last executing test programs: 30.966502067s ago: executing program 4 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x80, 0xf2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 30.721048502s ago: executing program 4 (id=476): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00T\x00=\t\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r2, @ANYBLOB=' \x00\a\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000020000100", @ANYRES32=r2, @ANYBLOB="00030000ffffffff00000000000000000000000086dd00"], 0x58}}, 0x0) 30.43995663s ago: executing program 4 (id=479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2, 0x0, @void, @value}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r11) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r14, r13, 0x2, 0x0, 0x4000, @void, @value}, 0x10) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) r15 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30feff"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000940)={0x30, r3, 0x1, 0x70bd2b, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0xfffd}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xc}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x8800) ioctl$sock_SIOCGPGRP(r15, 0x8904, &(0x7f0000000300)=0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f0000000840)=0xc) r18 = getuid() getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0, 0x0}, &(0x7f0000001000)=0xc) sendmsg$netlink(r15, &(0x7f0000001080)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)=[{&(0x7f0000000540)={0x1e8, 0x36, 0x4, 0x70bd25, 0x25dfdbfe, "", [@typed={0x4, 0x133}, @typed={0x8, 0x77, 0x0, 0x0, @uid}, @typed={0xf3, 0x64, 0x0, 0x0, @binary="c208aff3c46b45e193c75e59da906e99af0aabe442a526d086ae5201113aadf2cf9ebf374e51dc0d901596443619931c80e0b22be83241cf8197d27f115f160de3e3a7b97efe08adf15799b8e43b434e4d47f9352a33f13cd81fcf84493318fc2f2b2825edc554d8456f483abfafdecd4a70ab9b90eb71056833d5024f4d48fbf8d0d9a7568080c55aa99d231ef625476840be8a716f718a3ea95a7b89acd46f4753fca215eff783d8c4595f5105b91d58e48fd800bbb644e63b62f7b4ad212813ef5b5431c034f497ebb8ae9f2eebfa2d80ae153765f25ffa0532629f077cda9f4d7044ec4ad72eb9eeb7a107cc1e"}, @generic="0a040062e657f582a7e6e13a3c10153282086e08bc2df24e838abf5d55", @generic="6261fd449489349b3307b14e85052141944c7ec43fce0d2abfacc96c73b2d551053162a707cdd5b904a1578edbbe1fd3193e2f55c20882da855f1da76c92c1cae96fc106306923470390e4ece4ce1319a678c4490e0d8aa61a87d9933e5c50884f6de8507b16927a1a985c2e9897b3d5a9c460cdea79c1684747b6c0988f631dd05715bbc464bd12a2c1e4bf7f1378930b30b41526e6f72ceea64170a249e1ce5fef3e34470eaea69f2ac2f6cbe904f61f300273819dff24"]}, 0x1e8}, {&(0x7f0000001180)={0x11c4, 0x23, 0x800, 0x70bd29, 0x25dfdbfe, "", [@generic="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", @typed={0x14, 0xff, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x4, 0x77}, @generic="ce8997959ae018e9a129f2e5ec8ceb808534f5caf7c1e92bb1627e3009078f238f6d978854f22911d803c5262032eed25b0228ec8098e9426ea10ae98a5aaf868eba985f3af6", @generic="c3cf8e25505e45c609ff36c786adc741728f71d262a891c3dbe9f6d058584c399ac79e31784f6434daeed302054e86bb03f3683315836897acb506562cb564f1793df3833c54710a41b8f7ebc6c7854dab91e3cdd174bd62b04e3969c94e0bd14dbfde7a8d2822013f8dc8f31c0028bd4765e76f1d000250d38b91983810c36c92c5b5210d25764f302d0f338f28a36286ddb099dc16ba6d7517a1862bdbe15774c48dc4443e30e48e061c1100f28127948d1eff0c7b70e59c7963e0b8820d1d3d0e49ce0aaf731fc66f7b5e140e4a62d7fb710f289e9470", @typed={0x8, 0x106, 0x0, 0x0, @pid=0xffffffffffffffff}, @generic="e3940d097eb3cb1b9638001ca06c9f04eb25c11967e9fd31d37d0eda67e48258d9af06b9af558d848c8c24bf5d79e17bf9c41836ddb29b645aeb5adb5a7faa40b314c4caf49cabd5d69bce756782b877b14770d4ba41af45b1ad65eb4bdcd172ed958b470afa022986830a7abdfe934b", @typed={0x4, 0xf5}]}, 0x11c4}, {&(0x7f0000000740)={0xf8, 0x3a, 0x4, 0x70bd2b, 0x25dfdbfd, "", [@generic="de8394af61669a9aff1af950f326c8d1a01b235df5cda148e5bee6f5883bf9e7374f", @typed={0x6, 0xf4, 0x0, 0x0, @str='.\x00'}, @typed={0x8, 0x89, 0x0, 0x0, @pid=r16}, @generic="332e8f0b3cd91418b01774c57bfea675c5a0eaadaa73111f174149c9ed394f7652ffe4dde6d375bc57b34701e7d3fd6ff3c7f4cf03de0da4d0b1703eb936ee0b54c86508040b675ba18bd0dcac3d5db081fb8d6d7c9cb53db14b8d85ed4478a5b800c1313e056cdfd00eb0e39b1e757cf4109b3b1639f795c10e91a8ca6bf9137b4d20a7250eda108083e960701a3308b8b2ff6466b16dc58ff214992d6881ffe36207ae085748bd2f8a182d366738f26651c0982b97"]}, 0xf8}, {&(0x7f0000000e40)={0x19c, 0x24, 0x100, 0x70bd28, 0x25dfdbfe, "", [@generic="750043e060f90317b6745d1896f26ba678dd767abc68662545ce69e5907383e8c4a74b588472e6170071ef914839e62471dcf944607c41ed", @generic="72ce3c20671b35c2176747a2933393c4ac661d90108b82f7f9ccd70b775dc0200994500599e438b6c8564b4aabf9e103f09264742f5a300080e8317a98d1dba27e9cee4ea1a4f40715b7fba013a39a3f16fd5011aabfbc6516a81c26449546259fc61d63c68546b90be2b6182c4fe4d893f414c53fb045179c1634578fb871f42f9ba1e92711ed321e4eba5b740e63375c40177b7637b92c9eea70c837f766651a7e6050c71c78713a5edee4cc233d42223286c12346e6d17284fe6abec1e9e17b16c5d7132bb0e2a7ce4541b86f8fd83cefb081f929834bea8cdf057f46a89ffdd832fa94da645549ef7a1dd8f3c91223724f96616b5857", @generic="0de632fac2e3b7110b86409539ee1101c427ac353881adc72458b7de95935e", @generic="812f29b4c73a0adbeecc2e9cf25e5724bf352b1e3e4ce79db1ad94854ce76e0c00ae13826941bdafa273b59b6b62bc", @nested={0xc, 0x11e, 0x0, 0x1, [@typed={0x8, 0x139, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x27}}]}]}, 0x19c}], 0x4, &(0x7f0000001040)=[@cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}], 0x20, 0x80}, 0x800d4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20305}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 29.964447979s ago: executing program 4 (id=483): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000680), 0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 28.82976464s ago: executing program 4 (id=488): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000071e0979b6832d6700073797a32000000000500040000000000050005000200000010000300686173683a69702c6d61631b14000780080006000000000008001340000000000900020073797a3100000000"], 0x60}}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r3) (async) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x48400) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000680)="648c1d4cee09778fd6c69c78de6ce8f37de39239860786413b2fc27c2c846523aa6c3fc28a191166db4674161b3dbdd776d571b4eb1c78cc974fec183321c21cb54a73f3f123e24426be909dd52c6dcec1c48c10c6eb40f49e15885f465e47c05b59e62f6545ef66669e892a684094be4a3b9d6b88a92d0ef4b8293472eb734c572a79d550688633bb869b0b64807a10cd3893a41e7381488377ad3d90d42c104bd79aa04dbad6a7"}, {&(0x7f0000000740)="b43b29ce867262176b3b41c075d04fe0938dcf2bf528b7e07fb68b93149e1ef4e857fac57fff955cd4a5210cb2d04e791d3f363e61566970f5d3a423483bd219f67e98f4a631ce9efc3be2cc848d152b33583c68c5cd6de23e5f3be461e6654eb57b7a9e1f31037c69248157e6d29cfc923bb6b0fd521bcfc438b4188ab9a0c3f51cdc7a4cbb3b19d82ca56fbe6a2d2c838eec655def052627b0d91782bfd37a31b6e3e44df5a7650deb6613adc935fab04399450cf8095893784f26dd0c0494be4b6ad1fd72946bff2bc740826ab93f6512465f"}, {&(0x7f0000000840)="02d8fd1424e74ad676047dd28b6f60ebccdc2254669b4d6db71eb8b8be4e14f7624fc58eeaad359f8fbae28896c420aa53d76389a79482cf36b486b867b10787f1ffd834102b50790619e73c0ff9d60a52f2acf84dd690898e2e5bb4f4b103fdc3b96b21e3e89e229b68f5f23ad9413a3983cd39dd3771a174782915667f7d5abd60b80e32fb63514f7c5cefbc5f754c9c2755736a67f91b3981c6163c2448c27c1bc98e606d41d70b27c50067ed48ea77793c9935f3bb0a51adaa90fae2c7fe02e0bd52995096"}, {&(0x7f0000000940)="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"}, {&(0x7f0000000a40)="01cf469e362cb165fa3ec389d72665c1ea8b37e656197c9a0d94d195ef9fb2dd55ff9322e7bc4c567c18d56e48c88670f9e98fcd29dfdec04f7b93b4894a03d1c59d9dbdfd49b7828b839b88fa9849f6625d47082d0cdb3ba52dc70df8a18fb068a48d0a8de4e71ee1ca2414b162c2548e4e268f337f896b34807862e38f8c577c4b40ea27ba86890605805cd65bc672710de4555b8379ef7def8fcded8dda5a7d2a4b8fcae952ef2c01f7c1ce7976144a4dac6c25d9b84be66770169b9f06ef0642b4d3e6223104b23e10e539639148fbdc6909a9"}, {&(0x7f0000000c80)="949e2db2a4d47c515dcc1a5c81bcef6a49794a00bf1991151b5f45703c99397d5d034420bfdf525824ea3d98dda3f8903bad84fb9753123b4d2ae5ac1db3876ec6b34df5843a78b53e477bf446cb6619c162083cfde8baeb5f1c15cf462f7fc97146a635dc8a9f9298beeaf6ba71c955398c15c9a74555547e6f2d98a0c547b96348d534d991507cf1e0ee9317e5dc11d256ba805a874113c9eb6c195367f6db72f82c19fe25c9712daa7ab351240bcc4acf8009c5f15e0d19c0fccd67916cdd7f1f42ae789f3a96cd14de022b7000f6dd7365"}], 0x1000000000000156) r7 = accept4(r6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="340800000206050000000000000017a39330e45a47de830a54c8c223000000010000000900020073797a31000000000c000780050094000400000052e6546d6cc26ec2875e2fcb5a85063041d4c9dc4c0d899fef4cd7924d6e43c536f5c2d744155f9eec32fe2d100477649333a0aff5e79890ad99691a55ac0452e50e77d027f4e85dd3d3271a990975f0cb850f3b20a5c4189f0500000068883b9c18657e35eb2473b5b2381118fb61fa920453a0dbe7de1fab4c7dc63b928c7ab93b1419b131000000000000", @ANYRES32=r6, @ANYRES64=r0], 0x34}}, 0xc000) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) sendfile(r7, r3, 0x0, 0xe47) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000002780)={0x6, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000002780)={0x6, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e20, @local}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) socket(0x23, 0x5, 0x0) (async) r11 = socket(0x23, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r12, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r12, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c00)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732", 0x7d}, {0x0}], 0x2}}], 0x1, 0x0) (async) sendmmsg(r12, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c00)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732", 0x7d}, {0x0}], 0x2}}], 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x3, 0x11, 0x40, 0x102d, r5, 0x4, '\x00', r9, r3, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x3, 0x11, 0x40, 0x102d, r5, 0x4, '\x00', r9, r3, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r13, &(0x7f0000000180), &(0x7f0000000540), 0x2}, 0x20) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0xffffffffffffffa2, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) 15.895236194s ago: executing program 4 (id=488): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020605000000000000000071e0979b6832d6700073797a32000000000500040000000000050005000200000010000300686173683a69702c6d61631b14000780080006000000000008001340000000000900020073797a3100000000"], 0x60}}, 0x20000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r3) (async) close(r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x48400) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) writev(r4, &(0x7f00000005c0)=[{&(0x7f0000000680)="648c1d4cee09778fd6c69c78de6ce8f37de39239860786413b2fc27c2c846523aa6c3fc28a191166db4674161b3dbdd776d571b4eb1c78cc974fec183321c21cb54a73f3f123e24426be909dd52c6dcec1c48c10c6eb40f49e15885f465e47c05b59e62f6545ef66669e892a684094be4a3b9d6b88a92d0ef4b8293472eb734c572a79d550688633bb869b0b64807a10cd3893a41e7381488377ad3d90d42c104bd79aa04dbad6a7"}, {&(0x7f0000000740)="b43b29ce867262176b3b41c075d04fe0938dcf2bf528b7e07fb68b93149e1ef4e857fac57fff955cd4a5210cb2d04e791d3f363e61566970f5d3a423483bd219f67e98f4a631ce9efc3be2cc848d152b33583c68c5cd6de23e5f3be461e6654eb57b7a9e1f31037c69248157e6d29cfc923bb6b0fd521bcfc438b4188ab9a0c3f51cdc7a4cbb3b19d82ca56fbe6a2d2c838eec655def052627b0d91782bfd37a31b6e3e44df5a7650deb6613adc935fab04399450cf8095893784f26dd0c0494be4b6ad1fd72946bff2bc740826ab93f6512465f"}, {&(0x7f0000000840)="02d8fd1424e74ad676047dd28b6f60ebccdc2254669b4d6db71eb8b8be4e14f7624fc58eeaad359f8fbae28896c420aa53d76389a79482cf36b486b867b10787f1ffd834102b50790619e73c0ff9d60a52f2acf84dd690898e2e5bb4f4b103fdc3b96b21e3e89e229b68f5f23ad9413a3983cd39dd3771a174782915667f7d5abd60b80e32fb63514f7c5cefbc5f754c9c2755736a67f91b3981c6163c2448c27c1bc98e606d41d70b27c50067ed48ea77793c9935f3bb0a51adaa90fae2c7fe02e0bd52995096"}, {&(0x7f0000000940)="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"}, {&(0x7f0000000a40)="01cf469e362cb165fa3ec389d72665c1ea8b37e656197c9a0d94d195ef9fb2dd55ff9322e7bc4c567c18d56e48c88670f9e98fcd29dfdec04f7b93b4894a03d1c59d9dbdfd49b7828b839b88fa9849f6625d47082d0cdb3ba52dc70df8a18fb068a48d0a8de4e71ee1ca2414b162c2548e4e268f337f896b34807862e38f8c577c4b40ea27ba86890605805cd65bc672710de4555b8379ef7def8fcded8dda5a7d2a4b8fcae952ef2c01f7c1ce7976144a4dac6c25d9b84be66770169b9f06ef0642b4d3e6223104b23e10e539639148fbdc6909a9"}, {&(0x7f0000000c80)="949e2db2a4d47c515dcc1a5c81bcef6a49794a00bf1991151b5f45703c99397d5d034420bfdf525824ea3d98dda3f8903bad84fb9753123b4d2ae5ac1db3876ec6b34df5843a78b53e477bf446cb6619c162083cfde8baeb5f1c15cf462f7fc97146a635dc8a9f9298beeaf6ba71c955398c15c9a74555547e6f2d98a0c547b96348d534d991507cf1e0ee9317e5dc11d256ba805a874113c9eb6c195367f6db72f82c19fe25c9712daa7ab351240bcc4acf8009c5f15e0d19c0fccd67916cdd7f1f42ae789f3a96cd14de022b7000f6dd7365"}], 0x1000000000000156) r7 = accept4(r6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000d80)=ANY=[@ANYBLOB="340800000206050000000000000017a39330e45a47de830a54c8c223000000010000000900020073797a31000000000c000780050094000400000052e6546d6cc26ec2875e2fcb5a85063041d4c9dc4c0d899fef4cd7924d6e43c536f5c2d744155f9eec32fe2d100477649333a0aff5e79890ad99691a55ac0452e50e77d027f4e85dd3d3271a990975f0cb850f3b20a5c4189f0500000068883b9c18657e35eb2473b5b2381118fb61fa920453a0dbe7de1fab4c7dc63b928c7ab93b1419b131000000000000", @ANYRES32=r6, @ANYRES64=r0], 0x34}}, 0xc000) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) sendfile(r7, r3, 0x0, 0xe47) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wg0\x00', 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000002780)={0x6, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e20, @local}}}, 0x108) (async) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000002780)={0x6, {{0x2, 0x4e24, @private=0xa010101}}, {{0x2, 0x4e20, @local}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) socket(0x23, 0x5, 0x0) (async) r11 = socket(0x23, 0x5, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r12, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r12, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r12, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c00)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732", 0x7d}, {0x0}], 0x2}}], 0x1, 0x0) (async) sendmmsg(r12, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000c00)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732", 0x7d}, {0x0}], 0x2}}], 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000400)={0x28, 0x0, 0x0, @host}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x3, 0x11, 0x40, 0x102d, r5, 0x4, '\x00', r9, r3, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x3, 0x11, 0x40, 0x102d, r5, 0x4, '\x00', r9, r3, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r13, &(0x7f0000000180), &(0x7f0000000540), 0x2}, 0x20) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0xffffffffffffffa2, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40) 2.213439002s ago: executing program 1 (id=669): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in, 0x0, 0x6c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000002000000080001000300000005000200000000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x20000060}, 0x4800) 1.93466026s ago: executing program 1 (id=673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.70893948s ago: executing program 1 (id=677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 1.52604075s ago: executing program 3 (id=679): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 1.485693221s ago: executing program 1 (id=680): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002d00)={0x4c, 0xd, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) 1.374490499s ago: executing program 2 (id=681): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x10}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x6}]}}]}, 0x44}}, 0x24008000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.274114561s ago: executing program 3 (id=682): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000015b40)={0x0, 0x0, &(0x7f0000015b00)={&(0x7f0000015a40)={0x34, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x34}}, 0x4) 1.190903755s ago: executing program 1 (id=684): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 1.100116171s ago: executing program 0 (id=685): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000380)={0x2, {{0x2, 0x4e20, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) 1.060009896s ago: executing program 3 (id=686): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x178, r2, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xe0, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xc}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x4080}, 0x8800) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002c00)=ANY=[], 0xe0c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) 1.05925311s ago: executing program 2 (id=687): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x28c, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x278, 0x1, [@m_gact={0xdc, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc8a}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x254b, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x517, 0x2}}]}, {0x89, 0x6, "6df9a3ff45af6728f15b399ae1e6c602b6fdc9641eb649419ed32e608a2f859ccdf40eef7eacae75151807a3f7b8ecded072ef88f4489c0d072daf9cdc0a1d651b2533f0275e191dc4ed2a0098a62051d98c633efc53bfb7b1971e5917acf7ad01a479f12d119916c688f7e477836bae70c06e0d3887dd9672445a63e29820734e42be66fd"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_vlan={0x120, 0xd, 0x0, 0x0, {{0x9}, {0x4c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x40, 0xffffffffffffffff, 0x7, 0xfffffffa}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x1, 0x7, 0x228000, 0x5}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x1}]}, {0xaa, 0x6, "a0c2bbb59630dd69c8e8225426ab221055f763b5147afa1560de2b861f8b24ea45e2ac7064017c5b5200f0e0418940015006562c9c04a6e77bfb89af64efb0d53a479d7a9a681879e2de2428e90d7f2ab1eec74a59c3d5f641a8e327701c4386030c2a2cc2aeabf004fbca31f2e48d69725252c26227a7e4bd39586075c6b9308213936eb67b92b715ebf25647d2720e4c4c74485838cee09ca3fa73460257d6bf91cb3e2824"}, {0xc, 0x7, {0x0, 0xbe6c4a687f3af6cc}}, {0xc, 0x8, {0x11b520613f9bf6d1, 0x1}}}}, @m_gact={0x78, 0xb, 0x0, 0x0, {{0x9}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xfff, 0x1, 0x7fff, 0xa}}, @TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x5, 0x0, 0xffffffff, 0x6}}]}, {0x19, 0x6, "7e6c2e2bf82e0b0d455cae73f177646f4a60f1d1e8"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x3}}}}]}]}, 0x28c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 866.132082ms ago: executing program 1 (id=688): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 865.80492ms ago: executing program 0 (id=689): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f12fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612aa25d61ce4e2c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008435f39381c2a77c001caae53db7316fa6d48d032ab6831ebb813c85855c7a9ad8140a4b29422fc20d4e75c848984a2e217ec9c2833b8fa9106ee1be2c05103a36fc1126f1aa5284ba7179843b08ecadc199b9038cf6b9ee4e1f321a6a32e03bd987ddfada1f69756651b73a7ed0f7e467081193b2844869"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) close(r0) 837.98641ms ago: executing program 3 (id=690): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000900000008000500", @ANYRES32=r2, @ANYBLOB="140006"], 0x48}}, 0x0) 691.920674ms ago: executing program 0 (id=691): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000500)=0x2, 0x12) 626.019784ms ago: executing program 2 (id=692): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000003100)={0x0, 0x0, &(0x7f00000030c0)={&(0x7f0000000140)={0x40, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfff}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4080) 526.183949ms ago: executing program 2 (id=693): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x48, r0, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x29, 0x33, @action={{{0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @from_mac, {0x1, 0x80}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x1, 0x0, 0x3, 0x1}}, @addba_resp={0x3, 0x1, {0x1, 0x52, {0x0, 0x1, 0xe, 0x3}, 0x7}}}}]}, 0x48}}, 0x4000010) 505.412325ms ago: executing program 0 (id=694): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000040)="8697", 0x2}], 0x1}}], 0x1, 0x20004000) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0xc, &(0x7f00000000c0)=@ccm_128={{0x304}, "e119e433ba1bfc9f", "e596f11b2c6a2cd260d9f740b402df7b", "8142f1c1", "f9c815f6c92eac39"}, 0x28) 454.00928ms ago: executing program 3 (id=695): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c208000086dd608a35f200540600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) 348.918637ms ago: executing program 2 (id=696): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 291.263857ms ago: executing program 3 (id=697): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002680)={0x30, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x38}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x9, 0xf9, "65b77527ee"}, @NL80211_ATTR_FILS_ERP_REALM={0x4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 241.949178ms ago: executing program 0 (id=698): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x24, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "abdf07eb8807a356"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9b4b79f825dfcdc8852dbad9e4e63693"}]}]}, 0x40}}, 0x0) 34.069094ms ago: executing program 2 (id=699): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000240)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff92ab3f1e0b02bd67aa0385901000000000000007e758044ab4ea6f7ae55d88fecf90b037511bf746bec66badff13930c83ca7a69f0b36696d4d14e4a90e26c964ee68ce04d11e56340df237d362aa67a7495ceca6f32cc5c577f3396c57708b", 0x81, 0x2000c000, 0x0, 0x0) 0s ago: executing program 0 (id=700): sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x401c5820, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001"], 0x190) kernel console output (not intermixed with test programs): mode [ 63.414752][ T5831] bridge_slave_1: entered promiscuous mode [ 63.443226][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.450370][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.458105][ T5841] bridge_slave_0: entered allmulticast mode [ 63.465431][ T5841] bridge_slave_0: entered promiscuous mode [ 63.517771][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.525275][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.533109][ T5841] bridge_slave_1: entered allmulticast mode [ 63.540042][ T5841] bridge_slave_1: entered promiscuous mode [ 63.551471][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.563398][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.572664][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.579756][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.587659][ T5828] bridge_slave_0: entered allmulticast mode [ 63.594437][ T5828] bridge_slave_0: entered promiscuous mode [ 63.601700][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.609133][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.616603][ T5830] bridge_slave_0: entered allmulticast mode [ 63.623689][ T5830] bridge_slave_0: entered promiscuous mode [ 63.631176][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.638423][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.645823][ T5830] bridge_slave_1: entered allmulticast mode [ 63.653063][ T5830] bridge_slave_1: entered promiscuous mode [ 63.697767][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.705272][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.712780][ T5828] bridge_slave_1: entered allmulticast mode [ 63.719421][ T5828] bridge_slave_1: entered promiscuous mode [ 63.742522][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.755349][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.793064][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.812915][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.840112][ T5831] team0: Port device team_slave_0 added [ 63.848763][ T5831] team0: Port device team_slave_1 added [ 63.856573][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.868715][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.894820][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.902005][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.910126][ T5839] bridge_slave_0: entered allmulticast mode [ 63.917050][ T5839] bridge_slave_0: entered promiscuous mode [ 63.925030][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.932554][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.939745][ T5839] bridge_slave_1: entered allmulticast mode [ 63.946681][ T5839] bridge_slave_1: entered promiscuous mode [ 63.978990][ T5841] team0: Port device team_slave_0 added [ 63.988051][ T5841] team0: Port device team_slave_1 added [ 63.997309][ T5830] team0: Port device team_slave_0 added [ 64.037212][ T5828] team0: Port device team_slave_0 added [ 64.045341][ T5828] team0: Port device team_slave_1 added [ 64.067707][ T5830] team0: Port device team_slave_1 added [ 64.085748][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.098397][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.109040][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.116131][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.142819][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.161543][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.168572][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.194954][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.222045][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.229098][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.255325][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.280938][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.288865][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.315112][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.330024][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.337745][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.364014][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.375893][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.382919][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.408929][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.420796][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.427856][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.453950][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.482279][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.489353][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.515954][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.560564][ T5839] team0: Port device team_slave_0 added [ 64.589295][ T5828] hsr_slave_0: entered promiscuous mode [ 64.596146][ T5828] hsr_slave_1: entered promiscuous mode [ 64.616588][ T5839] team0: Port device team_slave_1 added [ 64.640271][ T5831] hsr_slave_0: entered promiscuous mode [ 64.647268][ T5831] hsr_slave_1: entered promiscuous mode [ 64.653883][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.661812][ T5831] Cannot create hsr debugfs directory [ 64.677052][ T5841] hsr_slave_0: entered promiscuous mode [ 64.683578][ T5846] Bluetooth: hci2: command tx timeout [ 64.683584][ T5844] Bluetooth: hci3: command tx timeout [ 64.689416][ T5844] Bluetooth: hci0: command tx timeout [ 64.702320][ T5841] hsr_slave_1: entered promiscuous mode [ 64.708342][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.716208][ T5841] Cannot create hsr debugfs directory [ 64.746579][ T5830] hsr_slave_0: entered promiscuous mode [ 64.753037][ T5830] hsr_slave_1: entered promiscuous mode [ 64.759086][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.766917][ T5830] Cannot create hsr debugfs directory [ 64.772752][ T5847] Bluetooth: hci4: command tx timeout [ 64.778708][ T5844] Bluetooth: hci1: command tx timeout [ 64.792841][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.799815][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.825775][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.839213][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.846351][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.872312][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.015210][ T5839] hsr_slave_0: entered promiscuous mode [ 65.021450][ T5839] hsr_slave_1: entered promiscuous mode [ 65.028641][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.036606][ T5839] Cannot create hsr debugfs directory [ 65.255063][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.281601][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.294952][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.312995][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.362860][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.394562][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.415533][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.442707][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.457788][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.471473][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.484231][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.510454][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.553115][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.576670][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.594190][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.617205][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.689161][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.700964][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.711400][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.726371][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.777409][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.828294][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.857374][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.864777][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.902155][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.909283][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.923938][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.981835][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.997876][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.010355][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.056450][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.063637][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.083619][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.105644][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.112790][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.121182][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.128307][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.143295][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.175930][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.205834][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.213046][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.223800][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.230945][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.252842][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.259923][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.366787][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.410224][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.417384][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.426341][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.433525][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.500890][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.541793][ T5839] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.572692][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.664110][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.718293][ T5828] veth0_vlan: entered promiscuous mode [ 66.768795][ T5844] Bluetooth: hci0: command tx timeout [ 66.774680][ T5844] Bluetooth: hci2: command tx timeout [ 66.777775][ T5847] Bluetooth: hci3: command tx timeout [ 66.810176][ T5828] veth1_vlan: entered promiscuous mode [ 66.843190][ T5846] Bluetooth: hci1: command tx timeout [ 66.848658][ T5846] Bluetooth: hci4: command tx timeout [ 66.877720][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.893266][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.938637][ T5831] veth0_vlan: entered promiscuous mode [ 66.950154][ T5831] veth1_vlan: entered promiscuous mode [ 66.964303][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.999883][ T5830] veth0_vlan: entered promiscuous mode [ 67.014375][ T5828] veth0_macvtap: entered promiscuous mode [ 67.046314][ T5830] veth1_vlan: entered promiscuous mode [ 67.061514][ T5828] veth1_macvtap: entered promiscuous mode [ 67.078111][ T5841] veth0_vlan: entered promiscuous mode [ 67.101865][ T5831] veth0_macvtap: entered promiscuous mode [ 67.146204][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.158489][ T5831] veth1_macvtap: entered promiscuous mode [ 67.174714][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.190388][ T5841] veth1_vlan: entered promiscuous mode [ 67.197893][ T5830] veth0_macvtap: entered promiscuous mode [ 67.217224][ T5830] veth1_macvtap: entered promiscuous mode [ 67.236990][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.247077][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.259542][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.271886][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.289114][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.300102][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.311537][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.338436][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.349895][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.361649][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.383374][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.398248][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.408449][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.419274][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.431649][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.441840][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.453311][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.463425][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.475265][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.487347][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.518322][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.530079][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.539324][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.548145][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.564801][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.574305][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.583903][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.593669][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.636247][ T5841] veth0_macvtap: entered promiscuous mode [ 67.657031][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.668690][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.674015][ T5841] veth1_macvtap: entered promiscuous mode [ 67.750839][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.761873][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.772015][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.782534][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.792487][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.805148][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.816409][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.839329][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.850416][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.851663][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.868872][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.878988][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.890010][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.899885][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.910482][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.921461][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.929181][ T5839] veth0_vlan: entered promiscuous mode [ 67.956964][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.966278][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.976448][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.985256][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.017364][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.026847][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.049155][ T5839] veth1_vlan: entered promiscuous mode [ 68.075518][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.094585][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.098091][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.207759][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.209085][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.238243][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.241633][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.340446][ T5839] veth0_macvtap: entered promiscuous mode [ 68.383828][ T5839] veth1_macvtap: entered promiscuous mode [ 68.394537][ T5918] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.404978][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.415619][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.425712][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.436426][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.447775][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.458351][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.468249][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.478856][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.492066][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.519112][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.527472][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.535397][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.543696][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.546536][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.561820][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.561841][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.561857][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.561868][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.561882][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.561891][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.561904][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.563089][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.620632][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 68.673927][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.689225][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.698194][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.707249][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.718916][ T5918] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.903185][ T5846] Bluetooth: hci2: command tx timeout [ 68.909331][ T5846] Bluetooth: hci3: command tx timeout [ 68.914951][ T5846] Bluetooth: hci0: command tx timeout [ 68.924084][ T5846] Bluetooth: hci1: command tx timeout [ 68.930330][ T5846] Bluetooth: hci4: command tx timeout [ 69.009264][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.017491][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.028928][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.056612][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.638168][ T5954] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14'. [ 69.662634][ T5949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.666868][ T5954] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.751311][ T5962] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 69.803124][ T5964] netlink: 44 bytes leftover after parsing attributes in process `syz.0.11'. [ 69.817071][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10'. [ 69.835472][ T5947] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'. [ 69.969071][ T5965] Bluetooth: MGMT ver 1.23 [ 70.130701][ T5978] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 70.165142][ T5980] netlink: 88 bytes leftover after parsing attributes in process `syz.0.18'. [ 70.186910][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18'. [ 70.198952][ T5980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18'. [ 70.215031][ T5980] netlink: 80 bytes leftover after parsing attributes in process `syz.0.18'. [ 70.927933][ T5846] Bluetooth: hci0: command tx timeout [ 70.927972][ T5847] Bluetooth: hci3: command tx timeout [ 70.928008][ T5847] Bluetooth: hci2: command tx timeout [ 71.002671][ T5847] Bluetooth: hci1: command tx timeout [ 71.004001][ T5844] Bluetooth: hci4: command tx timeout [ 71.071865][ T6014] dvmrp1: entered allmulticast mode [ 71.586440][ T6021] team0 (unregistering): Port device team_slave_0 removed [ 71.604023][ T6021] team0 (unregistering): Port device team_slave_1 removed [ 71.646725][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.655270][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.795092][ T6032] Cannot find set identified by id 0 to match [ 72.114777][ T6038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.141261][ T5883] hid-generic 0005:7FFF:0008.0001: item fetching failed at offset 0/4 [ 72.150479][ T5883] hid-generic 0005:7FFF:0008.0001: probe with driver hid-generic failed with error -22 [ 72.682067][ T6057] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 73.004316][ T6071] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 73.509023][ T6096] xt_bpf: check failed: parse error [ 73.623437][ T6104] __nla_validate_parse: 3 callbacks suppressed [ 73.623456][ T6104] netlink: 48 bytes leftover after parsing attributes in process `syz.0.47'. [ 73.640077][ T6096] netlink: 'syz.3.45': attribute type 10 has an invalid length. [ 73.737985][ T6096] veth0_vlan: left promiscuous mode [ 73.764607][ T6096] veth0_vlan: entered promiscuous mode [ 73.801624][ T6096] team0: Device veth0_vlan failed to register rx_handler [ 74.157128][ T6128] netlink: 68 bytes leftover after parsing attributes in process `syz.2.51'. [ 74.615970][ T6142] netlink: 428 bytes leftover after parsing attributes in process `syz.3.56'. [ 74.672481][ T6142] netlink: 64 bytes leftover after parsing attributes in process `syz.3.56'. [ 75.172863][ T6158] netlink: 152 bytes leftover after parsing attributes in process `syz.3.59'. [ 75.417858][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 75.952044][ T6185] netlink: 44 bytes leftover after parsing attributes in process `syz.2.66'. [ 76.020716][ T6185] netlink: 43 bytes leftover after parsing attributes in process `syz.2.66'. [ 76.312549][ T6185] netlink: 'syz.2.66': attribute type 6 has an invalid length. [ 76.339082][ T6185] netlink: 'syz.2.66': attribute type 5 has an invalid length. [ 76.358652][ T6192] vlan2: entered promiscuous mode [ 76.392369][ T6185] netlink: 43 bytes leftover after parsing attributes in process `syz.2.66'. [ 76.401470][ T6192] vlan2: entered allmulticast mode [ 76.421597][ T6192] hsr_slave_1: entered allmulticast mode [ 76.558896][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 76.624867][ T6199] netlink: 'syz.4.70': attribute type 10 has an invalid length. [ 76.717266][ T6208] netlink: 'syz.4.70': attribute type 10 has an invalid length. [ 76.855180][ T6197] hsr_slave_1 (unregistering): left allmulticast mode [ 76.935878][ T6197] hsr_slave_1 (unregistering): left promiscuous mode [ 76.957220][ T6196] FAULT_INJECTION: forcing a failure. [ 76.957220][ T6196] name failslab, interval 1, probability 0, space 0, times 1 [ 76.973653][ T6196] CPU: 0 UID: 0 PID: 6196 Comm: syz.1.71 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 76.984208][ T6196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 76.994297][ T6196] Call Trace: [ 76.997595][ T6196] [ 77.000541][ T6196] dump_stack_lvl+0x241/0x360 [ 77.005260][ T6196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 77.010489][ T6196] ? __pfx__printk+0x10/0x10 [ 77.015107][ T6196] ? __kmalloc_noprof+0xb5/0x4c0 [ 77.020075][ T6196] ? __pfx___might_resched+0x10/0x10 [ 77.025393][ T6196] should_fail_ex+0x3b0/0x4e0 [ 77.030104][ T6196] should_failslab+0xac/0x100 [ 77.034810][ T6196] __kmalloc_noprof+0xdd/0x4c0 [ 77.039595][ T6196] ? fib6_info_alloc+0x2e/0xf0 [ 77.044387][ T6196] fib6_info_alloc+0x2e/0xf0 [ 77.049004][ T6196] ip6_route_info_create+0x445/0x12b0 [ 77.054414][ T6196] inet6_rtm_newroute+0x71a/0x2100 [ 77.059580][ T6196] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 77.065148][ T6196] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 77.071080][ T6196] ? __mutex_lock+0xaf9/0xee0 [ 77.075778][ T6196] ? __mutex_lock+0x5ef/0xee0 [ 77.080493][ T6196] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 77.086066][ T6196] rtnetlink_rcv_msg+0x73f/0xcf0 [ 77.091025][ T6196] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 77.096145][ T6196] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.101609][ T6196] ? ref_tracker_free+0x643/0x7e0 [ 77.106633][ T6196] netlink_rcv_skb+0x1e3/0x430 [ 77.111396][ T6196] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.116855][ T6196] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.122150][ T6196] ? netlink_deliver_tap+0x2e/0x1b0 [ 77.127357][ T6196] netlink_unicast+0x7f6/0x990 [ 77.132132][ T6196] ? __pfx_netlink_unicast+0x10/0x10 [ 77.137420][ T6196] ? __virt_addr_valid+0x45f/0x530 [ 77.142535][ T6196] ? __phys_addr_symbol+0x2f/0x70 [ 77.147574][ T6196] ? __check_object_size+0x47a/0x730 [ 77.152860][ T6196] netlink_sendmsg+0x8e4/0xcb0 [ 77.157632][ T6196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.162915][ T6196] ? aa_sock_msg_perm+0x91/0x160 [ 77.167851][ T6196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.173127][ T6196] __sock_sendmsg+0x221/0x270 [ 77.177810][ T6196] ____sys_sendmsg+0x52a/0x7e0 [ 77.182581][ T6196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.187867][ T6196] ? __fget_files+0x2a/0x410 [ 77.192479][ T6196] ? __sys_sendmmsg+0x392/0x720 [ 77.197333][ T6196] ? __might_fault+0xaa/0x120 [ 77.202006][ T6196] __sys_sendmmsg+0x36a/0x720 [ 77.206689][ T6196] ? __pfx___sys_sendmmsg+0x10/0x10 [ 77.211898][ T6196] ? __pfx_lock_release+0x10/0x10 [ 77.216920][ T6196] ? kstrtouint_from_user+0x128/0x190 [ 77.222309][ T6196] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 77.228201][ T6196] ? ksys_write+0x22a/0x2b0 [ 77.232701][ T6196] ? __pfx_lock_release+0x10/0x10 [ 77.237732][ T6196] ? vfs_write+0x730/0xd30 [ 77.242146][ T6196] ? __mutex_unlock_slowpath+0x21e/0x790 [ 77.247792][ T6196] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 77.253771][ T6196] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 77.260092][ T6196] ? do_syscall_64+0x100/0x230 [ 77.264855][ T6196] __x64_sys_sendmmsg+0xa0/0xb0 [ 77.269707][ T6196] do_syscall_64+0xf3/0x230 [ 77.274205][ T6196] ? clear_bhb_loop+0x35/0x90 [ 77.278880][ T6196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.284769][ T6196] RIP: 0033:0x7fbe33f85d29 [ 77.289196][ T6196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.308808][ T6196] RSP: 002b:00007fbe34d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 77.317222][ T6196] RAX: ffffffffffffffda RBX: 00007fbe34175fa0 RCX: 00007fbe33f85d29 [ 77.325189][ T6196] RDX: 0492492492492627 RSI: 00000000200000c0 RDI: 0000000000000005 [ 77.333158][ T6196] RBP: 00007fbe34d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 77.341126][ T6196] R10: 2001000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.349094][ T6196] R13: 0000000000000000 R14: 00007fbe34175fa0 R15: 00007ffe3e4f91f8 [ 77.357072][ T6196] [ 77.449607][ T6196] Zero length message leads to an empty skb [ 77.488087][ T6199] batman_adv: batadv0: Adding interface: team0 [ 77.503264][ T6199] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.544156][ T6199] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 77.623543][ T6225] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 77.655069][ T6208] team0: entered promiscuous mode [ 77.660454][ T6208] team_slave_0: entered promiscuous mode [ 77.666827][ T6208] team_slave_1: entered promiscuous mode [ 77.675029][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.681885][ T6208] batman_adv: batadv0: Interface activated: team0 [ 77.688608][ T6208] batman_adv: batadv0: Interface deactivated: team0 [ 77.698559][ T6208] batman_adv: batadv0: Removing interface: team0 [ 77.709601][ T6208] bridge0: port 3(team0) entered blocking state [ 77.716299][ T6208] bridge0: port 3(team0) entered disabled state [ 77.723006][ T6208] team0: entered allmulticast mode [ 77.728324][ T6208] team_slave_0: entered allmulticast mode [ 77.734295][ T6208] team_slave_1: entered allmulticast mode [ 77.743635][ T6208] bridge0: port 3(team0) entered blocking state [ 77.750158][ T6208] bridge0: port 3(team0) entered forwarding state [ 78.056643][ T6235] vcan0: tx address claim with dlc 1 [ 78.615637][ T6260] netlink: 'syz.3.90': attribute type 16 has an invalid length. [ 78.642691][ T6260] netlink: 'syz.3.90': attribute type 3 has an invalid length. [ 78.657281][ T6260] netlink: 'syz.3.90': attribute type 1 has an invalid length. [ 78.676496][ T6263] xt_l2tp: unknown flags: 10 [ 78.688488][ T6265] __nla_validate_parse: 6 callbacks suppressed [ 78.688506][ T6265] netlink: 44 bytes leftover after parsing attributes in process `syz.2.87'. [ 78.703450][ T6260] netlink: 'syz.3.90': attribute type 2 has an invalid length. [ 78.711332][ T6260] netlink: 64022 bytes leftover after parsing attributes in process `syz.3.90'. [ 78.722629][ T6263] sctp: [Deprecated]: syz.4.91 (pid 6263) Use of int in max_burst socket option. [ 78.722629][ T6263] Use struct sctp_assoc_value instead [ 78.899268][ T6276] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.048984][ T6284] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 79.110658][ T6284] netlink: 55 bytes leftover after parsing attributes in process `syz.3.94'. [ 79.122223][ T6276] lo speed is unknown, defaulting to 1000 [ 79.214980][ T6276] lo speed is unknown, defaulting to 1000 [ 79.342944][ T6276] lo speed is unknown, defaulting to 1000 [ 79.735606][ T6307] netlink: 152 bytes leftover after parsing attributes in process `syz.4.102'. [ 79.922785][ T6307] netlink: 12 bytes leftover after parsing attributes in process `syz.4.102'. [ 80.105232][ T5883] lo speed is unknown, defaulting to 1000 [ 80.116216][ T6276] infiniband syz0: set active [ 80.138698][ T6276] infiniband syz0: added lo [ 80.163460][ T6276] syz0: rxe_create_cq: returned err = -12 [ 80.185839][ T6276] infiniband syz0: Couldn't create ib_mad CQ [ 80.207080][ T6276] infiniband syz0: Couldn't open port 1 [ 80.280836][ T6276] RDS/IB: syz0: added [ 80.292822][ T6276] smc: adding ib device syz0 with port count 1 [ 80.308174][ T6276] smc: ib device syz0 port 1 has pnetid [ 80.326448][ T5883] lo speed is unknown, defaulting to 1000 [ 80.336199][ T6308] FAULT_INJECTION: forcing a failure. [ 80.336199][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 80.354250][ T6276] lo speed is unknown, defaulting to 1000 [ 80.356202][ T6308] CPU: 1 UID: 0 PID: 6308 Comm: syz.2.101 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 80.370825][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 80.380907][ T6308] Call Trace: [ 80.384204][ T6308] [ 80.387151][ T6308] dump_stack_lvl+0x241/0x360 [ 80.391870][ T6308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.397108][ T6308] ? __pfx__printk+0x10/0x10 [ 80.401743][ T6308] ? fs_reclaim_acquire+0x93/0x130 [ 80.408043][ T6308] ? __pfx___might_resched+0x10/0x10 [ 80.413723][ T6308] ? dynamic_dname+0x141/0x1b0 [ 80.418535][ T6308] should_fail_ex+0x3b0/0x4e0 [ 80.423261][ T6308] should_failslab+0xac/0x100 [ 80.427975][ T6308] __kmalloc_noprof+0xdd/0x4c0 [ 80.432773][ T6308] ? tomoyo_encode+0x26f/0x540 [ 80.437569][ T6308] tomoyo_encode+0x26f/0x540 [ 80.442196][ T6308] ? __pfx_sockfs_dname+0x10/0x10 [ 80.447361][ T6308] tomoyo_realpath_from_path+0x59e/0x5e0 [ 80.453044][ T6308] tomoyo_path_number_perm+0x236/0x860 [ 80.458542][ T6308] ? __lock_acquire+0x1397/0x2100 [ 80.463603][ T6308] ? tomoyo_path_number_perm+0x206/0x860 [ 80.469294][ T6308] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 80.475311][ T6308] ? __pfx_lock_release+0x10/0x10 [ 80.480337][ T6308] ? __fget_files+0x2a/0x410 [ 80.484930][ T6308] ? __fget_files+0x2a/0x410 [ 80.489543][ T6308] security_file_ioctl+0xc6/0x2a0 [ 80.494571][ T6308] __se_sys_ioctl+0x46/0x170 [ 80.499176][ T6308] do_syscall_64+0xf3/0x230 [ 80.503683][ T6308] ? clear_bhb_loop+0x35/0x90 [ 80.508363][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.514252][ T6308] RIP: 0033:0x7f463bb85d29 [ 80.518667][ T6308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.538280][ T6308] RSP: 002b:00007f463ca33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 80.546696][ T6308] RAX: ffffffffffffffda RBX: 00007f463bd75fa0 RCX: 00007f463bb85d29 [ 80.554663][ T6308] RDX: 0000000020000000 RSI: 00000000400448c9 RDI: 0000000000000007 [ 80.562634][ T6308] RBP: 00007f463ca33090 R08: 0000000000000000 R09: 0000000000000000 [ 80.570602][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.578577][ T6308] R13: 0000000000000000 R14: 00007f463bd75fa0 R15: 00007ffe2bc73358 [ 80.586581][ T6308] [ 80.594964][ T5883] hid-generic 0005:7FFF:0008.0002: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 80.647314][ T6308] ERROR: Out of memory at tomoyo_realpath_from_path. [ 80.877155][ T6276] lo speed is unknown, defaulting to 1000 [ 80.878203][ T6326] netlink: 44 bytes leftover after parsing attributes in process `syz.0.108'. [ 80.894347][ T6325] netlink: 'syz.3.106': attribute type 39 has an invalid length. [ 81.061605][ T6276] lo speed is unknown, defaulting to 1000 [ 81.132625][ T6328] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 81.303061][ T6276] lo speed is unknown, defaulting to 1000 [ 81.549496][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.4.113'. [ 81.667702][ T6276] lo speed is unknown, defaulting to 1000 [ 81.788025][ T6353] xt_bpf: check failed: parse error [ 81.875596][ T6359] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 81.941555][ T875] cfg80211: failed to load regulatory.db [ 81.988568][ T6353] netlink: 'syz.0.115': attribute type 10 has an invalid length. [ 82.024678][ T6362] xt_l2tp: v2 tid > 0xffff: 150994944 [ 82.075683][ T6353] veth0_vlan: left promiscuous mode [ 82.120127][ T6353] veth0_vlan: entered promiscuous mode [ 82.148382][ T6353] team0: Device veth0_vlan failed to register rx_handler [ 82.532682][ T6375] lo speed is unknown, defaulting to 1000 [ 82.800055][ T6385] netlink: 44 bytes leftover after parsing attributes in process `syz.2.125'. [ 83.698697][ T6399] bridge1: entered promiscuous mode [ 83.716723][ T6399] bridge1: entered allmulticast mode [ 84.267661][ T6429] bridge0: port 3(team0) entered disabled state [ 84.274344][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.283007][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.626802][ T6429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.654126][ T6429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.783792][ T6429] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.794348][ T6429] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.806045][ T6429] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.816282][ T6429] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.101348][ T6455] caif0: mtu less than device minimum [ 85.834695][ T6485] xt_l2tp: unknown flags: 10 [ 85.942499][ T6491] sctp: [Deprecated]: syz.4.153 (pid 6491) Use of int in max_burst socket option. [ 85.942499][ T6491] Use struct sctp_assoc_value instead [ 86.113003][ T6496] bridge1: entered promiscuous mode [ 86.118271][ T6496] bridge1: entered allmulticast mode [ 86.364433][ T6508] netlink: 36 bytes leftover after parsing attributes in process `syz.1.159'. [ 86.380681][ T3076] hid-generic 0005:7FFF:0008.0003: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 86.645219][ T6527] netlink: 732 bytes leftover after parsing attributes in process `syz.0.160'. [ 86.705619][ T6527] netlink: 732 bytes leftover after parsing attributes in process `syz.0.160'. [ 86.748712][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 86.799284][ T6532] vlan2: entered promiscuous mode [ 86.833877][ T6537] Cannot find set identified by id 0 to match [ 86.930305][ T6540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.166'. [ 87.193029][ T6554] netlink: 56 bytes leftover after parsing attributes in process `syz.1.167'. [ 87.272494][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 87.401072][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.172'. [ 87.414513][ T6564] vlan3: entered promiscuous mode [ 87.918896][ T6591] bridge1: entered promiscuous mode [ 87.970137][ T6591] bridge1: entered allmulticast mode [ 88.119960][ T6601] netlink: 256 bytes leftover after parsing attributes in process `syz.0.180'. [ 88.165128][ T6601] unsupported nlmsg_type 40 [ 88.406451][ T6613] netlink: 12 bytes leftover after parsing attributes in process `syz.4.181'. [ 88.489486][ T6616] lo: entered promiscuous mode [ 88.517284][ T6616] lo: entered allmulticast mode [ 88.708621][ T6622] xt_bpf: check failed: parse error [ 88.796087][ T6624] ip6tnl1: entered allmulticast mode [ 88.864594][ T6626] trusted_key: syz.3.187 sent an empty control message without MSG_MORE. [ 89.337004][ T6632] netlink: 'syz.2.190': attribute type 2 has an invalid length. [ 89.417185][ T6647] netlink: 'syz.2.190': attribute type 39 has an invalid length. [ 89.668693][ T6657] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 89.734655][ T6657] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 89.777568][ T6665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.080953][ T6671] netlink: 'syz.3.204': attribute type 10 has an invalid length. [ 90.111286][ T6671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.139114][ T6671] team0: Port device batadv0 added [ 90.559706][ T6697] FAULT_INJECTION: forcing a failure. [ 90.559706][ T6697] name failslab, interval 1, probability 0, space 0, times 0 [ 90.591512][ T6697] CPU: 1 UID: 0 PID: 6697 Comm: syz.0.214 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 90.602169][ T6697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 90.612250][ T6697] Call Trace: [ 90.615555][ T6697] [ 90.618513][ T6697] dump_stack_lvl+0x241/0x360 [ 90.623230][ T6697] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.628490][ T6697] ? __pfx__printk+0x10/0x10 [ 90.633120][ T6697] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 90.639144][ T6697] ? __pfx___might_resched+0x10/0x10 [ 90.644459][ T6697] ? ima_get_action+0x75/0xb0 [ 90.649174][ T6697] should_fail_ex+0x3b0/0x4e0 [ 90.653890][ T6697] should_failslab+0xac/0x100 [ 90.658603][ T6697] kmem_cache_alloc_node_noprof+0x77/0x380 [ 90.666194][ T6697] ? __alloc_skb+0x1c3/0x440 [ 90.670830][ T6697] __alloc_skb+0x1c3/0x440 [ 90.675285][ T6697] ? __pfx___alloc_skb+0x10/0x10 [ 90.680258][ T6697] ? __lock_acquire+0x1397/0x2100 [ 90.685321][ T6697] alloc_skb_with_frags+0xc3/0x820 [ 90.690478][ T6697] sock_alloc_send_pskb+0x91a/0xa60 [ 90.695734][ T6697] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 90.701492][ T6697] ? __lock_acquire+0x1397/0x2100 [ 90.706561][ T6697] ? dev_get_by_index+0x23/0x2d0 [ 90.711539][ T6697] packet_sendmsg+0x4080/0x6c30 [ 90.716442][ T6697] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 90.722044][ T6697] ? __pfx___might_resched+0x10/0x10 [ 90.727370][ T6697] ? __pfx_packet_sendmsg+0x10/0x10 [ 90.732594][ T6697] ? aa_sk_perm+0x96d/0xab0 [ 90.737134][ T6697] ? __pfx_aa_sk_perm+0x10/0x10 [ 90.742021][ T6697] ? __fget_files+0x2a/0x410 [ 90.746642][ T6697] ? aa_sock_msg_perm+0x91/0x160 [ 90.751610][ T6697] ? __pfx_packet_sendmsg+0x10/0x10 [ 90.756843][ T6697] __sock_sendmsg+0x221/0x270 [ 90.761563][ T6697] __sys_sendto+0x363/0x4c0 [ 90.766104][ T6697] ? __pfx___sys_sendto+0x10/0x10 [ 90.771209][ T6697] ? __mutex_unlock_slowpath+0x21e/0x790 [ 90.776887][ T6697] ? __fget_files+0x2a/0x410 [ 90.781519][ T6697] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 90.787534][ T6697] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 90.793899][ T6697] __x64_sys_sendto+0xde/0x100 [ 90.798697][ T6697] do_syscall_64+0xf3/0x230 [ 90.803236][ T6697] ? clear_bhb_loop+0x35/0x90 [ 90.807954][ T6697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.813898][ T6697] RIP: 0033:0x7fe8ae185d29 [ 90.818351][ T6697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.837986][ T6697] RSP: 002b:00007fe8aef9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 90.846440][ T6697] RAX: ffffffffffffffda RBX: 00007fe8ae375fa0 RCX: 00007fe8ae185d29 [ 90.854444][ T6697] RDX: 0000000000000102 RSI: 0000000020000100 RDI: 0000000000000006 [ 90.862451][ T6697] RBP: 00007fe8aef9e090 R08: 0000000020000200 R09: 0000000000000014 [ 90.870448][ T6697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.878452][ T6697] R13: 0000000000000000 R14: 00007fe8ae375fa0 R15: 00007ffd282eb4a8 [ 90.886472][ T6697] [ 91.116073][ T6707] Cannot find set identified by id 0 to match [ 91.377301][ T6717] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 91.381354][ T6723] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 91.381605][ T3076] IPVS: starting estimator thread 0... [ 91.552664][ T6724] IPVS: using max 24 ests per chain, 57600 per kthread [ 92.063108][ T6749] __nla_validate_parse: 8 callbacks suppressed [ 92.063128][ T6749] netlink: 88 bytes leftover after parsing attributes in process `syz.4.229'. [ 92.136888][ T6753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.228'. [ 92.140626][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.229'. [ 92.206527][ T6749] netlink: 16 bytes leftover after parsing attributes in process `syz.4.229'. [ 92.260375][ T6749] netlink: 80 bytes leftover after parsing attributes in process `syz.4.229'. [ 92.697503][ T6773] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 94.929882][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880329fa800: rx timeout, send abort [ 94.939867][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880329f8400: rx timeout, send abort [ 94.948519][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880329fa800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 94.964210][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880329f8400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.032177][ T6819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.246'. [ 95.147955][ T6823] netlink: 'syz.2.247': attribute type 39 has an invalid length. [ 95.635510][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a950400: rx timeout, send abort [ 95.643914][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807a950c00: rx timeout, send abort [ 95.652872][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a950400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.667326][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807a950c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 95.684001][ T6830] xt_bpf: check failed: parse error [ 95.738390][ T6832] netlink: 'syz.1.248': attribute type 10 has an invalid length. [ 95.935022][ T6832] veth0_vlan: left promiscuous mode [ 95.976278][ T6853] xt_bpf: check failed: parse error [ 95.981686][ T6852] xt_l2tp: unknown flags: 10 [ 95.995642][ T6853] netlink: 'syz.0.253': attribute type 10 has an invalid length. [ 96.038363][ T6832] veth0_vlan: entered promiscuous mode [ 96.052856][ T6832] team0: Device veth0_vlan failed to register rx_handler [ 96.098963][ T6854] sctp: [Deprecated]: syz.3.254 (pid 6854) Use of int in max_burst socket option. [ 96.098963][ T6854] Use struct sctp_assoc_value instead [ 96.125636][ T6853] veth0_vlan: left promiscuous mode [ 96.134575][ T6853] veth0_vlan: entered promiscuous mode [ 96.168758][ T6853] team0: Device veth0_vlan failed to register rx_handler [ 96.481894][ T6865] Cannot find set identified by id 0 to match [ 96.510473][ T6866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 96.511893][ T6861] bridge1: entered promiscuous mode [ 96.526488][ T6861] bridge1: entered allmulticast mode [ 96.555557][ T6866] vlan2: entered promiscuous mode [ 96.665010][ T6872] tipc: Enabling of bearer rejected, failed to enable media [ 96.856094][ T6875] sctp: [Deprecated]: syz.2.260 (pid 6875) Use of int in max_burst socket option. [ 96.856094][ T6875] Use struct sctp_assoc_value instead [ 96.990176][ T6872] netlink: 20 bytes leftover after parsing attributes in process `syz.0.259'. [ 97.721283][ T6914] xt_l2tp: unknown flags: 10 [ 97.767840][ T6914] sctp: [Deprecated]: syz.1.268 (pid 6914) Use of int in max_burst socket option. [ 97.767840][ T6914] Use struct sctp_assoc_value instead [ 97.836914][ T6921] netlink: 24 bytes leftover after parsing attributes in process `syz.2.271'. [ 97.962288][ T6919] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 98.224988][ T6936] xt_bpf: check failed: parse error [ 98.281874][ T6936] netlink: 'syz.0.277': attribute type 10 has an invalid length. [ 98.284804][ T6937] tipc: Started in network mode [ 98.313297][ T6926] netlink: 56 bytes leftover after parsing attributes in process `syz.3.273'. [ 98.318734][ T6937] tipc: Node identity ac14140f, cluster identity 4711 [ 98.331030][ T6937] tipc: New replicast peer: 255.255.255.255 [ 98.357161][ T6937] tipc: Enabled bearer , priority 10 [ 98.365600][ T6936] veth0_vlan: left promiscuous mode [ 98.375638][ T6936] veth0_vlan: entered promiscuous mode [ 98.386470][ T6936] team0: Device veth0_vlan failed to register rx_handler [ 98.508007][ T6946] netlink: 48 bytes leftover after parsing attributes in process `syz.4.279'. [ 98.668369][ T6951] netlink: 152 bytes leftover after parsing attributes in process `syz.2.280'. [ 98.763172][ T6954] xt_l2tp: unknown flags: 10 [ 98.786655][ T6957] netlink: 104 bytes leftover after parsing attributes in process `syz.4.283'. [ 98.800077][ T6951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.280'. [ 98.831243][ T6961] FAULT_INJECTION: forcing a failure. [ 98.831243][ T6961] name failslab, interval 1, probability 0, space 0, times 0 [ 98.852683][ T6954] sctp: [Deprecated]: syz.3.282 (pid 6954) Use of int in max_burst socket option. [ 98.852683][ T6954] Use struct sctp_assoc_value instead [ 98.895177][ T6961] CPU: 0 UID: 0 PID: 6961 Comm: syz.0.285 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 98.905833][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 98.915899][ T6961] Call Trace: [ 98.919171][ T6961] [ 98.922101][ T6961] dump_stack_lvl+0x241/0x360 [ 98.926811][ T6961] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.932042][ T6961] ? __pfx__printk+0x10/0x10 [ 98.936657][ T6961] ? __kmalloc_cache_noprof+0x48/0x390 [ 98.942150][ T6961] ? __pfx___might_resched+0x10/0x10 [ 98.947460][ T6961] ? dev_prep_valid_name+0x916/0xa40 [ 98.952783][ T6961] should_fail_ex+0x3b0/0x4e0 [ 98.957504][ T6961] should_failslab+0xac/0x100 [ 98.962215][ T6961] __kmalloc_cache_noprof+0x70/0x390 [ 98.967534][ T6961] ? register_netdevice+0x59c/0x1b00 [ 98.972862][ T6961] register_netdevice+0x59c/0x1b00 [ 98.978099][ T6961] ? validate_linkmsg+0x828/0xa40 [ 98.983149][ T6961] ? read_word_at_a_time+0xe/0x20 [ 98.988204][ T6961] ? __pfx_register_netdevice+0x10/0x10 [ 98.993789][ T6961] ? __pfx_validate_linkmsg+0x10/0x10 [ 98.999200][ T6961] ? alloc_netdev_mqs+0xcd0/0x1080 [ 99.004368][ T6961] br_dev_newlink+0x27/0x100 [ 99.008994][ T6961] ? __pfx_br_dev_newlink+0x10/0x10 [ 99.014230][ T6961] rtnl_newlink_create+0x2ee/0xa40 [ 99.019396][ T6961] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 99.025076][ T6961] ? ns_capable+0x8a/0xf0 [ 99.029467][ T6961] rtnl_newlink+0x160d/0x2150 [ 99.034192][ T6961] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.039249][ T6961] ? __netlink_deliver_tap+0x56b/0x7f0 [ 99.044754][ T6961] ? __pfx_validate_chain+0x10/0x10 [ 99.049985][ T6961] ? __sock_sendmsg+0x221/0x270 [ 99.054846][ T6961] ? ____sys_sendmsg+0x52a/0x7e0 [ 99.059785][ T6961] ? __sys_sendmsg+0x269/0x350 [ 99.064547][ T6961] ? do_syscall_64+0xf3/0x230 [ 99.069222][ T6961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.075311][ T6961] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.081296][ T6961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.087629][ T6961] ? mark_lock+0x9a/0x360 [ 99.091962][ T6961] ? __lock_acquire+0x1397/0x2100 [ 99.097013][ T6961] ? __pfx_lock_release+0x10/0x10 [ 99.102054][ T6961] ? __pfx_rtnl_newlink+0x10/0x10 [ 99.107093][ T6961] rtnetlink_rcv_msg+0x791/0xcf0 [ 99.112036][ T6961] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 99.117245][ T6961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.122717][ T6961] ? ref_tracker_free+0x643/0x7e0 [ 99.127748][ T6961] netlink_rcv_skb+0x1e3/0x430 [ 99.132600][ T6961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 99.138080][ T6961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 99.143381][ T6961] ? netlink_deliver_tap+0x2e/0x1b0 [ 99.148589][ T6961] netlink_unicast+0x7f6/0x990 [ 99.153370][ T6961] ? __pfx_netlink_unicast+0x10/0x10 [ 99.158659][ T6961] ? __virt_addr_valid+0x45f/0x530 [ 99.163776][ T6961] ? __phys_addr_symbol+0x2f/0x70 [ 99.168799][ T6961] ? __check_object_size+0x47a/0x730 [ 99.174088][ T6961] netlink_sendmsg+0x8e4/0xcb0 [ 99.178863][ T6961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.184150][ T6961] ? aa_sock_msg_perm+0x91/0x160 [ 99.189098][ T6961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 99.194380][ T6961] __sock_sendmsg+0x221/0x270 [ 99.199069][ T6961] ____sys_sendmsg+0x52a/0x7e0 [ 99.203857][ T6961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 99.209157][ T6961] ? __fget_files+0x2a/0x410 [ 99.213762][ T6961] ? __fget_files+0x2a/0x410 [ 99.218361][ T6961] __sys_sendmsg+0x269/0x350 [ 99.222953][ T6961] ? __pfx_lock_release+0x10/0x10 [ 99.227982][ T6961] ? __pfx___sys_sendmsg+0x10/0x10 [ 99.233105][ T6961] ? __pfx_vfs_write+0x10/0x10 [ 99.237888][ T6961] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.244218][ T6961] ? do_syscall_64+0x100/0x230 [ 99.248996][ T6961] ? do_syscall_64+0xb6/0x230 [ 99.253682][ T6961] do_syscall_64+0xf3/0x230 [ 99.258196][ T6961] ? clear_bhb_loop+0x35/0x90 [ 99.262875][ T6961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.268772][ T6961] RIP: 0033:0x7fe8ae185d29 [ 99.273200][ T6961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.292811][ T6961] RSP: 002b:00007fe8aef9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 99.301255][ T6961] RAX: ffffffffffffffda RBX: 00007fe8ae375fa0 RCX: 00007fe8ae185d29 [ 99.309250][ T6961] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 99.317227][ T6961] RBP: 00007fe8aef9e090 R08: 0000000000000000 R09: 0000000000000000 [ 99.325205][ T6961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.333175][ T6961] R13: 0000000000000000 R14: 00007fe8ae375fa0 R15: 00007ffd282eb4a8 [ 99.341282][ T6961] [ 99.400887][ T3076] tipc: Node number set to 2886997007 [ 99.626722][ T6978] Illegal XDP return value 800177186 on prog (id 112) dev N/A, expect packet loss! [ 99.748955][ T6990] netlink: 104 bytes leftover after parsing attributes in process `syz.3.293'. [ 99.775600][ T6990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.293'. [ 99.882280][ T5847] Bluetooth: hci0: command 0x0c20 tx timeout [ 99.889360][ T5844] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 99.973508][ T6998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.296'. [ 100.343004][ T7019] netlink: 36 bytes leftover after parsing attributes in process `syz.3.302'. [ 100.611680][ T7016] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.619215][ T7016] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.854955][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.880480][ T7016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.031117][ T7040] xt_l2tp: unknown flags: 10 [ 101.043983][ T7016] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.054793][ T7016] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.063958][ T7016] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.066404][ T7040] sctp: [Deprecated]: syz.0.309 (pid 7040) Use of int in max_burst socket option. [ 101.066404][ T7040] Use struct sctp_assoc_value instead [ 101.073401][ T7016] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.245416][ T7016] vlan2: left promiscuous mode [ 101.499639][ T7052] vlan1: entered promiscuous mode [ 101.511227][ T7052] vlan1: entered allmulticast mode [ 101.972302][ T5844] Bluetooth: hci0: command 0x0c20 tx timeout [ 102.150405][ T7081] xt_l2tp: unknown flags: 10 [ 102.248702][ T7081] sctp: [Deprecated]: syz.3.320 (pid 7081) Use of int in max_burst socket option. [ 102.248702][ T7081] Use struct sctp_assoc_value instead [ 103.236875][ T7121] xt_l2tp: unknown flags: 10 [ 103.260000][ T7121] sctp: [Deprecated]: syz.3.335 (pid 7121) Use of int in max_burst socket option. [ 103.260000][ T7121] Use struct sctp_assoc_value instead [ 103.441279][ T7127] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20002 [ 103.506590][ T7104] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 103.519720][ T7104] syzkaller1: Linktype set failed because interface is up [ 103.532427][ T9] syzkaller1: tun_net_xmit 90 [ 103.763536][ T7139] __nla_validate_parse: 3 callbacks suppressed [ 103.763556][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.342'. [ 103.783544][ T7140] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.341'. [ 103.802372][ T7140] netlink: zone id is out of range [ 103.834823][ T7140] netlink: zone id is out of range [ 103.847264][ T7140] netlink: zone id is out of range [ 103.862526][ T7140] netlink: zone id is out of range [ 103.892337][ T7140] netlink: zone id is out of range [ 103.922766][ T7140] netlink: zone id is out of range [ 103.927949][ T7140] netlink: zone id is out of range [ 103.956289][ T7140] netlink: zone id is out of range [ 103.961470][ T7140] netlink: zone id is out of range [ 104.010677][ T7140] netlink: zone id is out of range [ 104.073919][ T7146] lo speed is unknown, defaulting to 1000 [ 104.262098][ T7153] xt_l2tp: unknown flags: 10 [ 104.335383][ T7153] sctp: [Deprecated]: syz.4.348 (pid 7153) Use of int in max_burst socket option. [ 104.335383][ T7153] Use struct sctp_assoc_value instead [ 104.372839][ T7155] lo speed is unknown, defaulting to 1000 [ 104.530611][ T7163] netlink: 152 bytes leftover after parsing attributes in process `syz.3.351'. [ 104.658644][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.351'. [ 104.739581][ T25] hid-generic 0005:7FFF:0008.0004: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 104.795468][ T7174] dvmrp0: entered allmulticast mode [ 105.213053][ T7174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.228687][ T7174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.245046][ T7174] bond0 (unregistering): Released all slaves [ 105.267110][ T7178] pimreg: entered allmulticast mode [ 105.289848][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.332935][ T7181] batadv_slave_1: entered promiscuous mode [ 105.408593][ T7183] bridge3: entered promiscuous mode [ 105.434293][ T7183] bridge3: entered allmulticast mode [ 105.520153][ T7193] netlink: 104 bytes leftover after parsing attributes in process `syz.2.358'. [ 105.691331][ T9] IPVS: starting estimator thread 0... [ 105.781266][ T7197] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 105.807449][ T7200] IPVS: using max 24 ests per chain, 57600 per kthread [ 105.911918][ T25] IPVS: starting estimator thread 0... [ 106.033214][ T7211] IPVS: using max 19 ests per chain, 45600 per kthread [ 106.368136][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 106.428248][ T7223] netlink: 'syz.4.370': attribute type 15 has an invalid length. [ 106.488791][ T7225] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.554292][ T7225] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.686202][ T7231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 106.982415][ T7242] tipc: Enabled bearer , priority 0 [ 107.049882][ T7242] €Â: renamed from syzkaller0 [ 107.097046][ T7242] tipc: Disabling bearer [ 107.103420][ T7251] netlink: 40 bytes leftover after parsing attributes in process `syz.3.381'. [ 107.143823][ T7247] bridge4: entered promiscuous mode [ 107.151601][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.380'. [ 107.168149][ T7247] bridge4: entered allmulticast mode [ 107.256477][ T7254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.257338][ T7249] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 107.505083][ T7254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.537584][ T7261] : renamed from ipvlan1 [ 107.704757][ T7254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.915344][ T7254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.139076][ T7254] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.176226][ T7286] netlink: 'syz.3.389': attribute type 10 has an invalid length. [ 108.186025][ T7254] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.198030][ T7286] veth0_vlan: left promiscuous mode [ 108.208326][ T7286] veth0_vlan: entered promiscuous mode [ 108.220145][ T7286] team0: Device veth0_vlan failed to register rx_handler [ 108.258715][ T7254] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.297860][ T7254] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.424366][ T7291] FAULT_INJECTION: forcing a failure. [ 108.424366][ T7291] name failslab, interval 1, probability 0, space 0, times 0 [ 108.499510][ T7291] CPU: 1 UID: 0 PID: 7291 Comm: syz.3.391 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 108.510171][ T7291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 108.520261][ T7291] Call Trace: [ 108.523572][ T7291] [ 108.526527][ T7291] dump_stack_lvl+0x241/0x360 [ 108.531285][ T7291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.536527][ T7291] ? __pfx__printk+0x10/0x10 [ 108.541160][ T7291] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 108.546616][ T7291] ? __pfx___might_resched+0x10/0x10 [ 108.552111][ T7291] ? rcu_is_watching+0x15/0xb0 [ 108.556922][ T7291] should_fail_ex+0x3b0/0x4e0 [ 108.561649][ T7291] should_failslab+0xac/0x100 [ 108.566381][ T7291] __kmalloc_node_noprof+0xe1/0x4d0 [ 108.571626][ T7291] ? __kvmalloc_node_noprof+0x72/0x190 [ 108.577129][ T7291] __kvmalloc_node_noprof+0x72/0x190 [ 108.582449][ T7291] nf_hook_entries_grow+0x288/0x720 [ 108.587702][ T7291] __nf_register_net_hook+0x278/0x8d0 [ 108.593128][ T7291] nf_register_net_hook+0xb0/0x190 [ 108.598306][ T7291] nf_register_net_hooks+0x41/0x1a0 [ 108.603536][ T7291] nf_ct_netns_do_get+0x3b0/0x630 [ 108.608561][ T7291] ? __pfx_lock_release+0x10/0x10 [ 108.613606][ T7291] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 108.619197][ T7291] nf_ct_netns_inet_get+0x1f/0x150 [ 108.624338][ T7291] nft_synproxy_do_init+0x1ca/0x4a0 [ 108.629544][ T7291] nf_tables_newrule+0x185e/0x2980 [ 108.634668][ T7291] ? __pfx_nf_tables_newrule+0x10/0x10 [ 108.640139][ T7291] ? __nla_parse+0x40/0x60 [ 108.644563][ T7291] nfnetlink_rcv+0x14e3/0x2ab0 [ 108.649330][ T7291] ? __pfx_validate_chain+0x10/0x10 [ 108.654557][ T7291] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 108.659679][ T7291] ? __lock_acquire+0x1397/0x2100 [ 108.664733][ T7291] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.669930][ T7291] ? __pfx_lock_release+0x10/0x10 [ 108.674965][ T7291] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.680163][ T7291] netlink_unicast+0x7f6/0x990 [ 108.684937][ T7291] ? __pfx_netlink_unicast+0x10/0x10 [ 108.690222][ T7291] ? __virt_addr_valid+0x45f/0x530 [ 108.695336][ T7291] ? __phys_addr_symbol+0x2f/0x70 [ 108.700359][ T7291] ? __check_object_size+0x47a/0x730 [ 108.705654][ T7291] netlink_sendmsg+0x8e4/0xcb0 [ 108.710429][ T7291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.715712][ T7291] ? aa_sock_msg_perm+0x91/0x160 [ 108.720654][ T7291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.725945][ T7291] __sock_sendmsg+0x221/0x270 [ 108.730629][ T7291] ____sys_sendmsg+0x52a/0x7e0 [ 108.735411][ T7291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.740728][ T7291] ? __fget_files+0x2a/0x410 [ 108.745358][ T7291] ? __fget_files+0x2a/0x410 [ 108.749967][ T7291] __sys_sendmsg+0x269/0x350 [ 108.754561][ T7291] ? __pfx_lock_release+0x10/0x10 [ 108.759592][ T7291] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.764717][ T7291] ? __pfx_vfs_write+0x10/0x10 [ 108.769502][ T7291] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.775831][ T7291] ? do_syscall_64+0x100/0x230 [ 108.780598][ T7291] ? do_syscall_64+0xb6/0x230 [ 108.785275][ T7291] do_syscall_64+0xf3/0x230 [ 108.789776][ T7291] ? clear_bhb_loop+0x35/0x90 [ 108.794458][ T7291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.800359][ T7291] RIP: 0033:0x7fad4b385d29 [ 108.804775][ T7291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.824382][ T7291] RSP: 002b:00007fad4c15a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.832813][ T7291] RAX: ffffffffffffffda RBX: 00007fad4b575fa0 RCX: 00007fad4b385d29 [ 108.840786][ T7291] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 108.848763][ T7291] RBP: 00007fad4c15a090 R08: 0000000000000000 R09: 0000000000000000 [ 108.856738][ T7291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 108.864727][ T7291] R13: 0000000000000000 R14: 00007fad4b575fa0 R15: 00007ffff2d46bc8 [ 108.872717][ T7291] [ 108.960782][ T7296] __nla_validate_parse: 4 callbacks suppressed [ 108.960801][ T7296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 109.379094][ T7310] netlink: 104 bytes leftover after parsing attributes in process `syz.2.395'. [ 109.742497][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 109.833426][ T7331] netlink: 'syz.0.400': attribute type 11 has an invalid length. [ 109.862985][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.398'. [ 109.896012][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.2.398'. [ 110.023890][ T7334] veth0: entered promiscuous mode [ 110.067449][ T7334] batadv0: entered promiscuous mode [ 110.114786][ T7340] netlink: 68 bytes leftover after parsing attributes in process `syz.3.401'. [ 110.189964][ T7340] xt_l2tp: wrong L2TP version: 0 [ 110.319657][ T7345] netlink: 144 bytes leftover after parsing attributes in process `syz.0.403'. [ 110.337004][ T7346] Unknown options in mask 1f4 [ 110.409444][ T7348] net_ratelimit: 4 callbacks suppressed [ 110.409463][ T7348] caif0: mtu less than device minimum [ 110.467488][ T7352] syz.3.406 (7352) used obsolete PPPIOCDETACH ioctl [ 110.543663][ T7352] lo speed is unknown, defaulting to 1000 [ 110.578399][ T7355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 110.808505][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 111.014746][ T7371] tipc: Enabled bearer , priority 10 [ 111.025742][ T7371] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 111.033429][ T7371] IPv6: NLM_F_CREATE should be set when creating new route [ 111.053862][ T7372] FAULT_INJECTION: forcing a failure. [ 111.053862][ T7372] name failslab, interval 1, probability 0, space 0, times 0 [ 111.122910][ T7372] CPU: 0 UID: 0 PID: 7372 Comm: syz.4.413 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 111.133563][ T7372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 111.143657][ T7372] Call Trace: [ 111.146967][ T7372] [ 111.149923][ T7372] dump_stack_lvl+0x241/0x360 [ 111.154644][ T7372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.159882][ T7372] ? __pfx__printk+0x10/0x10 [ 111.164508][ T7372] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 111.169903][ T7372] ? __pfx___might_resched+0x10/0x10 [ 111.175221][ T7372] should_fail_ex+0x3b0/0x4e0 [ 111.179935][ T7372] should_failslab+0xac/0x100 [ 111.184649][ T7372] __kmalloc_node_noprof+0xe1/0x4d0 [ 111.189872][ T7372] ? __kvmalloc_node_noprof+0x72/0x190 [ 111.195342][ T7372] __kvmalloc_node_noprof+0x72/0x190 [ 111.200626][ T7372] rhashtable_init_noprof+0x534/0xa60 [ 111.206012][ T7372] br_vlan_init+0x6c/0x1a0 [ 111.210433][ T7372] br_dev_init+0x65/0x390 [ 111.214762][ T7372] ? __kmalloc_cache_noprof+0x243/0x390 [ 111.220315][ T7372] register_netdevice+0x6d7/0x1b00 [ 111.225432][ T7372] ? validate_linkmsg+0x828/0xa40 [ 111.230456][ T7372] ? __pfx_register_netdevice+0x10/0x10 [ 111.236004][ T7372] ? __pfx_validate_linkmsg+0x10/0x10 [ 111.241464][ T7372] ? alloc_netdev_mqs+0xcd0/0x1080 [ 111.246581][ T7372] br_dev_newlink+0x27/0x100 [ 111.251172][ T7372] ? __pfx_br_dev_newlink+0x10/0x10 [ 111.256375][ T7372] rtnl_newlink_create+0x2ee/0xa40 [ 111.261497][ T7372] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 111.267135][ T7372] ? ns_capable+0x8a/0xf0 [ 111.271471][ T7372] rtnl_newlink+0x160d/0x2150 [ 111.276157][ T7372] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.281184][ T7372] ? __pfx_validate_chain+0x10/0x10 [ 111.286430][ T7372] ? validate_chain+0x11e/0x5920 [ 111.291383][ T7372] ? __pfx_lock_acquire+0x10/0x10 [ 111.296416][ T7372] ? __pfx_lock_release+0x10/0x10 [ 111.301443][ T7372] ? __pfx_validate_chain+0x10/0x10 [ 111.306644][ T7372] ? mark_lock+0x9a/0x360 [ 111.310979][ T7372] ? __lock_acquire+0x1397/0x2100 [ 111.316023][ T7372] ? __pfx_lock_release+0x10/0x10 [ 111.321059][ T7372] ? __pfx_rtnl_newlink+0x10/0x10 [ 111.326087][ T7372] rtnetlink_rcv_msg+0x791/0xcf0 [ 111.331024][ T7372] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 111.336137][ T7372] ? __lock_acquire+0x1397/0x2100 [ 111.341182][ T7372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.346656][ T7372] netlink_rcv_skb+0x1e3/0x430 [ 111.351420][ T7372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 111.356881][ T7372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 111.362178][ T7372] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.367372][ T7372] netlink_unicast+0x7f6/0x990 [ 111.372153][ T7372] ? __pfx_netlink_unicast+0x10/0x10 [ 111.377437][ T7372] ? __virt_addr_valid+0x45f/0x530 [ 111.382546][ T7372] ? __phys_addr_symbol+0x2f/0x70 [ 111.387572][ T7372] ? __check_object_size+0x47a/0x730 [ 111.392901][ T7372] netlink_sendmsg+0x8e4/0xcb0 [ 111.397676][ T7372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.402969][ T7372] ? aa_sock_msg_perm+0x91/0x160 [ 111.407909][ T7372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.413187][ T7372] __sock_sendmsg+0x221/0x270 [ 111.417865][ T7372] ____sys_sendmsg+0x52a/0x7e0 [ 111.422633][ T7372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.427934][ T7372] ? __fget_files+0x2a/0x410 [ 111.432562][ T7372] ? __fget_files+0x2a/0x410 [ 111.437171][ T7372] __sys_sendmsg+0x269/0x350 [ 111.441767][ T7372] ? __pfx_lock_release+0x10/0x10 [ 111.446796][ T7372] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.451918][ T7372] ? __pfx_vfs_write+0x10/0x10 [ 111.456699][ T7372] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.463030][ T7372] ? do_syscall_64+0x100/0x230 [ 111.467796][ T7372] ? do_syscall_64+0xb6/0x230 [ 111.472473][ T7372] do_syscall_64+0xf3/0x230 [ 111.477012][ T7372] ? clear_bhb_loop+0x35/0x90 [ 111.481693][ T7372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.487590][ T7372] RIP: 0033:0x7f5b4a585d29 [ 111.492007][ T7372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.511621][ T7372] RSP: 002b:00007f5b4b2cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.520044][ T7372] RAX: ffffffffffffffda RBX: 00007f5b4a775fa0 RCX: 00007f5b4a585d29 [ 111.528014][ T7372] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 111.535990][ T7372] RBP: 00007f5b4b2cf090 R08: 0000000000000000 R09: 0000000000000000 [ 111.543980][ T7372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.551973][ T7372] R13: 0000000000000000 R14: 00007f5b4a775fa0 R15: 00007ffd2ca79eb8 [ 111.559976][ T7372] [ 111.579134][ T7375] syz.1.416 uses old SIOCAX25GETINFO [ 111.604445][ T7372] bridge5: entered promiscuous mode [ 111.617359][ T7372] bridge5: entered allmulticast mode [ 112.119817][ T7402] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 112.458642][ T7420] netlink: 'syz.0.429': attribute type 19 has an invalid length. [ 112.482327][ T7420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 112.618522][ T7420] netlink: 'syz.0.429': attribute type 9 has an invalid length. [ 113.391982][ T7451] sctp: [Deprecated]: syz.0.441 (pid 7451) Use of int in max_burst socket option. [ 113.391982][ T7451] Use struct sctp_assoc_value instead [ 113.742248][ T7463] Bluetooth: MGMT ver 1.23 [ 113.809607][ T7467] bridge2: entered promiscuous mode [ 113.815193][ T7467] bridge2: entered allmulticast mode [ 114.114673][ T7479] FAULT_INJECTION: forcing a failure. [ 114.114673][ T7479] name failslab, interval 1, probability 0, space 0, times 0 [ 114.150181][ T7483] __nla_validate_parse: 2 callbacks suppressed [ 114.150201][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 114.162164][ T7479] CPU: 0 UID: 0 PID: 7479 Comm: syz.0.452 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 114.172035][ T7482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.453'. [ 114.176195][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 114.176214][ T7479] Call Trace: [ 114.176223][ T7479] [ 114.176232][ T7479] dump_stack_lvl+0x241/0x360 [ 114.189160][ T7483] netlink: 28 bytes leftover after parsing attributes in process `syz.4.450'. [ 114.195073][ T7479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.195108][ T7479] ? __pfx__printk+0x10/0x10 [ 114.195131][ T7479] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 114.230128][ T7479] ? __pfx___might_resched+0x10/0x10 [ 114.235450][ T7479] ? rcu_is_watching+0x15/0xb0 [ 114.240263][ T7479] should_fail_ex+0x3b0/0x4e0 [ 114.244985][ T7479] should_failslab+0xac/0x100 [ 114.249711][ T7479] __kmalloc_node_noprof+0xe1/0x4d0 [ 114.254948][ T7479] ? __kvmalloc_node_noprof+0x72/0x190 [ 114.260616][ T7479] __kvmalloc_node_noprof+0x72/0x190 [ 114.265935][ T7479] nf_hook_entries_grow+0x288/0x720 [ 114.271184][ T7479] __nf_register_net_hook+0x278/0x8d0 [ 114.276606][ T7479] nf_register_net_hook+0xb0/0x190 [ 114.281750][ T7479] nf_register_net_hooks+0x41/0x1a0 [ 114.286982][ T7479] nf_ct_netns_do_get+0x3b0/0x630 [ 114.292029][ T7479] ? __pfx_lock_release+0x10/0x10 [ 114.297079][ T7479] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 114.302648][ T7479] nf_ct_netns_inet_get+0x1f/0x150 [ 114.307771][ T7479] nft_synproxy_do_init+0x1ca/0x4a0 [ 114.312975][ T7479] nf_tables_newrule+0x185e/0x2980 [ 114.318098][ T7479] ? __pfx_nf_tables_newrule+0x10/0x10 [ 114.323571][ T7479] ? __nla_parse+0x40/0x60 [ 114.328005][ T7479] nfnetlink_rcv+0x14e3/0x2ab0 [ 114.332802][ T7479] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 114.337956][ T7479] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.343161][ T7479] ? skb_clone+0x240/0x390 [ 114.347579][ T7479] ? __pfx_lock_release+0x10/0x10 [ 114.352613][ T7479] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.357814][ T7479] netlink_unicast+0x7f6/0x990 [ 114.362591][ T7479] ? __pfx_netlink_unicast+0x10/0x10 [ 114.367879][ T7479] ? __virt_addr_valid+0x45f/0x530 [ 114.372994][ T7479] ? __phys_addr_symbol+0x2f/0x70 [ 114.378030][ T7479] ? __check_object_size+0x47a/0x730 [ 114.383320][ T7479] netlink_sendmsg+0x8e4/0xcb0 [ 114.388107][ T7479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.393397][ T7479] ? aa_sock_msg_perm+0x91/0x160 [ 114.398336][ T7479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.403622][ T7479] __sock_sendmsg+0x221/0x270 [ 114.408305][ T7479] ____sys_sendmsg+0x52a/0x7e0 [ 114.413088][ T7479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.418380][ T7479] ? __fget_files+0x2a/0x410 [ 114.422972][ T7479] ? __fget_files+0x2a/0x410 [ 114.427568][ T7479] __sys_sendmsg+0x269/0x350 [ 114.432159][ T7479] ? __pfx_lock_release+0x10/0x10 [ 114.437207][ T7479] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.442434][ T7479] ? __pfx_vfs_write+0x10/0x10 [ 114.447238][ T7479] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.453659][ T7479] ? do_syscall_64+0x100/0x230 [ 114.458427][ T7479] ? do_syscall_64+0xb6/0x230 [ 114.463199][ T7479] do_syscall_64+0xf3/0x230 [ 114.467733][ T7479] ? clear_bhb_loop+0x35/0x90 [ 114.472428][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.478577][ T7479] RIP: 0033:0x7fe8ae185d29 [ 114.482998][ T7479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.502605][ T7479] RSP: 002b:00007fe8aef9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.511025][ T7479] RAX: ffffffffffffffda RBX: 00007fe8ae375fa0 RCX: 00007fe8ae185d29 [ 114.519182][ T7479] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 114.527245][ T7479] RBP: 00007fe8aef9e090 R08: 0000000000000000 R09: 0000000000000000 [ 114.535220][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.543188][ T7479] R13: 0000000000000000 R14: 00007fe8ae375fa0 R15: 00007ffd282eb4a8 [ 114.551178][ T7479] [ 114.561458][ T7483] veth0: entered promiscuous mode [ 114.568174][ T7483] batadv0: entered promiscuous mode [ 114.594838][ T7483] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 114.604024][ T7483] Cannot create hsr debugfs directory [ 114.628243][ T7483] hsr1: Slave A (veth0) is not up; please bring it up to get a fully working HSR network [ 114.646623][ T7483] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 115.018969][ T7498] netlink: 'syz.3.459': attribute type 10 has an invalid length. [ 115.051027][ T7498] veth0_vlan: left promiscuous mode [ 115.068459][ T7498] veth0_vlan: entered promiscuous mode [ 115.108920][ T7498] team0: Device veth0_vlan failed to register rx_handler [ 115.312950][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.0.464'. [ 115.493023][ T7527] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 115.557553][ T7522] netlink: 'syz.1.466': attribute type 18 has an invalid length. [ 115.622247][ T7522] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.631393][ T7522] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.640409][ T7522] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.650320][ T7522] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.006630][ T7531] lo speed is unknown, defaulting to 1000 [ 116.511433][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.474'. [ 116.643676][ T7581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 116.693390][ T7581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.474'. [ 116.808463][ T5844] block nbd0: Receive control failed (result -107) [ 116.860327][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.1.480'. [ 116.905820][ T7581] nbd0: detected capacity change from 0 to 256 [ 116.934089][ T5842] block nbd0: Dead connection, failed to find a fallback [ 116.954512][ T25] IPVS: starting estimator thread 0... [ 116.983795][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.479'. [ 117.047415][ T5842] block nbd0: shutting down sockets [ 117.092358][ T7612] IPVS: using max 25 ests per chain, 60000 per kthread [ 117.102515][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.142305][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.161484][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.183594][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.229701][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.264441][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.297801][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.340633][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.368389][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.408949][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.421234][ T7597] infiniband syz1: set active [ 117.434777][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.445052][ T7597] infiniband syz1: added team_slave_0 [ 117.465204][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.488985][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.520587][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.541610][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.599720][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.630189][ T7619] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.665987][ T7597] RDS/IB: syz1: added [ 117.675124][ T5842] ldm_validate_partition_table(): Disk read failed. [ 117.722270][ T7597] smc: adding ib device syz1 with port count 1 [ 117.728816][ T7597] smc: ib device syz1 port 1 has pnetid [ 117.752362][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.768192][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.781859][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 117.798894][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read [ 117.832719][ T5842] Dev nbd0: unable to read RDB block 0 [ 117.839407][ T5842] nbd0: unable to read partition table [ 117.864962][ T5842] ldm_validate_partition_table(): Disk read failed. [ 117.872261][ T5842] Dev nbd0: unable to read RDB block 0 [ 117.878219][ T5842] nbd0: unable to read partition table [ 118.760218][ T7638] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.873657][ T25] hid-generic 0005:7FFF:0008.0005: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 119.056582][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.092734][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.123080][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.140699][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.151597][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 119.168074][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 120.412721][ T7713] netlink: 152 bytes leftover after parsing attributes in process `syz.3.499'. [ 120.500804][ T7669] lo speed is unknown, defaulting to 1000 [ 120.601053][ T7713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 121.016948][ T7735] batadv_slave_1: entered promiscuous mode [ 121.071050][ T7741] netlink: 'syz.1.504': attribute type 1 has an invalid length. [ 121.126787][ T7734] batadv_slave_1: left promiscuous mode [ 121.244518][ T5847] Bluetooth: hci3: command tx timeout [ 121.802756][ T7669] chnl_net:caif_netlink_parms(): no params data found [ 122.008217][ T7776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 122.054466][ T7669] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.057568][ T7776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.513'. [ 122.070774][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.086907][ T7669] bridge_slave_0: entered allmulticast mode [ 122.100731][ T7669] bridge_slave_0: entered promiscuous mode [ 122.123998][ T7669] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.142364][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.150190][ T7669] bridge_slave_1: entered allmulticast mode [ 122.166232][ T7669] bridge_slave_1: entered promiscuous mode [ 122.231944][ T7776] veth0: entered promiscuous mode [ 122.237966][ T7776] batadv0: entered promiscuous mode [ 122.246703][ T7776] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 122.254796][ T7776] Cannot create hsr debugfs directory [ 122.294295][ T7669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.307018][ T7669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.523449][ T7669] team0: Port device team_slave_0 added [ 122.559559][ T7669] team0: Port device team_slave_1 added [ 122.606471][ T7567] team0: left allmulticast mode [ 122.617146][ T7567] team_slave_0: left allmulticast mode [ 122.626556][ T7567] team_slave_1: left allmulticast mode [ 122.638901][ T7567] bridge0: port 3(team0) entered disabled state [ 122.659924][ T7567] bridge_slave_1: left allmulticast mode [ 122.667820][ T7567] bridge_slave_1: left promiscuous mode [ 122.685678][ T7567] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.711412][ T7567] bridge_slave_0: left allmulticast mode [ 122.725206][ T7567] bridge_slave_0: left promiscuous mode [ 122.735690][ T7567] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.747107][ T7806] sctp: [Deprecated]: syz.0.521 (pid 7806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.747107][ T7806] Use struct sctp_sack_info instead [ 122.776522][ T7806] netlink: 36 bytes leftover after parsing attributes in process `syz.0.521'. [ 123.322410][ T5847] Bluetooth: hci3: command tx timeout [ 123.571236][ T7567] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.581160][ T7567] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.590948][ T7567] bond0 (unregistering): Released all slaves [ 123.606288][ T7800] gtp0: entered promiscuous mode [ 123.648393][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.707029][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.746805][ T7816] netlink: 36 bytes leftover after parsing attributes in process `syz.3.525'. [ 123.771548][ T7669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.797460][ T7805] lo speed is unknown, defaulting to 1000 [ 123.894736][ T7669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.901729][ T7669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.015395][ T7669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.139566][ T7825] sctp: [Deprecated]: syz.0.526 (pid 7825) Use of int in max_burst socket option. [ 124.139566][ T7825] Use struct sctp_assoc_value instead [ 124.403629][ T7669] hsr_slave_0: entered promiscuous mode [ 124.417959][ T7669] hsr_slave_1: entered promiscuous mode [ 124.431554][ T7669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.452700][ T7669] Cannot create hsr debugfs directory [ 124.812696][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 124.821644][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.530'. [ 125.078477][ T7567] veth0: left promiscuous mode [ 125.095734][ T7567] batadv0: left promiscuous mode [ 125.110935][ T7567] hsr_slave_0: left promiscuous mode [ 125.118411][ T7567] hsr_slave_1: left promiscuous mode [ 125.128318][ T7567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.137214][ T7567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.266900][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.532'. [ 125.286264][ T7857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.532'. [ 125.403084][ T5847] Bluetooth: hci3: command 0x040f tx timeout [ 125.445288][ T9] hid-generic 0005:7FFF:0008.0006: hidraw0: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 125.686726][ T7567] team_slave_1 (unregistering): left promiscuous mode [ 125.702239][ T7567] team0 (unregistering): Port device team_slave_1 removed [ 125.741111][ T7567] team_slave_0 (unregistering): left promiscuous mode [ 125.750530][ T7567] team0 (unregistering): Port device team_slave_0 removed [ 126.969418][ T7567] IPVS: stop unused estimator thread 0... [ 127.214851][ T7888] sctp: [Deprecated]: syz.1.539 (pid 7888) Use of int in max_burst socket option. [ 127.214851][ T7888] Use struct sctp_assoc_value instead [ 127.320910][ T7669] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.405554][ T7669] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.491525][ T7669] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.498692][ T5844] Bluetooth: hci3: command 0x040f tx timeout [ 127.538525][ T7669] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.659469][ T7905] lo: entered allmulticast mode [ 127.721046][ T7894] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8 [ 127.868370][ T7908] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 127.981249][ T7911] __nla_validate_parse: 1 callbacks suppressed [ 127.981268][ T7911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.543'. [ 127.999545][ T7669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.055906][ T7669] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.118418][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.125635][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.179424][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.187080][ T7561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.238031][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'. [ 128.307069][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.544'. [ 128.430013][ T7669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.682009][ T7944] netlink: 88 bytes leftover after parsing attributes in process `syz.0.548'. [ 128.715296][ T7944] netlink: 24 bytes leftover after parsing attributes in process `syz.0.548'. [ 128.745213][ T7944] netlink: 16 bytes leftover after parsing attributes in process `syz.0.548'. [ 128.780727][ T7944] netlink: 80 bytes leftover after parsing attributes in process `syz.0.548'. [ 128.861965][ T7669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.540328][ T7669] veth0_vlan: entered promiscuous mode [ 129.573531][ T5844] Bluetooth: hci3: command 0x040f tx timeout [ 129.624090][ T7669] veth1_vlan: entered promiscuous mode [ 129.749848][ T7669] veth0_macvtap: entered promiscuous mode [ 129.787396][ T7669] veth1_macvtap: entered promiscuous mode [ 129.849410][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.877317][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.918287][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.939917][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.970338][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.991228][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.013594][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.041550][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.084428][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.132196][ T7669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.151869][ T7669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.164227][ T7669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.176198][ T7669] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.185008][ T7669] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.193769][ T7669] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.202580][ T7669] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.462489][ T7567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.518508][ T7567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.599501][ T8025] sctp: [Deprecated]: syz.1.563 (pid 8025) Use of int in max_burst socket option. [ 130.599501][ T8025] Use struct sctp_assoc_value instead [ 130.629587][ T3450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.639230][ T3450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.885034][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 130.944053][ T8036] netlink: 'syz.1.568': attribute type 12 has an invalid length. [ 131.111466][ T8041] netlink: 28 bytes leftover after parsing attributes in process `syz.2.570'. [ 131.388895][ T8061] netlink: 104 bytes leftover after parsing attributes in process `syz.3.574'. [ 131.580162][ T1094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.830522][ T8077] FAULT_INJECTION: forcing a failure. [ 131.830522][ T8077] name failslab, interval 1, probability 0, space 0, times 0 [ 131.858035][ T1094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.871522][ T8077] CPU: 1 UID: 0 PID: 8077 Comm: syz.3.577 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 131.882165][ T8077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 131.892252][ T8077] Call Trace: [ 131.895561][ T8077] [ 131.898523][ T8077] dump_stack_lvl+0x241/0x360 [ 131.903247][ T8077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.908488][ T8077] ? __pfx__printk+0x10/0x10 [ 131.913128][ T8077] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 131.918544][ T8077] ? __pfx___might_resched+0x10/0x10 [ 131.923863][ T8077] ? trace_contention_end+0x3c/0x120 [ 131.929194][ T8077] should_fail_ex+0x3b0/0x4e0 [ 131.933933][ T8077] should_failslab+0xac/0x100 [ 131.938657][ T8077] __kmalloc_node_noprof+0xe1/0x4d0 [ 131.943896][ T8077] ? __kvmalloc_node_noprof+0x72/0x190 [ 131.949393][ T8077] ? __pfx___mutex_lock+0x10/0x10 [ 131.952443][ T8084] sctp: [Deprecated]: syz.1.578 (pid 8084) Use of int in max_burst socket option. [ 131.952443][ T8084] Use struct sctp_assoc_value instead [ 131.954435][ T8077] __kvmalloc_node_noprof+0x72/0x190 [ 131.974276][ T8077] nf_hook_entries_grow+0x288/0x720 [ 131.979529][ T8077] __nf_register_net_hook+0x278/0x8d0 [ 131.984955][ T8077] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 131.990554][ T8077] nf_register_net_hook+0xb0/0x190 [ 131.995720][ T8077] nf_register_net_hooks+0x41/0x1a0 [ 132.000966][ T8077] nf_synproxy_ipv4_init+0x70/0xd0 [ 132.006127][ T8077] nft_synproxy_do_init+0x290/0x4a0 [ 132.011373][ T8077] nf_tables_newrule+0x185e/0x2980 [ 132.016519][ T8077] ? __pfx_nf_tables_newrule+0x10/0x10 [ 132.022011][ T8077] ? __nla_parse+0x40/0x60 [ 132.026463][ T8077] nfnetlink_rcv+0x14e3/0x2ab0 [ 132.031275][ T8077] ? __pfx_validate_chain+0x10/0x10 [ 132.036574][ T8077] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 132.041728][ T8077] ? __lock_acquire+0x1397/0x2100 [ 132.046827][ T8077] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.052057][ T8077] ? __pfx_lock_release+0x10/0x10 [ 132.057143][ T8077] ? netlink_deliver_tap+0x2e/0x1b0 [ 132.062382][ T8077] netlink_unicast+0x7f6/0x990 [ 132.067199][ T8077] ? __pfx_netlink_unicast+0x10/0x10 [ 132.072522][ T8077] ? __virt_addr_valid+0x45f/0x530 [ 132.077673][ T8077] ? __phys_addr_symbol+0x2f/0x70 [ 132.082730][ T8077] ? __check_object_size+0x47a/0x730 [ 132.088066][ T8077] netlink_sendmsg+0x8e4/0xcb0 [ 132.092919][ T8077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.098246][ T8077] ? aa_sock_msg_perm+0x91/0x160 [ 132.103220][ T8077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.108535][ T8077] __sock_sendmsg+0x221/0x270 [ 132.113253][ T8077] ____sys_sendmsg+0x52a/0x7e0 [ 132.118064][ T8077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.123388][ T8077] ? __fget_files+0x2a/0x410 [ 132.128021][ T8077] ? __fget_files+0x2a/0x410 [ 132.132658][ T8077] __sys_sendmsg+0x269/0x350 [ 132.137280][ T8077] ? __pfx_lock_release+0x10/0x10 [ 132.142345][ T8077] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.147503][ T8077] ? __pfx_vfs_write+0x10/0x10 [ 132.152329][ T8077] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.158695][ T8077] ? do_syscall_64+0x100/0x230 [ 132.163498][ T8077] ? do_syscall_64+0xb6/0x230 [ 132.168214][ T8077] do_syscall_64+0xf3/0x230 [ 132.172750][ T8077] ? clear_bhb_loop+0x35/0x90 [ 132.177474][ T8077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.183403][ T8077] RIP: 0033:0x7fad4b385d29 [ 132.187883][ T8077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.207611][ T8077] RSP: 002b:00007fad4c15a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.216070][ T8077] RAX: ffffffffffffffda RBX: 00007fad4b575fa0 RCX: 00007fad4b385d29 [ 132.224110][ T8077] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 132.232109][ T8077] RBP: 00007fad4c15a090 R08: 0000000000000000 R09: 0000000000000000 [ 132.240128][ T8077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.248132][ T8077] R13: 0000000000000000 R14: 00007fad4b575fa0 R15: 00007ffff2d46bc8 [ 132.256152][ T8077] [ 132.530682][ T1094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.590255][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 132.612786][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 132.627067][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 132.649534][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 132.662530][ T5847] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 132.670325][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 132.678854][ T1094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.871364][ T8101] lo speed is unknown, defaulting to 1000 [ 133.087324][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.095566][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.166837][ T1094] bridge_slave_1: left allmulticast mode [ 133.194501][ T1094] bridge_slave_1: left promiscuous mode [ 133.200966][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.259313][ T8130] netlink: 'syz.0.589': attribute type 2 has an invalid length. [ 133.287617][ T8130] __nla_validate_parse: 3 callbacks suppressed [ 133.287635][ T8130] netlink: 92 bytes leftover after parsing attributes in process `syz.0.589'. [ 133.319277][ T8134] sctp: [Deprecated]: syz.2.591 (pid 8134) Use of int in max_burst socket option. [ 133.319277][ T8134] Use struct sctp_assoc_value instead [ 133.336976][ T1094] bridge_slave_0: left allmulticast mode [ 133.358283][ T1094] bridge_slave_0: left promiscuous mode [ 133.364698][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.091560][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.112785][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.135382][ T1094] bond0 (unregistering): Released all slaves [ 134.156215][ T8125] syz_tun: entered promiscuous mode [ 134.163861][ T8125] batadv_slave_0: entered promiscuous mode [ 134.175790][ T8125] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 134.191066][ T8125] Cannot create hsr debugfs directory [ 134.206954][ T8125] hsr1: Slave A (syz_tun) is not up; please bring it up to get a fully working HSR network [ 134.231609][ T8125] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 134.255017][ T8125] hsr1: entered allmulticast mode [ 134.260120][ T8125] syz_tun: entered allmulticast mode [ 134.271078][ T8125] batadv_slave_0: entered allmulticast mode [ 134.278741][ T8131] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 134.302529][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 134.314985][ T8129] lo speed is unknown, defaulting to 1000 [ 134.767181][ T5847] Bluetooth: hci3: command tx timeout [ 134.839593][ T8165] FAULT_INJECTION: forcing a failure. [ 134.839593][ T8165] name failslab, interval 1, probability 0, space 0, times 0 [ 134.852585][ T8165] CPU: 0 UID: 0 PID: 8165 Comm: syz.0.596 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 134.863207][ T8165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 134.873293][ T8165] Call Trace: [ 134.876592][ T8165] [ 134.879569][ T8165] dump_stack_lvl+0x241/0x360 [ 134.884288][ T8165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.889514][ T8165] ? __pfx__printk+0x10/0x10 [ 134.894147][ T8165] ? lockdep_hardirqs_on+0x99/0x150 [ 134.899368][ T8165] ? __local_bh_enable_ip+0x168/0x200 [ 134.904784][ T8165] should_fail_ex+0x3b0/0x4e0 [ 134.909493][ T8165] should_failslab+0xac/0x100 [ 134.914208][ T8165] kmem_cache_alloc_node_noprof+0x77/0x380 [ 134.920051][ T8165] ? __alloc_skb+0x1c3/0x440 [ 134.924680][ T8165] __alloc_skb+0x1c3/0x440 [ 134.929134][ T8165] ? __pfx___alloc_skb+0x10/0x10 [ 134.934115][ T8165] ip_frag_next+0xdd/0xb30 [ 134.938584][ T8165] ip_do_fragment+0x8d3/0x1b30 [ 134.943386][ T8165] ? __pfx_ip_finish_output2+0x10/0x10 [ 134.948871][ T8165] ? __pfx_ip_do_fragment+0x10/0x10 [ 134.954099][ T8165] ? pskb_expand_head+0x30e/0x1380 [ 134.959236][ T8165] ? ip_fast_csum+0x1f4/0x2b0 [ 134.963943][ T8165] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 134.968828][ T8165] ? __ip_finish_output+0x1fd/0x400 [ 134.974046][ T8165] ? ip_fragment+0x9a/0x220 [ 134.978574][ T8165] iptunnel_xmit+0x55d/0x9b0 [ 134.983209][ T8165] ip_tunnel_xmit+0x1fb3/0x26a0 [ 134.988110][ T8165] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 134.993331][ T8165] ? gre_build_header+0x380/0xba0 [ 134.998391][ T8165] ? __pfx_gre_build_header+0x10/0x10 [ 135.003788][ T8165] ? skb_network_protocol+0x5aa/0x7b0 [ 135.009177][ T8165] ? iptunnel_handle_offloads+0x31b/0x650 [ 135.014940][ T8165] ipgre_xmit+0x972/0xd20 [ 135.019315][ T8165] ? __pfx_ipgre_xmit+0x10/0x10 [ 135.024198][ T8165] ? validate_xmit_skb+0x9b8/0xff0 [ 135.029357][ T8165] dev_hard_start_xmit+0x27a/0x7d0 [ 135.034516][ T8165] __dev_queue_xmit+0x1b73/0x3f50 [ 135.039587][ T8165] ? __dev_queue_xmit+0x2f4/0x3f50 [ 135.044737][ T8165] ? __pfx___dev_queue_xmit+0x10/0x10 [ 135.050136][ T8165] ? rcu_is_watching+0x15/0xb0 [ 135.054933][ T8165] ? skb_release_data+0x2b5/0x8a0 [ 135.060002][ T8165] ? pskb_expand_head+0xc52/0x1380 [ 135.065156][ T8165] ? __bpf_redirect+0x54d/0xe10 [ 135.070037][ T8165] __bpf_tx_skb+0x18e/0x260 [ 135.074577][ T8165] bpf_clone_redirect+0x26f/0x3d0 [ 135.079646][ T8165] bpf_prog_208b094576c80b22+0x5f/0x64 [ 135.085139][ T8165] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 135.091157][ T8165] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.097521][ T8165] ? bpf_test_run+0x370/0xa90 [ 135.102224][ T8165] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 135.107979][ T8165] ? ktime_get+0x3e/0x1f0 [ 135.112333][ T8165] ? lockdep_hardirqs_on+0x99/0x150 [ 135.117565][ T8165] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 135.123850][ T8165] ? bpf_test_run+0x370/0xa90 [ 135.128558][ T8165] ? __pfx___cant_migrate+0x10/0x10 [ 135.133793][ T8165] ? read_tsc+0x9/0x20 [ 135.137902][ T8165] bpf_test_run+0x4f0/0xa90 [ 135.142450][ T8165] ? bpf_test_run+0x370/0xa90 [ 135.147174][ T8165] ? __pfx_bpf_test_run+0x10/0x10 [ 135.152257][ T8165] ? __pfx_eth_type_trans+0x10/0x10 [ 135.157499][ T8165] ? convert___skb_to_skb+0x41/0x620 [ 135.162820][ T8165] bpf_prog_test_run_skb+0xca2/0x1820 [ 135.168251][ T8165] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 135.174098][ T8165] ? __fget_files+0x2a/0x410 [ 135.178736][ T8165] ? fput+0x21b/0x290 [ 135.182541][ T3076] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 135.182740][ T8165] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 135.196292][ T8165] bpf_prog_test_run+0x2e4/0x360 [ 135.201275][ T8165] __sys_bpf+0x48d/0x810 [ 135.205564][ T8165] ? __pfx___sys_bpf+0x10/0x10 [ 135.210365][ T8165] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 135.216381][ T8165] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 135.224400][ T8165] ? do_syscall_64+0x100/0x230 [ 135.229204][ T8165] __x64_sys_bpf+0x7c/0x90 [ 135.233660][ T8165] do_syscall_64+0xf3/0x230 [ 135.238196][ T8165] ? clear_bhb_loop+0x35/0x90 [ 135.242913][ T8165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.248848][ T8165] RIP: 0033:0x7fe8ae185d29 [ 135.253294][ T8165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.272932][ T8165] RSP: 002b:00007fe8aef9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 135.281385][ T8165] RAX: ffffffffffffffda RBX: 00007fe8ae375fa0 RCX: 00007fe8ae185d29 [ 135.289391][ T8165] RDX: 0000000000000048 RSI: 0000000020000080 RDI: 000000000000000a [ 135.297395][ T8165] RBP: 00007fe8aef9e090 R08: 0000000000000000 R09: 0000000000000000 [ 135.305395][ T8165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.313396][ T8165] R13: 0000000000000000 R14: 00007fe8ae375fa0 R15: 00007ffd282eb4a8 [ 135.321415][ T8165] [ 135.633479][ T8195] netlink: 44 bytes leftover after parsing attributes in process `syz.2.599'. [ 135.903973][ T8101] chnl_net:caif_netlink_parms(): no params data found [ 136.129429][ T1094] hsr_slave_0: left promiscuous mode [ 136.162299][ T1094] hsr_slave_1: left promiscuous mode [ 136.174339][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.198775][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.226398][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.239461][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.262447][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'. [ 136.272176][ T8206] netlink: 28 bytes leftover after parsing attributes in process `syz.2.604'. [ 136.280716][ T1094] veth1_macvtap: left promiscuous mode [ 136.287912][ T1094] veth0_macvtap: left promiscuous mode [ 136.294982][ T1094] veth1_vlan: left promiscuous mode [ 136.301902][ T1094] veth0_vlan: left promiscuous mode [ 136.713703][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 136.760520][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 136.854664][ T5847] Bluetooth: hci3: command tx timeout [ 138.926340][ T5847] Bluetooth: hci3: command tx timeout [ 139.281688][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.296521][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.304760][ T8101] bridge_slave_0: entered allmulticast mode [ 139.333968][ T8101] bridge_slave_0: entered promiscuous mode [ 139.343681][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.350812][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.362309][ T8101] bridge_slave_1: entered allmulticast mode [ 139.369243][ T8101] bridge_slave_1: entered promiscuous mode [ 139.516836][ T8101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.541141][ T8101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.705533][ T8237] FAULT_INJECTION: forcing a failure. [ 139.705533][ T8237] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 139.722754][ T8237] CPU: 1 UID: 0 PID: 8237 Comm: syz.1.612 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 139.733400][ T8237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 139.743492][ T8237] Call Trace: [ 139.746784][ T8237] [ 139.749725][ T8237] dump_stack_lvl+0x241/0x360 [ 139.754426][ T8237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.759628][ T8237] ? __pfx__printk+0x10/0x10 [ 139.764224][ T8237] ? __pfx_lock_release+0x10/0x10 [ 139.769253][ T8237] should_fail_ex+0x3b0/0x4e0 [ 139.773944][ T8237] _copy_from_iter+0x1e9/0x1c20 [ 139.778795][ T8237] ? __virt_addr_valid+0x183/0x530 [ 139.783913][ T8237] ? __pfx__copy_from_iter+0x10/0x10 [ 139.789197][ T8237] ? __virt_addr_valid+0x183/0x530 [ 139.794305][ T8237] ? __virt_addr_valid+0x183/0x530 [ 139.799413][ T8237] ? __virt_addr_valid+0x45f/0x530 [ 139.804529][ T8237] ? __phys_addr_symbol+0x2f/0x70 [ 139.809553][ T8237] ? __check_object_size+0x47a/0x730 [ 139.814839][ T8237] hci_sock_sendmsg+0x4f1/0x11c0 [ 139.819782][ T8237] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.824722][ T8237] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 139.830096][ T8237] ? __pfx_aa_file_perm+0x10/0x10 [ 139.835118][ T8237] ? aa_sock_msg_perm+0x91/0x160 [ 139.840065][ T8237] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 139.845435][ T8237] __sock_sendmsg+0x221/0x270 [ 139.850117][ T8237] sock_write_iter+0x2d7/0x3f0 [ 139.854899][ T8237] ? __pfx_sock_write_iter+0x10/0x10 [ 139.860198][ T8237] ? bpf_lsm_file_permission+0x9/0x10 [ 139.865574][ T8237] ? security_file_permission+0x74/0x280 [ 139.871214][ T8237] vfs_write+0xaeb/0xd30 [ 139.875458][ T8237] ? __pfx_sock_write_iter+0x10/0x10 [ 139.880744][ T8237] ? __pfx_vfs_write+0x10/0x10 [ 139.885506][ T8237] ? __fget_files+0x2a/0x410 [ 139.890097][ T8237] ? __fget_files+0x2a/0x410 [ 139.894696][ T8237] ksys_write+0x18f/0x2b0 [ 139.899025][ T8237] ? __pfx_ksys_write+0x10/0x10 [ 139.903874][ T8237] ? do_syscall_64+0x100/0x230 [ 139.908640][ T8237] ? do_syscall_64+0xb6/0x230 [ 139.913316][ T8237] do_syscall_64+0xf3/0x230 [ 139.917827][ T8237] ? clear_bhb_loop+0x35/0x90 [ 139.922509][ T8237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.928403][ T8237] RIP: 0033:0x7fbe33f85d29 [ 139.932817][ T8237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.952428][ T8237] RSP: 002b:00007fbe34d8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 139.960846][ T8237] RAX: ffffffffffffffda RBX: 00007fbe34175fa0 RCX: 00007fbe33f85d29 [ 139.968830][ T8237] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000007 [ 139.976805][ T8237] RBP: 00007fbe34d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 139.984776][ T8237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.992749][ T8237] R13: 0000000000000000 R14: 00007fbe34175fa0 R15: 00007ffe3e4f91f8 [ 140.000752][ T8237] [ 140.027698][ T8241] sctp: [Deprecated]: syz.2.614 (pid 8241) Use of int in max_burst socket option. [ 140.027698][ T8241] Use struct sctp_assoc_value instead [ 140.052658][ T8243] FAULT_INJECTION: forcing a failure. [ 140.052658][ T8243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.096641][ T8243] CPU: 0 UID: 0 PID: 8243 Comm: syz.0.613 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 140.107294][ T8243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 140.117379][ T8243] Call Trace: [ 140.120683][ T8243] [ 140.123645][ T8243] dump_stack_lvl+0x241/0x360 [ 140.128363][ T8243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.133601][ T8243] ? __pfx__printk+0x10/0x10 [ 140.138258][ T8243] should_fail_ex+0x3b0/0x4e0 [ 140.142983][ T8243] _copy_from_user+0x2f/0xc0 [ 140.147617][ T8243] copy_from_sockptr+0x62/0xa0 [ 140.152415][ T8243] ip6_mroute_setsockopt+0x41f/0x12a0 [ 140.157833][ T8243] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 140.163698][ T8243] ? __might_fault+0xc6/0x120 [ 140.168411][ T8243] do_ipv6_setsockopt+0x490/0x3640 [ 140.173662][ T8243] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 140.179247][ T8243] ? aa_label_sk_perm+0x4f3/0x6c0 [ 140.184320][ T8243] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 140.189752][ T8243] ? __pfx___might_resched+0x10/0x10 [ 140.195079][ T8243] ? __lock_acquire+0x1397/0x2100 [ 140.200151][ T8243] ipv6_setsockopt+0x5d/0x170 [ 140.204913][ T8243] rawv6_setsockopt+0x327/0x740 [ 140.209800][ T8243] ? __pfx_aa_sk_perm+0x10/0x10 [ 140.214690][ T8243] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 140.220101][ T8243] ? __pfx_lock_acquire+0x10/0x10 [ 140.225167][ T8243] ? aa_sock_opt_perm+0x79/0x120 [ 140.230139][ T8243] ? sock_common_setsockopt+0x37/0xc0 [ 140.235562][ T8243] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 140.241500][ T8243] do_sock_setsockopt+0x3af/0x720 [ 140.246565][ T8243] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 140.252148][ T8243] ? __fget_files+0x395/0x410 [ 140.256872][ T8243] ? __fget_files+0x2a/0x410 [ 140.261513][ T8243] __x64_sys_setsockopt+0x1ee/0x280 [ 140.266749][ T8243] do_syscall_64+0xf3/0x230 [ 140.271294][ T8243] ? clear_bhb_loop+0x35/0x90 [ 140.276008][ T8243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.281935][ T8243] RIP: 0033:0x7fe8ae185d29 [ 140.286378][ T8243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.306012][ T8243] RSP: 002b:00007fe8aef9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.314453][ T8243] RAX: ffffffffffffffda RBX: 00007fe8ae375fa0 RCX: 00007fe8ae185d29 [ 140.322426][ T8243] RDX: 00000000000000d1 RSI: 0000000000000029 RDI: 0000000000000003 [ 140.330396][ T8243] RBP: 00007fe8aef9e090 R08: 0000000000000004 R09: 0000000000000000 [ 140.338364][ T8243] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.346329][ T8243] R13: 0000000000000000 R14: 00007fe8ae375fa0 R15: 00007ffd282eb4a8 [ 140.354312][ T8243] [ 140.569784][ T8101] team0: Port device team_slave_0 added [ 140.579947][ T8101] team0: Port device team_slave_1 added [ 140.716557][ T8272] netlink: 44 bytes leftover after parsing attributes in process `syz.0.618'. [ 140.780589][ T8101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.808044][ T8101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.853166][ T8101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.994746][ T8101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.017785][ T8101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.049467][ T5847] Bluetooth: hci3: command tx timeout [ 141.144478][ T8101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.301660][ T8101] hsr_slave_0: entered promiscuous mode [ 141.308866][ T8101] hsr_slave_1: entered promiscuous mode [ 141.338785][ T8101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.356073][ T8101] Cannot create hsr debugfs directory [ 142.407267][ T8346] xt_bpf: check failed: parse error [ 142.849316][ T8375] FAULT_INJECTION: forcing a failure. [ 142.849316][ T8375] name failslab, interval 1, probability 0, space 0, times 0 [ 142.890402][ T8375] CPU: 1 UID: 0 PID: 8375 Comm: syz.2.650 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 142.901056][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 142.911132][ T8375] Call Trace: [ 142.914413][ T8375] [ 142.917347][ T8375] dump_stack_lvl+0x241/0x360 [ 142.922021][ T8375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.927239][ T8375] ? __pfx__printk+0x10/0x10 [ 142.931874][ T8375] ? fs_reclaim_acquire+0x93/0x130 [ 142.937010][ T8375] ? __pfx___might_resched+0x10/0x10 [ 142.942307][ T8375] should_fail_ex+0x3b0/0x4e0 [ 142.947007][ T8375] should_failslab+0xac/0x100 [ 142.951694][ T8375] __kmalloc_noprof+0xdd/0x4c0 [ 142.956487][ T8375] ? kstrtouint_from_user+0x128/0x190 [ 142.961874][ T8375] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 142.967601][ T8375] tomoyo_realpath_from_path+0xcf/0x5e0 [ 142.973518][ T8375] tomoyo_path_number_perm+0x236/0x860 [ 142.978983][ T8375] ? __lock_acquire+0x1397/0x2100 [ 142.984010][ T8375] ? tomoyo_path_number_perm+0x206/0x860 [ 142.989650][ T8375] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 142.995666][ T8375] ? __fget_files+0x2a/0x410 [ 143.000265][ T8375] ? __fget_files+0x2a/0x410 [ 143.004879][ T8375] security_file_ioctl+0xc6/0x2a0 [ 143.009934][ T8375] __se_sys_ioctl+0x46/0x170 [ 143.014533][ T8375] do_syscall_64+0xf3/0x230 [ 143.019038][ T8375] ? clear_bhb_loop+0x35/0x90 [ 143.023721][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.029655][ T8375] RIP: 0033:0x7f463bb85d29 [ 143.034074][ T8375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.053686][ T8375] RSP: 002b:00007f463ca33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 143.062110][ T8375] RAX: ffffffffffffffda RBX: 00007f463bd75fa0 RCX: 00007f463bb85d29 [ 143.070110][ T8375] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 143.078082][ T8375] RBP: 00007f463ca33090 R08: 0000000000000000 R09: 0000000000000000 [ 143.086058][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.094031][ T8375] R13: 0000000000000000 R14: 00007f463bd75fa0 R15: 00007ffe2bc73358 [ 143.102021][ T8375] [ 143.137762][ T8375] ERROR: Out of memory at tomoyo_realpath_from_path. [ 143.469071][ T8101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 143.540496][ T8101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 143.601278][ T8101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 143.628991][ T8101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 143.783295][ T8403] netlink: 88 bytes leftover after parsing attributes in process `syz.0.655'. [ 143.828093][ T8403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.655'. [ 143.855835][ T8403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.655'. [ 143.870966][ T8403] netlink: 80 bytes leftover after parsing attributes in process `syz.0.655'. [ 144.145651][ T8101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.296808][ T8101] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.363034][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.370180][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.430171][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.437389][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.497064][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.663'. [ 144.610620][ T8101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.886311][ T8449] syzkaller0: entered allmulticast mode [ 144.930784][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.668'. [ 145.059053][ T8101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.079741][ T8459] netlink: 168 bytes leftover after parsing attributes in process `syz.1.669'. [ 145.524429][ T8483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.676'. [ 145.731508][ T8490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.678'. [ 145.785645][ T8101] veth0_vlan: entered promiscuous mode [ 145.827447][ T8101] veth1_vlan: entered promiscuous mode [ 146.027219][ T8101] veth0_macvtap: entered promiscuous mode [ 146.066419][ T8101] veth1_macvtap: entered promiscuous mode [ 146.207019][ T8101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.228150][ T8101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.259477][ T8101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.310865][ T8101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.362243][ T8101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.374080][ T8101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.393427][ T8101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.414666][ T8101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.442469][ T8101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.485458][ T8101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.515263][ T8101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.553239][ T8101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.589841][ T8101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.632132][ T8101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.640889][ T8101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.691896][ T8101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.882587][ T3450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.919276][ T3450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.972355][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.696'. [ 146.985493][ T7561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.009338][ T7561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.158919][ T8522] ------------[ cut here ]------------ [ 147.164674][ T8522] WARNING: CPU: 1 PID: 8522 at kernel/workqueue.c:2257 __queue_work+0xcd3/0xf50 [ 147.173745][ T8522] Modules linked in: [ 147.177678][ T8522] CPU: 1 UID: 0 PID: 8522 Comm: syz.1.688 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 147.188306][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 147.198376][ T8522] RIP: 0010:__queue_work+0xcd3/0xf50 [ 147.203676][ T8522] Code: ff e8 71 e8 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 63 e8 37 00 eb 13 e8 5c e8 37 00 eb 0c e8 55 e8 37 00 eb 05 e8 4e e8 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 147.223302][ T8522] RSP: 0018:ffffc9000485f888 EFLAGS: 00010087 [ 147.229390][ T8522] RAX: ffffffff816775e4 RBX: ffff88802abf1e00 RCX: 0000000000080000 [ 147.237399][ T8522] RDX: ffffc90005282000 RSI: 00000000000002f5 RDI: 00000000000002f6 [ 147.245388][ T8522] RBP: 0000000000000000 R08: ffffffff81676a44 R09: 0000000000000000 [ 147.253368][ T8522] R10: ffffc9000485f960 R11: fffff5200090bf2d R12: ffff88805a00d800 [ 147.261346][ T8522] R13: ffff88805a00d9c0 R14: dffffc0000000000 R15: 0000000000000008 [ 147.269423][ T8522] FS: 00007fbe34d8a6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 147.278357][ T8522] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 147.284939][ T8522] CR2: 000000110c352926 CR3: 0000000028684000 CR4: 00000000003526f0 [ 147.292915][ T8522] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.300890][ T8522] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.308869][ T8522] Call Trace: [ 147.312151][ T8522] [ 147.315088][ T8522] ? __warn+0x165/0x4d0 [ 147.319254][ T8522] ? __queue_work+0xcd3/0xf50 [ 147.324024][ T8522] ? report_bug+0x2b3/0x500 [ 147.328537][ T8522] ? __queue_work+0xcd3/0xf50 [ 147.333315][ T8522] ? handle_bug+0x60/0x90 [ 147.337650][ T8522] ? exc_invalid_op+0x1a/0x50 [ 147.342420][ T8522] ? asm_exc_invalid_op+0x1a/0x20 [ 147.347467][ T8522] ? __queue_work+0x124/0xf50 [ 147.352156][ T8522] ? __queue_work+0xcc4/0xf50 [ 147.356834][ T8522] ? __queue_work+0xcd3/0xf50 [ 147.361512][ T8522] ? __queue_work+0xcc4/0xf50 [ 147.366193][ T8522] ? __queue_delayed_work+0x17e/0x250 [ 147.371571][ T8522] queue_delayed_work_on+0x1ca/0x390 [ 147.376862][ T8522] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 147.382677][ T8522] ? do_raw_spin_lock+0x14f/0x370 [ 147.387727][ T8522] ? __pfx_lock_release+0x10/0x10 [ 147.392768][ T8522] ? hci_conn_drop+0x152/0x280 [ 147.397532][ T8522] sco_conn_put+0x145/0x210 [ 147.402036][ T8522] sco_chan_del+0xa3/0x180 [ 147.406466][ T8522] sco_sock_release+0xb3/0x320 [ 147.411240][ T8522] sock_close+0xbc/0x240 [ 147.415487][ T8522] ? __pfx_sock_close+0x10/0x10 [ 147.420348][ T8522] __fput+0x23c/0xa50 [ 147.424605][ T8522] task_work_run+0x24f/0x310 [ 147.429303][ T8522] ? __pfx_task_work_run+0x10/0x10 [ 147.434440][ T8522] get_signal+0x15f7/0x1750 [ 147.439054][ T8522] ? __pfx_task_work_add+0x10/0x10 [ 147.444175][ T8522] ? sco_sock_connect+0x476/0x9b0 [ 147.449208][ T8522] ? __pfx_get_signal+0x10/0x10 [ 147.454067][ T8522] arch_do_signal_or_restart+0x96/0x860 [ 147.459651][ T8522] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 147.465846][ T8522] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.471858][ T8522] ? syscall_exit_to_user_mode+0xa3/0x340 [ 147.477585][ T8522] syscall_exit_to_user_mode+0xce/0x340 [ 147.483135][ T8522] do_syscall_64+0x100/0x230 [ 147.487747][ T8522] ? clear_bhb_loop+0x35/0x90 [ 147.492430][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.498359][ T8522] RIP: 0033:0x7fbe33f85d29 [ 147.502777][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.522474][ T8522] RSP: 002b:00007fbe34d8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 147.530906][ T8522] RAX: fffffffffffffffc RBX: 00007fbe34175fa0 RCX: 00007fbe33f85d29 [ 147.538894][ T8522] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000004 [ 147.546879][ T8522] RBP: 00007fbe34001a20 R08: 0000000000000000 R09: 0000000000000000 [ 147.554852][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.562830][ T8522] R13: 0000000000000000 R14: 00007fbe34175fa0 R15: 00007ffe3e4f91f8 [ 147.570814][ T8522] [ 147.573844][ T8522] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.581118][ T8522] CPU: 1 UID: 0 PID: 8522 Comm: syz.1.688 Not tainted 6.13.0-rc2-syzkaller-00457-gd3c9510dc900 #0 [ 147.591727][ T8522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 147.601793][ T8522] Call Trace: [ 147.605085][ T8522] [ 147.608018][ T8522] dump_stack_lvl+0x241/0x360 [ 147.612717][ T8522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.617938][ T8522] ? __pfx__printk+0x10/0x10 [ 147.622531][ T8522] ? _printk+0xd5/0x120 [ 147.626725][ T8522] ? __init_begin+0x41000/0x41000 [ 147.631779][ T8522] ? vscnprintf+0x5d/0x90 [ 147.636119][ T8522] panic+0x349/0x880 [ 147.640019][ T8522] ? __warn+0x174/0x4d0 [ 147.644191][ T8522] ? __pfx_panic+0x10/0x10 [ 147.648669][ T8522] __warn+0x344/0x4d0 [ 147.652690][ T8522] ? __queue_work+0xcd3/0xf50 [ 147.657383][ T8522] report_bug+0x2b3/0x500 [ 147.661729][ T8522] ? __queue_work+0xcd3/0xf50 [ 147.666417][ T8522] handle_bug+0x60/0x90 [ 147.670576][ T8522] exc_invalid_op+0x1a/0x50 [ 147.675169][ T8522] asm_exc_invalid_op+0x1a/0x20 [ 147.680027][ T8522] RIP: 0010:__queue_work+0xcd3/0xf50 [ 147.685319][ T8522] Code: ff e8 71 e8 37 00 90 0f 0b 90 e9 b2 fe ff ff e8 63 e8 37 00 eb 13 e8 5c e8 37 00 eb 0c e8 55 e8 37 00 eb 05 e8 4e e8 37 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 147.704962][ T8522] RSP: 0018:ffffc9000485f888 EFLAGS: 00010087 [ 147.711036][ T8522] RAX: ffffffff816775e4 RBX: ffff88802abf1e00 RCX: 0000000000080000 [ 147.719005][ T8522] RDX: ffffc90005282000 RSI: 00000000000002f5 RDI: 00000000000002f6 [ 147.726986][ T8522] RBP: 0000000000000000 R08: ffffffff81676a44 R09: 0000000000000000 [ 147.734957][ T8522] R10: ffffc9000485f960 R11: fffff5200090bf2d R12: ffff88805a00d800 [ 147.742956][ T8522] R13: ffff88805a00d9c0 R14: dffffc0000000000 R15: 0000000000000008 [ 147.750936][ T8522] ? __queue_work+0x124/0xf50 [ 147.755615][ T8522] ? __queue_work+0xcc4/0xf50 [ 147.760299][ T8522] ? __queue_work+0xcc4/0xf50 [ 147.764978][ T8522] ? __queue_delayed_work+0x17e/0x250 [ 147.770352][ T8522] queue_delayed_work_on+0x1ca/0x390 [ 147.775670][ T8522] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 147.781562][ T8522] ? do_raw_spin_lock+0x14f/0x370 [ 147.786583][ T8522] ? __pfx_lock_release+0x10/0x10 [ 147.791703][ T8522] ? hci_conn_drop+0x152/0x280 [ 147.796466][ T8522] sco_conn_put+0x145/0x210 [ 147.800969][ T8522] sco_chan_del+0xa3/0x180 [ 147.805399][ T8522] sco_sock_release+0xb3/0x320 [ 147.810192][ T8522] sock_close+0xbc/0x240 [ 147.814443][ T8522] ? __pfx_sock_close+0x10/0x10 [ 147.819300][ T8522] __fput+0x23c/0xa50 [ 147.823294][ T8522] task_work_run+0x24f/0x310 [ 147.827895][ T8522] ? __pfx_task_work_run+0x10/0x10 [ 147.833015][ T8522] get_signal+0x15f7/0x1750 [ 147.837528][ T8522] ? __pfx_task_work_add+0x10/0x10 [ 147.842650][ T8522] ? sco_sock_connect+0x476/0x9b0 [ 147.847678][ T8522] ? __pfx_get_signal+0x10/0x10 [ 147.852539][ T8522] arch_do_signal_or_restart+0x96/0x860 [ 147.858097][ T8522] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 147.864258][ T8522] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.870249][ T8522] ? syscall_exit_to_user_mode+0xa3/0x340 [ 147.875971][ T8522] syscall_exit_to_user_mode+0xce/0x340 [ 147.881517][ T8522] do_syscall_64+0x100/0x230 [ 147.886118][ T8522] ? clear_bhb_loop+0x35/0x90 [ 147.890849][ T8522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.896740][ T8522] RIP: 0033:0x7fbe33f85d29 [ 147.901159][ T8522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.920767][ T8522] RSP: 002b:00007fbe34d8a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 147.929182][ T8522] RAX: fffffffffffffffc RBX: 00007fbe34175fa0 RCX: 00007fbe33f85d29 [ 147.937151][ T8522] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000004 [ 147.945129][ T8522] RBP: 00007fbe34001a20 R08: 0000000000000000 R09: 0000000000000000 [ 147.953102][ T8522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.961071][ T8522] R13: 0000000000000000 R14: 00007fbe34175fa0 R15: 00007ffe3e4f91f8 [ 147.969053][ T8522] [ 147.972216][ T8522] Kernel Offset: disabled [ 147.976584][ T8522] Rebooting in 86400 seconds..