last executing test programs: 39.557443724s ago: executing program 0 (id=2238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r1, 0x1) setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'vlan0\x00', <r3=>0x0}) setsockopt$packet_int(r2, 0x107, 0xc, &(0x7f00000003c0)=0xf3e, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0xa, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="457a9a5f349e21279bf51e5bf878ba1700006700ffffffffffffffff0000", @ANYRES32=r4, @ANYBLOB="000000000000000095000000000000009500007000000000"], &(0x7f0000000000)='GPL\x00', 0xc}, 0x90) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x5}}, 0x10) close(r5) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000580)=[@in6={0xa, 0x4e20, 0x97, @dev={0xfe, 0x80, '\x00', 0x20}, 0x9}, @in6={0xa, 0x4e24, 0x5, @remote, 0x7}, @in={0x2, 0x4e23, @broadcast}], 0x48) sendto$packet(r2, &(0x7f0000000200)="3f030e00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe460f54", 0x4a, 0x0, &(0x7f0000000540)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000340)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8, r3}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r8, r7, 0x2, 0x0, 0x4000}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000680)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000700)=""/45, 0x2d}, {&(0x7f0000000740)=""/241, 0xf1}, {&(0x7f0000000900)=""/155, 0x9b}, {&(0x7f0000001e80)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/95, 0x5f}, {&(0x7f0000000a40)=""/33, 0x21}], 0x7, &(0x7f0000000b00)=""/60, 0x3c}, 0x80012021) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x10}}, 0xac}}, 0x0) socket(0x2, 0x3, 0x8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', <r10=>0x0}) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', r10, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x5}, {{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x5, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5}}}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 39.317313627s ago: executing program 0 (id=2242): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0) 38.994575465s ago: executing program 0 (id=2249): socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000a06030000000000000000000a00fffd0900020073797a310000000005000100070000000900020073797a3100000000140007800500076c040000000505000100070000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 29.882793037s ago: executing program 0 (id=2249): socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000a06030000000000000000000a00fffd0900020073797a310000000005000100070000000900020073797a3100000000140007800500076c040000000505000100070000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.966806665s ago: executing program 0 (id=2249): socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000a06030000000000000000000a00fffd0900020073797a310000000005000100070000000900020073797a3100000000140007800500076c040000000505000100070000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.646923769s ago: executing program 1 (id=2611): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)={<r1=>0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000009c0)={&(0x7f0000000640)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1}}, 0x10, &(0x7f0000000880)}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e0000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000200)={0x3, @bcast}) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x4, 0x4}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000000000000060ec973000302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 5.236724893s ago: executing program 1 (id=2615): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b402000000000000850000000600000095000000000000009b69602f8908181909772129cd5f9e32b760ff84b09df3b4040370df60c6fc4b39f4960f5be397c2079a3ca1b058285c54cf685476c7ab4e7e9252c08f546291cf614a396fd7f4c1d84e19ba89c813e3f2cc"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000600)=""/222}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x3b63e757}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xec}}, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x70bd26, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x20004141) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="14000000270001"], 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, 0xffffffffffffffff, 0x0) r2 = socket(0x1d, 0x2, 0x6) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x10000, @mcast1, 0x1}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f00000002c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r5=>0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r6, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x0, 0x8, 0x0, 0xfffffffffffffe39, 0x4b1}, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @val={@void}, {@ipv6={0x86dd, @dccp_packet={0x0, 0x6, "7a9d07", 0x10, 0x21, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "dba20d", 0x0, "0600"}}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000140)=ANY=[@ANYBLOB="2412bc4c88a79283e89b50e8"], 0x30}}, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendto$inet6(r7, &(0x7f0000000040)="33a8", 0x584, 0x0, 0x0, 0xf5ffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@zcopy_cookie={0x18}, @rdma_dest={0x18}], 0x30}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="5400000010000108000000000000000800000000", @ANYRES32=r5, @ANYBLOB="000000000000000008001d000000000008000a00", @ANYRES32=0x0, @ANYRESDEC=r0], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x40001) getsockopt$nfc_llcp(r2, 0x6a, 0x0, 0x0, 0x20000071) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a000000000000611154e2ffff000035520000950000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) 5.144064311s ago: executing program 1 (id=2619): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r1, 0x0, 0xa002a0}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x401, r1, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x6, 0x1, '\x9b\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000ff03000000000000000000000000000100000000200002ee0900000000000000fc000000000000000000000000000000000000000d0001007564703a73"], 0x6c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000d80)={0x2c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x2c}}, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(0x0, r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0xb4, r9, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x60}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x1c1}}]}, 0xb4}}, 0x40040) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r8, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0xb4, r9, 0x4, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x60}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x6}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0x1c1}}]}, 0xb4}}, 0x40040) accept(r5, 0x0, 0x0) (async) r10 = accept(r5, 0x0, 0x0) sendmmsg$alg(r10, &(0x7f0000000740), 0x0, 0x0) recvmsg(r10, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x9}, {&(0x7f000000b500)=""/153, 0x7}], 0x2}, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r10, 0x10f, 0x84, &(0x7f0000000200), &(0x7f00000004c0)=0x4) (async) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r10, 0x10f, 0x84, &(0x7f0000000200), &(0x7f00000004c0)=0x4) 4.174522439s ago: executing program 1 (id=2635): unshare(0xc040480) pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x15}, 0x48) 4.164850899s ago: executing program 1 (id=2637): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0x1000000, 0xffffffff, 0x268, 0xffffffff, 0x338, 0xffffffff, 0xffffffff, 0x338, 0xffffffff, 0x3, 0x0, {[{{@ip={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00'}, 0x0, 0x208, 0x268, 0x0, {0x0, 0x1c8}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_batadv\x00', {0xffffffffffffffff, 0x4000000, 0x39, 0x0, 0xd27c, 0x80000000, 0x3}}}, @common=@set={{0x40}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x430) 4.018013453s ago: executing program 1 (id=2639): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', <r7=>0x0}) bind$can_j1939(r6, &(0x7f0000001200)={0x1d, r7}, 0x18) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000ec0)={0x184, 0x3, 0x1, 0x401, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_SYNPROXY={0x44, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xcd}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x400}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x3755c7af}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x86}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xff6e}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}, @CTA_NAT_DST={0x70, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x77}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x2c0}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x40}]}, @CTA_PROTOINFO={0x24, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x20, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xd}, @CTA_PROTOINFO_DCCP_STATE={0x5, 0x1, 0x8}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x9}]}}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x184}, 0x1, 0x0, 0x0, 0x20004000}, 0x40800) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r7}, 0x18) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000700)=[{}], 0x20) (async) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f0000000700)=[{}], 0x20) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000240)={'vxcan0\x00', <r9=>0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r9}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500020000000800124000100000050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078005001500020000000800124000100000050005000a000000050001000600000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x2b8, 0x25c, 0x248, 0x7, 0x380, 0x3a8, 0x3a8, 0x380, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x228, 0x248, 0xa010000, {}, [@common=@frag={{0x30}}, @common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x3}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'sit0\x00', 'veth1_to_team\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x2b8, 0x25c, 0x248, 0x7, 0x380, 0x3a8, 0x3a8, 0x380, 0x3a8, 0x7fffffe, 0x0, {[{{@uncond, 0x16c, 0x228, 0x248, 0xa010000, {}, [@common=@frag={{0x30}}, @common=@inet=@hashlimit2={{0x150}, {'batadv0\x00', {0x0, 0x9, 0x0, 0x1, 0x0, 0x1, 0x3}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @private}, [], [], 'sit0\x00', 'veth1_to_team\x00'}, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r10 = accept4$alg(r0, 0x0, 0x0, 0x0) writev(r10, &(0x7f00000005c0)=[{&(0x7f0000000080)="3040ce68375e33c6b8b3caee4c333b6f75d356d660d35b17648c2b66c66e40f329b1cf0803736f3cac95037386e82a93451ef009eb1b5ea97bbe5b10224ddaa9116b08fe616ba91304255ef9dd2c6b943a9c7c38bc04fac31a86b456cc644fff172ef48ee26412d45afbf72d1d4150bfe918b4ffa628158fba440e31047a31ffa647be14a2bb6d8d1f06fa90eba8cf419ea78efc4162d8c30c6f033ab20860641b24", 0xa2}, {&(0x7f0000000540)="d01f58e2939cee4492fff4725dbb777f29584724a51752cae69362070607a913c44c4d66", 0x1e}, {&(0x7f0000000240)="9f4251c59f6c5009a2293da74a8c96bc372e2b0893cce20d5d94962fa9ea2ff2c11a30950d66016623f233bf536d09066a3090d8237e000b2942", 0xff16}], 0x3) (async) writev(r10, &(0x7f00000005c0)=[{&(0x7f0000000080)="3040ce68375e33c6b8b3caee4c333b6f75d356d660d35b17648c2b66c66e40f329b1cf0803736f3cac95037386e82a93451ef009eb1b5ea97bbe5b10224ddaa9116b08fe616ba91304255ef9dd2c6b943a9c7c38bc04fac31a86b456cc644fff172ef48ee26412d45afbf72d1d4150bfe918b4ffa628158fba440e31047a31ffa647be14a2bb6d8d1f06fa90eba8cf419ea78efc4162d8c30c6f033ab20860641b24", 0xa2}, {&(0x7f0000000540)="d01f58e2939cee4492fff4725dbb777f29584724a51752cae69362070607a913c44c4d66", 0x1e}, {&(0x7f0000000240)="9f4251c59f6c5009a2293da74a8c96bc372e2b0893cce20d5d94962fa9ea2ff2c11a30950d66016623f233bf536d09066a3090d8237e000b2942", 0xff16}], 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x6c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x6c}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 3.276126328s ago: executing program 0 (id=2249): socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000a06030000000000000000000a00fffd0900020073797a310000000005000100070000000900020073797a3100000000140007800500076c040000000505000100070000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.717640436s ago: executing program 2 (id=2664): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x20000000000001ad, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000ffff2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'geneve0\x00', <r2=>0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041000e0ff020002004788aa96a13bb1000000070088641100", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.534266446s ago: executing program 4 (id=2665): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@fwd={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r1, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff800f, 0x72}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x9d2, 0x0]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x131f}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3ca}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x325}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb4b}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x48000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x39, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, @in6={0xa, 0x4e22, 0x0, @loopback}]}, &(0x7f00000000c0)=0x10) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_group_source_req(r3, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) 1.534118925s ago: executing program 2 (id=2666): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001327034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.480220062s ago: executing program 2 (id=2667): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000001680)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r1, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000640)=""/148, 0x94}], 0x1}}], 0x2, 0x0, 0x0) 1.131193055s ago: executing program 3 (id=2668): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000007d14c96038dbfd76030c0000000c000000020000480055d0a1dbdf9f7a"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20) 1.041030093s ago: executing program 3 (id=2669): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@mcast2, <r2=>0x0}, &(0x7f0000000180)=0x14) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x1000, 0x1000, 0x3, 0x48, r1, 0x1, '\x00', r2, r3, 0x0, 0x0, 0x3, 0xc}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}}, 0x40040) 881.712327ms ago: executing program 4 (id=2670): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @exit, @initr0={0x18, 0x0, 0x0, 0x6100}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @exit], &(0x7f00000000c0)='GPL\x00'}, 0x78) 848.673737ms ago: executing program 3 (id=2671): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x0, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='rxrpc_rx_icmp\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000000c0)={'wg0\x00'}) r4 = socket(0x25, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', <r5=>0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}, 0x1, 0x7a00}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', <r8=>0x0}) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="030300000000000000000c00000008000300", @ANYRES32=r8, @ANYBLOB="370f0d54e8692e97f8ed9bfa43e0c10717c5795759d27143187127b4cd44bf86b4c8ba24c3dab10eacfc31b38ecbab5fbd70282432ab03afc8ea25c9f85f5909dc8b39224cb92ee1961427aa5b0761aeef6a46ec2e81b24a3f3eb06181ebef1ebc518c603151b80a9cc618128dda2f65eac3e2799ba6ae7d4e4a0e8579faa3576398cf0c2f9616d1dbec2bda6e9053347dedca4244b6d5da035253288013e1ea36fc4fe7a3f7a54c1bb6809e393dca"], 0x1c}}, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r10, 0x2, 0x1}, 0x48) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r11}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r7) 702.538037ms ago: executing program 4 (id=2672): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000240)={0x0, 0x4000, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xc, 0x1, 'bridge0\x00'}]}, 0x20}}, 0x0) 683.385983ms ago: executing program 3 (id=2673): pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000005200000337bd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x6}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r2, r1, 0x5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}]}, 0x34}}, 0x0) 616.768996ms ago: executing program 4 (id=2674): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000104000000000012000000000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000200012800b00010067656e657665000010000280060005004e200000040006"], 0x48}}, 0x0) 542.442794ms ago: executing program 2 (id=2675): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x80}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe5ffffff, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 535.994411ms ago: executing program 2 (id=2676): socket$inet6(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x0, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000080)=0xf0ff7f) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) socket(0x0, 0x0, 0x4) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00'}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000240)=@generic={0x0, 0x0, 0x2}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x64, 0x6, 0x570, 0x0, 0x3a8, 0x1e8, 0x0, 0x118, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev, @ipv6=@dev, 0xed}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev, 'veth1_virt_wifi\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB], 0x84}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x0, 0xff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d0042c411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab98eb1d9cc98c2a4f837c", 0x4c}], 0x1}, 0x4c00000000000000) 519.087428ms ago: executing program 3 (id=2677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x0, 0x8, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8=r0, @ANYBLOB="000000000000000000003900000008000300"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000200000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0) 310.515313ms ago: executing program 3 (id=2678): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x1c, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) pipe(&(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}) ppoll(&(0x7f0000001180)=[{}, {r4}], 0x2, 0x0, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000fc0)={@local, @random="a625e28bcd21", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "74101c", 0x8, 0x0, 0x0, @private2, @local, {[@routing={0x84}]}}}}}, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x88d1}, 0x8885) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x40, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@loopback}, @nested={0x8, 0x7, 0x0, 0x1, [@typed={0x4}]}]}, 0x40}}, 0x0) 273.309682ms ago: executing program 4 (id=2679): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000000100000000000000", 0x1c) 45.799267ms ago: executing program 4 (id=2680): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000000000000060ec970000082c00fe8000fe68ffff0000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 0s ago: executing program 2 (id=2681): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', <r1=>0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x2c, r2, 0x1, 0x2c, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x2c}}, 0x0) kernel console output (not intermixed with test programs): ute type 2 has an invalid length. [ 169.486173][ T9754] vlan3: entered promiscuous mode [ 169.507582][ T9754] vlan3: entered allmulticast mode [ 169.512751][ T9754] team0: entered allmulticast mode [ 169.536209][ T9754] team_slave_0: entered allmulticast mode [ 169.542863][ T9754] team_slave_1: entered allmulticast mode [ 169.647887][ T9758] batadv0: entered promiscuous mode [ 169.680184][ T9758] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 169.701465][ T9768] syz.3.1641[9768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.701694][ T9768] syz.3.1641[9768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 169.716567][ T9758] Cannot create hsr debugfs directory [ 169.909636][ T9781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.952230][ T9781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.992021][ T9764] tap0: tun_chr_ioctl cmd 1074025675 [ 170.005139][ T9764] tap0: persist enabled [ 170.013984][ T9773] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 170.024209][ T9773] netlink: 'syz.0.1644': attribute type 2 has an invalid length. [ 170.034417][ T9770] tap0: tun_chr_ioctl cmd 1074025675 [ 170.042054][ T9770] tap0: persist disabled [ 170.336499][ T9800] team0: Port device netdevsim0 removed [ 170.359629][ T9800] batman_adv: batadv1: Adding interface: netdevsim0 [ 170.376536][ T9800] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.403739][ T9800] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 170.436777][ T9804] IPv6: sit4: Disabled Multicast RS [ 170.482617][ T9808] netlink: 'syz.2.1656': attribute type 6 has an invalid length. [ 170.568536][ T9814] netlink: 'syz.3.1659': attribute type 1 has an invalid length. [ 170.691950][ T9825] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 170.726141][ T9825] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 170.766600][ T9825] bond1: (slave vcan1): making interface the new active one [ 170.789473][ T9825] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 170.817962][ T9832] __nla_validate_parse: 17 callbacks suppressed [ 170.817980][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 170.850076][ T9831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1665'. [ 171.057934][ T9838] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1669'. [ 171.147382][ T9846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1671'. [ 171.357930][ T9856] netlink: 'syz.2.1677': attribute type 1 has an invalid length. [ 171.371934][ T9856] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.1677'. [ 171.416390][ T9856] netlink: 'syz.2.1677': attribute type 1 has an invalid length. [ 171.455013][ T9856] netlink: 'syz.2.1677': attribute type 1 has an invalid length. [ 171.564546][ T9858] netlink: 'syz.4.1679': attribute type 10 has an invalid length. [ 171.629674][ T9858] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.642748][ T9858] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.664341][ T9858] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.680261][ T9858] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.719698][ T9858] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.734174][ T9858] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.748335][ T9858] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.758158][ T9858] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.775063][ T9858] geneve1: entered promiscuous mode [ 171.783084][ T9858] geneve1: entered allmulticast mode [ 171.791344][ T9858] team0: Port device geneve1 added [ 171.797932][ T9870] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1682'. [ 171.812507][ T9874] bridge_slave_1: left allmulticast mode [ 171.821969][ T9874] bridge_slave_1: left promiscuous mode [ 171.837268][ T9874] bridge1: port 1(bridge_slave_1) entered disabled state [ 172.059190][ T9895] openvswitch: netlink: Unknown nsh attribute 0 [ 172.135624][ T9899] netlink: 'syz.4.1690': attribute type 10 has an invalid length. [ 172.170555][ T9899] batman_adv: batadv2: Interface deactivated: netdevsim0 [ 172.221720][ T9902] ebt_among: dst integrity fail: 102 [ 172.231878][ T9899] batman_adv: batadv2: Removing interface: netdevsim0 [ 172.295252][ T9899] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 172.311569][ T9899] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 172.326387][ T9899] team0: Port device netdevsim0 added [ 172.336287][ T9901] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1693'. [ 172.373236][ T9914] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 172.511164][ T9920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1698'. [ 172.561562][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1699'. [ 172.606851][ T9924] vlan2: entered promiscuous mode [ 172.627833][ T9924] team0: entered promiscuous mode [ 172.661056][ T9924] team_slave_0: entered promiscuous mode [ 172.674002][ T9924] team_slave_1: entered promiscuous mode [ 172.682133][ T9924] vlan2: entered allmulticast mode [ 172.689925][ T9924] team0: entered allmulticast mode [ 172.695221][ T9924] team_slave_0: entered allmulticast mode [ 172.701235][ T9924] team_slave_1: entered allmulticast mode [ 172.746839][ T9927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 173.061868][ T9956] netlink: 'syz.3.1706': attribute type 10 has an invalid length. [ 173.295801][ T9963] netlink: 'syz.0.1712': attribute type 11 has an invalid length. [ 173.369792][ T9963] netlink: 'syz.0.1712': attribute type 11 has an invalid length. [ 174.050234][T10008] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 174.802299][T10035] netlink: 'syz.4.1736': attribute type 28 has an invalid length. [ 174.853501][T10036] netlink: 'syz.1.1740': attribute type 49 has an invalid length. [ 174.877666][T10036] netlink: 'syz.1.1740': attribute type 49 has an invalid length. [ 175.015480][T10041] netlink: 'syz.3.1743': attribute type 11 has an invalid length. [ 175.074448][T10041] netlink: 'syz.3.1743': attribute type 11 has an invalid length. [ 175.358620][T10064] IPVS: length: 96 != 8 [ 175.628025][T10071] xt_CT: No such helper "snmp" [ 175.651518][T10071] syzkaller1: entered promiscuous mode [ 175.672308][T10071] syzkaller1: entered allmulticast mode [ 175.985643][T10104] __nla_validate_parse: 11 callbacks suppressed [ 175.985662][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 176.029593][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 176.255921][T10116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 176.264118][T10108] xt_bpf: check failed: parse error [ 176.661856][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1771'. [ 176.711740][T10139] IPv6: Can't replace route, no match found [ 176.719606][T10138] netlink: 'syz.1.1774': attribute type 4 has an invalid length. [ 176.762529][T10139] netlink: 277 bytes leftover after parsing attributes in process `syz.4.1772'. [ 176.796196][T10138] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1774'. [ 176.845812][T10144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1775'. [ 176.971428][T10149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 177.106854][T10160] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1780'. [ 177.117422][T10158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1781'. [ 177.160556][T10160] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 177.169508][T10160] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 177.178763][T10160] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 177.187564][T10160] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 177.479411][T10181] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.514597][T10181] netlink: 'syz.2.1790': attribute type 15 has an invalid length. [ 177.791505][T10202] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.801463][T10202] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.810793][T10202] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.819768][T10202] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.651178][T10253] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.660172][T10253] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.670167][T10253] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 178.679469][T10253] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.344587][T10279] netlink: 'syz.2.1825': attribute type 10 has an invalid length. [ 179.378378][T10282] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 179.438539][T10285] openvswitch: netlink: Flow key attribute not present in set flow. [ 179.529039][T10290] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 179.999032][T10321] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media [ 180.710532][T10346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.317315][ T5111] Bluetooth: hci3: command 0x0406 tx timeout [ 181.529312][T10395] __nla_validate_parse: 20 callbacks suppressed [ 181.529334][T10395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1864'. [ 181.555799][T10395] openvswitch: netlink: Flow actions attr not present in new flow. [ 182.846713][T10383] netlink: 'syz.1.1861': attribute type 3 has an invalid length. [ 182.876138][T10399] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.171968][T10412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1872'. [ 183.311894][T10424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1873'. [ 183.547313][T10431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1876'. [ 183.660921][T10441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1879'. [ 183.716326][T10441] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 183.726600][T10441] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1879'. [ 183.737852][T10441] netlink: 'syz.1.1879': attribute type 8 has an invalid length. [ 183.912112][T10452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 184.038587][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.419732][T10436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 186.342153][T10472] netlink: 'syz.4.1889': attribute type 1 has an invalid length. [ 186.353916][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1889'. [ 186.364193][T10473] netlink: 'syz.3.1888': attribute type 1 has an invalid length. [ 186.377064][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'. [ 186.401595][T10493] netlink: 'syz.1.1897': attribute type 30 has an invalid length. [ 186.428305][T10493] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 186.457129][T10493] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 186.488333][T10497] netlink: 'syz.4.1899': attribute type 1 has an invalid length. [ 186.508210][T10497] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 186.603101][T10511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1900'. [ 186.693370][T10516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1903'. [ 186.752198][T10519] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 186.753407][T10516] netlink: 'syz.1.1903': attribute type 1 has an invalid length. [ 186.767203][T10519] dvmrp1: linktype set to 512 [ 186.789321][T10516] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1903'. [ 186.805487][T10516] netlink: 'syz.1.1903': attribute type 8 has an invalid length. [ 186.959125][T10528] vlan2: entered promiscuous mode [ 187.049522][T10531] FAULT_INJECTION: forcing a failure. [ 187.049522][T10531] name failslab, interval 1, probability 0, space 0, times 0 [ 187.085188][T10531] CPU: 1 PID: 10531 Comm: syz.0.1910 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 187.095401][T10531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 187.105482][T10531] Call Trace: [ 187.108781][T10531] <TASK> [ 187.111723][T10531] dump_stack_lvl+0x241/0x360 [ 187.116425][T10531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.121643][T10531] ? __pfx__printk+0x10/0x10 [ 187.126263][T10531] should_fail_ex+0x3b0/0x4e0 [ 187.130971][T10531] ? __alloc_skb+0x1c3/0x440 [ 187.135606][T10531] should_failslab+0x9/0x20 [ 187.140138][T10531] kmem_cache_alloc_node_noprof+0x71/0x320 [ 187.145973][T10531] __alloc_skb+0x1c3/0x440 [ 187.150405][T10531] ? __pfx___alloc_skb+0x10/0x10 [ 187.155344][T10531] ? netlink_ack_tlv_len+0x6e/0x200 [ 187.160543][T10531] netlink_ack+0x13f/0xa30 [ 187.164954][T10531] ? __pfx_lock_acquire+0x10/0x10 [ 187.169975][T10531] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 187.175269][T10531] netlink_rcv_skb+0x262/0x430 [ 187.180034][T10531] ? __pfx_genl_rcv_msg+0x10/0x10 [ 187.185056][T10531] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 187.190361][T10531] genl_rcv+0x28/0x40 [ 187.194363][T10531] netlink_unicast+0x7f0/0x990 [ 187.199122][T10531] ? __pfx_netlink_unicast+0x10/0x10 [ 187.204394][T10531] ? __virt_addr_valid+0x183/0x520 [ 187.209528][T10531] ? __check_object_size+0x49c/0x900 [ 187.214824][T10531] ? bpf_lsm_netlink_send+0x9/0x10 [ 187.219951][T10531] netlink_sendmsg+0x8e4/0xcb0 [ 187.224727][T10531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.230081][T10531] ? __import_iovec+0x536/0x820 [ 187.235154][T10531] ? aa_sock_msg_perm+0x91/0x160 [ 187.240115][T10531] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 187.245410][T10531] ? security_socket_sendmsg+0x87/0xb0 [ 187.250873][T10531] ? __pfx_netlink_sendmsg+0x10/0x10 [ 187.256157][T10531] __sock_sendmsg+0x221/0x270 [ 187.260857][T10531] ____sys_sendmsg+0x525/0x7d0 [ 187.265682][T10531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 187.271005][T10531] __sys_sendmsg+0x2b0/0x3a0 [ 187.275616][T10531] ? __pfx___sys_sendmsg+0x10/0x10 [ 187.280740][T10531] ? vfs_write+0x7c4/0xc90 [ 187.285203][T10531] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 187.291532][T10531] ? do_syscall_64+0x100/0x230 [ 187.296294][T10531] ? do_syscall_64+0xb6/0x230 [ 187.300981][T10531] do_syscall_64+0xf3/0x230 [ 187.305500][T10531] ? clear_bhb_loop+0x35/0x90 [ 187.310182][T10531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.316071][T10531] RIP: 0033:0x7fbdcfd75bd9 [ 187.320483][T10531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.340094][T10531] RSP: 002b:00007fbdd0ab2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 187.348508][T10531] RAX: ffffffffffffffda RBX: 00007fbdcff03f60 RCX: 00007fbdcfd75bd9 [ 187.356471][T10531] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 187.364435][T10531] RBP: 00007fbdd0ab20a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.372410][T10531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.380464][T10531] R13: 000000000000000b R14: 00007fbdcff03f60 R15: 00007ffea2d1b1e8 [ 187.388444][T10531] </TASK> [ 187.401099][T10503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.478344][T10512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.808843][T10538] dccp_v4_rcv: dropped packet with invalid checksum [ 187.919637][T10542] No such timeout policy "syz0" [ 189.611422][T10566] xt_limit: Overflow, try lower: 262144/524288 [ 189.688859][T10568] bond0: entered promiscuous mode [ 189.693945][T10568] bond_slave_0: entered promiscuous mode [ 189.714526][T10568] bond_slave_1: entered promiscuous mode [ 189.737550][T10568] vlan2: entered promiscuous mode [ 189.762725][T10568] bond0: (slave bond_slave_0): Releasing backup interface [ 189.780359][T10568] bond_slave_0: left promiscuous mode [ 189.899619][T10581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1927'. [ 189.965610][T10581] netlink: 'syz.2.1927': attribute type 1 has an invalid length. [ 189.984974][T10581] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1927'. [ 190.007773][T10581] netlink: 'syz.2.1927': attribute type 8 has an invalid length. [ 190.068592][T10567] bond0: left promiscuous mode [ 190.074818][T10567] bond_slave_1: left promiscuous mode [ 190.082708][T10567] vlan2: left promiscuous mode [ 190.196116][T10587] batadv0: entered promiscuous mode [ 190.202386][T10587] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 190.210194][T10587] Cannot create hsr debugfs directory [ 190.225782][T10588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1928'. [ 190.287501][T10590] netlink: 'syz.1.1931': attribute type 1 has an invalid length. [ 190.295243][T10590] netlink: 'syz.1.1931': attribute type 2 has an invalid length. [ 190.407076][T10592] netlink: 'syz.1.1932': attribute type 1 has an invalid length. [ 190.438676][T10592] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 190.450432][T10592] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 190.463543][T10592] bond2: (slave vcan2): making interface the new active one [ 190.472128][T10592] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 190.648242][T10577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.661353][T10601] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1936'. [ 190.678449][T10601] batman_adv: The newly added mac address (0a:a5:db:a5:75:6a) already exists on: netdevsim0 [ 190.694806][T10601] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.706876][T10601] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 190.715160][T10601] macsec2: entered promiscuous mode [ 190.732777][T10601] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 190.920281][T10618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.948081][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1939'. [ 190.951303][T10582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.129963][T10630] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1941'. [ 191.383551][T10638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1945'. [ 191.438997][T10638] bridge_slave_0: left allmulticast mode [ 191.444727][T10638] bridge_slave_0: left promiscuous mode [ 191.465463][T10638] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.590361][T10646] block nbd0: not configured, cannot reconfigure [ 191.608401][T10643] netlink: 'syz.3.1947': attribute type 1 has an invalid length. [ 191.754222][T10652] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media [ 191.887985][T10662] lo speed is unknown, defaulting to 1000 [ 191.909457][T10662] lo speed is unknown, defaulting to 1000 [ 191.915648][T10662] lo speed is unknown, defaulting to 1000 [ 191.983686][T10668] __nla_validate_parse: 3 callbacks suppressed [ 191.983705][T10668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 192.020859][T10664] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 192.075292][T10668] netlink: 'syz.3.1955': attribute type 1 has an invalid length. [ 192.115950][T10668] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1955'. [ 192.131304][T10668] netlink: 'syz.3.1955': attribute type 8 has an invalid length. [ 192.241714][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1959'. [ 192.326399][T10662] infiniband syz0: set active [ 192.333766][ T25] lo speed is unknown, defaulting to 1000 [ 192.338649][T10662] infiniband syz0: added lo [ 192.393976][T10662] RDS/IB: syz0: added [ 192.398248][T10662] smc: adding ib device syz0 with port count 1 [ 192.404587][T10662] smc: ib device syz0 port 1 has pnetid [ 192.410821][ T6539] lo speed is unknown, defaulting to 1000 [ 192.421762][T10662] lo speed is unknown, defaulting to 1000 [ 192.603169][T10662] lo speed is unknown, defaulting to 1000 [ 192.721283][T10661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.925713][T10662] lo speed is unknown, defaulting to 1000 [ 193.012656][T10675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.084780][T10704] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 193.234221][T10662] lo speed is unknown, defaulting to 1000 [ 193.560580][T10662] lo speed is unknown, defaulting to 1000 [ 193.687213][T10730] batadv_slave_1: entered promiscuous mode [ 193.737748][T10730] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1976'. [ 193.769565][T10730] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 193.824119][T10729] batadv_slave_1: left promiscuous mode [ 193.959681][T10739] netlink: 'syz.3.1978': attribute type 11 has an invalid length. [ 193.972437][T10662] lo speed is unknown, defaulting to 1000 [ 193.995356][T10739] netlink: 'syz.3.1978': attribute type 11 has an invalid length. [ 194.037518][T10742] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1980'. [ 194.107973][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1981'. [ 194.148341][T10746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1982'. [ 194.236327][T10752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 194.293755][T10752] netlink: 'syz.3.1983': attribute type 1 has an invalid length. [ 194.317896][T10752] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1983'. [ 194.350698][T10758] bridge_slave_1: left allmulticast mode [ 194.356404][T10758] bridge_slave_1: left promiscuous mode [ 194.360888][T10752] netlink: 'syz.3.1983': attribute type 8 has an invalid length. [ 194.367988][T10758] bridge1: port 1(bridge_slave_1) entered disabled state [ 194.395158][T10758] bridge3: port 1(bridge_slave_1) entered blocking state [ 194.404219][T10758] bridge3: port 1(bridge_slave_1) entered disabled state [ 194.411945][T10758] bridge_slave_1: entered allmulticast mode [ 194.419969][T10758] bridge_slave_1: entered promiscuous mode [ 194.427183][T10758] bridge3: port 1(bridge_slave_1) entered blocking state [ 194.434386][T10758] bridge3: port 1(bridge_slave_1) entered forwarding state [ 194.448167][T10662] lo speed is unknown, defaulting to 1000 [ 194.454704][T10766] veth1_to_bond: left allmulticast mode [ 194.485913][T10766] veth1_to_bond: left promiscuous mode [ 194.503812][T10766] bridge1: port 2(veth1_to_bond) entered disabled state [ 194.535052][T10766] bridge3: port 2(veth1_to_bond) entered blocking state [ 194.544302][T10766] bridge3: port 2(veth1_to_bond) entered disabled state [ 194.551914][T10766] veth1_to_bond: entered allmulticast mode [ 194.559775][T10766] veth1_to_bond: entered promiscuous mode [ 194.566439][T10766] bridge3: port 2(veth1_to_bond) entered blocking state [ 194.573586][T10766] bridge3: port 2(veth1_to_bond) entered forwarding state [ 194.619479][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.721493][T10771] 8021q: adding VLAN 0 to HW filter on device team1 [ 194.761033][T10662] lo speed is unknown, defaulting to 1000 [ 194.974944][T10782] pim6reg: entered allmulticast mode [ 194.990883][T10747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.000705][T10782] pim6reg: left allmulticast mode [ 195.086595][T10751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.128522][T10662] lo speed is unknown, defaulting to 1000 [ 195.274659][T10795] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.607555][T10809] lo: Caught tx_queue_len zero misconfig [ 195.786105][T10821] infiniband syz0: set active [ 195.829089][ T25] lo speed is unknown, defaulting to 1000 [ 196.003313][T10840] openvswitch: netlink: Unknown nsh attribute 0 [ 196.168977][T10851] netlink: 'syz.3.2016': attribute type 1 has an invalid length. [ 196.179484][T10851] netlink: 'syz.3.2016': attribute type 8 has an invalid length. [ 196.464356][T10867] FAULT_INJECTION: forcing a failure. [ 196.464356][T10867] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 196.488061][T10867] CPU: 1 PID: 10867 Comm: syz.1.2026 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 196.498274][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 196.508365][T10867] Call Trace: [ 196.511674][T10867] <TASK> [ 196.514619][T10867] dump_stack_lvl+0x241/0x360 [ 196.519326][T10867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.524540][T10867] ? __pfx__printk+0x10/0x10 [ 196.529157][T10867] ? __pfx_lock_release+0x10/0x10 [ 196.534211][T10867] should_fail_ex+0x3b0/0x4e0 [ 196.538923][T10867] _copy_from_user+0x2f/0xe0 [ 196.543542][T10867] copy_msghdr_from_user+0xae/0x680 [ 196.548778][T10867] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 196.554628][T10867] __sys_sendmsg+0x23d/0x3a0 [ 196.559253][T10867] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.564390][T10867] ? vfs_write+0x7c4/0xc90 [ 196.568865][T10867] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.575220][T10867] ? do_syscall_64+0x100/0x230 [ 196.580011][T10867] ? do_syscall_64+0xb6/0x230 [ 196.584718][T10867] do_syscall_64+0xf3/0x230 [ 196.589251][T10867] ? clear_bhb_loop+0x35/0x90 [ 196.593959][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.599875][T10867] RIP: 0033:0x7fada7b75bd9 [ 196.604306][T10867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.624020][T10867] RSP: 002b:00007fada88d2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.632469][T10867] RAX: ffffffffffffffda RBX: 00007fada7d03f60 RCX: 00007fada7b75bd9 [ 196.640559][T10867] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 196.648570][T10867] RBP: 00007fada88d20a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.656694][T10867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.664713][T10867] R13: 000000000000004d R14: 00007fada7d03f60 R15: 00007ffe12b279b8 [ 196.672735][T10867] </TASK> [ 196.762927][T10876] vlan4: entered promiscuous mode [ 196.768244][T10876] ip6gretap0: entered promiscuous mode [ 196.776859][T10876] ip6gretap0: left promiscuous mode [ 196.828673][T10839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.868697][T10842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.079169][T10893] netlink: 'syz.2.2038': attribute type 1 has an invalid length. [ 197.097207][T10893] __nla_validate_parse: 13 callbacks suppressed [ 197.097230][T10893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'. [ 197.135168][T10892] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2036'. [ 197.244166][T10896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.254523][T10903] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2041'. [ 197.347333][T10907] netlink: 'syz.1.2042': attribute type 24 has an invalid length. [ 197.427616][T10908] vlan4: entered promiscuous mode [ 197.435937][T10908] ip6gretap0: entered promiscuous mode [ 197.444587][T10908] ip6gretap0: left promiscuous mode [ 197.541194][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2046'. [ 197.719833][T10926] x_tables: duplicate underflow at hook 2 [ 197.795901][T10931] netlink: 'syz.3.2051': attribute type 3 has an invalid length. [ 197.812142][T10931] netlink: 'syz.3.2051': attribute type 3 has an invalid length. [ 197.826468][T10933] netlink: 'syz.0.2050': attribute type 28 has an invalid length. [ 198.168145][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2055'. [ 198.218369][T10951] vlan4: entered promiscuous mode [ 198.223459][T10951] ip6gretap0: entered promiscuous mode [ 198.236874][T10950] netlink: 'syz.3.2055': attribute type 1 has an invalid length. [ 198.248099][T10953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2059'. [ 198.261222][T10951] ip6gretap0: left promiscuous mode [ 198.261414][T10950] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2055'. [ 198.275875][T10950] netlink: 'syz.3.2055': attribute type 8 has an invalid length. [ 198.429252][T10959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 198.759223][T10969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2066'. [ 198.820642][T10969] bridge1: port 1(bridge_slave_1) entered blocking state [ 198.835695][T10969] bridge1: port 1(bridge_slave_1) entered disabled state [ 198.849173][T10969] bridge_slave_1: entered allmulticast mode [ 198.852962][T10940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.856588][T10969] bridge_slave_1: entered promiscuous mode [ 198.873344][T10963] lo speed is unknown, defaulting to 1000 [ 198.925392][T10943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.997511][T10972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2067'. [ 199.540625][T10995] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 200.002892][T11005] bridge3: port 1(bridge_slave_1) entered blocking state [ 200.033273][T11005] bridge3: port 1(bridge_slave_1) entered disabled state [ 200.082843][T11005] bridge_slave_1: entered allmulticast mode [ 200.124929][T11005] bridge_slave_1: entered promiscuous mode [ 200.153464][T11005] bridge3: port 1(bridge_slave_1) entered blocking state [ 200.160691][T11005] bridge3: port 1(bridge_slave_1) entered forwarding state [ 200.233627][T11007] veth1_to_bond: left allmulticast mode [ 200.251029][T11007] veth1_to_bond: left promiscuous mode [ 200.272780][T11007] bridge1: port 2(veth1_to_bond) entered disabled state [ 200.340682][T11007] bridge3: port 2(veth1_to_bond) entered blocking state [ 200.365889][T11007] bridge3: port 2(veth1_to_bond) entered disabled state [ 200.394829][T11007] veth1_to_bond: entered allmulticast mode [ 200.409330][T11007] veth1_to_bond: entered promiscuous mode [ 200.426272][T11007] bridge3: port 2(veth1_to_bond) entered blocking state [ 200.433418][T11007] bridge3: port 2(veth1_to_bond) entered forwarding state [ 200.526509][T11023] bond0: entered promiscuous mode [ 200.548680][T11023] bond_slave_1: entered promiscuous mode [ 200.566700][T11023] vlan2: entered promiscuous mode [ 200.598326][T11022] bond0: left promiscuous mode [ 200.622756][T11022] bond_slave_1: left promiscuous mode [ 200.637652][T11022] vlan2: left promiscuous mode [ 200.968718][T11012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.215376][T11055] tap0: tun_chr_ioctl cmd 1074025675 [ 201.237563][T11055] tap0: persist enabled [ 201.259237][T11055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.283963][T11055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.315241][T11055] tap0: tun_chr_ioctl cmd 1074025675 [ 201.324380][T11055] tap0: persist disabled [ 201.623045][T11074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.689148][T11078] netlink: 'syz.4.2110': attribute type 1 has an invalid length. [ 202.018992][T11096] syz.0.2115 uses old SIOCAX25GETINFO [ 202.209759][T11099] __nla_validate_parse: 14 callbacks suppressed [ 202.209781][T11099] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2117'. [ 202.463440][T11109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2121'. [ 202.497619][T11112] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2122'. [ 202.635489][T11116] tap0: tun_chr_ioctl cmd 1074025675 [ 202.653769][T11116] tap0: persist enabled [ 202.677894][T11116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2125'. [ 202.707161][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.737555][T11116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.767743][T11116] tap0: tun_chr_ioctl cmd 1074025675 [ 202.773592][T11116] tap0: persist disabled [ 202.913987][T11133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 202.965410][T11139] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2134'. [ 202.978314][T11136] netlink: 'syz.4.2127': attribute type 10 has an invalid length. [ 203.164161][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2137'. [ 203.204428][T11157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2136'. [ 203.259019][T11157] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 203.277076][T11157] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2136'. [ 203.295491][T11157] netlink: 'syz.1.2136': attribute type 8 has an invalid length. [ 203.494835][T11176] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2147'. [ 203.521988][T11176] openvswitch: ��: Dropping previously announced user features [ 203.675804][T11186] netlink: 'syz.4.2151': attribute type 64 has an invalid length. [ 203.693940][T11186] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 203.938253][T11145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.966451][T11200] vlan3: entered promiscuous mode [ 203.985965][T11200] vlan3: entered allmulticast mode [ 204.126537][T11207] tap0: tun_chr_ioctl cmd 1074025675 [ 204.133522][T11207] tap0: persist enabled [ 204.141793][T11207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.153853][T11207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.166227][T11207] tap0: tun_chr_ioctl cmd 1074025675 [ 204.176354][T11207] tap0: persist disabled [ 204.586881][T11233] netlink: 'syz.2.2167': attribute type 4 has an invalid length. [ 204.758384][T11239] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 204.773794][T11239] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 204.815785][T11239] team0: Port device netdevsim0 removed [ 204.828802][T11239] batman_adv: batadv1: Adding interface: netdevsim0 [ 204.835769][T11239] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.904674][T11239] batman_adv: batadv1: Not using interface netdevsim0 (retrying later): interface not active [ 205.136352][T11264] netlink: 'syz.1.2178': attribute type 1 has an invalid length. [ 205.149407][T11266] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 205.158498][T11264] netlink: 'syz.1.2178': attribute type 8 has an invalid length. [ 205.186083][T11270] netlink: 'syz.2.2183': attribute type 1 has an invalid length. [ 205.313322][T11273] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 205.344020][T11273] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 205.364465][T11273] bond1: (slave vcan1): making interface the new active one [ 205.380050][T11273] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 205.410700][T11280] tap0: tun_chr_ioctl cmd 1074025675 [ 205.417116][T11280] tap0: persist enabled [ 205.424037][T11282] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 205.454711][T11274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.483634][T11274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.506800][T11274] tap0: tun_chr_ioctl cmd 1074025675 [ 205.519677][T11274] tap0: persist disabled [ 205.867983][T11256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.913551][T11305] Cannot find del_set index 4 as target [ 206.298989][T11326] tipc: Cannot configure node identity twice [ 206.665025][T11348] tap1: tun_chr_ioctl cmd 1074025675 [ 206.690890][T11348] tap1: persist enabled [ 206.721433][T11348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.763855][T11348] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.787199][T11348] tap1: tun_chr_ioctl cmd 1074025675 [ 206.796562][T11348] tap1: persist disabled [ 206.920208][T11367] netlink: 'syz.4.2216': attribute type 1 has an invalid length. [ 206.936081][T11367] netlink: 'syz.4.2216': attribute type 8 has an invalid length. [ 207.200244][T11384] netlink: 'syz.2.2223': attribute type 13 has an invalid length. [ 207.624525][T11362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.734999][T11404] netlink: 'syz.3.2232': attribute type 1 has an invalid length. [ 207.743112][T11404] __nla_validate_parse: 18 callbacks suppressed [ 207.743128][T11404] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2232'. [ 207.783778][T11402] netlink: 209848 bytes leftover after parsing attributes in process `syz.0.2231'. [ 207.798776][T11406] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2233'. [ 208.018757][T11411] netlink: 'syz.1.2236': attribute type 11 has an invalid length. [ 208.043628][T11411] netlink: 'syz.1.2236': attribute type 11 has an invalid length. [ 208.043838][T11413] tap0: tun_chr_ioctl cmd 1074025675 [ 208.077927][T11413] tap0: persist enabled [ 208.104668][T11413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.117953][T11413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.142171][T11413] tap0: tun_chr_ioctl cmd 1074025675 [ 208.157498][T11413] tap0: persist disabled [ 208.251748][T11424] ip6tnl1: entered promiscuous mode [ 208.263693][T11424] ip6tnl1: entered allmulticast mode [ 208.295262][T11426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 208.327068][T11426] openvswitch: netlink: Flow actions attr not present in new flow. [ 208.541311][T11437] netlink: 209848 bytes leftover after parsing attributes in process `syz.4.2248'. [ 208.840585][T11446] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2251'. [ 208.944450][T11446] bridge_slave_1: left allmulticast mode [ 208.957132][T11446] bridge_slave_1: left promiscuous mode [ 208.962949][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.012065][T11446] bridge4: port 1(bridge_slave_1) entered blocking state [ 209.020006][T11454] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2256'. [ 209.042564][T11446] bridge4: port 1(bridge_slave_1) entered disabled state [ 209.060339][T11446] bridge_slave_1: entered allmulticast mode [ 209.076657][T11454] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2256'. [ 209.081956][T11446] bridge_slave_1: entered promiscuous mode [ 209.107182][T11454] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2256'. [ 209.108293][T11446] bridge4: port 1(bridge_slave_1) entered blocking state [ 209.123424][T11446] bridge4: port 1(bridge_slave_1) entered forwarding state [ 209.150055][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 209.151448][T11461] vlan4: entered allmulticast mode [ 209.163783][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 209.175500][ T5111] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 209.187458][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 209.196648][ T5111] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 209.204803][ T5111] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.223714][T11450] bridge4: port 2(veth1_to_bond) entered blocking state [ 209.233711][T11450] bridge4: port 2(veth1_to_bond) entered disabled state [ 209.250833][T11450] veth1_to_bond: entered allmulticast mode [ 209.265746][T11450] veth1_to_bond: entered promiscuous mode [ 209.275252][T11450] bridge4: port 2(veth1_to_bond) entered blocking state [ 209.282423][T11450] bridge4: port 2(veth1_to_bond) entered forwarding state [ 209.385841][T11464] netlink: 'syz.4.2259': attribute type 1 has an invalid length. [ 209.456308][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2261'. [ 209.679080][T11460] lo speed is unknown, defaulting to 1000 [ 209.809841][T11482] tap0: tun_chr_ioctl cmd 1074025675 [ 209.815272][T11482] tap0: persist enabled [ 209.883335][T11487] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 209.895942][T11482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.918976][T11482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.951369][T11483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.978094][T11482] tap0: tun_chr_ioctl cmd 1074025675 [ 209.996158][T11482] tap0: persist disabled [ 210.214838][T11460] chnl_net:caif_netlink_parms(): no params data found [ 210.291522][T11460] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.299353][T11460] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.306592][T11460] bridge_slave_0: entered allmulticast mode [ 210.321030][T11460] bridge_slave_0: entered promiscuous mode [ 210.330069][T11460] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.338359][T11460] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.345606][T11460] bridge_slave_1: entered allmulticast mode [ 210.353818][T11460] bridge_slave_1: entered promiscuous mode [ 210.400925][T11460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.418566][T11460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.463331][T11460] team0: Port device team_slave_0 added [ 210.472948][T11460] team0: Port device team_slave_1 added [ 210.529585][T11460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.545820][T11460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.574905][T11460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.599869][T11501] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 210.605383][T11460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.631750][T11460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.669606][T11460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.781128][T11460] hsr_slave_0: entered promiscuous mode [ 210.803891][T11460] hsr_slave_1: entered promiscuous mode [ 210.862569][T11460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.878081][T11460] Cannot create hsr debugfs directory [ 211.066491][T11522] netlink: 'syz.1.2277': attribute type 1 has an invalid length. [ 211.107112][T11522] netlink: 'syz.1.2277': attribute type 2 has an invalid length. [ 211.237862][ T5115] Bluetooth: hci0: command tx timeout [ 211.379088][T11531] tap0: tun_chr_ioctl cmd 1074025675 [ 211.384514][T11531] tap0: persist enabled [ 211.429562][T11531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.482967][T11531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.542629][T11460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 211.554106][T11460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 211.587637][T11460] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.626758][T11531] tap0: tun_chr_ioctl cmd 1074025675 [ 211.647414][T11531] tap0: persist disabled [ 211.710246][T11460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 211.721741][T11460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 211.732248][T11460] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.856729][T11460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 211.887049][T11460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 211.907759][T11460] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.038930][ T5115] Bluetooth: hci1: command 0x041b tx timeout [ 212.067496][T11460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 212.095757][T11460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 212.108273][T11460] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.231622][T11576] netlink: 'syz.1.2295': attribute type 1 has an invalid length. [ 212.277176][T11576] netlink: 'syz.1.2295': attribute type 8 has an invalid length. [ 212.387930][T11586] trusted_key: syz.3.2300 sent an empty control message without MSG_MORE. [ 212.451064][T11460] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.479566][T11460] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.504610][T11460] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.529838][T11460] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.720267][T11460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.761581][T11460] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.798474][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.805651][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.841198][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.848380][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.864459][T11568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.894303][T11607] netlink: 'syz.2.2308': attribute type 10 has an invalid length. [ 212.904095][T11607] batman_adv: batadv1: Removing interface: netdevsim0 [ 212.913941][T11607] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 212.937537][T11607] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 212.957303][T11607] team0: Port device netdevsim0 added [ 213.110409][T11615] tap0: tun_chr_ioctl cmd 1074025675 [ 213.116253][T11615] tap0: persist enabled [ 213.126875][T11615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.141784][T11615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.153561][T11615] tap0: tun_chr_ioctl cmd 1074025675 [ 213.159759][T11615] tap0: persist disabled [ 213.243081][T11460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.305822][T11460] veth0_vlan: entered promiscuous mode [ 213.317729][ T5111] Bluetooth: hci0: command tx timeout [ 213.325954][T11460] veth1_vlan: entered promiscuous mode [ 213.364299][T11460] veth0_macvtap: entered promiscuous mode [ 213.375047][T11460] veth1_macvtap: entered promiscuous mode [ 213.396364][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.408572][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.419099][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.435031][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.445774][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.459136][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.473780][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.506037][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.523810][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.543546][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.544720][T11623] FAULT_INJECTION: forcing a failure. [ 213.544720][T11623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.554251][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.567359][T11623] CPU: 0 PID: 11623 Comm: syz.1.2313 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 213.587540][T11623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 213.596964][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.597703][T11623] Call Trace: [ 213.597716][T11623] <TASK> [ 213.607588][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.610744][T11623] dump_stack_lvl+0x241/0x360 [ 213.610776][T11623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.613731][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.624064][T11623] ? __pfx__printk+0x10/0x10 [ 213.624089][T11623] ? __pfx_lock_release+0x10/0x10 [ 213.624113][T11623] should_fail_ex+0x3b0/0x4e0 [ 213.624140][T11623] _copy_from_user+0x2f/0xe0 [ 213.624161][T11623] copy_msghdr_from_user+0xae/0x680 [ 213.624182][T11623] ? __pfx___might_resched+0x10/0x10 [ 213.624208][T11623] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 213.624237][T11623] ? __might_fault+0xaa/0x120 [ 213.624261][T11623] do_recvmmsg+0x40f/0xae0 [ 213.624292][T11623] ? __pfx_lock_release+0x10/0x10 [ 213.624315][T11623] ? __pfx_do_recvmmsg+0x10/0x10 [ 213.624365][T11623] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 213.624388][T11623] ? ksys_write+0x23e/0x2c0 [ 213.624411][T11623] ? __pfx_lock_release+0x10/0x10 [ 213.624436][T11623] ? vfs_write+0x7c4/0xc90 [ 213.624463][T11623] ? __mutex_unlock_slowpath+0x21d/0x750 [ 213.624498][T11623] ? __fget_files+0x3f6/0x470 [ 213.624537][T11623] __x64_sys_recvmmsg+0x199/0x250 [ 213.624566][T11623] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 213.624592][T11623] ? do_syscall_64+0x100/0x230 [ 213.624615][T11623] ? do_syscall_64+0xb6/0x230 [ 213.624637][T11623] do_syscall_64+0xf3/0x230 [ 213.624656][T11623] ? clear_bhb_loop+0x35/0x90 [ 213.624681][T11623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.624700][T11623] RIP: 0033:0x7fada7b75bd9 [ 213.624717][T11623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.624733][T11623] RSP: 002b:00007fada88d2048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 213.624752][T11623] RAX: ffffffffffffffda RBX: 00007fada7d03f60 RCX: 00007fada7b75bd9 [ 213.624767][T11623] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000005 [ 213.624780][T11623] RBP: 00007fada88d20a0 R08: 0000000000000000 R09: 0000000000000000 [ 213.624793][T11623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.624805][T11623] R13: 000000000000004d R14: 00007fada7d03f60 R15: 00007ffe12b279b8 [ 213.624835][T11623] </TASK> [ 213.852073][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.868810][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.879144][T11627] __nla_validate_parse: 10 callbacks suppressed [ 213.879161][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2314'. [ 213.885018][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.924282][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.936428][T11460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.007411][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.018860][T11631] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2316'. [ 214.040034][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.052226][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.063111][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.077126][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.091135][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.105753][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.118264][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.130107][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.140569][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.150576][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.161683][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.171708][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.185613][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.197953][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.209615][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.220266][T11460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.230991][T11460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.243697][T11460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.269995][T11460] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.279772][T11460] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.298849][T11460] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.323978][T11460] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.353794][T11634] lo: entered allmulticast mode [ 214.359891][T11634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.485283][T11638] netlink: 'syz.4.2319': attribute type 10 has an invalid length. [ 214.558543][T11650] batadv_slave_1: entered promiscuous mode [ 214.586895][T11649] batadv_slave_1: left promiscuous mode [ 214.665453][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.676871][T11656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 214.687426][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.779736][T11656] netlink: 'syz.3.2324': attribute type 1 has an invalid length. [ 214.788377][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.796222][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.805602][T11656] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2324'. [ 214.854418][T11656] netlink: 'syz.3.2324': attribute type 8 has an invalid length. [ 214.865723][T11665] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2329'. [ 214.870630][T11666] FAULT_INJECTION: forcing a failure. [ 214.870630][T11666] name failslab, interval 1, probability 0, space 0, times 0 [ 214.911635][T11666] CPU: 1 PID: 11666 Comm: syz.4.2328 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 214.921835][T11666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 214.931915][T11666] Call Trace: [ 214.935212][T11666] <TASK> [ 214.938160][T11666] dump_stack_lvl+0x241/0x360 [ 214.942863][T11666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.948084][T11666] ? __pfx__printk+0x10/0x10 [ 214.952699][T11666] ? netlink_insert+0x10b7/0x14b0 [ 214.957744][T11666] should_fail_ex+0x3b0/0x4e0 [ 214.962445][T11666] ? __alloc_skb+0x1c3/0x440 [ 214.967057][T11666] should_failslab+0x9/0x20 [ 214.971583][T11666] kmem_cache_alloc_node_noprof+0x71/0x320 [ 214.977416][T11666] __alloc_skb+0x1c3/0x440 [ 214.981860][T11666] ? __pfx___alloc_skb+0x10/0x10 [ 214.986821][T11666] ? netlink_autobind+0xd6/0x2f0 [ 214.991948][T11666] ? netlink_autobind+0x2b0/0x2f0 [ 214.997003][T11666] netlink_sendmsg+0x638/0xcb0 [ 215.001791][T11666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.007085][T11666] ? __import_iovec+0x536/0x820 [ 215.011939][T11666] ? aa_sock_msg_perm+0x91/0x160 [ 215.016879][T11666] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.022163][T11666] ? security_socket_sendmsg+0x87/0xb0 [ 215.027629][T11666] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.032908][T11666] __sock_sendmsg+0x221/0x270 [ 215.037584][T11666] ____sys_sendmsg+0x525/0x7d0 [ 215.042347][T11666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.047637][T11666] __sys_sendmsg+0x2b0/0x3a0 [ 215.052226][T11666] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.057333][T11666] ? vfs_write+0x7c4/0xc90 [ 215.061770][T11666] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.068091][T11666] ? do_syscall_64+0x100/0x230 [ 215.072846][T11666] ? do_syscall_64+0xb6/0x230 [ 215.077521][T11666] do_syscall_64+0xf3/0x230 [ 215.082036][T11666] ? clear_bhb_loop+0x35/0x90 [ 215.086709][T11666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.092601][T11666] RIP: 0033:0x7f54f5975bd9 [ 215.097030][T11666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.116726][T11666] RSP: 002b:00007f54f674d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.125137][T11666] RAX: ffffffffffffffda RBX: 00007f54f5b03f60 RCX: 00007f54f5975bd9 [ 215.133122][T11666] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 215.141088][T11666] RBP: 00007f54f674d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.149053][T11666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.157022][T11666] R13: 000000000000000b R14: 00007f54f5b03f60 R15: 00007ffda142a608 [ 215.165006][T11666] </TASK> [ 215.214246][T11674] openvswitch: netlink: Unknown nsh attribute 0 [ 215.412218][T11681] vlan5: entered promiscuous mode [ 215.418006][T11681] ip6gretap0: entered promiscuous mode [ 215.430521][T11681] ip6gretap0: left promiscuous mode [ 215.436279][T11652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.823327][T11701] netlink: 'syz.1.2343': attribute type 1 has an invalid length. [ 215.840734][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2343'. [ 215.865935][T11705] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2342'. [ 215.904584][T11705] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2342'. [ 215.929056][T11705] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.2342'. [ 215.961031][T11710] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2346'. [ 216.139485][T11713] xt_CT: No such helper "syz1" [ 216.331433][T11727] tipc: Enabling of bearer <udp:> rejected, failed to enable media [ 216.505129][T11739] veth2: entered allmulticast mode [ 216.529038][T11738] netlink: 'syz.3.2357': attribute type 1 has an invalid length. [ 216.537100][T11738] netlink: 'syz.3.2357': attribute type 8 has an invalid length. [ 216.884653][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 216.894625][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 216.908650][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 216.925512][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 216.934651][ T5115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 216.942872][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.158336][T11744] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 217.168046][T11744] batman_adv: batadv1: Removing interface: netdevsim0 [ 217.191039][T11744] batman_adv: batadv2: Adding interface: netdevsim0 [ 217.197867][T11744] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.223872][T11744] batman_adv: batadv2: Interface activated: netdevsim0 [ 217.242185][T11741] lo speed is unknown, defaulting to 1000 [ 217.278526][T11735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.752618][ T6657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.952651][T11741] chnl_net:caif_netlink_parms(): no params data found [ 218.055339][T11773] netlink: 'syz.3.2365': attribute type 3 has an invalid length. [ 218.077229][T11773] netlink: 'syz.3.2365': attribute type 3 has an invalid length. [ 218.242882][ T5111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.259572][ T5111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.259668][T11741] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.307793][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.320372][ T5111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.328361][T11741] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.335514][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.343906][T11741] bridge_slave_0: entered allmulticast mode [ 218.350230][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.363568][T11741] bridge_slave_0: entered promiscuous mode [ 218.375244][T11741] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.382715][T11741] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.390049][T11741] bridge_slave_1: entered allmulticast mode [ 218.399512][T11741] bridge_slave_1: entered promiscuous mode [ 218.511147][T11741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.542810][T11741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.695187][T11741] team0: Port device team_slave_0 added [ 218.711805][T11741] team0: Port device team_slave_1 added [ 218.763892][T11741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.771692][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.799884][T11741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.830963][T11741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.839509][T11741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.867513][T11741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.883774][T11808] netlink: 'syz.3.2374': attribute type 1 has an invalid length. [ 218.895772][T11808] __nla_validate_parse: 71 callbacks suppressed [ 218.895792][T11808] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2374'. [ 218.924613][T11808] netlink: 'syz.3.2374': attribute type 8 has an invalid length. [ 219.003427][ T5115] Bluetooth: hci0: command tx timeout [ 219.036324][T11741] hsr_slave_0: entered promiscuous mode [ 219.058575][T11741] hsr_slave_1: entered promiscuous mode [ 219.083116][T11741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.113863][T11741] Cannot create hsr debugfs directory [ 219.141578][T11781] lo speed is unknown, defaulting to 1000 [ 219.354014][T11823] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2381'. [ 219.504433][ T6657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.565820][T11802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.620889][ T6657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.753722][ T6657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.799672][T11838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'. [ 219.888268][T11741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.897672][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 219.911445][T11741] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.965529][T11835] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.975139][T11835] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.984609][T11835] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.993419][T11835] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 220.105417][T11741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.131988][T11741] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.299289][T11741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.327231][T11741] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.437693][ T4492] Bluetooth: hci2: command tx timeout [ 220.467738][T11866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2397'. [ 220.500088][T11741] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 220.509493][T11741] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 220.552387][T11741] team0: Port device netdevsim0 removed [ 220.583781][T11741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 220.605142][T11874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2401'. [ 220.607144][T11741] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.881152][ T6657] bridge_slave_1: left allmulticast mode [ 220.886891][ T6657] bridge_slave_1: left promiscuous mode [ 220.914799][ T6657] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.950416][T11888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2404'. [ 220.951249][ T6657] bridge_slave_0: left allmulticast mode [ 220.966730][ T6657] bridge_slave_0: left promiscuous mode [ 220.973584][ T6657] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.991756][T11888] netlink: 'syz.1.2404': attribute type 1 has an invalid length. [ 221.012944][T11888] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2404'. [ 221.023386][T11888] netlink: 'syz.1.2404': attribute type 8 has an invalid length. [ 221.085662][ T4492] Bluetooth: hci0: command tx timeout [ 221.488285][ T6657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.505502][ T6657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.528851][ T6657] bond0 (unregistering): Released all slaves [ 221.542337][T11891] netlink: 'syz.3.2405': attribute type 4 has an invalid length. [ 221.553396][T11898] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 221.615294][T11781] chnl_net:caif_netlink_parms(): no params data found [ 221.653370][T11883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.700927][T11901] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2407'. [ 221.904690][T11908] bond0: entered promiscuous mode [ 221.910300][T11908] bond_slave_0: entered promiscuous mode [ 221.916247][T11908] bond_slave_1: entered promiscuous mode [ 221.926169][T11741] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.926660][T11905] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2409'. [ 222.041169][T11910] bond0: (slave bond_slave_0): Releasing backup interface [ 222.059756][T11910] bond_slave_0: left promiscuous mode [ 222.075853][T11741] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.116243][T11906] bond0: left promiscuous mode [ 222.127854][T11906] bond_slave_1: left promiscuous mode [ 222.138186][T11741] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 222.184482][T11741] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 222.230595][T11781] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.246703][T11781] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.267482][T11781] bridge_slave_0: entered allmulticast mode [ 222.278790][ T4492] Bluetooth: hci4: command 0x0406 tx timeout [ 222.278884][ T5102] Bluetooth: hci5: command 0x0406 tx timeout [ 222.308997][T11781] bridge_slave_0: entered promiscuous mode [ 222.349463][T11781] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.356723][T11781] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.374753][T11781] bridge_slave_1: entered allmulticast mode [ 222.413900][T11781] bridge_slave_1: entered promiscuous mode [ 222.523740][ T5111] Bluetooth: hci2: command tx timeout [ 222.709315][T11781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.737108][T11944] xt_bpf: check failed: parse error [ 222.857816][T11781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.899983][ T6657] hsr_slave_0: left promiscuous mode [ 222.919538][ T6657] hsr_slave_1: left promiscuous mode [ 222.940479][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.948420][T11949] netlink: 'syz.3.2422': attribute type 1 has an invalid length. [ 222.948448][T11949] netlink: 'syz.3.2422': attribute type 8 has an invalid length. [ 222.986035][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.017596][ T6657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.025061][ T6657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.085779][ T6657] veth1_macvtap: left promiscuous mode [ 223.092013][ T6657] veth0_macvtap: left promiscuous mode [ 223.098785][ T6657] veth1_vlan: left promiscuous mode [ 223.104354][ T6657] veth0_vlan: left promiscuous mode [ 223.157012][ T5111] Bluetooth: hci0: command tx timeout [ 223.692780][T11947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.867314][ T6657] team0 (unregistering): Port device team_slave_1 removed [ 223.910037][ T6657] team0 (unregistering): Port device team_slave_0 removed [ 224.406734][T11957] netlink: 'syz.4.2425': attribute type 4 has an invalid length. [ 224.438752][T11957] infiniband syz0: set down [ 224.451888][T11958] netlink: 'syz.4.2425': attribute type 4 has an invalid length. [ 224.463721][T11958] infiniband syz0: set active [ 224.469139][T11969] netlink: 'syz.3.2428': attribute type 1 has an invalid length. [ 224.481500][T11969] __nla_validate_parse: 8 callbacks suppressed [ 224.481519][T11969] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2428'. [ 224.565711][T11781] team0: Port device team_slave_0 added [ 224.598066][ T6543] lo speed is unknown, defaulting to 1000 [ 224.600665][ T5111] Bluetooth: hci2: command tx timeout [ 224.648321][T11781] team0: Port device team_slave_1 added [ 224.660201][ T6539] lo speed is unknown, defaulting to 1000 [ 224.670066][T11976] tap0: tun_chr_ioctl cmd 1074025675 [ 224.675396][T11976] tap0: persist enabled [ 224.684598][T11976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.708982][T11976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.726536][T11978] FAULT_INJECTION: forcing a failure. [ 224.726536][T11978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.742231][T11978] CPU: 0 PID: 11978 Comm: syz.1.2432 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 224.752432][T11978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 224.762565][T11978] Call Trace: [ 224.765895][T11978] <TASK> [ 224.768843][T11978] dump_stack_lvl+0x241/0x360 [ 224.773554][T11978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.775932][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2433'. [ 224.778757][T11978] ? __pfx__printk+0x10/0x10 [ 224.778818][T11978] ? snprintf+0xda/0x120 [ 224.796511][T11978] should_fail_ex+0x3b0/0x4e0 [ 224.801231][T11978] _copy_to_user+0x2f/0xb0 [ 224.805670][T11978] simple_read_from_buffer+0xca/0x150 [ 224.811062][T11978] proc_fail_nth_read+0x1e9/0x250 [ 224.816096][T11978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.821667][T11978] ? rw_verify_area+0x514/0x6b0 [ 224.826544][T11978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.832126][T11978] vfs_read+0x204/0xbd0 [ 224.836316][T11978] ? __pfx_lock_release+0x10/0x10 [ 224.841376][T11978] ? __pfx_vfs_read+0x10/0x10 [ 224.846083][T11978] ? __fget_files+0x29/0x470 [ 224.850703][T11978] ? __fget_files+0x3f6/0x470 [ 224.855422][T11978] ksys_read+0x1a0/0x2c0 [ 224.859705][T11978] ? __pfx_ksys_read+0x10/0x10 [ 224.864493][T11978] ? do_syscall_64+0x100/0x230 [ 224.869290][T11978] ? do_syscall_64+0xb6/0x230 [ 224.873995][T11978] do_syscall_64+0xf3/0x230 [ 224.878522][T11978] ? clear_bhb_loop+0x35/0x90 [ 224.883232][T11978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.889168][T11978] RIP: 0033:0x7fada7b746bc [ 224.893609][T11978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 224.913327][T11978] RSP: 002b:00007fada88d2040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.921771][T11978] RAX: ffffffffffffffda RBX: 00007fada7d03f60 RCX: 00007fada7b746bc [ 224.929775][T11978] RDX: 000000000000000f RSI: 00007fada88d20b0 RDI: 0000000000000003 [ 224.937770][T11978] RBP: 00007fada88d20a0 R08: 0000000000000000 R09: 0000000000000000 [ 224.945764][T11978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.953764][T11978] R13: 000000000000004d R14: 00007fada7d03f60 R15: 00007ffe12b279b8 [ 224.961778][T11978] </TASK> [ 224.998433][ T6543] lo speed is unknown, defaulting to 1000 [ 225.006285][T11976] tap0: tun_chr_ioctl cmd 1074025675 [ 225.020352][T11976] tap0: persist disabled [ 225.041592][T11781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.051100][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.081474][T11781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.124234][T11781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.133480][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2437'. [ 225.143067][T11781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.168288][T11991] netlink: 'syz.1.2437': attribute type 1 has an invalid length. [ 225.173659][T11781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.221606][T11991] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2437'. [ 225.242132][T11991] netlink: 'syz.1.2437': attribute type 8 has an invalid length. [ 225.252131][ T5111] Bluetooth: hci0: command tx timeout [ 225.335612][T11781] hsr_slave_0: entered promiscuous mode [ 225.346872][T11781] hsr_slave_1: entered promiscuous mode [ 225.358845][T11781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.368552][T11781] Cannot create hsr debugfs directory [ 225.459508][T11741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.534231][T11741] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.569329][T11998] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2440'. [ 225.596420][ T5150] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.603629][ T5150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.628788][ T5150] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.635957][ T5150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.749788][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2441'. [ 225.882838][T11988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.884099][T11741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.970721][T12008] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 226.099025][T12013] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2446'. [ 226.303228][T11741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.310618][T12020] netlink: 'syz.3.2448': attribute type 10 has an invalid length. [ 226.319031][T12020] batman_adv: batadv1: Removing interface: netdevsim0 [ 226.331595][T12020] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 226.341907][T12020] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 226.352114][T12020] team0: Port device netdevsim0 added [ 226.522758][T11781] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.561740][T11781] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.583368][T11781] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.602453][T11741] veth0_vlan: entered promiscuous mode [ 226.619849][T11781] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.649661][T12032] tap0: tun_chr_ioctl cmd 1074025675 [ 226.655001][T12032] tap0: persist enabled [ 226.675694][T12032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.676625][T11741] veth1_vlan: entered promiscuous mode [ 226.687784][ T5111] Bluetooth: hci2: command tx timeout [ 226.704794][T12032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.728445][T12032] tap0: tun_chr_ioctl cmd 1074025675 [ 226.737292][T12032] tap0: persist disabled [ 226.829937][T12039] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 226.909880][T11741] veth0_macvtap: entered promiscuous mode [ 226.952241][T11741] veth1_macvtap: entered promiscuous mode [ 227.023724][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 227.056257][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.080314][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.095968][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.100802][T12046] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2457'. [ 227.116803][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.116824][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.116843][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.116854][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.116865][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.116876][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.116889][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.196492][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.208472][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.218903][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.229694][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.241945][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.252746][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.262909][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.274230][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.286667][T11741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.304928][T12046] ��: entered promiscuous mode [ 227.325086][T12050] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2458'. [ 227.360445][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.388351][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.417321][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.447090][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.463882][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.475612][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.496100][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.513352][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.525858][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.547801][T12062] netlink: 'syz.3.2460': attribute type 1 has an invalid length. [ 227.557569][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.567198][T12062] netlink: 'syz.3.2460': attribute type 8 has an invalid length. [ 227.575940][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.592307][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.624972][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.637943][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.648667][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.662412][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.672707][T11741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.683454][T11741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.696044][T11741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.746084][T11781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.789380][T11741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.807118][T11741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.822548][T11741] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.848563][T11741] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.903075][T11781] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.012415][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.019631][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.080307][ T6543] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.087535][ T6543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.213834][ T6657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.231417][ T6657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.268515][T12057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.304842][T12083] ��g�G: entered promiscuous mode [ 228.341817][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.360612][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.389943][T11781] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 228.406968][T11781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.523541][T12087] tap0: tun_chr_ioctl cmd 1074025675 [ 228.532874][T12087] tap0: persist enabled [ 228.551620][T12087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.580477][T12087] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.627925][T12087] tap0: tun_chr_ioctl cmd 1074025675 [ 228.643741][T12087] tap0: persist disabled [ 228.777180][T11781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.888261][T12103] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (65523) [ 228.925028][T11781] veth0_vlan: entered promiscuous mode [ 228.979091][T11781] veth1_vlan: entered promiscuous mode [ 229.078924][T11781] veth0_macvtap: entered promiscuous mode [ 229.099366][T11781] veth1_macvtap: entered promiscuous mode [ 229.141144][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.158917][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.169887][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.180569][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.207056][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.225801][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.247017][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.270863][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.288067][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.309949][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.337409][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.362826][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.380291][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.392778][T12134] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 229.400052][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.414785][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.425469][T12134] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 229.425980][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.444971][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.455745][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.469460][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.481180][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.493709][T11781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.509359][T12131] __nla_validate_parse: 12 callbacks suppressed [ 229.509409][T12131] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2485'. [ 229.512529][T12136] netlink: 'syz.3.2484': attribute type 1 has an invalid length. [ 229.515676][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'. [ 229.515702][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2485'. [ 229.525021][T12136] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2484'. [ 229.580110][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.614747][T12136] netlink: 'syz.3.2484': attribute type 8 has an invalid length. [ 229.622795][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.637813][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.656014][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.677841][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.689825][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.704641][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.715480][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.726293][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.737028][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.747149][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.757746][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.770139][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.781233][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.791208][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.806077][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.816190][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.827805][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.837965][T11781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.848541][T11781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.861139][T11781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.874632][T12143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2489'. [ 229.894868][T11781] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.905334][T11781] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.921193][T11781] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.932134][T11781] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.172585][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.190618][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.200360][T12130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.216102][T12153] tap0: tun_chr_ioctl cmd 1074025675 [ 230.224832][T12153] tap0: persist enabled [ 230.246428][T12153] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2493'. [ 230.260853][T12153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.281287][T12153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.293062][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.301639][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.318493][T12153] tap0: tun_chr_ioctl cmd 1074025675 [ 230.332536][T12153] tap0: persist disabled [ 230.622748][T12165] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 230.630896][T12165] macvlan3: entered promiscuous mode [ 230.636425][T12165] macvlan3: entered allmulticast mode [ 230.644034][T12165] mac80211_hwsim hwsim18 wlan0: entered allmulticast mode [ 230.654959][T12165] mac80211_hwsim hwsim18 wlan0: left allmulticast mode [ 230.663250][T12165] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 230.975628][T12176] netlink: 'syz.3.2502': attribute type 1 has an invalid length. [ 231.030515][T12180] netlink: 'syz.4.2499': attribute type 12 has an invalid length. [ 231.065480][T12180] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2499'. [ 231.098447][T12181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2503'. [ 231.115549][T12181] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 231.140045][T12176] bond2: (slave vcan2): The slave device specified does not support setting the MAC address [ 231.165824][T12176] bond2: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 231.206571][T12176] bond2: (slave vcan2): making interface the new active one [ 231.223746][T12176] bond2: (slave vcan2): Enslaving as an active interface with an up link [ 231.246037][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2505'. [ 231.268060][T12189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2505'. [ 231.583378][T12204] netlink: 'syz.2.2510': attribute type 1 has an invalid length. [ 231.591874][T12204] netlink: 'syz.2.2510': attribute type 8 has an invalid length. [ 231.672329][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.980487][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.990869][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.000583][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.009516][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.020723][ T5115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.030574][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.090717][T12216] tap0: tun_chr_ioctl cmd 1074025675 [ 232.096063][T12216] tap0: persist enabled [ 232.105210][T12216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.121932][T12216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.133306][T12216] tap0: tun_chr_ioctl cmd 1074025675 [ 232.138922][T12216] tap0: persist disabled [ 232.283872][T12211] lo speed is unknown, defaulting to 1000 [ 232.341130][T12200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.471541][T12223] netlink: 'syz.1.2518': attribute type 2 has an invalid length. [ 232.646553][T12228] netlink: 'syz.3.2520': attribute type 10 has an invalid length. [ 232.688817][T12228] team0: left allmulticast mode [ 232.697064][T12228] team_slave_0: left allmulticast mode [ 232.706842][T12228] team_slave_1: left allmulticast mode [ 232.733466][T12228] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 232.745087][T12228] team0: left promiscuous mode [ 232.754069][T12228] team_slave_0: left promiscuous mode [ 232.763348][T12228] team_slave_1: left promiscuous mode [ 232.769210][T12228] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 232.830413][T12228] batman_adv: batadv0: Adding interface: team0 [ 232.863171][T12228] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.908893][T12228] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 232.958868][T12231] netlink: 'syz.3.2520': attribute type 10 has an invalid length. [ 233.007785][T12231] team0: entered promiscuous mode [ 233.015290][T12231] team_slave_0: entered promiscuous mode [ 233.021412][T12231] team_slave_1: entered promiscuous mode [ 233.027890][T12231] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 233.038205][T12231] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.051019][T12231] team0: entered allmulticast mode [ 233.056179][T12231] team_slave_0: entered allmulticast mode [ 233.062096][T12231] team_slave_1: entered allmulticast mode [ 233.073260][T12231] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 233.086242][T12231] batman_adv: batadv0: Interface activated: team0 [ 233.093290][T12231] batman_adv: batadv0: Interface deactivated: team0 [ 233.100680][T12231] batman_adv: batadv0: Removing interface: team0 [ 233.109890][T12231] bridge0: port 2(team0) entered blocking state [ 233.116630][T12231] bridge0: port 2(team0) entered disabled state [ 233.126147][T12231] bridge0: port 2(team0) entered blocking state [ 233.132593][T12231] bridge0: port 2(team0) entered forwarding state [ 233.199657][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.218160][T12245] netlink: 'syz.4.2522': attribute type 12 has an invalid length. [ 233.276660][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.415900][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.580856][T12265] tap0: tun_chr_ioctl cmd 1074025675 [ 233.594616][T12265] tap0: persist enabled [ 233.619119][T12265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.631717][T12265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.674487][T12265] tap0: tun_chr_ioctl cmd 1074025675 [ 233.689052][T12265] tap0: persist disabled [ 233.708051][T12211] chnl_net:caif_netlink_parms(): no params data found [ 233.883523][ T11] bridge_slave_1: left allmulticast mode [ 233.891357][ T11] bridge_slave_1: left promiscuous mode [ 233.908169][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.930039][ T11] bridge_slave_0: left allmulticast mode [ 233.935730][ T11] bridge_slave_0: left promiscuous mode [ 233.950955][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.122676][ T5111] Bluetooth: hci2: command tx timeout [ 234.707681][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.732118][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.744538][ T11] bond0 (unregistering): Released all slaves [ 234.828352][T12296] __nla_validate_parse: 15 callbacks suppressed [ 234.828373][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2541'. [ 234.846645][T12211] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.855442][T12211] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.865425][T12211] bridge_slave_0: entered allmulticast mode [ 234.874176][T12211] bridge_slave_0: entered promiscuous mode [ 234.947797][T12211] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.954967][T12211] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.989011][T12211] bridge_slave_1: entered allmulticast mode [ 234.996376][T12211] bridge_slave_1: entered promiscuous mode [ 235.013540][T12280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.210097][T12211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.292269][T12211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.348251][T12312] tap0: tun_chr_ioctl cmd 1074025675 [ 235.353884][T12312] tap0: persist enabled [ 235.379158][T12312] validate_nla: 4 callbacks suppressed [ 235.379176][T12312] netlink: 'syz.1.2549': attribute type 72 has an invalid length. [ 235.401674][T12312] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2549'. [ 235.447291][T12313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.489312][T12211] team0: Port device team_slave_0 added [ 235.518399][T12315] tap0: tun_chr_ioctl cmd 1074025675 [ 235.530610][T12315] tap0: persist disabled [ 235.553930][T12211] team0: Port device team_slave_1 added [ 235.661850][T12319] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 235.758835][T12321] tap0: tun_chr_ioctl cmd 1074025675 [ 235.774003][T12321] tap0: persist enabled [ 235.805625][T12323] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2552'. [ 235.876151][T12317] netlink: 'syz.4.2550': attribute type 72 has an invalid length. [ 235.896299][T12317] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2550'. [ 235.913617][T12325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'. [ 235.940608][T12320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.974979][T12320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.985358][ T11] hsr_slave_0: left promiscuous mode [ 236.016034][ T11] hsr_slave_1: left promiscuous mode [ 236.027534][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.035004][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.061009][T12329] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2556'. [ 236.061622][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.076464][T12329] netlink: 'syz.3.2556': attribute type 1 has an invalid length. [ 236.088568][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.111389][ T11] veth1_macvtap: left promiscuous mode [ 236.119243][ T11] veth0_macvtap: left promiscuous mode [ 236.124978][ T11] veth1_vlan: left promiscuous mode [ 236.133222][ T11] veth0_vlan: left promiscuous mode [ 236.198239][ T5111] Bluetooth: hci2: command tx timeout [ 236.785624][ T11] team0 (unregistering): Port device team_slave_1 removed [ 236.840547][ T11] team0 (unregistering): Port device team_slave_0 removed [ 237.325459][T12211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.332840][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.361257][T12211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.375417][T12211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.382514][T12211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.409072][T12211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.422366][T12320] tap0: tun_chr_ioctl cmd 1074025675 [ 237.428038][T12320] tap0: persist disabled [ 237.437195][T12329] netlink: 'syz.3.2556': attribute type 21 has an invalid length. [ 237.454426][T12329] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2556'. [ 237.464485][T12329] netlink: 'syz.3.2556': attribute type 4 has an invalid length. [ 237.472851][T12329] netlink: 'syz.3.2556': attribute type 5 has an invalid length. [ 237.482369][T12329] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2556'. [ 237.492510][T12335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2557'. [ 237.575344][T12337] netlink: 'syz.2.2558': attribute type 6 has an invalid length. [ 237.637325][T12341] netlink: 'syz.1.2560': attribute type 11 has an invalid length. [ 237.681288][T12341] netlink: 'syz.1.2560': attribute type 11 has an invalid length. [ 237.688452][T12211] hsr_slave_0: entered promiscuous mode [ 237.737867][T12211] hsr_slave_1: entered promiscuous mode [ 237.764112][T12211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.784300][T12211] Cannot create hsr debugfs directory [ 237.825571][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2562'. [ 237.873692][T12350] netlink: 'syz.3.2562': attribute type 1 has an invalid length. [ 237.881948][T12350] netlink: 'syz.3.2562': attribute type 8 has an invalid length. [ 238.130767][T12356] tap0: tun_chr_ioctl cmd 1074025675 [ 238.136333][T12356] tap0: persist enabled [ 238.150505][T12356] netlink: 'syz.2.2567': attribute type 72 has an invalid length. [ 238.180647][T12356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.221831][T12356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.280140][T12356] tap0: tun_chr_ioctl cmd 1074025675 [ 238.285524][T12356] tap0: persist disabled [ 238.287551][ T5111] Bluetooth: hci2: command tx timeout [ 238.325494][T12365] bridge_slave_1: left allmulticast mode [ 238.331647][T12365] bridge_slave_1: left promiscuous mode [ 238.337728][T12365] bridge4: port 1(bridge_slave_1) entered disabled state [ 238.352398][T12365] bridge5: port 1(bridge_slave_1) entered blocking state [ 238.360555][T12365] bridge5: port 1(bridge_slave_1) entered disabled state [ 238.371192][T12365] bridge_slave_1: entered allmulticast mode [ 238.380760][T12365] bridge_slave_1: entered promiscuous mode [ 238.388615][T12365] bridge5: port 1(bridge_slave_1) entered blocking state [ 238.395706][T12365] bridge5: port 1(bridge_slave_1) entered forwarding state [ 238.418731][T12366] veth1_to_bond: left allmulticast mode [ 238.424461][T12366] veth1_to_bond: left promiscuous mode [ 238.430527][T12366] bridge4: port 2(veth1_to_bond) entered disabled state [ 238.442182][T12366] bridge5: port 2(veth1_to_bond) entered blocking state [ 238.449930][T12366] bridge5: port 2(veth1_to_bond) entered disabled state [ 238.457231][T12366] veth1_to_bond: entered allmulticast mode [ 238.464685][T12366] veth1_to_bond: entered promiscuous mode [ 238.477910][T12366] bridge5: port 2(veth1_to_bond) entered blocking state [ 238.485005][T12366] bridge5: port 2(veth1_to_bond) entered forwarding state [ 238.580763][T12346] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.749379][T12211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 238.771553][T12211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 238.860427][T12211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 238.875584][T12211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.070919][T12211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.119591][T12211] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.146332][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.153561][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.174373][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.181591][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.512794][T12401] tap0: tun_chr_ioctl cmd 1074025675 [ 239.527567][T12401] tap0: persist enabled [ 239.547524][T12401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.587897][T12401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.588055][T12211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.619198][T12401] tap0: tun_chr_ioctl cmd 1074025675 [ 239.624958][T12401] tap0: persist disabled [ 239.729815][T12211] veth0_vlan: entered promiscuous mode [ 239.760139][T12211] veth1_vlan: entered promiscuous mode [ 239.829707][T12211] veth0_macvtap: entered promiscuous mode [ 239.848557][T12416] __nla_validate_parse: 9 callbacks suppressed [ 239.848575][T12416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2588'. [ 239.886040][T12211] veth1_macvtap: entered promiscuous mode [ 239.919298][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2588'. [ 239.939831][T12416] 8021q: adding VLAN 0 to HW filter on device team1 [ 239.958164][T12421] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 239.979742][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 239.992562][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.009537][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.024824][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.034969][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.050470][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.066180][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.080300][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.091084][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.103399][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.115010][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.131357][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.141869][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.153521][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.182809][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.193787][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.224337][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.255354][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.276072][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.303953][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.319096][T12211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.358216][ T5111] Bluetooth: hci2: command tx timeout [ 240.409875][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.468312][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.488531][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.518554][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.536540][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.557585][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.577836][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.598492][T12447] netlink: 'syz.2.2595': attribute type 72 has an invalid length. [ 240.606495][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.616672][T12447] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2595'. [ 240.628041][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.638699][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.648860][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.659412][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.674050][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.679387][T12448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.692610][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.722021][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.724492][T12448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.743749][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.755118][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.766459][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.776564][T12211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.787733][T12211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.799672][T12211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.830447][T12445] tap0: tun_chr_ioctl cmd 1074025675 [ 240.864285][T12445] tap0: persist enabled [ 240.874511][T12446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2597'. [ 240.897651][T12441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2597'. [ 240.939963][T12448] tap0: tun_chr_ioctl cmd 1074025675 [ 240.956851][T12448] tap0: persist disabled [ 240.989347][T12211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.013813][T12211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.022825][T12211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.034145][T12211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.063267][T12454] FAULT_INJECTION: forcing a failure. [ 241.063267][T12454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.084382][T12454] CPU: 0 PID: 12454 Comm: syz.4.2600 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 241.094581][T12454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 241.104657][T12454] Call Trace: [ 241.107950][T12454] <TASK> [ 241.110897][T12454] dump_stack_lvl+0x241/0x360 [ 241.115605][T12454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.120826][T12454] ? __pfx__printk+0x10/0x10 [ 241.125438][T12454] ? __pfx_lock_release+0x10/0x10 [ 241.130478][T12454] should_fail_ex+0x3b0/0x4e0 [ 241.135157][T12454] _copy_from_user+0x2f/0xe0 [ 241.139757][T12454] copy_msghdr_from_user+0xae/0x680 [ 241.144978][T12454] ? __pfx___might_resched+0x10/0x10 [ 241.150280][T12454] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 241.156100][T12454] ? __might_fault+0xaa/0x120 [ 241.160782][T12454] do_recvmmsg+0x40f/0xae0 [ 241.165193][T12454] ? __pfx_lock_release+0x10/0x10 [ 241.170219][T12454] ? __pfx_do_recvmmsg+0x10/0x10 [ 241.175153][T12454] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 241.181036][T12454] ? ksys_write+0x23e/0x2c0 [ 241.185539][T12454] ? __pfx_lock_release+0x10/0x10 [ 241.190586][T12454] ? vfs_write+0x7c4/0xc90 [ 241.195027][T12454] ? __mutex_unlock_slowpath+0x21d/0x750 [ 241.200693][T12454] ? __fget_files+0x3f6/0x470 [ 241.205749][T12454] __x64_sys_recvmmsg+0x199/0x250 [ 241.210800][T12454] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 241.216366][T12454] ? do_syscall_64+0x100/0x230 [ 241.221144][T12454] ? do_syscall_64+0xb6/0x230 [ 241.225809][T12454] do_syscall_64+0xf3/0x230 [ 241.230305][T12454] ? clear_bhb_loop+0x35/0x90 [ 241.234979][T12454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.240876][T12454] RIP: 0033:0x7f54f5975bd9 [ 241.245303][T12454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.264927][T12454] RSP: 002b:00007f54f674d048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 241.273422][T12454] RAX: ffffffffffffffda RBX: 00007f54f5b03f60 RCX: 00007f54f5975bd9 [ 241.281394][T12454] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000005 [ 241.289377][T12454] RBP: 00007f54f674d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 241.297366][T12454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 241.305394][T12454] R13: 000000000000000b R14: 00007f54f5b03f60 R15: 00007ffda142a608 [ 241.313492][T12454] </TASK> [ 241.448130][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.476546][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.559053][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.580221][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.845843][T12476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2610'. [ 241.894427][T12478] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 241.895592][T12476] dummy0: entered promiscuous mode [ 241.922605][T12476] macsec1: entered allmulticast mode [ 241.935048][T12476] dummy0: entered allmulticast mode [ 241.944179][T12481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2610'. [ 242.055127][T12481] dummy0 (unregistering): left allmulticast mode [ 242.223056][T12481] syz.2.2610 (12481) used greatest stack depth: 17272 bytes left [ 242.510638][T12508] vlan5: entered promiscuous mode [ 242.522832][T12508] ip6gretap0: entered promiscuous mode [ 242.535404][T12508] ip6gretap0: left promiscuous mode [ 242.582026][T12506] tipc: Invalid UDP bearer configuration [ 242.582078][T12506] tipc: Enabling of bearer <udp:s> rejected, failed to enable media [ 242.681224][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2622'. [ 242.797889][T12522] openvswitch: netlink: Unknown nsh attribute 0 [ 242.926322][T12524] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2627'. [ 243.041165][T12532] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2629'. [ 243.670715][T12558] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 243.746848][T12565] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 243.765143][T12565] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 243.815886][T12565] team0: Port device netdevsim0 removed [ 243.836882][T12565] batman_adv: batadv2: Adding interface: netdevsim0 [ 243.852711][T12565] batman_adv: batadv2: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.917195][T12565] batman_adv: batadv2: Not using interface netdevsim0 (retrying later): interface not active [ 244.073769][T12583] netlink: 'syz.3.2647': attribute type 1 has an invalid length. [ 244.149336][T12585] bridge_slave_1: left allmulticast mode [ 244.155031][T12585] bridge_slave_1: left promiscuous mode [ 244.167529][T12585] bridge1: port 1(bridge_slave_1) entered disabled state [ 244.241235][T12585] bridge3: port 1(bridge_slave_1) entered blocking state [ 244.250632][T12597] netlink: zone id is out of range [ 244.265870][T12585] bridge3: port 1(bridge_slave_1) entered disabled state [ 244.274556][T12597] netlink: zone id is out of range [ 244.283740][T12597] netlink: zone id is out of range [ 244.290222][T12585] bridge_slave_1: entered allmulticast mode [ 244.300510][T12597] netlink: zone id is out of range [ 244.317596][T12597] netlink: zone id is out of range [ 244.317955][T12585] bridge_slave_1: entered promiscuous mode [ 244.366711][T12597] netlink: set zone limit has 4 unknown bytes [ 244.469307][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.152725][T12609] netlink: 'syz.3.2657': attribute type 3 has an invalid length. [ 245.169477][T12609] netlink: 'syz.3.2657': attribute type 3 has an invalid length. [ 245.243498][T12616] __nla_validate_parse: 6 callbacks suppressed [ 245.243518][T12616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2659'. [ 245.261367][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.272108][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.281389][ T5115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.284333][T12616] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 245.290156][ T5115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.313168][ T5115] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 245.321388][ T5115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.480779][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.567238][T12625] xt_TCPMSS: Only works on TCP SYN packets [ 245.601801][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.761264][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.778257][T12613] lo speed is unknown, defaulting to 1000 [ 245.909327][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 245.931251][ T62] bridge_slave_1: left allmulticast mode [ 245.950425][ T62] bridge_slave_1: left promiscuous mode [ 245.964445][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.008329][ T62] bridge_slave_0: left allmulticast mode [ 246.026032][ T62] bridge_slave_0: left promiscuous mode [ 246.042510][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.550147][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.568236][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.581609][ T62] bond0 (unregistering): Released all slaves [ 247.097153][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2674'. [ 247.115150][T12663] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 247.130647][T12655] geneve2: entered promiscuous mode [ 247.135916][T12655] geneve2: entered allmulticast mode [ 247.262178][T12613] chnl_net:caif_netlink_parms(): no params data found [ 247.280383][T12664] netlink: 'syz.2.2676': attribute type 29 has an invalid length. [ 247.300881][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 247.358125][T12664] netlink: 'syz.2.2676': attribute type 29 has an invalid length. [ 247.365988][T12664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2676'. [ 247.417609][ T5115] Bluetooth: hci2: command tx timeout [ 247.419208][T12670] netlink: 'syz.3.2678': attribute type 2 has an invalid length. [ 247.641302][T12670] : entered promiscuous mode [ 247.751429][T12684] FAULT_INJECTION: forcing a failure. [ 247.751429][T12684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.752705][T12684] [ 247.752714][T12684] ====================================================== [ 247.752721][T12684] WARNING: possible circular locking dependency detected [ 247.752728][T12684] 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 Not tainted [ 247.752739][T12684] ------------------------------------------------------ [ 247.752746][T12684] syz.2.2682/12684 is trying to acquire lock: [ 247.752754][T12684] ffffffff8e328100 (console_owner){..-.}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 247.752804][T12684] [ 247.752804][T12684] but task is already holding lock: [ 247.752809][T12684] ffff8880b943e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 247.752851][T12684] [ 247.752851][T12684] which lock already depends on the new lock. [ 247.752851][T12684] [ 247.752857][T12684] [ 247.752857][T12684] the existing dependency chain (in reverse order) is: [ 247.752863][T12684] [ 247.752863][T12684] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 247.752885][T12684] lock_acquire+0x1ed/0x550 [ 247.752901][T12684] _raw_spin_lock_nested+0x31/0x40 [ 247.752921][T12684] raw_spin_rq_lock_nested+0x2a/0x140 [ 247.752942][T12684] task_fork_fair+0x61/0x1e0 [ 247.752962][T12684] sched_cgroup_fork+0x37c/0x410 [ 247.752980][T12684] copy_process+0x2217/0x3dc0 [ 247.752996][T12684] kernel_clone+0x226/0x8f0 [ 247.753012][T12684] user_mode_thread+0x132/0x1a0 [ 247.753029][T12684] rest_init+0x23/0x300 [ 247.753046][T12684] start_kernel+0x47a/0x500 [ 247.753067][T12684] x86_64_start_reservations+0x2a/0x30 [ 247.753082][T12684] x86_64_start_kernel+0x99/0xa0 [ 247.753096][T12684] common_startup_64+0x13e/0x147 [ 247.753112][T12684] [ 247.753112][T12684] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 247.753133][T12684] lock_acquire+0x1ed/0x550 [ 247.753148][T12684] _raw_spin_lock_irqsave+0xd5/0x120 [ 247.753166][T12684] try_to_wake_up+0xb0/0x1470 [ 247.753183][T12684] __wake_up_common_lock+0x130/0x1e0 [ 247.753199][T12684] tty_port_default_wakeup+0xa6/0xf0 [ 247.753221][T12684] serial8250_tx_chars+0x6e2/0x930 [ 247.753240][T12684] serial8250_handle_irq+0x558/0x710 [ 247.753259][T12684] serial8250_default_handle_irq+0xd1/0x1f0 [ 247.753280][T12684] serial8250_interrupt+0xa9/0x1f0 [ 247.753297][T12684] __handle_irq_event_percpu+0x29a/0xa80 [ 247.753316][T12684] handle_irq_event+0x89/0x1f0 [ 247.753334][T12684] handle_edge_irq+0x25f/0xc20 [ 247.753352][T12684] __common_interrupt+0x136/0x230 [ 247.753369][T12684] common_interrupt+0xa5/0xd0 [ 247.753387][T12684] asm_common_interrupt+0x26/0x40 [ 247.753404][T12684] kasan_check_range+0x4c/0x290 [ 247.753424][T12684] filemap_map_pages+0xc0c/0x1e70 [ 247.753440][T12684] handle_pte_fault+0x3b9b/0x7090 [ 247.753457][T12684] handle_mm_fault+0x10df/0x1ba0 [ 247.753478][T12684] exc_page_fault+0x459/0x8c0 [ 247.753502][T12684] asm_exc_page_fault+0x26/0x30 [ 247.753518][T12684] [ 247.753518][T12684] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 247.753540][T12684] lock_acquire+0x1ed/0x550 [ 247.753555][T12684] _raw_spin_lock_irqsave+0xd5/0x120 [ 247.753577][T12684] __wake_up_common_lock+0x25/0x1e0 [ 247.753592][T12684] tty_port_default_wakeup+0xa6/0xf0 [ 247.753613][T12684] serial8250_tx_chars+0x6e2/0x930 [ 247.753631][T12684] serial8250_handle_irq+0x558/0x710 [ 247.753650][T12684] serial8250_default_handle_irq+0xd1/0x1f0 [ 247.753671][T12684] serial8250_interrupt+0xa9/0x1f0 [ 247.753688][T12684] __handle_irq_event_percpu+0x29a/0xa80 [ 247.753707][T12684] handle_irq_event+0x89/0x1f0 [ 247.753725][T12684] handle_edge_irq+0x25f/0xc20 [ 247.753743][T12684] __common_interrupt+0x136/0x230 [ 247.753760][T12684] common_interrupt+0xa5/0xd0 [ 247.753778][T12684] asm_common_interrupt+0x26/0x40 [ 247.753794][T12684] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 247.753812][T12684] uart_write+0x15d/0x380 [ 247.753829][T12684] n_tty_write+0xd6a/0x1230 [ 247.753843][T12684] file_tty_write+0x54f/0x9b0 [ 247.753861][T12684] vfs_write+0xa72/0xc90 [ 247.753877][T12684] ksys_write+0x1a0/0x2c0 [ 247.753893][T12684] do_syscall_64+0xf3/0x230 [ 247.753909][T12684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.753926][T12684] [ 247.753926][T12684] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 247.753947][T12684] lock_acquire+0x1ed/0x550 [ 247.753962][T12684] _raw_spin_lock_irqsave+0xd5/0x120 [ 247.753980][T12684] serial8250_console_write+0x1a8/0x1770 [ 247.754000][T12684] console_flush_all+0x867/0xfd0 [ 247.754019][T12684] console_unlock+0x13b/0x4d0 [ 247.754038][T12684] vprintk_emit+0x5a6/0x770 [ 247.754056][T12684] _printk+0xd5/0x120 [ 247.754069][T12684] register_console+0x722/0xce0 [ 247.754089][T12684] univ8250_console_init+0x49/0x50 [ 247.754109][T12684] console_init+0x1b8/0x6f0 [ 247.754129][T12684] start_kernel+0x2d3/0x500 [ 247.754147][T12684] x86_64_start_reservations+0x2a/0x30 [ 247.754163][T12684] x86_64_start_kernel+0x99/0xa0 [ 247.754177][T12684] common_startup_64+0x13e/0x147 [ 247.754193][T12684] [ 247.754193][T12684] -> #0 (console_owner){..-.}-{0:0}: [ 247.754214][T12684] validate_chain+0x18e0/0x5900 [ 247.754232][T12684] __lock_acquire+0x1346/0x1fd0 [ 247.754247][T12684] lock_acquire+0x1ed/0x550 [ 247.754262][T12684] console_flush_all+0x810/0xfd0 [ 247.754281][T12684] console_unlock+0x13b/0x4d0 [ 247.754299][T12684] vprintk_emit+0x5a6/0x770 [ 247.754317][T12684] _printk+0xd5/0x120 [ 247.754330][T12684] should_fail_ex+0x391/0x4e0 [ 247.754350][T12684] strncpy_from_user+0x36/0x2f0 [ 247.754368][T12684] strncpy_from_user_nofault+0x71/0x140 [ 247.754386][T12684] bpf_probe_read_compat_str+0xe9/0x180 [ 247.754403][T12684] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 247.754417][T12684] bpf_trace_run4+0x334/0x590 [ 247.754436][T12684] __traceiter_sched_switch+0x98/0xd0 [ 247.754456][T12684] __schedule+0x2587/0x4a20 [ 247.754473][T12684] schedule+0x14b/0x320 [ 247.754489][T12684] schedule_preempt_disabled+0x13/0x30 [ 247.754508][T12684] __mutex_lock+0x6a4/0xd70 [ 247.754527][T12684] wg_set_device+0x102/0x2160 [ 247.754545][T12684] genl_rcv_msg+0xb14/0xec0 [ 247.754565][T12684] netlink_rcv_skb+0x1e3/0x430 [ 247.754586][T12684] genl_rcv+0x28/0x40 [ 247.754604][T12684] netlink_unicast+0x7f0/0x990 [ 247.754618][T12684] netlink_sendmsg+0x8e4/0xcb0 [ 247.754636][T12684] __sock_sendmsg+0x221/0x270 [ 247.754652][T12684] ____sys_sendmsg+0x525/0x7d0 [ 247.754672][T12684] __sys_sendmsg+0x2b0/0x3a0 [ 247.754691][T12684] do_syscall_64+0xf3/0x230 [ 247.754705][T12684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.754723][T12684] [ 247.754723][T12684] other info that might help us debug this: [ 247.754723][T12684] [ 247.754728][T12684] Chain exists of: [ 247.754728][T12684] console_owner --> &p->pi_lock --> &rq->__lock [ 247.754728][T12684] [ 247.754753][T12684] Possible unsafe locking scenario: [ 247.754753][T12684] [ 247.754758][T12684] CPU0 CPU1 [ 247.754763][T12684] ---- ---- [ 247.754768][T12684] lock(&rq->__lock); [ 247.754779][T12684] lock(&p->pi_lock); [ 247.754790][T12684] lock(&rq->__lock); [ 247.754801][T12684] lock(console_owner); [ 247.754812][T12684] [ 247.754812][T12684] *** DEADLOCK *** [ 247.754812][T12684] [ 247.754816][T12684] 7 locks held by syz.2.2682/12684: [ 247.754826][T12684] #0: ffffffff8f6516b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 247.754868][T12684] #1: ffffffff8f651568 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x121/0xec0 [ 247.754910][T12684] #2: ffffffff8f5e8208 (rtnl_mutex){+.+.}-{3:3}, at: wg_set_device+0x102/0x2160 [ 247.754951][T12684] #3: ffff8880b943e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 247.754996][T12684] #4: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 247.755039][T12684] #5: ffffffff8e20fa20 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 247.755074][T12684] #6: ffffffff8e20f650 (console_srcu){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 247.755116][T12684] [ 247.755116][T12684] stack backtrace: [ 247.755122][T12684] CPU: 0 PID: 12684 Comm: syz.2.2682 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 247.755141][T12684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 247.755163][T12684] Call Trace: [ 247.755171][T12684] <TASK> [ 247.755178][T12684] dump_stack_lvl+0x241/0x360 [ 247.755198][T12684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.755219][T12684] ? print_circular_bug+0x130/0x1a0 [ 247.755242][T12684] check_noncircular+0x36a/0x4a0 [ 247.755265][T12684] ? __pfx_check_noncircular+0x10/0x10 [ 247.755286][T12684] ? lockdep_lock+0x123/0x2b0 [ 247.755303][T12684] ? add_lock_to_list+0x1de/0x2e0 [ 247.755327][T12684] validate_chain+0x18e0/0x5900 [ 247.755359][T12684] ? __pfx_validate_chain+0x10/0x10 [ 247.755381][T12684] ? sprintf+0xda/0x120 [ 247.755401][T12684] ? vsnprintf+0x1cc3/0x1da0 [ 247.755428][T12684] ? info_print_prefix+0x204/0x310 [ 247.755447][T12684] ? mark_lock+0x9a/0x350 [ 247.755467][T12684] __lock_acquire+0x1346/0x1fd0 [ 247.755492][T12684] lock_acquire+0x1ed/0x550 [ 247.755509][T12684] ? console_flush_all+0x152/0xfd0 [ 247.755534][T12684] ? __pfx_lock_acquire+0x10/0x10 [ 247.755551][T12684] ? __pfx_lock_release+0x10/0x10 [ 247.755572][T12684] ? do_raw_spin_lock+0x14f/0x370 [ 247.755598][T12684] ? do_raw_spin_unlock+0x13c/0x8b0 [ 247.755620][T12684] ? console_flush_all+0x3a8/0xfd0 [ 247.755643][T12684] console_flush_all+0x810/0xfd0 [ 247.755665][T12684] ? console_flush_all+0x152/0xfd0 [ 247.755689][T12684] ? console_flush_all+0x152/0xfd0 [ 247.755715][T12684] ? __pfx_console_flush_all+0x10/0x10 [ 247.755738][T12684] ? __pfx_lock_acquire+0x10/0x10 [ 247.755757][T12684] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 247.755777][T12684] ? strncpy_from_user+0x21a/0x2f0 [ 247.755800][T12684] console_unlock+0x13b/0x4d0 [ 247.755822][T12684] ? __pfx_console_unlock+0x10/0x10 [ 247.755842][T12684] ? _printk+0xd5/0x120 [ 247.755857][T12684] ? _printk+0xd5/0x120 [ 247.755872][T12684] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 247.755901][T12684] vprintk_emit+0x5a6/0x770 [ 247.755922][T12684] ? __pfx_vprintk_emit+0x10/0x10 [ 247.755940][T12684] ? __bad_area_nosemaphore+0x118/0x770 [ 247.755961][T12684] _printk+0xd5/0x120 [ 247.755976][T12684] ? __pfx__printk+0x10/0x10 [ 247.755996][T12684] should_fail_ex+0x391/0x4e0 [ 247.756019][T12684] strncpy_from_user+0x36/0x2f0 [ 247.756043][T12684] strncpy_from_user_nofault+0x71/0x140 [ 247.756064][T12684] bpf_probe_read_compat_str+0xe9/0x180 [ 247.756085][T12684] ? bpf_trace_run4+0x244/0x590 [ 247.756107][T12684] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 247.756122][T12684] bpf_trace_run4+0x334/0x590 [ 247.756145][T12684] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 247.756165][T12684] ? __pfx_bpf_trace_run4+0x10/0x10 [ 247.756190][T12684] ? __pfx_probe_sched_switch+0x10/0x10 [ 247.756213][T12684] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 247.756234][T12684] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 247.756255][T12684] __traceiter_sched_switch+0x98/0xd0 [ 247.756278][T12684] __schedule+0x2587/0x4a20 [ 247.756307][T12684] ? __pfx___schedule+0x10/0x10 [ 247.756328][T12684] ? __pfx_lock_release+0x10/0x10 [ 247.756346][T12684] ? __mutex_trylock_common+0x92/0x2e0 [ 247.756372][T12684] ? schedule+0x90/0x320 [ 247.756390][T12684] schedule+0x14b/0x320 [ 247.756410][T12684] schedule_preempt_disabled+0x13/0x30 [ 247.756430][T12684] __mutex_lock+0x6a4/0xd70 [ 247.756453][T12684] ? __mutex_lock+0x527/0xd70 [ 247.756475][T12684] ? wg_set_device+0x102/0x2160 [ 247.756495][T12684] ? __pfx___mutex_lock+0x10/0x10 [ 247.756518][T12684] ? dev_get_by_index+0x23/0x2d0 [ 247.756534][T12684] ? dev_get_by_index+0x29c/0x2d0 [ 247.756551][T12684] ? lookup_interface+0x292/0x2d0 [ 247.756577][T12684] wg_set_device+0x102/0x2160 [ 247.756604][T12684] ? __pfx___nla_validate_parse+0x10/0x10 [ 247.756624][T12684] ? __pfx_wg_set_device+0x10/0x10 [ 247.756656][T12684] ? __nla_parse+0x40/0x60 [ 247.756675][T12684] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 247.756702][T12684] genl_rcv_msg+0xb14/0xec0 [ 247.756723][T12684] ? mark_lock+0x9a/0x350 [ 247.756746][T12684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.756779][T12684] ? __pfx_lock_acquire+0x10/0x10 [ 247.756796][T12684] ? __pfx_wg_set_device+0x10/0x10 [ 247.756816][T12684] ? __pfx___might_resched+0x10/0x10 [ 247.756840][T12684] netlink_rcv_skb+0x1e3/0x430 [ 247.756859][T12684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 247.756880][T12684] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 247.756903][T12684] ? __netlink_deliver_tap+0x77e/0x7c0 [ 247.756924][T12684] genl_rcv+0x28/0x40 [ 247.756941][T12684] netlink_unicast+0x7f0/0x990 [ 247.756959][T12684] ? __pfx_netlink_unicast+0x10/0x10 [ 247.756973][T12684] ? __virt_addr_valid+0x183/0x520 [ 247.756993][T12684] ? __check_object_size+0x49c/0x900 [ 247.757013][T12684] ? bpf_lsm_netlink_send+0x9/0x10 [ 247.757035][T12684] netlink_sendmsg+0x8e4/0xcb0 [ 247.757058][T12684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.757077][T12684] ? __import_iovec+0x536/0x820 [ 247.757093][T12684] ? aa_sock_msg_perm+0x91/0x160 [ 247.757116][T12684] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 247.757131][T12684] ? security_socket_sendmsg+0x87/0xb0 [ 247.757150][T12684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.757167][T12684] __sock_sendmsg+0x221/0x270 [ 247.757187][T12684] ____sys_sendmsg+0x525/0x7d0 [ 247.757213][T12684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.757243][T12684] __sys_sendmsg+0x2b0/0x3a0 [ 247.757266][T12684] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.757287][T12684] ? vfs_write+0x7c4/0xc90 [ 247.757325][T12684] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.757343][T12684] ? do_syscall_64+0x100/0x230 [ 247.757361][T12684] ? do_syscall_64+0xb6/0x230 [ 247.757379][T12684] do_syscall_64+0xf3/0x230 [ 247.757396][T12684] ? clear_bhb_loop+0x35/0x90 [ 247.757416][T12684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.757445][T12684] RIP: 0033:0x7f28bb375bd9 [ 247.757464][T12684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.757479][T12684] RSP: 002b:00007f28bc207048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.757498][T12684] RAX: ffffffffffffffda RBX: 00007f28bb503f60 RCX: 00007f28bb375bd9 [ 247.757509][T12684] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 247.757520][T12684] RBP: 00007f28bc2070a0 R08: 0000000000000000 R09: 0000000000000000 [ 247.757532][T12684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.757542][T12684] R13: 000000000000000b R14: 00007f28bb503f60 R15: 00007fff697c17a8 [ 247.757562][T12684] </TASK> [ 249.193321][T12684] CPU: 0 PID: 12684 Comm: syz.2.2682 Not tainted 6.10.0-rc5-syzkaller-01202-g0b8774586be5 #0 [ 249.203448][T12684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 249.213483][T12684] Call Trace: [ 249.216740][T12684] <TASK> [ 249.219651][T12684] dump_stack_lvl+0x241/0x360 [ 249.224311][T12684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.229487][T12684] ? __pfx__printk+0x10/0x10 [ 249.234057][T12684] should_fail_ex+0x3b0/0x4e0 [ 249.238714][T12684] strncpy_from_user+0x36/0x2f0 [ 249.243548][T12684] strncpy_from_user_nofault+0x71/0x140 [ 249.249076][T12684] bpf_probe_read_compat_str+0xe9/0x180 [ 249.254606][T12684] ? bpf_trace_run4+0x244/0x590 [ 249.259435][T12684] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 249.264880][T12684] bpf_trace_run4+0x334/0x590 [ 249.269537][T12684] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 249.275583][T12684] ? __pfx_bpf_trace_run4+0x10/0x10 [ 249.280761][T12684] ? __pfx_probe_sched_switch+0x10/0x10 [ 249.286285][T12684] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 249.292937][T12684] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 249.298980][T12684] __traceiter_sched_switch+0x98/0xd0 [ 249.304333][T12684] __schedule+0x2587/0x4a20 [ 249.308818][T12684] ? __pfx___schedule+0x10/0x10 [ 249.313645][T12684] ? __pfx_lock_release+0x10/0x10 [ 249.318647][T12684] ? __mutex_trylock_common+0x92/0x2e0 [ 249.324083][T12684] ? schedule+0x90/0x320 [ 249.328303][T12684] schedule+0x14b/0x320 [ 249.332436][T12684] schedule_preempt_disabled+0x13/0x30 [ 249.337874][T12684] __mutex_lock+0x6a4/0xd70 [ 249.342354][T12684] ? __mutex_lock+0x527/0xd70 [ 249.347006][T12684] ? wg_set_device+0x102/0x2160 [ 249.351832][T12684] ? __pfx___mutex_lock+0x10/0x10 [ 249.356834][T12684] ? dev_get_by_index+0x23/0x2d0 [ 249.361744][T12684] ? dev_get_by_index+0x29c/0x2d0 [ 249.366740][T12684] ? lookup_interface+0x292/0x2d0 [ 249.371739][T12684] wg_set_device+0x102/0x2160 [ 249.376398][T12684] ? __pfx___nla_validate_parse+0x10/0x10 [ 249.382096][T12684] ? __pfx_wg_set_device+0x10/0x10 [ 249.387187][T12684] ? __nla_parse+0x40/0x60 [ 249.391579][T12684] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 249.397886][T12684] genl_rcv_msg+0xb14/0xec0 [ 249.402364][T12684] ? mark_lock+0x9a/0x350 [ 249.406672][T12684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.411677][T12684] ? __pfx_lock_acquire+0x10/0x10 [ 249.416673][T12684] ? __pfx_wg_set_device+0x10/0x10 [ 249.421759][T12684] ? __pfx___might_resched+0x10/0x10 [ 249.427022][T12684] netlink_rcv_skb+0x1e3/0x430 [ 249.431759][T12684] ? __pfx_genl_rcv_msg+0x10/0x10 [ 249.436765][T12684] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 249.442027][T12684] ? __netlink_deliver_tap+0x77e/0x7c0 [ 249.447465][T12684] genl_rcv+0x28/0x40 [ 249.451428][T12684] netlink_unicast+0x7f0/0x990 [ 249.456169][T12684] ? __pfx_netlink_unicast+0x10/0x10 [ 249.461424][T12684] ? __virt_addr_valid+0x183/0x520 [ 249.466515][T12684] ? __check_object_size+0x49c/0x900 [ 249.471779][T12684] ? bpf_lsm_netlink_send+0x9/0x10 [ 249.476870][T12684] netlink_sendmsg+0x8e4/0xcb0 [ 249.481615][T12684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.486875][T12684] ? __import_iovec+0x536/0x820 [ 249.491698][T12684] ? aa_sock_msg_perm+0x91/0x160 [ 249.496617][T12684] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.501891][T12684] ? security_socket_sendmsg+0x87/0xb0 [ 249.507345][T12684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.512615][T12684] __sock_sendmsg+0x221/0x270 [ 249.517277][T12684] ____sys_sendmsg+0x525/0x7d0 [ 249.522043][T12684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.527342][T12684] __sys_sendmsg+0x2b0/0x3a0 [ 249.531919][T12684] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.537023][T12684] ? vfs_write+0x7c4/0xc90 [ 249.541435][T12684] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.547761][T12684] ? do_syscall_64+0x100/0x230 [ 249.552502][T12684] ? do_syscall_64+0xb6/0x230 [ 249.557171][T12684] do_syscall_64+0xf3/0x230 [ 249.561664][T12684] ? clear_bhb_loop+0x35/0x90 [ 249.566326][T12684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.572203][T12684] RIP: 0033:0x7f28bb375bd9 [ 249.576600][T12684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.596182][T12684] RSP: 002b:00007f28bc207048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.604569][T12684] RAX: ffffffffffffffda RBX: 00007f28bb503f60 RCX: 00007f28bb375bd9 [ 249.612515][T12684] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 249.620521][T12684] RBP: 00007f28bc2070a0 R08: 0000000000000000 R09: 0000000000000000 [ 249.628483][T12684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.636441][T12684] R13: 000000000000000b R14: 00007f28bb503f60 R15: 00007fff697c17a8 [ 249.644396][T12684] </TASK> [ 249.665116][ T5115] Bluetooth: hci2: command tx timeout [ 249.677957][ T62] hsr_slave_0: left promiscuous mode [ 249.686822][ T62] hsr_slave_1: left promiscuous mode [ 249.700674][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.717199][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.725162][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.734001][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.743362][ T62] veth1_macvtap: left promiscuous mode [ 249.749887][ T62] veth0_macvtap: left promiscuous mode [ 249.755583][ T62] veth1_vlan: left promiscuous mode [ 249.761024][ T62] veth0_vlan: left promiscuous mode [ 249.945638][ T62] team0 (unregistering): Port device team_slave_1 removed [ 249.981800][ T62] team0 (unregistering): Port device team_slave_0 removed [ 250.209985][T12613] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.220530][T12613] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.227936][T12613] bridge_slave_0: entered allmulticast mode [ 250.235723][T12613] bridge_slave_0: entered promiscuous mode [ 250.250253][T12613] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.263108][T12613] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.270397][T12613] bridge_slave_1: entered allmulticast mode [ 250.280657][T12613] bridge_slave_1: entered promiscuous mode [ 250.315199][T12613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.327313][T12613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.355491][T12613] team0: Port device team_slave_0 added [ 250.363685][T12613] team0: Port device team_slave_1 added [ 250.401973][T12613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.409730][T12613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.436427][T12613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.453033][T12613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.460040][T12613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.486345][T12613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.525270][T12613] hsr_slave_0: entered promiscuous mode [ 250.535032][T12613] hsr_slave_1: entered promiscuous mode [ 250.541347][T12613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.549886][T12613] Cannot create hsr debugfs directory [ 250.823429][T12613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 250.833834][T12613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.842800][T12613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.862251][T12613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.882832][T12613] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.889988][T12613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.943446][T12613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.957470][ T5156] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.974507][T12613] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.985393][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.992490][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.004804][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.011932][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.131820][T12613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.170179][T12613] veth0_vlan: entered promiscuous mode [ 251.182648][T12613] veth1_vlan: entered promiscuous mode [ 251.206195][T12613] veth0_macvtap: entered promiscuous mode [ 251.220178][T12613] veth1_macvtap: entered promiscuous mode [ 251.234540][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.246027][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.258348][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.269674][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.279792][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.290342][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.300164][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.311238][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.321068][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.331688][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.342034][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.352548][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.362859][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.376182][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.386205][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.396725][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.407232][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.417726][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.427962][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.438528][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.449905][T12613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.462538][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.475612][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.486206][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.497857][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.507752][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.518303][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.530128][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.540660][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.550736][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.561991][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.573493][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.585130][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.595193][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.606078][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.615943][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.626390][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.636609][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.647551][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.657539][T12613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.667992][T12613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.681076][T12613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.691764][T12613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.700530][T12613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.709285][T12613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.722442][T12613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.731684][ T5115] Bluetooth: hci2: command tx timeout [ 251.766342][T12613] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 251.794874][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.796891][T12613] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 251.811463][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.841068][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.849456][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.542631][ T2466] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.039271][ T1238] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.873624][ T2466] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.941020][ T2466] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.026160][ T2466] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.134570][ T2466] bridge_slave_1: left allmulticast mode [ 257.140881][ T2466] bridge_slave_1: left promiscuous mode [ 257.146632][ T2466] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.161742][ T2466] bridge_slave_0: left allmulticast mode [ 257.167471][ T2466] bridge_slave_0: left promiscuous mode [ 257.173187][ T2466] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.342025][ T2466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.359406][ T2466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.378951][ T2466] bond0 (unregistering): Released all slaves