last executing test programs: 1.159334931s ago: executing program 0 (id=1697): r0 = socket(0xa, 0x40000000002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r2}, 0x9) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x3c0) 1.12850632s ago: executing program 1 (id=1699): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x9}}}}]}, 0x58}}, 0x0) 976.801354ms ago: executing program 1 (id=1703): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, r2, 0x5, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 866.75164ms ago: executing program 2 (id=1705): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 866.263859ms ago: executing program 3 (id=1706): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x38, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x0) 780.769284ms ago: executing program 2 (id=1707): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0xb, 0x1038, 0x0, @void, @void, @void, @value}, 0x20) 755.112535ms ago: executing program 0 (id=1708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="6795", 0x2}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000003c0)='O', 0x1}, {&(0x7f00000000c0)="db", 0x1}, {&(0x7f0000000240)='D', 0x1}, {&(0x7f00000004c0)="06", 0x1}, {&(0x7f0000000680)='K', 0x1}, {&(0x7f0000000740)="cb", 0x1}, {&(0x7f0000000300)="ec", 0x1}, {&(0x7f0000000840)="16", 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}], 0x3, 0xf000080) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 740.69701ms ago: executing program 1 (id=1710): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r6=>0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r4, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) 659.049634ms ago: executing program 3 (id=1711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a00)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xfff, 0x85, 0x10000000, 0x101, 0x80000001}, 0x2, 0xcf}, [{0x100, 0x401, 0x3, 0x3ff, 0x0, 0x9}, {0x0, 0x5, 0x7, 0x3, 0xffff3bf3, 0x6}, {0xfffffff9, 0x0, 0xc, 0x95, 0x1, 0x53}, {0x7fff, 0x4, 0x2, 0x43d6, 0x5, 0x4}, {0xfffffffb, 0xaf4, 0xff, 0x0, 0x4, 0xfffffff9}, {0x7, 0x8, 0x5, 0x7, 0xfffeffff, 0xcb66}, {0x5, 0x7, 0x6, 0x2, 0xb, 0x17e}, {0x6, 0xe, 0x0, 0x5, 0x1, 0x2}, {0x2, 0x4, 0x6, 0xff, 0xe7}, {0x8, 0x3, 0x630, 0x8000, 0x4, 0xa6a5}, {0x5, 0x9, 0x1ff, 0x10000, 0xfffffffd, 0x94000000}, {0x7, 0x3, 0x2, 0xf28, 0x7, 0x8}, {0x7, 0xe6, 0x2, 0x0, 0x8002, 0x4}, {0x6, 0x2, 0xf, 0x6, 0x0, 0xe51f}, {0xffff8000, 0x10, 0x5, 0x0, 0x6, 0x3}, {0x9, 0xc, 0x10, 0x0, 0x6, 0x1}, {0x0, 0x140000, 0x4, 0x200, 0x1, 0x4}, {0x9, 0x10001, 0x0, 0x4, 0x1}, {0x80000000, 0x2, 0x3, 0x1, 0x772, 0x5}, {0x0, 0x9, 0x1, 0x80, 0x0, 0x8}, {0x5, 0x72b, 0x4, 0x3e1, 0x1000, 0x68f087b1}, {0x7, 0xc, 0xa0, 0x3, 0x4, 0x2}, {0x7, 0x8000b2, 0xe, 0xd91, 0x7, 0x8}, {0x24, 0xfffffffc, 0x9, 0x100, 0x1000, 0x8}, {0x40, 0x3, 0x80000000, 0xb, 0x401, 0x8001}, {0x7, 0x5, 0x9, 0xadb, 0xf, 0x3}, {0x0, 0xfffffffe, 0x7, 0x3, 0x4, 0x7}, {0x5, 0xf186, 0x1, 0x2, 0x7, 0x2}, {0x25ea92ec, 0x2, 0x5, 0x5, 0x10, 0x6}, {0x3, 0x2, 0x4, 0xde08, 0x4, 0x4}, {0x8, 0x6, 0x4, 0x3, 0x96c4}, {0x10, 0x7f, 0x6fe4, 0x1, 0x8, 0xffff}, {0x9, 0x10001, 0x800, 0x0, 0x10001, 0x3}, {0x2, 0x80, 0x4, 0x8, 0x4, 0x10001}, {0x8, 0x8000, 0xffffff7f, 0x7fffffff, 0x400, 0xb88}, {0xff2, 0x2, 0x1, 0x80000000, 0x48f4, 0x5}, {0x9, 0x8, 0x5, 0x1, 0x8000, 0x6}, {0x200, 0x8001, 0x0, 0xfffeffff, 0x7fff, 0xf}, {0x11, 0xfffffff4, 0xa48, 0x20, 0xd, 0x4}, {0x0, 0x0, 0x4, 0x7, 0xa32, 0x7fffffff}, {0x5, 0x0, 0x5, 0x81, 0x36b31344, 0x7}, {0x34, 0xc196, 0x7, 0x9, 0x6, 0xfffffffe}, {0x2, 0x0, 0xfffffe01, 0xffff0000, 0xf, 0xadc1}, {0x7, 0x1, 0x5, 0xde59, 0x6, 0xaa7c}, {0x80000001, 0x9, 0x7, 0x3, 0x9, 0x9}, {0x200, 0x4, 0x7fff, 0xff800000, 0x6, 0x800}, {0x9, 0x8, 0xfc4, 0x3, 0x7fffffff, 0x32}, {0x2, 0x6, 0x4ce0, 0x10, 0x5, 0x3}, {0x7, 0x6, 0x1, 0x4, 0x6}, {0xffffffff, 0x3, 0xfffff800, 0x10, 0x7fffffff, 0xffffffff}, {0x7, 0x6, 0xfffffffa, 0x1, 0x80000001, 0x27b7}, {0xfffffff9, 0x8, 0x9, 0x8, 0x0, 0xfffffffe}, {0x5, 0x1ff, 0x7, 0xe, 0x8, 0x6}, {0x2, 0x2, 0xea, 0x1, 0x4, 0x8}, {0x2, 0x99, 0x1, 0x3, 0xc, 0xec}, {0x2, 0x7f, 0x4, 0x6, 0xec36, 0x9}, {0x8, 0x3, 0x24000000, 0x5, 0x4, 0xff}, {0x7ff, 0xcf1, 0x7f, 0xd3, 0x3ff}, {0xfffffffb, 0x8, 0x9, 0x2, 0xc, 0x5}, {0x9, 0x8, 0x8001, 0x9, 0x6, 0x6}, {0x1ff, 0x7, 0xac, 0x254, 0x7, 0x80000000}, {0x0, 0x7, 0x0, 0x1, 0x6, 0x5}, {0x7, 0x1, 0x400, 0x7}, {0x1b7, 0x4, 0x6, 0xe6, 0x401, 0x6}, {0x5, 0xfffffff7, 0x6, 0xca1, 0x5, 0xfffffffc}, {0x7, 0x5, 0x4, 0x9, 0x7, 0x10}, {0xb, 0x3, 0x5, 0x7, 0x0, 0x2}, {0x7, 0x10, 0x4, 0x4, 0x2, 0x3}, {0xf, 0x9, 0x3, 0xc, 0xa, 0x8}, {0xfff, 0x26, 0x1ff, 0x8, 0x9, 0x2}, {0x7, 0x0, 0xa013c2a, 0xb, 0x3, 0x80}, {0x2, 0x8, 0x81, 0xa4, 0xc8, 0x80e7}, {0x2, 0xfffffb5e, 0x80, 0x8001, 0xc}, {0xffffffff, 0x3, 0x9, 0x0, 0x3, 0x7be}, {0x8001, 0xfffffff9, 0x2, 0xfffffff5, 0x1, 0xffff}, {0x88, 0xb, 0x7, 0x6, 0x1, 0xbdda}, {0x4, 0x7, 0x4, 0x9, 0x8, 0x86}, {0x7f, 0xffffffad, 0x7, 0x7, 0x601, 0x2}, {0x69c6, 0x8, 0x2, 0x1ff, 0xd, 0x1ff}, {0xff, 0x2, 0x9, 0x81, 0x1ff, 0x1ff}, {0x8000, 0x4, 0xfa95, 0x4, 0x3}, {0x6, 0xe19, 0x47d1a8c0, 0x638e, 0xffc00000, 0x7f}, {0x800, 0x92ad, 0x6, 0x0, 0x1, 0x8}, {0x7, 0xfffeffff, 0x0, 0x1, 0x6553}, {0x606, 0x100, 0x7, 0x7fffffff, 0xc5d, 0x9}, {0x2, 0xff, 0x2, 0xfffffffd, 0x3, 0x7}, {0x9, 0x642, 0xf, 0x81, 0x2, 0x7fff}, {0x10001, 0x79, 0x0, 0x7, 0xecf, 0x10}, {0x1, 0x8, 0xb, 0x30b96ad4, 0x2, 0x55f}, {0x0, 0x3, 0x7, 0x3, 0x6, 0xfffffffc}, {0xb, 0x1, 0x0, 0x5, 0x2, 0x5}, {0x3a6, 0x4, 0x3, 0x1, 0x4, 0x40}, {0x6, 0x4, 0x401, 0x0, 0x4, 0x5}, {0x7, 0x9ff, 0x9, 0x85, 0xec, 0x5}, {0x2, 0x6, 0x0, 0x1000, 0x1, 0x1}, {0x7, 0x7, 0x101, 0x800, 0x8, 0x5150792f}, {0x38, 0x1, 0x29, 0x81, 0x364c, 0x7}, {0x0, 0x69, 0x8001, 0x2, 0x2800, 0x10}, {0x1, 0x4, 0x7f, 0x9}, {0x9314, 0x6dc, 0x80000000, 0x10000, 0x1, 0x6}, {0x3, 0x0, 0x1, 0x0, 0xe32, 0x1}, {0x275, 0x7ff, 0x714, 0xff, 0x800, 0x3f}, {0x6, 0x0, 0x0, 0x63, 0xd7, 0x7}, {0xffffff81, 0x2, 0x1ff, 0xd, 0x8001, 0x1}, {0x9, 0x6, 0x8, 0x6, 0x8, 0x200}, {0x2, 0x3, 0x3, 0x7, 0xfff, 0x8ec}, {0x8f, 0x400, 0x2, 0x1410, 0x2e4f2a60, 0x101}, {0x400, 0x5, 0x3, 0x59c, 0x3, 0x1}, {0x8, 0x6, 0x0, 0x0, 0x101, 0x81}, {0x4, 0x5, 0x4, 0xff000000, 0x2, 0x9}, {0x0, 0x10000, 0x8, 0x400, 0x3}, {0xe, 0x7, 0x968, 0x9, 0xfffffff8, 0x8}, {0xfff, 0x100, 0xffffffff, 0x0, 0x3, 0x7fffffff}, {0x38000, 0xfffffffc, 0xa55, 0x4, 0x1, 0x3}, {0x8, 0x1, 0x4, 0xb, 0x7fff, 0x3}, {0x7, 0x6, 0x8, 0xb, 0x2, 0x7}, {0x7, 0x3, 0xfffffff4, 0xc8c2, 0x9, 0x9}, {0xfffffffe, 0x0, 0x400, 0x9, 0x8, 0x3}, {0x65da, 0x7, 0xc, 0x10, 0xaf5, 0x2}, {0x2, 0x101, 0x40000, 0x0, 0x1, 0x5ee}, {0x0, 0x80, 0x7d, 0x6, 0x5, 0x7}, {0x1, 0x6, 0x6, 0x1, 0x0, 0x7}, {0x0, 0xffffff80, 0x3, 0x10000}, {0x1000, 0x57a, 0x1, 0x150, 0x48, 0xfffffff7}, {0xff, 0x5, 0xfffff062, 0x4, 0x6, 0x839}, {0x3, 0x4, 0x4, 0x800, 0x3, 0x5}, {0x6, 0x20000, 0x1, 0x4, 0x7d37e82b, 0x1}, {0x5, 0x2, 0xdb9, 0x5, 0x7f, 0xf}], [{0x5, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {0x5}, {0x5}, {0x0, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {}, {0x3, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {}, {0x1, 0x1}, {0x4}, {0x2}, {0x7}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x5}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x2}, {0x1}, {0x2701bacba0e67511, 0xb2e20321f287c22d}, {0x2, 0x89d99ddbf36fb21a}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x1}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 614.4347ms ago: executing program 2 (id=1712): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000004c0)='kmem_cache_free\x00', r3}, 0x10) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 614.216464ms ago: executing program 4 (id=1713): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) 544.980952ms ago: executing program 1 (id=1714): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000027c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7}}}}}}}, 0x0) 516.630052ms ago: executing program 2 (id=1715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x78, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88fb}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x200}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) 516.124994ms ago: executing program 3 (id=1716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) close(r3) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x0, @remote, 'veth0_to_bridge\x00'}}, 0x1e) socket$inet6_tcp(0xa, 0x1, 0x0) 515.574975ms ago: executing program 0 (id=1717): r0 = socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10) listen(r0, 0x0) shutdown(r0, 0x0) 427.556036ms ago: executing program 4 (id=1718): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000010000c50000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='rxrpc_peer\x00', r4}, 0x10) r5 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 402.099519ms ago: executing program 3 (id=1719): r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x0) 354.317969ms ago: executing program 0 (id=1720): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000a00)=[@in={0x2, 0x0, @loopback}], 0x10) 320.868865ms ago: executing program 2 (id=1721): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', <r5=>0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001c00000014000180080003000100000008000100", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) 320.334629ms ago: executing program 4 (id=1722): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e00)=@newtaction={0x18, 0x30, 0x1, 0x3, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 319.817615ms ago: executing program 1 (id=1723): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 254.837302ms ago: executing program 3 (id=1724): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) close(r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r2}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) close(r0) 151.611127ms ago: executing program 4 (id=1725): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', <r1=>0x0}) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f0000001c40)=ANY=[@ANYBLOB="01000000370300"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 151.254106ms ago: executing program 0 (id=1726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 150.885124ms ago: executing program 2 (id=1727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x20000080) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x700, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}}, 0x0) 137.643427ms ago: executing program 3 (id=1728): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303, 0x39}, "2f9ba2ce41a730cb", "37a0906df45a6f4f40b151634357ea00", '\x00', "de3f106b925ded4d"}, 0x28) 75.669995ms ago: executing program 1 (id=1729): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.67576ms ago: executing program 4 (id=1730): syz_emit_ethernet(0x66, &(0x7f0000004a00)={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x2e, 0x58, 0x67, 0x0, 0x29, 0x2f, 0x0, @multicast1, @private=0xa010101}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x2, {{0x2, 0x1, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x1, {{0xb, 0x2, 0x6, 0x0, 0x0, 0x2, 0x2, 0x80}, 0x2, {0xffff, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) 3.325233ms ago: executing program 0 (id=1731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 0s ago: executing program 4 (id=1732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): ve_1): Enslaving as an active interface with an up link [ 60.737253][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.746905][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.754106][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.762092][ T5828] bridge_slave_1: entered allmulticast mode [ 60.769459][ T5828] bridge_slave_1: entered promiscuous mode [ 60.822766][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.842731][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.857246][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.879345][ T5831] team0: Port device team_slave_0 added [ 60.887274][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.906732][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.913700][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.939744][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.962342][ T5830] team0: Port device team_slave_0 added [ 60.979946][ T5831] team0: Port device team_slave_1 added [ 61.003601][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.010643][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.038145][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.063509][ T5830] team0: Port device team_slave_1 added [ 61.078271][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.085259][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.111597][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.125485][ T5828] team0: Port device team_slave_0 added [ 61.138495][ T5828] team0: Port device team_slave_1 added [ 61.156929][ T5833] team0: Port device team_slave_0 added [ 61.178690][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.188830][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.215323][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.248382][ T5833] team0: Port device team_slave_1 added [ 61.254658][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.262250][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.288314][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.307049][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.314025][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.340694][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.353549][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.360835][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.386968][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.401976][ T5832] hsr_slave_0: entered promiscuous mode [ 61.408464][ T5832] hsr_slave_1: entered promiscuous mode [ 61.429085][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.436169][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.463123][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.491361][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.498407][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.524664][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.536366][ T5848] Bluetooth: hci3: command tx timeout [ 61.542293][ T54] Bluetooth: hci0: command tx timeout [ 61.542867][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.554785][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.580898][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.608651][ T54] Bluetooth: hci1: command tx timeout [ 61.610434][ T5848] Bluetooth: hci2: command tx timeout [ 61.614843][ T5834] Bluetooth: hci4: command tx timeout [ 61.658041][ T5831] hsr_slave_0: entered promiscuous mode [ 61.664432][ T5831] hsr_slave_1: entered promiscuous mode [ 61.670637][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.678995][ T5831] Cannot create hsr debugfs directory [ 61.687705][ T5828] hsr_slave_0: entered promiscuous mode [ 61.693952][ T5828] hsr_slave_1: entered promiscuous mode [ 61.701097][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.708746][ T5828] Cannot create hsr debugfs directory [ 61.738475][ T5830] hsr_slave_0: entered promiscuous mode [ 61.744681][ T5830] hsr_slave_1: entered promiscuous mode [ 61.751081][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.758787][ T5830] Cannot create hsr debugfs directory [ 61.846363][ T5833] hsr_slave_0: entered promiscuous mode [ 61.852710][ T5833] hsr_slave_1: entered promiscuous mode [ 61.859494][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.867225][ T5833] Cannot create hsr debugfs directory [ 62.146680][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.161847][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.171980][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.194494][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.239927][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.250727][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.270444][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.281293][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.324465][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.337051][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.348308][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.382670][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.453494][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.496255][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.511795][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.537035][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.547129][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.562793][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.570135][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.595242][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.603662][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.632788][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.653604][ T204] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.660772][ T204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.680257][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.700853][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.713982][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.734191][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.760250][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.767405][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.801254][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.808413][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.861542][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.928958][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.947679][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.954783][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.978116][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.985252][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.011006][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.042199][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.093344][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.114755][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.121937][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.153484][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.160673][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.201003][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.338452][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.387866][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.427277][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.473420][ T2862] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.480592][ T2862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.561647][ T2862] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.568842][ T2862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.607590][ T54] Bluetooth: hci3: command tx timeout [ 63.613236][ T5834] Bluetooth: hci0: command tx timeout [ 63.615642][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.639170][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.657198][ T5828] veth0_vlan: entered promiscuous mode [ 63.686273][ T5834] Bluetooth: hci4: command tx timeout [ 63.691728][ T5834] Bluetooth: hci2: command tx timeout [ 63.697315][ T54] Bluetooth: hci1: command tx timeout [ 63.714957][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.734886][ T5828] veth1_vlan: entered promiscuous mode [ 63.770531][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.779749][ T5832] veth0_vlan: entered promiscuous mode [ 63.791888][ T5832] veth1_vlan: entered promiscuous mode [ 63.825118][ T5828] veth0_macvtap: entered promiscuous mode [ 63.867717][ T5831] veth0_vlan: entered promiscuous mode [ 63.882326][ T5828] veth1_macvtap: entered promiscuous mode [ 63.901740][ T5831] veth1_vlan: entered promiscuous mode [ 63.964906][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.981318][ T5830] veth0_vlan: entered promiscuous mode [ 63.994595][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.010676][ T5832] veth0_macvtap: entered promiscuous mode [ 64.020440][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.032005][ T5832] veth1_macvtap: entered promiscuous mode [ 64.049225][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.060214][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.069444][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.078462][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.104969][ T5831] veth0_macvtap: entered promiscuous mode [ 64.114583][ T5830] veth1_vlan: entered promiscuous mode [ 64.127029][ T5831] veth1_macvtap: entered promiscuous mode [ 64.173084][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.191862][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.206484][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.233721][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.247280][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.258966][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.272816][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.281898][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.290916][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.300019][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.319948][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.331450][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.343195][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.353714][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.365209][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.390865][ T5833] veth0_vlan: entered promiscuous mode [ 64.407519][ T5830] veth0_macvtap: entered promiscuous mode [ 64.424166][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.434953][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.445662][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.456569][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.467679][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.480904][ T5830] veth1_macvtap: entered promiscuous mode [ 64.492396][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.502386][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.517640][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.527157][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.536280][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.545145][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.558943][ T5833] veth1_vlan: entered promiscuous mode [ 64.573651][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.585232][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.595630][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.606666][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.617098][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.628499][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.639347][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.666308][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.682093][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.692298][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.705794][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.715612][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.727116][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.739131][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.782206][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.793778][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.803425][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.812830][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.826977][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.837349][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.846217][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.855157][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.890634][ T2862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.913524][ T2862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.950739][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.960692][ T5833] veth0_macvtap: entered promiscuous mode [ 64.975263][ T5833] veth1_macvtap: entered promiscuous mode [ 65.045042][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.057679][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.068280][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.079682][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.089911][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.100593][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.111304][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.122080][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.134109][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.203725][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.222807][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.232633][ T5914] netlink: 'syz.4.5': attribute type 13 has an invalid length. [ 65.252700][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.260980][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.284761][ T5914] veth0_macvtap: left promiscuous mode [ 65.314999][ T5914] macvtap0: entered allmulticast mode [ 65.342694][ T5914] macvtap0: refused to change device tx_queue_len [ 65.389261][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.401428][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.425731][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.438987][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.449179][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.459769][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.470417][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.484275][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.495442][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.511881][ T5919] IPv6: sit1: Disabled Multicast RS [ 65.548644][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.568379][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.588625][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.606151][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.625243][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.656903][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.665094][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.667189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.696032][ T5848] Bluetooth: hci0: command tx timeout [ 65.696582][ T5834] Bluetooth: hci3: command tx timeout [ 65.738524][ T5926] netlink: 'syz.4.9': attribute type 1 has an invalid length. [ 65.766075][ T5834] Bluetooth: hci2: command tx timeout [ 65.766635][ T5848] Bluetooth: hci1: command tx timeout [ 65.772121][ T5834] Bluetooth: hci4: command tx timeout [ 65.790171][ T5928] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9'. [ 65.969742][ T5928] batadv1: entered promiscuous mode [ 65.975013][ T5928] batadv1: entered allmulticast mode [ 66.056980][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.064821][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.171997][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.187663][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.356258][ T5954] netlink: 220 bytes leftover after parsing attributes in process `syz.4.13'. [ 66.365374][ T5955] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 66.385562][ T5955] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14'. [ 66.564303][ T5961] netlink: 'syz.3.4': attribute type 5 has an invalid length. [ 66.724213][ T5975] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.931019][ T5987] netlink: 164 bytes leftover after parsing attributes in process `syz.1.21'. [ 67.023495][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.038833][ T5991] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.053316][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.064094][ T5974] bond0 (unregistering): Released all slaves [ 67.080991][ T5981] warning: `syz.1.21' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.293745][ T5995] netlink: 220 bytes leftover after parsing attributes in process `syz.4.27'. [ 67.398329][ T5998] openvswitch: netlink: Key type 34 is out of range max 32 [ 67.447384][ T6003] smc: net device wg0 applied user defined pnetid SYZ0 [ 67.476114][ T6003] netlink: 'syz.2.29': attribute type 39 has an invalid length. [ 67.655152][ T6003] smc: removing net device wg0 with user defined pnetid SYZ0 [ 67.711117][ T6017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 67.756110][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.32'. [ 67.765780][ T5848] Bluetooth: hci3: command tx timeout [ 67.772439][ T6017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'. [ 67.777226][ T5848] Bluetooth: hci0: command tx timeout [ 67.846953][ T5848] Bluetooth: hci1: command tx timeout [ 67.852417][ T5848] Bluetooth: hci4: command tx timeout [ 67.857956][ T5848] Bluetooth: hci2: command tx timeout [ 67.876020][ T6016] netlink: 'syz.1.35': attribute type 1 has an invalid length. [ 68.216432][ T6037] netlink: 220 bytes leftover after parsing attributes in process `syz.2.41'. [ 68.292968][ T6041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.42'. [ 68.306311][ T6038] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 68.604465][ T5835] IPVS: starting estimator thread 0... [ 68.696347][ T6066] IPVS: using max 21 ests per chain, 50400 per kthread [ 68.869109][ T6080] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 68.917661][ T6075] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 68.961358][ T6075] syz.4.51 uses obsolete (PF_INET,SOCK_PACKET) [ 69.435405][ T6105] delete_channel: no stack [ 69.637701][ T6113] tipc: Enabling <eth:lo> not permitted [ 69.643320][ T6113] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media [ 69.655321][ T6115] smc: net device wg0 applied user defined pnetid SYZ0 [ 69.756711][ T6117] netlink: 'syz.2.67': attribute type 28 has an invalid length. [ 69.764597][ T6117] netlink: 'syz.2.67': attribute type 3 has an invalid length. [ 69.843238][ T6120] netlink: 'syz.4.69': attribute type 1 has an invalid length. [ 70.099005][ T6132] netlink: 'syz.2.72': attribute type 2 has an invalid length. [ 70.392634][ T6145] netlink: 'syz.4.76': attribute type 9 has an invalid length. [ 70.405351][ T6145] netlink: 'syz.4.76': attribute type 6 has an invalid length. [ 70.424133][ T6145] netlink: 'syz.4.76': attribute type 4 has an invalid length. [ 70.920325][ T6171] __nla_validate_parse: 22 callbacks suppressed [ 70.920344][ T6171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 71.252740][ T6184] Cannot find del_set index 3 as target [ 71.361550][ T6189] FAULT_INJECTION: forcing a failure. [ 71.361550][ T6189] name failslab, interval 1, probability 0, space 0, times 0 [ 71.401250][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.2.93 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 71.411818][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.421924][ T6189] Call Trace: [ 71.425229][ T6189] <TASK> [ 71.428189][ T6189] dump_stack_lvl+0x241/0x360 [ 71.432918][ T6189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.438149][ T6189] ? __pfx__printk+0x10/0x10 [ 71.442780][ T6189] ? ref_tracker_alloc+0x332/0x490 [ 71.447927][ T6189] should_fail_ex+0x3b0/0x4e0 [ 71.452633][ T6189] should_failslab+0xac/0x100 [ 71.457347][ T6189] ? skb_clone+0x20c/0x390 [ 71.461796][ T6189] kmem_cache_alloc_noprof+0x70/0x380 [ 71.467235][ T6189] skb_clone+0x20c/0x390 [ 71.471535][ T6189] __netlink_deliver_tap+0x3cc/0x7f0 [ 71.476867][ T6189] ? netlink_deliver_tap+0x2e/0x1b0 [ 71.482093][ T6189] netlink_deliver_tap+0x19d/0x1b0 [ 71.487235][ T6189] netlink_sendskb+0x68/0x140 [ 71.491946][ T6189] netlink_unicast+0x39d/0x990 [ 71.496740][ T6189] ? __pfx_netlink_unicast+0x10/0x10 [ 71.502052][ T6189] ? __pfx___alloc_skb+0x10/0x10 [ 71.507008][ T6189] rtnl_unicast+0x50/0x60 [ 71.511354][ T6189] neigh_get+0x9e2/0xbd0 [ 71.515606][ T6189] ? __pfx_neigh_get+0x10/0x10 [ 71.520386][ T6189] ? __pfx_neigh_get+0x10/0x10 [ 71.525150][ T6189] rtnetlink_rcv_msg+0x73f/0xcf0 [ 71.530089][ T6189] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 71.535224][ T6189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.540697][ T6189] ? ref_tracker_free+0x643/0x7e0 [ 71.545731][ T6189] netlink_rcv_skb+0x1e3/0x430 [ 71.550511][ T6189] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 71.555998][ T6189] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 71.561330][ T6189] ? netlink_deliver_tap+0x2e/0x1b0 [ 71.566540][ T6189] netlink_unicast+0x7f6/0x990 [ 71.571324][ T6189] ? __pfx_netlink_unicast+0x10/0x10 [ 71.576613][ T6189] ? __virt_addr_valid+0x183/0x530 [ 71.581732][ T6189] ? __check_object_size+0x48e/0x900 [ 71.587024][ T6189] netlink_sendmsg+0x8e4/0xcb0 [ 71.591796][ T6189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.597082][ T6189] ? aa_sock_msg_perm+0x91/0x160 [ 71.602018][ T6189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.607310][ T6189] __sock_sendmsg+0x221/0x270 [ 71.612013][ T6189] ____sys_sendmsg+0x52a/0x7e0 [ 71.616790][ T6189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.622072][ T6189] ? __fget_files+0x2a/0x410 [ 71.626663][ T6189] ? __fget_files+0x2a/0x410 [ 71.631254][ T6189] __sys_sendmsg+0x269/0x350 [ 71.635842][ T6189] ? __pfx_lock_release+0x10/0x10 [ 71.640872][ T6189] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.645997][ T6189] ? __pfx_vfs_write+0x10/0x10 [ 71.650783][ T6189] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.657113][ T6189] ? do_syscall_64+0x100/0x230 [ 71.661891][ T6189] ? do_syscall_64+0xb6/0x230 [ 71.666570][ T6189] do_syscall_64+0xf3/0x230 [ 71.671070][ T6189] ? clear_bhb_loop+0x35/0x90 [ 71.675748][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.681640][ T6189] RIP: 0033:0x7f6d8777ff19 [ 71.686061][ T6189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.705661][ T6189] RSP: 002b:00007f6d8863c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.714088][ T6189] RAX: ffffffffffffffda RBX: 00007f6d87945fa0 RCX: 00007f6d8777ff19 [ 71.722063][ T6189] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 71.730035][ T6189] RBP: 00007f6d8863c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.738093][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.746057][ T6189] R13: 0000000000000000 R14: 00007f6d87945fa0 R15: 00007ffd6cbdb558 [ 71.754034][ T6189] </TASK> [ 71.769020][ T6196] dccp_close: ABORT with 36 bytes unread [ 71.779153][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.785637][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.398040][ T6265] netlink: 'syz.1.114': attribute type 39 has an invalid length. [ 73.873257][ T6282] netlink: 'syz.0.121': attribute type 12 has an invalid length. [ 73.967332][ T6287] netlink: 'syz.4.123': attribute type 29 has an invalid length. [ 74.013865][ T6292] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 74.256847][ T6302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 74.300520][ T6302] Zero length message leads to an empty skb [ 74.330739][ T6302] netlink: 'syz.3.127': attribute type 2 has an invalid length. [ 74.354429][ T6307] FAULT_INJECTION: forcing a failure. [ 74.354429][ T6307] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 74.356886][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.127'. [ 74.388832][ T6307] CPU: 0 UID: 0 PID: 6307 Comm: syz.4.130 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 74.399475][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 74.409646][ T6307] Call Trace: [ 74.412956][ T6307] <TASK> [ 74.415909][ T6307] dump_stack_lvl+0x241/0x360 [ 74.420624][ T6307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.425859][ T6307] ? __pfx__printk+0x10/0x10 [ 74.430479][ T6307] ? __pfx_lock_release+0x10/0x10 [ 74.435532][ T6307] ? __lock_acquire+0x1397/0x2100 [ 74.440607][ T6307] should_fail_ex+0x3b0/0x4e0 [ 74.445322][ T6307] _copy_from_user+0x2f/0xc0 [ 74.449946][ T6307] kstrtouint_from_user+0xc6/0x190 [ 74.455090][ T6307] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 74.460839][ T6307] ? __pfx_lock_acquire+0x10/0x10 [ 74.465903][ T6307] proc_fail_nth_write+0xaa/0x2d0 [ 74.470959][ T6307] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 74.476883][ T6307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.482569][ T6307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 74.488239][ T6307] vfs_write+0x2a3/0xd30 [ 74.489872][ T6289] infiniband syz2: set down [ 74.492490][ T6307] ? __pfx_vfs_write+0x10/0x10 [ 74.492536][ T6307] ? __fget_files+0x2a/0x410 [ 74.505817][ T6289] infiniband syz2: added ipvlan1 [ 74.506531][ T6307] ? __fget_files+0x395/0x410 [ 74.516170][ T6307] ? __fget_files+0x2a/0x410 [ 74.520806][ T6307] ksys_write+0x18f/0x2b0 [ 74.525168][ T6307] ? __pfx_ksys_write+0x10/0x10 [ 74.530044][ T6307] ? do_syscall_64+0x100/0x230 [ 74.534844][ T6307] ? do_syscall_64+0xb6/0x230 [ 74.539561][ T6307] do_syscall_64+0xf3/0x230 [ 74.544102][ T6307] ? clear_bhb_loop+0x35/0x90 [ 74.548815][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.554748][ T6307] RIP: 0033:0x7fc86417e9cf [ 74.559184][ T6307] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 74.578820][ T6307] RSP: 002b:00007fc86502f050 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 74.587270][ T6307] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc86417e9cf [ 74.587836][ T6289] RDS/IB: syz2: added [ 74.595252][ T6307] RDX: 0000000000000001 RSI: 00007fc86502f0b0 RDI: 0000000000000004 [ 74.595270][ T6307] RBP: 00007fc86502f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 74.595282][ T6307] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 74.595294][ T6307] R13: 0000000000000000 R14: 00007fc864345fa0 R15: 00007fffd1fafd68 [ 74.595324][ T6307] </TASK> [ 74.635618][ T6289] smc: adding ib device syz2 with port count 1 [ 74.643573][ T6289] smc: ib device syz2 port 1 has pnetid [ 74.757162][ T6316] netlink: 260 bytes leftover after parsing attributes in process `syz.1.132'. [ 74.869976][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'. [ 75.278423][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.143'. [ 76.115463][ T6382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.152'. [ 76.144144][ T6382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.152'. [ 76.173822][ T6382] netlink: 'syz.4.152': attribute type 20 has an invalid length. [ 76.547520][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.155'. [ 76.562009][ T6399] netlink: 5 bytes leftover after parsing attributes in process `syz.4.155'. [ 76.601135][ T6401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 76.618806][ T6403] xt_socket: unknown flags 0x50 [ 76.653121][ T6403] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 76.782465][ T6411] nbd: must specify a device to reconfigure [ 77.217955][ T6420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.162'. [ 77.273636][ T6424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.163'. [ 77.498519][ T6431] Cannot find add_set index 1 as target [ 77.600255][ T6445] sctp: [Deprecated]: syz.0.160 (pid 6445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 77.600255][ T6445] Use struct sctp_sack_info instead [ 77.809752][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 77.936900][ T6420] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 78.218130][ T6477] batadv1: entered allmulticast mode [ 78.224979][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 78.259730][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 78.287834][ T6484] batadv1: entered allmulticast mode [ 78.754184][ T6516] tipc: Started in network mode [ 78.796422][ T6516] tipc: Node identity , cluster identity 4711 [ 78.838829][ T6516] tipc: Failed to set node id, please configure manually [ 78.855906][ T6516] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media [ 79.515950][ T6557] netlink: 'syz.4.193': attribute type 10 has an invalid length. [ 79.987341][ T6591] netlink: 'syz.2.200': attribute type 5 has an invalid length. [ 80.069496][ T6586] bond1: entered promiscuous mode [ 80.074799][ T6586] bond1: entered allmulticast mode [ 80.081465][ T6586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.555834][ T6624] FAULT_INJECTION: forcing a failure. [ 80.555834][ T6624] name failslab, interval 1, probability 0, space 0, times 0 [ 80.609863][ T6624] CPU: 1 UID: 0 PID: 6624 Comm: syz.3.211 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 80.620514][ T6624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.630601][ T6624] Call Trace: [ 80.633902][ T6624] <TASK> [ 80.636865][ T6624] dump_stack_lvl+0x241/0x360 [ 80.641577][ T6624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.646804][ T6624] ? __pfx__printk+0x10/0x10 [ 80.651429][ T6624] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 80.657453][ T6624] ? __pfx___might_resched+0x10/0x10 [ 80.662763][ T6624] should_fail_ex+0x3b0/0x4e0 [ 80.667478][ T6624] should_failslab+0xac/0x100 [ 80.672183][ T6624] kmem_cache_alloc_node_noprof+0x77/0x380 [ 80.678019][ T6624] ? __alloc_skb+0x1c3/0x440 [ 80.682639][ T6624] __alloc_skb+0x1c3/0x440 [ 80.687086][ T6624] ? __pfx___alloc_skb+0x10/0x10 [ 80.692050][ T6624] ? __nla_validate_parse+0x26ce/0x3090 [ 80.697626][ T6624] team_nl_send_options_get+0x18d/0x1590 [ 80.703295][ T6624] ? __pfx_team_nl_send_multicast+0x10/0x10 [ 80.709217][ T6624] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 80.714700][ T6624] ? __pfx_team_nl_send_options_get+0x10/0x10 [ 80.720803][ T6624] ? team_nl_team_get+0x148/0x190 [ 80.725858][ T6624] ? __pfx___mutex_lock+0x10/0x10 [ 80.730926][ T6624] ? team_priority_option_set+0xac/0x7d0 [ 80.736591][ T6624] ? __nla_parse+0x40/0x60 [ 80.741040][ T6624] team_nl_options_set_doit+0xcd0/0x1090 [ 80.746725][ T6624] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 80.752829][ T6624] ? __nla_parse+0x40/0x60 [ 80.757271][ T6624] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 80.763635][ T6624] genl_rcv_msg+0xb14/0xec0 [ 80.768175][ T6624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.773263][ T6624] ? __pfx_lock_acquire+0x10/0x10 [ 80.778314][ T6624] ? __pfx_team_nl_options_set_doit+0x10/0x10 [ 80.784410][ T6624] ? __pfx___might_resched+0x10/0x10 [ 80.789728][ T6624] netlink_rcv_skb+0x1e3/0x430 [ 80.794518][ T6624] ? __pfx_genl_rcv_msg+0x10/0x10 [ 80.799569][ T6624] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 80.804888][ T6624] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 80.810391][ T6624] genl_rcv+0x28/0x40 [ 80.814404][ T6624] netlink_unicast+0x7f6/0x990 [ 80.819205][ T6624] ? __pfx_netlink_unicast+0x10/0x10 [ 80.824524][ T6624] ? __virt_addr_valid+0x183/0x530 [ 80.829675][ T6624] ? __check_object_size+0x48e/0x900 [ 80.835006][ T6624] netlink_sendmsg+0x8e4/0xcb0 [ 80.839813][ T6624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.845138][ T6624] ? aa_sock_msg_perm+0x91/0x160 [ 80.850115][ T6624] ? __pfx_netlink_sendmsg+0x10/0x10 [ 80.855428][ T6624] __sock_sendmsg+0x221/0x270 [ 80.860145][ T6624] ____sys_sendmsg+0x52a/0x7e0 [ 80.864943][ T6624] ? __pfx_____sys_sendmsg+0x10/0x10 [ 80.870257][ T6624] ? __fget_files+0x2a/0x410 [ 80.874878][ T6624] ? __fget_files+0x2a/0x410 [ 80.879510][ T6624] __sys_sendmsg+0x269/0x350 [ 80.884132][ T6624] ? __pfx_lock_release+0x10/0x10 [ 80.889191][ T6624] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.894383][ T6624] ? __pfx_vfs_write+0x10/0x10 [ 80.899211][ T6624] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.905577][ T6624] ? do_syscall_64+0x100/0x230 [ 80.910386][ T6624] ? do_syscall_64+0xb6/0x230 [ 80.915097][ T6624] do_syscall_64+0xf3/0x230 [ 80.919627][ T6624] ? clear_bhb_loop+0x35/0x90 [ 80.924342][ T6624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.930266][ T6624] RIP: 0033:0x7f3d2477ff19 [ 80.934702][ T6624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.954332][ T6624] RSP: 002b:00007f3d25510058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.962883][ T6624] RAX: ffffffffffffffda RBX: 00007f3d24945fa0 RCX: 00007f3d2477ff19 [ 80.970903][ T6624] RDX: 0000000004004004 RSI: 00000000200005c0 RDI: 0000000000000005 [ 80.978902][ T6624] RBP: 00007f3d255100a0 R08: 0000000000000000 R09: 0000000000000000 [ 80.986895][ T6624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 80.994883][ T6624] R13: 0000000000000000 R14: 00007f3d24945fa0 R15: 00007ffd8c8cd6a8 [ 81.002904][ T6624] </TASK> [ 81.178117][ T6641] __nla_validate_parse: 6 callbacks suppressed [ 81.178136][ T6641] netlink: 36 bytes leftover after parsing attributes in process `syz.0.217'. [ 81.254048][ T6647] dccp_invalid_packet: P.Data Offset(100) too large [ 81.828307][ T6684] syzkaller0: entered allmulticast mode [ 81.867189][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.227'. [ 81.868617][ T46] cfg80211: failed to load regulatory.db [ 82.009903][ T6684] syzkaller0 (unregistering): left allmulticast mode [ 82.060163][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.232'. [ 82.108022][ T6705] netlink: 36 bytes leftover after parsing attributes in process `syz.3.232'. [ 82.458916][ T6721] netlink: 52 bytes leftover after parsing attributes in process `syz.1.236'. [ 82.502539][ T6702] syzkaller0: entered promiscuous mode [ 82.508598][ T6702] syzkaller0: entered allmulticast mode [ 84.231251][ T6734] FAULT_INJECTION: forcing a failure. [ 84.231251][ T6734] name failslab, interval 1, probability 0, space 0, times 0 [ 84.275846][ T6734] CPU: 1 UID: 0 PID: 6734 Comm: syz.2.242 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 84.286487][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.296576][ T6734] Call Trace: [ 84.299882][ T6734] <TASK> [ 84.302839][ T6734] dump_stack_lvl+0x241/0x360 [ 84.307556][ T6734] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.312793][ T6734] ? __pfx__printk+0x10/0x10 [ 84.317414][ T6734] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 84.323421][ T6734] ? __pfx___might_resched+0x10/0x10 [ 84.328727][ T6734] should_fail_ex+0x3b0/0x4e0 [ 84.333408][ T6734] should_failslab+0xac/0x100 [ 84.338176][ T6734] kmem_cache_alloc_node_noprof+0x77/0x380 [ 84.343997][ T6734] ? __alloc_skb+0x1c3/0x440 [ 84.348588][ T6734] __alloc_skb+0x1c3/0x440 [ 84.353006][ T6734] ? __pfx___alloc_skb+0x10/0x10 [ 84.357938][ T6734] ? netlink_ack_tlv_len+0x6e/0x200 [ 84.363132][ T6734] netlink_ack+0x145/0xa50 [ 84.367554][ T6734] ? __pfx___might_resched+0x10/0x10 [ 84.372840][ T6734] netlink_rcv_skb+0x262/0x430 [ 84.377601][ T6734] ? __pfx_genl_rcv_msg+0x10/0x10 [ 84.382624][ T6734] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 84.387912][ T6734] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 84.393375][ T6734] genl_rcv+0x28/0x40 [ 84.397356][ T6734] netlink_unicast+0x7f6/0x990 [ 84.402138][ T6734] ? __pfx_netlink_unicast+0x10/0x10 [ 84.407423][ T6734] ? __virt_addr_valid+0x183/0x530 [ 84.412544][ T6734] ? __check_object_size+0x48e/0x900 [ 84.417840][ T6734] netlink_sendmsg+0x8e4/0xcb0 [ 84.422609][ T6734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.427892][ T6734] ? aa_sock_msg_perm+0x91/0x160 [ 84.432826][ T6734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.438103][ T6734] __sock_sendmsg+0x221/0x270 [ 84.442781][ T6734] ____sys_sendmsg+0x52a/0x7e0 [ 84.447553][ T6734] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.452833][ T6734] ? __fget_files+0x2a/0x410 [ 84.457423][ T6734] ? __fget_files+0x2a/0x410 [ 84.462012][ T6734] __sys_sendmsg+0x269/0x350 [ 84.466602][ T6734] ? __pfx_lock_release+0x10/0x10 [ 84.471624][ T6734] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.476743][ T6734] ? __pfx_vfs_write+0x10/0x10 [ 84.481524][ T6734] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.487853][ T6734] ? do_syscall_64+0x100/0x230 [ 84.492622][ T6734] ? do_syscall_64+0xb6/0x230 [ 84.497301][ T6734] do_syscall_64+0xf3/0x230 [ 84.501802][ T6734] ? clear_bhb_loop+0x35/0x90 [ 84.506482][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.512379][ T6734] RIP: 0033:0x7f6d8777ff19 [ 84.516792][ T6734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.536395][ T6734] RSP: 002b:00007f6d8863c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.544814][ T6734] RAX: ffffffffffffffda RBX: 00007f6d87945fa0 RCX: 00007f6d8777ff19 [ 84.552781][ T6734] RDX: 0000000004004004 RSI: 00000000200005c0 RDI: 0000000000000005 [ 84.560760][ T6734] RBP: 00007f6d8863c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 84.568724][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 84.576689][ T6734] R13: 0000000000000000 R14: 00007f6d87945fa0 R15: 00007ffd6cbdb558 [ 84.584669][ T6734] </TASK> [ 84.875381][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.252'. [ 84.927354][ T6784] openvswitch: netlink: IP tunnel dst address not specified [ 84.989914][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 85.076365][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 85.095916][ T6788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.255'. [ 85.430124][ T6810] netlink: 'syz.3.262': attribute type 1 has an invalid length. [ 85.434165][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.258'. [ 85.472402][ T6810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.491528][ T6810] bond0: (slave ip6gretap1): making interface the new active one [ 85.502746][ T6810] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.511133][ T6810] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.519244][ T6810] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 85.539518][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.569549][ T5872] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 85.706845][ T5872] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 86.246138][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 86.451549][ T6870] __nla_validate_parse: 3 callbacks suppressed [ 86.451569][ T6870] netlink: 48 bytes leftover after parsing attributes in process `syz.0.278'. [ 86.580378][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 86.940882][ T6896] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 87.058331][ T6904] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 87.097943][ T6898] netlink: 3 bytes leftover after parsing attributes in process `syz.2.283'. [ 87.145235][ T6898] batadv1: entered promiscuous mode [ 87.163139][ T6898] batadv1: entered allmulticast mode [ 87.206538][ T6904] syzkaller1: entered promiscuous mode [ 87.212113][ T6904] syzkaller1: entered allmulticast mode [ 87.233322][ T6913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.291'. [ 87.272921][ T6911] pim6reg1: entered promiscuous mode [ 87.286355][ T6911] pim6reg1: entered allmulticast mode [ 87.326433][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.352022][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.383701][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.1.292'. [ 87.410874][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 87.479675][ T6921] erspan0: entered promiscuous mode [ 87.495929][ T6921] macvtap1: entered promiscuous mode [ 87.506635][ T6921] macvtap1: entered allmulticast mode [ 87.512027][ T6921] erspan0: entered allmulticast mode [ 87.551148][ T6925] smc: net device wg0 applied user defined pnetid SYZ0 [ 87.608894][ T46] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 87.647668][ T6931] IPv6: Can't replace route, no match found [ 87.717433][ T6933] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 87.847989][ T6933] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.896902][ T6943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.301'. [ 87.926041][ T6943] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.933333][ T6943] IPv6: NLM_F_CREATE should be set when creating new route [ 87.940776][ T6943] IPv6: NLM_F_CREATE should be set when creating new route [ 87.991298][ T6951] netlink: 48 bytes leftover after parsing attributes in process `syz.4.304'. [ 88.035369][ T6949] syzkaller0: entered promiscuous mode [ 88.047732][ T6949] syzkaller0: entered allmulticast mode [ 88.209796][ T6963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.308'. [ 89.403032][ T6967] netlink: 'syz.1.306': attribute type 21 has an invalid length. [ 89.435817][ T6967] netlink: 128 bytes leftover after parsing attributes in process `syz.1.306'. [ 89.477614][ T6967] netlink: 'syz.1.306': attribute type 4 has an invalid length. [ 89.485299][ T6967] netlink: 'syz.1.306': attribute type 5 has an invalid length. [ 89.499568][ T6967] netlink: 3 bytes leftover after parsing attributes in process `syz.1.306'. [ 89.750997][ T6983] xt_ecn: cannot match TCP bits for non-tcp packets [ 90.002658][ T6990] veth0_to_team: entered promiscuous mode [ 90.021150][ T6990] veth0_to_team: entered allmulticast mode [ 90.504167][ T7018] veth1_macvtap: left promiscuous mode [ 90.958185][ T7041] netlink: 'syz.0.338': attribute type 2 has an invalid length. [ 91.237082][ T2862] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 91.237103][ T2862] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 91.485069][ T7071] __nla_validate_parse: 10 callbacks suppressed [ 91.485089][ T7071] netlink: 220 bytes leftover after parsing attributes in process `syz.0.348'. [ 91.544201][ T7078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.350'. [ 91.623180][ T7084] x_tables: duplicate underflow at hook 3 [ 91.727769][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 91.765834][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 91.786499][ T7092] netlink: 12 bytes leftover after parsing attributes in process `syz.0.352'. [ 91.832140][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.352'. [ 91.897123][ T7097] netlink: 28 bytes leftover after parsing attributes in process `syz.0.352'. [ 92.112984][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.354'. [ 92.386753][ T7129] netlink: 48 bytes leftover after parsing attributes in process `syz.2.359'. [ 92.418347][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 92.429878][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'. [ 92.452135][ T7132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.361'. [ 93.260992][ T7167] ip6gretap0: entered promiscuous mode [ 93.557723][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 94.266252][ T7201] Bluetooth: MGMT ver 1.23 [ 94.729355][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 95.878208][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 96.100653][ T7264] netlink: 'syz.0.411': attribute type 39 has an invalid length. [ 96.258313][ T7264] smc: removing net device wg0 with user defined pnetid SYZ0 [ 96.273548][ T7277] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 96.327357][ T54] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 96.334388][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 96.450637][ T7282] ebt_among: dst integrity fail: 200 [ 96.817538][ T7291] __nla_validate_parse: 17 callbacks suppressed [ 96.817560][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 97.056750][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 97.263941][ T7193] Set syz1 is full, maxelem 65536 reached [ 97.446802][ T7307] netlink: 48 bytes leftover after parsing attributes in process `syz.2.424'. [ 97.570186][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.423'. [ 97.693994][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 97.800533][ T7324] netlink: 64 bytes leftover after parsing attributes in process `syz.1.427'. [ 98.013606][ T7298] syz.3.422 (7298) used greatest stack depth: 17392 bytes left [ 98.161261][ T7353] netlink: 24 bytes leftover after parsing attributes in process `syz.1.434'. [ 98.278608][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 98.520121][ T7374] netlink: 16 bytes leftover after parsing attributes in process `syz.3.440'. [ 98.634970][ T7376] netlink: 'syz.4.441': attribute type 1 has an invalid length. [ 98.671582][ T7376] netlink: 56 bytes leftover after parsing attributes in process `syz.4.441'. [ 98.701595][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.441'. [ 98.893769][ T7391] netlink: 'syz.4.444': attribute type 11 has an invalid length. [ 98.963935][ T7395] netlink: 80 bytes leftover after parsing attributes in process `syz.3.446'. [ 99.225951][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 99.347525][ T7415] netlink: 'syz.2.448': attribute type 30 has an invalid length. [ 99.403396][ T7419] netlink: 'syz.0.451': attribute type 7 has an invalid length. [ 99.411372][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 99.775362][ T7437] ip6gre1: entered allmulticast mode [ 100.346377][ T7449] tipc: Started in network mode [ 100.351306][ T7449] tipc: Node identity ffffffff, cluster identity 4711 [ 100.373116][ T7449] tipc: Node number set to 4294967295 [ 100.615837][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 101.012766][ T7474] netdevsim netdevsim4: Direct firmware load for . [ 101.012766][ T7474] failed with error -2 [ 101.036047][ T7474] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 101.036047][ T7474] [ 101.045937][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 101.154634][ T7478] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 101.196358][ T7483] FAULT_INJECTION: forcing a failure. [ 101.196358][ T7483] name failslab, interval 1, probability 0, space 0, times 0 [ 101.215953][ T7483] CPU: 0 UID: 0 PID: 7483 Comm: syz.2.473 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 101.226612][ T7483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.236725][ T7483] Call Trace: [ 101.240033][ T7483] <TASK> [ 101.242987][ T7483] dump_stack_lvl+0x241/0x360 [ 101.247701][ T7483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.252934][ T7483] ? __pfx__printk+0x10/0x10 [ 101.257581][ T7483] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 101.263606][ T7483] ? __pfx___might_resched+0x10/0x10 [ 101.268930][ T7483] should_fail_ex+0x3b0/0x4e0 [ 101.273670][ T7483] should_failslab+0xac/0x100 [ 101.278379][ T7483] kmem_cache_alloc_node_noprof+0x77/0x380 [ 101.284217][ T7483] ? __alloc_skb+0x1c3/0x440 [ 101.288843][ T7483] __alloc_skb+0x1c3/0x440 [ 101.293299][ T7483] ? __pfx___alloc_skb+0x10/0x10 [ 101.298268][ T7483] ? netlink_autobind+0xd6/0x2f0 [ 101.303231][ T7483] ? netlink_autobind+0x2b0/0x2f0 [ 101.308286][ T7483] netlink_sendmsg+0x638/0xcb0 [ 101.313086][ T7483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.318401][ T7483] ? aa_sock_msg_perm+0x91/0x160 [ 101.323398][ T7483] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.328708][ T7483] __sock_sendmsg+0x221/0x270 [ 101.333413][ T7483] ____sys_sendmsg+0x52a/0x7e0 [ 101.338205][ T7483] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.343500][ T7483] ? __fget_files+0x2a/0x410 [ 101.348084][ T7483] ? __fget_files+0x2a/0x410 [ 101.352670][ T7483] __sys_sendmsg+0x269/0x350 [ 101.357252][ T7483] ? __pfx_lock_release+0x10/0x10 [ 101.362271][ T7483] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.367390][ T7483] ? __pfx_vfs_write+0x10/0x10 [ 101.372190][ T7483] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.378523][ T7483] ? do_syscall_64+0x100/0x230 [ 101.383296][ T7483] ? do_syscall_64+0xb6/0x230 [ 101.387976][ T7483] do_syscall_64+0xf3/0x230 [ 101.392479][ T7483] ? clear_bhb_loop+0x35/0x90 [ 101.397243][ T7483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.403133][ T7483] RIP: 0033:0x7f6d8777ff19 [ 101.407543][ T7483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.427152][ T7483] RSP: 002b:00007f6d8863c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.435847][ T7483] RAX: ffffffffffffffda RBX: 00007f6d87945fa0 RCX: 00007f6d8777ff19 [ 101.443820][ T7483] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 101.451792][ T7483] RBP: 00007f6d8863c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.459771][ T7483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.467821][ T7483] R13: 0000000000000000 R14: 00007f6d87945fa0 R15: 00007ffd6cbdb558 [ 101.475805][ T7483] </TASK> [ 101.824814][ T7506] netlink: 'syz.0.480': attribute type 32 has an invalid length. [ 101.922792][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 102.065664][ T7515] __nla_validate_parse: 12 callbacks suppressed [ 102.101503][ T7515] netlink: 20 bytes leftover after parsing attributes in process `syz.3.485'. [ 102.584953][ T7529] netlink: 'syz.1.490': attribute type 10 has an invalid length. [ 102.594818][ T7506] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 102.595411][ T7529] netlink: 55 bytes leftover after parsing attributes in process `syz.1.490'. [ 102.700308][ T7531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.491'. [ 103.048110][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 103.791043][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.800169][ T7525] batadv_slave_1: entered promiscuous mode [ 104.227568][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 104.294590][ T7539] netlink: 60 bytes leftover after parsing attributes in process `syz.4.494'. [ 104.486625][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.498'. [ 104.498240][ T7552] netlink: 'syz.2.499': attribute type 39 has an invalid length. [ 104.716175][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 104.738722][ T7564] netlink: 24 bytes leftover after parsing attributes in process `syz.1.503'. [ 104.772119][ T7564] netlink: 60 bytes leftover after parsing attributes in process `syz.1.503'. [ 105.135566][ T7579] netlink: 'syz.0.506': attribute type 4 has an invalid length. [ 105.150377][ T7579] netlink: 32 bytes leftover after parsing attributes in process `syz.0.506'. [ 105.337186][ T7587] netlink: 'syz.1.511': attribute type 11 has an invalid length. [ 105.373780][ T7587] netlink: 224 bytes leftover after parsing attributes in process `syz.1.511'. [ 105.591645][ T7599] netlink: 'syz.4.514': attribute type 39 has an invalid length. [ 105.601499][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 105.703086][ T7599] smc: removing net device wg0 with user defined pnetid SYZ0 [ 105.792807][ T5848] Bluetooth: hci3: link tx timeout [ 105.798567][ T5848] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.002213][ T7620] policy can only be matched on NF_INET_PRE_ROUTING [ 106.002237][ T7620] unable to load match [ 106.026168][ T7623] team0: No ports can be present during mode change [ 106.249184][ T7636] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 106.249373][ T7637] FAULT_INJECTION: forcing a failure. [ 106.249373][ T7637] name failslab, interval 1, probability 0, space 0, times 0 [ 106.315873][ T7637] CPU: 0 UID: 0 PID: 7637 Comm: syz.2.529 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 106.326523][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 106.336601][ T7637] Call Trace: [ 106.339897][ T7637] <TASK> [ 106.342851][ T7637] dump_stack_lvl+0x241/0x360 [ 106.347561][ T7637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.352792][ T7637] ? __pfx__printk+0x10/0x10 [ 106.357410][ T7637] ? __kmalloc_cache_noprof+0x48/0x390 [ 106.362900][ T7637] ? __pfx___might_resched+0x10/0x10 [ 106.368556][ T7637] ? arch_stack_walk+0xfd/0x150 [ 106.373437][ T7637] should_fail_ex+0x3b0/0x4e0 [ 106.378171][ T7637] should_failslab+0xac/0x100 [ 106.382884][ T7637] __kmalloc_cache_noprof+0x70/0x390 [ 106.388204][ T7637] ? rtnl_newlink+0x131/0x2150 [ 106.393005][ T7637] rtnl_newlink+0x131/0x2150 [ 106.397641][ T7637] ? kasan_save_track+0x51/0x80 [ 106.397974][ T7641] netlink: 'syz.3.532': attribute type 39 has an invalid length. [ 106.402496][ T7637] ? kasan_save_free_info+0x40/0x50 [ 106.402522][ T7637] ? __kasan_slab_free+0x59/0x70 [ 106.402543][ T7637] ? __pfx_rtnl_newlink+0x10/0x10 [ 106.425363][ T7637] ? __netlink_deliver_tap+0x56b/0x7f0 [ 106.430833][ T7637] ? __pfx_validate_chain+0x10/0x10 [ 106.436067][ T7637] ? __sock_sendmsg+0x221/0x270 [ 106.440953][ T7637] ? ____sys_sendmsg+0x52a/0x7e0 [ 106.445907][ T7637] ? __sys_sendmsg+0x269/0x350 [ 106.450666][ T7637] ? do_syscall_64+0xf3/0x230 [ 106.455340][ T7637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.461421][ T7637] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 106.467402][ T7637] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.473740][ T7637] ? mark_lock+0x9a/0x360 [ 106.478073][ T7637] ? __lock_acquire+0x1397/0x2100 [ 106.483111][ T7637] ? rcu_read_unlock+0x87/0xa0 [ 106.487874][ T7637] ? __dev_queue_xmit+0x1775/0x3f50 [ 106.493085][ T7637] ? __pfx_lock_release+0x10/0x10 [ 106.498113][ T7637] ? __pfx_rtnl_newlink+0x10/0x10 [ 106.503134][ T7637] rtnetlink_rcv_msg+0x791/0xcf0 [ 106.508064][ T7637] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 106.513177][ T7637] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.518634][ T7637] ? ref_tracker_free+0x643/0x7e0 [ 106.523653][ T7637] netlink_rcv_skb+0x1e3/0x430 [ 106.528417][ T7637] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.533887][ T7637] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 106.539183][ T7637] ? netlink_deliver_tap+0x2e/0x1b0 [ 106.544374][ T7637] netlink_unicast+0x7f6/0x990 [ 106.549141][ T7637] ? __pfx_netlink_unicast+0x10/0x10 [ 106.554422][ T7637] ? __virt_addr_valid+0x183/0x530 [ 106.559528][ T7637] ? __check_object_size+0x48e/0x900 [ 106.564814][ T7637] netlink_sendmsg+0x8e4/0xcb0 [ 106.569577][ T7637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.574859][ T7637] ? aa_sock_msg_perm+0x91/0x160 [ 106.579799][ T7637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.585089][ T7637] __sock_sendmsg+0x221/0x270 [ 106.589774][ T7637] ____sys_sendmsg+0x52a/0x7e0 [ 106.594551][ T7637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.599829][ T7637] ? __fget_files+0x2a/0x410 [ 106.604413][ T7637] ? __fget_files+0x2a/0x410 [ 106.609006][ T7637] __sys_sendmsg+0x269/0x350 [ 106.613594][ T7637] ? __pfx_lock_release+0x10/0x10 [ 106.618621][ T7637] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.623733][ T7637] ? __pfx_vfs_write+0x10/0x10 [ 106.628508][ T7637] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 106.634838][ T7637] ? do_syscall_64+0x100/0x230 [ 106.639605][ T7637] ? do_syscall_64+0xb6/0x230 [ 106.644285][ T7637] do_syscall_64+0xf3/0x230 [ 106.648789][ T7637] ? clear_bhb_loop+0x35/0x90 [ 106.653466][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.659357][ T7637] RIP: 0033:0x7f6d8777ff19 [ 106.663766][ T7637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.683366][ T7637] RSP: 002b:00007f6d8863c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.691789][ T7637] RAX: ffffffffffffffda RBX: 00007f6d87945fa0 RCX: 00007f6d8777ff19 [ 106.699755][ T7637] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 106.707720][ T7637] RBP: 00007f6d8863c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.715691][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.723657][ T7637] R13: 0000000000000000 R14: 00007f6d87945fa0 R15: 00007ffd6cbdb558 [ 106.731636][ T7637] </TASK> [ 106.807091][ T5848] Bluetooth: hci3: link tx timeout [ 106.813121][ T5848] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.880710][ T5848] Bluetooth: hci3: link tx timeout [ 106.886411][ T5848] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 106.982202][ T7658] FAULT_INJECTION: forcing a failure. [ 106.982202][ T7658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.052365][ T7658] CPU: 0 UID: 0 PID: 7658 Comm: syz.4.537 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 107.063014][ T7658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.073530][ T7658] Call Trace: [ 107.076834][ T7658] <TASK> [ 107.079785][ T7658] dump_stack_lvl+0x241/0x360 [ 107.084463][ T7658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.089660][ T7658] ? __pfx__printk+0x10/0x10 [ 107.094250][ T7658] ? __pfx_lock_release+0x10/0x10 [ 107.099291][ T7658] should_fail_ex+0x3b0/0x4e0 [ 107.103974][ T7658] _copy_from_user+0x2f/0xc0 [ 107.107015][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 107.108572][ T7658] copy_msghdr_from_user+0xae/0x680 [ 107.108610][ T7658] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 107.127332][ T7658] ? __fget_files+0x2a/0x410 [ 107.131948][ T7658] ? __fget_files+0x2a/0x410 [ 107.135387][ T7663] __nla_validate_parse: 2 callbacks suppressed [ 107.135403][ T7663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.539'. [ 107.136548][ T7658] __sys_sendmmsg+0x32b/0x720 [ 107.136585][ T7658] ? __pfx___sys_sendmmsg+0x10/0x10 [ 107.136618][ T7658] ? __pfx_lock_release+0x10/0x10 [ 107.136638][ T7658] ? kstrtouint_from_user+0x128/0x190 [ 107.136676][ T7658] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 107.178487][ T7658] ? ksys_write+0x22a/0x2b0 [ 107.183007][ T7658] ? __pfx_lock_release+0x10/0x10 [ 107.188046][ T7658] ? vfs_write+0x730/0xd30 [ 107.192556][ T7658] ? __mutex_unlock_slowpath+0x21e/0x790 [ 107.198237][ T7658] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.204235][ T7658] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.210574][ T7658] ? do_syscall_64+0x100/0x230 [ 107.215364][ T7658] __x64_sys_sendmmsg+0xa0/0xb0 [ 107.220230][ T7658] do_syscall_64+0xf3/0x230 [ 107.224760][ T7658] ? clear_bhb_loop+0x35/0x90 [ 107.229444][ T7658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.235345][ T7658] RIP: 0033:0x7fc86417ff19 [ 107.239763][ T7658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.259379][ T7658] RSP: 002b:00007fc86502f058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.267798][ T7658] RAX: ffffffffffffffda RBX: 00007fc864345fa0 RCX: 00007fc86417ff19 [ 107.275766][ T7658] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 107.283752][ T7658] RBP: 00007fc86502f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.291715][ T7658] R10: 00000000000400c4 R11: 0000000000000246 R12: 0000000000000001 [ 107.299677][ T7658] R13: 0000000000000000 R14: 00007fc864345fa0 R15: 00007fffd1fafd68 [ 107.307660][ T7658] </TASK> [ 107.330239][ T5848] Bluetooth: hci3: link tx timeout [ 107.335502][ T5848] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.358434][ T7665] netlink: 'syz.0.540': attribute type 39 has an invalid length. [ 107.681603][ T5848] Bluetooth: hci3: link tx timeout [ 107.686991][ T5848] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 107.731512][ T7678] netlink: 4 bytes leftover after parsing attributes in process `syz.4.547'. [ 107.740237][ T7681] FAULT_INJECTION: forcing a failure. [ 107.740237][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 107.750479][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.545'. [ 107.753349][ T7681] CPU: 1 UID: 0 PID: 7681 Comm: syz.1.549 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 107.772251][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.782333][ T7681] Call Trace: [ 107.785632][ T7681] <TASK> [ 107.788583][ T7681] dump_stack_lvl+0x241/0x360 [ 107.793291][ T7681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.798520][ T7681] ? __pfx__printk+0x10/0x10 [ 107.803142][ T7681] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 107.809162][ T7681] ? __pfx___might_resched+0x10/0x10 [ 107.814480][ T7681] should_fail_ex+0x3b0/0x4e0 [ 107.819180][ T7681] should_failslab+0xac/0x100 [ 107.823861][ T7681] kmem_cache_alloc_node_noprof+0x77/0x380 [ 107.829675][ T7681] ? __alloc_skb+0x1c3/0x440 [ 107.834264][ T7681] __alloc_skb+0x1c3/0x440 [ 107.838681][ T7681] ? __pfx___alloc_skb+0x10/0x10 [ 107.843615][ T7681] ? netlink_ack_tlv_len+0x6e/0x200 [ 107.848819][ T7681] netlink_ack+0x145/0xa50 [ 107.853254][ T7681] netlink_rcv_skb+0x262/0x430 [ 107.858017][ T7681] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.863477][ T7681] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.868774][ T7681] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.873972][ T7681] netlink_unicast+0x7f6/0x990 [ 107.878746][ T7681] ? __pfx_netlink_unicast+0x10/0x10 [ 107.884114][ T7681] ? __virt_addr_valid+0x183/0x530 [ 107.889317][ T7681] ? __check_object_size+0x48e/0x900 [ 107.894603][ T7681] netlink_sendmsg+0x8e4/0xcb0 [ 107.899367][ T7681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.904649][ T7681] ? aa_sock_msg_perm+0x91/0x160 [ 107.909583][ T7681] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.914856][ T7681] __sock_sendmsg+0x221/0x270 [ 107.919534][ T7681] ____sys_sendmsg+0x52a/0x7e0 [ 107.924299][ T7681] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.929576][ T7681] ? __fget_files+0x2a/0x410 [ 107.934253][ T7681] ? __fget_files+0x2a/0x410 [ 107.938927][ T7681] __sys_sendmsg+0x269/0x350 [ 107.943513][ T7681] ? __pfx_lock_release+0x10/0x10 [ 107.948536][ T7681] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.953658][ T7681] ? __pfx_vfs_write+0x10/0x10 [ 107.958435][ T7681] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.964759][ T7681] ? do_syscall_64+0x100/0x230 [ 107.969531][ T7681] ? do_syscall_64+0xb6/0x230 [ 107.974211][ T7681] do_syscall_64+0xf3/0x230 [ 107.978716][ T7681] ? clear_bhb_loop+0x35/0x90 [ 107.983392][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.989283][ T7681] RIP: 0033:0x7efcf937ff19 [ 107.993699][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.013320][ T7681] RSP: 002b:00007efcfa0b7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.021810][ T7681] RAX: ffffffffffffffda RBX: 00007efcf9545fa0 RCX: 00007efcf937ff19 [ 108.029875][ T7681] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 108.037848][ T7681] RBP: 00007efcfa0b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.045834][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.053807][ T7681] R13: 0000000000000000 R14: 00007efcf9545fa0 R15: 00007ffe592387b8 [ 108.061790][ T7681] </TASK> [ 108.086819][ T5848] Bluetooth: hci3: command 0x0405 tx timeout [ 108.495239][ T7710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.541778][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 108.876307][ T7730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.564'. [ 108.947879][ T7735] netlink: 256 bytes leftover after parsing attributes in process `syz.4.566'. [ 108.979940][ T7735] unsupported nlmsg_type 40 [ 109.162366][ T7746] netlink: 'syz.2.569': attribute type 13 has an invalid length. [ 109.191247][ T7746] veth0_macvtap: left promiscuous mode [ 109.227211][ T7746] macvtap0: entered allmulticast mode [ 109.276390][ T7746] macvtap0: refused to change device tx_queue_len [ 109.298828][ T7757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.574'. [ 109.303026][ T7746] netlink: 'syz.2.569': attribute type 13 has an invalid length. [ 109.327455][ T7746] macvtap0: refused to change device tx_queue_len [ 109.354567][ T7752] netlink: 830 bytes leftover after parsing attributes in process `syz.4.571'. [ 109.366538][ T7763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 109.550239][ T7777] FAULT_INJECTION: forcing a failure. [ 109.550239][ T7777] name failslab, interval 1, probability 0, space 0, times 0 [ 109.596743][ T7777] CPU: 1 UID: 0 PID: 7777 Comm: syz.2.576 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 109.607400][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.617495][ T7777] Call Trace: [ 109.620798][ T7777] <TASK> [ 109.623755][ T7777] dump_stack_lvl+0x241/0x360 [ 109.628463][ T7777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.633692][ T7777] ? __pfx__printk+0x10/0x10 [ 109.638327][ T7777] ? ref_tracker_alloc+0x332/0x490 [ 109.643468][ T7777] should_fail_ex+0x3b0/0x4e0 [ 109.648175][ T7777] should_failslab+0xac/0x100 [ 109.652892][ T7777] ? skb_clone+0x20c/0x390 [ 109.657334][ T7777] kmem_cache_alloc_noprof+0x70/0x380 [ 109.662748][ T7777] skb_clone+0x20c/0x390 [ 109.667027][ T7777] __netlink_deliver_tap+0x3cc/0x7f0 [ 109.672351][ T7777] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.677576][ T7777] netlink_deliver_tap+0x19d/0x1b0 [ 109.682715][ T7777] netlink_sendskb+0x68/0x140 [ 109.687420][ T7777] netlink_unicast+0x39d/0x990 [ 109.692194][ T7777] ? __pfx_netlink_unicast+0x10/0x10 [ 109.697488][ T7777] netlink_rcv_skb+0x262/0x430 [ 109.702252][ T7777] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 109.707715][ T7777] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 109.713020][ T7777] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.718219][ T7777] netlink_unicast+0x7f6/0x990 [ 109.722988][ T7777] ? __pfx_netlink_unicast+0x10/0x10 [ 109.728274][ T7777] ? __virt_addr_valid+0x183/0x530 [ 109.733387][ T7777] ? __check_object_size+0x48e/0x900 [ 109.738684][ T7777] netlink_sendmsg+0x8e4/0xcb0 [ 109.743451][ T7777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.748740][ T7777] ? aa_sock_msg_perm+0x91/0x160 [ 109.753763][ T7777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.759041][ T7777] __sock_sendmsg+0x221/0x270 [ 109.763718][ T7777] ____sys_sendmsg+0x52a/0x7e0 [ 109.768575][ T7777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 109.773855][ T7777] ? __fget_files+0x2a/0x410 [ 109.778442][ T7777] ? __fget_files+0x2a/0x410 [ 109.783030][ T7777] __sys_sendmsg+0x269/0x350 [ 109.787615][ T7777] ? __pfx_lock_release+0x10/0x10 [ 109.792640][ T7777] ? __pfx___sys_sendmsg+0x10/0x10 [ 109.797777][ T7777] ? __pfx_vfs_write+0x10/0x10 [ 109.802572][ T7777] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.808897][ T7777] ? do_syscall_64+0x100/0x230 [ 109.813665][ T7777] ? do_syscall_64+0xb6/0x230 [ 109.818429][ T7777] do_syscall_64+0xf3/0x230 [ 109.822927][ T7777] ? clear_bhb_loop+0x35/0x90 [ 109.827605][ T7777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.833496][ T7777] RIP: 0033:0x7f6d8777ff19 [ 109.837907][ T7777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.857510][ T7777] RSP: 002b:00007f6d8863c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.866006][ T7777] RAX: ffffffffffffffda RBX: 00007f6d87945fa0 RCX: 00007f6d8777ff19 [ 109.873968][ T7777] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 109.881930][ T7777] RBP: 00007f6d8863c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.889899][ T7777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.897863][ T7777] R13: 0000000000000000 R14: 00007f6d87945fa0 R15: 00007ffd6cbdb558 [ 109.905853][ T7777] </TASK> [ 109.912331][ T35] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 110.020286][ T7787] netlink: 'syz.1.582': attribute type 4 has an invalid length. [ 110.226589][ T7800] nbd: socks must be embedded in a SOCK_ITEM attr [ 110.491763][ T7820] tipc: Enabling <eth:lo> not permitted [ 110.498065][ T7820] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media [ 110.506944][ T7821] FAULT_INJECTION: forcing a failure. [ 110.506944][ T7821] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.522935][ T7821] CPU: 1 UID: 0 PID: 7821 Comm: syz.2.593 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 110.533757][ T7821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 110.543846][ T7821] Call Trace: [ 110.547237][ T7821] <TASK> [ 110.550198][ T7821] dump_stack_lvl+0x241/0x360 [ 110.554916][ T7821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.561490][ T7821] ? __pfx__printk+0x10/0x10 [ 110.566298][ T7821] ? snprintf+0xda/0x120 [ 110.570572][ T7821] should_fail_ex+0x3b0/0x4e0 [ 110.575303][ T7821] _copy_to_user+0x31/0xb0 [ 110.579764][ T7821] simple_read_from_buffer+0xca/0x150 [ 110.585179][ T7821] proc_fail_nth_read+0x1e9/0x250 [ 110.590230][ T7821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.595790][ T7821] ? rw_verify_area+0x55e/0x6f0 [ 110.600675][ T7821] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.606360][ T7821] vfs_read+0x1fc/0xb70 [ 110.610545][ T7821] ? __pfx___mutex_lock+0x10/0x10 [ 110.615599][ T7821] ? __pfx_vfs_read+0x10/0x10 [ 110.620312][ T7821] ? __fget_files+0x2a/0x410 [ 110.624936][ T7821] ? __fget_files+0x395/0x410 [ 110.629831][ T7821] ? __fget_files+0x2a/0x410 [ 110.635021][ T7821] ksys_read+0x18f/0x2b0 [ 110.639386][ T7821] ? __pfx_ksys_read+0x10/0x10 [ 110.644184][ T7821] ? do_syscall_64+0x100/0x230 [ 110.648985][ T7821] ? do_syscall_64+0xb6/0x230 [ 110.653951][ T7821] do_syscall_64+0xf3/0x230 [ 110.658481][ T7821] ? clear_bhb_loop+0x35/0x90 [ 110.663179][ T7821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.669087][ T7821] RIP: 0033:0x7f6d8777e92c [ 110.673534][ T7821] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.693276][ T7821] RSP: 002b:00007f6d8863c050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.701817][ T7821] RAX: ffffffffffffffda RBX: 00007f6d87945fa0 RCX: 00007f6d8777e92c [ 110.709821][ T7821] RDX: 000000000000000f RSI: 00007f6d8863c0b0 RDI: 0000000000000006 [ 110.717825][ T7821] RBP: 00007f6d8863c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.725828][ T7821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 110.733826][ T7821] R13: 0000000000000000 R14: 00007f6d87945fa0 R15: 00007ffd6cbdb558 [ 110.741841][ T7821] </TASK> [ 110.832776][ T7829] netlink: 'syz.3.596': attribute type 21 has an invalid length. [ 110.857668][ T7830] x_tables: duplicate entry at hook 2 [ 110.863527][ T7829] netlink: 156 bytes leftover after parsing attributes in process `syz.3.596'. [ 111.050461][ T7843] netlink: 'syz.1.601': attribute type 1 has an invalid length. [ 111.064552][ T7832] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 111.154067][ T7848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.603'. [ 111.200162][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 112.319740][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 112.340847][ T7909] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media [ 112.370956][ T7909] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 112.684340][ T7925] netlink: zone id is out of range [ 112.704979][ T7925] netlink: zone id is out of range [ 112.722413][ T7925] netlink: zone id is out of range [ 112.758139][ T7925] netlink: zone id is out of range [ 112.774174][ T7925] netlink: zone id is out of range [ 112.794720][ T7925] netlink: zone id is out of range [ 112.823101][ T7925] netlink: zone id is out of range [ 112.829625][ T7925] netlink: zone id is out of range [ 112.852101][ T7925] netlink: zone id is out of range [ 112.862352][ T7925] netlink: zone id is out of range [ 112.895054][ T7929] netlink: 'syz.0.631': attribute type 4 has an invalid length. [ 112.925919][ T7929] __nla_validate_parse: 6 callbacks suppressed [ 112.925940][ T7929] netlink: 152 bytes leftover after parsing attributes in process `syz.0.631'. [ 113.059479][ T7942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 113.077051][ T7942] netlink: 132 bytes leftover after parsing attributes in process `syz.4.636'. [ 113.266756][ T7952] netlink: 220 bytes leftover after parsing attributes in process `syz.3.638'. [ 113.456273][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 113.612080][ T7970] xt_CT: No such helper "snmp" [ 113.631377][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.644'. [ 113.644013][ T7973] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 113.659799][ T7973] netlink: 'syz.3.644': attribute type 14 has an invalid length. [ 113.668987][ T7973] netlink: 'syz.3.644': attribute type 13 has an invalid length. [ 113.684556][ T7974] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 114.038375][ T7986] netlink: 60 bytes leftover after parsing attributes in process `syz.1.646'. [ 114.326523][ T7995] netlink: 220 bytes leftover after parsing attributes in process `syz.1.650'. [ 114.578734][ T62] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 114.594950][ T8010] netlink: 11 bytes leftover after parsing attributes in process `syz.0.656'. [ 114.604068][ T8010] netlink: 11 bytes leftover after parsing attributes in process `syz.0.656'. [ 114.851968][ T8027] FAULT_INJECTION: forcing a failure. [ 114.851968][ T8027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.877151][ T8027] CPU: 1 UID: 0 PID: 8027 Comm: syz.0.660 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 114.887803][ T8027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 114.897888][ T8027] Call Trace: [ 114.901191][ T8027] <TASK> [ 114.904137][ T8027] dump_stack_lvl+0x241/0x360 [ 114.908871][ T8027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.914100][ T8027] ? __pfx__printk+0x10/0x10 [ 114.918727][ T8027] ? snprintf+0xda/0x120 [ 114.923014][ T8027] should_fail_ex+0x3b0/0x4e0 [ 114.927726][ T8027] _copy_to_user+0x31/0xb0 [ 114.932179][ T8027] simple_read_from_buffer+0xca/0x150 [ 114.937595][ T8027] proc_fail_nth_read+0x1e9/0x250 [ 114.942661][ T8027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.948241][ T8027] ? rw_verify_area+0x55e/0x6f0 [ 114.953118][ T8027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 114.958868][ T8027] vfs_read+0x1fc/0xb70 [ 114.963035][ T8027] ? __pfx___mutex_lock+0x10/0x10 [ 114.968064][ T8027] ? __pfx_vfs_read+0x10/0x10 [ 114.972771][ T8027] ? __fget_files+0x2a/0x410 [ 114.977361][ T8027] ? __fget_files+0x395/0x410 [ 114.982054][ T8027] ? __fget_files+0x2a/0x410 [ 114.986676][ T8027] ksys_read+0x18f/0x2b0 [ 114.990990][ T8027] ? __pfx_ksys_read+0x10/0x10 [ 114.995774][ T8027] ? do_syscall_64+0x100/0x230 [ 115.000561][ T8027] ? do_syscall_64+0xb6/0x230 [ 115.005254][ T8027] do_syscall_64+0xf3/0x230 [ 115.009768][ T8027] ? clear_bhb_loop+0x35/0x90 [ 115.014455][ T8027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.020359][ T8027] RIP: 0033:0x7f42dc37e92c [ 115.024774][ T8027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 115.044387][ T8027] RSP: 002b:00007f42dd1a4050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.052806][ T8027] RAX: ffffffffffffffda RBX: 00007f42dc545fa0 RCX: 00007f42dc37e92c [ 115.060778][ T8027] RDX: 000000000000000f RSI: 00007f42dd1a40b0 RDI: 0000000000000003 [ 115.068745][ T8027] RBP: 00007f42dd1a40a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.076710][ T8027] R10: 00000000000400c4 R11: 0000000000000246 R12: 0000000000000001 [ 115.084678][ T8027] R13: 0000000000000000 R14: 00007f42dc545fa0 R15: 00007ffcf3b13828 [ 115.092662][ T8027] </TASK> [ 115.295869][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 115.793468][ T8065] netlink: 'syz.0.673': attribute type 11 has an invalid length. [ 115.803684][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 116.187748][ T8078] vlan3: entered allmulticast mode [ 116.465162][ T8095] 0����FN�: renamed from bond_slave_0 (while UP) [ 116.482785][ T8095] 0����FN�: entered allmulticast mode [ 116.858034][ T8114] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 116.947271][ T2862] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 117.545229][ T8155] netlink: 'syz.4.706': attribute type 75 has an invalid length. [ 118.077521][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 118.122833][ T8187] __nla_validate_parse: 16 callbacks suppressed [ 118.122854][ T8187] netlink: 2460 bytes leftover after parsing attributes in process `syz.1.718'. [ 118.174358][ T8187] syzkaller0: entered allmulticast mode [ 118.627096][ T8210] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.633173][ T8213] net_ratelimit: 21 callbacks suppressed [ 118.633197][ T8213] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.634495][ T8210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.669918][ T8208] vlan0: entered allmulticast mode [ 118.679830][ T8217] netlink: 248 bytes leftover after parsing attributes in process `syz.2.730'. [ 118.901306][ T8229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 118.951422][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.732'. [ 119.238904][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 119.605867][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 120.254209][ T8313] netlink: 'syz.2.758': attribute type 21 has an invalid length. [ 120.298665][ T8313] netlink: 128 bytes leftover after parsing attributes in process `syz.2.758'. [ 120.327452][ T8313] netlink: 3 bytes leftover after parsing attributes in process `syz.2.758'. [ 120.353180][ T8313] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.397183][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 120.707678][ T8343] netlink: 'syz.2.763': attribute type 11 has an invalid length. [ 120.724624][ T8343] netlink: 224 bytes leftover after parsing attributes in process `syz.2.763'. [ 120.973171][ T8354] openvswitch: netlink: Flow actions attr not present in new flow. [ 121.013775][ T8354] vxcan0: entered allmulticast mode [ 121.033404][ T8354] vxcan0: left allmulticast mode [ 121.268440][ T8373] delete_channel: no stack [ 121.275143][ T8372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.770'. [ 121.286752][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.769'. [ 121.313823][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.770'. [ 121.338846][ T8372] netlink: 'syz.1.770': attribute type 15 has an invalid length. [ 121.556430][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.577999][ T8390] pim6reg: entered allmulticast mode [ 121.593264][ T8394] pim6reg: left allmulticast mode [ 122.334737][ T8427] syzkaller1: entered promiscuous mode [ 122.340501][ T8427] syzkaller1: entered allmulticast mode [ 122.708764][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 122.789147][ T8467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.092066][ T8485] geneve2: entered promiscuous mode [ 123.392727][ T8500] __nla_validate_parse: 9 callbacks suppressed [ 123.392745][ T8500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.815'. [ 123.411411][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.815'. [ 123.420352][ T8500] netlink: 12 bytes leftover after parsing attributes in process `syz.4.815'. [ 123.828199][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 123.937711][ T8528] netlink: 220 bytes leftover after parsing attributes in process `syz.4.827'. [ 124.385817][ T8550] netlink: 6 bytes leftover after parsing attributes in process `syz.0.835'. [ 124.393381][ T8553] FAULT_INJECTION: forcing a failure. [ 124.393381][ T8553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.417446][ T8553] CPU: 1 UID: 0 PID: 8553 Comm: syz.3.837 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 124.418565][ T8550] bridge: RTM_NEWNEIGH with invalid ether address [ 124.428150][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 124.428170][ T8553] Call Trace: [ 124.428178][ T8553] <TASK> [ 124.428186][ T8553] dump_stack_lvl+0x241/0x360 [ 124.428217][ T8553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.428238][ T8553] ? __pfx__printk+0x10/0x10 [ 124.465489][ T8553] ? __pfx_lock_release+0x10/0x10 [ 124.470551][ T8553] should_fail_ex+0x3b0/0x4e0 [ 124.475264][ T8553] _copy_from_user+0x2f/0xc0 [ 124.479886][ T8553] copy_msghdr_from_user+0xae/0x680 [ 124.485135][ T8553] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 124.491054][ T8553] ? __fget_files+0x2a/0x410 [ 124.495667][ T8553] ? __fget_files+0x2a/0x410 [ 124.500283][ T8553] __sys_sendmmsg+0x32b/0x720 [ 124.504983][ T8553] ? __pfx___sys_sendmmsg+0x10/0x10 [ 124.510218][ T8553] ? __pfx_lock_release+0x10/0x10 [ 124.515311][ T8553] ? kstrtouint_from_user+0x128/0x190 [ 124.520725][ T8553] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 124.526641][ T8553] ? ksys_write+0x22a/0x2b0 [ 124.531169][ T8553] ? __pfx_lock_release+0x10/0x10 [ 124.536225][ T8553] ? vfs_write+0x730/0xd30 [ 124.540675][ T8553] ? __mutex_unlock_slowpath+0x21e/0x790 [ 124.546356][ T8553] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.552359][ T8553] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.558711][ T8553] ? do_syscall_64+0x100/0x230 [ 124.563502][ T8553] __x64_sys_sendmmsg+0xa0/0xb0 [ 124.568385][ T8553] do_syscall_64+0xf3/0x230 [ 124.572914][ T8553] ? clear_bhb_loop+0x35/0x90 [ 124.577621][ T8553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.583541][ T8553] RIP: 0033:0x7f3d2477ff19 [ 124.587974][ T8553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.607605][ T8553] RSP: 002b:00007f3d25510058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 124.616065][ T8553] RAX: ffffffffffffffda RBX: 00007f3d24945fa0 RCX: 00007f3d2477ff19 [ 124.624064][ T8553] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 124.632061][ T8553] RBP: 00007f3d255100a0 R08: 0000000000000000 R09: 0000000000000000 [ 124.640054][ T8553] R10: 00000000000400c4 R11: 0000000000000246 R12: 0000000000000001 [ 124.648052][ T8553] R13: 0000000000000000 R14: 00007f3d24945fa0 R15: 00007ffd8c8cd6a8 [ 124.655824][ T8562] netlink: 76 bytes leftover after parsing attributes in process `syz.2.839'. [ 124.656036][ T8553] </TASK> [ 124.678513][ T8563] netlink: 220 bytes leftover after parsing attributes in process `syz.1.838'. [ 125.159292][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.196070][ T8590] netlink: 172 bytes leftover after parsing attributes in process `syz.0.853'. [ 125.361520][ T8595] netlink: 220 bytes leftover after parsing attributes in process `syz.4.854'. [ 125.394395][ T8599] xt_l2tp: invalid flags combination: c [ 125.522989][ T8605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.859'. [ 125.617863][ T8609] netlink: 'syz.0.859': attribute type 2 has an invalid length. [ 125.642314][ T8609] netlink: 'syz.0.859': attribute type 2 has an invalid length. [ 125.672331][ T8609] netlink: 'syz.0.859': attribute type 3 has an invalid length. [ 126.015990][ T8633] netlink: 'syz.2.868': attribute type 11 has an invalid length. [ 126.394266][ T5929] hid (null): unknown global tag 0xd [ 126.427332][ T3504] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 126.435406][ T5929] hid-generic 0005:0003:0080.0001: unknown main item tag 0x0 [ 126.473717][ T5929] hid-generic 0005:0003:0080.0001: unexpected long global item [ 126.513948][ T5929] hid-generic 0005:0003:0080.0001: probe with driver hid-generic failed with error -22 [ 126.645283][ T8665] syzkaller0: entered promiscuous mode [ 126.654283][ T8665] syzkaller0: entered allmulticast mode [ 126.688288][ T8670] netlink: 'syz.1.883': attribute type 11 has an invalid length. [ 127.567455][ T2862] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 128.195075][ T8679] bond0: option resend_igmp: invalid value (7540) [ 128.195357][ T2862] bond0: (slave bond_slave_0): interface is now down [ 128.204752][ T8679] bond0: option resend_igmp: allowed values 0 - 255 [ 128.209225][ T2862] bond0: (slave bond_slave_1): interface is now down [ 128.223232][ T2862] bond0: (slave wlan1): interface is now down [ 128.417413][ T3565] bond0: (slave bond_slave_0): interface is now down [ 128.424157][ T3565] bond0: (slave bond_slave_1): interface is now down [ 128.451046][ T3565] bond0: (slave wlan1): interface is now down [ 128.479137][ T3565] bond0: now running without any active interface! [ 128.705172][ T8712] __nla_validate_parse: 9 callbacks suppressed [ 128.705191][ T8712] netlink: 48 bytes leftover after parsing attributes in process `syz.4.898'. [ 128.727725][ T3504] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 129.025178][ T8730] syzkaller0: entered promiscuous mode [ 129.049870][ T8730] syzkaller0: entered allmulticast mode [ 129.089520][ T8737] netlink: 'syz.3.906': attribute type 10 has an invalid length. [ 129.133273][ T8739] netlink: 'syz.1.907': attribute type 1 has an invalid length. [ 129.190933][ T8737] bridge0: port 3(wlan1) entered blocking state [ 129.209228][ T8737] bridge0: port 3(wlan1) entered disabled state [ 129.217142][ T8737] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 129.236571][ T8737] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 129.896749][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 130.778881][ T8742] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 130.789280][ T8742] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 130.800677][ T8742] bond1: (slave ipip0): making interface the new active one [ 130.808671][ T8742] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 130.853459][ T8750] dccp_close: ABORT with 32 bytes unread [ 131.036151][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 131.101831][ T8774] netlink: 'syz.1.915': attribute type 10 has an invalid length. [ 131.202462][ T8776] can: request_module (can-proto-0) failed. [ 131.295276][ T8774] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 131.414546][ T8793] netlink: 'syz.2.922': attribute type 11 has an invalid length. [ 131.422563][ T8793] netlink: 224 bytes leftover after parsing attributes in process `syz.2.922'. [ 131.483595][ T8797] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.613481][ T8802] syzkaller0: entered promiscuous mode [ 131.641380][ T8802] syzkaller0: entered allmulticast mode [ 131.839297][ T8815] netlink: 'syz.3.928': attribute type 10 has an invalid length. [ 132.101741][ T8826] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 132.246055][ T3504] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 132.305485][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 133.050599][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.058197][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.375107][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 133.488816][ T8815] syz_tun: entered promiscuous mode [ 133.994793][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.941'. [ 134.038354][ T8862] netlink: 'syz.2.944': attribute type 11 has an invalid length. [ 134.066368][ T8862] netlink: 224 bytes leftover after parsing attributes in process `syz.2.944'. [ 134.171317][ T8867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.946'. [ 134.280912][ T8867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.346559][ T8872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 134.362285][ T8872] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 134.409948][ T8872] bond2: (slave vcan1): Error -95 calling set_mac_address [ 134.497075][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 134.670106][ T8886] netlink: 252 bytes leftover after parsing attributes in process `syz.2.950'. [ 134.695088][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.708665][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.097716][ T8893] syzkaller0: entered promiscuous mode [ 135.108370][ T8893] syzkaller0: entered allmulticast mode [ 135.374241][ T8931] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 135.650833][ T8945] netlink: 'syz.1.965': attribute type 11 has an invalid length. [ 135.658872][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 135.665911][ T8945] netlink: 224 bytes leftover after parsing attributes in process `syz.1.965'. [ 135.980584][ T8958] FAULT_INJECTION: forcing a failure. [ 135.980584][ T8958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.005509][ T8958] CPU: 0 UID: 0 PID: 8958 Comm: syz.1.969 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 136.016157][ T8958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 136.026217][ T8958] Call Trace: [ 136.029492][ T8958] <TASK> [ 136.032427][ T8958] dump_stack_lvl+0x241/0x360 [ 136.037122][ T8958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.042329][ T8958] ? __pfx__printk+0x10/0x10 [ 136.046945][ T8958] ? snprintf+0xda/0x120 [ 136.051217][ T8958] should_fail_ex+0x3b0/0x4e0 [ 136.055900][ T8958] _copy_to_user+0x31/0xb0 [ 136.060326][ T8958] simple_read_from_buffer+0xca/0x150 [ 136.065713][ T8958] proc_fail_nth_read+0x1e9/0x250 [ 136.070745][ T8958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.076306][ T8958] ? rw_verify_area+0x55e/0x6f0 [ 136.081174][ T8958] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.086764][ T8958] vfs_read+0x1fc/0xb70 [ 136.090927][ T8958] ? __pfx___mutex_lock+0x10/0x10 [ 136.095962][ T8958] ? __pfx_vfs_read+0x10/0x10 [ 136.100742][ T8958] ? l2cap_sock_shutdown+0xc34/0x1020 [ 136.106115][ T8958] ? __fget_files+0x2a/0x410 [ 136.110862][ T8958] ? __fget_files+0x395/0x410 [ 136.115528][ T8958] ? __fget_files+0x2a/0x410 [ 136.120151][ T8958] ksys_read+0x18f/0x2b0 [ 136.124430][ T8958] ? __pfx_ksys_read+0x10/0x10 [ 136.129192][ T8958] ? do_syscall_64+0x100/0x230 [ 136.133956][ T8958] ? do_syscall_64+0xb6/0x230 [ 136.138637][ T8958] do_syscall_64+0xf3/0x230 [ 136.143138][ T8958] ? clear_bhb_loop+0x35/0x90 [ 136.147814][ T8958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.153703][ T8958] RIP: 0033:0x7efcf937e92c [ 136.158121][ T8958] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 136.177734][ T8958] RSP: 002b:00007efcf71f6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 136.186162][ T8958] RAX: ffffffffffffffda RBX: 00007efcf9546080 RCX: 00007efcf937e92c [ 136.194147][ T8958] RDX: 000000000000000f RSI: 00007efcf71f60b0 RDI: 0000000000000003 [ 136.202117][ T8958] RBP: 00007efcf71f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 136.210106][ T8958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.218608][ T8958] R13: 0000000000000000 R14: 00007efcf9546080 R15: 00007ffe592387b8 [ 136.226598][ T8958] </TASK> [ 136.898528][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 137.456883][ T8971] netlink: 'syz.4.974': attribute type 33 has an invalid length. [ 137.560203][ T8983] netlink: 'syz.2.977': attribute type 11 has an invalid length. [ 137.568378][ T8983] netlink: 224 bytes leftover after parsing attributes in process `syz.2.977'. [ 137.840529][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 138.078201][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 138.119008][ T9012] veth0_vlan: left promiscuous mode [ 138.131426][ T9012] veth0_vlan: entered promiscuous mode [ 138.456472][ T9027] netlink: 'syz.0.988': attribute type 11 has an invalid length. [ 138.486394][ T9027] netlink: 224 bytes leftover after parsing attributes in process `syz.0.988'. [ 138.500869][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 138.515920][ T9031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.990'. [ 139.158117][ T9055] bond0: option resend_igmp: invalid value (7540) [ 139.166465][ T204] bond0: (slave 00����FN�): interface is now down [ 139.172349][ T9057] __nla_validate_parse: 1 callbacks suppressed [ 139.172438][ T9057] netlink: 272 bytes leftover after parsing attributes in process `syz.1.998'. [ 139.173433][ T204] bond0: (slave bond_slave_1): interface is now down [ 139.184215][ T9055] bond0: option resend_igmp: allowed values 0 - 255 [ 139.224552][ T9062] netlink: 'syz.1.998': attribute type 1 has an invalid length. [ 139.277035][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 139.299257][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.1.998'. [ 139.387771][ T12] bond0: (slave 00����FN�): interface is now down [ 139.403367][ T12] bond0: (slave bond_slave_1): interface is now down [ 139.413294][ T9073] netlink: 'syz.4.1003': attribute type 11 has an invalid length. [ 139.422742][ T9073] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1003'. [ 139.565085][ T9064] team0 (unregistering): Port device team_slave_0 removed [ 139.584564][ T9064] team0 (unregistering): Port device team_slave_1 removed [ 139.607130][ T12] bond0: (slave 00����FN�): interface is now down [ 139.619401][ T12] bond0: (slave bond_slave_1): interface is now down [ 139.781876][ T9085] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 139.795590][ T9085] netlink: 'syz.0.1008': attribute type 10 has an invalid length. [ 139.797008][ T9084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1006'. [ 139.820365][ T3445] bond0: (slave 00����FN�): interface is now down [ 139.829895][ T9085] veth1_macvtap: left promiscuous mode [ 139.837415][ T3445] bond0: (slave bond_slave_1): interface is now down [ 139.992474][ T9095] x_tables: duplicate underflow at hook 1 [ 140.046030][ T3565] bond0: (slave 00����FN�): interface is now down [ 140.054989][ T3565] bond0: (slave bond_slave_1): interface is now down [ 140.114646][ T3565] bond0: now running without any active interface! [ 140.189727][ T9106] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1014'. [ 140.294722][ T9111] x_tables: duplicate underflow at hook 2 [ 140.426447][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 140.587047][ T9124] netlink: 'syz.1.1021': attribute type 39 has an invalid length. [ 140.757393][ T9129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1022'. [ 140.984433][ T9141] netlink: 'syz.3.1027': attribute type 7 has an invalid length. [ 141.107004][ T9146] x_tables: duplicate underflow at hook 2 [ 141.135936][ T9149] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20002 [ 141.165439][ T9148] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20002 [ 141.191838][ T9148] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1029'. [ 141.215792][ T9148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1029'. [ 141.256918][ T9148] gretap1: entered promiscuous mode [ 141.262332][ T9155] netlink: 'syz.3.1033': attribute type 39 has an invalid length. [ 141.262684][ T9148] gretap1: entered allmulticast mode [ 141.453652][ T9162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1036'. [ 141.508147][ T9166] infiniband syz2: set active [ 141.514181][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1035'. [ 141.547752][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 141.556213][ T9166] infiniband syz2: set active [ 141.557503][ T9167] netlink: 'syz.2.1037': attribute type 10 has an invalid length. [ 141.562784][ T9166] infiniband syz2: set active [ 141.643909][ T9162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.747599][ T9167] macvlan0: entered promiscuous mode [ 141.753380][ T9167] macvlan0: entered allmulticast mode [ 141.770490][ T9167] veth1_vlan: entered allmulticast mode [ 141.801825][ T9167] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 142.058835][ T52] bond0: (slave macvlan0): interface is now down [ 142.099689][ T52] bond0: now running without any active interface! [ 142.391292][ T9203] netlink: 'syz.0.1046': attribute type 39 has an invalid length. [ 142.497168][ T9208] pim6reg1: entered promiscuous mode [ 142.502663][ T9208] pim6reg1: entered allmulticast mode [ 142.625234][ T9214] xt_cgroup: invalid path, errno=-2 [ 142.675815][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 143.270503][ T9234] tipc: Started in network mode [ 143.318454][ T9234] tipc: Node identity ac14140f, cluster identity 4711 [ 143.346276][ T9234] tipc: New replicast peer: 255.255.255.255 [ 143.353261][ T9234] tipc: Enabled bearer <udp:syz2>, priority 10 [ 143.463607][ T9239] raw_sendmsg: syz.4.1065 forgot to set AF_INET. Fix it! [ 143.609922][ T9249] syz.1.1069[9249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.610016][ T9249] syz.1.1069[9249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.652877][ T9251] bond2: entered promiscuous mode [ 143.683117][ T9249] syz.1.1069[9249] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.685392][ T9251] bond2: entered allmulticast mode [ 143.709681][ T9251] 8021q: adding VLAN 0 to HW filter on device bond2 [ 143.825480][ T2862] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 144.167714][ T9251] bond2 (unregistering): Released all slaves [ 144.474853][ T8] tipc: Node number set to 2886997007 [ 144.482558][ T9275] No such timeout policy "syz0" [ 144.998783][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 145.059583][ T9299] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 145.069650][ T9297] IPVS: stopping master sync thread 9299 ... [ 145.290178][ T9305] __nla_validate_parse: 3 callbacks suppressed [ 145.290198][ T9305] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1093'. [ 145.342065][ T9305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1093'. [ 145.499343][ T9316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.649214][ T9316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.788933][ T9316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.904084][ T9316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.964794][ T9339] netlink: 'syz.2.1109': attribute type 13 has an invalid length. [ 145.978837][ T9339] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1109'. [ 146.038066][ T9339] syz_tun: refused to change device tx_queue_len [ 146.044446][ T9339] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 146.091652][ T9316] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.151113][ T9316] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.166916][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 146.202500][ T9316] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.216960][ T9344] ipt_rpfilter: unknown options [ 146.273208][ T9316] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.373497][ T9348] bond2: entered promiscuous mode [ 146.400552][ T9348] bond2: entered allmulticast mode [ 146.430980][ T9348] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.509050][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1118'. [ 146.752832][ T9348] bond2 (unregistering): Released all slaves [ 146.793185][ T9359] netlink: 'syz.2.1116': attribute type 21 has an invalid length. [ 146.803257][ T9359] netlink: 'syz.2.1116': attribute type 20 has an invalid length. [ 146.822790][ T9359] IPv6: NLM_F_CREATE should be specified when creating new route [ 146.859317][ T9365] netlink: 'syz.3.1121': attribute type 3 has an invalid length. [ 146.922032][ T9367] team0: Device ipvlan0 failed to register rx_handler [ 147.025035][ T9373] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1125'. [ 147.089347][ T9372] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1124'. [ 147.114008][ T9372] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1124'. [ 147.149033][ T9375] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 147.166062][ T9372] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1124'. [ 147.196253][ T9379] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1128'. [ 147.303085][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 147.520041][ T9393] netlink: 'syz.4.1134': attribute type 16 has an invalid length. [ 147.551671][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1135'. [ 147.571677][ T9393] netlink: 'syz.4.1134': attribute type 3 has an invalid length. [ 147.604588][ T9393] netlink: 'syz.4.1134': attribute type 1 has an invalid length. [ 147.939781][ T9412] syz.0.1144[9412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.939893][ T9412] syz.0.1144[9412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.981883][ T9412] syz.0.1144[9412] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.034369][ T9412] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 148.467627][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.657241][ T9455] vxcan1: tx drop: invalid da for name 0x0000000000000002 [ 148.913168][ T9467] rdma_op ffff88802512a1f0 conn xmit_rdma 0000000000000000 [ 149.077138][ T9475] Driver unsupported XDP return value 0 on prog (id 256) dev N/A, expect packet loss! [ 149.140856][ T9477] bridge0: entered promiscuous mode [ 149.152983][ T9477] macsec1: entered promiscuous mode [ 149.181314][ T9477] bridge0: left promiscuous mode [ 149.563449][ T9498] syz.2.1179[9498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.563538][ T9498] syz.2.1179[9498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.581779][ T9498] syz.2.1179[9498] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.596293][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.198930][ T9516] syz_tun: entered promiscuous mode [ 150.243301][ T9516] syz_tun: left promiscuous mode [ 150.539182][ T9522] syzkaller0: entered promiscuous mode [ 150.576231][ T9522] syzkaller0: entered allmulticast mode [ 150.745877][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 150.780665][ T9537] __nla_validate_parse: 7 callbacks suppressed [ 150.780688][ T9537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1196'. [ 151.846183][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 151.901248][ T9565] syz.2.1209[9565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.901345][ T9565] syz.2.1209[9565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.920290][ T9565] syz.2.1209[9565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.933998][ T9565] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1209'. [ 151.955221][ T9565] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1209'. [ 151.967930][ T9565] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1209'. [ 152.959102][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 153.483658][ T9590] vlan0: entered promiscuous mode [ 153.523426][ T29] audit: type=1107 audit(1733799107.361:2): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 153.620228][ T9590] team0: Port device vlan0 added [ 153.716554][ T9602] IPv6: Can't replace route, no match found [ 153.796567][ T9605] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1229'. [ 154.105187][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 154.729235][ T9644] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1246'. [ 154.742828][ T9644] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1246'. [ 154.781534][ T9644] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1246'. [ 154.826660][ T9646] lo speed is unknown, defaulting to 1000 [ 154.832838][ T9646] lo speed is unknown, defaulting to 1000 [ 154.906455][ T9646] lo speed is unknown, defaulting to 1000 [ 154.913895][ T9646] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 155.033101][ T9646] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 155.128634][ T9646] lo speed is unknown, defaulting to 1000 [ 155.170374][ T9646] lo speed is unknown, defaulting to 1000 [ 155.193509][ T9646] lo speed is unknown, defaulting to 1000 [ 155.227430][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 155.237671][ T9646] lo speed is unknown, defaulting to 1000 [ 155.245832][ T9658] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1253'. [ 155.246806][ T9646] lo speed is unknown, defaulting to 1000 [ 155.274473][ T9658] netlink: 264 bytes leftover after parsing attributes in process `syz.4.1253'. [ 155.331556][ T9660] bond0: option resend_igmp: invalid value (7540) [ 155.352657][ T9660] bond0: option resend_igmp: allowed values 0 - 255 [ 155.359911][ T9662] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 155.370599][ T9662] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 156.085883][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.200187][ T9705] netlink: 'syz.4.1276': attribute type 3 has an invalid length. [ 156.366506][ T9711] __nla_validate_parse: 2 callbacks suppressed [ 156.366528][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1279'. [ 156.448734][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 156.589450][ T9722] netem: unknown loss type 0 [ 156.595996][ T9722] netem: change failed [ 156.688873][ T9725] netlink: 'syz.1.1287': attribute type 3 has an invalid length. [ 156.811642][ T9733] pim6reg1: entered promiscuous mode [ 156.817196][ T9733] pim6reg1: entered allmulticast mode [ 157.647849][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 157.741631][ T9774] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 158.092244][ T9791] netlink: 'syz.3.1317': attribute type 21 has an invalid length. [ 158.245578][ T9796] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1319'. [ 158.486387][ T9809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1326'. [ 158.587700][ T9813] rdma_op ffff88805bc6c1f0 conn xmit_rdma 0000000000000000 [ 166.156655][ T9817] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1330'. [ 166.434238][ T2862] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 166.752905][ T9830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 166.804176][ T9829] lo speed is unknown, defaulting to 1000 [ 166.941080][ T9840] rdma_op ffff888033e681f0 conn xmit_rdma 0000000000000000 [ 167.730334][ T9870] ������: renamed from vlan1 [ 167.866457][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 168.562668][ T9903] batadv0: entered promiscuous mode [ 168.575252][ T9900] batadv0: left promiscuous mode [ 168.907442][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1370'. [ 168.924092][ T9917] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1372'. [ 168.995897][ T2862] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 169.566768][ T9944] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1385'. [ 169.895349][ T9961] pim6reg1: entered promiscuous mode [ 169.916349][ T9961] pim6reg1: entered allmulticast mode [ 170.145912][ T9974] pim6reg1: entered promiscuous mode [ 170.151268][ T9974] pim6reg1: entered allmulticast mode [ 170.365978][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.545862][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.841408][ T119] IPVS: starting estimator thread 0... [ 171.940235][T10063] bond3: entered promiscuous mode [ 171.945300][T10063] bond3: entered allmulticast mode [ 171.965940][T10059] IPVS: using max 22 ests per chain, 52800 per kthread [ 171.977361][T10063] 8021q: adding VLAN 0 to HW filter on device bond3 [ 172.198742][T10063] bond3 (unregistering): Released all slaves [ 172.608601][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 172.653014][T10094] netlink: 'syz.0.1455': attribute type 13 has an invalid length. [ 172.742899][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.839677][T10103] xt_TPROXY: Can be used only with -p tcp or -p udp [ 172.902296][T10105] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1460'. [ 172.924590][T10094] gretap0: refused to change device tx_queue_len [ 172.941938][T10094] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 173.228840][T10119] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.382498][T10128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1471'. [ 173.683610][T10144] IPv6: NLM_F_CREATE should be specified when creating new route [ 173.694297][T10148] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 173.808464][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1482'. [ 173.978115][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 174.030084][T10167] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1490'. [ 174.176874][T10174] netlink: 'syz.3.1494': attribute type 1 has an invalid length. [ 174.184765][T10174] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1494'. [ 174.365080][T10188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1498'. [ 174.422548][T10190] dccp_invalid_packet: P.Data Offset(172) too large [ 174.846491][T10211] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1511'. [ 174.855478][T10211] 0�X���: renamed from caif0 [ 174.886185][T10211] 0�X���: entered allmulticast mode [ 174.901382][T10211] A link change request failed with some changes committed already. Interface 60�X��� may have been left with an inconsistent configuration, please check. [ 175.054628][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1518'. [ 175.082869][T10224] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1518'. [ 175.108304][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 175.133013][T10232] syz.0.1521[10232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.133137][T10232] syz.0.1521[10232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.151672][T10232] syz.0.1521[10232] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.331024][T10244] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 175.423068][T10246] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.539223][T10252] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.796689][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1535'. [ 176.227947][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.346053][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 177.370361][T10339] gretap1: entered allmulticast mode [ 177.391323][T10339] bridge0: port 3(gretap1) entered blocking state [ 177.414358][T10339] bridge0: port 3(gretap1) entered disabled state [ 177.427245][T10339] gretap1: entered promiscuous mode [ 177.440685][T10339] bridge0: port 3(gretap1) entered blocking state [ 177.447639][T10339] bridge0: port 3(gretap1) entered forwarding state [ 178.084146][T10382] __nla_validate_parse: 5 callbacks suppressed [ 178.084165][T10382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1592'. [ 178.339645][T10391] syzkaller0: entered allmulticast mode [ 178.384173][T10391] syzkaller0 (unregistering): left allmulticast mode [ 178.520404][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 178.649043][T10415] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1607'. [ 178.681132][T10415] netem: unknown loss type 13 [ 178.696888][T10415] netem: change failed [ 178.749090][T10419] atomic_op ffff88807ea6b998 conn xmit_atomic 0000000000000000 [ 178.876424][T10426] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 178.928495][T10424] IPVS: stopping master sync thread 10426 ... [ 179.205181][T10439] netlink: 'syz.1.1617': attribute type 3 has an invalid length. [ 179.379153][T10445] netlink: 'syz.1.1621': attribute type 24 has an invalid length. [ 179.416911][T10445] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 179.424858][T10445] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1621'. [ 179.447110][T10453] vxcan5: entered promiscuous mode [ 179.452479][T10453] vxcan5: entered allmulticast mode [ 179.468403][T10447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1622'. [ 179.547287][T10447] bond2 (unregistering): Released all slaves [ 179.717944][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 179.817283][T10472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 179.832185][T10468] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1633'. [ 179.949139][T10479] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1636'. [ 180.010622][T10483] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1638'. [ 180.870952][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 181.986031][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 182.267895][T10528] tipc: Started in network mode [ 182.272924][T10528] tipc: Node identity 9ee2fa703af, cluster identity 4711 [ 182.280214][T10528] tipc: Enabled bearer <eth:syzkaller0>, priority 7 [ 182.287667][T10528] ������: renamed from syzkaller0 (while UP) [ 182.304726][T10528] tipc: Disabling bearer <eth:syzkaller0> [ 182.456842][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1661'. [ 182.474761][T10537] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 182.486609][T10542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1662'. [ 182.505895][T10537] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 183.138430][ T3565] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 183.444501][T10599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1686'. [ 183.473844][T10603] netlink: 'syz.3.1688': attribute type 16 has an invalid length. [ 183.502905][T10603] netlink: 'syz.3.1688': attribute type 1 has an invalid length. [ 183.553221][T10603] netlink: 64034 bytes leftover after parsing attributes in process `syz.3.1688'. [ 183.941927][T10631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1700'. [ 184.013632][T10633] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 184.267043][ T2862] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 184.576599][ T29] audit: type=1107 audit(1733799138.411:3): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 184.861990][T10689] siw: device registration error -23 [ 184.936996][T10695] [ 184.939353][T10695] ============================= [ 184.944196][T10695] [ BUG: Invalid wait context ] [ 184.949023][T10695] 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 Not tainted [ 184.956127][T10695] ----------------------------- [ 184.960948][T10695] syz.0.1731/10695 is trying to lock: [ 184.966293][T10695] ffff88805a7bfa00 (&trie->lock){..-.}-{3:3}, at: trie_delete_elem+0x96/0x6a0 [ 184.975161][T10695] other info that might help us debug this: [ 184.981025][T10695] context-{5:5} [ 184.984459][T10695] 2 locks held by syz.0.1731/10695: [ 184.989631][T10695] #0: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 184.998925][T10695] #1: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x1fc/0x540 [ 185.008300][T10695] stack backtrace: [ 185.012027][T10695] CPU: 1 UID: 0 PID: 10695 Comm: syz.0.1731 Not tainted 6.13.0-rc1-syzkaller-00197-gb4906787d49b #0 [ 185.022763][T10695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 185.032795][T10695] Call Trace: [ 185.036055][T10695] <TASK> [ 185.038971][T10695] dump_stack_lvl+0x241/0x360 [ 185.043636][T10695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.048813][T10695] ? __pfx__printk+0x10/0x10 [ 185.053404][T10695] __lock_acquire+0x15a8/0x2100 [ 185.058236][T10695] lock_acquire+0x1ed/0x550 [ 185.062717][T10695] ? trie_delete_elem+0x96/0x6a0 [ 185.067634][T10695] ? __pfx_lock_acquire+0x10/0x10 [ 185.072650][T10695] ? __lock_acquire+0x1397/0x2100 [ 185.077659][T10695] _raw_spin_lock_irqsave+0xd5/0x120 [ 185.082940][T10695] ? trie_delete_elem+0x96/0x6a0 [ 185.087858][T10695] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 185.093906][T10695] ? __pfx_lock_acquire+0x10/0x10 [ 185.098936][T10695] trie_delete_elem+0x96/0x6a0 [ 185.103684][T10695] ? __pfx___cant_migrate+0x10/0x10 [ 185.108862][T10695] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 185.114740][T10695] ? bpf_trace_run2+0x1fc/0x540 [ 185.119600][T10695] bpf_prog_d46ba5bef82912c0+0x46/0x4a [ 185.125073][T10695] bpf_trace_run2+0x2ec/0x540 [ 185.129746][T10695] ? __pfx_bpf_trace_run2+0x10/0x10 [ 185.134930][T10695] ? __pfx_debug_object_activate+0x10/0x10 [ 185.140725][T10695] ? __lock_acquire+0x1397/0x2100 [ 185.145736][T10695] enqueue_timer+0x3ce/0x570 [ 185.150335][T10695] __mod_timer+0xa0e/0xeb0 [ 185.154753][T10695] ? __pfx___mod_timer+0x10/0x10 [ 185.159672][T10695] ? __pfx_lock_acquire+0x10/0x10 [ 185.164693][T10695] ? net_generic+0x1f/0x240 [ 185.169281][T10695] ? __pfx_lock_release+0x10/0x10 [ 185.174295][T10695] sk_reset_timer+0x23/0xc0 [ 185.178810][T10695] tipc_sk_finish_conn+0x16b/0x820 [ 185.183951][T10695] tipc_socketpair+0x25c/0x4b0 [ 185.188711][T10695] __sys_socketpair+0x40f/0x720 [ 185.193576][T10695] ? __pfx___sys_socketpair+0x10/0x10 [ 185.198944][T10695] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 185.204943][T10695] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 185.211270][T10695] ? do_syscall_64+0x100/0x230 [ 185.216034][T10695] __x64_sys_socketpair+0x9b/0xb0 [ 185.221053][T10695] do_syscall_64+0xf3/0x230 [ 185.225545][T10695] ? clear_bhb_loop+0x35/0x90 [ 185.230227][T10695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.236122][T10695] RIP: 0033:0x7f42dc37ff19 [ 185.240532][T10695] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.260224][T10695] RSP: 002b:00007f42dd1a4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 185.268625][T10695] RAX: ffffffffffffffda RBX: 00007f42dc545fa0 RCX: 00007f42dc37ff19 [ 185.276576][T10695] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 185.284529][T10695] RBP: 00007f42dc3f3cc8 R08: 0000000000000000 R09: 0000000000000000 [ 185.292477][T10695] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000000 [ 185.300434][T10695] R13: 0000000000000000 R14: 00007f42dc545fa0 R15: 00007ffcf3b13828 [ 185.308393][T10695] </TASK> [ 185.766213][ T2862] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 186.327138][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 186.333200][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 186.335852][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 186.876181][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 187.985905][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 189.096434][ T52] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 190.195860][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 191.325925][ T204] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 192.435993][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 193.556491][ T3445] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 194.487807][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.494549][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.665944][ T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!