a20c7f97ccb0bb37f4cedd3adcc81f317518c5c783937f9ac1645481f462416ac815034fea9ab556eca352140702a20f80b7a6a9108b923400cd1f035b0e518c5c0b3aa83bcbdafe279cee9c74a2545598179fb1cd64d4528f9c0863b50b282b55d9e0eef423f15b4fa8021735acebe72156c57673f65c862ab773bdb79365d76642382321e7967e6f3c8f15eb7a1e52bb64351d10b8fb3c3a64a24d5c8c41411fd950a96ba7fde52e549d4f8b845a7392e97d2f2a7609b4ce0364d17d46a2e20c4cade6789f1365b9e7416575685e4c548f67cd2f936a026db8ab688a24658341e11784658fe3ffeb24c400eb47f3f32b73927f3b8e7967e705adc642fd7fe824b664e61c8e2e89df37abbd55415ea71c7ec1d720532e57c9768fa500a9f50bc7aed70f229548da3911516ade212b2b7df70cd774fdf1d7451c16b1f7584fb94b3ffa100147df79ded37616432faeb1e6095838a8919ff98cd4bd61d70c9ac281e4d4058499a091ae38b4194b0855f44f86b907612b2b3cc5b6d30004a5e8b5be578c42bead73348d1f2fe9190ade2c765ecdf7de9fe217773a8691bcb6cace841007cc3e95088a94417481d3ceb39692e2e318c5b8fb43a7161f04e24f789c1a69969c4554840bf3cef7c75b683b48feff01ee58392ba76f8782276869484fae7fafc52f255d58485708e2b748a20c44a3261eeb0e02dfe1bc8fda6968c899915decdbdbd3170a5e8f151b08135e9ac7adf2f227d4924a9db9004ce63c13ad2f900e9c5d0842e149c516a93a1194a74f2e39ecbcc6eac58b7cc251da1a98c4264dd9d9fa9c8f608cee5b6165a4cc1818f0c300a8312c8766a19fdb2f814550ce559114e953c984b86a1f9a29e63e0fdb57bc67a8f43471f602caa87b8c732e0942d6a3a2267207e027daea02a6b5796d64f0acde50e183f19c228af76a973a37b10709b3b99e09a455c70b34010c62e623d1c53112f79826aca5299cfbfa196073c1d74cb7043aeba92d44b1ce3699f2dfd00a82a1eaaeb3777cbf6ac14fa19b272223d5eeb79ae3fe9d6d9186bc03b3d39cc08e2a5187ccfaa4557f0889b1d5954c81b6d8e321248efc0b5eb3ec6b730e8d0741e597d50db3609251ab056ae775847b913b4a5c31ef2e85a53488782c875d2e3fb71aa099e52da0cdaf94d68866a2af7c90c6c5ea4f7dada9de0db447c8cd0558740476662aa4ae6ed58ce0de8de6df9ed6cafbbf126ef52c8e2861cf903cc17817ab92fb380f10441ee205beb256defcf1de6d83577da8d9a6b7e125161a4b91a3fdb723f6d9c232526ff0b9577501e4bddac06767a275ba962c7d339ff9af9b43a32ade61b7ae07cec39e57ba39566ed1b495c0eab5e031e2f03990298b330267f3c9e1ceb921ea9a73e4e17f229eb805d667cde35085ca38fdb5f0691f00c3b8063ec57a804a146c454013bbafcb6586a4f5d9318c7824329f1ca4c8be124aa22c8a474393ee5ad75ff6c5199ad26bd5e19b94058acbfa9cf3f469e963eca4cce2a9d3b40696eefd8426e7dc5c8c538d1f630792d7e4e96fabe989ae758dad7f70b8827a29d71662679f12249498e86f8e63058b35bcc1cd60549ed1700eb4312158b4cf5f4521402b47f1ce2c89d9baf8e55811d14921e8b63123f89f03a5e7b759ea45a947b3626aee3efee014d821047aa58f583f76fe7a88f17c682d3301354161f742c1f6fff6ead2d4b4d2f354d86b84ee0be19445deaef60421d25aa353aaa89b83317ca510f98c66cd3d59847fd3f1bca8cbd89003e149e21bf0ff9999c803e06e47f051633576f762d2ba51c1aa848c75b45b20df2b73f580d0ee5d1edb927e6b19742e4c0f9066a00ad94eed0833648845bc816142c695142d745674a50310c4e58d4a3e8f2b9c1d39db6c57d6987111a81daaf137fa74acdaa6a514dc6dbbf846fd7321817ec6303c6680a0a5478e75789af2cdeaad9f3be68e80349c26662d8767c72857ca134d1149fe8d5347d354f479a9b847df5efc6c40f46b92da85b2aef8b6cf3ea7d6980ba47cbda19967f34325c116b2a6fc044898ec977a954a2db71503ef4906d85c06f3fe0ce453c0fc7f401f61b67b0f962cfa9ef7c3a3940e5ff0865b8d514ce31ec42900d6f216346cd82496361f96b25ed1574ba3dacb8edb1e4890cd48bee3f0aeca59f13fa66618ee2cdea6c560970e266d8ca01c4c2a8d832ecf26e5ad4bffb292f2efb6586e9d0c7467ec292ba9a272cd18dec6ec9672e0207652b1f933cc335abe428863a68f2e8af02ee84a9cd0e1d19b1d4128cb361462eb14e39a4002514baafe1dea342c799c9fc64a3cd87aee831ae7e8db7cd04feaf992f4387197bc601bd891a12228245bcb92412dfff1de3c9861074e6a43f1fdc090143bdb4fe950577325a27aac1ea49048ed2d54358b1525301bb34f09b58d6038d73b94eca8174fad05daf6ff8485587e1a86e700382546b1b3a3061dbf6b676384a7897fe7f3844fd584ed2038b6b78f75f04099068b72fb2cab6df7cf4312c5250fbb9a8fe5c1e123230b05d988c19239a0dc1701d40bbbf882785d18e507a17b7a439a62fec9019e282dced351ddb53b177f9693063dab8b4989db321d6de442f6590326e2a10a9b7fa86f12f411b034ddea2365dd22b222f6bba6e091b077165b2d4732b38c2fa9c6dd1666e39e5f0a747b2e6f70273d6c7903b84ac59c203cea37a1b9cb9b4e5c71212961b12dc0381865e5fe31151ee95696bf6252eae72e5e67db5e360330d228f687eee335cb14b10671f50e3cb52f2df9681f30261f0f1d59cac63bba6cce913bda0c83780dd81312136cecb3660323625eb6acdd2291579830fec5789e8508a77fc767b346c27103ca6443866ed59823d5e6f7e56f561e0bf505b42d1c531fee83c8e5f5b9c1394854772750672b50ea1009b8d1d87a85a7d0050ec86f7ce501c87c8a9b82a111973e395ac27ca59c782e453edf3ef21e2643cf93dd3fb1bfa6520fc8438d8af5453a5a62867bc62a5ac6b7b3b15a7f18de98fdbfce6268991fa9c3bf3875d7bd5943b4bf53a86bd4545045261a840c56642db1626fed85db16002ca2a1c55bd68caa7ec2aa623ae2f40159d803efb96be49940ac73ad729fe5c53a6271d331bb3f59acf9435459ad5f0aead9f8296554c367cd9ffc5aaf534a62f4aef6604be788485dd123a3483b718bc4f6166c4649aade8388c54517255b86ba723f1e509159766d97268fecff5c997d9807d772adc0fd2acbc6bc015034327a7730d28cba43870a2af448cf9219a401291edcf55625f07bc6c4663222406e956236ec6f5195eff55bc08c127302c123e3fe203a3a818f21bdaaa7f182bcb0d50cce552f42a72ccf329f09eb1fa775a5129d788d368fd5101c53b9aed120245f8955eb0b4b3fd06d096bc6e4e0e6388edb60a3f01b47bc428dc0e1c0999337a212eb459b7becf723ff0deb371fa6581d9a86f4bba4d9b39d1fdd35d1e35216f56b8838bd939f4a76636ea6942e36c656ead9982e5f02720d2918fd1b36c3b5ee7938f29dd07332e7f4dd68c3a30b853890df235a83994213e92f70246954d34cf2b64e74bc3fa90f9897aeabbdd4bdd995696d7cb86cb7ac70d808a8d3873b8cb3532c98892fc5fb6780e5d9fab8536290964fefd68509c2c497b2da0b7c26277936e6e0177982ed2f3cc799a471071b6294c844079294a57dfa5594b9f2ca38e73ab0a14e04f5d2b82c7040155893a8ca6c14732b37ace0ec4ee219d993605b9adc5ea1d58b06fc70837f0a98e139ed2161c070b32b44ef3568e8bbf6a962b31a5e11c59759710704fa667e38b7d8668151ed63b1bfac9b013ecf9add61b610611811ea00df3426139ba3502cba09cab6c5f7519c2c8cfa44c5d73fb3c7fa858f60a1558792b73150c184c16f8708ec090d3548f20e349547d26333d9a32837da562b09e72e0814be4b6a53186abeab40e26fba6955704573361a3e81730f104b789b18ac1209a0ffc531a607de621574dcc8715be0fd65f7b22049146dbd026900e237782ed2eae677d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1098}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.446939031s ago: executing program 2 (id=4428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r1 = socket(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl(r1, 0x8936, &(0x7f0000000000)) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 2.446735874s ago: executing program 3 (id=4429): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004", 0x56}], 0x1) 2.446607042s ago: executing program 4 (id=4430): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x96}, 0x2f) shutdown(r0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000020c0)={0x28, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x11, 0x11, 0x0, 0x1, [@generic="04af486355d81deed1c38b1595"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc}, 0x20000094) 2.278766431s ago: executing program 3 (id=4431): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) socket$kcm(0x10, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}}, 0x0) 893.529134ms ago: executing program 2 (id=4432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0xffff000000000000}, 0x0) 797.51573ms ago: executing program 0 (id=4433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)={0x20, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) 796.651059ms ago: executing program 3 (id=4434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000024400000008000300", @ANYRES32=r2, @ANYBLOB="0a0018000303030303030000440023800500110001000000080014"], 0x6c}, 0x1, 0x0, 0x0, 0x4008095}, 0x4) 796.259821ms ago: executing program 4 (id=4435): r0 = socket$inet6(0xa, 0x806, 0x0) listen(r0, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f0000000000)=0xfffff493, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20048881, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x3a) r3 = socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="0000b4ef00"], &(0x7f0000000a80)='GPL\x00', 0x9bf, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a40), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfe, 0x2}, 0xc) sendmmsg$inet6(r2, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000005c0)="fa29906886dee21d02dd765ed0aec0c88398f042330b41f77340acdb99551bdc3fb8f541e5e5ff7788a27b211e9ff286ca05de3a89a2b2b4d6f2ac332ee4cfc87335830ae52b5b9d6d49f09e8094f1659e4acc15eb3d614febcab6dd739590b1a495ae0ae024b36090da17252ac4519e7e6e99cf0af48ac3556879e72879ec48add3b7860ccad097a1ff34e45c26914c3b6aa8a8783d76bca55e51552a507d2f3321cdca58d7a1331dcb54806f084fae557603fe5f5df00b04d78cd8e6771550bd997c4e7067a621678129dd0dacdd8301514adfae7c77534ad0cb074c35078fc024416bd84d27dfaf395133a3e7", 0xee}, {&(0x7f00000006c0)="041aa3e93de2eec9968efe83f1e8c7bbef283254709c8d48730da5062b24cfb1460e7c5464b1718e6c9f1b32675e84e856a219399cb0160706b12f40247ebb7cdbc93a0dbd85c73533a1b511bd872279ef871837218cc05028dfd2378934cccc7d4187a177f45764d781c8fcf4efe5", 0x6f}, {&(0x7f0000000740)="8971ad009a06b5bb448a20c6350a0fa59f102d3e78c46408d8f0ecc1870cb7a2cba05a3b62287231b35f66d4e0f30798a9de3675685f7ffcf47f3d9734169a7b8a0c6bfe972382d87d56100ec54dfeff45966dc47ee41fa7da5d403693b3149d37736edbe507fc47bed1d4d9fad424c7fd54ad25973d7e2e5b", 0x79}, {&(0x7f0000000840)="2239864d6fd8b4b09ca5cf1272e40648ff6c7b4bff8a5aca1bf5f0ea600c46a35eaab600da512872c231a202d268b2409de0f2ceb1bcf78e5de568e9c24e26b2faafc34f0670870ba4d6ec0e4751d7eb236b8c607dbdf720b4189473a2648339e6780b2c5a64c3851f7fa51ec95910feb62bc1ebedfab5b8f20cb6306e30a6772ef55ce6c7668494f634db365176bdbd737eae3dad95b3a473dab390559aa5fd05ee0050", 0xa4}, {&(0x7f00000001c0)="a5c61b3f862777e2738b8cebf12c6d", 0xf}, {&(0x7f0000000240)="54d4a65f972e2e481676117ed43ad4e3b250", 0x12}], 0x6}}, {{&(0x7f0000000ac0)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x43}, 0x6f}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000b80)="81e46f38be1d87cd8cabd4c72544c69771628a8224a9e08de22ec5ac4e7156faf6243cc262367c213a46a4d72b8ee7e7497159695cf5f8d5aeb55f37423376", 0x3f}, {&(0x7f0000000c00)="0e45f66e2caab44cfaa2fd82e8db5574a1f35a7d5966ab48acf738cae5d7d0ed69c7168aa46ba8ea93af169847b14fb50da4a2bb41d7baa553f43f5d964300651a5c369a5476287504d93a2c18f52363d4f669b9d442a5c920c7774946c9ac7a8ce2d079186079e1b73a5e480ad7dbfabcf597e5ff04ed7b1403294dfa135e3a34a7dee8ccfbfbc557feb3f5c99138bb33181b7178576030f86d2114c708c09f1d1eea6dd81ccdc1019b190da8c292b961d435bf6036eb6ca318840167605ba37e3543d60d9e118f6535890b3d8e", 0xce}, {&(0x7f0000000d00)}], 0x3}}, {{0x0, 0x0, &(0x7f0000000f80), 0x0, &(0x7f0000001040)=[@tclass={{0x14, 0x29, 0x43, 0x80}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x7, 0xd, '\x00', [@generic={0x1}, @ra={0x5, 0x2, 0xfff7}, @jumbo={0xc2, 0x4, 0xfffffff8}, @generic={0x2, 0x57, "90c2b0b66251eac411a7611bbc9b8e494b20579584773a00cad320fc344baa3d18b76aaef5871ebb604c022f1c1670839e5c0da554dea287985f26ec3c358b0a73c0b51db3b781da2e5efb7b77d506abf6fe6b14fbbf15"}, @enc_lim={0x4, 0x1, 0x8}]}}}, @hopopts={{0x18, 0x29, 0x36, {0xff}}}], 0xb0}}], 0x3, 0x4000001) 649.62277ms ago: executing program 2 (id=4436): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd7000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x800}]}, 0x4c}}, 0x0) 648.011214ms ago: executing program 4 (id=4437): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 570.155272ms ago: executing program 0 (id=4438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000020c0)={0x28, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@nested={0x11, 0x11, 0x0, 0x1, [@generic="04af486355d81deed1c38b1595"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc}, 0x20000094) (fail_nth: 9) 503.350542ms ago: executing program 3 (id=4439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x18, {0x4e22, 0xffff}}]}, 0x24}, 0x1, 0x1000000}, 0x0) 404.686057ms ago: executing program 2 (id=4440): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002b00)=@newqdisc={0x60, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0xeec}]}}]}, 0x60}}, 0x4048) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, 0x0, &(0x7f0000000080)}, 0x1c) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$inet(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='p', 0x1}], 0x1}, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x7, &(0x7f0000000040), 0x4) (async) bind$unix(r5, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) (async) connect$unix(r5, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r3, 0xf3d}, 0x8) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) (async, rerun: 32) write(r8, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) (async) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020000000400000008008194d3e2b888717e5218c7f47a9ad3288c000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000b791ca671927feb132463f481cc1e300b7080000000000007b8af0ff00000000bfa10000000000000701001af8ffffffbfa400000000000007040000f0", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a00000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) (async, rerun: 32) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000200)) (rerun: 32) 0s ago: executing program 3 (id=4441): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x220c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004", 0x56}], 0x1) kernel console output (not intermixed with test programs): option. [ 390.457319][T16872] Use struct sctp_assoc_value instead [ 390.531041][T16872] No such timeout policy "syz0" [ 390.679412][T16882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3791'. [ 390.878844][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 390.932477][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3793'. [ 390.961617][T16630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.081052][T16630] veth0_vlan: entered promiscuous mode [ 391.127839][T16630] veth1_vlan: entered promiscuous mode [ 391.214961][T16901] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3797'. [ 391.235557][T16901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3797'. [ 391.251850][T16630] veth0_macvtap: entered promiscuous mode [ 391.256442][T16906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3799'. [ 391.287268][T16630] veth1_macvtap: entered promiscuous mode [ 391.345930][T16630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.373468][T16630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.411614][T16630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.439144][T16630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.447923][T16630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.476164][T16630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.486635][T16914] FAULT_INJECTION: forcing a failure. [ 391.486635][T16914] name failslab, interval 1, probability 0, space 0, times 0 [ 391.516416][T16914] CPU: 1 UID: 0 PID: 16914 Comm: syz.4.3801 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 391.516445][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 391.516458][T16914] Call Trace: [ 391.516465][T16914] [ 391.516474][T16914] dump_stack_lvl+0x241/0x360 [ 391.516513][T16914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.516536][T16914] ? __pfx__printk+0x10/0x10 [ 391.516560][T16914] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 391.516591][T16914] ? __pfx___might_resched+0x10/0x10 [ 391.516624][T16914] should_fail_ex+0x40a/0x550 [ 391.516662][T16914] should_failslab+0xac/0x100 [ 391.516692][T16914] kmem_cache_alloc_node_noprof+0x77/0x380 [ 391.516721][T16914] ? __alloc_skb+0x1c3/0x440 [ 391.516747][T16914] __alloc_skb+0x1c3/0x440 [ 391.516772][T16914] ? __pfx___alloc_skb+0x10/0x10 [ 391.516796][T16914] ? dev_get_by_index+0x23/0x2d0 [ 391.516827][T16914] bcm_can_tx+0x1fa/0x9a0 [ 391.516851][T16914] ? __pfx___debug_object_init+0x10/0x10 [ 391.516890][T16914] ? __pfx_bcm_can_tx+0x10/0x10 [ 391.516911][T16914] ? hrtimer_try_to_cancel+0x45b/0x4a0 [ 391.516943][T16914] bcm_tx_setup+0xe45/0x18a0 [ 391.516985][T16914] bcm_sendmsg+0x585/0x7a0 [ 391.517014][T16914] ? __pfx_bcm_sendmsg+0x10/0x10 [ 391.517045][T16914] ? aa_sock_msg_perm+0x91/0x160 [ 391.517083][T16914] ? __pfx_bcm_sendmsg+0x10/0x10 [ 391.517104][T16914] __sock_sendmsg+0x221/0x270 [ 391.517136][T16914] ____sys_sendmsg+0x53a/0x860 [ 391.517169][T16914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.517195][T16914] ? __fget_files+0x2a/0x410 [ 391.517229][T16914] ? __fget_files+0x2a/0x410 [ 391.517270][T16914] __sys_sendmsg+0x269/0x350 [ 391.517299][T16914] ? __pfx___sys_sendmsg+0x10/0x10 [ 391.517337][T16914] ? do_sys_openat2+0x17a/0x1d0 [ 391.517396][T16914] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 391.517430][T16914] ? do_syscall_64+0x100/0x230 [ 391.517466][T16914] ? do_syscall_64+0xb6/0x230 [ 391.517507][T16914] do_syscall_64+0xf3/0x230 [ 391.517539][T16914] ? clear_bhb_loop+0x35/0x90 [ 391.517572][T16914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.517600][T16914] RIP: 0033:0x7fd57118d169 [ 391.517619][T16914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.517636][T16914] RSP: 002b:00007fd572042038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.517658][T16914] RAX: ffffffffffffffda RBX: 00007fd5713a5fa0 RCX: 00007fd57118d169 [ 391.517674][T16914] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 391.517687][T16914] RBP: 00007fd572042090 R08: 0000000000000000 R09: 0000000000000000 [ 391.517699][T16914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.517712][T16914] R13: 0000000000000000 R14: 00007fd5713a5fa0 R15: 00007ffd110a22d8 [ 391.517744][T16914] [ 391.806782][T16916] FAULT_INJECTION: forcing a failure. [ 391.806782][T16916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.855592][T16916] CPU: 1 UID: 0 PID: 16916 Comm: syz.2.3802 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 391.855622][T16916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 391.855635][T16916] Call Trace: [ 391.855642][T16916] [ 391.855651][T16916] dump_stack_lvl+0x241/0x360 [ 391.855682][T16916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.855705][T16916] ? __pfx__printk+0x10/0x10 [ 391.855728][T16916] ? __pfx_lock_release+0x10/0x10 [ 391.855770][T16916] should_fail_ex+0x40a/0x550 [ 391.855807][T16916] _copy_from_iter+0x1df/0x1c40 [ 391.855835][T16916] ? __virt_addr_valid+0x183/0x530 [ 391.855856][T16916] ? __pfx_lock_release+0x10/0x10 [ 391.855893][T16916] ? __pfx__copy_from_iter+0x10/0x10 [ 391.855919][T16916] ? __pfx__copy_from_iter+0x10/0x10 [ 391.855951][T16916] ? page_copy_sane+0x154/0x260 [ 391.855979][T16916] copy_page_from_iter+0x7a/0x100 [ 391.856008][T16916] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 391.856048][T16916] tun_get_user+0x1910/0x4860 [ 391.856087][T16916] ? __lock_acquire+0x1397/0x2100 [ 391.856125][T16916] ? __pfx_tun_get_user+0x10/0x10 [ 391.856168][T16916] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 391.856189][T16916] ? tun_get+0x1e/0x2f0 [ 391.856211][T16916] ? __pfx_lock_release+0x10/0x10 [ 391.856256][T16916] ? tun_get+0x1e/0x2f0 [ 391.856277][T16916] ? tun_get+0x27d/0x2f0 [ 391.856299][T16916] tun_chr_write_iter+0x10d/0x1f0 [ 391.856322][T16916] vfs_write+0xacf/0xd10 [ 391.856346][T16916] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 391.856368][T16916] ? __pfx_vfs_write+0x10/0x10 [ 391.856384][T16916] ? do_sys_openat2+0x17a/0x1d0 [ 391.856411][T16916] ? __fget_files+0x2a/0x410 [ 391.856437][T16916] ? __fget_files+0x2a/0x410 [ 391.856474][T16916] ksys_write+0x18f/0x2b0 [ 391.856493][T16916] ? __pfx_ksys_write+0x10/0x10 [ 391.856511][T16916] ? do_syscall_64+0x100/0x230 [ 391.856538][T16916] ? do_syscall_64+0xb6/0x230 [ 391.856565][T16916] do_syscall_64+0xf3/0x230 [ 391.856590][T16916] ? clear_bhb_loop+0x35/0x90 [ 391.856616][T16916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.856638][T16916] RIP: 0033:0x7f7e6578d169 [ 391.856653][T16916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.856668][T16916] RSP: 002b:00007f7e6665b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.856686][T16916] RAX: ffffffffffffffda RBX: 00007f7e659a5fa0 RCX: 00007f7e6578d169 [ 391.856698][T16916] RDX: 000000000000fdef RSI: 00002000000005c0 RDI: 0000000000000003 [ 391.856709][T16916] RBP: 00007f7e6665b090 R08: 0000000000000000 R09: 0000000000000000 [ 391.856719][T16916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 391.856730][T16916] R13: 0000000000000000 R14: 00007f7e659a5fa0 R15: 00007ffcd56d8548 [ 391.856754][T16916] [ 392.131518][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 392.153031][ T5845] Bluetooth: hci1: command tx timeout [ 392.473295][T16924] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 392.476568][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.512215][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.565862][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.575346][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.884263][T16947] netlink: 312 bytes leftover after parsing attributes in process `syz.0.3813'. [ 393.199205][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 393.500065][T16968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3820'. [ 393.530028][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3823'. [ 393.580708][T16968] tipc: Enabling of bearer rejected, failed to enable media [ 394.060889][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.077471][T16997] netlink: 'syz.3.3831': attribute type 32 has an invalid length. [ 394.238861][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 394.297932][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.392969][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.489573][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.679894][ T53] bridge_slave_1: left allmulticast mode [ 394.685613][ T53] bridge_slave_1: left promiscuous mode [ 394.702339][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.718265][ T53] bridge_slave_0: left allmulticast mode [ 394.724490][ T53] bridge_slave_0: left promiscuous mode [ 394.731479][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.025291][T17009] netlink: 'syz.0.3832': attribute type 12 has an invalid length. [ 395.073715][T17009] netlink: 'syz.0.3832': attribute type 11 has an invalid length. [ 395.278976][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 395.418417][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 395.439405][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 395.447726][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 395.456228][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 395.464755][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 395.473406][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 395.562788][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.574781][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.587649][ T53] bond0 (unregistering): Released all slaves [ 395.599525][T17008] netlink: 'syz.0.3832': attribute type 29 has an invalid length. [ 395.608092][T17007] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 395.627378][T17016] __nla_validate_parse: 3 callbacks suppressed [ 395.627398][T17016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3837'. [ 395.662391][T17022] lo speed is unknown, defaulting to 1000 [ 395.962808][T17034] FAULT_INJECTION: forcing a failure. [ 395.962808][T17034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.038368][T17034] CPU: 1 UID: 0 PID: 17034 Comm: syz.3.3841 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 396.038400][T17034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 396.038414][T17034] Call Trace: [ 396.038422][T17034] [ 396.038431][T17034] dump_stack_lvl+0x241/0x360 [ 396.038463][T17034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.038487][T17034] ? __pfx__printk+0x10/0x10 [ 396.038516][T17034] ? snprintf+0xda/0x120 [ 396.038544][T17034] should_fail_ex+0x40a/0x550 [ 396.038582][T17034] _copy_to_user+0x31/0xb0 [ 396.038617][T17034] simple_read_from_buffer+0xca/0x150 [ 396.038648][T17034] proc_fail_nth_read+0x1e9/0x250 [ 396.038679][T17034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.038712][T17034] ? rw_verify_area+0x243/0x630 [ 396.038734][T17034] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 396.038764][T17034] vfs_read+0x1f8/0xb40 [ 396.038788][T17034] ? fdget_pos+0x254/0x320 [ 396.038819][T17034] ? __pfx___mutex_lock+0x10/0x10 [ 396.038853][T17034] ? __pfx_vfs_read+0x10/0x10 [ 396.038872][T17034] ? do_sys_openat2+0x17a/0x1d0 [ 396.038906][T17034] ? __fget_files+0x2a/0x410 [ 396.038948][T17034] ? __fget_files+0x395/0x410 [ 396.038976][T17034] ? __fget_files+0x2a/0x410 [ 396.039016][T17034] ksys_read+0x18f/0x2b0 [ 396.039041][T17034] ? __pfx_ksys_read+0x10/0x10 [ 396.039065][T17034] ? do_syscall_64+0x100/0x230 [ 396.039101][T17034] ? do_syscall_64+0xb6/0x230 [ 396.039137][T17034] do_syscall_64+0xf3/0x230 [ 396.039169][T17034] ? clear_bhb_loop+0x35/0x90 [ 396.039204][T17034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.039232][T17034] RIP: 0033:0x7f092758bb7c [ 396.039251][T17034] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 396.039269][T17034] RSP: 002b:00007f092845f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 396.039292][T17034] RAX: ffffffffffffffda RBX: 00007f09277a5fa0 RCX: 00007f092758bb7c [ 396.039307][T17034] RDX: 000000000000000f RSI: 00007f092845f0a0 RDI: 0000000000000004 [ 396.039321][T17034] RBP: 00007f092845f090 R08: 0000000000000000 R09: 0000000000000000 [ 396.039333][T17034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.039346][T17034] R13: 0000000000000000 R14: 00007f09277a5fa0 R15: 00007ffc5e6ff8e8 [ 396.039378][T17034] [ 396.300190][T17042] netlink: 'syz.0.3839': attribute type 10 has an invalid length. [ 396.318836][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 396.496893][T17044] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 397.118404][T17075] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3852'. [ 397.244118][ T53] hsr_slave_0: left promiscuous mode [ 397.279361][ T53] hsr_slave_1: left promiscuous mode [ 397.291762][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.325906][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.343765][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.354239][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.359067][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 397.366325][T17090] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.3858'. [ 397.389120][T17090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 397.441268][ T53] veth1_macvtap: left promiscuous mode [ 397.453621][ T53] veth0_macvtap: left promiscuous mode [ 397.465770][ T53] veth1_vlan: left promiscuous mode [ 397.478327][ T53] veth0_vlan: left promiscuous mode [ 397.486376][T17092] FAULT_INJECTION: forcing a failure. [ 397.486376][T17092] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.507975][T17092] CPU: 1 UID: 0 PID: 17092 Comm: syz.2.3860 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 397.508004][T17092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 397.508018][T17092] Call Trace: [ 397.508025][T17092] [ 397.508035][T17092] dump_stack_lvl+0x241/0x360 [ 397.508066][T17092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.508099][T17092] ? __pfx__printk+0x10/0x10 [ 397.508120][T17092] ? tomoyo_path_number_perm+0x5dd/0x770 [ 397.508160][T17092] should_fail_ex+0x40a/0x550 [ 397.508196][T17092] _copy_from_user+0x2d/0xb0 [ 397.508225][T17092] get_user_ifreq+0xc3/0x200 [ 397.508253][T17092] sock_do_ioctl+0x1a5/0x460 [ 397.508286][T17092] ? __pfx_sock_do_ioctl+0x10/0x10 [ 397.508333][T17092] sock_ioctl+0x5c7/0x8d0 [ 397.508362][T17092] ? __pfx_sock_ioctl+0x10/0x10 [ 397.508388][T17092] ? __fget_files+0x2a/0x410 [ 397.508421][T17092] ? __fget_files+0x2a/0x410 [ 397.508456][T17092] ? __pfx_sock_ioctl+0x10/0x10 [ 397.508483][T17092] __se_sys_ioctl+0xf5/0x170 [ 397.508508][T17092] do_syscall_64+0xf3/0x230 [ 397.508541][T17092] ? clear_bhb_loop+0x35/0x90 [ 397.508574][T17092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.508608][T17092] RIP: 0033:0x7f7e6578d169 [ 397.508626][T17092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.508644][T17092] RSP: 002b:00007f7e6665b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 397.508667][T17092] RAX: ffffffffffffffda RBX: 00007f7e659a5fa0 RCX: 00007f7e6578d169 [ 397.508683][T17092] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 397.508696][T17092] RBP: 00007f7e6665b090 R08: 0000000000000000 R09: 0000000000000000 [ 397.508707][T17092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.508719][T17092] R13: 0000000000000000 R14: 00007f7e659a5fa0 R15: 00007ffcd56d8548 [ 397.508750][T17092] [ 397.549384][T17094] netlink: 'syz.0.3861': attribute type 32 has an invalid length. [ 397.618986][ T5148] Bluetooth: hci1: command tx timeout [ 398.355336][T17116] FAULT_INJECTION: forcing a failure. [ 398.355336][T17116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.371296][T17116] CPU: 0 UID: 0 PID: 17116 Comm: syz.2.3871 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 398.371326][T17116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 398.371339][T17116] Call Trace: [ 398.371346][T17116] [ 398.371355][T17116] dump_stack_lvl+0x241/0x360 [ 398.371387][T17116] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.371410][T17116] ? __pfx__printk+0x10/0x10 [ 398.371438][T17116] ? snprintf+0xda/0x120 [ 398.371466][T17116] should_fail_ex+0x40a/0x550 [ 398.371503][T17116] _copy_to_user+0x31/0xb0 [ 398.371534][T17116] simple_read_from_buffer+0xca/0x150 [ 398.371566][T17116] proc_fail_nth_read+0x1e9/0x250 [ 398.371598][T17116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.371632][T17116] ? rw_verify_area+0x243/0x630 [ 398.371652][T17116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 398.371683][T17116] vfs_read+0x1f8/0xb40 [ 398.371706][T17116] ? fdget_pos+0x254/0x320 [ 398.371737][T17116] ? __pfx___mutex_lock+0x10/0x10 [ 398.371770][T17116] ? __pfx_vfs_read+0x10/0x10 [ 398.371788][T17116] ? do_sys_openat2+0x17a/0x1d0 [ 398.371821][T17116] ? __fget_files+0x2a/0x410 [ 398.371860][T17116] ? __fget_files+0x395/0x410 [ 398.371888][T17116] ? __fget_files+0x2a/0x410 [ 398.371928][T17116] ksys_read+0x18f/0x2b0 [ 398.371953][T17116] ? __pfx_ksys_read+0x10/0x10 [ 398.371976][T17116] ? do_syscall_64+0x100/0x230 [ 398.372011][T17116] ? do_syscall_64+0xb6/0x230 [ 398.372046][T17116] do_syscall_64+0xf3/0x230 [ 398.372079][T17116] ? clear_bhb_loop+0x35/0x90 [ 398.372113][T17116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.372141][T17116] RIP: 0033:0x7f7e6578bb7c [ 398.372160][T17116] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 398.372178][T17116] RSP: 002b:00007f7e6665b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 398.372201][T17116] RAX: ffffffffffffffda RBX: 00007f7e659a5fa0 RCX: 00007f7e6578bb7c [ 398.372216][T17116] RDX: 000000000000000f RSI: 00007f7e6665b0a0 RDI: 0000000000000004 [ 398.372230][T17116] RBP: 00007f7e6665b090 R08: 0000000000000000 R09: 0000000000000000 [ 398.372243][T17116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.372256][T17116] R13: 0000000000000000 R14: 00007f7e659a5fa0 R15: 00007ffcd56d8548 [ 398.372288][T17116] [ 398.398944][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 398.731025][T17119] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3872'. [ 398.775557][ T53] team0 (unregistering): Port device team_slave_1 removed [ 398.828281][ T53] team0 (unregistering): Port device team_slave_0 removed [ 399.438696][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 399.618429][T17022] chnl_net:caif_netlink_parms(): no params data found [ 399.686768][ T5148] Bluetooth: hci1: command tx timeout [ 399.750394][T17138] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.996561][T17022] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.023988][T17022] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.051832][T17022] bridge_slave_0: entered allmulticast mode [ 400.091172][T17022] bridge_slave_0: entered promiscuous mode [ 400.120448][T17022] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.132616][T17022] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.198866][T17022] bridge_slave_1: entered allmulticast mode [ 400.207361][T17022] bridge_slave_1: entered promiscuous mode [ 400.301047][T17162] tipc: Enabling of bearer rejected, already enabled [ 400.321817][T17022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.355900][T17168] FAULT_INJECTION: forcing a failure. [ 400.355900][T17168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.388263][T17022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.435955][T17168] CPU: 1 UID: 0 PID: 17168 Comm: syz.0.3886 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 400.435986][T17168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 400.435999][T17168] Call Trace: [ 400.436006][T17168] [ 400.436015][T17168] dump_stack_lvl+0x241/0x360 [ 400.436047][T17168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.436071][T17168] ? __pfx__printk+0x10/0x10 [ 400.436094][T17168] ? __pfx_lock_release+0x10/0x10 [ 400.436135][T17168] should_fail_ex+0x40a/0x550 [ 400.436172][T17168] _copy_from_iter+0x1df/0x1c40 [ 400.436197][T17168] ? __virt_addr_valid+0x183/0x530 [ 400.436217][T17168] ? __pfx_lock_release+0x10/0x10 [ 400.436254][T17168] ? __alloc_skb+0x28f/0x440 [ 400.436274][T17168] ? __pfx__copy_from_iter+0x10/0x10 [ 400.436300][T17168] ? __virt_addr_valid+0x183/0x530 [ 400.436319][T17168] ? __virt_addr_valid+0x183/0x530 [ 400.436336][T17168] ? __virt_addr_valid+0x45f/0x530 [ 400.436356][T17168] ? __phys_addr_symbol+0x2f/0x70 [ 400.436375][T17168] ? __check_object_size+0x47a/0x730 [ 400.436407][T17168] netlink_sendmsg+0x742/0xcb0 [ 400.436447][T17168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.436477][T17168] ? aa_sock_msg_perm+0x91/0x160 [ 400.436516][T17168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.436540][T17168] __sock_sendmsg+0x221/0x270 [ 400.436572][T17168] __sys_sendto+0x363/0x4c0 [ 400.436597][T17168] ? __pfx___sys_sendto+0x10/0x10 [ 400.436631][T17168] ? __fget_files+0x2a/0x410 [ 400.436671][T17168] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 400.436715][T17168] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.436754][T17168] __x64_sys_sendto+0xde/0x100 [ 400.436778][T17168] do_syscall_64+0xf3/0x230 [ 400.436811][T17168] ? clear_bhb_loop+0x35/0x90 [ 400.436845][T17168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.436873][T17168] RIP: 0033:0x7f5e4238effc [ 400.436892][T17168] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 400.436910][T17168] RSP: 002b:00007f5e4326cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 400.436932][T17168] RAX: ffffffffffffffda RBX: 00007f5e4326cfc0 RCX: 00007f5e4238effc [ 400.436953][T17168] RDX: 0000000000000020 RSI: 00007f5e4326d010 RDI: 0000000000000003 [ 400.436965][T17168] RBP: 0000000000000000 R08: 00007f5e4326cf14 R09: 000000000000000c [ 400.436979][T17168] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 400.436991][T17168] R13: 00007f5e4326cf68 R14: 00007f5e4326d010 R15: 0000000000000000 [ 400.437021][T17168] [ 400.687793][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 400.798812][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.829169][T17022] team0: Port device team_slave_0 added [ 400.839482][T17022] team0: Port device team_slave_1 added [ 400.866187][T17022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.873354][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.899828][T17022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.913272][T17022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.920601][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.946950][T17022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.993150][T17022] hsr_slave_0: entered promiscuous mode [ 400.999857][T17022] hsr_slave_1: entered promiscuous mode [ 401.006059][T17022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.014011][T17022] Cannot create hsr debugfs directory [ 401.315956][T17182] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3891'. [ 401.355477][T17182] netlink: 'syz.3.3891': attribute type 10 has an invalid length. [ 401.408206][T17182] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 401.758939][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 401.767155][ T5148] Bluetooth: hci1: command tx timeout [ 402.277350][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3898'. [ 402.319026][T17219] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3898'. [ 402.388210][T17222] FAULT_INJECTION: forcing a failure. [ 402.388210][T17222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.411342][T17222] CPU: 0 UID: 0 PID: 17222 Comm: syz.4.3899 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 402.411371][T17222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 402.411382][T17222] Call Trace: [ 402.411389][T17222] [ 402.411397][T17222] dump_stack_lvl+0x241/0x360 [ 402.411425][T17222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 402.411445][T17222] ? __pfx__printk+0x10/0x10 [ 402.411465][T17222] ? __pfx_lock_release+0x10/0x10 [ 402.411500][T17222] should_fail_ex+0x40a/0x550 [ 402.411533][T17222] _copy_from_iter+0x1df/0x1c40 [ 402.411558][T17222] ? __virt_addr_valid+0x183/0x530 [ 402.411577][T17222] ? __pfx_lock_release+0x10/0x10 [ 402.411609][T17222] ? __pfx__copy_from_iter+0x10/0x10 [ 402.411630][T17222] ? __pfx__copy_from_iter+0x10/0x10 [ 402.411657][T17222] ? page_copy_sane+0x154/0x260 [ 402.411681][T17222] copy_page_from_iter+0x7a/0x100 [ 402.411706][T17222] skb_copy_datagram_from_iter+0x2d9/0x6a0 [ 402.411742][T17222] tun_get_user+0x1910/0x4860 [ 402.411785][T17222] ? __lock_acquire+0x1397/0x2100 [ 402.411819][T17222] ? __pfx_tun_get_user+0x10/0x10 [ 402.411855][T17222] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 402.411874][T17222] ? tun_get+0x1e/0x2f0 [ 402.411893][T17222] ? __pfx_lock_release+0x10/0x10 [ 402.411933][T17222] ? tun_get+0x1e/0x2f0 [ 402.411951][T17222] ? tun_get+0x27d/0x2f0 [ 402.411973][T17222] tun_chr_write_iter+0x10d/0x1f0 [ 402.411997][T17222] vfs_write+0xacf/0xd10 [ 402.412020][T17222] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 402.412042][T17222] ? __pfx_vfs_write+0x10/0x10 [ 402.412059][T17222] ? do_sys_openat2+0x17a/0x1d0 [ 402.412088][T17222] ? __fget_files+0x2a/0x410 [ 402.412117][T17222] ? __fget_files+0x2a/0x410 [ 402.412150][T17222] ksys_write+0x18f/0x2b0 [ 402.412172][T17222] ? __pfx_ksys_write+0x10/0x10 [ 402.412191][T17222] ? do_syscall_64+0x100/0x230 [ 402.412222][T17222] ? do_syscall_64+0xb6/0x230 [ 402.412252][T17222] do_syscall_64+0xf3/0x230 [ 402.412280][T17222] ? clear_bhb_loop+0x35/0x90 [ 402.412309][T17222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.412333][T17222] RIP: 0033:0x7fd57118d169 [ 402.412350][T17222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.412371][T17222] RSP: 002b:00007fd572042038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.412391][T17222] RAX: ffffffffffffffda RBX: 00007fd5713a5fa0 RCX: 00007fd57118d169 [ 402.412405][T17222] RDX: 000000000000fdef RSI: 00002000000005c0 RDI: 0000000000000003 [ 402.412416][T17222] RBP: 00007fd572042090 R08: 0000000000000000 R09: 0000000000000000 [ 402.412427][T17222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.412438][T17222] R13: 0000000000000000 R14: 00007fd5713a5fa0 R15: 00007ffd110a22d8 [ 402.412465][T17222] [ 402.514075][T17022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 402.549599][T17162] Set syz1 is full, maxelem 65536 reached [ 402.709687][T17022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 402.799012][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 402.835908][T17022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 402.879525][T17022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 402.921299][T17227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.821703][T17248] FAULT_INJECTION: forcing a failure. [ 403.821703][T17248] name failslab, interval 1, probability 0, space 0, times 0 [ 403.838967][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 403.856253][ T5148] Bluetooth: hci1: command tx timeout [ 403.892540][T17248] CPU: 0 UID: 0 PID: 17248 Comm: syz.0.3909 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 403.892571][T17248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 403.892584][T17248] Call Trace: [ 403.892592][T17248] [ 403.892601][T17248] dump_stack_lvl+0x241/0x360 [ 403.892632][T17248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 403.892656][T17248] ? __pfx__printk+0x10/0x10 [ 403.892686][T17248] ? __kmalloc_cache_noprof+0x48/0x390 [ 403.892718][T17248] ? __pfx___might_resched+0x10/0x10 [ 403.892752][T17248] should_fail_ex+0x40a/0x550 [ 403.892788][T17248] should_failslab+0xac/0x100 [ 403.892817][T17248] __kmalloc_cache_noprof+0x70/0x390 [ 403.892845][T17248] ? dev_ethtool+0x145/0x1bc0 [ 403.892879][T17248] dev_ethtool+0x145/0x1bc0 [ 403.892916][T17248] ? dev_load+0x21/0x1f0 [ 403.892941][T17248] ? __pfx_dev_ethtool+0x10/0x10 [ 403.892971][T17248] ? tomoyo_path_number_perm+0x5dd/0x770 [ 403.893015][T17248] ? dev_load+0x21/0x1f0 [ 403.893041][T17248] dev_ioctl+0x43c/0x1380 [ 403.893070][T17248] sock_do_ioctl+0x240/0x460 [ 403.893103][T17248] ? __pfx_sock_do_ioctl+0x10/0x10 [ 403.893150][T17248] sock_ioctl+0x5c7/0x8d0 [ 403.893178][T17248] ? __pfx_sock_ioctl+0x10/0x10 [ 403.893204][T17248] ? __fget_files+0x2a/0x410 [ 403.893238][T17248] ? __fget_files+0x2a/0x410 [ 403.893272][T17248] ? __pfx_sock_ioctl+0x10/0x10 [ 403.893300][T17248] __se_sys_ioctl+0xf5/0x170 [ 403.893325][T17248] do_syscall_64+0xf3/0x230 [ 403.893357][T17248] ? clear_bhb_loop+0x35/0x90 [ 403.893390][T17248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.893419][T17248] RIP: 0033:0x7f5e4238d169 [ 403.893437][T17248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.893454][T17248] RSP: 002b:00007f5e4326e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 403.893477][T17248] RAX: ffffffffffffffda RBX: 00007f5e425a5fa0 RCX: 00007f5e4238d169 [ 403.893492][T17248] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003 [ 403.893506][T17248] RBP: 00007f5e4326e090 R08: 0000000000000000 R09: 0000000000000000 [ 403.893518][T17248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.893530][T17248] R13: 0000000000000000 R14: 00007f5e425a5fa0 R15: 00007ffcacb6b9d8 [ 403.893561][T17248] [ 404.190677][T17256] Cannot find add_set index 4 as target [ 404.415459][T17264] netlink: 'syz.0.3912': attribute type 1 has an invalid length. [ 404.884847][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 405.592463][ T5210] udevd[5210]: worker [5843] /devices/virtual/block/nbd0 is taking a long time [ 405.918815][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 406.149522][T17264] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 406.175112][T17022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.277239][T17022] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.341294][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.348447][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.432233][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.439448][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.498573][T17277] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3917'. [ 406.558406][T17276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'. [ 406.659481][T17281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3918'. [ 406.703066][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3918'. [ 406.729739][T17281] netlink: 'syz.0.3918': attribute type 10 has an invalid length. [ 406.765632][T17288] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 406.958967][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 407.021012][T17305] netlink: 'syz.2.3924': attribute type 1 has an invalid length. [ 407.035612][T17022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.050494][T17307] netlink: 'syz.2.3924': attribute type 1 has an invalid length. [ 407.087508][T17305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3924'. [ 407.128449][T17022] veth0_vlan: entered promiscuous mode [ 407.157849][T17022] veth1_vlan: entered promiscuous mode [ 407.261642][T17022] veth0_macvtap: entered promiscuous mode [ 407.297098][T17022] veth1_macvtap: entered promiscuous mode [ 407.344924][T17022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.391328][T17022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.424796][T17022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.470413][T17022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.485012][T17022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.503698][T17022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.537550][T17321] netlink: 'syz.2.3928': attribute type 5 has an invalid length. [ 407.596459][T17321] : entered promiscuous mode [ 407.745793][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.793116][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.883764][T17331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3930'. [ 407.959359][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.967336][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.969238][T17339] FAULT_INJECTION: forcing a failure. [ 407.969238][T17339] name failslab, interval 1, probability 0, space 0, times 0 [ 407.998779][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 408.040328][T17343] veth0_to_hsr: entered promiscuous mode [ 408.072902][T17340] veth0_to_hsr: left promiscuous mode [ 408.078484][T17339] CPU: 1 UID: 0 PID: 17339 Comm: syz.2.3931 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 408.078511][T17339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 408.078524][T17339] Call Trace: [ 408.078533][T17339] [ 408.078541][T17339] dump_stack_lvl+0x241/0x360 [ 408.078573][T17339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.078601][T17339] ? __pfx__printk+0x10/0x10 [ 408.078623][T17339] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 408.078654][T17339] ? __pfx___might_resched+0x10/0x10 [ 408.078687][T17339] should_fail_ex+0x40a/0x550 [ 408.078725][T17339] should_failslab+0xac/0x100 [ 408.078755][T17339] kmem_cache_alloc_node_noprof+0x77/0x380 [ 408.078784][T17339] ? __alloc_skb+0x1c3/0x440 [ 408.078802][T17339] ? idr_get_next+0x3c6/0x4a0 [ 408.078835][T17339] __alloc_skb+0x1c3/0x440 [ 408.078862][T17339] ? __pfx___alloc_skb+0x10/0x10 [ 408.078892][T17339] ctrl_getfamily+0x48c/0x6b0 [ 408.078927][T17339] ? __pfx_ctrl_getfamily+0x10/0x10 [ 408.078958][T17339] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 408.079000][T17339] genl_rcv_msg+0xb1f/0xec0 [ 408.079041][T17339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.079103][T17339] ? __pfx_lock_acquire+0x10/0x10 [ 408.079134][T17339] ? __pfx_ctrl_getfamily+0x10/0x10 [ 408.079165][T17339] ? __pfx___might_resched+0x10/0x10 [ 408.079204][T17339] netlink_rcv_skb+0x206/0x480 [ 408.079231][T17339] ? __pfx_genl_rcv_msg+0x10/0x10 [ 408.079265][T17339] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 408.079323][T17339] genl_rcv+0x28/0x40 [ 408.079351][T17339] netlink_unicast+0x7f6/0x990 [ 408.079384][T17339] ? __pfx_netlink_unicast+0x10/0x10 [ 408.079412][T17339] ? __virt_addr_valid+0x45f/0x530 [ 408.079433][T17339] ? __phys_addr_symbol+0x2f/0x70 [ 408.079452][T17339] ? __check_object_size+0x47a/0x730 [ 408.079485][T17339] netlink_sendmsg+0x8de/0xcb0 [ 408.079525][T17339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.079557][T17339] ? aa_sock_msg_perm+0x91/0x160 [ 408.079594][T17339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.079619][T17339] __sock_sendmsg+0x221/0x270 [ 408.079652][T17339] __sys_sendto+0x363/0x4c0 [ 408.079678][T17339] ? __pfx___sys_sendto+0x10/0x10 [ 408.079728][T17339] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 408.079764][T17339] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 408.079796][T17339] ? exc_page_fault+0x590/0x8b0 [ 408.079829][T17339] __x64_sys_sendto+0xde/0x100 [ 408.079854][T17339] do_syscall_64+0xf3/0x230 [ 408.079887][T17339] ? clear_bhb_loop+0x35/0x90 [ 408.079921][T17339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.079949][T17339] RIP: 0033:0x7f7e6578effc [ 408.079968][T17339] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 408.079985][T17339] RSP: 002b:00007f7e66638ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 408.080008][T17339] RAX: ffffffffffffffda RBX: 00007f7e66638fc0 RCX: 00007f7e6578effc [ 408.080023][T17339] RDX: 0000000000000020 RSI: 00007f7e66639010 RDI: 0000000000000003 [ 408.080037][T17339] RBP: 0000000000000000 R08: 00007f7e66638f14 R09: 000000000000000c [ 408.080050][T17339] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 408.080062][T17339] R13: 00007f7e66638f68 R14: 00007f7e66639010 R15: 0000000000000000 [ 408.080094][T17339] [ 408.340528][ T99] block nbd0: Possible stuck request ffff888025a05080: control (read@0,4096B). Runtime 90 seconds [ 408.363871][T17354] Cannot find add_set index 4 as target [ 408.489300][T17356] netlink: 'syz.4.3935': attribute type 4 has an invalid length. [ 408.792103][T17372] FAULT_INJECTION: forcing a failure. [ 408.792103][T17372] name failslab, interval 1, probability 0, space 0, times 0 [ 408.851486][T17372] CPU: 0 UID: 0 PID: 17372 Comm: syz.3.3941 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 408.851519][T17372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 408.851533][T17372] Call Trace: [ 408.851541][T17372] [ 408.851550][T17372] dump_stack_lvl+0x241/0x360 [ 408.851581][T17372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 408.851605][T17372] ? __pfx__printk+0x10/0x10 [ 408.851628][T17372] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 408.851661][T17372] ? __pfx___might_resched+0x10/0x10 [ 408.851694][T17372] should_fail_ex+0x40a/0x550 [ 408.851731][T17372] should_failslab+0xac/0x100 [ 408.851760][T17372] kmem_cache_alloc_node_noprof+0x77/0x380 [ 408.851790][T17372] ? __alloc_skb+0x1c3/0x440 [ 408.851814][T17372] __alloc_skb+0x1c3/0x440 [ 408.851840][T17372] ? __pfx___alloc_skb+0x10/0x10 [ 408.851862][T17372] ? netlink_autobind+0xd6/0x2f0 [ 408.851888][T17372] ? netlink_autobind+0x2b0/0x2f0 [ 408.851919][T17372] netlink_sendmsg+0x634/0xcb0 [ 408.851958][T17372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.851988][T17372] ? aa_sock_msg_perm+0x91/0x160 [ 408.852026][T17372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 408.852050][T17372] __sock_sendmsg+0x221/0x270 [ 408.852082][T17372] ____sys_sendmsg+0x53a/0x860 [ 408.852123][T17372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 408.852144][T17372] ? __fget_files+0x2a/0x410 [ 408.852177][T17372] ? __fget_files+0x2a/0x410 [ 408.852216][T17372] __sys_sendmmsg+0x36a/0x720 [ 408.852251][T17372] ? __pfx___sys_sendmmsg+0x10/0x10 [ 408.852287][T17372] ? __pfx_lock_release+0x10/0x10 [ 408.852316][T17372] ? kstrtouint_from_user+0x128/0x190 [ 408.852365][T17372] ? ksys_write+0x22a/0x2b0 [ 408.852387][T17372] ? __pfx_lock_release+0x10/0x10 [ 408.852425][T17372] ? sb_end_write+0xe9/0x1c0 [ 408.852455][T17372] ? vfs_write+0x7fa/0xd10 [ 408.852480][T17372] ? __mutex_unlock_slowpath+0x227/0x800 [ 408.852545][T17372] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 408.852579][T17372] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 408.852612][T17372] ? do_syscall_64+0x100/0x230 [ 408.852648][T17372] __x64_sys_sendmmsg+0xa0/0xb0 [ 408.852673][T17372] do_syscall_64+0xf3/0x230 [ 408.852705][T17372] ? clear_bhb_loop+0x35/0x90 [ 408.852738][T17372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.852766][T17372] RIP: 0033:0x7f092758d169 [ 408.852784][T17372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.852801][T17372] RSP: 002b:00007f092845f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 408.852824][T17372] RAX: ffffffffffffffda RBX: 00007f09277a5fa0 RCX: 00007f092758d169 [ 408.852840][T17372] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 408.852853][T17372] RBP: 00007f092845f090 R08: 0000000000000000 R09: 0000000000000000 [ 408.852866][T17372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.852877][T17372] R13: 0000000000000000 R14: 00007f09277a5fa0 R15: 00007ffc5e6ff8e8 [ 408.852908][T17372] [ 409.038846][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 409.283932][T17388] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3944'. [ 409.330871][T17393] netlink: 'syz.3.3945': attribute type 8 has an invalid length. [ 409.617201][T17405] netlink: 'syz.2.3948': attribute type 32 has an invalid length. [ 409.820372][T17418] netlink: 'syz.3.3951': attribute type 1 has an invalid length. [ 409.848307][T17418] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3951'. [ 409.877075][T17418] netlink: 11 bytes leftover after parsing attributes in process `syz.3.3951'. [ 409.953524][ T2999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.078750][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 410.185688][ T2999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.315471][ T2999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.393165][ T2999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.502294][ T2999] bridge_slave_1: left allmulticast mode [ 410.515316][ T2999] bridge_slave_1: left promiscuous mode [ 410.527912][ T2999] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.539419][ T2999] bridge_slave_0: left allmulticast mode [ 410.545828][ T2999] bridge_slave_0: left promiscuous mode [ 410.552751][ T2999] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.018093][ T2999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.032314][ T2999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.045008][ T2999] bond0 (unregistering): Released all slaves [ 411.118732][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 411.618825][T17462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3959'. [ 411.847683][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3965'. [ 411.890616][T17482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3965'. [ 412.030923][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 412.057444][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 412.067255][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 412.082423][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 412.096516][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 412.104294][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 412.158703][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 412.166410][T17482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3965'. [ 412.190108][T17494] lo speed is unknown, defaulting to 1000 [ 412.615949][ T2999] hsr_slave_0: left promiscuous mode [ 412.640891][T17514] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3974'. [ 412.668192][ T2999] hsr_slave_1: left promiscuous mode [ 412.699473][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.707005][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.748884][ T2999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.756388][ T2999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.782342][T17520] netlink: 'syz.0.3977': attribute type 10 has an invalid length. [ 412.797728][ T2999] veth1_macvtap: left promiscuous mode [ 412.804056][ T2999] veth0_macvtap: left promiscuous mode [ 412.809778][ T2999] veth1_vlan: left promiscuous mode [ 412.815150][ T2999] veth0_vlan: left promiscuous mode [ 413.198745][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 413.454701][ T2999] team0 (unregistering): Port device team_slave_1 removed [ 413.514097][ T2999] team0 (unregistering): Port device team_slave_0 removed [ 414.068009][T17516] netlink: 'syz.3.3975': attribute type 4 has an invalid length. [ 414.087162][T17518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3976'. [ 414.158942][ T5148] Bluetooth: hci1: command tx timeout [ 414.238717][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 414.407274][T17494] chnl_net:caif_netlink_parms(): no params data found [ 414.669035][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3984'. [ 414.774661][T17561] tipc: Can't bind to reserved service type 1 [ 414.851876][T17494] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.874741][T17494] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.900603][T17494] bridge_slave_0: entered allmulticast mode [ 414.937707][T17494] bridge_slave_0: entered promiscuous mode [ 414.996010][T17494] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.036478][T17494] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.049687][T17494] bridge_slave_1: entered allmulticast mode [ 415.056858][T17494] bridge_slave_1: entered promiscuous mode [ 415.076981][T17573] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3991'. [ 415.211939][T17494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.273528][T17494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.282797][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 415.320584][T17583] netlink: 'syz.4.3995': attribute type 29 has an invalid length. [ 415.445268][T17494] team0: Port device team_slave_0 added [ 415.500885][T17494] team0: Port device team_slave_1 added [ 415.510287][T17592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3997'. [ 415.543650][T17593] netlink: 'syz.4.3998': attribute type 1 has an invalid length. [ 415.568931][T17593] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.3998'. [ 415.602850][T17494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.631550][T17494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.697303][T17494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.911098][T17494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.927994][T17494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.943942][T17591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.960642][T17494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.150775][T17494] hsr_slave_0: entered promiscuous mode [ 416.167677][T17494] hsr_slave_1: entered promiscuous mode [ 416.206603][T17494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.221762][T17494] Cannot create hsr debugfs directory [ 416.238858][ T5148] Bluetooth: hci1: command tx timeout [ 416.318722][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 417.230138][T17650] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.358714][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 417.569629][T17664] __nla_validate_parse: 1 callbacks suppressed [ 417.569652][T17664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4015'. [ 417.802628][T17664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4015'. [ 417.812241][T17678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4018'. [ 417.924068][T17683] netlink: 'syz.2.4019': attribute type 10 has an invalid length. [ 418.212927][T17494] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 418.273636][T17494] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 418.305060][T17494] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 418.318757][ T5148] Bluetooth: hci1: command tx timeout [ 418.347431][T17699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4024'. [ 418.398730][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 418.411234][T17494] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 418.436497][T17701] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 418.823458][T17494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.897939][T17494] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.925796][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.933017][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.944868][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4031'. [ 418.974610][T17726] netlink: 1256 bytes leftover after parsing attributes in process `syz.0.4030'. [ 418.991799][T17726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.999729][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.007854][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.191655][T17734] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 419.438748][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 419.617367][T17494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.752158][T17494] veth0_vlan: entered promiscuous mode [ 419.810698][T17494] veth1_vlan: entered promiscuous mode [ 419.840122][T17762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4042'. [ 419.955602][T17494] veth0_macvtap: entered promiscuous mode [ 420.005064][T17494] veth1_macvtap: entered promiscuous mode [ 420.075314][T17494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 420.100211][T17494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.112865][T17494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.124577][T17494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.134482][T17494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.153396][T17494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.193740][T17774] vlan3: entered promiscuous mode [ 420.207752][T17774] gretap0: entered promiscuous mode [ 420.209750][T17778] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4047'. [ 420.399772][ T5148] Bluetooth: hci1: command tx timeout [ 420.478755][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 420.505127][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.537820][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.650693][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.666977][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.780115][T17804] FAULT_INJECTION: forcing a failure. [ 420.780115][T17804] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 420.813561][T17804] CPU: 0 UID: 0 PID: 17804 Comm: syz.3.4054 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 420.813593][T17804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 420.813607][T17804] Call Trace: [ 420.813615][T17804] [ 420.813624][T17804] dump_stack_lvl+0x241/0x360 [ 420.813655][T17804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.813678][T17804] ? __pfx__printk+0x10/0x10 [ 420.813700][T17804] ? unwind_next_frame+0x18e6/0x22d0 [ 420.813740][T17804] should_fail_ex+0x40a/0x550 [ 420.813779][T17804] prepare_alloc_pages+0x1da/0x5b0 [ 420.813809][T17804] __alloc_frozen_pages_noprof+0x16f/0x710 [ 420.813838][T17804] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 420.813870][T17804] ? stack_trace_save+0x118/0x1d0 [ 420.813898][T17804] ? __pfx_validate_chain+0x10/0x10 [ 420.813927][T17804] alloc_pages_mpol+0x311/0x660 [ 420.813962][T17804] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 420.814000][T17804] vma_alloc_folio_noprof+0x12b/0x260 [ 420.814038][T17804] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 420.814071][T17804] ? do_raw_spin_unlock+0x13c/0x8b0 [ 420.814102][T17804] folio_prealloc+0x2e/0x170 [ 420.814126][T17804] do_wp_page+0x1253/0x49b0 [ 420.814225][T17804] ? __pfx_do_wp_page+0x10/0x10 [ 420.814263][T17804] ? __pfx_lock_acquire+0x10/0x10 [ 420.814292][T17804] ? rcu_is_watching+0x15/0xb0 [ 420.814319][T17804] ? do_raw_spin_lock+0x14f/0x370 [ 420.814345][T17804] ? __pfx____pte_offset_map+0x10/0x10 [ 420.814393][T17804] __handle_mm_fault+0x2303/0x6ef0 [ 420.814455][T17804] ? __pfx___handle_mm_fault+0x10/0x10 [ 420.814506][T17804] ? __pfx_reacquire_held_locks+0x10/0x10 [ 420.814548][T17804] ? mtree_range_walk+0x6fd/0x8e0 [ 420.814580][T17804] ? lock_vma_under_rcu+0x1dd/0x790 [ 420.814614][T17804] ? __pfx_lock_release+0x10/0x10 [ 420.814644][T17804] ? lock_vma_under_rcu+0x34b/0x790 [ 420.814692][T17804] ? lock_vma_under_rcu+0x1dd/0x790 [ 420.814720][T17804] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 420.814751][T17804] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 420.814788][T17804] handle_mm_fault+0x3e5/0x8d0 [ 420.814828][T17804] exc_page_fault+0x459/0x8b0 [ 420.814865][T17804] asm_exc_page_fault+0x26/0x30 [ 420.814894][T17804] RIP: 0033:0x7f0927546cb5 [ 420.814913][T17804] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 420.814930][T17804] RSP: 002b:00007f092845dde0 EFLAGS: 00010293 [ 420.814950][T17804] RAX: 0000000000000008 RBX: 00007f09282d7d60 RCX: 0000000000000000 [ 420.814964][T17804] RDX: 0000000000000000 RSI: 00007f092764b2de RDI: 00007f09282d7d60 [ 420.814978][T17804] RBP: 00007f092845df00 R08: 0000000000000000 R09: 0000000000000005 [ 420.814992][T17804] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f092764ae80 [ 420.815006][T17804] R13: 0000000000000016 R14: 00007f092777c440 R15: 0000000000000000 [ 420.815039][T17804] [ 420.815267][T17804] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 421.375004][T17819] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4057'. [ 421.424810][T17821] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4056'. [ 421.470236][T17821] netlink: 'syz.3.4056': attribute type 4 has an invalid length. [ 421.518780][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 422.230341][T17840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.242513][T17840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.261147][T17840] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 422.309956][T17840] bond0 (unregistering): Released all slaves [ 422.346919][T17859] FAULT_INJECTION: forcing a failure. [ 422.346919][T17859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.386220][T17859] CPU: 1 UID: 0 PID: 17859 Comm: syz.3.4067 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 422.386252][T17859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 422.386266][T17859] Call Trace: [ 422.386275][T17859] [ 422.386285][T17859] dump_stack_lvl+0x241/0x360 [ 422.386319][T17859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.386345][T17859] ? __pfx__printk+0x10/0x10 [ 422.386369][T17859] ? __pfx_lock_release+0x10/0x10 [ 422.386403][T17859] ? __lock_acquire+0x1397/0x2100 [ 422.386443][T17859] should_fail_ex+0x40a/0x550 [ 422.386481][T17859] _copy_from_user+0x2d/0xb0 [ 422.386512][T17859] kstrtouint_from_user+0xc6/0x190 [ 422.386540][T17859] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 422.386569][T17859] ? __pfx_lock_acquire+0x10/0x10 [ 422.386613][T17859] proc_fail_nth_write+0xaa/0x2d0 [ 422.386645][T17859] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 422.386673][T17859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 422.386719][T17859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 422.386752][T17859] vfs_write+0x29f/0xd10 [ 422.386777][T17859] ? fdget_pos+0x254/0x320 [ 422.386807][T17859] ? __mutex_unlock_slowpath+0x227/0x800 [ 422.386850][T17859] ? __pfx_vfs_write+0x10/0x10 [ 422.386883][T17859] ? __fget_files+0x2a/0x410 [ 422.386920][T17859] ? __fget_files+0x395/0x410 [ 422.386949][T17859] ? __fget_files+0x2a/0x410 [ 422.386990][T17859] ksys_write+0x18f/0x2b0 [ 422.387016][T17859] ? __pfx_ksys_write+0x10/0x10 [ 422.387079][T17859] ? do_syscall_64+0x100/0x230 [ 422.387116][T17859] ? do_syscall_64+0xb6/0x230 [ 422.387152][T17859] do_syscall_64+0xf3/0x230 [ 422.387185][T17859] ? clear_bhb_loop+0x35/0x90 [ 422.387220][T17859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.387249][T17859] RIP: 0033:0x7f092758bc1f [ 422.387268][T17859] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 422.387287][T17859] RSP: 002b:00007f092843e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 422.387311][T17859] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f092758bc1f [ 422.387325][T17859] RDX: 0000000000000001 RSI: 00007f092843e0a0 RDI: 0000000000000005 [ 422.387338][T17859] RBP: 00007f092843e090 R08: 0000000000000000 R09: 0000000000000000 [ 422.387351][T17859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 422.387363][T17859] R13: 0000000000000000 R14: 00007f09277a6080 R15: 00007ffc5e6ff8e8 [ 422.387397][T17859] [ 422.630159][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 422.730529][T17866] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4068'. [ 422.897506][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.369421][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.468245][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.525538][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.655808][ T13] bridge_slave_1: left allmulticast mode [ 423.662094][ T13] bridge_slave_1: left promiscuous mode [ 423.667862][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.678703][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 423.678974][ T13] bridge_slave_0: left allmulticast mode [ 423.693639][ T13] bridge_slave_0: left promiscuous mode [ 423.700189][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.936111][T17874] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4071'. [ 423.946301][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4070'. [ 423.966226][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4070'. [ 424.406893][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 424.417663][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 424.428268][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 424.459042][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 424.476467][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 424.484409][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 424.659883][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.685221][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.706749][ T13] bond0 (unregistering): Released all slaves [ 424.718682][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 424.824387][T17895] lo speed is unknown, defaulting to 1000 [ 424.992246][T17916] FAULT_INJECTION: forcing a failure. [ 424.992246][T17916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.046901][T17921] netlink: 1260 bytes leftover after parsing attributes in process `syz.0.4083'. [ 425.059202][T17916] CPU: 1 UID: 0 PID: 17916 Comm: syz.2.4085 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 425.059241][T17916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 425.059256][T17916] Call Trace: [ 425.059264][T17916] [ 425.059273][T17916] dump_stack_lvl+0x241/0x360 [ 425.059306][T17916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.059331][T17916] ? __pfx__printk+0x10/0x10 [ 425.059355][T17916] ? __pfx_lock_release+0x10/0x10 [ 425.059397][T17916] should_fail_ex+0x40a/0x550 [ 425.059435][T17916] _copy_from_user+0x2d/0xb0 [ 425.059465][T17916] copy_msghdr_from_user+0xae/0x680 [ 425.059503][T17916] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 425.059531][T17916] ? __fget_files+0x2a/0x410 [ 425.059567][T17916] ? __fget_files+0x2a/0x410 [ 425.059607][T17916] __sys_sendmmsg+0x32b/0x720 [ 425.059644][T17916] ? __pfx___sys_sendmmsg+0x10/0x10 [ 425.059680][T17916] ? __pfx_lock_release+0x10/0x10 [ 425.059711][T17916] ? kstrtouint_from_user+0x128/0x190 [ 425.059760][T17916] ? ksys_write+0x22a/0x2b0 [ 425.059783][T17916] ? __pfx_lock_release+0x10/0x10 [ 425.059822][T17916] ? sb_end_write+0xe9/0x1c0 [ 425.059862][T17916] ? vfs_write+0x7fa/0xd10 [ 425.059887][T17916] ? __mutex_unlock_slowpath+0x227/0x800 [ 425.059949][T17916] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.059990][T17916] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 425.060024][T17916] ? do_syscall_64+0x100/0x230 [ 425.060061][T17916] __x64_sys_sendmmsg+0xa0/0xb0 [ 425.060094][T17916] do_syscall_64+0xf3/0x230 [ 425.060127][T17916] ? clear_bhb_loop+0x35/0x90 [ 425.060161][T17916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.060190][T17916] RIP: 0033:0x7f7e6578d169 [ 425.060210][T17916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.060229][T17916] RSP: 002b:00007f7e6665b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 425.060253][T17916] RAX: ffffffffffffffda RBX: 00007f7e659a5fa0 RCX: 00007f7e6578d169 [ 425.060270][T17916] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 425.060284][T17916] RBP: 00007f7e6665b090 R08: 0000000000000000 R09: 0000000000000000 [ 425.060298][T17916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.060311][T17916] R13: 0000000000000000 R14: 00007f7e659a5fa0 R15: 00007ffcd56d8548 [ 425.060342][T17916] [ 425.086514][T17921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.471124][T17919] lo speed is unknown, defaulting to 1000 [ 425.702595][T17943] netlink: 'syz.4.4090': attribute type 1 has an invalid length. [ 425.749835][T17943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4090'. [ 425.759089][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 426.280444][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4095'. [ 426.311959][T17964] netlink: 'syz.0.4095': attribute type 1 has an invalid length. [ 426.387596][T17967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4096'. [ 426.452483][ T13] hsr_slave_0: left promiscuous mode [ 426.467526][ T13] hsr_slave_1: left promiscuous mode [ 426.480646][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.497531][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.514513][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.532642][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.568934][ T5148] Bluetooth: hci1: command tx timeout [ 426.587045][ T13] veth1_macvtap: left promiscuous mode [ 426.596981][ T13] veth0_macvtap: left promiscuous mode [ 426.603809][ T13] veth1_vlan: left promiscuous mode [ 426.609666][ T13] veth0_vlan: left promiscuous mode [ 426.798739][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 426.872424][T17982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4102'. [ 427.235212][ T13] team0 (unregistering): Port device team_slave_1 removed [ 427.284832][ T13] team0 (unregistering): Port device team_slave_0 removed [ 427.775319][T17895] chnl_net:caif_netlink_parms(): no params data found [ 427.838768][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 428.290300][T17895] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.307852][T17895] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.341305][T17895] bridge_slave_0: entered allmulticast mode [ 428.353975][T17895] bridge_slave_0: entered promiscuous mode [ 428.385846][T18004] ip6gre1: entered allmulticast mode [ 428.403448][T17895] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.416780][T17895] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.435253][T17895] bridge_slave_1: entered allmulticast mode [ 428.446395][T17895] bridge_slave_1: entered promiscuous mode [ 428.613447][T17895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.650519][ T5148] Bluetooth: hci1: command tx timeout [ 428.660194][T17895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.688841][T18014] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4111'. [ 428.716820][T18014] tc_dump_action: action bad kind [ 428.792380][T17895] team0: Port device team_slave_0 added [ 428.823879][T17895] team0: Port device team_slave_1 added [ 428.878754][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 428.906438][T18026] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4115'. [ 428.952170][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4113'. [ 428.961936][T18027] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4113'. [ 428.985538][T18029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4116'. [ 429.157998][T17895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.189475][T17895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.283289][T17895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.326519][T17895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.369309][T17895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.435282][T17895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.646761][T17895] hsr_slave_0: entered promiscuous mode [ 429.690112][T17895] hsr_slave_1: entered promiscuous mode [ 429.696345][T17895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.717111][T17895] Cannot create hsr debugfs directory [ 429.918803][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 430.034949][T18073] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4129'. [ 430.129803][T18080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4129'. [ 430.720472][ T5148] Bluetooth: hci1: command tx timeout [ 430.746522][T18109] netlink: 256 bytes leftover after parsing attributes in process `syz.4.4138'. [ 430.958685][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 430.990449][T18121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4142'. [ 431.016541][T17895] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 431.035446][T18125] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4143'. [ 431.054025][T17895] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.099538][T17895] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.139155][T17895] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.288860][T18133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.368251][T17895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.455274][T17895] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.549381][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.556548][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.602212][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.609427][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.998792][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 432.051308][T17895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.065071][T18153] delete_channel: no stack [ 432.083322][T18153] delete_channel: no stack [ 432.087948][T18153] delete_channel: no stack [ 432.117823][T18153] delete_channel: no stack [ 432.149326][T18153] delete_channel: no stack [ 432.154203][T18153] delete_channel: no stack [ 432.171478][T18153] delete_channel: no stack [ 432.209518][T18153] delete_channel: no stack [ 432.214195][T18153] delete_channel: no stack [ 432.215100][T17895] veth0_vlan: entered promiscuous mode [ 432.240664][T18153] delete_channel: no stack [ 432.245287][T18153] delete_channel: no stack [ 432.261209][T18153] delete_channel: no stack [ 432.266225][T18153] delete_channel: no stack [ 432.284661][T18153] delete_channel: no stack [ 432.285390][T17895] veth1_vlan: entered promiscuous mode [ 432.314879][T18153] delete_channel: no stack [ 432.339006][T18153] delete_channel: no stack [ 432.373622][T18153] delete_channel: no stack [ 432.396325][T18153] delete_channel: no stack [ 432.426426][T18153] delete_channel: no stack [ 432.438916][T18153] delete_channel: no stack [ 432.440699][T17895] veth0_macvtap: entered promiscuous mode [ 432.453792][T18153] delete_channel: no stack [ 432.458422][T18153] delete_channel: no stack [ 432.473461][T18153] delete_channel: no stack [ 432.478202][T18153] delete_channel: no stack [ 432.489346][T18153] delete_channel: no stack [ 432.506302][T18153] delete_channel: no stack [ 432.523175][T18153] delete_channel: no stack [ 432.566844][T17895] veth1_macvtap: entered promiscuous mode [ 432.574149][T18153] delete_channel: no stack [ 432.588985][T18153] delete_channel: no stack [ 432.603934][T18153] delete_channel: no stack [ 432.608577][T18153] delete_channel: no stack [ 432.629491][T18153] delete_channel: no stack [ 432.648355][T18153] delete_channel: no stack [ 432.665081][T18153] delete_channel: no stack [ 432.676832][T18153] delete_channel: no stack [ 432.682704][T17895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.694124][T18153] delete_channel: no stack [ 432.702458][T18153] delete_channel: no stack [ 432.707191][T18153] delete_channel: no stack [ 432.727986][T18153] delete_channel: no stack [ 432.744382][T17895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.752420][T18153] delete_channel: no stack [ 432.757042][T18153] delete_channel: no stack [ 432.781315][T18153] delete_channel: no stack [ 432.785567][T17895] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.789413][T18153] delete_channel: no stack [ 432.799693][ T5845] Bluetooth: hci1: command tx timeout [ 432.809483][T18200] netlink: 'syz.4.4162': attribute type 1 has an invalid length. [ 432.827638][T17895] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.829668][T18153] delete_channel: no stack [ 432.858170][T18153] delete_channel: no stack [ 432.863221][T18153] delete_channel: no stack [ 432.867860][T18153] delete_channel: no stack [ 432.873187][T17895] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.883651][T17895] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.892897][T18153] delete_channel: no stack [ 432.939018][T18153] delete_channel: no stack [ 432.950803][T18153] delete_channel: no stack [ 432.955447][T18153] delete_channel: no stack [ 432.976667][T18200] netlink: 'syz.4.4162': attribute type 8 has an invalid length. [ 433.021584][T18153] delete_channel: no stack [ 433.026224][T18153] delete_channel: no stack [ 433.038740][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 433.057315][T18153] delete_channel: no stack [ 433.065407][T18153] delete_channel: no stack [ 433.074280][T18153] delete_channel: no stack [ 433.079122][T18153] delete_channel: no stack [ 433.083732][T18153] delete_channel: no stack [ 433.088314][T18153] delete_channel: no stack [ 433.094326][T18153] delete_channel: no stack [ 433.098993][T18153] delete_channel: no stack [ 433.127827][T18153] delete_channel: no stack [ 433.158956][T18153] delete_channel: no stack [ 433.163703][T18153] delete_channel: no stack [ 433.179123][T18153] delete_channel: no stack [ 433.254691][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.268225][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.385836][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.398393][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.079006][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 434.216248][T18260] FAULT_INJECTION: forcing a failure. [ 434.216248][T18260] name failslab, interval 1, probability 0, space 0, times 0 [ 434.278982][T18260] CPU: 1 UID: 0 PID: 18260 Comm: syz.4.4181 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 434.279016][T18260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 434.279030][T18260] Call Trace: [ 434.279039][T18260] [ 434.279048][T18260] dump_stack_lvl+0x241/0x360 [ 434.279080][T18260] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.279105][T18260] ? __pfx__printk+0x10/0x10 [ 434.279129][T18260] ? kmem_cache_alloc_noprof+0x48/0x380 [ 434.279160][T18260] ? __pfx___might_resched+0x10/0x10 [ 434.279193][T18260] should_fail_ex+0x40a/0x550 [ 434.279230][T18260] should_failslab+0xac/0x100 [ 434.279257][T18260] ? security_file_alloc+0x32/0x310 [ 434.279283][T18260] kmem_cache_alloc_noprof+0x70/0x380 [ 434.279318][T18260] security_file_alloc+0x32/0x310 [ 434.279356][T18260] init_file+0x96/0x2e0 [ 434.279390][T18260] alloc_empty_file+0xb8/0x1d0 [ 434.279423][T18260] alloc_file_pseudo+0x204/0x320 [ 434.279460][T18260] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 434.279588][T18260] ? _raw_spin_unlock+0x28/0x50 [ 434.279626][T18260] sock_alloc_file+0xb7/0x2e0 [ 434.279660][T18260] __sys_socket+0x1dd/0x3c0 [ 434.279692][T18260] ? __pfx___sys_socket+0x10/0x10 [ 434.279723][T18260] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 434.279757][T18260] ? do_syscall_64+0x100/0x230 [ 434.279793][T18260] __x64_sys_socket+0x7a/0x90 [ 434.279825][T18260] do_syscall_64+0xf3/0x230 [ 434.279857][T18260] ? clear_bhb_loop+0x35/0x90 [ 434.279888][T18260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.279916][T18260] RIP: 0033:0x7fd57118f087 [ 434.279934][T18260] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.279952][T18260] RSP: 002b:00007fd572040eb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 434.279975][T18260] RAX: ffffffffffffffda RBX: 00007fd572040f80 RCX: 00007fd57118f087 [ 434.279991][T18260] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 434.280003][T18260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 434.280015][T18260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 434.280028][T18260] R13: 0000000000000047 R14: 00007fd572040fa0 R15: 0000200000000080 [ 434.280059][T18260] [ 434.856911][T18281] __nla_validate_parse: 42 callbacks suppressed [ 434.856935][T18281] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4187'. [ 435.011887][T18287] gtp0: entered promiscuous mode [ 435.016908][T18287] gtp0: entered allmulticast mode [ 435.118704][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 435.304886][ T53] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.334351][T18300] netlink: 'syz.0.4192': attribute type 1 has an invalid length. [ 435.348212][T18300] netlink: 16142 bytes leftover after parsing attributes in process `syz.0.4192'. [ 435.686023][ T53] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.779203][ T53] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.846781][ T53] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.985784][ T53] bridge_slave_1: left allmulticast mode [ 435.995944][ T53] bridge_slave_1: left promiscuous mode [ 436.004218][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.023804][ T53] bridge_slave_0: left allmulticast mode [ 436.035522][ T53] bridge_slave_0: left promiscuous mode [ 436.045018][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.165540][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 436.552609][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.564184][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.621757][ T53] bond0 (unregistering): Released all slaves [ 436.819987][T18337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4196'. [ 437.094336][T18337] hsr_slave_1 (unregistering): left promiscuous mode [ 437.208684][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 437.455593][ T5148] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.466771][ T5148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.479102][ T5148] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.499954][ T5148] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.514870][ T5148] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 437.522682][ T5148] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.531932][T18372] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 437.671474][T18368] lo speed is unknown, defaulting to 1000 [ 437.731300][ T53] hsr_slave_0: left promiscuous mode [ 437.790146][ T53] hsr_slave_1: left promiscuous mode [ 437.801863][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.820179][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.850012][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.871274][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.961894][ T53] veth1_macvtap: left promiscuous mode [ 437.979225][ T53] veth0_macvtap: left promiscuous mode [ 437.985020][ T53] veth1_vlan: left promiscuous mode [ 438.009661][ T53] veth0_vlan: left promiscuous mode [ 438.074990][T18404] openvswitch: netlink: Multiple metadata blocks provided [ 438.246913][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 438.399161][ T99] block nbd0: Possible stuck request ffff888025a05080: control (read@0,4096B). Runtime 120 seconds [ 438.647211][ T53] team0 (unregistering): Port device team_slave_1 removed [ 438.658288][T18409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 438.727192][ T53] team0 (unregistering): Port device team_slave_0 removed [ 439.278700][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 439.446344][T18419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4217'. [ 439.486267][T18417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4219'. [ 439.528205][T18417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4219'. [ 439.614210][ T5148] Bluetooth: hci1: command tx timeout [ 439.732216][T18368] chnl_net:caif_netlink_parms(): no params data found [ 439.753102][T18428] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4221'. [ 439.842563][T18434] xt_hashlimit: size too large, truncated to 1048576 [ 439.916924][T18435] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4225'. [ 440.298138][T18368] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.319403][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 440.330651][T18368] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.352600][T18368] bridge_slave_0: entered allmulticast mode [ 440.374048][T18368] bridge_slave_0: entered promiscuous mode [ 440.397125][T18368] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.414471][T18368] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.432583][T18368] bridge_slave_1: entered allmulticast mode [ 440.454297][T18368] bridge_slave_1: entered promiscuous mode [ 440.477889][T18450] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4228'. [ 440.537980][T18368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.575499][T18368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.670655][T18452] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4229'. [ 440.689658][T18368] team0: Port device team_slave_0 added [ 440.709086][T18368] team0: Port device team_slave_1 added [ 440.729071][T18454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4230'. [ 440.851718][T18368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.878704][T18368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.934972][T18368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.959638][T18368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.960607][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4231'. [ 440.966876][T18368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.011532][T18368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.190136][T18368] hsr_slave_0: entered promiscuous mode [ 441.196862][T18368] hsr_slave_1: entered promiscuous mode [ 441.236171][T18368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.258767][T18368] Cannot create hsr debugfs directory [ 441.358687][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 441.418308][T18467] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4236'. [ 441.679698][ T5148] Bluetooth: hci1: command tx timeout [ 441.927799][T18487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4243'. [ 442.398714][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 442.683901][T18498] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4248'. [ 442.727203][T18498] netlink: 'syz.3.4248': attribute type 39 has an invalid length. [ 442.795256][T18505] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4250'. [ 442.803330][T18501] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 442.824463][T18501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 442.837082][T18501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 442.848073][T18501] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 442.858031][T18501] geneve3: entered promiscuous mode [ 442.867517][T18501] geneve3: entered allmulticast mode [ 442.891214][T18501] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 442.909791][T18501] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 442.921741][T18501] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 442.949107][T18501] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 442.991910][T18368] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 443.012537][T18368] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 443.036731][T18368] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 443.062035][T18368] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 443.237479][T18368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.252476][T18519] netlink: 'syz.3.4253': attribute type 21 has an invalid length. [ 443.263968][T18519] netlink: 'syz.3.4253': attribute type 11 has an invalid length. [ 443.282045][T18368] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.293769][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.301155][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.318341][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.325577][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.438737][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 443.558383][T18530] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4257'. [ 443.656980][T18533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.766274][T18368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.768951][ T5148] Bluetooth: hci1: command tx timeout [ 443.829723][T18368] veth0_vlan: entered promiscuous mode [ 443.843148][T18368] veth1_vlan: entered promiscuous mode [ 443.888003][T18368] veth0_macvtap: entered promiscuous mode [ 443.912759][T18368] veth1_macvtap: entered promiscuous mode [ 443.950679][T18368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.983372][T18368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.007786][T18518] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 444.011712][T18368] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.032106][T18368] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.047938][T18368] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.058162][T18368] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.261624][T18552] netlink: 'syz.4.4267': attribute type 32 has an invalid length. [ 444.286931][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.328346][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.406344][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.416246][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.478717][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 444.585266][T18566] netlink: 'syz.3.4272': attribute type 12 has an invalid length. [ 445.012860][T18570] netem: change failed [ 445.168432][T18584] FAULT_INJECTION: forcing a failure. [ 445.168432][T18584] name failslab, interval 1, probability 0, space 0, times 0 [ 445.202248][T18584] CPU: 1 UID: 0 PID: 18584 Comm: syz.3.4280 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 445.202279][T18584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 445.202294][T18584] Call Trace: [ 445.202302][T18584] [ 445.202312][T18584] dump_stack_lvl+0x241/0x360 [ 445.202345][T18584] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.202370][T18584] ? __pfx__printk+0x10/0x10 [ 445.202395][T18584] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 445.202477][T18584] ? __pfx___might_resched+0x10/0x10 [ 445.202510][T18584] ? __nla_validate_parse+0x2885/0x3290 [ 445.202539][T18584] ? __lock_acquire+0x1397/0x2100 [ 445.202576][T18584] should_fail_ex+0x40a/0x550 [ 445.202615][T18584] should_failslab+0xac/0x100 [ 445.202646][T18584] kmem_cache_alloc_node_noprof+0x77/0x380 [ 445.202677][T18584] ? __alloc_skb+0x1c3/0x440 [ 445.202702][T18584] __alloc_skb+0x1c3/0x440 [ 445.202729][T18584] ? __pfx___alloc_skb+0x10/0x10 [ 445.202763][T18584] netlink_dump+0x239/0xe10 [ 445.202804][T18584] ? __pfx_netlink_dump+0x10/0x10 [ 445.202840][T18584] ? ip_set_dump_start+0x3a1/0x530 [ 445.202907][T18584] __netlink_dump_start+0x5a2/0x790 [ 445.202947][T18584] ip_set_dump+0x16d/0x1f0 [ 445.202979][T18584] ? __pfx___mutex_lock+0x10/0x10 [ 445.203013][T18584] ? __pfx_ip_set_dump+0x10/0x10 [ 445.203043][T18584] ? __pfx_ip_set_dump_start+0x10/0x10 [ 445.203073][T18584] ? __pfx_ip_set_dump_do+0x10/0x10 [ 445.203111][T18584] ? __pfx_ip_set_dump_done+0x10/0x10 [ 445.203155][T18584] ? nfnetlink_rcv_msg+0x225/0x1180 [ 445.203187][T18584] nfnetlink_rcv_msg+0xbec/0x1180 [ 445.203219][T18584] ? nfnetlink_rcv_msg+0x225/0x1180 [ 445.203273][T18584] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 445.203354][T18584] netlink_rcv_skb+0x206/0x480 [ 445.203383][T18584] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 445.203428][T18584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 445.203471][T18584] ? apparmor_capable+0x13b/0x1b0 [ 445.203500][T18584] ? bpf_lsm_capable+0x9/0x10 [ 445.203532][T18584] ? security_capable+0x7e/0x2d0 [ 445.203571][T18584] nfnetlink_rcv+0x297/0x2ab0 [ 445.203604][T18584] ? __pfx_validate_chain+0x10/0x10 [ 445.203653][T18584] ? mark_lock+0x9a/0x360 [ 445.203674][T18584] ? __pfx_validate_chain+0x10/0x10 [ 445.203708][T18584] ? __lock_acquire+0x1397/0x2100 [ 445.203749][T18584] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 445.203793][T18584] ? mark_lock+0x9a/0x360 [ 445.203819][T18584] ? __lock_acquire+0x1397/0x2100 [ 445.203888][T18584] ? __pfx_lock_release+0x10/0x10 [ 445.203922][T18584] ? netlink_deliver_tap+0x2e/0x1b0 [ 445.203949][T18584] ? __pfx_lock_release+0x10/0x10 [ 445.203998][T18584] ? netlink_deliver_tap+0x2e/0x1b0 [ 445.204027][T18584] netlink_unicast+0x7f6/0x990 [ 445.204061][T18584] ? __pfx_netlink_unicast+0x10/0x10 [ 445.204081][T18584] ? __virt_addr_valid+0x45f/0x530 [ 445.204104][T18584] ? __phys_addr_symbol+0x2f/0x70 [ 445.204124][T18584] ? __check_object_size+0x47a/0x730 [ 445.204158][T18584] netlink_sendmsg+0x8de/0xcb0 [ 445.204198][T18584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.204232][T18584] ? aa_sock_msg_perm+0x91/0x160 [ 445.204273][T18584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.204298][T18584] __sock_sendmsg+0x221/0x270 [ 445.204339][T18584] ____sys_sendmsg+0x53a/0x860 [ 445.204373][T18584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.204447][T18584] ? __fget_files+0x2a/0x410 [ 445.204483][T18584] ? __fget_files+0x2a/0x410 [ 445.204524][T18584] __sys_sendmsg+0x269/0x350 [ 445.204555][T18584] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.204594][T18584] ? do_sys_openat2+0x17a/0x1d0 [ 445.204656][T18584] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.204691][T18584] ? do_syscall_64+0x100/0x230 [ 445.204727][T18584] ? do_syscall_64+0xb6/0x230 [ 445.204764][T18584] do_syscall_64+0xf3/0x230 [ 445.204796][T18584] ? clear_bhb_loop+0x35/0x90 [ 445.204831][T18584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.204860][T18584] RIP: 0033:0x7f092758d169 [ 445.204891][T18584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.204913][T18584] RSP: 002b:00007f092845f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.204938][T18584] RAX: ffffffffffffffda RBX: 00007f09277a5fa0 RCX: 00007f092758d169 [ 445.204954][T18584] RDX: 0000000004000010 RSI: 0000200000000400 RDI: 0000000000000003 [ 445.204969][T18584] RBP: 00007f092845f090 R08: 0000000000000000 R09: 0000000000000000 [ 445.204984][T18584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.204997][T18584] R13: 0000000000000000 R14: 00007f09277a5fa0 R15: 00007ffc5e6ff8e8 [ 445.205032][T18584] [ 445.652794][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 445.866629][T18598] netlink: 'syz.4.4285': attribute type 10 has an invalid length. [ 446.123914][T18609] __nla_validate_parse: 5 callbacks suppressed [ 446.123937][T18609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4289'. [ 446.296735][T18622] FAULT_INJECTION: forcing a failure. [ 446.296735][T18622] name failslab, interval 1, probability 0, space 0, times 0 [ 446.310395][T18622] CPU: 1 UID: 0 PID: 18622 Comm: syz.4.4294 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 446.310424][T18622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 446.310438][T18622] Call Trace: [ 446.310452][T18622] [ 446.310462][T18622] dump_stack_lvl+0x241/0x360 [ 446.310498][T18622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 446.310522][T18622] ? __pfx__printk+0x10/0x10 [ 446.310546][T18622] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 446.310586][T18622] ? __pfx___might_resched+0x10/0x10 [ 446.310782][T18622] should_fail_ex+0x40a/0x550 [ 446.310828][T18622] should_failslab+0xac/0x100 [ 446.310861][T18622] kmem_cache_alloc_node_noprof+0x77/0x380 [ 446.310892][T18622] ? __alloc_skb+0x1c3/0x440 [ 446.310918][T18622] __alloc_skb+0x1c3/0x440 [ 446.310944][T18622] ? __pfx___alloc_skb+0x10/0x10 [ 446.310966][T18622] ? netlink_autobind+0xd6/0x2f0 [ 446.310993][T18622] ? netlink_autobind+0x2b0/0x2f0 [ 446.311026][T18622] netlink_sendmsg+0x634/0xcb0 [ 446.311065][T18622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.311097][T18622] ? aa_sock_msg_perm+0x91/0x160 [ 446.311136][T18622] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.311161][T18622] __sock_sendmsg+0x221/0x270 [ 446.311194][T18622] ____sys_sendmsg+0x53a/0x860 [ 446.311226][T18622] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.311249][T18622] ? __fget_files+0x2a/0x410 [ 446.311284][T18622] ? __fget_files+0x2a/0x410 [ 446.311324][T18622] __sys_sendmmsg+0x36a/0x720 [ 446.311360][T18622] ? __pfx___sys_sendmmsg+0x10/0x10 [ 446.311397][T18622] ? __pfx_lock_release+0x10/0x10 [ 446.311427][T18622] ? kstrtouint_from_user+0x128/0x190 [ 446.311472][T18622] ? ksys_write+0x22a/0x2b0 [ 446.311495][T18622] ? __pfx_lock_release+0x10/0x10 [ 446.311534][T18622] ? sb_end_write+0xe9/0x1c0 [ 446.311565][T18622] ? vfs_write+0x7fa/0xd10 [ 446.311606][T18622] ? __mutex_unlock_slowpath+0x227/0x800 [ 446.311670][T18622] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 446.311704][T18622] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 446.311737][T18622] ? do_syscall_64+0x100/0x230 [ 446.311774][T18622] __x64_sys_sendmmsg+0xa0/0xb0 [ 446.311800][T18622] do_syscall_64+0xf3/0x230 [ 446.311834][T18622] ? clear_bhb_loop+0x35/0x90 [ 446.311868][T18622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.311897][T18622] RIP: 0033:0x7fd57118d169 [ 446.311917][T18622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.311935][T18622] RSP: 002b:00007fd572042038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 446.311959][T18622] RAX: ffffffffffffffda RBX: 00007fd5713a5fa0 RCX: 00007fd57118d169 [ 446.311975][T18622] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 446.311990][T18622] RBP: 00007fd572042090 R08: 0000000000000000 R09: 0000000000000000 [ 446.312004][T18622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.312017][T18622] R13: 0000000000000000 R14: 00007fd5713a5fa0 R15: 00007ffd110a22d8 [ 446.312049][T18622] [ 446.718864][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 447.103312][ T1133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.758836][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 448.056544][ T1133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.127247][ T1133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.206894][ T1133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.409926][ T1133] bridge_slave_1: left allmulticast mode [ 448.415640][ T1133] bridge_slave_1: left promiscuous mode [ 448.457807][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.479494][ T1133] bridge_slave_0: left allmulticast mode [ 448.485440][ T1133] bridge_slave_0: left promiscuous mode [ 448.495243][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.798822][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 449.014676][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 449.024846][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 449.034015][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 449.053488][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 449.061691][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 449.070254][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 449.363429][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.389520][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.403579][ T1133] bond0 (unregistering): Released all slaves [ 449.419289][T18673] netlink: 'syz.0.4316': attribute type 10 has an invalid length. [ 449.493294][T18668] lo speed is unknown, defaulting to 1000 [ 449.635677][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4319'. [ 449.781649][T18686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.838734][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 449.885713][T18690] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4322'. [ 450.292166][ T1133] hsr_slave_0: left promiscuous mode [ 450.320245][ T1133] hsr_slave_1: left promiscuous mode [ 450.335548][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.343538][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.352265][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.360158][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.415294][T18706] xt_bpf: check failed: parse error [ 450.437758][ T1133] veth1_macvtap: left promiscuous mode [ 450.447917][ T1133] veth0_macvtap: left promiscuous mode [ 450.455579][ T1133] veth1_vlan: left promiscuous mode [ 450.465363][ T1133] veth0_vlan: left promiscuous mode [ 450.888841][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 451.035683][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 451.090008][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 451.130449][ T5148] Bluetooth: hci1: command tx timeout [ 451.749973][T18716] netlink: 'syz.2.4331': attribute type 21 has an invalid length. [ 451.768373][T18716] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4331'. [ 451.863759][T18720] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4332'. [ 451.918736][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 452.034039][T18668] chnl_net:caif_netlink_parms(): no params data found [ 452.277553][T18740] netlink: 'syz.2.4341': attribute type 32 has an invalid length. [ 452.469045][T18668] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.495023][T18668] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.516459][T18742] can: request_module (can-proto-0) failed. [ 452.523017][T18668] bridge_slave_0: entered allmulticast mode [ 452.550527][T18668] bridge_slave_0: entered promiscuous mode [ 452.581616][T18668] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.609163][T18668] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.628937][T18668] bridge_slave_1: entered allmulticast mode [ 452.641645][T18668] bridge_slave_1: entered promiscuous mode [ 452.717489][T18759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4346'. [ 452.783615][T18668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.811738][T18759] bridge_slave_1: left allmulticast mode [ 452.824211][T18759] bridge_slave_1: left promiscuous mode [ 452.832666][T18759] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.855668][T18759] bridge_slave_0: left allmulticast mode [ 452.868931][T18759] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.905014][T18771] x_tables: (null)_tables: conntrack.2 match: invalid size 160 (kernel) != (user) 168 [ 452.923298][T18759] bond0: (slave bridge0): Releasing backup interface [ 452.968886][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 453.014209][T18779] netlink: 71 bytes leftover after parsing attributes in process `syz.0.4348'. [ 453.033329][T18668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.163816][T18668] team0: Port device team_slave_0 added [ 453.198930][ T5148] Bluetooth: hci1: command tx timeout [ 453.207081][T18668] team0: Port device team_slave_1 added [ 453.273900][T18668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.289080][T18668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.378790][T18668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.411675][T18668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.419221][T18668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.467839][T18668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.619927][T18668] hsr_slave_0: entered promiscuous mode [ 453.627961][T18668] hsr_slave_1: entered promiscuous mode [ 453.647302][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4358'. [ 453.658460][T18668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.675109][T18668] Cannot create hsr debugfs directory [ 453.911065][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4364'. [ 453.958917][T18817] netlink: 'syz.0.4364': attribute type 15 has an invalid length. [ 453.959799][T18819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4365'. [ 453.998736][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 454.580613][T18848] FAULT_INJECTION: forcing a failure. [ 454.580613][T18848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.610865][T18668] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 454.612082][T18848] CPU: 1 UID: 0 PID: 18848 Comm: syz.3.4373 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 454.612115][T18848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 454.612130][T18848] Call Trace: [ 454.612137][T18848] [ 454.612150][T18848] dump_stack_lvl+0x241/0x360 [ 454.612185][T18848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.612211][T18848] ? __pfx__printk+0x10/0x10 [ 454.612237][T18848] ? __pfx_lock_release+0x10/0x10 [ 454.612278][T18848] should_fail_ex+0x40a/0x550 [ 454.612316][T18848] _copy_from_iter+0x1df/0x1c40 [ 454.612345][T18848] ? __virt_addr_valid+0x183/0x530 [ 454.612368][T18848] ? __pfx_lock_release+0x10/0x10 [ 454.612411][T18848] ? __alloc_skb+0x28f/0x440 [ 454.612431][T18848] ? __pfx__copy_from_iter+0x10/0x10 [ 454.612461][T18848] ? __virt_addr_valid+0x183/0x530 [ 454.612482][T18848] ? __virt_addr_valid+0x183/0x530 [ 454.612502][T18848] ? __virt_addr_valid+0x45f/0x530 [ 454.612524][T18848] ? __phys_addr_symbol+0x2f/0x70 [ 454.612545][T18848] ? __check_object_size+0x47a/0x730 [ 454.612581][T18848] netlink_sendmsg+0x742/0xcb0 [ 454.612624][T18848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.612656][T18848] ? aa_sock_msg_perm+0x91/0x160 [ 454.612695][T18848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.612722][T18848] __sock_sendmsg+0x221/0x270 [ 454.612766][T18848] ____sys_sendmsg+0x53a/0x860 [ 454.612800][T18848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.612824][T18848] ? __fget_files+0x2a/0x410 [ 454.612862][T18848] ? __fget_files+0x2a/0x410 [ 454.612903][T18848] __sys_sendmsg+0x269/0x350 [ 454.612933][T18848] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.612974][T18848] ? do_sys_openat2+0x17a/0x1d0 [ 454.613034][T18848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 454.613081][T18848] ? do_syscall_64+0x100/0x230 [ 454.613119][T18848] ? do_syscall_64+0xb6/0x230 [ 454.613156][T18848] do_syscall_64+0xf3/0x230 [ 454.613191][T18848] ? clear_bhb_loop+0x35/0x90 [ 454.613227][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.613257][T18848] RIP: 0033:0x7f092758d169 [ 454.613279][T18848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.613298][T18848] RSP: 002b:00007f092845f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.613331][T18848] RAX: ffffffffffffffda RBX: 00007f09277a5fa0 RCX: 00007f092758d169 [ 454.613348][T18848] RDX: 0000000020000094 RSI: 0000200000000140 RDI: 0000000000000003 [ 454.613363][T18848] RBP: 00007f092845f090 R08: 0000000000000000 R09: 0000000000000000 [ 454.613378][T18848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.613392][T18848] R13: 0000000000000000 R14: 00007f09277a5fa0 R15: 00007ffc5e6ff8e8 [ 454.613425][T18848] [ 454.969810][T18855] debugfs: Directory '¯HcUØîÑË•‚Ž¹+ÕuµJÙÊVú?zlI胆Gx!§X˜çÚ|D#åk!' with parent 'ieee80211' already present! [ 454.996810][T18668] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 455.018124][T18668] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 455.048753][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 455.055185][T18668] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 455.287324][T18866] netlink: 1256 bytes leftover after parsing attributes in process `syz.4.4381'. [ 455.288733][ T5148] Bluetooth: hci1: command tx timeout [ 455.362318][T18668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.383945][T18866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.421871][T18668] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.458639][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.465802][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.526717][ T1156] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.534000][ T1156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.562696][T18878] FAULT_INJECTION: forcing a failure. [ 455.562696][T18878] name failslab, interval 1, probability 0, space 0, times 0 [ 455.588719][T18878] CPU: 1 UID: 0 PID: 18878 Comm: syz.0.4385 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 455.588749][T18878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 455.588763][T18878] Call Trace: [ 455.588770][T18878] [ 455.588781][T18878] dump_stack_lvl+0x241/0x360 [ 455.588813][T18878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.588837][T18878] ? __pfx__printk+0x10/0x10 [ 455.588861][T18878] ? __kmalloc_noprof+0xb5/0x4c0 [ 455.588892][T18878] ? __pfx___might_resched+0x10/0x10 [ 455.588923][T18878] ? aa_get_newest_label+0xff/0x6f0 [ 455.588963][T18878] should_fail_ex+0x40a/0x550 [ 455.589002][T18878] should_failslab+0xac/0x100 [ 455.589042][T18878] __kmalloc_noprof+0xdd/0x4c0 [ 455.589071][T18878] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 455.589104][T18878] ? apparmor_capable+0x13b/0x1b0 [ 455.589135][T18878] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 455.589177][T18878] genl_rcv_msg+0x80b/0xec0 [ 455.589220][T18878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.589284][T18878] ? __pfx_lock_acquire+0x10/0x10 [ 455.589317][T18878] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 455.589347][T18878] ? __pfx___might_resched+0x10/0x10 [ 455.589388][T18878] netlink_rcv_skb+0x206/0x480 [ 455.589416][T18878] ? __pfx_genl_rcv_msg+0x10/0x10 [ 455.589450][T18878] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.589511][T18878] genl_rcv+0x28/0x40 [ 455.589540][T18878] netlink_unicast+0x7f6/0x990 [ 455.589574][T18878] ? __pfx_netlink_unicast+0x10/0x10 [ 455.589594][T18878] ? __virt_addr_valid+0x45f/0x530 [ 455.589616][T18878] ? __phys_addr_symbol+0x2f/0x70 [ 455.589636][T18878] ? __check_object_size+0x47a/0x730 [ 455.589670][T18878] netlink_sendmsg+0x8de/0xcb0 [ 455.589718][T18878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.589749][T18878] ? aa_sock_msg_perm+0x91/0x160 [ 455.589786][T18878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.589815][T18878] __sock_sendmsg+0x221/0x270 [ 455.589848][T18878] ____sys_sendmsg+0x53a/0x860 [ 455.589884][T18878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.589925][T18878] ? __fget_files+0x2a/0x410 [ 455.589960][T18878] ? __fget_files+0x2a/0x410 [ 455.590001][T18878] __sys_sendmsg+0x269/0x350 [ 455.590051][T18878] ? __pfx___sys_sendmsg+0x10/0x10 [ 455.590089][T18878] ? do_sys_openat2+0x17a/0x1d0 [ 455.590159][T18878] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 455.590195][T18878] ? do_syscall_64+0x100/0x230 [ 455.590232][T18878] ? do_syscall_64+0xb6/0x230 [ 455.590269][T18878] do_syscall_64+0xf3/0x230 [ 455.590302][T18878] ? clear_bhb_loop+0x35/0x90 [ 455.590336][T18878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.590366][T18878] RIP: 0033:0x7f5e4238d169 [ 455.590386][T18878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.590405][T18878] RSP: 002b:00007f5e4326e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.590428][T18878] RAX: ffffffffffffffda RBX: 00007f5e425a5fa0 RCX: 00007f5e4238d169 [ 455.590444][T18878] RDX: 0000000020000094 RSI: 0000200000000140 RDI: 0000000000000003 [ 455.590459][T18878] RBP: 00007f5e4326e090 R08: 0000000000000000 R09: 0000000000000000 [ 455.590473][T18878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.590486][T18878] R13: 0000000000000000 R14: 00007f5e425a5fa0 R15: 00007ffcacb6b9d8 [ 455.590520][T18878] [ 455.875748][T18883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4387'. [ 455.978138][T18886] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4386'. [ 456.078813][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 456.207410][T18894] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.228512][T18870] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 456.471464][T18902] netlink: 'syz.3.4389': attribute type 1 has an invalid length. [ 456.479758][T18902] netlink: 'syz.3.4389': attribute type 1 has an invalid length. [ 456.491016][T18902] netlink: 'syz.3.4389': attribute type 2 has an invalid length. [ 456.762857][T18668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.904849][T18668] veth0_vlan: entered promiscuous mode [ 456.958097][T18668] veth1_vlan: entered promiscuous mode [ 456.999167][T18918] __nla_validate_parse: 2 callbacks suppressed [ 456.999187][T18918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4397'. [ 457.025479][T18668] veth0_macvtap: entered promiscuous mode [ 457.076937][T18668] veth1_macvtap: entered promiscuous mode [ 457.101784][T18920] netlink: 'syz.0.4398': attribute type 1 has an invalid length. [ 457.118761][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 457.231838][T18668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.263350][T18668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.313192][T18668] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.344235][T18668] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.358720][ T5148] Bluetooth: hci1: command tx timeout [ 457.368809][T18668] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.377686][T18668] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.410234][T18929] netlink: 'syz.0.4402': attribute type 2 has an invalid length. [ 457.418034][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4402'. [ 457.568944][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.594557][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.676939][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.703508][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.847145][T18946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4410'. [ 458.021426][T18952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4413'. [ 458.099241][T18956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.168787][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 458.293133][T18959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4415'. [ 458.478255][T18974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4422'. [ 458.695353][ T1133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.801921][ T1133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.841580][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.850023][T18982] FAULT_INJECTION: forcing a failure. [ 458.850023][T18982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.888379][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.898469][T18982] CPU: 0 UID: 0 PID: 18982 Comm: syz.4.4425 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 458.898503][T18982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 458.898518][T18982] Call Trace: [ 458.898527][T18982] [ 458.898537][T18982] dump_stack_lvl+0x241/0x360 [ 458.898582][T18982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.898606][T18982] ? __pfx__printk+0x10/0x10 [ 458.898630][T18982] ? __pfx_lock_release+0x10/0x10 [ 458.898670][T18982] should_fail_ex+0x40a/0x550 [ 458.898707][T18982] _copy_to_iter+0x1df/0x1c40 [ 458.898734][T18982] ? __virt_addr_valid+0x183/0x530 [ 458.898756][T18982] ? __pfx_lock_release+0x10/0x10 [ 458.898796][T18982] ? __pfx__copy_to_iter+0x10/0x10 [ 458.898825][T18982] ? __virt_addr_valid+0x183/0x530 [ 458.898845][T18982] ? __virt_addr_valid+0x183/0x530 [ 458.898864][T18982] ? __virt_addr_valid+0x45f/0x530 [ 458.898886][T18982] ? __check_object_size+0x47a/0x730 [ 458.898920][T18982] __skb_datagram_iter+0x107/0x900 [ 458.898949][T18982] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 458.898977][T18982] ? __pfx___might_resched+0x10/0x10 [ 458.899010][T18982] skb_copy_datagram_iter+0xd1/0x250 [ 458.899040][T18982] netlink_recvmsg+0x2d1/0x11a0 [ 458.899078][T18982] ? __pfx_netlink_recvmsg+0x10/0x10 [ 458.899109][T18982] ? __pfx_aa_sk_perm+0x10/0x10 [ 458.899144][T18982] ? __fget_files+0x2a/0x410 [ 458.899174][T18982] ? aa_sock_msg_perm+0x91/0x160 [ 458.899209][T18982] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 458.899235][T18982] ? __pfx_netlink_recvmsg+0x10/0x10 [ 458.899264][T18982] sock_recvmsg+0x22f/0x280 [ 458.899298][T18982] __sys_recvfrom+0x202/0x380 [ 458.899325][T18982] ? __pfx___sys_recvfrom+0x10/0x10 [ 458.899373][T18982] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 458.899408][T18982] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 458.899447][T18982] __x64_sys_recvfrom+0xde/0x100 [ 458.899473][T18982] do_syscall_64+0xf3/0x230 [ 458.899507][T18982] ? clear_bhb_loop+0x35/0x90 [ 458.899548][T18982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.899577][T18982] RIP: 0033:0x7fd57118ef34 [ 458.899596][T18982] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 458.899615][T18982] RSP: 002b:00007fd572040e30 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 458.899638][T18982] RAX: ffffffffffffffda RBX: 00007fd572040fa0 RCX: 00007fd57118ef34 [ 458.899654][T18982] RDX: 0000000000001000 RSI: 00007fd572040ff0 RDI: 0000000000000004 [ 458.899668][T18982] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 458.899680][T18982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 458.899693][T18982] R13: 0000000000000000 R14: 00007fd572040ff0 R15: 0000000000000000 [ 458.899723][T18982] [ 459.208789][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 459.238949][ T1133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.424128][ T1133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.682656][ T1133] bridge_slave_1: left allmulticast mode [ 459.689503][ T1133] bridge_slave_1: left promiscuous mode [ 459.695283][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.705466][ T1133] bridge_slave_0: left allmulticast mode [ 459.711747][ T1133] bridge_slave_0: left promiscuous mode [ 459.717526][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.077433][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.088908][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.101268][ T1133] bond0 (unregistering): Released all slaves [ 460.238829][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 460.500117][ T1133] hsr_slave_0: left promiscuous mode [ 460.507423][ T1133] hsr_slave_1: left promiscuous mode [ 460.520664][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.528244][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.567084][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.579110][T18994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4427'. [ 460.585004][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.653812][T18997] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.674830][ T1133] veth1_macvtap: left promiscuous mode [ 460.680573][ T1133] veth0_macvtap: left promiscuous mode [ 460.686255][ T1133] veth1_vlan: left promiscuous mode [ 460.693742][ T1133] veth0_vlan: left promiscuous mode [ 460.940622][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 460.952166][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 460.962644][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 460.996121][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.004486][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 461.025410][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.278813][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 461.420037][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 461.476749][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 462.067297][T19003] lo speed is unknown, defaulting to 1000 [ 462.318778][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 462.352656][T19014] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4436'. [ 462.465084][T19020] FAULT_INJECTION: forcing a failure. [ 462.465084][T19020] name failslab, interval 1, probability 0, space 0, times 0 [ 462.488034][T19020] CPU: 1 UID: 0 PID: 19020 Comm: syz.0.4438 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 462.488066][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 462.488080][T19020] Call Trace: [ 462.488088][T19020] [ 462.488099][T19020] dump_stack_lvl+0x241/0x360 [ 462.488130][T19020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.488155][T19020] ? __pfx__printk+0x10/0x10 [ 462.488178][T19020] ? __kmalloc_noprof+0xb5/0x4c0 [ 462.488208][T19020] ? __pfx___might_resched+0x10/0x10 [ 462.488246][T19020] should_fail_ex+0x40a/0x550 [ 462.488284][T19020] should_failslab+0xac/0x100 [ 462.488315][T19020] __kmalloc_noprof+0xdd/0x4c0 [ 462.488344][T19020] ? rfkill_alloc+0xb0/0x2e0 [ 462.488374][T19020] rfkill_alloc+0xb0/0x2e0 [ 462.488405][T19020] wiphy_new_nm+0x1084/0x19a0 [ 462.488422][T19020] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 462.488451][T19020] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 462.488481][T19020] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 462.488514][T19020] mac80211_hwsim_new_radio+0x203/0x4a40 [ 462.488576][T19020] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 462.488603][T19020] ? trace_kmalloc+0x1f/0xd0 [ 462.488628][T19020] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 462.488658][T19020] ? kstrndup+0xbb/0x150 [ 462.488698][T19020] hwsim_new_radio_nl+0xece/0x2290 [ 462.488736][T19020] ? __pfx___nla_validate_parse+0x10/0x10 [ 462.488763][T19020] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 462.488824][T19020] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 462.488866][T19020] genl_rcv_msg+0xb1f/0xec0 [ 462.488907][T19020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.488968][T19020] ? __pfx_lock_acquire+0x10/0x10 [ 462.488998][T19020] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 462.489027][T19020] ? __pfx___might_resched+0x10/0x10 [ 462.489064][T19020] netlink_rcv_skb+0x206/0x480 [ 462.489090][T19020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.489123][T19020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.489183][T19020] genl_rcv+0x28/0x40 [ 462.489212][T19020] netlink_unicast+0x7f6/0x990 [ 462.489255][T19020] ? __pfx_netlink_unicast+0x10/0x10 [ 462.489276][T19020] ? __virt_addr_valid+0x45f/0x530 [ 462.489298][T19020] ? __phys_addr_symbol+0x2f/0x70 [ 462.489318][T19020] ? __check_object_size+0x47a/0x730 [ 462.489352][T19020] netlink_sendmsg+0x8de/0xcb0 [ 462.489393][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.489425][T19020] ? aa_sock_msg_perm+0x91/0x160 [ 462.489466][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.489490][T19020] __sock_sendmsg+0x221/0x270 [ 462.489525][T19020] ____sys_sendmsg+0x53a/0x860 [ 462.489560][T19020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.489582][T19020] ? __fget_files+0x2a/0x410 [ 462.489617][T19020] ? __fget_files+0x2a/0x410 [ 462.489659][T19020] __sys_sendmsg+0x269/0x350 [ 462.489689][T19020] ? __pfx___sys_sendmsg+0x10/0x10 [ 462.489728][T19020] ? do_sys_openat2+0x17a/0x1d0 [ 462.489790][T19020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 462.489825][T19020] ? do_syscall_64+0x100/0x230 [ 462.489862][T19020] ? do_syscall_64+0xb6/0x230 [ 462.489898][T19020] do_syscall_64+0xf3/0x230 [ 462.489932][T19020] ? clear_bhb_loop+0x35/0x90 [ 462.489965][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.489992][T19020] RIP: 0033:0x7f5e4238d169 [ 462.490011][T19020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.490029][T19020] RSP: 002b:00007f5e4326e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.490052][T19020] RAX: ffffffffffffffda RBX: 00007f5e425a5fa0 RCX: 00007f5e4238d169 [ 462.490068][T19020] RDX: 0000000020000094 RSI: 0000200000000140 RDI: 0000000000000003 [ 462.490082][T19020] RBP: 00007f5e4326e090 R08: 0000000000000000 R09: 0000000000000000 [ 462.490096][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.490108][T19020] R13: 0000000000000000 R14: 00007f5e425a5fa0 R15: 00007ffcacb6b9d8 [ 462.490139][T19020] [ 462.888850][T19020] INFO: trying to register non-static key. [ 462.894707][T19020] The code is fine but needs lockdep annotation, or maybe [ 462.901834][T19020] you didn't initialize this object before use? [ 462.908088][T19020] turning off the locking correctness validator. [ 462.914420][T19020] CPU: 0 UID: 0 PID: 19020 Comm: syz.0.4438 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 462.914443][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 462.914458][T19020] Call Trace: [ 462.914465][T19020] [ 462.914473][T19020] dump_stack_lvl+0x241/0x360 [ 462.914498][T19020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.914516][T19020] ? __pfx__printk+0x10/0x10 [ 462.914533][T19020] ? __is_module_percpu_address+0x213/0x370 [ 462.914554][T19020] ? __is_kernel_percpu_address+0x115/0x250 [ 462.914580][T19020] assign_lock_key+0x241/0x280 [ 462.914599][T19020] ? __pfx_assign_lock_key+0x10/0x10 [ 462.914620][T19020] register_lock_class+0x1cf/0x980 [ 462.914647][T19020] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 462.914672][T19020] ? __pfx_register_lock_class+0x10/0x10 [ 462.914699][T19020] ? mark_lock+0x9a/0x360 [ 462.914721][T19020] __lock_acquire+0xf3/0x2100 [ 462.914745][T19020] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 462.914771][T19020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 462.914800][T19020] lock_acquire+0x1ed/0x550 [ 462.914824][T19020] ? cfg80211_dev_free+0x33/0x2d0 [ 462.914845][T19020] ? __pfx_lock_acquire+0x10/0x10 [ 462.914874][T19020] ? dump_stack_lvl+0x301/0x360 [ 462.914893][T19020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.914915][T19020] _raw_spin_lock_irqsave+0xd5/0x120 [ 462.914937][T19020] ? cfg80211_dev_free+0x33/0x2d0 [ 462.914954][T19020] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 462.914976][T19020] ? devres_release_all+0x1eb/0x250 [ 462.914998][T19020] ? device_release+0x66/0x1c0 [ 462.915018][T19020] ? __pfx_wiphy_dev_release+0x10/0x10 [ 462.915037][T19020] cfg80211_dev_free+0x33/0x2d0 [ 462.915054][T19020] ? trace_kmalloc+0x1f/0xd0 [ 462.915076][T19020] ? __pfx_wiphy_dev_release+0x10/0x10 [ 462.915096][T19020] device_release+0x99/0x1c0 [ 462.915117][T19020] kobject_put+0x22f/0x480 [ 462.915135][T19020] wiphy_new_nm+0x16ea/0x19a0 [ 462.915151][T19020] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 462.915173][T19020] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 462.915196][T19020] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 462.915221][T19020] mac80211_hwsim_new_radio+0x203/0x4a40 [ 462.915258][T19020] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 462.915279][T19020] ? trace_kmalloc+0x1f/0xd0 [ 462.915300][T19020] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 462.915325][T19020] ? kstrndup+0xbb/0x150 [ 462.915353][T19020] hwsim_new_radio_nl+0xece/0x2290 [ 462.915379][T19020] ? __pfx___nla_validate_parse+0x10/0x10 [ 462.915400][T19020] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 462.915433][T19020] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 462.915482][T19020] genl_rcv_msg+0xb1f/0xec0 [ 462.915510][T19020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.915545][T19020] ? __pfx_lock_acquire+0x10/0x10 [ 462.915569][T19020] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 462.915590][T19020] ? __pfx___might_resched+0x10/0x10 [ 462.915616][T19020] netlink_rcv_skb+0x206/0x480 [ 462.915636][T19020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.915661][T19020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.915692][T19020] genl_rcv+0x28/0x40 [ 462.915715][T19020] netlink_unicast+0x7f6/0x990 [ 462.915735][T19020] ? __pfx_netlink_unicast+0x10/0x10 [ 462.915751][T19020] ? __virt_addr_valid+0x45f/0x530 [ 462.915767][T19020] ? __phys_addr_symbol+0x2f/0x70 [ 462.915782][T19020] ? __check_object_size+0x47a/0x730 [ 462.915806][T19020] netlink_sendmsg+0x8de/0xcb0 [ 462.915831][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.915853][T19020] ? aa_sock_msg_perm+0x91/0x160 [ 462.915881][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.915901][T19020] __sock_sendmsg+0x221/0x270 [ 462.915924][T19020] ____sys_sendmsg+0x53a/0x860 [ 462.915946][T19020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.915963][T19020] ? __fget_files+0x2a/0x410 [ 462.915989][T19020] ? __fget_files+0x2a/0x410 [ 462.916015][T19020] __sys_sendmsg+0x269/0x350 [ 462.916035][T19020] ? __pfx___sys_sendmsg+0x10/0x10 [ 462.916058][T19020] ? do_sys_openat2+0x17a/0x1d0 [ 462.916092][T19020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 462.916118][T19020] ? do_syscall_64+0x100/0x230 [ 462.916145][T19020] ? do_syscall_64+0xb6/0x230 [ 462.916171][T19020] do_syscall_64+0xf3/0x230 [ 462.916196][T19020] ? clear_bhb_loop+0x35/0x90 [ 462.916223][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.916248][T19020] RIP: 0033:0x7f5e4238d169 [ 462.916263][T19020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.916279][T19020] RSP: 002b:00007f5e4326e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.916298][T19020] RAX: ffffffffffffffda RBX: 00007f5e425a5fa0 RCX: 00007f5e4238d169 [ 462.916312][T19020] RDX: 0000000020000094 RSI: 0000200000000140 RDI: 0000000000000003 [ 462.916323][T19020] RBP: 00007f5e4326e090 R08: 0000000000000000 R09: 0000000000000000 [ 462.916334][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.916345][T19020] R13: 0000000000000000 R14: 00007f5e425a5fa0 R15: 00007ffcacb6b9d8 [ 462.916363][T19020] [ 462.917184][T19020] ------------[ cut here ]------------ [ 463.358981][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 463.362239][T19020] WARNING: CPU: 0 PID: 19020 at net/wireless/core.c:1197 cfg80211_dev_free+0x2ba/0x2d0 [ 463.427128][T19020] Modules linked in: [ 463.431039][T19020] CPU: 0 UID: 0 PID: 19020 Comm: syz.0.4438 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 463.441802][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.451866][T19020] RIP: 0010:cfg80211_dev_free+0x2ba/0x2d0 [ 463.457600][T19020] Code: da f6 49 8b be e0 08 00 00 e8 d2 44 cf f6 4c 89 f7 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bc 44 cf f6 e8 d7 8d 73 f6 90 <0f> 0b 90 e9 a2 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 463.477216][T19020] RSP: 0018:ffffc90002fc6e20 EFLAGS: 00010093 [ 463.483296][T19020] RAX: ffffffff8b4e52a9 RBX: ffff8880523586a8 RCX: ffff888052f2bc00 [ 463.491280][T19020] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90002fc6d00 [ 463.499256][T19020] RBP: 1ffffffff194d1b0 R08: 0000000000000003 R09: fffff520005f8da0 [ 463.507235][T19020] R10: dffffc0000000000 R11: fffff520005f8da0 R12: ffff8880523586b8 [ 463.515212][T19020] R13: dffffc0000000000 R14: ffff888052358000 R15: 0000000000000246 [ 463.523190][T19020] FS: 00007f5e4326e6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 463.532134][T19020] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.538726][T19020] CR2: 000000110c37fe72 CR3: 000000004a1ae000 CR4: 00000000003526f0 [ 463.546728][T19020] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 463.554705][T19020] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 463.562688][T19020] Call Trace: [ 463.565976][T19020] [ 463.568937][T19020] ? __warn+0x165/0x4d0 [ 463.573124][T19020] ? cfg80211_dev_free+0x2ba/0x2d0 [ 463.578245][T19020] ? report_bug+0x2b3/0x500 [ 463.582773][T19020] ? cfg80211_dev_free+0x2ba/0x2d0 [ 463.587984][T19020] ? handle_bug+0x60/0x90 [ 463.592320][T19020] ? exc_invalid_op+0x1a/0x50 [ 463.597009][T19020] ? asm_exc_invalid_op+0x1a/0x20 [ 463.602050][T19020] ? cfg80211_dev_free+0x2b9/0x2d0 [ 463.607177][T19020] ? cfg80211_dev_free+0x2ba/0x2d0 [ 463.612295][T19020] ? trace_kmalloc+0x1f/0xd0 [ 463.616900][T19020] ? __pfx_wiphy_dev_release+0x10/0x10 [ 463.622374][T19020] device_release+0x99/0x1c0 [ 463.626981][T19020] kobject_put+0x22f/0x480 [ 463.631447][T19020] wiphy_new_nm+0x16ea/0x19a0 [ 463.636160][T19020] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 463.642678][T19020] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 463.648067][T19020] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 463.653887][T19020] mac80211_hwsim_new_radio+0x203/0x4a40 [ 463.659546][T19020] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 463.665625][T19020] ? trace_kmalloc+0x1f/0xd0 [ 463.670225][T19020] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 463.676825][T19020] ? kstrndup+0xbb/0x150 [ 463.681087][T19020] hwsim_new_radio_nl+0xece/0x2290 [ 463.686214][T19020] ? __pfx___nla_validate_parse+0x10/0x10 [ 463.691944][T19020] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 463.697514][T19020] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 463.703860][T19020] genl_rcv_msg+0xb1f/0xec0 [ 463.708385][T19020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.713441][T19020] ? __pfx_lock_acquire+0x10/0x10 [ 463.718483][T19020] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 463.724041][T19020] ? __pfx___might_resched+0x10/0x10 [ 463.729344][T19020] netlink_rcv_skb+0x206/0x480 [ 463.734118][T19020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.739158][T19020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.744464][T19020] genl_rcv+0x28/0x40 [ 463.748454][T19020] netlink_unicast+0x7f6/0x990 [ 463.753228][T19020] ? __pfx_netlink_unicast+0x10/0x10 [ 463.758514][T19020] ? __virt_addr_valid+0x45f/0x530 [ 463.763645][T19020] ? __phys_addr_symbol+0x2f/0x70 [ 463.768672][T19020] ? __check_object_size+0x47a/0x730 [ 463.773971][T19020] netlink_sendmsg+0x8de/0xcb0 [ 463.778748][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.784049][T19020] ? aa_sock_msg_perm+0x91/0x160 [ 463.789004][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.794299][T19020] __sock_sendmsg+0x221/0x270 [ 463.798987][T19020] ____sys_sendmsg+0x53a/0x860 [ 463.803761][T19020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.809051][T19020] ? __fget_files+0x2a/0x410 [ 463.813661][T19020] ? __fget_files+0x2a/0x410 [ 463.818264][T19020] __sys_sendmsg+0x269/0x350 [ 463.822864][T19020] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.827984][T19020] ? do_sys_openat2+0x17a/0x1d0 [ 463.832857][T19020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.839198][T19020] ? do_syscall_64+0x100/0x230 [ 463.843979][T19020] ? do_syscall_64+0xb6/0x230 [ 463.848673][T19020] do_syscall_64+0xf3/0x230 [ 463.853191][T19020] ? clear_bhb_loop+0x35/0x90 [ 463.857881][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.863787][T19020] RIP: 0033:0x7f5e4238d169 [ 463.868207][T19020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.887826][T19020] RSP: 002b:00007f5e4326e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.896250][T19020] RAX: ffffffffffffffda RBX: 00007f5e425a5fa0 RCX: 00007f5e4238d169 [ 463.904318][T19020] RDX: 0000000020000094 RSI: 0000200000000140 RDI: 0000000000000003 [ 463.912294][T19020] RBP: 00007f5e4326e090 R08: 0000000000000000 R09: 0000000000000000 [ 463.920278][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.928299][T19020] R13: 0000000000000000 R14: 00007f5e425a5fa0 R15: 00007ffcacb6b9d8 [ 463.936283][T19020] [ 463.939324][T19020] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 463.946608][T19020] CPU: 0 UID: 0 PID: 19020 Comm: syz.0.4438 Not tainted 6.14.0-rc7-syzkaller-00140-ged3ba9b6e280 #0 [ 463.957371][T19020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 463.967436][T19020] Call Trace: [ 463.970726][T19020] [ 463.973664][T19020] dump_stack_lvl+0x241/0x360 [ 463.978352][T19020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.983564][T19020] ? __pfx__printk+0x10/0x10 [ 463.988155][T19020] ? _printk+0xd5/0x120 [ 463.992315][T19020] ? __init_begin+0x41000/0x41000 [ 463.997349][T19020] ? vscnprintf+0x5d/0x90 [ 464.001698][T19020] panic+0x349/0x880 [ 464.005610][T19020] ? __warn+0x174/0x4d0 [ 464.009868][T19020] ? __pfx_panic+0x10/0x10 [ 464.014297][T19020] __warn+0x344/0x4d0 [ 464.018294][T19020] ? cfg80211_dev_free+0x2ba/0x2d0 [ 464.023416][T19020] report_bug+0x2b3/0x500 [ 464.027760][T19020] ? cfg80211_dev_free+0x2ba/0x2d0 [ 464.032881][T19020] handle_bug+0x60/0x90 [ 464.037069][T19020] exc_invalid_op+0x1a/0x50 [ 464.041606][T19020] asm_exc_invalid_op+0x1a/0x20 [ 464.046465][T19020] RIP: 0010:cfg80211_dev_free+0x2ba/0x2d0 [ 464.052189][T19020] Code: da f6 49 8b be e0 08 00 00 e8 d2 44 cf f6 4c 89 f7 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 bc 44 cf f6 e8 d7 8d 73 f6 90 <0f> 0b 90 e9 a2 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 464.071889][T19020] RSP: 0018:ffffc90002fc6e20 EFLAGS: 00010093 [ 464.077970][T19020] RAX: ffffffff8b4e52a9 RBX: ffff8880523586a8 RCX: ffff888052f2bc00 [ 464.085949][T19020] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffffc90002fc6d00 [ 464.093928][T19020] RBP: 1ffffffff194d1b0 R08: 0000000000000003 R09: fffff520005f8da0 [ 464.101906][T19020] R10: dffffc0000000000 R11: fffff520005f8da0 R12: ffff8880523586b8 [ 464.109972][T19020] R13: dffffc0000000000 R14: ffff888052358000 R15: 0000000000000246 [ 464.117955][T19020] ? cfg80211_dev_free+0x2b9/0x2d0 [ 464.123087][T19020] ? trace_kmalloc+0x1f/0xd0 [ 464.127692][T19020] ? __pfx_wiphy_dev_release+0x10/0x10 [ 464.133159][T19020] device_release+0x99/0x1c0 [ 464.137761][T19020] kobject_put+0x22f/0x480 [ 464.142188][T19020] wiphy_new_nm+0x16ea/0x19a0 [ 464.146891][T19020] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 464.153407][T19020] ieee80211_alloc_hw_nm+0x3d4/0x1ea0 [ 464.158790][T19020] ? mac80211_hwsim_new_radio+0x116/0x4a40 [ 464.164608][T19020] mac80211_hwsim_new_radio+0x203/0x4a40 [ 464.170333][T19020] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 464.176430][T19020] ? trace_kmalloc+0x1f/0xd0 [ 464.181036][T19020] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 464.187643][T19020] ? kstrndup+0xbb/0x150 [ 464.191904][T19020] hwsim_new_radio_nl+0xece/0x2290 [ 464.197036][T19020] ? __pfx___nla_validate_parse+0x10/0x10 [ 464.202766][T19020] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 464.208333][T19020] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 464.214690][T19020] genl_rcv_msg+0xb1f/0xec0 [ 464.219215][T19020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.224262][T19020] ? __pfx_lock_acquire+0x10/0x10 [ 464.229316][T19020] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 464.234895][T19020] ? __pfx___might_resched+0x10/0x10 [ 464.240206][T19020] netlink_rcv_skb+0x206/0x480 [ 464.244990][T19020] ? __pfx_genl_rcv_msg+0x10/0x10 [ 464.250102][T19020] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.255420][T19020] genl_rcv+0x28/0x40 [ 464.259430][T19020] netlink_unicast+0x7f6/0x990 [ 464.264214][T19020] ? __pfx_netlink_unicast+0x10/0x10 [ 464.269519][T19020] ? __virt_addr_valid+0x45f/0x530 [ 464.274647][T19020] ? __phys_addr_symbol+0x2f/0x70 [ 464.279690][T19020] ? __check_object_size+0x47a/0x730 [ 464.285006][T19020] netlink_sendmsg+0x8de/0xcb0 [ 464.289813][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.295204][T19020] ? aa_sock_msg_perm+0x91/0x160 [ 464.300162][T19020] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.305457][T19020] __sock_sendmsg+0x221/0x270 [ 464.310153][T19020] ____sys_sendmsg+0x53a/0x860 [ 464.314928][T19020] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.320216][T19020] ? __fget_files+0x2a/0x410 [ 464.324819][T19020] ? __fget_files+0x2a/0x410 [ 464.329424][T19020] __sys_sendmsg+0x269/0x350 [ 464.334024][T19020] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.339155][T19020] ? do_sys_openat2+0x17a/0x1d0 [ 464.344027][T19020] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 464.350373][T19020] ? do_syscall_64+0x100/0x230 [ 464.355296][T19020] ? do_syscall_64+0xb6/0x230 [ 464.360020][T19020] do_syscall_64+0xf3/0x230 [ 464.364603][T19020] ? clear_bhb_loop+0x35/0x90 [ 464.369319][T19020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.375234][T19020] RIP: 0033:0x7f5e4238d169 [ 464.379661][T19020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.399292][T19020] RSP: 002b:00007f5e4326e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.407722][T19020] RAX: ffffffffffffffda RBX: 00007f5e425a5fa0 RCX: 00007f5e4238d169 [ 464.415727][T19020] RDX: 0000000020000094 RSI: 0000200000000140 RDI: 0000000000000003 [ 464.423716][T19020] RBP: 00007f5e4326e090 R08: 0000000000000000 R09: 0000000000000000 [ 464.431716][T19020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.439719][T19020] R13: 0000000000000000 R14: 00007f5e425a5fa0 R15: 00007ffcacb6b9d8 [ 464.447743][T19020] [ 464.451048][T19020] Kernel Offset: disabled [ 464.455382][T19020] Rebooting in 86400 seconds..