last executing test programs: 1m4.864939902s ago: executing program 3 (id=411): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpuacct'}, {0x2d, 'rdma'}, {0x2d, 'freezer'}]}, 0x18) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2002, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "4a0813e87321e16666fa0a081faf943b7f634373ea2d7852", "8c926c12b037e238ee6697b37f7ff771c6293ba09c787c566e2cc01e53637dac"}}}}}}, 0x0) 55.181580643s ago: executing program 3 (id=411): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpuacct'}, {0x2d, 'rdma'}, {0x2d, 'freezer'}]}, 0x18) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2002, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "4a0813e87321e16666fa0a081faf943b7f634373ea2d7852", "8c926c12b037e238ee6697b37f7ff771c6293ba09c787c566e2cc01e53637dac"}}}}}}, 0x0) 44.618079992s ago: executing program 3 (id=411): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpuacct'}, {0x2d, 'rdma'}, {0x2d, 'freezer'}]}, 0x18) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2002, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "4a0813e87321e16666fa0a081faf943b7f634373ea2d7852", "8c926c12b037e238ee6697b37f7ff771c6293ba09c787c566e2cc01e53637dac"}}}}}}, 0x0) 33.884479101s ago: executing program 3 (id=411): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpuacct'}, {0x2d, 'rdma'}, {0x2d, 'freezer'}]}, 0x18) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2002, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "4a0813e87321e16666fa0a081faf943b7f634373ea2d7852", "8c926c12b037e238ee6697b37f7ff771c6293ba09c787c566e2cc01e53637dac"}}}}}}, 0x0) 20.451418253s ago: executing program 3 (id=411): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpuacct'}, {0x2d, 'rdma'}, {0x2d, 'freezer'}]}, 0x18) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2002, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "4a0813e87321e16666fa0a081faf943b7f634373ea2d7852", "8c926c12b037e238ee6697b37f7ff771c6293ba09c787c566e2cc01e53637dac"}}}}}}, 0x0) 5.248463435s ago: executing program 3 (id=411): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000889078ac1e0001ac1414aa"], 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00", 0x20) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpuacct'}, {0x2d, 'rdma'}, {0x2d, 'freezer'}]}, 0x18) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x2002, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "4a0813e87321e16666fa0a081faf943b7f634373ea2d7852", "8c926c12b037e238ee6697b37f7ff771c6293ba09c787c566e2cc01e53637dac"}}}}}}, 0x0) 2.617490226s ago: executing program 2 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000003e000701fcfffffffddbdf25017c00000c00"], 0x2c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (fail_nth: 5) 2.05973359s ago: executing program 2 (id=1842): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003080)=[{{&(0x7f0000000480)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000000700)="dd935db6b9318eb334da5909563a1ed8eaa79df94f71067103dde4b28ff431f18e1a5936bc6442ee9656375ae2729a1ff6618f7dfd0123fc7dc0b530bb6b4dac99753b24b45d02aa438ff635823e2a8eabd902c4aa1887f3ec6cef4e2c4414f9aba1e8903016cdc253eb", 0x6a}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="9c86827cec6ad2c84aab65411e37cf2d7d9f1ac069132d30ca6a1a4dc95b5e3b5863d3f6439a7597c856d6bd02fb7dcd436c4b8384ac7fbeff1206dbe5186d1669568d420cb9efa0a700b7ea05aa782092ef7a2ec5463d8d2f2aba3d95ee349f551cc5e9af77a38c43448cb5a4ea5951c1de8704c233f73a4122bad19cada0daa5a04ac77a7ee6d391b35a4177107c75e7fca67518489c647377334afc37f309d1833ee128584f06fa189d26bea37911dc2bb938172cdeb41809fcd8781320cd6cd6eaaeedc604dc32993a4a4372f28429522139cabf8558f5d6d8ca9b6f", 0xde}], 0x4, &(0x7f00000028c0)=[@dstopts={{0x50, 0x29, 0x37, {0x2b, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0xa, 0x84, [0x80000000, 0x1, 0x5, 0xd, 0x1]}}]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2c, 0x2, 0xc6ff932fe73b142d, 0xb, 0x0, [@private2]}}}, @rthdr={{0x38, 0x29, 0x39, {0x8, 0x4, 0x2, 0x6, 0x0, [@empty, @mcast2]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @rthdr={{0x38, 0x29, 0x39, {0x87, 0x4, 0x3, 0x8, 0x0, [@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}}}], 0x100}}, {{&(0x7f00000029c0)={0xa, 0x4e24, 0x6e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000002dc0)=[{&(0x7f0000002a00)="84e57032ad85304e4bc166fd4f7736f9facab824622a7be400366e945704f9ff4e15a41d166a464077d03636216ea00238cc4ca2b497f5130207e9ba05f1233c83d0c293ba106af3e3", 0x49}, {&(0x7f0000002a80)="2e18a5ef9d8d47d519a03b6b4f103a15e366cd6da73f8e577be669635dd0f8e239d62a0021776ad2a723ab57cd176f33113aca8b7f6bf1afccd14aea984540b85e8ab760f9f009b25d75babf867bc374a0ab2ae79647dccd5bd8db3319948cde477b4138207ac202597b98ecacf135dc", 0x70}, {&(0x7f0000002b00)="cae1e61724170539a45aca67dff0c6bb75c083e08d02a041484052fb54bfd9526ce6b541a93bde6bf3a62ee918b5c90054b0751e869844f60e329ef414a483206242da25ad8ad5e4c0a8a6a1f6b2ea2e818cf030f4b65905ee4d5ec741e268e44d635057fa311b1a1b8c00ee589a017c1a913e90d3e35ca8d36fa28b73cb", 0x7e}, {&(0x7f0000002b80)}, {&(0x7f0000002bc0)="35522b3b825647939e5ef04a74fe6158c755ee08a43405791a0cdcb980943ed80e4f97860efd036a7b8cf3e24254a3e5046fc383cdd6d40343de71c934d1a4b54cfaff72b151e6b596f1b4b4dc68ab2429c6f8affe03a242183072aa84cdcfdab79f237996f120b50eb8139daf10e96816981b5e3328ef6c5779b7e2cb0253d05241e39c7782bcc8082dace4c9025a7cd27f", 0x92}, {&(0x7f0000002c80)="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", 0xfc}, {&(0x7f0000002d80)="6a8ff2efd943f8386434f40a49a3c9e7844277a358ed75a521031957e8236ccc75c0277acce321636c4cbad5abb3b33ca270b051b2a8c8030dea", 0x3a}], 0x7}}, {{&(0x7f0000002e40)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000002fc0)=[{&(0x7f0000002e80)="bd142645d48a9e3fcc5836fb", 0xc}, {&(0x7f0000002ec0)="dd99ca4e39d9aaff501dca887c4c498a14e5c73cdf060593cff67ca24a213756543cf4b7bd27a1893bb431ed86aa6e7e94c5c08a634a5f51758ab12ddce53176913a03a248945653e6098832c432c3fca08470e8cca4591789739d2980d73455bdcb57925399961f7269bd4cd9ffaad289ef9905f194cd42d5209836671e4dea57f687eb23f38bdfe88ccc12a7c28c57c8d5e8d5a3b0a77fcf55900764af18f6d88aa8f8b92077e99e8c504488e18ef7d4a00f591dd04253c7ea268590d4ca98fa72f0ded0f60c9d02bd95763632e080d17455b4d06dc611e76591dd07cb6a8b930561bace505b9977d9ad3ab74fb90a971a10112d", 0xf5}], 0x2, &(0x7f0000003000)=[@hoplimit_2292={{0x14}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x8000}}], 0x48}}], 0x3, 0x40040) getsockopt$bt_hci(r0, 0x84, 0x15, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x7, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xad5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x5b, 0x8c, &(0x7f0000000340)="87999d643d92c256997cb1fb823a87b0b37b1d875ebce04795cf7ce661b55e8b3b28f4b8a5d1fab24bdfc28604f9f85f829d7ff411dd1b0723e430a105a7635fab69db5ab991a919e1ecd6940f827b2833917248c7f8a4ef7608c9", &(0x7f00000003c0)=""/140, 0x7fff, 0x0, 0xe9, 0x65, &(0x7f0000000500)="cbc2bf3b62ca58aa2e86ac44959f9102879c70bede476ddaaaf1289af8dd5b87be7c7ec36bfbc772f5e728c784fc33c21006d4960933b0c5a2f88b1b5db7e51753f9f0d3fb0db4d2935ac05d92826bc9ed463701e283e8f134645b5489820ded613896cff5f90c19b9c36374b71860296428733a687f16a9eaeacc2756808bc71799022d0b545382965dd88619230ba297f587f5b9c252ac56c8b16c3fa09fc87d5352c11ce431aabc4e51c372378c75cb334692487d23b10bf42e162eda2be22b74ce3be7dd27c309eb6ad3041378b3dc7d7ea83cf5cb3b7043e97c01a000f427a20fe54b5b7eeafc", &(0x7f0000000600)="773f4867cd8236f899bd3185b6a08396504bdb5d0b36eebf85b96c2135cd28e7a14e1bc0e67546fad31690293880e0ca92ef1fbb640a02c1cd806b8df60871565bcd414abfa3090a3897cefdecfcaa3e2198b0af57e484717a5f1cca346b3c332dc515b096", 0x2, 0x0, 0x6}, 0x50) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.590775279s ago: executing program 4 (id=1848): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000004c0), &(0x7f0000000240)=0xfe29) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x113, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x4000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="000000000003dfffffff158010cbaf03178f6b7b000500000000000022f9ff060014"], 0x38}}, 0x20040011) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc1}], 0x1, 0x0) (async) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) ppoll(&(0x7f0000000180)=[{r5}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) (async) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f00000000c0)=0x4, 0x4) (async) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000040)={r7, 0x4}, 0x8) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtclass={0x24, 0x28, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff1, 0xffe0}, {0x7, 0xfff3}, {0xffff, 0x8}}}, 0x24}}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r11, 0x1, 0x15, &(0x7f0000000000), 0x39476b52598e9f07) 1.517650931s ago: executing program 1 (id=1850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000b80)=@ringbuf, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x34, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x9, &(0x7f0000000100)=ANY=[@ANYRES64=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x100200, 0x0) ioctl$TUNGETFEATURES(r4, 0x800454cf, &(0x7f0000000080)) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES64=r0], 0x64}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001}}) recvmsg$unix(r6, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) 1.267543954s ago: executing program 4 (id=1852): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000003e000701fcfffffffddbdf25017c00000c00"], 0x2c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (fail_nth: 6) 1.266883847s ago: executing program 0 (id=1853): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x8, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x800, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40050}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) gettid() sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0xc800) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$unix(0x1, 0x5, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r2) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd8, r7, 0x504, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$SIOCAX25ADDFWD(r8, 0x89ea, &(0x7f0000000680)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000006c0)='veth1_virt_wifi\x00', 0x10) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000700), 0x10) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x4, [@ptr={0x7, 0x0, 0x0, 0x2, 0x1}, @int={0x2, 0x0, 0x0, 0x1, 0x0, 0x1d, 0x0, 0x45, 0x6}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x1, 0x3}, {0x8, 0x1}, {0x0, 0x3}]}]}, {0x0, [0x5f, 0x0]}}, &(0x7f0000000900)=""/99, 0x68, 0x63, 0x0, 0x0, 0x10000, @value}, 0x28) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x10, &(0x7f0000000a40)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000ac0)='GPL\x00', 0x401, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0x3, 0x7, 0xe}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[0x1, 0x1, 0x1], &(0x7f0000000bc0)=[{0x4, 0x3, 0x1, 0x6}, {0x3, 0x5, 0xd, 0xf7fdf29dda9cd57a}, {0x5, 0x5, 0x6, 0x5}, {0x4, 0x1, 0x6, 0x6}, {0x5, 0x5, 0x5, 0x7}, {0x2, 0x1, 0x5}], 0x10, 0x1, @void, @value}, 0x94) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000d40)=@generic={&(0x7f0000000d00)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000d80)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000dc0), &(0x7f0000000e00)='%pK \x00'}, 0x20) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e80)={0xffffffffffffffff, 0xe}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ec0)={0x1, 0xffffffffffffffff}, 0x4) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f00)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001040)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x0, 0x1, 0x0, 0x2, 0x9, 0x6, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5}, @generic={0x6, 0x2, 0x7, 0x4}]}, &(0x7f0000000780)='GPL\x00', 0x6, 0x95, &(0x7f00000007c0)=""/149, 0x40f00, 0x10, '\x00', r1, 0xd, r9, 0x8, &(0x7f00000009c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x4, 0x6, 0x91d, 0x9}, 0x10, 0x15b92, r10, 0x5, &(0x7f0000000f80)=[r11, r12, r13, 0xffffffffffffffff, r14, 0x1, r15, r16], &(0x7f0000000fc0)=[{0x5, 0x5, 0x2, 0x9}, {0x5, 0x5, 0xb, 0x8}, {0x2, 0x4, 0xd, 0x6}, {0x2, 0x1, 0x7, 0x4}, {0x4, 0x2, 0x1, 0x1}], 0x10, 0x5, @void, @value}, 0x94) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x24, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x200448c5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001280)={'batadv_slave_1\x00'}) 1.266397408s ago: executing program 1 (id=1854): recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.168098903s ago: executing program 0 (id=1855): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r1 = socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x8, 0x3}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) preadv(r3, &(0x7f00000013c0)=[{&(0x7f0000000040)=""/20, 0x14}], 0x1, 0x0, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r0) ioctl$TUNGETIFF(r3, 0x800454d2, &(0x7f0000000180)={'dummy0\x00'}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvfrom$ax25(r1, &(0x7f0000000380)=""/43, 0x2b, 0x1, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r6) sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4020040}, 0x80) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x8, 0x9}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYRES16=r8, @ANYRESHEX, @ANYRESDEC=r8], 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) 1.055449378s ago: executing program 2 (id=1856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000050000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x0) 991.194245ms ago: executing program 4 (id=1857): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008011}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000c600010020000000950000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000940)={0x4e4, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x47, 0x5, "855156ef0c4cecfa3226c68caa87c349fd2c535b40bf5d386ca574bb4f991c69e75f99a3e36a4edce65001646ee2aff7264f09f2f1089f967651bdbf081ad5ed091b30"}, @ETHTOOL_A_BITSET_VALUE={0xe6, 0x4, "8f391edddb475754913e48e61685005c584649a2f0975a1d5789f3e2c3703dfc55d76ee4a3b1711f7298a62ff734b498da130da2d95cfdc338e2414b8d749066175271e373e17dc3baf72bde3b48dead63d875b0993624d4671ade7e699da6530c8e2af4d503e236f41650d0e40df5c44d53d48a4ef31809763ffa33909e108ed6a20c7f69392d0e12e1c0e110ea9e301c22dd86a86a3116d647bd85cff8a5645c447a44b658766edec3d46cdfae20321d46600c21a84f44490682df8cfdf5c86e771199b4c9eb86d8ef5c5a1d08a206c2a975b8e03cf0635b9c1babe481101a4509"}, @ETHTOOL_A_BITSET_VALUE={0x28, 0x4, "86bb9cb2800744da81364cde7d6bb034f15d1cd850af0c13255a6df02585f78261967b20"}, @ETHTOOL_A_BITSET_MASK={0x47, 0x5, "a3409b3194b51281b4f378056408bc1d5ddba095ccff24614979544adcfe2e7c93daab2e77f1ade6c917ce367915470c3aae816768afce0e7f8b728497441e0986ec8d"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xaf, 0x5, "47e5d5c895082565d894febb9971e9febe6458e18c053c7c6f30d48f7b35b67c0cd1c918ff6b7d34802fc11c57a0244d4f5f3541231f3db64553a166562ece4f66c4d45b905df5bab698945e1bb2ec1b0a538c8492e3b1ba90d1bc12546f385b95b61f39f590c85ad3ceb6da11430e0ede3f6b50104e240a01c0a29e536b915d6098ed21556589eb79ac23939ba54817770c3a2e61074ca770ece58920aba56ddfea6aa3713e28a2ccb30a"}, @ETHTOOL_A_BITSET_MASK={0xc, 0x5, "7d34d8cb680b49d8"}, @ETHTOOL_A_BITSET_VALUE={0x1c, 0x4, "c0086dc17450b1720a7d776df7f7097d2b99c845b4c83130"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xea, 0x4, "6134e5a9db1d96e1fae1931311f29087c55ff0257cefcc77c22bd66e3ed62d49fc93fe24af141660ccc330cd91901974a274fc2fb617c27a4f90e7063b9fc043a822a0e3f7ad7132ddae34dc3128dc746e91b4325dd59517fdfcc205f9a9344861877519a5d0e1a2a0204a3485af69416e2d0e993e9ace02467822d1e5b1eabfd58a3d5c36ecc2a2b389f19bad803e1e968c877c60323631f38b400aa45bf251f186d8762a6b4458c43740ddc2b33ff68b4cc08271a84f93977759aa97ee1916e8a1b7eee43834aac0d0afb1283d69e5ce66f4498a5c2419a6f561cbb713bece9c3aca2d03e7"}, @ETHTOOL_A_BITSET_VALUE={0xd, 0x4, "b2624c7067e23ad746"}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x4f, 0x5, "bc840aea240f05357b8d5dccba5ff0d22edbec376cdaac7160ebb8c7c33f8139a666ee55f3b91180c269ce002181adb2e7053139bd0070086cf1348cc3f15bc4332f6fefcff42fc9649eab"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x54}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x4}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x4060010}, 0x20000800) 905.579412ms ago: executing program 1 (id=1858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x6c}}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000005500)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="66c423b0c61eca431c2b0e872d504e7162c426a448db69d9667da29d30d89f6318b056940802ff2b5a3073ddfadb2ac4b8a05c9e66acb0efdffd7f6d7a2f6b6346b775e3", 0x44}, {&(0x7f0000000140)="2d8e32433c0145b9ab932cd5e795b396f4ab1da81ea34c02e3", 0x19}, {&(0x7f0000000240)="87f6dc9194bf59e4e66670a0447da70e474295f0821a8e32071fcab47b9f646d906363", 0x23}, {&(0x7f0000000280)="1827dcdc4b", 0x5}], 0x4, 0x0, 0x0, 0x4000}], 0x1, 0x20000001) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x101, 0x53}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x34}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}]}, 0x50}, 0x1, 0x0, 0x0, 0x40091}, 0x800) sendmsg$can_bcm(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x41}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 709.507918ms ago: executing program 0 (id=1859): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000700000000000000fbffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32, @ANYBLOB="0000000000000101851000000700800018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600000000000000000000001851000009000000000000000000000085100000faffffff5318ffff10000000bf91000000000000b7020000010000008500000085000000b700"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x1, 0x3, 0x8, 0x2}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x57, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce9872f8b1ae6cbb89cb5fef8", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x27, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4004) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 659.992347ms ago: executing program 2 (id=1860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018", @ANYRES32, @ANYBLOB="0000000000000101851000000700800018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000184000000600000000000000000000001851000009000000000000000000000085100000faffffff5318ffff10000000bf91000000000000b7020000010000008500000085000000b700"], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x3, &(0x7f0000000300)=[r0, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x1, 0x3, 0x8, 0x2}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0x57, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce9872f8b1ae6cbb89cb5fef8", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x27, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50383eeef9af526b75a049bb5b703b83d015af96", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000140), 0x0}, 0x20) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB], 0x6f4}}, 0x0) 629.563193ms ago: executing program 4 (id=1861): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4040904}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000", 0x17}], 0x1}, 0x0) 448.776516ms ago: executing program 1 (id=1862): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000100001f5ff000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) 447.71794ms ago: executing program 4 (id=1863): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xffffffffffffff6e}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}], 0x5}, 0x1}], 0x2, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x3c, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffe0}, {}, {0xc, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffe2}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 441.824944ms ago: executing program 0 (id=1864): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x200000, 0x1}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004", @ANYRESHEX, @ANYRES16=r2], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000740)=ANY=[@ANYRESDEC, @ANYRESOCT=r4, @ANYRES8=r1, @ANYRESHEX=r4, @ANYRESHEX=r3, @ANYBLOB="d5f9e699ce1bf41e61b63bd050eb8a71f1a4c2e0fde063f2c6b8f8b591813f8950be0a839db0ff7a7d4a18dbd6806fa602199ef0db2aef3e0d9d96c1169490c342", @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x10001, 0xa6, &(0x7f00000002c0)=""/166, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r8}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8, 0x200000000000018f, &(0x7f00000006c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r6, @ANYRESHEX=r5, @ANYRESOCT=r5, @ANYRES16=r4], &(0x7f0000000540)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3c, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r10}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) close(r12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, r12, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup/syz0\x00', 0x200002, 0x0) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) close(r13) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r9, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000600000073113100090000008510000002fb0000b7000000000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r13, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r13, 0x0, 0x0}, 0x10) r14 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r14, 0x4000000000000, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6, 0x0, 0x5c}, 0x0, 0x70, 0xd8, 0x0, {0x0, 0xffffffffa0028000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x8001, 0x9, 0x2, '\x00', 'syz1\x00', {0x8}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16], 0x0, 0x1000}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000100)={r0, r0, 0x0, 0x0, 0x0, 0xc2, 0xff, 0x15c2, 0x5886, 0xa, 0x0, 0x8, 'syz1\x00'}) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000), &(0x7f00000005c0)=0xc) 199.532767ms ago: executing program 0 (id=1865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0xfccf4adb913cf4b9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000100)=0x3, 0x4) ioctl$FS_IOC_SETFSLABEL(r1, 0x8911, &(0x7f0000000000)="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") 198.75771ms ago: executing program 2 (id=1866): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000006800010400000000000000000a000000000000000800010001000000040004"], 0x24}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1100}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getnexthop={0x18, 0x6a, 0x501, 0xfffffdfe, 0x25dfdbff}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 196.896688ms ago: executing program 1 (id=1867): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc601000000010000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 134.595546ms ago: executing program 4 (id=1868): recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x200, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xfff3}, {0x10, 0xffe0}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 76.415755ms ago: executing program 1 (id=1869): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r1, 0x1) getsockopt$bt_hci(r1, 0x84, 0x7d, &(0x7f0000000f00)=""/4095, &(0x7f0000000000)=0xfff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r2, @ANYBLOB="20d100000000000014003f80080001006c4f52cf36292da93186e60788e575457136b060fc83050e8779d7e4404500cb6f230fa085b3cbe3fab172ca7ea67e44bd57ff2e42e4f5b97bb3c62db5c80407140a4ea7730adbcb79a1849883b15efd23274f440b589eebd637605e252d7c7c27", @ANYRES32=r3, @ANYBLOB="0800030002000000"], 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 1.37993ms ago: executing program 0 (id=1870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000060000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a300000000014000380080002400000000008000140000000002c000000180a05000000000000000000010000000900010073797a30000000000c000540000000000000000114000000020a01"], 0xc8}}, 0x0) 0s ago: executing program 2 (id=1871): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x18}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x33) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x4, 0x0, 0x0, {{0x34}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6, 0xffffffff, 0x0, 0x0, 0x5}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x4, 0x24, 0xfc, 0xb49, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x20, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', r4, 0x6, 0x4, 0x68, 0x3, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x20, 0x8000, 0x4, 0x6}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @dev={0xac, 0x14, 0x14, 0x15}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@local, @remote, 0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv4_getnetconf={0x64, 0x52, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x5}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x9}, @NETCONFA_IFINDEX={0x8, 0x1, r5}, @NETCONFA_FORWARDING={0x8, 0x2, 0xfffffff9}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x102}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x6}, @NETCONFA_FORWARDING={0x8, 0x2, 0x7f}, @NETCONFA_IFINDEX={0x8, 0x1, r6}, @NETCONFA_RP_FILTER={0x8, 0x3, 0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000041}, 0x20040040) kernel console output (not intermixed with test programs): 344][ T9782] dump_stack_lvl+0x241/0x360 [ 198.724382][ T9782] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.724413][ T9782] ? __pfx__printk+0x10/0x10 [ 198.724454][ T9782] should_fail_ex+0x424/0x570 [ 198.724482][ T9782] _copy_to_user+0x31/0xb0 [ 198.724520][ T9782] simple_read_from_buffer+0xc4/0x170 [ 198.724554][ T9782] proc_fail_nth_read+0x1ef/0x260 [ 198.724582][ T9782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.724608][ T9782] ? rw_verify_area+0x246/0x630 [ 198.724630][ T9782] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.724654][ T9782] vfs_read+0x21f/0xb90 [ 198.724683][ T9782] ? __pfx___mutex_lock+0x10/0x10 [ 198.724709][ T9782] ? __pfx_vfs_read+0x10/0x10 [ 198.724737][ T9782] ? __fget_files+0x2a/0x420 [ 198.724759][ T9782] ? __fget_files+0x39d/0x420 [ 198.724777][ T9782] ? __fget_files+0x2a/0x420 [ 198.724808][ T9782] ksys_read+0x19d/0x2d0 [ 198.724836][ T9782] ? __pfx_ksys_read+0x10/0x10 [ 198.724867][ T9782] ? do_syscall_64+0xb6/0x230 [ 198.724897][ T9782] do_syscall_64+0xf3/0x230 [ 198.724923][ T9782] ? clear_bhb_loop+0x45/0xa0 [ 198.724949][ T9782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.724970][ T9782] RIP: 0033:0x7f486af8bb7c [ 198.724990][ T9782] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 198.725008][ T9782] RSP: 002b:00007f486be87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.725032][ T9782] RAX: ffffffffffffffda RBX: 00007f486b1a5fa0 RCX: 00007f486af8bb7c [ 198.725048][ T9782] RDX: 000000000000000f RSI: 00007f486be870a0 RDI: 0000000000000004 [ 198.725062][ T9782] RBP: 00007f486be87090 R08: 0000000000000000 R09: 0000000000000000 [ 198.725077][ T9782] R10: 00000000000480c1 R11: 0000000000000246 R12: 0000000000000001 [ 198.725091][ T9782] R13: 0000000000000000 R14: 00007f486b1a5fa0 R15: 00007ffd2e3adcb8 [ 198.725132][ T9782] [ 199.001990][ T9675] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 199.031576][ T9787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1290'. [ 199.043992][ T9675] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 199.061302][ T9783] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1290'. [ 199.154933][ T9675] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 199.303436][ T9808] 8021q: VLANs not supported on ip_vti0 [ 199.513457][ T9675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.582487][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.617951][ T7266] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.625275][ T7266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.700562][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.707803][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.759880][ T9821] netlink: 'syz.1.1303': attribute type 1 has an invalid length. [ 199.804901][ T5845] Bluetooth: hci0: command 0x041b tx timeout [ 199.823981][ T9827] FAULT_INJECTION: forcing a failure. [ 199.823981][ T9827] name failslab, interval 1, probability 0, space 0, times 0 [ 199.838712][ T9675] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 199.859486][ T9675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.862474][ T9827] CPU: 1 UID: 0 PID: 9827 Comm: syz.2.1305 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 199.862506][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 199.862521][ T9827] Call Trace: [ 199.862531][ T9827] [ 199.862540][ T9827] dump_stack_lvl+0x241/0x360 [ 199.862583][ T9827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.862616][ T9827] ? __pfx__printk+0x10/0x10 [ 199.862646][ T9827] ? __mutex_unlock_slowpath+0x229/0x800 [ 199.862678][ T9827] ? __pfx___might_resched+0x10/0x10 [ 199.862712][ T9827] should_fail_ex+0x424/0x570 [ 199.862742][ T9827] should_failslab+0xac/0x100 [ 199.862776][ T9827] __kmalloc_cache_noprof+0x73/0x370 [ 199.862806][ T9827] ? ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 199.862846][ T9827] ovs_ct_limit_cmd_set+0x2f9/0xaf0 [ 199.862899][ T9827] genl_rcv_msg+0xb38/0xf00 [ 199.862934][ T9827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.862956][ T9827] ? __dev_queue_xmit+0x1780/0x3f60 [ 199.862980][ T9827] ? kasan_save_track+0x3f/0x80 [ 199.863003][ T9827] ? __kasan_slab_alloc+0x66/0x80 [ 199.863036][ T9827] ? do_syscall_64+0xf3/0x230 [ 199.863083][ T9827] ? __lock_acquire+0xad5/0xd80 [ 199.863109][ T9827] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 199.863161][ T9827] netlink_rcv_skb+0x208/0x480 [ 199.863200][ T9827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 199.863227][ T9827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.863284][ T9827] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.863323][ T9827] genl_rcv+0x28/0x40 [ 199.863345][ T9827] netlink_unicast+0x7f8/0x9a0 [ 199.863383][ T9827] ? __pfx_netlink_unicast+0x10/0x10 [ 199.863414][ T9827] ? skb_put+0x114/0x1f0 [ 199.863442][ T9827] netlink_sendmsg+0x8c3/0xcd0 [ 199.863494][ T9827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.863531][ T9827] ? aa_sock_msg_perm+0x91/0x160 [ 199.863569][ T9827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.863598][ T9827] __sock_sendmsg+0x221/0x270 [ 199.863631][ T9827] ____sys_sendmsg+0x523/0x860 [ 199.863667][ T9827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.863687][ T9827] ? __fget_files+0x2a/0x420 [ 199.863712][ T9827] ? __fget_files+0x2a/0x420 [ 199.863745][ T9827] __sys_sendmsg+0x271/0x360 [ 199.863774][ T9827] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.863864][ T9827] ? do_syscall_64+0xb6/0x230 [ 199.863895][ T9827] do_syscall_64+0xf3/0x230 [ 199.863923][ T9827] ? clear_bhb_loop+0x45/0xa0 [ 199.863950][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.863971][ T9827] RIP: 0033:0x7f99efd8d169 [ 199.863990][ T9827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.864010][ T9827] RSP: 002b:00007f99f0b4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.864035][ T9827] RAX: ffffffffffffffda RBX: 00007f99effa5fa0 RCX: 00007f99efd8d169 [ 199.864051][ T9827] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000004 [ 199.864067][ T9827] RBP: 00007f99f0b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 199.864080][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.864093][ T9827] R13: 0000000000000000 R14: 00007f99effa5fa0 R15: 00007ffe4d9464c8 [ 199.864130][ T9827] [ 200.161034][ T9833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1307'. [ 200.256700][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1307'. [ 200.438989][ T9843] sctp: [Deprecated]: syz.4.1308 (pid 9843) Use of int in max_burst socket option deprecated. [ 200.438989][ T9843] Use struct sctp_assoc_value instead [ 200.558256][ T9846] netlink: 'syz.1.1309': attribute type 10 has an invalid length. [ 200.575869][ T9846] veth0_vlan: entered allmulticast mode [ 200.661997][ T9846] veth0_vlan: left promiscuous mode [ 200.727091][ T9846] veth0_vlan: entered promiscuous mode [ 200.739602][ T9846] team0: Device veth0_vlan failed to register rx_handler [ 200.885650][ T9675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.038095][ T9675] veth0_vlan: entered promiscuous mode [ 201.091237][ T9675] veth1_vlan: entered promiscuous mode [ 201.183704][ T9675] veth0_macvtap: entered promiscuous mode [ 201.220820][ T9675] veth1_macvtap: entered promiscuous mode [ 201.311257][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.374600][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.384479][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.427238][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.451842][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.474068][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.498046][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.517840][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.532557][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.544129][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.554282][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.565438][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.583807][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.594416][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.604861][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.615691][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.629679][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.641253][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.651533][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.665781][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.677780][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.711308][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.732096][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.753061][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.774243][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.818652][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.847541][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.869571][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.885065][ T5845] Bluetooth: hci0: command 0x041b tx timeout [ 201.892265][ T9885] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 201.894766][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.919597][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.936252][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.946651][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.957606][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.973530][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.998121][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.009860][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.020783][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.032427][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.047039][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.058103][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.079067][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.115519][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.172366][ T9675] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.194822][ T9675] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.203679][ T9675] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.224360][ T9675] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.459733][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.489969][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.562725][ T6041] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.577840][ T6041] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.587448][ T9906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1327'. [ 202.598326][ T9906] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1327'. [ 202.630745][ T9906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1327'. [ 202.644505][ T9906] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1327'. [ 202.866181][ T9910] netlink: 'syz.0.1328': attribute type 10 has an invalid length. [ 202.876994][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.884799][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.910366][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.917609][ T9910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.925977][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.933277][ T9910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.972701][ T9910] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 203.174018][ T9918] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1331'. [ 203.352397][ T9921] tipc: Started in network mode [ 203.368322][ T9921] tipc: Node identity 4a80c69ac134, cluster identity 4711 [ 203.382676][ T9921] tipc: Enabled bearer , priority 0 [ 203.406671][ T9920] syzkaller0: MTU too low for tipc bearer [ 203.412730][ T9920] tipc: Disabling bearer [ 204.624976][ T9931] __nla_validate_parse: 1 callbacks suppressed [ 204.624997][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 204.714764][ T9931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1336'. [ 205.029507][ T9945] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1342'. [ 205.163445][ T9950] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 205.332959][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.342664][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.351219][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.360265][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.368294][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.461891][ T9963] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1350'. [ 205.774849][ T9973] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 205.821357][ T9973] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1351'. [ 205.833058][ T9973] net_ratelimit: 15 callbacks suppressed [ 205.833079][ T9973] netlink: zone id is out of range [ 205.844924][ T9973] netlink: zone id is out of range [ 205.850083][ T9973] netlink: zone id is out of range [ 205.855322][ T9973] netlink: zone id is out of range [ 205.860503][ T9973] netlink: zone id is out of range [ 205.866020][ T9973] netlink: get zone limit has 8 unknown bytes [ 206.180284][ T9991] netlink: 'syz.2.1358': attribute type 10 has an invalid length. [ 206.190270][ T9991] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.208958][ T9992] netlink: 'syz.2.1358': attribute type 10 has an invalid length. [ 206.236820][ T9954] chnl_net:caif_netlink_parms(): no params data found [ 206.290902][ T9994] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1359'. [ 206.306465][ T9992] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 206.506940][ T9954] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.526352][ T9980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 206.554712][ T9954] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.562317][ T9954] bridge_slave_0: entered allmulticast mode [ 206.571082][ T9954] bridge_slave_0: entered promiscuous mode [ 206.581132][ T9954] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.588951][ T9954] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.600363][ T9954] bridge_slave_1: entered allmulticast mode [ 206.622108][ T9954] bridge_slave_1: entered promiscuous mode [ 206.769134][ T9954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.779120][T10008] ipt_REJECT: TCP_RESET invalid for non-tcp [ 206.811273][ T9954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.823608][T10008] netlink: 'syz.4.1364': attribute type 12 has an invalid length. [ 206.832889][T10008] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1364'. [ 206.978791][T10013] vlan1: entered allmulticast mode [ 206.984057][T10013] veth0_vlan: entered allmulticast mode [ 207.030168][ T9954] team0: Port device team_slave_0 added [ 207.090848][ T9954] team0: Port device team_slave_1 added [ 207.106949][T10024] netlink: 'syz.1.1368': attribute type 10 has an invalid length. [ 207.180091][T10024] syz_tun: entered promiscuous mode [ 207.241089][T10024] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 207.341771][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.359457][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.402846][ T9954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.415532][ T5845] Bluetooth: hci0: command tx timeout [ 207.441654][ T9954] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.474951][ T9954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.554669][ T9954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.646839][T10044] delete_channel: no stack [ 207.793548][ T9954] hsr_slave_0: entered promiscuous mode [ 207.804346][ T9954] hsr_slave_1: entered promiscuous mode [ 207.835340][ T9954] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.842957][ T9954] Cannot create hsr debugfs directory [ 208.210610][T10066] netlink: 'syz.4.1382': attribute type 26 has an invalid length. [ 208.219066][T10064] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1381'. [ 208.490538][T10077] Bluetooth: MGMT ver 1.23 [ 208.508035][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1387'. [ 208.519666][ T9954] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.699224][ T9954] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.793637][T10095] netlink: 'syz.2.1391': attribute type 1 has an invalid length. [ 208.834953][T10095] netlink: 'syz.2.1391': attribute type 11 has an invalid length. [ 208.900887][ T9954] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.930227][T10101] tc_dump_action: action bad kind [ 209.066461][ T9954] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.209112][T10117] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 209.486418][ T5845] Bluetooth: hci0: command 0x041b tx timeout [ 209.494183][ T9954] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.551418][ T9954] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 209.601584][ T9954] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 209.724328][T10135] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.737911][T10135] bond0: (slave bond1): Enslaving as an active interface with an up link [ 209.747503][ T9954] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 209.841239][T10135] __nla_validate_parse: 10 callbacks suppressed [ 209.841262][T10135] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1409'. [ 209.889932][T10135] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1409'. [ 210.216733][ T9954] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.261282][T10155] netlink: 'syz.4.1414': attribute type 1 has an invalid length. [ 210.304298][T10155] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1414'. [ 210.317583][ T9954] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.392507][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.399775][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.447406][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.454667][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.677078][T10165] netlink: zone id is out of range [ 210.965305][T10177] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 211.021960][T10177] batman_adv: batadv0: Adding interface: dummy0 [ 211.039887][T10177] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.092337][T10177] batman_adv: batadv0: Interface activated: dummy0 [ 211.185685][T10182] net_ratelimit: 14 callbacks suppressed [ 211.185708][T10182] batadv0: mtu less than device minimum [ 211.216061][T10182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.228467][T10182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.240499][T10182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.252481][T10182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.264555][T10182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.276606][T10182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.288628][T10182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.300700][T10182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.312684][T10182] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 211.393827][ T9954] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.577743][ T5845] Bluetooth: hci0: command 0x041b tx timeout [ 211.723948][ T9954] veth0_vlan: entered promiscuous mode [ 211.758655][ T9954] veth1_vlan: entered promiscuous mode [ 211.839115][ T9954] veth0_macvtap: entered promiscuous mode [ 211.860355][ T9954] veth1_macvtap: entered promiscuous mode [ 211.913697][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.943227][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.963502][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.980933][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.992361][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.017611][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.035371][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.067632][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.093530][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.104365][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.114976][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.128383][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.149509][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.160297][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.172770][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.187366][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.211226][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.222646][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.233216][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.243999][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.254189][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.265136][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.285859][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.314023][T10218] tipc: Enabling of bearer rejected, failed to enable media [ 212.354025][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.367408][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.381176][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.391975][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.402176][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.412932][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.424014][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.437008][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.447399][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.458109][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.468049][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.482972][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.492913][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.503515][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.513709][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.524260][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.536188][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.547840][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.557824][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.568346][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.578278][ T9954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.591810][ T9954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.616177][ T9954] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.668709][ T9954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.704760][ T9954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.713531][ T9954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.734360][ T9954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.896745][T10229] syz_tun: entered allmulticast mode [ 213.000031][T10228] syz_tun: left allmulticast mode [ 213.046483][ T7158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.054330][ T7158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.219609][T10239] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1439'. [ 213.229209][ T7158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.239934][T10243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1442'. [ 213.248761][T10241] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1443'. [ 213.264612][ T7158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.793911][T10269] syz_tun: entered allmulticast mode [ 213.827619][T10268] syz_tun: left allmulticast mode [ 215.185249][T10277] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 215.328408][T10281] SET target dimension over the limit! [ 215.767385][T10295] netlink: 'syz.1.1464': attribute type 11 has an invalid length. [ 215.776620][T10295] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1464'. [ 215.814604][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.824068][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.827725][T10300] FAULT_INJECTION: forcing a failure. [ 215.827725][T10300] name failslab, interval 1, probability 0, space 0, times 0 [ 215.846975][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.898332][ T5151] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.911552][T10300] CPU: 1 UID: 0 PID: 10300 Comm: syz.2.1465 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 215.911586][T10300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.911600][T10300] Call Trace: [ 215.911608][T10300] [ 215.911617][T10300] dump_stack_lvl+0x241/0x360 [ 215.911657][T10300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.911688][T10300] ? __pfx__printk+0x10/0x10 [ 215.911731][T10300] should_fail_ex+0x424/0x570 [ 215.911760][T10300] should_failslab+0xac/0x100 [ 215.911796][T10300] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 215.911827][T10300] ? __alloc_skb+0x1c2/0x480 [ 215.911844][T10300] ? kmem_cache_alloc_node_noprof+0x24e/0x3b0 [ 215.911879][T10300] __alloc_skb+0x1c2/0x480 [ 215.911904][T10300] ? __build_skb_around+0x247/0x3d0 [ 215.911941][T10300] ? __pfx___alloc_skb+0x10/0x10 [ 215.911958][T10300] ? __alloc_skb+0x298/0x480 [ 215.911989][T10300] create_monitor_ctrl_event+0x35/0x4d0 [ 215.912015][T10300] ? skb_put+0x114/0x1f0 [ 215.912040][T10300] mgmt_cmd_status+0x1d4/0x4d0 [ 215.912073][T10300] hci_mgmt_cmd+0x9ce/0xf20 [ 215.912119][T10300] hci_sock_sendmsg+0x7b8/0x11f0 [ 215.912153][T10300] ? __pfx_aa_sk_perm+0x10/0x10 [ 215.912181][T10300] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 215.912209][T10300] ? __pfx_aa_file_perm+0x10/0x10 [ 215.912238][T10300] ? aa_sock_msg_perm+0x91/0x160 [ 215.912274][T10300] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 215.912298][T10300] __sock_sendmsg+0x221/0x270 [ 215.912331][T10300] sock_write_iter+0x2d9/0x3f0 [ 215.912360][T10300] ? __pfx_sock_write_iter+0x10/0x10 [ 215.912401][T10300] ? bpf_lsm_file_permission+0x9/0x10 [ 215.912456][T10300] vfs_write+0x70f/0xd10 [ 215.912489][T10300] ? __pfx_sock_write_iter+0x10/0x10 [ 215.912517][T10300] ? __pfx_vfs_write+0x10/0x10 [ 215.912546][T10300] ? __fget_files+0x2a/0x420 [ 215.912570][T10300] ? __fget_files+0x2a/0x420 [ 215.912600][T10300] ksys_write+0x19d/0x2d0 [ 215.912628][T10300] ? __pfx_ksys_write+0x10/0x10 [ 215.912659][T10300] ? do_syscall_64+0xb6/0x230 [ 215.912690][T10300] do_syscall_64+0xf3/0x230 [ 215.912715][T10300] ? clear_bhb_loop+0x45/0xa0 [ 215.912741][T10300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.912762][T10300] RIP: 0033:0x7f99efd8d169 [ 215.912780][T10300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.912798][T10300] RSP: 002b:00007f99f0b4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 215.912821][T10300] RAX: ffffffffffffffda RBX: 00007f99effa5fa0 RCX: 00007f99efd8d169 [ 215.912836][T10300] RDX: 0000000000000007 RSI: 0000200000000340 RDI: 0000000000000004 [ 215.912849][T10300] RBP: 00007f99f0b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 215.912862][T10300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.912875][T10300] R13: 0000000000000000 R14: 00007f99effa5fa0 R15: 00007ffe4d9464c8 [ 215.912915][T10300] [ 216.220942][ T5151] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 216.490272][T10308] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1467'. [ 216.531152][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1467'. [ 216.565708][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1467'. [ 216.595150][T10315] net_ratelimit: 25 callbacks suppressed [ 216.595171][T10315] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 216.646375][T10317] netlink: zone id is out of range [ 216.651549][T10317] netlink: zone id is out of range [ 216.657317][T10317] netlink: zone id is out of range [ 216.662466][T10317] netlink: zone id is out of range [ 216.671814][T10317] netlink: zone id is out of range [ 216.683299][T10317] netlink: zone id is out of range [ 216.694165][T10317] netlink: zone id is out of range [ 216.699683][T10317] netlink: zone id is out of range [ 216.706251][T10317] netlink: zone id is out of range [ 216.712342][T10317] FAULT_INJECTION: forcing a failure. [ 216.712342][T10317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.725863][T10317] CPU: 1 UID: 0 PID: 10317 Comm: syz.1.1469 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 216.725892][T10317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.725906][T10317] Call Trace: [ 216.725914][T10317] [ 216.725922][T10317] dump_stack_lvl+0x241/0x360 [ 216.725961][T10317] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.725991][T10317] ? __pfx__printk+0x10/0x10 [ 216.726036][T10317] should_fail_ex+0x424/0x570 [ 216.726064][T10317] _copy_from_user+0x2d/0xb0 [ 216.726095][T10317] kstrtouint_from_user+0xce/0x1a0 [ 216.726125][T10317] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 216.726154][T10317] ? __lock_acquire+0xad5/0xd80 [ 216.726189][T10317] proc_fail_nth_write+0xac/0x2d0 [ 216.726212][T10317] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 216.726242][T10317] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.726271][T10317] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 216.726295][T10317] vfs_write+0x2bc/0xd10 [ 216.726325][T10317] ? fdget_pos+0x247/0x310 [ 216.726349][T10317] ? __pfx_vfs_write+0x10/0x10 [ 216.726377][T10317] ? __fget_files+0x2a/0x420 [ 216.726398][T10317] ? __fget_files+0x39d/0x420 [ 216.726415][T10317] ? __fget_files+0x2a/0x420 [ 216.726445][T10317] ksys_write+0x19d/0x2d0 [ 216.726473][T10317] ? __pfx_ksys_write+0x10/0x10 [ 216.726504][T10317] ? do_syscall_64+0xb6/0x230 [ 216.726533][T10317] do_syscall_64+0xf3/0x230 [ 216.726558][T10317] ? clear_bhb_loop+0x45/0xa0 [ 216.726583][T10317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.726603][T10317] RIP: 0033:0x7f2d5238bc1f [ 216.726621][T10317] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 216.726646][T10317] RSP: 002b:00007f2d53176030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 216.726668][T10317] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2d5238bc1f [ 216.726683][T10317] RDX: 0000000000000001 RSI: 00007f2d531760a0 RDI: 0000000000000005 [ 216.726696][T10317] RBP: 00007f2d53176090 R08: 0000000000000000 R09: 0000000000000000 [ 216.726709][T10317] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 216.726721][T10317] R13: 0000000000000000 R14: 00007f2d525a5fa0 R15: 00007ffc968ffe68 [ 216.726755][T10317] [ 216.998977][ T5151] Bluetooth: hci1: command 0x0406 tx timeout [ 216.999415][T10270] Bluetooth: hci3: command 0x0406 tx timeout [ 217.005901][ T5151] Bluetooth: hci2: command 0x0406 tx timeout [ 217.160409][T10298] chnl_net:caif_netlink_parms(): no params data found [ 217.211833][T10330] Bluetooth: MGMT ver 1.23 [ 217.221263][T10330] FAULT_INJECTION: forcing a failure. [ 217.221263][T10330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.235662][T10330] CPU: 1 UID: 0 PID: 10330 Comm: syz.1.1476 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 217.235690][T10330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.235703][T10330] Call Trace: [ 217.235710][T10330] [ 217.235719][T10330] dump_stack_lvl+0x241/0x360 [ 217.235757][T10330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.235786][T10330] ? __pfx__printk+0x10/0x10 [ 217.235827][T10330] should_fail_ex+0x424/0x570 [ 217.235854][T10330] _copy_to_user+0x31/0xb0 [ 217.235885][T10330] simple_read_from_buffer+0xc4/0x170 [ 217.235919][T10330] proc_fail_nth_read+0x1ef/0x260 [ 217.235944][T10330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.235968][T10330] ? rw_verify_area+0x246/0x630 [ 217.235990][T10330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 217.236013][T10330] vfs_read+0x21f/0xb90 [ 217.236041][T10330] ? __pfx___mutex_lock+0x10/0x10 [ 217.236067][T10330] ? __pfx_vfs_read+0x10/0x10 [ 217.236094][T10330] ? __fget_files+0x2a/0x420 [ 217.236114][T10330] ? __fget_files+0x39d/0x420 [ 217.236130][T10330] ? __fget_files+0x2a/0x420 [ 217.236158][T10330] ksys_read+0x19d/0x2d0 [ 217.236183][T10330] ? __pfx_ksys_read+0x10/0x10 [ 217.236213][T10330] ? do_syscall_64+0xb6/0x230 [ 217.236241][T10330] do_syscall_64+0xf3/0x230 [ 217.236266][T10330] ? clear_bhb_loop+0x45/0xa0 [ 217.236290][T10330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.236310][T10330] RIP: 0033:0x7f2d5238bb7c [ 217.236328][T10330] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 217.236345][T10330] RSP: 002b:00007f2d53176030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 217.236367][T10330] RAX: ffffffffffffffda RBX: 00007f2d525a5fa0 RCX: 00007f2d5238bb7c [ 217.236381][T10330] RDX: 000000000000000f RSI: 00007f2d531760a0 RDI: 0000000000000003 [ 217.236394][T10330] RBP: 00007f2d53176090 R08: 0000000000000000 R09: 0000000000000000 [ 217.236406][T10330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.236418][T10330] R13: 0000000000000000 R14: 00007f2d525a5fa0 R15: 00007ffc968ffe68 [ 217.236450][T10330] [ 217.629270][T10339] TCP: TCP_TX_DELAY enabled [ 217.635812][T10339] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1479'. [ 217.831781][T10350] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1481'. [ 217.866720][T10298] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.888388][T10298] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.908250][T10298] bridge_slave_0: entered allmulticast mode [ 217.920604][T10298] bridge_slave_0: entered promiscuous mode [ 217.926782][T10355] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1482'. [ 217.943853][T10298] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.951621][T10298] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.959278][T10298] bridge_slave_1: entered allmulticast mode [ 218.001545][T10298] bridge_slave_1: entered promiscuous mode [ 218.200595][T10298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.225818][T10368] netlink: 292 bytes leftover after parsing attributes in process `syz.2.1488'. [ 218.241774][T10298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.337003][T10298] team0: Port device team_slave_0 added [ 218.364998][ T5844] Bluetooth: hci0: command tx timeout [ 218.381355][T10298] team0: Port device team_slave_1 added [ 218.441785][T10298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.449992][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.514713][T10298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.540477][T10298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.558370][T10298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.585289][T10298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.763953][T10385] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 218.792910][T10298] hsr_slave_0: entered promiscuous mode [ 218.805796][T10298] hsr_slave_1: entered promiscuous mode [ 218.822692][T10298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.839016][T10385] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1494'. [ 218.842705][T10298] Cannot create hsr debugfs directory [ 219.029911][T10392] netlink: 'syz.1.1495': attribute type 10 has an invalid length. [ 219.141705][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1495'. [ 219.220385][T10373] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 219.328643][T10298] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.385450][T10403] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 219.493469][T10298] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.527895][T10408] sctp: [Deprecated]: syz.0.1500 (pid 10408) Use of int in max_burst socket option deprecated. [ 219.527895][T10408] Use struct sctp_assoc_value instead [ 219.651372][T10298] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.790437][T10298] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.235093][T10298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.297228][T10298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.328590][T10298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.345323][T10298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.407057][T10443] sctp: [Deprecated]: syz.1.1515 (pid 10443) Use of int in max_burst socket option deprecated. [ 220.407057][T10443] Use struct sctp_assoc_value instead [ 220.445054][ T5844] Bluetooth: hci0: command tx timeout [ 220.648032][T10448] tipc: Enabled bearer , priority 0 [ 220.657863][T10448] syzkaller0: entered promiscuous mode [ 220.664050][T10448] syzkaller0: entered allmulticast mode [ 220.727075][T10298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.763577][T10448] tipc: Resetting bearer [ 220.818310][T10448] tipc: Disabling bearer [ 220.867485][T10298] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.908061][ T2904] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.915311][ T2904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.990343][ T2904] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.997595][ T2904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.077095][T10298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 221.104427][T10467] __nla_validate_parse: 2 callbacks suppressed [ 221.104450][T10467] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1522'. [ 221.123526][T10298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.156889][T10469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1523'. [ 221.330590][T10478] Cannot find del_set index 17 as target [ 221.457088][T10485] sctp: [Deprecated]: syz.2.1529 (pid 10485) Use of int in max_burst socket option deprecated. [ 221.457088][T10485] Use struct sctp_assoc_value instead [ 221.544474][T10489] FAULT_INJECTION: forcing a failure. [ 221.544474][T10489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 221.557273][T10298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.594136][T10489] CPU: 0 UID: 0 PID: 10489 Comm: syz.1.1531 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 221.594174][T10489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 221.594187][T10489] Call Trace: [ 221.594195][T10489] [ 221.594204][T10489] dump_stack_lvl+0x241/0x360 [ 221.594243][T10489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.594274][T10489] ? __pfx__printk+0x10/0x10 [ 221.594318][T10489] should_fail_ex+0x424/0x570 [ 221.594346][T10489] _copy_from_user+0x2d/0xb0 [ 221.594377][T10489] copy_msghdr_from_user+0xb3/0x580 [ 221.594425][T10489] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 221.594451][T10489] ? __fget_files+0x2a/0x420 [ 221.594474][T10489] ? __fget_files+0x2a/0x420 [ 221.594503][T10489] __sys_sendmsg+0x20a/0x360 [ 221.594530][T10489] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.594613][T10489] ? do_syscall_64+0xb6/0x230 [ 221.594642][T10489] do_syscall_64+0xf3/0x230 [ 221.594668][T10489] ? clear_bhb_loop+0x45/0xa0 [ 221.594693][T10489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.594714][T10489] RIP: 0033:0x7f2d5238d169 [ 221.594732][T10489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.594749][T10489] RSP: 002b:00007f2d53176038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.594773][T10489] RAX: ffffffffffffffda RBX: 00007f2d525a5fa0 RCX: 00007f2d5238d169 [ 221.594788][T10489] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 221.594801][T10489] RBP: 00007f2d53176090 R08: 0000000000000000 R09: 0000000000000000 [ 221.594814][T10489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.594827][T10489] R13: 0000000000000000 R14: 00007f2d525a5fa0 R15: 00007ffc968ffe68 [ 221.594859][T10489] [ 221.811168][T10493] sctp: [Deprecated]: syz.4.1532 (pid 10493) Use of int in max_burst socket option deprecated. [ 221.811168][T10493] Use struct sctp_assoc_value instead [ 221.967635][T10298] veth0_vlan: entered promiscuous mode [ 222.025268][T10499] net_ratelimit: 46 callbacks suppressed [ 222.025289][T10499] dccp_invalid_packet: P.Data Offset(0) too small [ 222.044340][T10298] veth1_vlan: entered promiscuous mode [ 222.173062][T10503] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1536'. [ 222.186388][T10298] veth0_macvtap: entered promiscuous mode [ 222.228985][T10298] veth1_macvtap: entered promiscuous mode [ 222.337058][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.365048][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.389811][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.417129][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.429975][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.440709][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.474643][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.491667][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.504782][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.520869][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.524876][ T5844] Bluetooth: hci0: command 0x040f tx timeout [ 222.531176][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.549434][T10523] xt_l2tp: invalid flags combination: 4 [ 222.566162][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.576534][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.587325][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.597741][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.609310][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.622133][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.632808][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.642737][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.653661][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.667962][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.679485][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.690037][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.701696][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.716521][T10298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.761082][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.772847][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.797833][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.844211][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.859839][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.881675][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.905757][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.925729][T10532] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1545'. [ 222.934269][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.961732][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.983150][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.005609][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.029197][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.047000][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.058048][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.081429][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.133905][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.137926][T10537] sctp: [Deprecated]: syz.4.1549 (pid 10537) Use of int in max_burst socket option deprecated. [ 223.137926][T10537] Use struct sctp_assoc_value instead [ 223.155809][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.171887][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.182073][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.192897][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.203057][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.215338][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.228658][T10298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.241769][T10298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.272150][T10298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.369587][T10298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.392666][T10542] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1551'. [ 223.402333][T10298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.411705][T10298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.421006][T10298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.721051][T10558] syz_tun: entered allmulticast mode [ 223.773644][ T7266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.804947][ T7266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.917047][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.937731][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.962294][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 224.197628][T10577] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1562'. [ 224.220693][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1563'. [ 224.263814][T10579] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1563'. [ 224.385402][T10582] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 226.142908][T10604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1572'. [ 226.164749][T10604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1572'. [ 226.332288][T10610] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1575'. [ 226.810007][T10632] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 227.046796][T10641] netlink: 'syz.4.1584': attribute type 1 has an invalid length. [ 227.110995][T10641] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.1584'. [ 227.112118][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.144609][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.154846][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.164260][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.176398][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.311843][T10652] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 227.612095][T10644] chnl_net:caif_netlink_parms(): no params data found [ 227.624024][T10667] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1591'. [ 227.624791][T10668] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1591'. [ 227.650078][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 227.683202][T10666] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1589'. [ 227.781619][T10674] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 227.824082][T10672] : renamed from bond0 (while UP) [ 228.000400][T10683] netlink: 'syz.0.1597': attribute type 64 has an invalid length. [ 228.004622][T10682] dccp_v6_rcv: dropped packet with invalid checksum [ 228.025117][T10683] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1597'. [ 228.191429][T10696] xt_hashlimit: size too large, truncated to 1048576 [ 228.256905][T10701] FAULT_INJECTION: forcing a failure. [ 228.256905][T10701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.334818][T10701] CPU: 0 UID: 0 PID: 10701 Comm: syz.4.1601 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 228.334860][T10701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.334873][T10701] Call Trace: [ 228.334881][T10701] [ 228.334890][T10701] dump_stack_lvl+0x241/0x360 [ 228.334929][T10701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.334959][T10701] ? __pfx__printk+0x10/0x10 [ 228.335003][T10701] should_fail_ex+0x424/0x570 [ 228.335031][T10701] _copy_from_user+0x2d/0xb0 [ 228.335062][T10701] addrconf_del_ifaddr+0xcd/0x1d0 [ 228.335088][T10701] ? __pfx_addrconf_del_ifaddr+0x10/0x10 [ 228.335119][T10701] ? kasan_quarantine_put+0xdc/0x230 [ 228.335142][T10701] ? lockdep_hardirqs_on+0x9d/0x150 [ 228.335171][T10701] inet6_ioctl+0x10f/0x280 [ 228.335198][T10701] ? __pfx_inet6_ioctl+0x10/0x10 [ 228.335225][T10701] ? tomoyo_path_number_perm+0x684/0x790 [ 228.335257][T10701] ? tomoyo_path_number_perm+0x215/0x790 [ 228.335291][T10701] sock_do_ioctl+0x15a/0x490 [ 228.335330][T10701] ? __pfx_sock_do_ioctl+0x10/0x10 [ 228.335361][T10701] ? __lock_acquire+0xad5/0xd80 [ 228.335397][T10701] sock_ioctl+0x644/0x900 [ 228.335426][T10701] ? __pfx_sock_ioctl+0x10/0x10 [ 228.335448][T10701] ? __fget_files+0x2a/0x420 [ 228.335467][T10701] ? __fget_files+0x2a/0x420 [ 228.335489][T10701] ? __fget_files+0x2a/0x420 [ 228.335513][T10701] ? __pfx_sock_ioctl+0x10/0x10 [ 228.335540][T10701] __se_sys_ioctl+0xf1/0x160 [ 228.335569][T10701] do_syscall_64+0xf3/0x230 [ 228.335593][T10701] ? clear_bhb_loop+0x45/0xa0 [ 228.335616][T10701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.335636][T10701] RIP: 0033:0x7f486af8d169 [ 228.335654][T10701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.335672][T10701] RSP: 002b:00007f486be66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.335694][T10701] RAX: ffffffffffffffda RBX: 00007f486b1a6080 RCX: 00007f486af8d169 [ 228.335709][T10701] RDX: 0000200000000000 RSI: 0000000000008936 RDI: 0000000000000004 [ 228.335723][T10701] RBP: 00007f486be66090 R08: 0000000000000000 R09: 0000000000000000 [ 228.335736][T10701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.335748][T10701] R13: 0000000000000001 R14: 00007f486b1a6080 R15: 00007ffd2e3adcb8 [ 228.335780][T10701] [ 228.812140][T10696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1598'. [ 229.124064][T10644] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.152312][T10644] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.178628][T10644] bridge_slave_0: entered allmulticast mode [ 229.201503][T10644] bridge_slave_0: entered promiscuous mode [ 229.211028][T10644] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.225346][T10644] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.232691][T10644] bridge_slave_1: entered allmulticast mode [ 229.246413][ T5845] Bluetooth: hci0: command tx timeout [ 229.268491][T10644] bridge_slave_1: entered promiscuous mode [ 229.283631][T10726] netlink: 'syz.1.1609': attribute type 1 has an invalid length. [ 229.431795][T10644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.446519][T10644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.622141][T10644] team0: Port device team_slave_0 added [ 229.631007][T10739] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 229.670518][T10644] team0: Port device team_slave_1 added [ 229.774843][T10644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.781852][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.838963][T10644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.870492][T10644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.904029][T10644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.951146][T10644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.158359][T10644] hsr_slave_0: entered promiscuous mode [ 230.174162][T10644] hsr_slave_1: entered promiscuous mode [ 230.191115][T10644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.213768][T10644] Cannot create hsr debugfs directory [ 230.388519][T10770] sctp: [Deprecated]: syz.1.1626 (pid 10770) Use of int in max_burst socket option deprecated. [ 230.388519][T10770] Use struct sctp_assoc_value instead [ 230.792964][T10786] sctp: [Deprecated]: syz.4.1629 (pid 10786) Use of int in max_burst socket option deprecated. [ 230.792964][T10786] Use struct sctp_assoc_value instead [ 230.829471][T10787] 1ªÃøÂFNð¡: renamed from 00ªÃøÂFNð¡ (while UP) [ 230.904806][T10793] FAULT_INJECTION: forcing a failure. [ 230.904806][T10793] name failslab, interval 1, probability 0, space 0, times 0 [ 230.917541][T10793] CPU: 1 UID: 0 PID: 10793 Comm: syz.0.1631 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 230.917571][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.917584][T10793] Call Trace: [ 230.917593][T10793] [ 230.917602][T10793] dump_stack_lvl+0x241/0x360 [ 230.917641][T10793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.917673][T10793] ? __pfx__printk+0x10/0x10 [ 230.917716][T10793] should_fail_ex+0x424/0x570 [ 230.917747][T10793] ? __pfx_ip6_dst_gc+0x10/0x10 [ 230.917771][T10793] should_failslab+0xac/0x100 [ 230.917803][T10793] kmem_cache_alloc_noprof+0x78/0x390 [ 230.917832][T10793] ? dst_alloc+0x12b/0x190 [ 230.917856][T10793] ? __pfx_ip6_dst_gc+0x10/0x10 [ 230.917879][T10793] dst_alloc+0x12b/0x190 [ 230.917907][T10793] ip6_create_rt_rcu+0x2b8/0x5f0 [ 230.917936][T10793] ? __pfx_ip6_create_rt_rcu+0x10/0x10 [ 230.917973][T10793] ip6_pol_route_lookup+0xef6/0x1130 [ 230.918015][T10793] ? ip6_pol_route_lookup+0x10d/0x1130 [ 230.918040][T10793] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 230.918066][T10793] ? rcuref_put+0x1e7/0x240 [ 230.918087][T10793] ? __pfx_rcuref_put+0x10/0x10 [ 230.918124][T10793] ? dst_release+0x79/0x1b0 [ 230.918150][T10793] fib6_rule_lookup+0x6c6/0x7a0 [ 230.918179][T10793] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 230.918210][T10793] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 230.918237][T10793] ? __lock_acquire+0xad5/0xd80 [ 230.918259][T10793] ? make_kuid+0x1ff/0x770 [ 230.918284][T10793] ? __ipv6_addr_type+0x159/0x2f0 [ 230.918319][T10793] ? nft_fib6_flowi_init+0x2ce/0x4e0 [ 230.918348][T10793] nft_fib6_eval+0x787/0xdb0 [ 230.918382][T10793] ? __pfx_nft_fib6_eval+0x10/0x10 [ 230.918408][T10793] ? __kernel_text_address+0xd/0x40 [ 230.918428][T10793] ? unwind_get_return_address+0x4d/0x90 [ 230.918472][T10793] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.918511][T10793] nft_do_chain+0x4b2/0x1db0 [ 230.918566][T10793] ? ip6t_do_table+0x16c1/0x18c0 [ 230.918600][T10793] ? __pfx_nft_do_chain+0x10/0x10 [ 230.918678][T10793] ? nf_nat_ipv6_fn+0x129/0x3f0 [ 230.918711][T10793] nft_do_chain_inet+0x41f/0x6b0 [ 230.918748][T10793] ? nf_nat_ipv6_in+0xf0/0x2c0 [ 230.918773][T10793] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 230.918806][T10793] ? nf_nat_ipv6_in+0x202/0x2c0 [ 230.918833][T10793] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 230.918861][T10793] ? ip_sabotage_in+0x55/0x290 [ 230.918889][T10793] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 230.918919][T10793] nf_hook_slow+0xc8/0x220 [ 230.918952][T10793] NF_HOOK+0x29b/0x450 [ 230.918980][T10793] ? skb_orphan+0x4b/0xd0 [ 230.919013][T10793] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 230.919042][T10793] ? NF_HOOK+0x9e/0x450 [ 230.919071][T10793] ? __pfx_NF_HOOK+0x10/0x10 [ 230.919105][T10793] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 230.919148][T10793] __netif_receive_skb+0x1ef/0x670 [ 230.919184][T10793] ? __pfx___netif_receive_skb+0x10/0x10 [ 230.919224][T10793] ? netif_receive_skb+0x133/0x890 [ 230.919249][T10793] ? netif_receive_skb+0x133/0x890 [ 230.919276][T10793] netif_receive_skb+0x1ea/0x890 [ 230.919301][T10793] ? tun_rx_batched+0x14b/0x8d0 [ 230.919320][T10793] ? __pfx_netif_receive_skb+0x10/0x10 [ 230.919357][T10793] ? tun_rx_batched+0x14b/0x8d0 [ 230.919376][T10793] tun_rx_batched+0x1a4/0x8d0 [ 230.919401][T10793] ? __lock_acquire+0xad5/0xd80 [ 230.919426][T10793] ? __pfx_tun_rx_batched+0x10/0x10 [ 230.919464][T10793] ? tun_get_user+0x2a99/0x47c0 [ 230.919494][T10793] ? tun_get_user+0x2a99/0x47c0 [ 230.919525][T10793] tun_get_user+0x2fec/0x47c0 [ 230.919559][T10793] ? tun_get_user+0x852/0x47c0 [ 230.919607][T10793] ? aa_file_perm+0x139/0xf60 [ 230.919639][T10793] ? aa_file_perm+0x3f1/0xf60 [ 230.919669][T10793] ? __pfx_tun_get_user+0x10/0x10 [ 230.919732][T10793] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 230.919777][T10793] ? tun_get+0x1e/0x2f0 [ 230.919806][T10793] ? tun_get+0x1e/0x2f0 [ 230.919835][T10793] ? tun_get+0x27d/0x2f0 [ 230.919868][T10793] tun_chr_write_iter+0x10d/0x1f0 [ 230.919905][T10793] vfs_write+0x70f/0xd10 [ 230.919940][T10793] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 230.919974][T10793] ? __pfx_vfs_write+0x10/0x10 [ 230.920002][T10793] ? __fget_files+0x2a/0x420 [ 230.920025][T10793] ? __fget_files+0x2a/0x420 [ 230.920056][T10793] ksys_write+0x19d/0x2d0 [ 230.920083][T10793] ? __pfx_ksys_write+0x10/0x10 [ 230.920115][T10793] ? do_syscall_64+0xb6/0x230 [ 230.920145][T10793] do_syscall_64+0xf3/0x230 [ 230.920171][T10793] ? clear_bhb_loop+0x45/0xa0 [ 230.920196][T10793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.920217][T10793] RIP: 0033:0x7f739518bc1f [ 230.920236][T10793] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 230.920255][T10793] RSP: 002b:00007f7395f3e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 230.920277][T10793] RAX: ffffffffffffffda RBX: 00007f73953a5fa0 RCX: 00007f739518bc1f [ 230.920293][T10793] RDX: 00000000000001c6 RSI: 0000200000000680 RDI: 00000000000000c8 [ 230.920307][T10793] RBP: 00007f7395f3e090 R08: 0000000000000000 R09: 0000000000000000 [ 230.920320][T10793] R10: 00000000000001c6 R11: 0000000000000293 R12: 0000000000000001 [ 230.920333][T10793] R13: 0000000000000001 R14: 00007f73953a5fa0 R15: 00007ffea40c1288 [ 230.920368][T10793] [ 230.920465][T10793] dccp_v6_rcv: dropped packet with invalid checksum [ 231.445461][ T5845] Bluetooth: hci0: command tx timeout [ 231.531094][T10644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.560645][T10800] netlink: zone id is out of range [ 231.594117][T10800] netlink: zone id is out of range [ 231.612222][T10800] netlink: zone id is out of range [ 231.624852][T10800] netlink: zone id is out of range [ 231.648393][T10800] netlink: zone id is out of range [ 231.666833][T10800] netlink: zone id is out of range [ 231.675064][T10800] netlink: zone id is out of range [ 231.696958][T10805] __nla_validate_parse: 10 callbacks suppressed [ 231.696984][T10805] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1634'. [ 231.701104][T10800] netlink: zone id is out of range [ 231.746021][T10644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.898960][T10812] bond0: (slave bond_slave_0): Releasing backup interface [ 231.975796][T10812] bond0: (slave bond_slave_1): Releasing backup interface [ 232.000924][T10820] sctp: [Deprecated]: syz.1.1640 (pid 10820) Use of int in max_burst socket option deprecated. [ 232.000924][T10820] Use struct sctp_assoc_value instead [ 232.043375][T10812] team0: Failed to send options change via netlink (err -105) [ 232.064462][T10812] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 232.076222][T10812] team0: Port device team_slave_0 removed [ 232.101870][T10812] team0: Failed to send options change via netlink (err -105) [ 232.131652][T10812] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 232.147518][T10812] team0: Port device team_slave_1 removed [ 232.154301][T10812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.163579][T10812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.176844][T10812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.196007][T10812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.230858][T10812] bond0: (slave bond1): Releasing backup interface [ 232.333221][T10644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.400604][T10816] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 232.626186][T10644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.682977][T10828] x_tables: duplicate entry at hook 1 [ 232.759976][T10833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1642'. [ 232.772341][T10833] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1642'. [ 232.792140][T10833] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1642'. [ 232.822753][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1642'. [ 232.975195][T10836] netlink: 'syz.1.1645': attribute type 1 has an invalid length. [ 233.005725][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 233.034403][T10836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1645'. [ 233.069013][T10644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 233.095731][T10842] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 233.104145][T10842] net_ratelimit: 7 callbacks suppressed [ 233.104161][T10842] dccp_v6_rcv: dropped packet with invalid checksum [ 233.138775][T10644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 233.170341][T10846] openvswitch: netlink: Message has 24 unknown bytes. [ 233.191136][T10644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.243815][T10644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.485502][ T5845] Bluetooth: hci0: command tx timeout [ 233.600300][T10644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.635464][T10861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1652'. [ 233.681521][T10644] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.715025][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.722384][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.790200][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.797477][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.895668][T10871] sctp: [Deprecated]: syz.4.1654 (pid 10871) Use of int in max_burst socket option deprecated. [ 233.895668][T10871] Use struct sctp_assoc_value instead [ 234.168261][T10885] dccp_v6_rcv: dropped packet with invalid checksum [ 234.261013][T10888] openvswitch: netlink: Message has 24 unknown bytes. [ 234.471232][T10644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.712067][T10644] veth0_vlan: entered promiscuous mode [ 234.720790][T10904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1665'. [ 234.747725][T10644] veth1_vlan: entered promiscuous mode [ 234.765894][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 234.802548][T10908] netlink: 'syz.2.1666': attribute type 3 has an invalid length. [ 234.895656][T10644] veth0_macvtap: entered promiscuous mode [ 234.928657][T10644] veth1_macvtap: entered promiscuous mode [ 234.988346][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.020606][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.040944][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.056209][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.066399][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.086877][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.100799][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.122815][T10916] sctp: [Deprecated]: syz.2.1671 (pid 10916) Use of int in max_burst socket option deprecated. [ 235.122815][T10916] Use struct sctp_assoc_value instead [ 235.145619][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.157110][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.169258][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.181211][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.191996][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.205620][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.234357][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.266001][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.278036][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.300132][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.323609][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.334467][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.345412][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.355538][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.367369][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.377563][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.389028][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.427420][T10644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.538648][T10926] openvswitch: netlink: Message has 24 unknown bytes. [ 235.548954][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.564829][ T5845] Bluetooth: hci0: command tx timeout [ 235.594575][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.604888][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.615462][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.627250][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.669503][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.694108][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.735618][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.756848][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.777742][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.787922][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.807884][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.834811][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.884884][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.947693][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 235.968342][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.979884][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.010585][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.021737][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.039355][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.050206][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.061076][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.072199][T10644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.083087][T10644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.099026][T10644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.451581][T10644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.474638][T10644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.483956][T10644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.492871][T10644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.773185][T10958] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 236.791593][T10959] Bluetooth: MGMT ver 1.23 [ 236.865615][ T6041] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.893886][ T6041] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.036618][ T7266] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.056554][ T7266] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.129461][T10968] bond0: entered promiscuous mode [ 237.178112][T10968] bond0: entered allmulticast mode [ 237.183835][T10968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.432741][T10968] bond0 (unregistering): Released all slaves [ 237.435525][T10984] __nla_validate_parse: 4 callbacks suppressed [ 237.435548][T10984] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1690'. [ 237.781111][T10990] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1691'. [ 237.914808][T11001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1695'. [ 238.031878][T11003] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 240.091907][T11032] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 240.141990][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1706'. [ 240.483903][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.493250][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.502203][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.510755][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.518816][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.160226][T11043] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 242.181181][T11045] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1711'. [ 242.195535][T11045] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1711'. [ 242.612324][ T5844] Bluetooth: hci0: command tx timeout [ 243.306560][T11047] chnl_net:caif_netlink_parms(): no params data found [ 243.322605][T11092] FAULT_INJECTION: forcing a failure. [ 243.322605][T11092] name failslab, interval 1, probability 0, space 0, times 0 [ 243.348363][T11093] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 243.374442][T11092] CPU: 0 UID: 0 PID: 11092 Comm: syz.4.1724 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 243.374481][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.374494][T11092] Call Trace: [ 243.374506][T11092] [ 243.374516][T11092] dump_stack_lvl+0x241/0x360 [ 243.374554][T11092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.374582][T11092] ? __pfx__printk+0x10/0x10 [ 243.374614][T11092] ? __lock_acquire+0xad5/0xd80 [ 243.374642][T11092] should_fail_ex+0x424/0x570 [ 243.374668][T11092] should_failslab+0xac/0x100 [ 243.374696][T11092] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 243.374723][T11092] ? __alloc_skb+0x1c2/0x480 [ 243.374739][T11092] ? trace_contention_end+0x3c/0x120 [ 243.374770][T11092] __alloc_skb+0x1c2/0x480 [ 243.374787][T11092] ? __lock_acquire+0xad5/0xd80 [ 243.374813][T11092] ? __pfx___alloc_skb+0x10/0x10 [ 243.374832][T11092] ? hci_sock_sendmsg+0x5e0/0x11f0 [ 243.374858][T11092] ? __pfx___mutex_lock+0x10/0x10 [ 243.374908][T11092] hci_mgmt_cmd+0x1c5/0xf20 [ 243.374952][T11092] hci_sock_sendmsg+0x7b8/0x11f0 [ 243.374986][T11092] ? __pfx_aa_sk_perm+0x10/0x10 [ 243.375014][T11092] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 243.375040][T11092] ? __pfx_aa_file_perm+0x10/0x10 [ 243.375069][T11092] ? aa_sock_msg_perm+0x91/0x160 [ 243.375104][T11092] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 243.375128][T11092] __sock_sendmsg+0x221/0x270 [ 243.375159][T11092] sock_write_iter+0x2d9/0x3f0 [ 243.375188][T11092] ? __pfx_sock_write_iter+0x10/0x10 [ 243.375227][T11092] ? bpf_lsm_file_permission+0x9/0x10 [ 243.375262][T11092] vfs_write+0x70f/0xd10 [ 243.375296][T11092] ? __pfx_sock_write_iter+0x10/0x10 [ 243.375323][T11092] ? __pfx_vfs_write+0x10/0x10 [ 243.375350][T11092] ? __fget_files+0x2a/0x420 [ 243.375373][T11092] ? __fget_files+0x2a/0x420 [ 243.375403][T11092] ksys_write+0x19d/0x2d0 [ 243.375429][T11092] ? __pfx_ksys_write+0x10/0x10 [ 243.375459][T11092] ? do_syscall_64+0xb6/0x230 [ 243.375494][T11092] do_syscall_64+0xf3/0x230 [ 243.375518][T11092] ? clear_bhb_loop+0x45/0xa0 [ 243.375543][T11092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.375564][T11092] RIP: 0033:0x7f486af8d169 [ 243.375583][T11092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.375601][T11092] RSP: 002b:00007f486be87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.375625][T11092] RAX: ffffffffffffffda RBX: 00007f486b1a5fa0 RCX: 00007f486af8d169 [ 243.375640][T11092] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000006 [ 243.375653][T11092] RBP: 00007f486be87090 R08: 0000000000000000 R09: 0000000000000000 [ 243.375667][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.375679][T11092] R13: 0000000000000000 R14: 00007f486b1a5fa0 R15: 00007ffd2e3adcb8 [ 243.375711][T11092] [ 243.748200][T11092] Bluetooth: MGMT ver 1.23 [ 243.851934][T11047] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.859271][T11047] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.866709][T11047] bridge_slave_0: entered allmulticast mode [ 243.874779][T11047] bridge_slave_0: entered promiscuous mode [ 243.883795][T11047] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.891257][T11047] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.899211][T11047] bridge_slave_1: entered allmulticast mode [ 243.907561][T11047] bridge_slave_1: entered promiscuous mode [ 243.963436][T11047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.964905][T11106] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1728'. [ 243.989483][T11047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.204102][T11047] team0: Port device team_slave_0 added [ 244.240676][T11047] team0: Port device team_slave_1 added [ 244.247598][T11117] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 244.281175][T11119] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1733'. [ 244.403830][T11122] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 244.470199][T11047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.498572][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.565821][T11047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.583300][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'. [ 244.594112][T11047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.601945][T11047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.685069][ T5844] Bluetooth: hci0: command tx timeout [ 244.699986][T11047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.767285][T11137] 8021q: VLANs not supported on vxcan1 [ 244.834228][T11047] hsr_slave_0: entered promiscuous mode [ 244.886966][T11047] hsr_slave_1: entered promiscuous mode [ 244.914093][T11047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.951615][T11047] Cannot create hsr debugfs directory [ 245.344444][T11165] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 245.546578][T11171] openvswitch: netlink: Key type 2822 is out of range max 32 [ 245.722982][T11047] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.791176][T11181] FAULT_INJECTION: forcing a failure. [ 245.791176][T11181] name failslab, interval 1, probability 0, space 0, times 0 [ 245.832376][T11181] CPU: 0 UID: 0 PID: 11181 Comm: syz.0.1750 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 245.832403][T11181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.832425][T11181] Call Trace: [ 245.832433][T11181] [ 245.832441][T11181] dump_stack_lvl+0x241/0x360 [ 245.832473][T11181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.832497][T11181] ? __pfx__printk+0x10/0x10 [ 245.832522][T11181] ? __lock_acquire+0xad5/0xd80 [ 245.832545][T11181] ? __pfx___might_resched+0x10/0x10 [ 245.832572][T11181] should_fail_ex+0x424/0x570 [ 245.832596][T11181] should_failslab+0xac/0x100 [ 245.832624][T11181] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 245.832653][T11181] ? __alloc_skb+0x1c2/0x480 [ 245.832668][T11181] ? __mutex_lock+0x380/0x10c0 [ 245.832698][T11181] __alloc_skb+0x1c2/0x480 [ 245.832723][T11181] ? __pfx___alloc_skb+0x10/0x10 [ 245.832743][T11181] ? get_current_settings+0x493/0x5a0 [ 245.832776][T11181] ? __pfx_get_current_settings+0x10/0x10 [ 245.832809][T11181] mgmt_cmd_complete+0x49/0x580 [ 245.832837][T11181] ? mgmt_pending_find+0x109/0x130 [ 245.832864][T11181] set_powered+0x3f7/0x640 [ 245.832900][T11181] ? __pfx_set_powered+0x10/0x10 [ 245.832930][T11181] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 245.832979][T11181] ? mgmt_init_hdev+0x453/0x470 [ 245.833012][T11181] hci_mgmt_cmd+0xa2e/0xf20 [ 245.833057][T11181] hci_sock_sendmsg+0x7b8/0x11f0 [ 245.833091][T11181] ? __pfx_aa_sk_perm+0x10/0x10 [ 245.833118][T11181] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 245.833144][T11181] ? __pfx_aa_file_perm+0x10/0x10 [ 245.833168][T11181] ? aa_sock_msg_perm+0x91/0x160 [ 245.833206][T11181] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 245.833229][T11181] __sock_sendmsg+0x221/0x270 [ 245.833259][T11181] sock_write_iter+0x2d9/0x3f0 [ 245.833289][T11181] ? __pfx_sock_write_iter+0x10/0x10 [ 245.833325][T11181] ? bpf_lsm_file_permission+0x9/0x10 [ 245.833360][T11181] vfs_write+0x70f/0xd10 [ 245.833393][T11181] ? __pfx_sock_write_iter+0x10/0x10 [ 245.833421][T11181] ? __pfx_vfs_write+0x10/0x10 [ 245.833449][T11181] ? __fget_files+0x2a/0x420 [ 245.833473][T11181] ? __fget_files+0x2a/0x420 [ 245.833504][T11181] ksys_write+0x19d/0x2d0 [ 245.833531][T11181] ? __pfx_ksys_write+0x10/0x10 [ 245.833561][T11181] ? do_syscall_64+0xb6/0x230 [ 245.833591][T11181] do_syscall_64+0xf3/0x230 [ 245.833617][T11181] ? clear_bhb_loop+0x45/0xa0 [ 245.833642][T11181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.833662][T11181] RIP: 0033:0x7f739518d169 [ 245.833681][T11181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.833699][T11181] RSP: 002b:00007f7395f3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 245.833722][T11181] RAX: ffffffffffffffda RBX: 00007f73953a5fa0 RCX: 00007f739518d169 [ 245.833737][T11181] RDX: 0000000000000007 RSI: 0000200000000040 RDI: 0000000000000006 [ 245.833751][T11181] RBP: 00007f7395f3e090 R08: 0000000000000000 R09: 0000000000000000 [ 245.833764][T11181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.833776][T11181] R13: 0000000000000000 R14: 00007f73953a5fa0 R15: 00007ffea40c1288 [ 245.833810][T11181] [ 246.187363][T11188] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1752'. [ 246.202160][T11047] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.237419][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1752'. [ 246.251294][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1752'. [ 246.388821][T11047] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.489589][T11168] syz.2.1746 (11168) used greatest stack depth: 18808 bytes left [ 246.597087][T11047] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.720839][T11206] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 246.766311][ T5844] Bluetooth: hci0: command tx timeout [ 246.926678][T11215] netlink: 'syz.0.1764': attribute type 1 has an invalid length. [ 246.954851][T11216] netlink: 'syz.0.1764': attribute type 1 has an invalid length. [ 246.980808][T11047] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 247.044158][T11047] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 247.117398][T11047] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 247.212871][T11047] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 247.250589][T11226] xt_CT: No such helper "snmp_trap" [ 247.629684][T11047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.661964][T11047] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.683999][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.691261][ T7268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.776351][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.783584][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.875130][T11252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 247.915624][T11254] FAULT_INJECTION: forcing a failure. [ 247.915624][T11254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.929891][T11254] CPU: 0 UID: 0 PID: 11254 Comm: syz.0.1777 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 247.929920][T11254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 247.929933][T11254] Call Trace: [ 247.929941][T11254] [ 247.929949][T11254] dump_stack_lvl+0x241/0x360 [ 247.929987][T11254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.930017][T11254] ? __pfx__printk+0x10/0x10 [ 247.930058][T11254] should_fail_ex+0x424/0x570 [ 247.930091][T11254] _copy_from_user+0x2d/0xb0 [ 247.930121][T11254] copy_msghdr_from_user+0xb3/0x580 [ 247.930154][T11254] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 247.930179][T11254] ? __fget_files+0x2a/0x420 [ 247.930202][T11254] ? __fget_files+0x2a/0x420 [ 247.930230][T11254] __sys_sendmsg+0x20a/0x360 [ 247.930266][T11254] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.930345][T11254] ? do_syscall_64+0xb6/0x230 [ 247.930373][T11254] do_syscall_64+0xf3/0x230 [ 247.930397][T11254] ? clear_bhb_loop+0x45/0xa0 [ 247.930423][T11254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.930443][T11254] RIP: 0033:0x7f739518d169 [ 247.930461][T11254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.930479][T11254] RSP: 002b:00007f7395f3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.930501][T11254] RAX: ffffffffffffffda RBX: 00007f73953a5fa0 RCX: 00007f739518d169 [ 247.930517][T11254] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 247.930529][T11254] RBP: 00007f7395f3e090 R08: 0000000000000000 R09: 0000000000000000 [ 247.930542][T11254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.930555][T11254] R13: 0000000000000000 R14: 00007f73953a5fa0 R15: 00007ffea40c1288 [ 247.930586][T11254] [ 247.942054][T11252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1778'. [ 248.157942][T11257] netlink: 'syz.0.1779': attribute type 21 has an invalid length. [ 248.170973][T11257] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1779'. [ 248.629530][T11278] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1785'. [ 248.770263][ T5884] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 248.770284][ T5884] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.810083][T11290] syzkaller1: entered promiscuous mode [ 248.816025][T11290] syzkaller1: entered allmulticast mode [ 248.846335][ T5844] Bluetooth: hci0: command tx timeout [ 248.867071][T11047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.919264][T11290] netlink: 'syz.4.1788': attribute type 10 has an invalid length. [ 248.989943][T11290] team0: Port device geneve0 added [ 249.054473][ T5885] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 249.110728][T11300] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 249.121927][T11300] FAULT_INJECTION: forcing a failure. [ 249.121927][T11300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.139041][T11300] CPU: 0 UID: 0 PID: 11300 Comm: syz.1.1791 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 249.139073][T11300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.139087][T11300] Call Trace: [ 249.139095][T11300] [ 249.139103][T11300] dump_stack_lvl+0x241/0x360 [ 249.139140][T11300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.139171][T11300] ? __pfx__printk+0x10/0x10 [ 249.139212][T11300] should_fail_ex+0x424/0x570 [ 249.139241][T11300] _copy_to_user+0x31/0xb0 [ 249.139275][T11300] simple_read_from_buffer+0xc4/0x170 [ 249.139311][T11300] proc_fail_nth_read+0x1ef/0x260 [ 249.139336][T11300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.139362][T11300] ? rw_verify_area+0x246/0x630 [ 249.139385][T11300] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.139409][T11300] vfs_read+0x21f/0xb90 [ 249.139439][T11300] ? __pfx___mutex_lock+0x10/0x10 [ 249.139466][T11300] ? __pfx_vfs_read+0x10/0x10 [ 249.139494][T11300] ? __fget_files+0x2a/0x420 [ 249.139515][T11300] ? __fget_files+0x39d/0x420 [ 249.139532][T11300] ? __fget_files+0x2a/0x420 [ 249.139563][T11300] ksys_read+0x19d/0x2d0 [ 249.139589][T11300] ? __pfx_ksys_read+0x10/0x10 [ 249.139620][T11300] ? do_syscall_64+0xb6/0x230 [ 249.139649][T11300] do_syscall_64+0xf3/0x230 [ 249.139675][T11300] ? clear_bhb_loop+0x45/0xa0 [ 249.139701][T11300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.139721][T11300] RIP: 0033:0x7f2d5238bb7c [ 249.139739][T11300] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 249.139757][T11300] RSP: 002b:00007f2d53176030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.139779][T11300] RAX: ffffffffffffffda RBX: 00007f2d525a5fa0 RCX: 00007f2d5238bb7c [ 249.139795][T11300] RDX: 000000000000000f RSI: 00007f2d531760a0 RDI: 0000000000000004 [ 249.139808][T11300] RBP: 00007f2d53176090 R08: 0000000000000000 R09: 0000000000000000 [ 249.139822][T11300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.139834][T11300] R13: 0000000000000000 R14: 00007f2d525a5fa0 R15: 00007ffc968ffe68 [ 249.139868][T11300] [ 249.452120][T11305] __nla_validate_parse: 2 callbacks suppressed [ 249.452143][T11305] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1792'. [ 249.468023][T11305] openvswitch: netlink: Flow key attr not present in new flow. [ 249.504276][T11047] veth0_vlan: entered promiscuous mode [ 249.581025][T11047] veth1_vlan: entered promiscuous mode [ 249.709470][T11047] veth0_macvtap: entered promiscuous mode [ 249.729277][T11313] FAULT_INJECTION: forcing a failure. [ 249.729277][T11313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.749012][T11312] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1795'. [ 249.775000][T11047] veth1_macvtap: entered promiscuous mode [ 249.783733][T11312] netlink: 'syz.2.1795': attribute type 39 has an invalid length. [ 249.793327][T11313] CPU: 0 UID: 0 PID: 11313 Comm: syz.4.1794 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 249.793358][T11313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.793372][T11313] Call Trace: [ 249.793380][T11313] [ 249.793389][T11313] dump_stack_lvl+0x241/0x360 [ 249.793428][T11313] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.793458][T11313] ? __pfx__printk+0x10/0x10 [ 249.793502][T11313] should_fail_ex+0x424/0x570 [ 249.793531][T11313] _copy_from_user+0x2d/0xb0 [ 249.793562][T11313] copy_msghdr_from_user+0xb3/0x580 [ 249.793598][T11313] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 249.793624][T11313] ? __fget_files+0x2a/0x420 [ 249.793648][T11313] ? __fget_files+0x2a/0x420 [ 249.793676][T11313] __sys_sendmsg+0x20a/0x360 [ 249.793705][T11313] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.793787][T11313] ? do_syscall_64+0xb6/0x230 [ 249.793817][T11313] do_syscall_64+0xf3/0x230 [ 249.793842][T11313] ? clear_bhb_loop+0x45/0xa0 [ 249.793876][T11313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.793896][T11313] RIP: 0033:0x7f486af8d169 [ 249.793915][T11313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.793933][T11313] RSP: 002b:00007f486be87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.793955][T11313] RAX: ffffffffffffffda RBX: 00007f486b1a5fa0 RCX: 00007f486af8d169 [ 249.793971][T11313] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 249.793984][T11313] RBP: 00007f486be87090 R08: 0000000000000000 R09: 0000000000000000 [ 249.793997][T11313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.794011][T11313] R13: 0000000000000000 R14: 00007f486b1a5fa0 R15: 00007ffd2e3adcb8 [ 249.794044][T11313] [ 249.994924][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.005491][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.015408][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.025940][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.035951][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.046543][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.056447][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.068798][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.078953][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.089500][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.099442][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.109942][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.119790][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.130385][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.140282][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.150772][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.160698][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.172107][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.182813][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.193463][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.203375][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.219643][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.248736][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.277536][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.290647][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.312355][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.326118][T11047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.380504][T11312] veth0_macvtap: left promiscuous mode [ 250.506679][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.534701][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.554735][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.556752][T11327] FAULT_INJECTION: forcing a failure. [ 250.556752][T11327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.596730][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.643141][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.654210][T11327] CPU: 0 UID: 0 PID: 11327 Comm: syz.0.1801 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 250.654240][T11327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.654253][T11327] Call Trace: [ 250.654261][T11327] [ 250.654269][T11327] dump_stack_lvl+0x241/0x360 [ 250.654309][T11327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.654340][T11327] ? __pfx__printk+0x10/0x10 [ 250.654385][T11327] should_fail_ex+0x424/0x570 [ 250.654414][T11327] _copy_from_iter+0x211/0x1c70 [ 250.654459][T11327] ? __pfx__copy_from_iter+0x10/0x10 [ 250.654486][T11327] ? txopt_get+0x3e4/0x500 [ 250.654509][T11327] ? txopt_get+0x82/0x500 [ 250.654528][T11327] ? __pfx_txopt_get+0x10/0x10 [ 250.654544][T11327] ? tomoyo_check_inet_address+0x85f/0xb50 [ 250.654577][T11327] ? aa_label_sk_perm+0x4f4/0x6d0 [ 250.654612][T11327] rawv6_sendmsg+0xef4/0x23c0 [ 250.654661][T11327] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 250.654694][T11327] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 250.654765][T11327] ? sock_rps_record_flow+0x1a/0x410 [ 250.654792][T11327] ? inet_sendmsg+0x330/0x390 [ 250.654819][T11327] __sock_sendmsg+0x1a6/0x270 [ 250.654851][T11327] ____sys_sendmsg+0x523/0x860 [ 250.654883][T11327] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.654903][T11327] ? __fget_files+0x2a/0x420 [ 250.654927][T11327] ? __fget_files+0x2a/0x420 [ 250.654957][T11327] __sys_sendmsg+0x271/0x360 [ 250.654985][T11327] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.655067][T11327] ? do_syscall_64+0xb6/0x230 [ 250.655098][T11327] do_syscall_64+0xf3/0x230 [ 250.655131][T11327] ? clear_bhb_loop+0x45/0xa0 [ 250.655156][T11327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.655177][T11327] RIP: 0033:0x7f739518d169 [ 250.655195][T11327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.655214][T11327] RSP: 002b:00007f7395f3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.655237][T11327] RAX: ffffffffffffffda RBX: 00007f73953a5fa0 RCX: 00007f739518d169 [ 250.655253][T11327] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 250.655266][T11327] RBP: 00007f7395f3e090 R08: 0000000000000000 R09: 0000000000000000 [ 250.655280][T11327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.655293][T11327] R13: 0000000000000000 R14: 00007f73953a5fa0 R15: 00007ffea40c1288 [ 250.655326][T11327] [ 250.668069][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.925512][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.936303][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.947363][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.958020][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.968131][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.990040][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.000752][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.015316][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.025428][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.036121][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.046032][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.061664][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.074204][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.087993][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.098935][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.109755][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.120213][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.131215][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.141622][T11047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.152628][T11047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.166722][T11047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.232844][T11047] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.258919][T11047] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.276310][T11047] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.294689][T11047] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.440738][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1805'. [ 251.586295][T11349] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1808'. [ 251.599196][T11349] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1808'. [ 251.616758][ T7264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.634381][T11352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1809'. [ 251.647418][ T7264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.790023][T11357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1811'. [ 251.827863][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.836511][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.935695][T11361] FAULT_INJECTION: forcing a failure. [ 251.935695][T11361] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.984683][T11361] CPU: 0 UID: 0 PID: 11361 Comm: syz.4.1813 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 251.984714][T11361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.984725][T11361] Call Trace: [ 251.984732][T11361] [ 251.984740][T11361] dump_stack_lvl+0x241/0x360 [ 251.984772][T11361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.984796][T11361] ? __pfx__printk+0x10/0x10 [ 251.984836][T11361] should_fail_ex+0x424/0x570 [ 251.984859][T11361] _copy_from_user+0x2d/0xb0 [ 251.984884][T11361] hidp_sock_ioctl+0x282/0x8c0 [ 251.984914][T11361] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 251.984969][T11361] ? tomoyo_path_number_perm+0x684/0x790 [ 251.984994][T11361] ? tomoyo_path_number_perm+0x215/0x790 [ 251.985020][T11361] sock_do_ioctl+0x15a/0x490 [ 251.985047][T11361] ? __pfx_sock_do_ioctl+0x10/0x10 [ 251.985072][T11361] ? __lock_acquire+0xad5/0xd80 [ 251.985100][T11361] sock_ioctl+0x644/0x900 [ 251.985122][T11361] ? __pfx_sock_ioctl+0x10/0x10 [ 251.985140][T11361] ? __fget_files+0x2a/0x420 [ 251.985155][T11361] ? __fget_files+0x2a/0x420 [ 251.985172][T11361] ? __fget_files+0x2a/0x420 [ 251.985191][T11361] ? __pfx_sock_ioctl+0x10/0x10 [ 251.985212][T11361] __se_sys_ioctl+0xf1/0x160 [ 251.985235][T11361] do_syscall_64+0xf3/0x230 [ 251.985257][T11361] ? clear_bhb_loop+0x45/0xa0 [ 251.985276][T11361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.985292][T11361] RIP: 0033:0x7f486af8d169 [ 251.985307][T11361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.985321][T11361] RSP: 002b:00007f486be87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.985339][T11361] RAX: ffffffffffffffda RBX: 00007f486b1a5fa0 RCX: 00007f486af8d169 [ 251.985352][T11361] RDX: 0000200000000100 RSI: 00000000400448c8 RDI: 0000000000000005 [ 251.985363][T11361] RBP: 00007f486be87090 R08: 0000000000000000 R09: 0000000000000000 [ 251.985374][T11361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.985384][T11361] R13: 0000000000000000 R14: 00007f486b1a5fa0 R15: 00007ffd2e3adcb8 [ 251.985409][T11361] [ 252.263156][T11364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1814'. [ 252.284776][T11364] openvswitch: netlink: Flow key attr not present in new flow. [ 252.337859][T11371] x_tables: duplicate underflow at hook 3 [ 252.513634][T11375] netlink: 'syz.1.1818': attribute type 9 has an invalid length. [ 252.599918][T11381] x_tables: unsorted entry at hook 3 [ 253.020785][T11388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1822'. [ 253.073610][T11385] netdevsim netdevsim1: Direct firmware load for . [ 253.073610][T11385] failed with error -2 [ 253.104739][T11385] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 253.104739][T11385] [ 253.220644][T11393] FAULT_INJECTION: forcing a failure. [ 253.220644][T11393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.250788][T11393] CPU: 1 UID: 0 PID: 11393 Comm: syz.0.1825 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 253.250822][T11393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.250847][T11393] Call Trace: [ 253.250855][T11393] [ 253.250864][T11393] dump_stack_lvl+0x241/0x360 [ 253.250904][T11393] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.250936][T11393] ? __pfx__printk+0x10/0x10 [ 253.250980][T11393] should_fail_ex+0x424/0x570 [ 253.251007][T11393] _copy_from_iter+0x211/0x1c70 [ 253.251041][T11393] ? __build_skb_around+0x247/0x3d0 [ 253.251079][T11393] ? __alloc_skb+0x298/0x480 [ 253.251097][T11393] ? __pfx__copy_from_iter+0x10/0x10 [ 253.251128][T11393] ? __pfx___alloc_skb+0x10/0x10 [ 253.251150][T11393] ? skb_put+0x114/0x1f0 [ 253.251174][T11393] netlink_sendmsg+0x73c/0xcd0 [ 253.251219][T11393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.251254][T11393] ? aa_sock_msg_perm+0x91/0x160 [ 253.251289][T11393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.251316][T11393] __sock_sendmsg+0x221/0x270 [ 253.251347][T11393] ____sys_sendmsg+0x523/0x860 [ 253.251379][T11393] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.251398][T11393] ? __fget_files+0x2a/0x420 [ 253.251421][T11393] ? __fget_files+0x2a/0x420 [ 253.251450][T11393] __sys_sendmsg+0x271/0x360 [ 253.251477][T11393] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.251559][T11393] ? do_syscall_64+0xb6/0x230 [ 253.251588][T11393] do_syscall_64+0xf3/0x230 [ 253.251614][T11393] ? clear_bhb_loop+0x45/0xa0 [ 253.251639][T11393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.251659][T11393] RIP: 0033:0x7f739518d169 [ 253.251677][T11393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.251697][T11393] RSP: 002b:00007f7395f3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.251720][T11393] RAX: ffffffffffffffda RBX: 00007f73953a5fa0 RCX: 00007f739518d169 [ 253.251736][T11393] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 253.251754][T11393] RBP: 00007f7395f3e090 R08: 0000000000000000 R09: 0000000000000000 [ 253.251767][T11393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.251779][T11393] R13: 0000000000000000 R14: 00007f73953a5fa0 R15: 00007ffea40c1288 [ 253.251812][T11393] [ 255.096543][T11405] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 255.152658][T11406] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1830'. [ 255.656383][T11425] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1835'. [ 255.744909][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.911228][T11435] dccp_v6_rcv: dropped packet with invalid checksum [ 255.916186][T11433] FAULT_INJECTION: forcing a failure. [ 255.916186][T11433] name failslab, interval 1, probability 0, space 0, times 0 [ 255.963449][T11433] CPU: 0 UID: 0 PID: 11433 Comm: syz.2.1838 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 255.963482][T11433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.963496][T11433] Call Trace: [ 255.963504][T11433] [ 255.963515][T11433] dump_stack_lvl+0x241/0x360 [ 255.963555][T11433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.963585][T11433] ? __pfx__printk+0x10/0x10 [ 255.963614][T11433] ? __lock_acquire+0xad5/0xd80 [ 255.963649][T11433] should_fail_ex+0x424/0x570 [ 255.963678][T11433] should_failslab+0xac/0x100 [ 255.963710][T11433] kmem_cache_alloc_noprof+0x78/0x390 [ 255.963739][T11433] ? skb_clone+0x20c/0x390 [ 255.963768][T11433] skb_clone+0x20c/0x390 [ 255.963795][T11433] __netlink_deliver_tap+0x3c4/0x7f0 [ 255.963839][T11433] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.963866][T11433] netlink_deliver_tap+0x19d/0x1b0 [ 255.963897][T11433] netlink_unicast+0x7c6/0x9a0 [ 255.963934][T11433] ? __pfx_netlink_unicast+0x10/0x10 [ 255.963963][T11433] ? skb_put+0x114/0x1f0 [ 255.963988][T11433] netlink_sendmsg+0x8c3/0xcd0 [ 255.964032][T11433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.964068][T11433] ? aa_sock_msg_perm+0x91/0x160 [ 255.964104][T11433] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.964131][T11433] __sock_sendmsg+0x221/0x270 [ 255.964163][T11433] ____sys_sendmsg+0x523/0x860 [ 255.964196][T11433] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.964216][T11433] ? __fget_files+0x2a/0x420 [ 255.964239][T11433] ? __fget_files+0x2a/0x420 [ 255.964269][T11433] __sys_sendmsg+0x271/0x360 [ 255.964298][T11433] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.964400][T11433] ? do_syscall_64+0xb6/0x230 [ 255.964436][T11433] do_syscall_64+0xf3/0x230 [ 255.964462][T11433] ? clear_bhb_loop+0x45/0xa0 [ 255.964488][T11433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.964512][T11433] RIP: 0033:0x7f99efd8d169 [ 255.964531][T11433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.964549][T11433] RSP: 002b:00007f99f0b4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.964571][T11433] RAX: ffffffffffffffda RBX: 00007f99effa5fa0 RCX: 00007f99efd8d169 [ 255.964586][T11433] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 255.964599][T11433] RBP: 00007f99f0b4b090 R08: 0000000000000000 R09: 0000000000000000 [ 255.964611][T11433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.964623][T11433] R13: 0000000000000000 R14: 00007f99effa5fa0 R15: 00007ffe4d9464c8 [ 255.964654][T11433] [ 256.217555][T11433] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1838'. [ 256.226651][T11433] openvswitch: netlink: Flow key attr not present in new flow. [ 256.263372][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 256.301360][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 256.334072][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 256.381648][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 256.392585][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 256.429728][T11447] netlink: 'syz.4.1843': attribute type 2 has an invalid length. [ 256.443259][T11447] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1843'. [ 256.556238][T11449] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1842'. [ 256.614835][T11449] netlink: zone id is out of range [ 256.634968][T11449] netlink: zone id is out of range [ 256.647202][T11449] netlink: zone id is out of range [ 256.660144][T11449] netlink: zone id is out of range [ 256.694828][T11449] netlink: get zone limit has 8 unknown bytes [ 257.218929][T11478] FAULT_INJECTION: forcing a failure. [ 257.218929][T11478] name failslab, interval 1, probability 0, space 0, times 0 [ 257.261295][T11478] CPU: 0 UID: 0 PID: 11478 Comm: syz.4.1852 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 257.261328][T11478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.261342][T11478] Call Trace: [ 257.261350][T11478] [ 257.261359][T11478] dump_stack_lvl+0x241/0x360 [ 257.261399][T11478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.261430][T11478] ? __pfx__printk+0x10/0x10 [ 257.261471][T11478] ? __pfx___might_resched+0x10/0x10 [ 257.261505][T11478] should_fail_ex+0x424/0x570 [ 257.261533][T11478] should_failslab+0xac/0x100 [ 257.261565][T11478] __kmalloc_noprof+0xdf/0x4d0 [ 257.261594][T11478] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 257.261618][T11478] ? apparmor_capable+0x13b/0x1b0 [ 257.261645][T11478] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 257.261678][T11478] genl_rcv_msg+0x819/0xf00 [ 257.261711][T11478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.261731][T11478] ? __dev_queue_xmit+0x1780/0x3f60 [ 257.261753][T11478] ? kasan_save_track+0x3f/0x80 [ 257.261774][T11478] ? __kasan_slab_alloc+0x66/0x80 [ 257.261806][T11478] ? do_syscall_64+0xf3/0x230 [ 257.261851][T11478] ? __lock_acquire+0xad5/0xd80 [ 257.261877][T11478] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 257.261919][T11478] netlink_rcv_skb+0x208/0x480 [ 257.261949][T11478] ? __pfx_genl_rcv_msg+0x10/0x10 [ 257.261974][T11478] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.262026][T11478] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.262063][T11478] genl_rcv+0x28/0x40 [ 257.262083][T11478] netlink_unicast+0x7f8/0x9a0 [ 257.262120][T11478] ? __pfx_netlink_unicast+0x10/0x10 [ 257.262150][T11478] ? skb_put+0x114/0x1f0 [ 257.262176][T11478] netlink_sendmsg+0x8c3/0xcd0 [ 257.262219][T11478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.262255][T11478] ? aa_sock_msg_perm+0x91/0x160 [ 257.262291][T11478] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.262318][T11478] __sock_sendmsg+0x221/0x270 [ 257.262351][T11478] ____sys_sendmsg+0x523/0x860 [ 257.262385][T11478] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.262404][T11478] ? __fget_files+0x2a/0x420 [ 257.262428][T11478] ? __fget_files+0x2a/0x420 [ 257.262458][T11478] __sys_sendmsg+0x271/0x360 [ 257.262492][T11478] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.262577][T11478] ? do_syscall_64+0xb6/0x230 [ 257.262606][T11478] do_syscall_64+0xf3/0x230 [ 257.262631][T11478] ? clear_bhb_loop+0x45/0xa0 [ 257.262655][T11478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.262674][T11478] RIP: 0033:0x7f486af8d169 [ 257.262693][T11478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.262710][T11478] RSP: 002b:00007f486be87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.262732][T11478] RAX: ffffffffffffffda RBX: 00007f486b1a5fa0 RCX: 00007f486af8d169 [ 257.262747][T11478] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 0000000000000003 [ 257.262761][T11478] RBP: 00007f486be87090 R08: 0000000000000000 R09: 0000000000000000 [ 257.262772][T11478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.262784][T11478] R13: 0000000000000000 R14: 00007f486b1a5fa0 R15: 00007ffd2e3adcb8 [ 257.262817][T11478] [ 257.279185][T11436] chnl_net:caif_netlink_parms(): no params data found [ 257.909116][T11497] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1860'. [ 258.012426][T11504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.021580][T11504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 258.072208][T11436] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.104325][T11436] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.111784][T11436] bridge_slave_0: entered allmulticast mode [ 258.120924][T11436] bridge_slave_0: entered promiscuous mode [ 258.143135][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1863'. [ 258.223486][T11513] netlink: 191164 bytes leftover after parsing attributes in process `syz.1.1867'. [ 258.234569][T11436] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.246511][T11436] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.275025][T11436] bridge_slave_1: entered allmulticast mode [ 258.293326][T11436] bridge_slave_1: entered promiscuous mode [ 258.317063][T11511] team0: Device is already in use. [ 258.448521][ T5845] Bluetooth: hci0: command tx timeout [ 258.517540][T11520] netlink: 'syz.1.1869': attribute type 63 has an invalid length. [ 258.538126][T11520] [ 258.540507][T11520] ===================================== [ 258.546053][T11520] WARNING: bad unlock balance detected! [ 258.551599][T11520] 6.14.0-syzkaller-13311-g69ae94725f4f #0 Not tainted [ 258.558367][T11520] ------------------------------------- [ 258.563926][T11520] syz.1.1869/11520 is trying to release lock (&dev_instance_lock_key) at: [ 258.572462][T11520] [] do_setlink+0xc26/0x43a0 [ 258.578642][T11520] but there are no more locks to release! [ 258.584364][T11520] [ 258.584364][T11520] other info that might help us debug this: [ 258.592430][T11520] 1 lock held by syz.1.1869/11520: [ 258.597562][T11520] #0: ffffffff900fc9c8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xd68/0x1fe0 [ 258.606689][T11520] [ 258.606689][T11520] stack backtrace: [ 258.612594][T11520] CPU: 0 UID: 0 PID: 11520 Comm: syz.1.1869 Not tainted 6.14.0-syzkaller-13311-g69ae94725f4f #0 PREEMPT(full) [ 258.612618][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.612630][T11520] Call Trace: [ 258.612637][T11520] [ 258.612644][T11520] dump_stack_lvl+0x241/0x360 [ 258.612675][T11520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.612701][T11520] ? __pfx__printk+0x10/0x10 [ 258.612727][T11520] ? print_lock+0x171/0x1a0 [ 258.612749][T11520] ? do_setlink+0xc26/0x43a0 [ 258.612776][T11520] print_unlock_imbalance_bug+0x185/0x1a0 [ 258.612824][T11520] lock_release+0x1ed/0x3e0 [ 258.612842][T11520] ? do_setlink+0xc26/0x43a0 [ 258.612868][T11520] ? do_setlink+0xc26/0x43a0 [ 258.612895][T11520] __mutex_unlock_slowpath+0xee/0x800 [ 258.612918][T11520] ? rcu_is_watching+0x15/0xb0 [ 258.612940][T11520] ? do_trace_netlink_extack+0x8b/0x1f0 [ 258.612963][T11520] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 258.612984][T11520] ? vprintk_emit+0x81f/0xa40 [ 258.613008][T11520] ? __pfx_validate_linkmsg+0x10/0x10 [ 258.613029][T11520] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 258.613047][T11520] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.613075][T11520] do_setlink+0xc26/0x43a0 [ 258.613105][T11520] ? _printk+0xd5/0x120 [ 258.613133][T11520] ? __pfx_do_setlink+0x10/0x10 [ 258.613161][T11520] ? __lock_acquire+0xad5/0xd80 [ 258.613189][T11520] ? __pfx___mutex_trylock_common+0x10/0x10 [ 258.613215][T11520] ? rcu_is_watching+0x15/0xb0 [ 258.613238][T11520] ? trace_contention_end+0x3c/0x120 [ 258.613261][T11520] ? __mutex_lock+0x380/0x10c0 [ 258.613285][T11520] ? __pfx_aa_get_newest_label+0x10/0x10 [ 258.613313][T11520] ? rcu_is_watching+0x15/0xb0 [ 258.613334][T11520] ? rtnl_newlink+0xd68/0x1fe0 [ 258.613358][T11520] ? __pfx___mutex_lock+0x10/0x10 [ 258.613383][T11520] ? ns_capable+0x8a/0xf0 [ 258.613401][T11520] ? rtnl_link_get_net_capable+0x168/0x340 [ 258.613432][T11520] rtnl_newlink+0x17e2/0x1fe0 [ 258.613457][T11520] ? stack_depot_save_flags+0x44/0x940 [ 258.613483][T11520] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.613506][T11520] ? __netlink_deliver_tap+0x561/0x7f0 [ 258.613530][T11520] ? netlink_deliver_tap+0x19d/0x1b0 [ 258.613553][T11520] ? netlink_unicast+0x7c6/0x9a0 [ 258.613573][T11520] ? netlink_sendmsg+0x8c3/0xcd0 [ 258.613597][T11520] ? __sock_sendmsg+0x221/0x270 [ 258.613618][T11520] ? ____sys_sendmsg+0x523/0x860 [ 258.613634][T11520] ? __sys_sendmsg+0x271/0x360 [ 258.613651][T11520] ? do_syscall_64+0xf3/0x230 [ 258.613671][T11520] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.613704][T11520] ? kasan_quarantine_put+0xdc/0x230 [ 258.613724][T11520] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.613745][T11520] ? nlmon_xmit+0xaf/0x100 [ 258.613775][T11520] ? __local_bh_enable_ip+0x168/0x200 [ 258.613792][T11520] ? lockdep_hardirqs_on+0x9d/0x150 [ 258.613816][T11520] ? aa_get_newest_label+0x101/0x6f0 [ 258.613843][T11520] ? __lock_acquire+0xad5/0xd80 [ 258.613871][T11520] ? __pfx_rtnl_newlink+0x10/0x10 [ 258.613896][T11520] rtnetlink_rcv_msg+0x80f/0xd70 [ 258.613920][T11520] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 258.613946][T11520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.613973][T11520] ? ref_tracker_free+0x63e/0x7e0 [ 258.613996][T11520] netlink_rcv_skb+0x208/0x480 [ 258.614021][T11520] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 258.614046][T11520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 258.614078][T11520] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.614104][T11520] ? netlink_deliver_tap+0x2e/0x1b0 [ 258.614128][T11520] netlink_unicast+0x7f8/0x9a0 [ 258.614154][T11520] ? __pfx_netlink_unicast+0x10/0x10 [ 258.614176][T11520] ? skb_put+0x114/0x1f0 [ 258.614201][T11520] netlink_sendmsg+0x8c3/0xcd0 [ 258.614232][T11520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.614259][T11520] ? aa_sock_msg_perm+0x91/0x160 [ 258.614287][T11520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 258.614310][T11520] __sock_sendmsg+0x221/0x270 [ 258.614335][T11520] ____sys_sendmsg+0x523/0x860 [ 258.614358][T11520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 258.614375][T11520] ? __fget_files+0x2a/0x420 [ 258.614391][T11520] ? __fget_files+0x2a/0x420 [ 258.614411][T11520] __sys_sendmsg+0x271/0x360 [ 258.614428][T11520] ? __pfx_futex_wake+0x10/0x10 [ 258.614449][T11520] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.614490][T11520] ? do_syscall_64+0xb6/0x230 [ 258.614516][T11520] do_syscall_64+0xf3/0x230 [ 258.614539][T11520] ? clear_bhb_loop+0x45/0xa0 [ 258.614562][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.614583][T11520] RIP: 0033:0x7f2d5238d169 [ 258.614602][T11520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.614621][T11520] RSP: 002b:00007f2d53176038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.614644][T11520] RAX: ffffffffffffffda RBX: 00007f2d525a5fa0 RCX: 00007f2d5238d169 [ 258.614660][T11520] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 258.614674][T11520] RBP: 00007f2d5240e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 258.614688][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.614701][T11520] R13: 0000000000000000 R14: 00007f2d525a5fa0 R15: 00007ffc968ffe68 [ 258.614724][T11520] [ 259.148927][T11436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.160724][T11436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.206476][T11436] team0: Port device team_slave_0 added [ 259.214336][T11436] team0: Port device team_slave_1 added [ 259.242639][T11436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.249917][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.280984][T11436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.293074][T11436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.300458][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.326854][T11436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.363479][T11436] hsr_slave_0: entered promiscuous mode [ 259.369966][T11436] hsr_slave_1: entered promiscuous mode [ 259.381597][T11436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.389365][T11436] Cannot create hsr debugfs directory [ 259.468019][T11436] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.529502][T11436] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.579439][T11436] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.640196][T11436] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.710040][T11436] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 259.719228][T11436] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 259.742960][T11436] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 259.759855][T11436] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 259.831032][T11436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.849448][T11436] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.862854][ T7262] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.870013][ T7262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.881746][ T7266] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.888977][ T7266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.028823][T11436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.069823][T11436] veth0_vlan: entered promiscuous mode [ 260.080690][T11436] veth1_vlan: entered promiscuous mode [ 260.107909][T11436] veth0_macvtap: entered promiscuous mode [ 260.128523][T11436] veth1_macvtap: entered promiscuous mode [ 260.144288][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.155104][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.165364][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.175899][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.185763][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.197521][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.208575][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.220699][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.233246][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.244319][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.254749][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.265288][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.275165][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.285694][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.295670][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.307406][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.317955][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.328518][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.339020][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.349530][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.359489][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.370050][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.379984][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.390671][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.400591][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.412445][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.422518][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.433060][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.444413][T11436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.461884][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.473029][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.483606][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.494103][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.506362][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.519306][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.529374][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.534781][ T5845] Bluetooth: hci0: command tx timeout [ 260.539894][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.555404][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.565964][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.575911][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.586604][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.596990][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.611151][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.621940][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.632754][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.642638][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.653180][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.663069][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.673623][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.683540][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.694532][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.704359][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.719124][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.729021][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.739571][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.749450][T11436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.760266][T11436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.771453][T11436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.789661][T11436] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.798958][T11436] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.807889][T11436] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.820972][T11436] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.861419][T11436] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 260.892252][ T7268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.894000][T11436] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 260.909511][ T7268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.937539][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 260.945727][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50