last executing test programs: 1m6.492220282s ago: executing program 1 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000400), 0x4) (async) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x40085) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000150000000000001d0b6382972f4b8fe274a674aa674af7bc7fb1632d7f65f10c2018ee31aad97a0bb2c3ab911fb7e4012c8a070fec9c68ab9af4dfb4dd1f48c8d28f9b698bb2c3b0ac1a"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r7}, 0x18) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r10, 0x0, 0x11, 0x0, &(0x7f00000003c0)="61fef053a7a9a26e9b72278000009dd001", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r11, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000180)={0x0, 0xffffff53, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000f5e81a01fee9f07ef2cd55f2bcedf0aa40a744", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000"], 0x14}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000580)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 53.494016618s ago: executing program 4 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000060000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 52.951589366s ago: executing program 1 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000400), 0x4) (async) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x40085) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000150000000000001d0b6382972f4b8fe274a674aa674af7bc7fb1632d7f65f10c2018ee31aad97a0bb2c3ab911fb7e4012c8a070fec9c68ab9af4dfb4dd1f48c8d28f9b698bb2c3b0ac1a"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r7}, 0x18) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r10, 0x0, 0x11, 0x0, &(0x7f00000003c0)="61fef053a7a9a26e9b72278000009dd001", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r11, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000180)={0x0, 0xffffff53, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000f5e81a01fee9f07ef2cd55f2bcedf0aa40a744", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000"], 0x14}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000580)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 41.12316249s ago: executing program 4 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000060000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 40.618470551s ago: executing program 1 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000400), 0x4) (async) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x40085) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000150000000000001d0b6382972f4b8fe274a674aa674af7bc7fb1632d7f65f10c2018ee31aad97a0bb2c3ab911fb7e4012c8a070fec9c68ab9af4dfb4dd1f48c8d28f9b698bb2c3b0ac1a"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r7}, 0x18) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r10, 0x0, 0x11, 0x0, &(0x7f00000003c0)="61fef053a7a9a26e9b72278000009dd001", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r11, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000180)={0x0, 0xffffff53, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000f5e81a01fee9f07ef2cd55f2bcedf0aa40a744", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000"], 0x14}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000580)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 31.267080286s ago: executing program 4 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000060000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 28.837648136s ago: executing program 1 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000400), 0x4) (async) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x40085) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000150000000000001d0b6382972f4b8fe274a674aa674af7bc7fb1632d7f65f10c2018ee31aad97a0bb2c3ab911fb7e4012c8a070fec9c68ab9af4dfb4dd1f48c8d28f9b698bb2c3b0ac1a"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r7}, 0x18) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r10, 0x0, 0x11, 0x0, &(0x7f00000003c0)="61fef053a7a9a26e9b72278000009dd001", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r11, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000180)={0x0, 0xffffff53, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000f5e81a01fee9f07ef2cd55f2bcedf0aa40a744", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000"], 0x14}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000580)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 21.383020435s ago: executing program 4 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000060000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 17.733489872s ago: executing program 1 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000400), 0x4) (async) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x40085) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000150000000000001d0b6382972f4b8fe274a674aa674af7bc7fb1632d7f65f10c2018ee31aad97a0bb2c3ab911fb7e4012c8a070fec9c68ab9af4dfb4dd1f48c8d28f9b698bb2c3b0ac1a"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r7}, 0x18) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r10, 0x0, 0x11, 0x0, &(0x7f00000003c0)="61fef053a7a9a26e9b72278000009dd001", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r11, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000180)={0x0, 0xffffff53, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000f5e81a01fee9f07ef2cd55f2bcedf0aa40a744", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000"], 0x14}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000580)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 11.494311043s ago: executing program 4 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000060000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 8.79315472s ago: executing program 3 (id=2173): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000200000000000000000050019"], 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_ENCAP_LIMIT={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000011}, 0x40) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 7.891046187s ago: executing program 1 (id=665): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000400), 0x4) (async) sendmsg$unix(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x40085) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002200)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x40}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) (async) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB='\a\x00'/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="000000000100000000150000000000001d0b6382972f4b8fe274a674aa674af7bc7fb1632d7f65f10c2018ee31aad97a0bb2c3ab911fb7e4012c8a070fec9c68ab9af4dfb4dd1f48c8d28f9b698bb2c3b0ac1a"], 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r7}, 0x18) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000104010100000000000000ffff0004000500010003"], 0x1c}}, 0x0) close(r8) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r10, 0x0, 0x11, 0x0, &(0x7f00000003c0)="61fef053a7a9a26e9b72278000009dd001", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) accept$inet6(r11, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000180)={0x0, 0xffffff53, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000f5e81a01fee9f07ef2cd55f2bcedf0aa40a744", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000"], 0x14}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000580)='kfree\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 5.917987875s ago: executing program 3 (id=2176): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}}], 0x4000210, 0x2, 0x0) 4.386941431s ago: executing program 2 (id=2184): r0 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @loopback={0x78}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="80005b2502000000", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0xc, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x8040480) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write(r6, 0x0, 0x0) splice(r7, &(0x7f0000000040)=0xffffffffffffff4c, r6, 0x0, 0x7, 0x1) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000011140100000000000000000008005a0001000000080003000100000008004a000100000008004b"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c0039ca367da1650e000000280003800c00010001800000002000000c000100a1000400c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB, @ANYRESHEX], 0xb4}}, 0x0) 3.375119836s ago: executing program 3 (id=2185): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x15, 0x5, 0xfffffff1, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES16=r3, @ANYBLOB="01002abd7000000001800000000000000800", @ANYRES32=r5, @ANYBLOB="20001d801c00008005000a000100000006000500390000000500090000000000"], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000840)={0x0, 0xe1}, 0x8) 2.595831117s ago: executing program 3 (id=2186): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000203030000000000000000000200ffff0800010001000000a4177fddf96e097e9cf3892f6eef021dff00000000000000234010dd5a5d67dcaeca4f9a4cdbb639facab7575aaca7e3d25c0ae38f7236888cc62934e8262acc0ce64e9fbad3b30ffa4cbe42f294cb1bc342baea2d63557cb1017abbadffd9326c53124daa3bdf38ac8907ef33278612982194c7ca566727ac6909555fd2a4e7e488ff654f092ba8c72aea3a1d684e75329c9800ecfcfafed86c8d5f60d0b8add2e63593ebcdb336a5"], 0x1c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040)=0x7bb3, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x2000, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/55, 0x37}, 0x4}], 0x1, 0x45833af92e4b39ff, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0700e0d6360bfc48d768ac385800000000000001000100"/39], 0x1c}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1d, 0xe, &(0x7f0000002900)=ANY=[@ANYRES64=r2], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfd27) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301010000000000000000000000000c000200"], 0x20}}, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$unix(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000480)=""/27, 0x1b}, {&(0x7f0000000680)=""/134, 0x86}], 0x2}, 0x12022) sendmsg$alg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000098000000000000004a3a0000020000007e00000008d4b58e48f96242698eadbd4c6cd754705629e6c2e61685773ac24f9559be441589328534aacaf4b9b300000000a6322bf2ba306fe1b2707563c6a08f51e4fc959de0f8a8e64b6087436e4f21fdb4cdb1d0c158f4651645ecf4eb3fc264f5d7bd9edf04009724863c2801ecca21b0a3a864901664eb7f8c2b979620f758000000000000", @ANYRES16=r3], 0xb0, 0x20000080}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x9, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) writev(r6, &(0x7f0000000780)=[{0x0}, {&(0x7f00000019c0)="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", 0xc81}], 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) close(r0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000b80)="4cf80c33db588500f6796f210c5c25a3c17f77eb7cd6135744495e689f0308505dc9dc7d504e269ad5b9028ece1daae10a67942da326a92990", 0x39) 2.588949807s ago: executing program 0 (id=2187): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x1f00, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) 2.525602317s ago: executing program 2 (id=2188): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) 2.429236625s ago: executing program 2 (id=2189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000104e95463160000000000000000000f0500010001"], 0x1c}}, 0x54) close(r1) sendto$inet(r0, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 2.369290263s ago: executing program 0 (id=2190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x48000000) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x60) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x41, 0x3, 0x3c0, 0x258, 0x19, 0x0, 0x0, 0x0, 0x328, 0x1f0, 0x1f0, 0x328, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @dev, 0x0, 0x1000000, 'ip6erspan0\x00', 'veth0_vlan\x00'}, 0x0, 0x1f8, 0x258, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'bridge_slave_1\x00', {0x0, 0x3d40, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x7]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x2, 0x6, [0x24, 0x7, 0x35, 0x1f, 0x3f, 0x16, 0x18, 0x4, 0x3b, 0x2c, 0x8, 0x24, 0x4, 0x14, 0x4, 0x1e], 0x2, 0x5, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x420) 2.352830535s ago: executing program 2 (id=2191): mmap(&(0x7f000002b000/0x2000)=nil, 0x2000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="740008000b0601020000000000000000030000000900020073797a3000000000055f9fd4940000004c0008800c00078007001a00242e0000100007800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac"], 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000002000000000047c0000040000000c000180060006000806000004"], 0x528}}, 0xc000) 2.15807328s ago: executing program 2 (id=2192): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x34000811) r2 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r2, &(0x7f0000000b80)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x0, 0xa}, 0x80, 0x0}}], 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0303000000000000000005000000", @ANYRES32], 0x1c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x7}]}}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000200)="2b80e25a45a2319c34bae2530e2ba35011385a27fb70c8457439bbe1c8e6af25d5d0016ccb1f31960953bf0a24388b589850d8508864f18dc6c4ec6133c399954ad72159a04f", 0x46}, {&(0x7f00000002c0)="2fab6df668beddd3d4027a1441d77a174f3ee3e96c5096b3", 0x18}, {&(0x7f0000000700)="cb7cb4a28e7eb59b8c7747eb9d5c79602138bb41125839ee90f807389732617f481b5b5c5eabfef1da6e9e8121ed3897c27e74d0d19841a9ca0cd88837d8a1eef25ae4095e6cf3c7a8b92aad44c83c0d4023e7021eac5bdca8ecfbd1ef0894f6831076ede4e834f6d3dd0ba977373e5b8e2ab09273e52e1c8d20ce6951eb1ee9", 0x80}, {&(0x7f0000000780)="f0d03d9e7fb612ccbfc6bc1624b8b7f3a21ee4ee598304ca82f2bd8fd663e99ad714d3c1f778bede7cffd6708887e8e65fa14ac4e751919c2d205d197820fe5ad6abeedec0d5b774d3", 0x49}, {&(0x7f0000001380)="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", 0x1000}], 0x6, 0x9) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r8, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000000000002020000000000000000000003"], &(0x7f0000001f40)=""/4089, 0x3e, 0xff9, 0xa, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000009c0)='m ', 0x2}], 0x1}, 0x4000005) recvmsg$unix(r6, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) recvmsg$unix(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12001) r9 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r9, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r9, 0x0, 0x0, 0x0, 0x0, 0x0) vmsplice(r10, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000050000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) r11 = socket(0x2000000000000021, 0x2, 0x10000000000002) accept4$packet(r11, 0x0, 0x0, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) 1.901523457s ago: executing program 0 (id=2193): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x3}, 0x20) 1.768779557s ago: executing program 3 (id=2194): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@deltclass={0xcac, 0x29, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r0, {0x6, 0xc}, {0xd, 0xffe0}, {0xf, 0x7}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x10, 0x3}}, @tclass_kind_options=@c_htb={{0x8}, {0xc48, 0x2, [@TCA_HTB_RTAB={0x404, 0x4, [0x8, 0x7, 0x7, 0x4, 0xd34, 0x4, 0x7, 0x101, 0x9, 0x9, 0x4c1a64ff, 0x1, 0x8, 0x9, 0x0, 0xe0, 0x7fffffff, 0x10, 0x1ff, 0x9, 0x7, 0x8, 0x4, 0x8, 0x4, 0x4, 0xe0, 0x2, 0x2, 0x1000, 0xa71, 0x3, 0xb8d3, 0x7e935344, 0x6, 0x0, 0x3, 0xdb03, 0x7, 0x47c, 0x2, 0x9, 0x3, 0x0, 0xffffffff, 0x4, 0x1ff, 0x6, 0x4, 0x326, 0x8, 0x6, 0x63, 0xa6d4, 0x1, 0x7fffffff, 0x7, 0x2, 0x6, 0x2, 0x1, 0x8, 0x82d5510c, 0x6, 0x5, 0xa, 0x33f, 0x354, 0x63, 0xffff, 0x80000000, 0x40, 0x8, 0x6, 0x1b6, 0x0, 0x7, 0x7, 0xf3, 0x1, 0x800, 0x9e6, 0x9, 0x5, 0x0, 0x2, 0x7, 0x0, 0x1, 0x7, 0x0, 0xa, 0x9, 0xfffffff9, 0xfff, 0x6, 0x1, 0x7, 0xed1, 0x5, 0x5, 0xf0, 0xfff, 0xffffffff, 0x5, 0x9, 0xe5e, 0x6, 0x7ff, 0x2, 0x6, 0xfffff345, 0x8, 0x2, 0x2, 0x2, 0x4, 0x9, 0x19a, 0xa48, 0x1, 0x0, 0x3, 0x3, 0x6e, 0x0, 0xfffffff5, 0xb77, 0x9, 0x8, 0x26, 0x7, 0x7, 0x3, 0x9, 0x0, 0xb, 0x63, 0x1, 0x4, 0xc351, 0x5, 0x39fb0327, 0x7fffffff, 0x62a00, 0x2, 0x5, 0x9, 0x1, 0x6, 0x101, 0x8, 0x9, 0x0, 0x8, 0x5, 0x0, 0x9, 0x0, 0x1, 0xf, 0x7e8, 0x3, 0x8, 0x8, 0x3, 0x7, 0x4, 0x80000000, 0x4, 0x1, 0x0, 0xf, 0x0, 0xfffffff8, 0x4944, 0x502, 0x40, 0x1, 0x3, 0x8, 0x8a, 0x0, 0x5355b257, 0x2, 0x6, 0x1, 0x5, 0x0, 0x5, 0xfb, 0xa, 0x0, 0xfffffff7, 0x0, 0x1, 0x9, 0x3, 0x1000, 0xbd2c, 0x6, 0x800, 0x7, 0x10000, 0x80000000, 0x165, 0x400, 0x7, 0x7, 0x2, 0x9, 0x4, 0x8, 0xb, 0x9, 0x9, 0x3, 0x2, 0x10001, 0x8, 0x0, 0x88, 0xb8, 0x6, 0xffff7fff, 0x6, 0x6, 0x7ff, 0x899, 0x7, 0x563c1088, 0xfffffffc, 0xd2, 0x9, 0x3, 0x6, 0x5dac8804, 0x7, 0xd7, 0x4, 0x7, 0x40, 0xfffffff9, 0x3ff, 0x34, 0x8000000, 0x6, 0x0, 0xd, 0x4, 0x7, 0xf, 0xcafd, 0x4, 0xe, 0x4]}, @TCA_HTB_CTAB={0x404, 0x3, [0x80000001, 0x1, 0xffffffff, 0x3, 0x80000000, 0x0, 0x401, 0x7, 0x7ff, 0x10000, 0x8, 0x156, 0x1, 0x1, 0x0, 0x5, 0x8bec, 0x0, 0x2, 0x7, 0xbb49, 0x2, 0xc98b, 0x18, 0x8, 0x401, 0xffff2569, 0xc54, 0x8, 0x100, 0x1000, 0x3ff, 0x4, 0x4, 0x7fffffff, 0x0, 0x6, 0xfffffe01, 0xa, 0xf762, 0x1, 0x0, 0x400, 0x480000, 0x2, 0x2, 0x3, 0x1, 0x2, 0x101, 0x1, 0x10000, 0x3, 0x3, 0xfffffffb, 0xed1, 0x10000, 0x1, 0x0, 0x1e, 0x0, 0x9, 0x1, 0x60e, 0x81, 0x9, 0x67124fdb, 0x100, 0x75, 0x8, 0x4, 0xffff59ed, 0x4e, 0x9, 0x9, 0xb, 0x10001, 0xffffffff, 0x8, 0xf5, 0x8001, 0x64e, 0xc, 0x1, 0x3, 0x10001, 0x7, 0x5, 0x6, 0x2, 0x0, 0x8000, 0x6, 0x6, 0x4, 0xb, 0x1, 0x5, 0x5, 0xffff, 0x2, 0x7, 0x6, 0x9, 0xd3e6, 0x6, 0x7, 0x8b6a, 0x5, 0x7, 0x6dfc567c, 0x6, 0x6, 0x9d, 0x7, 0x9, 0x9, 0x0, 0xffff0001, 0x3, 0x80000001, 0x4, 0x7, 0x7, 0x1000, 0x1000, 0xbf8a, 0x1, 0x7, 0xda, 0x3, 0x3, 0x5, 0x2, 0x1ff, 0xd, 0x5, 0x2, 0x7, 0x6, 0x9, 0x9, 0x6cdd, 0x8, 0x1000, 0x80000001, 0x4, 0x0, 0xee, 0x7ff, 0x80, 0x2, 0x6, 0x80000000, 0x1, 0xb, 0x9, 0x4, 0x1, 0x9, 0x5, 0x1, 0xff, 0xe74a, 0xfffffffa, 0x9, 0x2, 0x7fff, 0x6, 0x8, 0x4, 0x9, 0x7, 0x9, 0x1d1c, 0xa, 0x8, 0x7, 0x5a3, 0x3, 0x0, 0x7, 0x3, 0xb, 0xfffffffb, 0x1, 0x1, 0x7, 0x4, 0xa, 0x0, 0x7, 0xffffffff, 0x7f, 0x4, 0x8, 0x401, 0x6, 0x2, 0x9, 0x100, 0x57, 0x0, 0x7, 0x3, 0xff, 0x2, 0x8, 0x10, 0x2, 0x7, 0x1, 0xfffff800, 0x1, 0x5, 0x3, 0x0, 0xd2, 0x5, 0x5, 0x2, 0x6, 0x10, 0x7f, 0x7, 0x7a7, 0x0, 0x1f, 0x7, 0x2, 0x3d1, 0x6, 0x6, 0x1b2f, 0x3ff, 0x1, 0x7, 0x3, 0x8, 0x2, 0xff, 0x4, 0x2, 0x1, 0x0, 0x0, 0xc, 0x100, 0x8, 0xfffffe00, 0xfff, 0x80f5, 0x9, 0x8]}, @TCA_HTB_RATE64={0xc, 0x6, 0xc74}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x3, 0x0, 0x731, 0xfffffff9, 0x5, 0x39e, 0xb60, 0x7, 0x4, 0x1ff, 0x3, 0xe0, 0x1, 0x6, 0x5, 0x8, 0x6, 0x8000, 0x0, 0x8, 0x6, 0x0, 0x2a, 0x6ee2, 0x8000, 0x7, 0x4, 0x10000, 0x2, 0x0, 0xff, 0x1, 0x401, 0xffffffff, 0x95, 0x6, 0x10, 0xff, 0x5, 0x1, 0x9, 0x0, 0x0, 0x3ff, 0x3, 0x9d, 0x8, 0x7ff, 0x3, 0x10001, 0x8, 0xfffffffb, 0x6, 0x9, 0x2, 0x1, 0x2, 0x6, 0x9, 0xa, 0x9, 0x401, 0x6, 0xa, 0x6, 0x1, 0x1a574c4f, 0xbb, 0x9, 0x7332b85f, 0x4, 0x4, 0x390a, 0xd91, 0x7, 0xfffffffe, 0x0, 0x9, 0x1, 0x2, 0x0, 0x7, 0xffff, 0xc, 0x7, 0xfffffff9, 0x671c, 0x9, 0xfffeffff, 0x50f, 0x9, 0x40, 0x0, 0x35, 0x2, 0x340, 0xf21, 0x8000, 0x3, 0xfffffffa, 0x2, 0x400, 0x6, 0x0, 0x4b7dc43a, 0x8, 0x6, 0x9, 0x97aa, 0xf, 0x100, 0x2, 0x2, 0x0, 0x4, 0x3, 0x0, 0x3, 0x80000000, 0x6c, 0xfffffffb, 0x400, 0x4, 0xfffffffe, 0xd, 0xfff, 0x6, 0x9, 0x9, 0x5, 0x100, 0x0, 0xae, 0x40, 0x6, 0xfffffff8, 0x4, 0xf, 0xff, 0x8, 0xbf8, 0x7, 0x5, 0x1e63, 0x9, 0x7, 0x0, 0x3, 0xe937, 0x6, 0x6, 0xe4f7, 0x1000, 0x6, 0x7e66, 0x4, 0x0, 0x1ff, 0xff, 0x0, 0x9, 0x800, 0xfa, 0x101, 0x2, 0x2, 0x8, 0x7f, 0x1, 0xc, 0x7d, 0x1, 0x2, 0x0, 0x6, 0x1, 0x7, 0x8, 0x10, 0xfffffff8, 0x1, 0x2, 0x6, 0x7, 0x8, 0xb, 0x3, 0x7, 0x3, 0x5, 0x1cfe969b, 0x7ff, 0x3, 0x0, 0xd, 0x8, 0x9, 0x101, 0xcf3c, 0x48, 0x4539, 0xcbd4, 0x8, 0x9, 0x4, 0x8, 0x0, 0x8000, 0x5, 0x7f, 0x8000, 0x0, 0x4, 0x9, 0x80000001, 0x0, 0x69294c9d, 0xc2e4, 0xd7d, 0x9, 0x80000000, 0x6, 0xef12, 0x5, 0x3, 0xfffffff9, 0x4, 0x5, 0x5af, 0x5, 0xfff, 0x6d, 0xb1, 0xc52d, 0x8, 0x3, 0x2, 0x2, 0x40, 0xfffffff8, 0x2, 0x200, 0x9, 0xd, 0x1, 0x2, 0x2, 0x800, 0x46300000, 0x9, 0x8, 0x6, 0x2, 0xf, 0x8, 0x7fffffff]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7ff}, @TCA_HTB_RATE64={0xc, 0x6, 0x401}]}}]}, 0xcac}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) r6 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r6, 0x0, 0x18, 0x0, &(0x7f0000000200)) sendmsg$key(r5, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a000000244dc7f8000000000000000000000000ff80000100000000000000000200010000000000000000060100004005000500330000000a0000000000000000000000000000000000ffff0a0101000000000000000000aedbf5fd15617ed3fd001c2ab6fbc2db2265bb8798aea8780136a1e7d65419f51b19a586e5ed54fe3b4c9629f80596d544f3722a0acefd0f68a4e6e774c9b247b42d7249b1ac8a94444342ac99a643"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 1.735148098s ago: executing program 0 (id=2195): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000300), 0x10) (async) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b0a2a7cf704005cd"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="050000000508"], 0x80}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="06000000000000030000000000000000ad1a538310015f22df0578c18fd3f8b2977dc4bce1364a7ac632a2f89114c92a05"], 0x48}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000600)=ANY=[@ANYBLOB="3813ced8000000512bbf0830a4e89ab9968e489c96507e1b72e66f3c86bfa5ba18033aca565afa34f3b2ee0bb6794c8596eef9ff06aeafd6bc0916e9531d0aa6314532bc964a4095890bc1d34e3ab316ee74bb64f7e38b74cb4bfd66e34bb0b95a63dfb75c2499913bcfa0f353a30b39fde911fffffa52e831c03700122d6307a44e013cbfea87b4a14f58f2f49c4c57990000000000008ce8c95542560abb248aa49d8e5f62d05d64cd0c71455ecaf6b5426f0b9e0945f697d5c20a1743f060166be0ab2ac1cbb1295b6b528df79172d7edb1202e343ba591f30b8d0d1e44f2c13e30219f7259a4a93eee", @ANYRES16=r2, @ANYBLOB="01000009000000000000090000000500070014000000050007001e000000050007001400000008000100030000000800010000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4085}, 0x2000c105) 1.606402213s ago: executing program 0 (id=2196): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB='\x00'/10], 0x1c}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xa, 0x2, 0x250, [0x0, 0x20000100, 0x0, 0x20000280], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"/592]}, 0x2c8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x0, 0x1}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000004c0)={r4, 0x1, 0x20}, 0xc) 1.565232225s ago: executing program 4 (id=1474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000007000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000060000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) 1.12155ms ago: executing program 0 (id=2197): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000001c0)=@default) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}}, 0x40000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x3c}}, 0x40000) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) (async) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "ec"}], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x300, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8100, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000080)={'veth0_macvtap\x00'}) r3 = socket$l2tp(0x2, 0x2, 0x73) socket(0x22, 0x80801, 0x1) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10) (async) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$kcm(0x25, 0x1, 0x0) (async) r5 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) (async) recvmsg$kcm(r5, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f00000000c0)=""/120, &(0x7f0000000140)=0x78) 640.834µs ago: executing program 2 (id=2198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000001c0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000b80)={0x24, r1, 0x6a513da061e1002b, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x47, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4008841}, 0x70808c2ba8fed3ba) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020", 0x5, 0x0, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req={0x80000001, 0x6, 0x8, 0x80000001}, 0x10) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @loopback}, 0x10) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 3 (id=2199): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r2) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26, 0x0, 0x0, @void, @value}, 0x10) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x4, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x0, 0x3, "45f03ddbd8aa8987fe6255b1f0ce25722d4fbc3e175fdc7e099d8e96fb9e1684b3ce5ba5138c0597ab9dbe76c14ef51028ce0cbae0c1f2a920ddddc3faa3406091ba1969da904569a5ef5112d5b196a9c9326e7d3812d3d5ea0aa140"}}}}]}, 0x38}}, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000002c80)=ANY=[@ANYRES32=r6], 0xfc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000880)={0x0, 0x99, "109bb9e3fcd5b83a9861f59115b284f495349e58f1406b2877beef26461c7e4661ce940495b2e842396cbb1f98b8ff61c011817ce672e0ab20bf0102506664db33b7050bd638ec3d586e94e33f6a3d95c0772645a629da5108e88b6a20f1fa1f5f0ab9fdd10fe218195b3637b2ecaa6c740865e44145e97dde91db52348dcc146fb0f27ec3ef00702c721be7cf51a31f43f686442e8af97ea6"}, &(0x7f0000000940)=0xa1) sendmmsg$inet_sctp(r5, &(0x7f0000000c00)=[{&(0x7f0000000500)=@in6={0xa, 0x4e24, 0x8000, @mcast2, 0x1}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000006c0)}], 0x1, &(0x7f0000000980)=[@sndrcv={0x30, 0x84, 0x1, {0xa, 0x40, 0x203, 0xff80, 0x3, 0x40000000, 0xfffffff8, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0x8, 0x8001, 0x99a, 0x8de9edd, 0x2, 0xb, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x20f, 0xffffffff, 0x4}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0xffffffff}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x7, 0x207, 0xf, 0x4, 0xe, 0x8, 0x4}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x200, 0x3, 0x7, r6}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x7, 0x3, 0x10001, r7}}, @authinfo={0x18, 0x84, 0x6, {0xb41}}], 0x138, 0x20008800}, {&(0x7f0000000ac0)=@in6={0xa, 0x4e20, 0x2, @loopback, 0x7}, 0x1c, &(0x7f0000000bc0)=[{&(0x7f0000000b00)="a8ef7b6f5307dff4d5455047f12530099992c2c59d7c5bcd5e2ba814e08276b99c1a6448f1", 0x25}, {&(0x7f0000000b40)="081c784b09f3ce84d241a0d43dcf390621e1bb608a1e225265a33829b48585ba3f9730a149b69c60da3863a46fa9d1944eeb0dec8e76a2ce79a77c497cda4f6cee7aeb0be3088200ee5fdda161bd50dbf9bc810cbf05d1cf4114bf652b0187bf39c69106bad870d3e883c5ede724ea50d0c0a762337f53955850a4daa093bfe4", 0x80}], 0x2, 0x0, 0x0, 0x44}], 0x2, 0x1a5762d8d0d196f6) (async, rerun: 32) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r9, @ANYBLOB='w'], 0x1c}}, 0x0) (async) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r11) (async, rerun: 32) splice(r10, 0x0, r11, 0x0, 0x10500, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f0000000240)=""/41, 0x29, 0x0, &(0x7f0000000280)}}, 0x10) (async, rerun: 32) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='memory.swap.events\x00', 0x0, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0xc, &(0x7f0000000080)=@raw=[@map_idx={0x18, 0x4, 0x5, 0x0, 0x6}, @alu={0x7, 0x1, 0x8, 0x1, 0x18, 0x8, 0xfffffffffffffff8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}], &(0x7f0000000000)='syzkaller\x00', 0xecf3, 0xf8, &(0x7f0000000100)=""/248, 0x41000, 0x10, '\x00', r9, @cgroup_sysctl, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0xa, 0x6, 0x2}, 0x10, r12, r13, 0x6, &(0x7f0000000380), &(0x7f00000003c0)=[{0x1, 0x5, 0x6, 0x4}, {0x3, 0x2, 0x10, 0x5}, {0x4, 0x2, 0x8, 0x1}, {0x5, 0x5, 0xd, 0xe}, {0x4, 0x1, 0xe, 0xb}, {0x0, 0x3, 0x5}], 0x10, 0x8, @void, @value}, 0x94) socket$key(0xf, 0x3, 0x2) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): d blocking state [ 259.384764][T11776] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.392113][ T5843] Bluetooth: hci0: command tx timeout [ 259.398267][T11776] bridge_slave_1: entered allmulticast mode [ 259.405839][T11776] bridge_slave_1: entered promiscuous mode [ 259.509514][T11776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.541238][T11776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.562035][T11815] FAULT_INJECTION: forcing a failure. [ 259.562035][T11815] name failslab, interval 1, probability 0, space 0, times 0 [ 259.577326][T11815] CPU: 0 UID: 0 PID: 11815 Comm: syz.2.1858 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 259.588157][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 259.598246][T11815] Call Trace: [ 259.601540][T11815] [ 259.604508][T11815] dump_stack_lvl+0x241/0x360 [ 259.609231][T11815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.614555][T11815] ? __pfx__printk+0x10/0x10 [ 259.619173][T11815] ? ref_tracker_alloc+0x332/0x490 [ 259.624309][T11815] should_fail_ex+0x3b0/0x4e0 [ 259.629009][T11815] should_failslab+0xac/0x100 [ 259.633692][T11815] ? skb_clone+0x20c/0x390 [ 259.638115][T11815] kmem_cache_alloc_noprof+0x70/0x380 [ 259.643504][T11815] skb_clone+0x20c/0x390 [ 259.647749][T11815] __netlink_deliver_tap+0x3cc/0x7f0 [ 259.653047][T11815] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.658243][T11815] netlink_deliver_tap+0x19d/0x1b0 [ 259.663350][T11815] netlink_sendskb+0x68/0x140 [ 259.668029][T11815] netlink_unicast+0x39d/0x990 [ 259.672799][T11815] ? __pfx_netlink_unicast+0x10/0x10 [ 259.678091][T11815] netlink_rcv_skb+0x262/0x430 [ 259.682852][T11815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 259.688313][T11815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 259.693612][T11815] ? netlink_deliver_tap+0x2e/0x1b0 [ 259.698808][T11815] netlink_unicast+0x7f6/0x990 [ 259.703580][T11815] ? __pfx_netlink_unicast+0x10/0x10 [ 259.708873][T11815] ? __virt_addr_valid+0x45f/0x530 [ 259.713987][T11815] ? __phys_addr_symbol+0x2f/0x70 [ 259.719016][T11815] ? __check_object_size+0x47a/0x730 [ 259.724305][T11815] netlink_sendmsg+0x8e4/0xcb0 [ 259.729080][T11815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.734363][T11815] ? aa_sock_msg_perm+0x91/0x160 [ 259.739300][T11815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 259.744579][T11815] __sock_sendmsg+0x221/0x270 [ 259.749265][T11815] ____sys_sendmsg+0x52a/0x7e0 [ 259.754059][T11815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 259.759352][T11815] ? __fget_files+0x2a/0x410 [ 259.763947][T11815] ? __fget_files+0x2a/0x410 [ 259.768544][T11815] __sys_sendmmsg+0x36a/0x720 [ 259.773244][T11815] ? __pfx___sys_sendmmsg+0x10/0x10 [ 259.778451][T11815] ? __pfx_lock_release+0x10/0x10 [ 259.783475][T11815] ? kstrtouint_from_user+0x128/0x190 [ 259.788877][T11815] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 259.795207][T11815] ? ksys_write+0x22a/0x2b0 [ 259.799708][T11815] ? __pfx_lock_release+0x10/0x10 [ 259.804734][T11815] ? vfs_write+0x730/0xd30 [ 259.809155][T11815] ? __mutex_unlock_slowpath+0x21e/0x790 [ 259.814810][T11815] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.820791][T11815] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.827129][T11815] ? do_syscall_64+0x100/0x230 [ 259.831896][T11815] __x64_sys_sendmmsg+0xa0/0xb0 [ 259.836750][T11815] do_syscall_64+0xf3/0x230 [ 259.841257][T11815] ? clear_bhb_loop+0x35/0x90 [ 259.845929][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.851820][T11815] RIP: 0033:0x7f1434f85d19 [ 259.856237][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.875856][T11815] RSP: 002b:00007f1435df0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 259.884278][T11815] RAX: ffffffffffffffda RBX: 00007f1435175fa0 RCX: 00007f1434f85d19 [ 259.892337][T11815] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 259.900316][T11815] RBP: 00007f1435df0090 R08: 0000000000000000 R09: 0000000000000000 [ 259.908318][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.916293][T11815] R13: 0000000000000000 R14: 00007f1435175fa0 R15: 00007ffc7a698a38 [ 259.924280][T11815] [ 260.543090][T11776] team0: Port device team_slave_0 added [ 260.572684][T11776] team0: Port device team_slave_1 added [ 260.652813][T11836] netlink: 'syz.3.1866': attribute type 32 has an invalid length. [ 260.655198][T11835] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1865'. [ 260.807513][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.845770][T11776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.854237][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.883394][T11776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.897201][T11776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.906356][T11776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.934081][T11776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.029241][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.115359][T11848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1871'. [ 261.124545][T11798] chnl_net:caif_netlink_parms(): no params data found [ 261.154955][T11853] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1872'. [ 261.160574][T11848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1871'. [ 261.186207][ T5843] Bluetooth: hci2: command tx timeout [ 261.197133][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.235520][T11855] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.1873'. [ 261.256820][T11776] hsr_slave_0: entered promiscuous mode [ 261.271536][T11855] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 261.292615][T11776] hsr_slave_1: entered promiscuous mode [ 261.456859][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.469576][ T5843] Bluetooth: hci0: command tx timeout [ 261.849796][T11798] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.888144][T11798] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.895424][T11798] bridge_slave_0: entered allmulticast mode [ 261.902865][T11798] bridge_slave_0: entered promiscuous mode [ 261.976517][T11798] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.984017][T11798] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.991872][T11798] bridge_slave_1: entered allmulticast mode [ 261.999249][T11798] bridge_slave_1: entered promiscuous mode [ 262.104641][T11875] bond6: entered promiscuous mode [ 262.121905][T11875] bond6: entered allmulticast mode [ 262.138559][ T12] bridge_slave_1: left allmulticast mode [ 262.144375][ T12] bridge_slave_1: left promiscuous mode [ 262.150749][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.175800][ T12] bridge_slave_0: left allmulticast mode [ 262.195966][ T12] bridge_slave_0: left promiscuous mode [ 262.217539][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.038359][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.049284][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.079584][ T12] bond0 (unregistering): Released all slaves [ 263.105092][T11798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.119792][T11798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.228769][ T5843] Bluetooth: hci2: command tx timeout [ 263.259015][T11798] team0: Port device team_slave_0 added [ 263.452902][T11798] team0: Port device team_slave_1 added [ 263.549945][ T5843] Bluetooth: hci0: command tx timeout [ 263.686050][T11798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.694220][T11898] set match dimension is over the limit! [ 263.710581][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.753989][T11900] __nla_validate_parse: 2 callbacks suppressed [ 263.754013][T11900] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1887'. [ 263.755255][T11798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.787805][T11798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.795060][T11798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.852747][T11798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.992907][T11798] hsr_slave_0: entered promiscuous mode [ 264.004363][T11798] hsr_slave_1: entered promiscuous mode [ 264.018186][T11798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.026316][T11798] Cannot create hsr debugfs directory [ 264.040503][ T12] hsr_slave_0: left promiscuous mode [ 264.052769][ T12] hsr_slave_1: left promiscuous mode [ 264.072054][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.087960][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.100721][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.114212][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.171729][ T12] veth1_macvtap: left promiscuous mode [ 264.177322][ T12] veth0_macvtap: left promiscuous mode [ 264.187678][T11911] netlink: 'syz.3.1889': attribute type 64 has an invalid length. [ 264.206383][ T12] veth1_vlan: left promiscuous mode [ 264.217976][ T12] veth0_vlan: left promiscuous mode [ 264.814704][ T12] team0 (unregistering): Port device team_slave_1 removed [ 264.862173][ T12] team0 (unregistering): Port device team_slave_0 removed [ 265.311137][ T5843] Bluetooth: hci2: command tx timeout [ 265.338538][T11906] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1890'. [ 265.628120][ T5843] Bluetooth: hci0: command tx timeout [ 265.687516][T11932] FAULT_INJECTION: forcing a failure. [ 265.687516][T11932] name failslab, interval 1, probability 0, space 0, times 0 [ 265.722247][T11932] CPU: 0 UID: 0 PID: 11932 Comm: syz.0.1896 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 265.733077][T11932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 265.743150][T11932] Call Trace: [ 265.746431][T11932] [ 265.749365][T11932] dump_stack_lvl+0x241/0x360 [ 265.754058][T11932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.759261][T11932] ? __pfx__printk+0x10/0x10 [ 265.763856][T11932] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 265.769854][T11932] ? __pfx___might_resched+0x10/0x10 [ 265.775316][T11932] should_fail_ex+0x3b0/0x4e0 [ 265.780095][T11932] should_failslab+0xac/0x100 [ 265.784781][T11932] kmem_cache_alloc_node_noprof+0x77/0x380 [ 265.790595][T11932] ? __alloc_skb+0x1c3/0x440 [ 265.795188][T11932] __alloc_skb+0x1c3/0x440 [ 265.799609][T11932] ? __pfx___alloc_skb+0x10/0x10 [ 265.804571][T11932] ? netlink_autobind+0xd6/0x2f0 [ 265.809507][T11932] ? netlink_autobind+0x2b0/0x2f0 [ 265.814535][T11932] netlink_sendmsg+0x638/0xcb0 [ 265.819305][T11932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.824593][T11932] ? aa_sock_msg_perm+0x91/0x160 [ 265.829558][T11932] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.834850][T11932] __sock_sendmsg+0x221/0x270 [ 265.839535][T11932] ____sys_sendmsg+0x52a/0x7e0 [ 265.844303][T11932] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.849589][T11932] ? __fget_files+0x2a/0x410 [ 265.854184][T11932] ? __fget_files+0x2a/0x410 [ 265.858782][T11932] __sys_sendmsg+0x269/0x350 [ 265.863370][T11932] ? __pfx_lock_release+0x10/0x10 [ 265.868395][T11932] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.873516][T11932] ? __pfx_vfs_write+0x10/0x10 [ 265.878307][T11932] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.884637][T11932] ? do_syscall_64+0x100/0x230 [ 265.889402][T11932] ? do_syscall_64+0xb6/0x230 [ 265.894075][T11932] do_syscall_64+0xf3/0x230 [ 265.898575][T11932] ? clear_bhb_loop+0x35/0x90 [ 265.903254][T11932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.909143][T11932] RIP: 0033:0x7fa1c2185d19 [ 265.913558][T11932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.933168][T11932] RSP: 002b:00007fa1bfff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.941589][T11932] RAX: ffffffffffffffda RBX: 00007fa1c2375fa0 RCX: 00007fa1c2185d19 [ 265.949561][T11932] RDX: 0000000020000000 RSI: 0000000020002a40 RDI: 0000000000000003 [ 265.957531][T11932] RBP: 00007fa1bfff6090 R08: 0000000000000000 R09: 0000000000000000 [ 265.967455][T11932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.975726][T11932] R13: 0000000000000000 R14: 00007fa1c2375fa0 R15: 00007ffc5815f3f8 [ 265.984013][T11932] [ 265.999986][T11776] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 266.025587][T11939] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1899'. [ 266.026695][T11776] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 266.111595][T11776] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 266.124333][T11776] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.352427][T11950] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1904'. [ 266.419744][T11776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.487786][T11776] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.528314][ T7675] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.535584][ T7675] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.624130][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.631366][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.665958][T11776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 266.676749][T11776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.703398][T11959] syzkaller1: entered promiscuous mode [ 266.709128][T11959] syzkaller1: entered allmulticast mode [ 266.797308][T11798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 266.832177][T11798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 266.858206][T11798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 266.876894][T11798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 266.938277][T11776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.081293][T11798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.130990][T11798] 8021q: adding VLAN 0 to HW filter on device team0 [ 267.142222][T11421] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.149478][T11421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 267.194879][T11426] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.202076][T11426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.381559][T11776] veth0_vlan: entered promiscuous mode [ 267.393366][T11776] veth1_vlan: entered promiscuous mode [ 267.404027][ T5843] Bluetooth: hci2: command tx timeout [ 267.464400][T11981] lo speed is unknown, defaulting to 1000 [ 267.523867][T11776] veth0_macvtap: entered promiscuous mode [ 267.531197][T11985] SET target dimension over the limit! [ 267.565104][T11776] veth1_macvtap: entered promiscuous mode [ 267.609517][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.624825][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.628896][T11988] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1912'. [ 267.640584][T11776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.685898][T11798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.706946][T11776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.739620][T11776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.761864][T11776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.832217][T11776] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.865532][T11776] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.890988][T11776] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.932327][T11776] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.070778][T11999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1916'. [ 268.855153][T12001] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1917'. [ 268.967416][T11798] veth0_vlan: entered promiscuous mode [ 269.037692][T12007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1919'. [ 269.048384][T11798] veth1_vlan: entered promiscuous mode [ 269.054165][T12009] netlink: 'syz.2.1921': attribute type 32 has an invalid length. [ 269.087201][ T7675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.106353][ T7675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.176412][T11426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.196222][T11426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.215203][T11798] veth0_macvtap: entered promiscuous mode [ 269.233605][T12017] xt_HMARK: spi-set and port-set can't be combined [ 269.275872][T11798] veth1_macvtap: entered promiscuous mode [ 269.303827][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.314551][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.324576][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.335849][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.348627][T11798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.369152][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.370501][T12019] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1924'. [ 269.379783][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.379831][T11798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.379849][T11798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.380905][T11798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.435120][T11798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.443919][T11798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.452701][T11798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.461573][T11798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.604976][ T7675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.617603][ T7675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.667550][T11423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.678774][T11423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.877089][T12037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1929'. [ 269.911156][T12037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1929'. [ 269.964476][T12039] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.1930'. [ 269.975016][T12039] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 270.153539][T11423] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.219346][T12041] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1931'. [ 270.406333][T11423] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.780581][T11423] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.849087][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 270.859851][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 270.882402][T11423] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.893285][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 270.907406][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 270.929489][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 270.936908][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 270.994029][T12050] lo speed is unknown, defaulting to 1000 [ 271.142873][T11423] bridge_slave_1: left allmulticast mode [ 271.150686][T11423] bridge_slave_1: left promiscuous mode [ 271.156749][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.170615][T11423] bridge_slave_0: left allmulticast mode [ 271.180570][T11423] bridge_slave_0: left promiscuous mode [ 271.186364][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.700789][T11423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.712282][T11423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.722922][T11423] bond0 (unregistering): Released all slaves [ 271.761610][T12050] chnl_net:caif_netlink_parms(): no params data found [ 271.862740][T12050] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.870121][T12050] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.877308][T12050] bridge_slave_0: entered allmulticast mode [ 271.884080][T12050] bridge_slave_0: entered promiscuous mode [ 271.892483][T12050] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.899748][T12050] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.906959][T12050] bridge_slave_1: entered allmulticast mode [ 271.914462][T12050] bridge_slave_1: entered promiscuous mode [ 271.964173][T12050] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.975529][T12050] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.091720][T12050] team0: Port device team_slave_0 added [ 272.111015][T12050] team0: Port device team_slave_1 added [ 272.210136][T11423] hsr_slave_0: left promiscuous mode [ 272.222829][T11423] hsr_slave_1: left promiscuous mode [ 272.231031][T11423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.246640][T11423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.302563][T11423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.318362][T11423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.395370][T11423] veth1_macvtap: left promiscuous mode [ 272.417380][T11423] veth0_macvtap: left promiscuous mode [ 272.429438][T11423] veth1_vlan: left promiscuous mode [ 272.441230][T11423] veth0_vlan: left promiscuous mode [ 272.506688][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.533782][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.542475][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.558345][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 272.569051][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 272.576921][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 272.618579][T12079] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1939'. [ 272.993212][ T5843] Bluetooth: hci0: command tx timeout [ 273.160622][T11423] team0 (unregistering): Port device team_slave_1 removed [ 273.207145][T11423] team0 (unregistering): Port device team_slave_0 removed [ 273.653620][T12050] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.660880][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.687288][T12050] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.700157][T12050] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.707153][T12050] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.735018][T12050] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.748062][T12069] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 273.835141][T12076] lo speed is unknown, defaulting to 1000 [ 273.881864][T12050] hsr_slave_0: entered promiscuous mode [ 273.898719][T12050] hsr_slave_1: entered promiscuous mode [ 274.029372][T12086] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1942'. [ 274.143043][T12103] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1944'. [ 274.211846][T12105] pim6reg1: entered promiscuous mode [ 274.217583][T12105] pim6reg1: entered allmulticast mode [ 274.354338][T12111] set match dimension is over the limit! [ 274.393201][T12076] chnl_net:caif_netlink_parms(): no params data found [ 274.497108][T11423] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.519408][T12113] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1948'. [ 274.558007][T12113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1948'. [ 274.665664][T11423] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.676368][ T5843] Bluetooth: hci2: command tx timeout [ 274.713633][T12113] syzkaller1: entered promiscuous mode [ 274.719846][T12113] syzkaller1: entered allmulticast mode [ 274.817518][T11423] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.915352][T11423] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.986481][T12127] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1953'. [ 275.046513][T12076] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.054119][T12076] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.062766][T12076] bridge_slave_0: entered allmulticast mode [ 275.070347][T12076] bridge_slave_0: entered promiscuous mode [ 275.079548][ T5843] Bluetooth: hci0: command tx timeout [ 275.118763][T12076] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.135401][T12130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1954'. [ 275.138672][T12076] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.170308][T12076] bridge_slave_1: entered allmulticast mode [ 275.188991][T12076] bridge_slave_1: entered promiscuous mode [ 275.280132][T12076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.339732][T12076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.456972][T12076] team0: Port device team_slave_0 added [ 275.505771][T12076] team0: Port device team_slave_1 added [ 275.564391][T11423] bridge_slave_1: left allmulticast mode [ 275.579297][T11423] bridge_slave_1: left promiscuous mode [ 275.585099][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.607183][T11423] bridge_slave_0: left allmulticast mode [ 275.617193][T11423] bridge_slave_0: left promiscuous mode [ 275.626876][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.403920][T11423] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.416807][T11423] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.434253][T11423] bond0 (unregistering): Released all slaves [ 276.448962][T12142] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 276.450833][T12143] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1957'. [ 276.605418][T12076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.609678][T12151] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1960'. [ 276.612621][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.623946][T12151] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1960'. [ 276.685755][T12151] netlink: 'syz.2.1960': attribute type 5 has an invalid length. [ 276.693796][T12151] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1960'. [ 276.748111][T12076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.767147][ T5830] Bluetooth: hci2: command tx timeout [ 276.825890][T12076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.833179][T12076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.868511][T12076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.948308][T12076] hsr_slave_0: entered promiscuous mode [ 276.972784][T12076] hsr_slave_1: entered promiscuous mode [ 277.012389][T12076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.024585][T12076] Cannot create hsr debugfs directory [ 277.030264][T12161] lo speed is unknown, defaulting to 1000 [ 277.039974][T12050] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.074781][T12050] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.138850][T12050] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.148530][ T5830] Bluetooth: hci0: command tx timeout [ 277.303789][T12050] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.418050][T11423] hsr_slave_0: left promiscuous mode [ 277.429311][T11423] hsr_slave_1: left promiscuous mode [ 277.439612][T11423] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.447253][T11423] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.466013][T11423] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.474270][T11423] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.513285][T11423] veth1_macvtap: left promiscuous mode [ 277.538050][T11423] veth0_macvtap: left promiscuous mode [ 277.543706][T11423] veth1_vlan: left promiscuous mode [ 277.549348][T11423] veth0_vlan: left promiscuous mode [ 278.174480][T11423] team0 (unregistering): Port device team_slave_1 removed [ 278.221992][T11423] team0 (unregistering): Port device team_slave_0 removed [ 278.828132][ T5830] Bluetooth: hci2: command tx timeout [ 279.001095][T12050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.042953][T12050] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.077207][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.084361][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.139291][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.146557][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.238328][ T5830] Bluetooth: hci0: command tx timeout [ 279.239256][T12190] netlink: 'syz.3.1971': attribute type 12 has an invalid length. [ 279.293205][T12192] netlink: 'syz.3.1971': attribute type 5 has an invalid length. [ 279.366491][T12076] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.398734][T12076] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.423807][T12076] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.452372][T12076] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.501136][T12197] lo speed is unknown, defaulting to 1000 [ 279.532983][T12204] SET target dimension over the limit! [ 279.574803][T12050] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.755233][T12216] __nla_validate_parse: 2 callbacks suppressed [ 279.755255][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1975'. [ 279.765223][T12076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.966456][T12076] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.014417][T11426] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.021637][T11426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.057855][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.065021][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.911963][ T5830] Bluetooth: hci2: command tx timeout [ 280.925487][T12050] veth0_vlan: entered promiscuous mode [ 280.957550][T12230] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1980'. [ 280.963975][T12232] netlink: 'syz.0.1981': attribute type 32 has an invalid length. [ 281.017571][T12050] veth1_vlan: entered promiscuous mode [ 281.029927][T12234] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1982'. [ 281.072681][T12076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 281.125460][T12050] veth0_macvtap: entered promiscuous mode [ 281.152341][T12050] veth1_macvtap: entered promiscuous mode [ 281.214575][T12241] netlink: 'syz.0.1984': attribute type 25 has an invalid length. [ 281.268698][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.298861][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.336398][T12050] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.363574][T12050] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.391707][T12050] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.413818][T12050] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.451198][T12050] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.461061][T12050] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.471302][T12050] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.482988][T12050] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.506845][T12076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.605132][T11421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.629868][T11421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.666696][T12076] veth0_vlan: entered promiscuous mode [ 281.681827][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.691584][T12076] veth1_vlan: entered promiscuous mode [ 281.698081][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.749265][T12076] veth0_macvtap: entered promiscuous mode [ 281.769083][T12076] veth1_macvtap: entered promiscuous mode [ 281.837411][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.848480][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.859518][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.893900][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.909120][T12076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.934128][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.947731][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.959877][T12076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.970950][T12076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.983469][T12076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.009415][T12076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.018989][T12076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.033197][T12076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.043801][T12076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.178020][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.185917][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.295970][T11426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.304594][T11426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.412400][T12265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1988'. [ 282.422552][T12265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1988'. [ 282.519612][T12267] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.1991'. [ 282.533199][T12267] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 282.571624][T11426] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.701163][T11426] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.806171][T11426] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.108576][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.117316][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.127252][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.136540][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.146313][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.157661][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.186141][T12274] lo speed is unknown, defaulting to 1000 [ 283.215389][T11426] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.293558][T12274] chnl_net:caif_netlink_parms(): no params data found [ 283.342198][T12274] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.349764][T12274] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.357007][T12274] bridge_slave_0: entered allmulticast mode [ 283.364327][T12274] bridge_slave_0: entered promiscuous mode [ 283.374005][T12274] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.382085][T12274] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.390546][T12274] bridge_slave_1: entered allmulticast mode [ 283.397227][T12274] bridge_slave_1: entered promiscuous mode [ 283.422169][T12274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.433683][T12274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.461566][T12274] team0: Port device team_slave_0 added [ 283.470792][T12274] team0: Port device team_slave_1 added [ 283.489565][T12274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.496552][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.523102][T12274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.535076][T12274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.542173][T12274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.569109][T12274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.604835][T12274] hsr_slave_0: entered promiscuous mode [ 283.611559][T12274] hsr_slave_1: entered promiscuous mode [ 283.618001][T12274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.625950][T12274] Cannot create hsr debugfs directory [ 283.760235][T11426] bridge_slave_1: left allmulticast mode [ 283.765955][T11426] bridge_slave_1: left promiscuous mode [ 283.773137][T11426] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.781661][T11426] bridge_slave_0: left allmulticast mode [ 283.787331][T11426] bridge_slave_0: left promiscuous mode [ 283.793689][T11426] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.154589][T11426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.168587][T11426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.179833][T11426] bond0 (unregistering): Released all slaves [ 284.502976][T11426] hsr_slave_0: left promiscuous mode [ 284.538013][T11426] hsr_slave_1: left promiscuous mode [ 284.546530][T11426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.568000][T11426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.598039][T11426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.616230][T11426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.694807][T11426] veth1_macvtap: left promiscuous mode [ 284.710681][T11426] veth0_macvtap: left promiscuous mode [ 284.716354][T11426] veth1_vlan: left promiscuous mode [ 284.733094][T11426] veth0_vlan: left promiscuous mode [ 284.842877][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 284.856803][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 284.870312][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 284.881319][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 284.893545][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 284.904101][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 284.912556][T12299] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 284.947013][T12299] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.1997'. [ 284.980949][T12299] netlink: zone id is out of range [ 284.986270][T12299] netlink: zone id is out of range [ 284.996837][T12299] netlink: zone id is out of range [ 285.026296][T12299] netlink: zone id is out of range [ 285.031776][T12299] netlink: zone id is out of range [ 285.036945][T12299] netlink: zone id is out of range [ 285.048217][T12299] netlink: zone id is out of range [ 285.053443][T12299] netlink: zone id is out of range [ 285.228995][ T5843] Bluetooth: hci0: command tx timeout [ 285.519216][T11426] team0 (unregistering): Port device team_slave_1 removed [ 285.571864][T11426] team0 (unregistering): Port device team_slave_0 removed [ 286.135005][T12288] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1994'. [ 286.272346][T12274] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 286.308845][T12274] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 286.318562][T12296] lo speed is unknown, defaulting to 1000 [ 286.319521][T12274] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 286.391383][T12274] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.616225][T12310] bond10: entered promiscuous mode [ 286.658742][T12310] bond10: entered allmulticast mode [ 286.735947][T12274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.865742][T11426] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.966843][T12274] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.988931][ T5843] Bluetooth: hci2: command tx timeout [ 287.045645][T11426] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.065708][T12296] chnl_net:caif_netlink_parms(): no params data found [ 287.094141][T11421] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.101350][T11421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.129627][T11421] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.136844][T11421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.205893][T11426] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.308147][ T5843] Bluetooth: hci0: command tx timeout [ 287.316986][T11426] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.422489][T12296] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.430373][T12296] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.437656][T12296] bridge_slave_0: entered allmulticast mode [ 287.444887][T12296] bridge_slave_0: entered promiscuous mode [ 287.459907][T12296] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.467239][T12296] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.474728][T12296] bridge_slave_1: entered allmulticast mode [ 287.482253][T12296] bridge_slave_1: entered promiscuous mode [ 287.503305][T12274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 287.514387][T12274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.609846][T12334] set match dimension is over the limit! [ 287.679376][T12296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.694045][T12335] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 287.800141][T12296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.818330][T11426] bridge_slave_1: left allmulticast mode [ 287.826688][T11426] bridge_slave_1: left promiscuous mode [ 287.833925][T11426] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.847397][T11426] bridge_slave_0: left allmulticast mode [ 287.858359][T11426] bridge_slave_0: left promiscuous mode [ 287.864251][T11426] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.944420][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2007'. [ 288.276772][T11426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.288374][T11426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.299319][T11426] bond0 (unregistering): Released all slaves [ 288.329844][T12349] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2009'. [ 288.341309][T12350] syzkaller1: entered promiscuous mode [ 288.346813][T12350] syzkaller1: entered allmulticast mode [ 288.407210][T12296] team0: Port device team_slave_0 added [ 288.496131][T12296] team0: Port device team_slave_1 added [ 288.529617][T12274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.649174][T12296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.656188][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.685713][T12296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.785344][T12296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.808085][T12296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.843534][T12296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.915438][T11426] hsr_slave_0: left promiscuous mode [ 288.940492][T11426] hsr_slave_1: left promiscuous mode [ 288.954191][T11426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.966194][T12381] FAULT_INJECTION: forcing a failure. [ 288.966194][T12381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.981033][T11426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.993896][T11426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.001613][T11426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.008931][T12381] CPU: 1 UID: 0 PID: 12381 Comm: syz.2.2015 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 289.019728][T12381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 289.029900][T12381] Call Trace: [ 289.033188][T12381] [ 289.036139][T12381] dump_stack_lvl+0x241/0x360 [ 289.040823][T12381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.046024][T12381] ? __pfx__printk+0x10/0x10 [ 289.050612][T12381] ? __pfx_lock_release+0x10/0x10 [ 289.055651][T12381] should_fail_ex+0x3b0/0x4e0 [ 289.060345][T12381] _copy_from_iter+0x1e9/0x1c20 [ 289.065196][T12381] ? __virt_addr_valid+0x183/0x530 [ 289.068266][ T5843] Bluetooth: hci2: command tx timeout [ 289.070321][T12381] ? __alloc_skb+0x28f/0x440 [ 289.080280][T12381] ? __pfx__copy_from_iter+0x10/0x10 [ 289.085588][T12381] ? __virt_addr_valid+0x183/0x530 [ 289.090707][T12381] ? __virt_addr_valid+0x183/0x530 [ 289.095848][T12381] ? __virt_addr_valid+0x45f/0x530 [ 289.100964][T12381] ? __phys_addr_symbol+0x2f/0x70 [ 289.106001][T12381] ? __check_object_size+0x47a/0x730 [ 289.111291][T12381] netlink_sendmsg+0x73d/0xcb0 [ 289.116059][T12381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.121356][T12381] ? aa_sock_msg_perm+0x91/0x160 [ 289.126332][T12381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.131646][T12381] __sock_sendmsg+0x221/0x270 [ 289.136597][T12381] ____sys_sendmsg+0x52a/0x7e0 [ 289.141394][T12381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.146700][T12381] ? __fget_files+0x2a/0x410 [ 289.151300][T12381] ? __fget_files+0x2a/0x410 [ 289.156148][T12381] __sys_sendmsg+0x269/0x350 [ 289.160789][T12381] ? __pfx_lock_release+0x10/0x10 [ 289.165823][T12381] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.170966][T12381] ? __pfx_vfs_write+0x10/0x10 [ 289.175779][T12381] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 289.182127][T12381] ? do_syscall_64+0x100/0x230 [ 289.186896][T12381] ? do_syscall_64+0xb6/0x230 [ 289.191576][T12381] do_syscall_64+0xf3/0x230 [ 289.196082][T12381] ? clear_bhb_loop+0x35/0x90 [ 289.200776][T12381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.206690][T12381] RIP: 0033:0x7f1434f85d19 [ 289.211193][T12381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.230802][T12381] RSP: 002b:00007f1435df0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 289.239222][T12381] RAX: ffffffffffffffda RBX: 00007f1435175fa0 RCX: 00007f1434f85d19 [ 289.247190][T12381] RDX: 0000000020000000 RSI: 0000000020002a40 RDI: 0000000000000003 [ 289.255180][T12381] RBP: 00007f1435df0090 R08: 0000000000000000 R09: 0000000000000000 [ 289.263146][T12381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.271128][T12381] R13: 0000000000000000 R14: 00007f1435175fa0 R15: 00007ffc7a698a38 [ 289.279129][T12381] [ 289.314934][T11426] veth1_macvtap: left promiscuous mode [ 289.328737][T11426] veth0_macvtap: left promiscuous mode [ 289.337836][T11426] veth1_vlan: left promiscuous mode [ 289.343344][T11426] veth0_vlan: left promiscuous mode [ 289.388810][ T5843] Bluetooth: hci0: command tx timeout [ 289.894207][T11426] team0 (unregistering): Port device team_slave_1 removed [ 289.937653][T11426] team0 (unregistering): Port device team_slave_0 removed [ 290.362949][T12395] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2021'. [ 290.450474][T12296] hsr_slave_0: entered promiscuous mode [ 290.469401][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2022'. [ 290.482764][T12296] hsr_slave_1: entered promiscuous mode [ 290.496448][T12406] FAULT_INJECTION: forcing a failure. [ 290.496448][T12406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.510075][T12406] CPU: 1 UID: 0 PID: 12406 Comm: syz.2.2024 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 290.520883][T12406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 290.530974][T12406] Call Trace: [ 290.534277][T12406] [ 290.537241][T12406] dump_stack_lvl+0x241/0x360 [ 290.541960][T12406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.547195][T12406] ? __pfx__printk+0x10/0x10 [ 290.551822][T12406] ? __pfx_lock_release+0x10/0x10 [ 290.556869][T12406] should_fail_ex+0x3b0/0x4e0 [ 290.561551][T12406] _copy_from_user+0x2f/0xc0 [ 290.566135][T12406] copy_msghdr_from_user+0xae/0x680 [ 290.571352][T12406] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 290.577209][T12406] ? __fget_files+0x2a/0x410 [ 290.581810][T12406] ? __fget_files+0x2a/0x410 [ 290.586425][T12406] __sys_sendmsg+0x209/0x350 [ 290.591032][T12406] ? __pfx_lock_release+0x10/0x10 [ 290.596060][T12406] ? __pfx___sys_sendmsg+0x10/0x10 [ 290.601202][T12406] ? __pfx_vfs_write+0x10/0x10 [ 290.605975][T12406] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 290.612297][T12406] ? do_syscall_64+0x100/0x230 [ 290.617060][T12406] ? do_syscall_64+0xb6/0x230 [ 290.621739][T12406] do_syscall_64+0xf3/0x230 [ 290.626246][T12406] ? clear_bhb_loop+0x35/0x90 [ 290.630927][T12406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.636833][T12406] RIP: 0033:0x7f1434f85d19 [ 290.641248][T12406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.660853][T12406] RSP: 002b:00007f1435df0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 290.669270][T12406] RAX: ffffffffffffffda RBX: 00007f1435175fa0 RCX: 00007f1434f85d19 [ 290.677245][T12406] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 290.685220][T12406] RBP: 00007f1435df0090 R08: 0000000000000000 R09: 0000000000000000 [ 290.693705][T12406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.701667][T12406] R13: 0000000000000000 R14: 00007f1435175fa0 R15: 00007ffc7a698a38 [ 290.709642][T12406] [ 290.851400][T12274] veth0_vlan: entered promiscuous mode [ 290.905271][T12413] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2026'. [ 290.925305][T12274] veth1_vlan: entered promiscuous mode [ 290.959706][T12416] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.2027'. [ 290.969265][T12416] net_ratelimit: 119 callbacks suppressed [ 290.969283][T12416] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 290.985999][T12413] bond7: entered promiscuous mode [ 291.073661][T12418] 8021q: adding VLAN 0 to HW filter on device bond8 [ 291.149191][ T5843] Bluetooth: hci2: command tx timeout [ 291.249384][T12418] bond8 (unregistering): Released all slaves [ 291.332068][T12413] bond7 (unregistering): Released all slaves [ 291.397168][T12274] veth0_macvtap: entered promiscuous mode [ 291.409833][T12274] veth1_macvtap: entered promiscuous mode [ 291.427379][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.438444][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.453436][T12274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.468134][ T5843] Bluetooth: hci0: command tx timeout [ 291.471019][T12274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.501775][T12274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.516438][T12274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.543252][T12274] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.552414][T12274] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.554582][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2034'. [ 291.561421][T12274] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.579296][T12274] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.593037][T12439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 291.725098][ T196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.756715][ T196] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.851761][T12450] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2035'. [ 291.876945][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.891714][T12296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.898255][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.921015][T12296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.941511][T12452] lo speed is unknown, defaulting to 1000 [ 291.957657][T12296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.979528][T12457] SET target dimension over the limit! [ 292.000260][T12296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.121262][T12463] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2039'. [ 292.227511][T12467] netlink: 'syz.0.2043': attribute type 32 has an invalid length. [ 292.358439][T12296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.385124][T12296] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.395242][T12476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2045'. [ 292.421823][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.429071][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.445214][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.452438][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.477484][T12296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 292.488780][T12296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.690252][T12296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.723701][ T7675] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.762364][T12296] veth0_vlan: entered promiscuous mode [ 292.772270][T12296] veth1_vlan: entered promiscuous mode [ 292.797389][ T7675] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.834069][T12296] veth0_macvtap: entered promiscuous mode [ 292.842796][T12296] veth1_macvtap: entered promiscuous mode [ 292.865139][ T7675] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.884454][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.895397][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.905339][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.916015][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.927049][T12296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.952428][ T7675] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.968774][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.979447][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.989808][T12296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.001214][T12296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.012234][T12296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.024397][T12296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.033343][T12296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.042471][T12296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.051456][T12296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.135849][T11426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.147193][T11426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.172338][ T7675] bridge_slave_1: left allmulticast mode [ 293.178245][ T7675] bridge_slave_1: left promiscuous mode [ 293.183910][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.193497][ T7675] bridge_slave_0: left allmulticast mode [ 293.199618][ T7675] bridge_slave_0: left promiscuous mode [ 293.205296][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.228359][ T5843] Bluetooth: hci2: command tx timeout [ 293.821094][ T7675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.845287][ T7675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.855089][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 293.865261][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 293.874552][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 293.875930][ T7675] bond0 (unregistering): Released all slaves [ 293.890548][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 293.898519][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 293.906076][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 293.923586][T12490] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2049'. [ 293.955295][T11426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.002561][T11426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.073831][T12498] lo speed is unknown, defaulting to 1000 [ 294.510603][T12511] bond8: entered promiscuous mode [ 294.556833][ T7675] hsr_slave_0: left promiscuous mode [ 294.580331][ T7675] hsr_slave_1: left promiscuous mode [ 294.587121][ T7675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.597124][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.638867][ T7675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.658557][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.692834][ T7675] veth1_macvtap: left promiscuous mode [ 294.700593][ T7675] veth0_macvtap: left promiscuous mode [ 294.706824][ T7675] veth1_vlan: left promiscuous mode [ 294.712749][ T7675] veth0_vlan: left promiscuous mode [ 294.737313][T12523] FAULT_INJECTION: forcing a failure. [ 294.737313][T12523] name failslab, interval 1, probability 0, space 0, times 0 [ 294.752099][T12523] CPU: 0 UID: 0 PID: 12523 Comm: syz.3.2058 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 294.762925][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 294.773011][T12523] Call Trace: [ 294.776306][T12523] [ 294.779248][T12523] dump_stack_lvl+0x241/0x360 [ 294.783940][T12523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.789140][T12523] ? __pfx__printk+0x10/0x10 [ 294.793734][T12523] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 294.799720][T12523] ? __pfx___might_resched+0x10/0x10 [ 294.805012][T12523] should_fail_ex+0x3b0/0x4e0 [ 294.809707][T12523] should_failslab+0xac/0x100 [ 294.814386][T12523] kmem_cache_alloc_node_noprof+0x77/0x380 [ 294.820191][T12523] ? __alloc_skb+0x1c3/0x440 [ 294.824791][T12523] __alloc_skb+0x1c3/0x440 [ 294.829214][T12523] ? ib_device_get_by_index+0x2cb/0x3c0 [ 294.834765][T12523] ? __pfx___alloc_skb+0x10/0x10 [ 294.839706][T12523] ? __asan_memset+0x23/0x50 [ 294.844298][T12523] ? nla_strscpy+0x113/0x180 [ 294.848896][T12523] nldev_get_chardev+0x525/0xc90 [ 294.853830][T12523] ? mark_lock+0x9a/0x360 [ 294.858165][T12523] ? __lock_acquire+0x1397/0x2100 [ 294.863191][T12523] ? __pfx_nldev_get_chardev+0x10/0x10 [ 294.868709][T12523] ? __lock_acquire+0x1397/0x2100 [ 294.873735][T12523] ? __pfx_down_read+0x10/0x10 [ 294.878513][T12523] ? __lock_acquire+0x1397/0x2100 [ 294.883542][T12523] ? __pfx_nldev_get_chardev+0x10/0x10 [ 294.889004][T12523] rdma_nl_rcv+0x6dd/0x9e0 [ 294.893430][T12523] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 294.898385][T12523] ? netlink_deliver_tap+0x2e/0x1b0 [ 294.903584][T12523] netlink_unicast+0x7f6/0x990 [ 294.908361][T12523] ? __pfx_netlink_unicast+0x10/0x10 [ 294.913648][T12523] ? __virt_addr_valid+0x45f/0x530 [ 294.918759][T12523] ? __phys_addr_symbol+0x2f/0x70 [ 294.923808][T12523] ? __check_object_size+0x47a/0x730 [ 294.929099][T12523] netlink_sendmsg+0x8e4/0xcb0 [ 294.933889][T12523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.939177][T12523] ? aa_sock_msg_perm+0x91/0x160 [ 294.944115][T12523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 294.949399][T12523] __sock_sendmsg+0x221/0x270 [ 294.954082][T12523] ____sys_sendmsg+0x52a/0x7e0 [ 294.958852][T12523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 294.964161][T12523] ? __fget_files+0x2a/0x410 [ 294.968774][T12523] ? __fget_files+0x2a/0x410 [ 294.973388][T12523] __sys_sendmsg+0x269/0x350 [ 294.977988][T12523] ? __pfx_lock_release+0x10/0x10 [ 294.983017][T12523] ? __pfx___sys_sendmsg+0x10/0x10 [ 294.988142][T12523] ? __pfx_vfs_write+0x10/0x10 [ 294.992923][T12523] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 294.999249][T12523] ? do_syscall_64+0x100/0x230 [ 295.004015][T12523] ? do_syscall_64+0xb6/0x230 [ 295.008691][T12523] do_syscall_64+0xf3/0x230 [ 295.013196][T12523] ? clear_bhb_loop+0x35/0x90 [ 295.017880][T12523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.023778][T12523] RIP: 0033:0x7f8b35385d19 [ 295.028193][T12523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.047810][T12523] RSP: 002b:00007f8b36138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 295.056241][T12523] RAX: ffffffffffffffda RBX: 00007f8b35575fa0 RCX: 00007f8b35385d19 [ 295.064213][T12523] RDX: 0000000020000000 RSI: 0000000020002a40 RDI: 0000000000000003 [ 295.072188][T12523] RBP: 00007f8b36138090 R08: 0000000000000000 R09: 0000000000000000 [ 295.080156][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.088123][T12523] R13: 0000000000000000 R14: 00007f8b35575fa0 R15: 00007fff9b560708 [ 295.096114][T12523] [ 295.594563][ T7675] team0 (unregistering): Port device team_slave_1 removed [ 295.638780][ T7675] team0 (unregistering): Port device team_slave_0 removed [ 295.961955][ T5830] Bluetooth: hci0: command tx timeout [ 296.092821][T12498] chnl_net:caif_netlink_parms(): no params data found [ 296.159265][T12498] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.167058][T12498] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.175916][T12498] bridge_slave_0: entered allmulticast mode [ 296.182792][T12498] bridge_slave_0: entered promiscuous mode [ 296.191867][T12498] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.199219][T12498] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.206490][T12498] bridge_slave_1: entered allmulticast mode [ 296.214323][T12498] bridge_slave_1: entered promiscuous mode [ 296.244948][T12498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.256934][T12498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.288055][T12498] team0: Port device team_slave_0 added [ 296.296603][T12498] team0: Port device team_slave_1 added [ 296.319616][T12498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.326604][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.353046][T12498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.366221][T12498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.373722][T12498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.400129][T12498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.440775][T12498] hsr_slave_0: entered promiscuous mode [ 296.447236][T12498] hsr_slave_1: entered promiscuous mode [ 296.454337][T12498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.463126][T12498] Cannot create hsr debugfs directory [ 296.492713][ T7675] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.767487][T12498] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 296.777174][T12498] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 296.798712][T12498] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 296.807508][T12498] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 296.826071][T12498] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.833297][T12498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.840761][T12498] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.847930][T12498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.888758][T12498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.904400][T11423] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.914777][T11423] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.001055][T12498] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.037212][T12536] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.2060'. [ 297.083066][T12536] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 297.100241][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.107418][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.142900][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.150111][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.332157][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 297.357719][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 297.360073][T12552] netlink: 'syz.2.2063': attribute type 1 has an invalid length. [ 297.374149][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 297.386726][ T7675] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.450942][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 297.465749][T12498] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.465778][T12557] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2065'. [ 297.543467][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 297.570231][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 297.570608][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 297.584780][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2066'. [ 297.644072][ T7675] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.669740][T12562] netlink: 'syz.2.2066': attribute type 75 has an invalid length. [ 297.683128][T12567] netlink: 'syz.3.2068': attribute type 32 has an invalid length. [ 297.697741][T12568] SET target dimension over the limit! [ 297.713529][T12549] lo speed is unknown, defaulting to 1000 [ 297.794351][ T7675] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.810478][T12564] lo speed is unknown, defaulting to 1000 [ 297.894396][T12498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.080177][ T7675] bridge_slave_1: left allmulticast mode [ 298.085892][ T7675] bridge_slave_1: left promiscuous mode [ 298.091819][ T7675] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.116864][ T7675] bridge_slave_0: left allmulticast mode [ 298.122865][ T7675] bridge_slave_0: left promiscuous mode [ 298.132220][ T7675] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.544499][ T7675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.556174][ T7675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.570971][ T7675] bond0 (unregistering): Released all slaves [ 298.594722][T12549] chnl_net:caif_netlink_parms(): no params data found [ 298.632558][T12571] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 298.837272][T12604] set match dimension is over the limit! [ 298.882400][T12606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2073'. [ 298.895780][T12549] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.895809][T12606] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2073'. [ 298.911228][T12549] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.919402][T12549] bridge_slave_0: entered allmulticast mode [ 298.926583][T12549] bridge_slave_0: entered promiscuous mode [ 298.962980][T12549] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.983885][T12549] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.999978][T12549] bridge_slave_1: entered allmulticast mode [ 299.007026][T12549] bridge_slave_1: entered promiscuous mode [ 299.094731][T12614] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 299.120781][T12549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.140981][T12549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.167485][T12498] veth0_vlan: entered promiscuous mode [ 299.236861][T12622] netlink: 'syz.0.2077': attribute type 10 has an invalid length. [ 299.244403][T12549] team0: Port device team_slave_0 added [ 299.270855][T12498] veth1_vlan: entered promiscuous mode [ 299.284400][T12549] team0: Port device team_slave_1 added [ 299.329063][ T7675] hsr_slave_0: left promiscuous mode [ 299.336326][ T7675] hsr_slave_1: left promiscuous mode [ 299.360313][ T7675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.368062][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.376011][ T7675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.383757][ T7675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.407737][ T7675] veth1_macvtap: left promiscuous mode [ 299.413701][ T7675] veth0_macvtap: left promiscuous mode [ 299.419736][ T7675] veth1_vlan: left promiscuous mode [ 299.425216][ T7675] veth0_vlan: left promiscuous mode [ 299.632496][ T5830] Bluetooth: hci2: command tx timeout [ 299.936488][ T7675] team0 (unregistering): Port device team_slave_1 removed [ 299.981797][ T7675] team0 (unregistering): Port device team_slave_0 removed [ 300.077715][T12624] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 300.379922][T12549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.387090][T12549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.413587][T12549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.426108][T12549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.433817][T12549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.460180][T12549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.482413][T12636] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2081'. [ 300.536418][T12498] veth0_macvtap: entered promiscuous mode [ 300.546671][T12498] veth1_macvtap: entered promiscuous mode [ 300.586217][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 300.604291][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2084'. [ 300.640374][T12642] netlink: 'syz.0.2084': attribute type 7 has an invalid length. [ 300.696161][T12644] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2085'. [ 300.760124][T12549] hsr_slave_0: entered promiscuous mode [ 300.774767][T12549] hsr_slave_1: entered promiscuous mode [ 300.782822][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.813950][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.825631][T12498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.845972][T12498] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.856774][T12498] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.867786][T12498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.892192][T12652] vlan2: entered allmulticast mode [ 300.897589][T12652] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 300.980042][T12498] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.007076][T12654] netlink: 'syz.2.2088': attribute type 3 has an invalid length. [ 301.015244][T12498] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.037992][T12498] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.047105][T12498] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.432000][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.454180][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.472532][T12676] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 301.490251][T12673] bond9: entered allmulticast mode [ 301.660660][ T7676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.674680][ T7676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.708547][ T5830] Bluetooth: hci2: command tx timeout [ 301.928805][T12685] lo speed is unknown, defaulting to 1000 [ 301.947722][T12688] SET target dimension over the limit! [ 302.064489][T12549] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 302.098542][T12549] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 302.140547][T12549] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 302.245899][T12700] __nla_validate_parse: 2 callbacks suppressed [ 302.245919][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2101'. [ 302.259753][T12699] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 302.272155][T12699] TCP: tcp_parse_options: Illegal window scaling value 249 > 14 received [ 302.296118][T12700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2101'. [ 302.313241][T12549] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 302.440090][T12549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.457725][T12549] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.470960][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.478118][ T7676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.494881][ T3433] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.502012][ T3433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.557723][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.666807][T12549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.707530][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.736837][T12549] veth0_vlan: entered promiscuous mode [ 302.747521][T12549] veth1_vlan: entered promiscuous mode [ 302.771699][T12549] veth0_macvtap: entered promiscuous mode [ 302.779904][T12549] veth1_macvtap: entered promiscuous mode [ 302.794460][T12549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.805267][T12549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.815219][T12549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.826377][T12549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.838612][T12549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.852994][T12549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.863750][T12549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.874190][T12549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.884777][T12549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.896791][T12549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.923172][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.941307][T12549] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.950335][T12549] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.959915][T12549] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.968823][T12549] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.023776][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.056911][ T3433] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.069036][ T3433] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.089478][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.097448][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.205594][ T12] bridge_slave_1: left allmulticast mode [ 303.211657][ T12] bridge_slave_1: left promiscuous mode [ 303.217370][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.226784][ T12] bridge_slave_0: left allmulticast mode [ 303.233273][ T12] bridge_slave_0: left promiscuous mode [ 303.239232][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.605120][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'. [ 303.634331][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.648045][T12718] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2107'. [ 303.661477][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.678703][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.718941][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.728276][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 303.743702][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.822808][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.833808][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.844444][ T12] bond0 (unregistering): Released all slaves [ 303.864963][T12721] vlan2: entered promiscuous mode [ 303.871116][T12721] vlan2: entered allmulticast mode [ 303.972428][T12716] lo speed is unknown, defaulting to 1000 [ 304.041569][T12724] syzkaller1: entered promiscuous mode [ 304.047418][T12724] syzkaller1: entered allmulticast mode [ 304.130103][T12730] netlink: 'syz.0.2110': attribute type 2 has an invalid length. [ 304.183841][T12730] netlink: 'syz.0.2110': attribute type 9 has an invalid length. [ 304.200611][T12733] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 304.218512][T12730] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2110'. [ 304.225883][T12732] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 304.285181][ T12] hsr_slave_0: left promiscuous mode [ 304.310697][ T12] hsr_slave_1: left promiscuous mode [ 304.316978][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.324788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.334566][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.342282][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.369918][ T12] veth1_macvtap: left promiscuous mode [ 304.375936][ T12] veth0_macvtap: left promiscuous mode [ 304.381971][ T12] veth1_vlan: left promiscuous mode [ 304.387447][ T12] veth0_vlan: left promiscuous mode [ 304.391428][T12736] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2112'. [ 304.446296][T12743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.944883][ T12] team0 (unregistering): Port device team_slave_1 removed [ 305.001007][ T12] team0 (unregistering): Port device team_slave_0 removed [ 305.411348][T12740] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.418681][T12740] IPv6: NLM_F_CREATE should be set when creating new route [ 305.579294][T12750] netlink: 'syz.3.2116': attribute type 5 has an invalid length. [ 305.652941][T12754] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.2117'. [ 305.683323][T12754] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 305.695471][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2119'. [ 305.699671][T12716] chnl_net:caif_netlink_parms(): no params data found [ 305.705618][T12761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2119'. [ 305.788165][ T5830] Bluetooth: hci0: command tx timeout [ 306.031428][T12716] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.039059][T12770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 306.048245][T12716] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.055510][T12716] bridge_slave_0: entered allmulticast mode [ 306.064180][T12716] bridge_slave_0: entered promiscuous mode [ 306.094642][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.110312][T12716] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.117470][T12716] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.125056][T12716] bridge_slave_1: entered allmulticast mode [ 306.132347][T12716] bridge_slave_1: entered promiscuous mode [ 306.154285][T12716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.166918][T12716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.192744][T12716] team0: Port device team_slave_0 added [ 306.204573][T12716] team0: Port device team_slave_1 added [ 306.223798][T12716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.231112][T12716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.257337][T12716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.271259][T12716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.278478][T12716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.305855][T12716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.335673][T12716] hsr_slave_0: entered promiscuous mode [ 306.342053][T12716] hsr_slave_1: entered promiscuous mode [ 306.348913][T12716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.356493][T12716] Cannot create hsr debugfs directory [ 306.457045][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.521336][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.603341][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.688091][ T12] bridge_slave_1: left allmulticast mode [ 306.693959][ T12] bridge_slave_1: left promiscuous mode [ 306.703018][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.711672][ T12] bridge_slave_0: left allmulticast mode [ 306.717323][ T12] bridge_slave_0: left promiscuous mode [ 306.723581][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.068240][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.079722][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.093334][ T12] bond0 (unregistering): Released all slaves [ 307.130090][T12716] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 307.139054][T12716] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 307.147681][T12716] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 307.166339][T12716] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 307.292905][T12716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.307418][T12716] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.319207][T11421] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.326300][T11421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.344251][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.351411][ T7675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.377144][ T12] hsr_slave_0: left promiscuous mode [ 307.383162][ T12] hsr_slave_1: left promiscuous mode [ 307.391164][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.400283][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.408156][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.415590][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.435963][ T12] veth1_macvtap: left promiscuous mode [ 307.441885][ T12] veth0_macvtap: left promiscuous mode [ 307.447499][ T12] veth1_vlan: left promiscuous mode [ 307.452912][ T12] veth0_vlan: left promiscuous mode [ 307.699536][T12775] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2123'. [ 307.720920][T12775] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2123'. [ 307.873220][ T5830] Bluetooth: hci0: command tx timeout [ 308.013437][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 308.023220][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 308.038833][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 308.052308][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 308.075954][ T5843] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 308.090594][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.146788][ T12] team0 (unregistering): Port device team_slave_1 removed [ 308.200293][ T12] team0 (unregistering): Port device team_slave_0 removed [ 308.831157][T12784] lo speed is unknown, defaulting to 1000 [ 308.902607][T12793] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2130'. [ 308.916236][T12798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 308.937467][T12798] vlan3: entered allmulticast mode [ 308.953359][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2130'. [ 309.201567][T12809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2134'. [ 309.226437][T12716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.296538][T12784] chnl_net:caif_netlink_parms(): no params data found [ 309.374530][T12824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2136'. [ 309.401049][T12824] FAULT_INJECTION: forcing a failure. [ 309.401049][T12824] name failslab, interval 1, probability 0, space 0, times 0 [ 309.432213][T12824] CPU: 0 UID: 0 PID: 12824 Comm: syz.0.2136 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 309.443050][T12824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 309.453152][T12824] Call Trace: [ 309.456451][T12824] [ 309.459393][T12824] dump_stack_lvl+0x241/0x360 [ 309.464099][T12824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.469325][T12824] ? __pfx__printk+0x10/0x10 [ 309.473940][T12824] should_fail_ex+0x3b0/0x4e0 [ 309.479935][T12824] should_failslab+0xac/0x100 [ 309.484618][T12824] __kmalloc_cache_noprof+0x70/0x390 [ 309.490006][T12824] ? __hw_addr_add_ex+0x1a8/0x610 [ 309.495033][T12824] __hw_addr_add_ex+0x1a8/0x610 [ 309.499891][T12824] dev_addr_init+0x143/0x230 [ 309.504493][T12824] ? __pfx_dev_addr_init+0x10/0x10 [ 309.509619][T12824] ? read_word_at_a_time+0xe/0x20 [ 309.514648][T12824] alloc_netdev_mqs+0x2ae/0x1080 [ 309.519591][T12824] ? __pfx_vlan_setup+0x10/0x10 [ 309.524463][T12824] ? __pfx_snprintf+0x10/0x10 [ 309.529150][T12824] rtnl_create_link+0x2f9/0xc20 [ 309.534010][T12824] rtnl_newlink_create+0x210/0xa40 [ 309.539132][T12824] ? __pfx___mutex_lock+0x10/0x10 [ 309.544156][T12824] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 309.549826][T12824] ? ns_capable+0x8a/0xf0 [ 309.554167][T12824] rtnl_newlink+0x160d/0x2150 [ 309.558861][T12824] ? __pfx_rtnl_newlink+0x10/0x10 [ 309.563924][T12824] ? __pfx_validate_chain+0x10/0x10 [ 309.569143][T12824] ? validate_chain+0x11e/0x5920 [ 309.574080][T12824] ? __pfx_lock_acquire+0x10/0x10 [ 309.579110][T12824] ? __pfx_lock_release+0x10/0x10 [ 309.584225][T12824] ? __pfx_validate_chain+0x10/0x10 [ 309.589456][T12824] ? mark_lock+0x9a/0x360 [ 309.593795][T12824] ? __lock_acquire+0x1397/0x2100 [ 309.598846][T12824] ? __pfx_lock_release+0x10/0x10 [ 309.603892][T12824] ? __pfx_rtnl_newlink+0x10/0x10 [ 309.608920][T12824] rtnetlink_rcv_msg+0x791/0xcf0 [ 309.613863][T12824] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 309.618975][T12824] ? __lock_acquire+0x1397/0x2100 [ 309.624015][T12824] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.629489][T12824] netlink_rcv_skb+0x1e3/0x430 [ 309.634258][T12824] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.639740][T12824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 309.645061][T12824] ? netlink_deliver_tap+0x2e/0x1b0 [ 309.650276][T12824] netlink_unicast+0x7f6/0x990 [ 309.655180][T12824] ? __pfx_netlink_unicast+0x10/0x10 [ 309.660616][T12824] ? __virt_addr_valid+0x45f/0x530 [ 309.665736][T12824] ? __phys_addr_symbol+0x2f/0x70 [ 309.670765][T12824] ? __check_object_size+0x47a/0x730 [ 309.676054][T12824] netlink_sendmsg+0x8e4/0xcb0 [ 309.680883][T12824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.686192][T12824] ? aa_sock_msg_perm+0x91/0x160 [ 309.691152][T12824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.696444][T12824] __sock_sendmsg+0x221/0x270 [ 309.701131][T12824] ____sys_sendmsg+0x52a/0x7e0 [ 309.705906][T12824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 309.711188][T12824] ? __fget_files+0x2a/0x410 [ 309.715789][T12824] ? __fget_files+0x2a/0x410 [ 309.720406][T12824] __sys_sendmsg+0x269/0x350 [ 309.725006][T12824] ? __pfx_lock_release+0x10/0x10 [ 309.730038][T12824] ? __pfx___sys_sendmsg+0x10/0x10 [ 309.735160][T12824] ? __pfx_vfs_write+0x10/0x10 [ 309.739945][T12824] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 309.746304][T12824] ? do_syscall_64+0x100/0x230 [ 309.751070][T12824] ? do_syscall_64+0xb6/0x230 [ 309.755754][T12824] do_syscall_64+0xf3/0x230 [ 309.760257][T12824] ? clear_bhb_loop+0x35/0x90 [ 309.764939][T12824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.770835][T12824] RIP: 0033:0x7fa1c2185d19 [ 309.775354][T12824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.795052][T12824] RSP: 002b:00007fa1bffd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.803477][T12824] RAX: ffffffffffffffda RBX: 00007fa1c2376080 RCX: 00007fa1c2185d19 [ 309.811456][T12824] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 309.819431][T12824] RBP: 00007fa1bffd5090 R08: 0000000000000000 R09: 0000000000000000 [ 309.827406][T12824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.835383][T12824] R13: 0000000000000000 R14: 00007fa1c2376080 R15: 00007ffc5815f3f8 [ 309.843372][T12824] [ 309.864676][T12825] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.873710][T12825] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.882028][T12825] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.890326][T12825] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.964833][ T5843] Bluetooth: hci0: command tx timeout [ 310.107476][T12842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'. [ 310.134938][T12784] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.146604][T12784] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.167017][T12784] bridge_slave_0: entered allmulticast mode [ 310.176913][T12784] bridge_slave_0: entered promiscuous mode [ 310.188164][ T5843] Bluetooth: hci2: command tx timeout [ 310.196108][T12848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 310.206308][T12846] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2142'. [ 310.212429][T12784] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.222656][T12784] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.230163][T12784] bridge_slave_1: entered allmulticast mode [ 310.237768][T12784] bridge_slave_1: entered promiscuous mode [ 310.305719][T12716] veth0_vlan: entered promiscuous mode [ 310.320683][T12716] veth1_vlan: entered promiscuous mode [ 310.341887][T12716] veth0_macvtap: entered promiscuous mode [ 310.351874][T12716] veth1_macvtap: entered promiscuous mode [ 310.369891][T12784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.414959][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 310.425879][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.437204][T12716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.447205][T12716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 310.458186][T12716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 310.469759][T12716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.515031][T12784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.534063][T12716] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.546101][T12716] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.555103][T12716] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.564141][T12716] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.615961][T12861] set match dimension is over the limit! [ 310.653769][T12784] team0: Port device team_slave_0 added [ 310.665568][T12784] team0: Port device team_slave_1 added [ 310.786311][T12784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.795266][T12870] SET target dimension over the limit! [ 310.796918][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.836934][T12784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.856658][T12784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.867913][T12784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.894632][T12784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.915263][T12872] FAULT_INJECTION: forcing a failure. [ 310.915263][T12872] name failslab, interval 1, probability 0, space 0, times 0 [ 310.928297][T12872] CPU: 0 UID: 0 PID: 12872 Comm: syz.3.2152 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 310.939086][T12872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 310.949163][T12872] Call Trace: [ 310.952454][T12872] [ 310.955422][T12872] dump_stack_lvl+0x241/0x360 [ 310.960114][T12872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.965315][T12872] ? __pfx__printk+0x10/0x10 [ 310.969921][T12872] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 310.975319][T12872] ? __pfx___might_resched+0x10/0x10 [ 310.980617][T12872] should_fail_ex+0x3b0/0x4e0 [ 310.985317][T12872] should_failslab+0xac/0x100 [ 310.990021][T12872] __kmalloc_node_noprof+0xe1/0x4d0 [ 310.995252][T12872] ? __kvmalloc_node_noprof+0x72/0x190 [ 311.000713][T12872] ? __pfx_vlan_setup+0x10/0x10 [ 311.005586][T12872] __kvmalloc_node_noprof+0x72/0x190 [ 311.010882][T12872] alloc_netdev_mqs+0xa4/0x1080 [ 311.015753][T12872] ? __pfx_vlan_setup+0x10/0x10 [ 311.020625][T12872] ? __pfx_snprintf+0x10/0x10 [ 311.025306][T12872] ? rcu_is_watching+0x15/0xb0 [ 311.030096][T12872] rtnl_create_link+0x2f9/0xc20 [ 311.034971][T12872] rtnl_newlink_create+0x210/0xa40 [ 311.040094][T12872] ? __pfx___mutex_lock+0x10/0x10 [ 311.045136][T12872] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 311.050788][T12872] ? ns_capable+0x8a/0xf0 [ 311.055140][T12872] rtnl_newlink+0x160d/0x2150 [ 311.059826][T12872] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.064872][T12872] ? __netlink_deliver_tap+0x56b/0x7f0 [ 311.070343][T12872] ? __pfx_validate_chain+0x10/0x10 [ 311.075594][T12872] ? __sock_sendmsg+0x221/0x270 [ 311.080457][T12872] ? ____sys_sendmsg+0x52a/0x7e0 [ 311.085402][T12872] ? __sys_sendmsg+0x269/0x350 [ 311.090172][T12872] ? do_syscall_64+0xf3/0x230 [ 311.094900][T12872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.101004][T12872] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 311.107174][T12872] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 311.113529][T12872] ? mark_lock+0x9a/0x360 [ 311.117871][T12872] ? __lock_acquire+0x1397/0x2100 [ 311.122924][T12872] ? __pfx_lock_release+0x10/0x10 [ 311.127970][T12872] ? __pfx_rtnl_newlink+0x10/0x10 [ 311.133011][T12872] rtnetlink_rcv_msg+0x791/0xcf0 [ 311.137953][T12872] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 311.143104][T12872] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.148595][T12872] ? ref_tracker_free+0x643/0x7e0 [ 311.153646][T12872] netlink_rcv_skb+0x1e3/0x430 [ 311.158417][T12872] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 311.163885][T12872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 311.169209][T12872] ? netlink_deliver_tap+0x2e/0x1b0 [ 311.174431][T12872] netlink_unicast+0x7f6/0x990 [ 311.179226][T12872] ? __pfx_netlink_unicast+0x10/0x10 [ 311.184534][T12872] ? __virt_addr_valid+0x45f/0x530 [ 311.189658][T12872] ? __phys_addr_symbol+0x2f/0x70 [ 311.194705][T12872] ? __check_object_size+0x47a/0x730 [ 311.200033][T12872] netlink_sendmsg+0x8e4/0xcb0 [ 311.204849][T12872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.210172][T12872] ? aa_sock_msg_perm+0x91/0x160 [ 311.215137][T12872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.220426][T12872] __sock_sendmsg+0x221/0x270 [ 311.225106][T12872] ____sys_sendmsg+0x52a/0x7e0 [ 311.229893][T12872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 311.235210][T12872] ? __fget_files+0x2a/0x410 [ 311.239805][T12872] ? __fget_files+0x2a/0x410 [ 311.244402][T12872] __sys_sendmsg+0x269/0x350 [ 311.249004][T12872] ? __pfx_lock_release+0x10/0x10 [ 311.254085][T12872] ? __pfx___sys_sendmsg+0x10/0x10 [ 311.259210][T12872] ? __pfx_vfs_write+0x10/0x10 [ 311.263987][T12872] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 311.270380][T12872] ? do_syscall_64+0x100/0x230 [ 311.275169][T12872] ? do_syscall_64+0xb6/0x230 [ 311.279857][T12872] do_syscall_64+0xf3/0x230 [ 311.284362][T12872] ? clear_bhb_loop+0x35/0x90 [ 311.289267][T12872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.295179][T12872] RIP: 0033:0x7f8b35385d19 [ 311.299598][T12872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.319816][T12872] RSP: 002b:00007f8b36138038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.328251][T12872] RAX: ffffffffffffffda RBX: 00007f8b35575fa0 RCX: 00007f8b35385d19 [ 311.336244][T12872] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000004 [ 311.344219][T12872] RBP: 00007f8b36138090 R08: 0000000000000000 R09: 0000000000000000 [ 311.352214][T12872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.360986][T12872] R13: 0000000000000000 R14: 00007f8b35575fa0 R15: 00007fff9b560708 [ 311.368995][T12872] [ 311.393967][T12865] lo speed is unknown, defaulting to 1000 [ 311.394785][T11426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.410061][T11426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.494657][T12784] hsr_slave_0: entered promiscuous mode [ 311.506900][T12784] hsr_slave_1: entered promiscuous mode [ 311.538068][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.545931][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.694256][T12882] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 312.082005][T12894] openvswitch: netlink: Message has 1247 unknown bytes. [ 312.113001][T12894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.271739][ T5843] Bluetooth: hci2: command tx timeout [ 312.312000][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.407891][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.511987][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.620685][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.667231][T12784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.676538][T12784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.686961][T12784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.698057][T12784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.751322][T12784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.768854][T12784] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.780343][ T7676] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.787460][ T7676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.801848][ T7675] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.809018][ T7675] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.939444][T12784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.973966][T12784] veth0_vlan: entered promiscuous mode [ 312.983556][T12784] veth1_vlan: entered promiscuous mode [ 313.008415][T12784] veth0_macvtap: entered promiscuous mode [ 313.016615][T12784] veth1_macvtap: entered promiscuous mode [ 313.031843][T12784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.042840][T12784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.052901][T12784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.063460][T12784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.074548][T12784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.088849][T12784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.099556][T12784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.110179][T12784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.120756][T12784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.131542][T12784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.143744][T12784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.154398][T12784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.166487][T12784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.175647][T12784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.244517][ T12] bridge_slave_1: left allmulticast mode [ 313.250917][ T12] bridge_slave_1: left promiscuous mode [ 313.256635][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.266272][ T12] bridge_slave_0: left allmulticast mode [ 313.272387][ T12] bridge_slave_0: left promiscuous mode [ 313.280919][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.539189][T12909] trusted_key: syz.2.2163 sent an empty control message without MSG_MORE. [ 313.667150][T12912] __nla_validate_parse: 8 callbacks suppressed [ 313.667171][T12912] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2165'. [ 313.903329][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.912511][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.947561][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.959799][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.968203][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.988310][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.158973][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.171256][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.184876][ T12] bond0 (unregistering): Released all slaves [ 314.224525][T11421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.248015][T11421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.273220][T12918] lo speed is unknown, defaulting to 1000 [ 314.339643][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.347574][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.355014][ T5843] Bluetooth: hci2: command tx timeout [ 314.436297][T12921] bond0: option mode: unable to set because the bond device has slaves [ 314.551218][T12926] netlink: 1268 bytes leftover after parsing attributes in process `syz.3.2169'. [ 314.584930][T12926] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 314.696103][ T12] hsr_slave_0: left promiscuous mode [ 314.714632][ T12] hsr_slave_1: left promiscuous mode [ 314.722473][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.738414][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.752354][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.759026][T12936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 314.760046][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.779245][T12937] SET target dimension over the limit! [ 314.801391][ T12] veth1_macvtap: left promiscuous mode [ 314.807031][ T12] veth0_macvtap: left promiscuous mode [ 314.812852][ T12] veth1_vlan: left promiscuous mode [ 314.818376][ T12] veth0_vlan: left promiscuous mode [ 315.243982][ T12] team0 (unregistering): Port device team_slave_1 removed [ 315.291218][ T12] team0 (unregistering): Port device team_slave_0 removed [ 315.888942][T12936] 8021q: adding VLAN 0 to HW filter on device bond7 [ 315.921415][T12934] lo speed is unknown, defaulting to 1000 [ 316.028140][ T5843] Bluetooth: hci0: command tx timeout [ 316.059091][T12918] chnl_net:caif_netlink_parms(): no params data found [ 316.126874][T12918] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.134889][T12918] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.144762][T12918] bridge_slave_0: entered allmulticast mode [ 316.151577][T12918] bridge_slave_0: entered promiscuous mode [ 316.168722][T12918] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.181383][T12918] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.189077][T12918] bridge_slave_1: entered allmulticast mode [ 316.195637][T12918] bridge_slave_1: entered promiscuous mode [ 316.229311][T12918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.241146][T12918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.274610][T12918] team0: Port device team_slave_0 added [ 316.286015][T12918] team0: Port device team_slave_1 added [ 316.329489][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.345280][T12918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.354604][T12918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.380773][T12918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.393761][T12918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.400870][T12918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.427155][T12918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.457762][T12918] hsr_slave_0: entered promiscuous mode [ 316.465548][T12918] hsr_slave_1: entered promiscuous mode [ 316.472005][T12918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.480090][T12918] Cannot create hsr debugfs directory [ 316.767466][T12918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 316.776499][T12918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 316.785417][T12918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 316.795805][T12918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 316.814597][T12918] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.821756][T12918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.829106][T12918] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.836223][T12918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.879987][T12918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.894900][ T196] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.903884][ T196] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.924885][T12918] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.935536][ T196] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.942699][ T196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.957287][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.964460][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.090017][T12918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.173852][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.243864][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.280691][T12918] veth0_vlan: entered promiscuous mode [ 317.291013][T12918] veth1_vlan: entered promiscuous mode [ 317.313537][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.340406][T12918] veth0_macvtap: entered promiscuous mode [ 317.349751][T12918] veth1_macvtap: entered promiscuous mode [ 317.368246][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.378947][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.390744][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.401304][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.412467][T12918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.422898][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.433614][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.443853][T12918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.454799][T12918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.466147][T12918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.491797][T12918] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.501415][T12918] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.510439][T12918] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.519221][T12918] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.569518][ T12] bridge_slave_1: left allmulticast mode [ 317.575336][ T12] bridge_slave_1: left promiscuous mode [ 317.585141][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.596013][ T12] bridge_slave_0: left allmulticast mode [ 317.603996][ T12] bridge_slave_0: left promiscuous mode [ 317.611667][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.665452][T12959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2175'. [ 317.807189][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2177'. [ 318.049928][T12973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2179'. [ 318.099183][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 318.108481][ T5837] Bluetooth: hci0: command tx timeout [ 318.109927][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 318.123050][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 318.132508][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 318.140389][ T5830] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 318.147728][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 318.168285][T12977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2179'. [ 318.600445][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.615749][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.629754][ T12] bond0 (unregistering): Released all slaves [ 318.871587][T12983] dummy0: entered promiscuous mode [ 318.878218][T12982] dummy0: left promiscuous mode [ 318.892582][T12975] lo speed is unknown, defaulting to 1000 [ 318.990148][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2181'. [ 319.025390][T12989] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2181'. [ 319.119103][ T7675] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.127061][ T7675] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.244259][ T12] hsr_slave_0: left promiscuous mode [ 319.262961][ T12] hsr_slave_1: left promiscuous mode [ 319.270501][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.288896][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.296534][T12998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2184'. [ 319.307210][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.318329][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2184'. [ 319.328062][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.399028][ T12] veth1_macvtap: left promiscuous mode [ 319.404625][ T12] veth0_macvtap: left promiscuous mode [ 319.428329][ T12] veth1_vlan: left promiscuous mode [ 319.433687][ T12] veth0_vlan: left promiscuous mode [ 320.188972][ T5830] Bluetooth: hci0: command tx timeout [ 320.194901][ T5843] Bluetooth: hci2: command tx timeout [ 320.434287][ T12] team0 (unregistering): Port device team_slave_1 removed [ 320.475263][ T12] team0 (unregistering): Port device team_slave_0 removed [ 320.938090][T12998] vlan2: entered allmulticast mode [ 320.943838][T12998] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 320.981504][ T7676] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.998513][ T7676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.025790][T13008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2187'. [ 321.234981][T13019] lo speed is unknown, defaulting to 1000 [ 321.249325][T13014] pim6reg: entered allmulticast mode [ 321.268999][T13014] pim6reg: left allmulticast mode [ 321.287317][T13021] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.2191'. [ 321.301154][T13022] SET target dimension over the limit! [ 321.314042][T13021] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 321.364441][T12975] chnl_net:caif_netlink_parms(): no params data found [ 321.836232][T12975] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.852456][T12975] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.865722][T12975] bridge_slave_0: entered allmulticast mode [ 321.873938][T12975] bridge_slave_0: entered promiscuous mode [ 321.882070][T12975] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.889394][T12975] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.896762][T12975] bridge_slave_1: entered allmulticast mode [ 321.904037][T12975] bridge_slave_1: entered promiscuous mode [ 321.953422][T12975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.965692][T13037] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'. [ 321.990861][T12975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.015365][T13037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2194'. [ 322.122753][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.210949][T12975] team0: Port device team_slave_0 added [ 322.268560][ T5843] Bluetooth: hci2: command tx timeout [ 322.298824][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.344401][T12975] team0: Port device team_slave_1 added [ 322.365553][T12975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.372769][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.399210][T12975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.430112][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.442771][T12975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.450713][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.477153][T12975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.516052][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.539493][T12975] hsr_slave_0: entered promiscuous mode [ 322.545847][T12975] hsr_slave_1: entered promiscuous mode [ 322.666790][ T12] bridge_slave_1: left allmulticast mode [ 322.677293][ T12] bridge_slave_1: left promiscuous mode [ 322.683736][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.692865][ T12] bridge_slave_0: left allmulticast mode [ 322.698987][ T12] bridge_slave_0: left promiscuous mode [ 322.706485][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.162413][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.173242][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.183499][ T12] bond0 (unregistering): Released all slaves [ 323.496563][ T12] hsr_slave_0: left promiscuous mode [ 323.503650][ T12] hsr_slave_1: left promiscuous mode [ 323.510792][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.518261][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.525923][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.534761][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.599831][T13049] ------------[ cut here ]------------ [ 323.605534][T13049] WARNING: CPU: 1 PID: 13049 at net/rxrpc/sendmsg.c:296 rxrpc_send_data+0x2969/0x2b30 [ 323.615366][T13049] Modules linked in: [ 323.619325][T13049] CPU: 1 UID: 0 PID: 13049 Comm: syz.0.2197 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 323.630260][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 323.640413][T13049] RIP: 0010:rxrpc_send_data+0x2969/0x2b30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 323.646158][T13049] Code: 24 48 48 89 de e8 97 27 b3 f6 4c 39 f3 b8 00 fe ff ff 41 bf fc ff ff ff 44 0f 44 f8 45 31 f6 e9 71 fd ff ff e8 98 22 b3 f6 90 <0f> 0b 90 48 8b 7c 24 28 e8 aa e6 0d f7 e9 46 fd ff ff 89 d9 80 e1 [ 323.665982][T13049] RSP: 0018:ffffc9000480f3a0 EFLAGS: 00010293 [ 323.672160][T13049] RAX: ffffffff8aec3ba8 RBX: ffff88807cd4a180 RCX: ffff888065c50000 [ 323.680345][T13049] RDX: 0000000000000000 RSI: 00000000000000ff RDI: ffff888029b17440 [ 323.688432][T13049] RBP: ffffc9000480f650 R08: ffff888029b1743f R09: 0000000000000000 [ 323.696437][T13049] R10: ffff888029b17340 R11: ffffed1005362e88 R12: ffff88807cd4a148 [ 323.704631][T13049] R13: 1ffff1100f9a942f R14: ffff888029b17000 R15: 0000000000000000 [ 323.712692][T13049] FS: 00007fa1bffd56c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 323.721701][T13049] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 323.728398][T13049] CR2: 00007f8b3536b7e0 CR3: 000000005c292000 CR4: 00000000003526f0 [ 323.736397][T13049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 323.744435][T13049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 323.752458][T13049] Call Trace: [ 323.755757][T13049] [ 323.758773][T13049] ? __warn+0x165/0x4d0 [ 323.762952][T13049] ? rxrpc_send_data+0x2969/0x2b30 [ 323.768185][T13049] ? report_bug+0x2b3/0x500 [ 323.772754][T13049] ? rxrpc_send_data+0x2969/0x2b30 [ 323.777922][T13049] ? handle_bug+0x60/0x90 [ 323.782282][T13049] ? exc_invalid_op+0x1a/0x50 [ 323.786984][T13049] ? asm_exc_invalid_op+0x1a/0x20 [ 323.792084][T13049] ? rxrpc_send_data+0x2968/0x2b30 [ 323.797201][T13049] ? rxrpc_send_data+0x2969/0x2b30 [ 323.802370][T13049] ? __pfx_rxrpc_send_data+0x10/0x10 [ 323.807655][T13049] ? __local_bh_enable_ip+0x168/0x200 [ 323.813106][T13049] ? lockdep_hardirqs_on+0x99/0x150 [ 323.818382][T13049] ? __local_bh_enable_ip+0x168/0x200 [ 323.823798][T13049] ? __pfx_default_wake_function+0x10/0x10 [ 323.829686][T13049] rxrpc_do_sendmsg+0x1569/0x1910 [ 323.834754][T13049] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 323.840214][T13049] ? rxrpc_sendmsg+0x127/0x920 [ 323.845030][T13049] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 323.850929][T13049] ? do_raw_spin_unlock+0x13c/0x8b0 [ 323.856176][T13049] ? rxrpc_sendmsg+0x5d8/0x920 [ 323.861038][T13049] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 323.866179][T13049] __sock_sendmsg+0x221/0x270 [ 323.871068][T13049] ____sys_sendmsg+0x52a/0x7e0 [ 323.875868][T13049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 323.881263][T13049] ? __fget_files+0x2a/0x410 [ 323.885892][T13049] ? __fget_files+0x2a/0x410 [ 323.890583][T13049] __sys_sendmmsg+0x36a/0x720 [ 323.895309][T13049] ? __pfx___sys_sendmmsg+0x10/0x10 [ 323.900651][T13049] ? wake_up_q+0xdc/0x120 [ 323.905012][T13049] ? futex_wait+0x285/0x360 [ 323.909685][T13049] ? __pfx_futex_wait+0x10/0x10 [ 323.914578][T13049] ? __pfx___sys_sendmsg+0x10/0x10 [ 323.919814][T13049] ? do_futex+0x33b/0x560 [ 323.924211][T13049] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 323.930288][T13049] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 323.936657][T13049] ? do_syscall_64+0x100/0x230 [ 323.941620][T13049] __x64_sys_sendmmsg+0xa0/0xb0 [ 323.946514][T13049] do_syscall_64+0xf3/0x230 [ 323.951132][T13049] ? clear_bhb_loop+0x35/0x90 [ 323.955840][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.961868][T13049] RIP: 0033:0x7fa1c2185d19 [ 323.966399][T13049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.967302][ T12] veth1_macvtap: left promiscuous mode [ 323.986172][T13049] RSP: 002b:00007fa1bffd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 323.992725][ T12] veth0_macvtap: left promiscuous mode [ 324.000069][T13049] RAX: ffffffffffffffda RBX: 00007fa1c2376080 RCX: 00007fa1c2185d19 [ 324.005712][ T12] veth1_vlan: left promiscuous mode [ 324.013529][T13049] RDX: 0000000000000001 RSI: 0000000020005c00 RDI: 0000000000000003 [ 324.019474][ T12] veth0_vlan: left promiscuous mode [ 324.026698][T13049] RBP: 00007fa1c2201a20 R08: 0000000000000000 R09: 0000000000000000 [ 324.040108][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.048172][T13049] R13: 0000000000000000 R14: 00007fa1c2376080 R15: 00007ffc5815f3f8 [ 324.056195][T13049] [ 324.059312][T13049] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 324.066611][T13049] CPU: 1 UID: 0 PID: 13049 Comm: syz.0.2197 Not tainted 6.13.0-rc2-syzkaller-00391-g2c2b61d2138f #0 [ 324.077397][T13049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 324.087455][T13049] Call Trace: [ 324.090734][T13049] [ 324.093660][T13049] dump_stack_lvl+0x241/0x360 [ 324.098349][T13049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.103550][T13049] ? __pfx__printk+0x10/0x10 [ 324.108138][T13049] ? _printk+0xd5/0x120 [ 324.112293][T13049] ? __init_begin+0x41000/0x41000 [ 324.117334][T13049] ? vscnprintf+0x5d/0x90 [ 324.121683][T13049] panic+0x349/0x880 [ 324.125595][T13049] ? __warn+0x174/0x4d0 [ 324.129759][T13049] ? __pfx_panic+0x10/0x10 [ 324.134219][T13049] __warn+0x344/0x4d0 [ 324.138223][T13049] ? rxrpc_send_data+0x2969/0x2b30 [ 324.143347][T13049] report_bug+0x2b3/0x500 [ 324.147683][T13049] ? rxrpc_send_data+0x2969/0x2b30 [ 324.152801][T13049] handle_bug+0x60/0x90 [ 324.156954][T13049] exc_invalid_op+0x1a/0x50 [ 324.161453][T13049] asm_exc_invalid_op+0x1a/0x20 [ 324.166303][T13049] RIP: 0010:rxrpc_send_data+0x2969/0x2b30 [ 324.172026][T13049] Code: 24 48 48 89 de e8 97 27 b3 f6 4c 39 f3 b8 00 fe ff ff 41 bf fc ff ff ff 44 0f 44 f8 45 31 f6 e9 71 fd ff ff e8 98 22 b3 f6 90 <0f> 0b 90 48 8b 7c 24 28 e8 aa e6 0d f7 e9 46 fd ff ff 89 d9 80 e1 [ 324.191628][T13049] RSP: 0018:ffffc9000480f3a0 EFLAGS: 00010293 [ 324.197695][T13049] RAX: ffffffff8aec3ba8 RBX: ffff88807cd4a180 RCX: ffff888065c50000 [ 324.205665][T13049] RDX: 0000000000000000 RSI: 00000000000000ff RDI: ffff888029b17440 [ 324.213635][T13049] RBP: ffffc9000480f650 R08: ffff888029b1743f R09: 0000000000000000 [ 324.221626][T13049] R10: ffff888029b17340 R11: ffffed1005362e88 R12: ffff88807cd4a148 [ 324.229610][T13049] R13: 1ffff1100f9a942f R14: ffff888029b17000 R15: 0000000000000000 [ 324.237592][T13049] ? rxrpc_send_data+0x2968/0x2b30 [ 324.242740][T13049] ? __pfx_rxrpc_send_data+0x10/0x10 [ 324.248024][T13049] ? __local_bh_enable_ip+0x168/0x200 [ 324.253397][T13049] ? lockdep_hardirqs_on+0x99/0x150 [ 324.258598][T13049] ? __local_bh_enable_ip+0x168/0x200 [ 324.264002][T13049] ? __pfx_default_wake_function+0x10/0x10 [ 324.269836][T13049] rxrpc_do_sendmsg+0x1569/0x1910 [ 324.274889][T13049] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 324.280348][T13049] ? rxrpc_sendmsg+0x127/0x920 [ 324.285125][T13049] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 324.290859][T13049] ? do_raw_spin_unlock+0x13c/0x8b0 [ 324.296062][T13049] ? rxrpc_sendmsg+0x5d8/0x920 [ 324.300918][T13049] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 324.306029][T13049] __sock_sendmsg+0x221/0x270 [ 324.310711][T13049] ____sys_sendmsg+0x52a/0x7e0 [ 324.315478][T13049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 324.320766][T13049] ? __fget_files+0x2a/0x410 [ 324.325387][T13049] ? __fget_files+0x2a/0x410 [ 324.330004][T13049] __sys_sendmmsg+0x36a/0x720 [ 324.334707][T13049] ? __pfx___sys_sendmmsg+0x10/0x10 [ 324.339934][T13049] ? wake_up_q+0xdc/0x120 [ 324.344272][T13049] ? futex_wait+0x285/0x360 [ 324.348782][T13049] ? __pfx_futex_wait+0x10/0x10 [ 324.353638][T13049] ? __pfx___sys_sendmsg+0x10/0x10 [ 324.358757][T13049] ? do_futex+0x33b/0x560 [ 324.363102][T13049] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 324.369089][T13049] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 324.375417][T13049] ? do_syscall_64+0x100/0x230 [ 324.380181][T13049] __x64_sys_sendmmsg+0xa0/0xb0 [ 324.385038][T13049] do_syscall_64+0xf3/0x230 [ 324.389538][T13049] ? clear_bhb_loop+0x35/0x90 [ 324.394216][T13049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.400111][T13049] RIP: 0033:0x7fa1c2185d19 [ 324.404525][T13049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.424133][T13049] RSP: 002b:00007fa1bffd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 324.432551][T13049] RAX: ffffffffffffffda RBX: 00007fa1c2376080 RCX: 00007fa1c2185d19 [ 324.440522][T13049] RDX: 0000000000000001 RSI: 0000000020005c00 RDI: 0000000000000003 [ 324.448492][T13049] RBP: 00007fa1c2201a20 R08: 0000000000000000 R09: 0000000000000000 [ 324.456459][T13049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.464427][T13049] R13: 0000000000000000 R14: 00007fa1c2376080 R15: 00007ffc5815f3f8 [ 324.472412][T13049] [ 324.475690][T13049] Kernel Offset: disabled [ 324.480080][T13049] Rebooting in 86400 seconds..