last executing test programs: 21.427965515s ago: executing program 4 (id=2210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)='\x00\x00', 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) connect$inet(r1, &(0x7f0000000740)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r3, 0x2000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x5f2bc000) 21.160263478s ago: executing program 4 (id=2214): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x81, @mcast2, 0x1}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000840)="5c00000012006bab9a3fe3d86e170e40f499fbe3ddea763d0e4daa0a046b876c1d0048007ea60864160af36504001a007704c638001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bbaaeff4b7c31ae0cc03808cd9ead7d2a81932302df9bd55e857cab898fef2a2c4bcb800e88e21732bc1cfd7c40d0400", 0x8e}], 0x1, 0x0, 0xfffffffffffffef7, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000ec0)=""/217, 0xd9}, {&(0x7f0000003140)=""/4058, 0xfda}, {&(0x7f0000001200)=""/197, 0xc5}, {0x0}, {&(0x7f0000000500)=""/209, 0xd1}, {&(0x7f0000000000)=""/57, 0x39}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f0000000700)=""/146, 0x92}, {&(0x7f0000000600)=""/234, 0xea}], 0x9}, 0x60) getsockname$packet(r0, 0x0, &(0x7f0000000640)) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @link_local}) socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) recvfrom$l2tp6(r0, 0x0, 0x0, 0x2, &(0x7f00000007c0)={0xa, 0x0, 0x0, @mcast1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x200088c0) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c8, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00'}) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000100), 0x0, 0x2}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x24000800) sendmsg$NL80211_CMD_SET_COALESCE(r5, 0x0, 0x0) 20.189757683s ago: executing program 4 (id=2231): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000fdffffff4400000008000300", @ANYRES32=r4, @ANYBLOB="0c00238008061400d4000000"], 0x28}}, 0x80) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x7e}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xb00}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x34}}, 0x100) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f0000000e40)={0xa4, r3, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ce8f84fc925decbd5c68cdd664c3e165dcdf9f148a7a500b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "ddff212435088d91e8fd7564323f673dcfd69e24f22a4898"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000850}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r5, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000680)={&(0x7f0000000340)={0x310, r7, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x34}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x89}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb2c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x122e}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "976ff60dcc27e9c84db5817b80f0c69a584bd1ecaed5f6d53d8194a1"}}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3ff00}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa77}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x73}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6daf9d9a}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x310}, 0x1, 0x0, 0x0, 0x1}, 0x60048080) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r8, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 19.98547458s ago: executing program 4 (id=2237): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e, 0x9000000}, 0x0) 19.461402298s ago: executing program 4 (id=2245): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000100)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="902213f344557ce98959c67274534ec22cd82bc7b0afc8a2d17a353e69b47e6039973f1d35b37b09d16b1b978e8e5d0b1a83cc80ae0462b2ed766644892a9825986ca33497db83a9d6f89088bfd08a712e26a2b7893a99a256b911380cac10c3ae8696f5fc0e101e6c37f4b059493795cadded5f89cb1f127753b0bf0ea5bafc47de4cd3347de9b927ab969190ddc08ef3c6c4de364f71e3a926d26ead2fd259b5aeaa045b9c201f0d24e43ec1edc0b1d2743a2e0a4a818cb9acc0532f7d7ba3931248c04b2bb2d7fd4c2c86858476e8aec25ac8b699f699", 0xd8}], 0x1, &(0x7f0000000580)=[{0x88, 0x104, 0x0, "dce585ddcec8200452cdb1c9ac45ced06757b980e817dfccc7afeea7a62c33beebb33264588d84b9ea94bb7e49f02047db31fb921851ba2100cf7bc8734936d4f9e5d9aab51da3922c1b5ddc9284c6e487f672c36939ef00b01c2b318a5b4411f3feb9669771508fd2acdb79141c27baa19b41"}, {0xd0, 0x1, 0xffffffff, "db4f821d3769f2ee4e4a01c3426674c8e64174b60cc0f30e3709a8a8e4fc7e9dbff40bea9926e2bc9e466d295e543141f0c98436ccd91f843c9627735735ee553cf0ee1449c8fbfb3cf61b09290d42c961ef7318fce77b72c33610d9c084522b1b90d55caa3cfd8c07607c368a259b3a0d145954e6efb454f293d8a4f253976da75ba3ccaa3a5a8284aa7c614b46212757829d9514c22cb17d2ca222a6f961ff6b6ce604cf353f8edf9eff9e91832b2a74b1e7e0bb419a08d2ca"}, {0x48, 0x10a, 0x10000, "9aecf217568b48b7188a11ce3827f33203e73d539b1c544bea8176a6c88161883c3f2739e235166b6277caf2bc73e6cc13f358"}, {0x18, 0x111, 0x4, "b313adf8"}], 0x1b8}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26}}) 8.036477985s ago: executing program 4 (id=2245): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000100)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(camellia)\x00'}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)="902213f344557ce98959c67274534ec22cd82bc7b0afc8a2d17a353e69b47e6039973f1d35b37b09d16b1b978e8e5d0b1a83cc80ae0462b2ed766644892a9825986ca33497db83a9d6f89088bfd08a712e26a2b7893a99a256b911380cac10c3ae8696f5fc0e101e6c37f4b059493795cadded5f89cb1f127753b0bf0ea5bafc47de4cd3347de9b927ab969190ddc08ef3c6c4de364f71e3a926d26ead2fd259b5aeaa045b9c201f0d24e43ec1edc0b1d2743a2e0a4a818cb9acc0532f7d7ba3931248c04b2bb2d7fd4c2c86858476e8aec25ac8b699f699", 0xd8}], 0x1, &(0x7f0000000580)=[{0x88, 0x104, 0x0, "dce585ddcec8200452cdb1c9ac45ced06757b980e817dfccc7afeea7a62c33beebb33264588d84b9ea94bb7e49f02047db31fb921851ba2100cf7bc8734936d4f9e5d9aab51da3922c1b5ddc9284c6e487f672c36939ef00b01c2b318a5b4411f3feb9669771508fd2acdb79141c27baa19b41"}, {0xd0, 0x1, 0xffffffff, "db4f821d3769f2ee4e4a01c3426674c8e64174b60cc0f30e3709a8a8e4fc7e9dbff40bea9926e2bc9e466d295e543141f0c98436ccd91f843c9627735735ee553cf0ee1449c8fbfb3cf61b09290d42c961ef7318fce77b72c33610d9c084522b1b90d55caa3cfd8c07607c368a259b3a0d145954e6efb454f293d8a4f253976da75ba3ccaa3a5a8284aa7c614b46212757829d9514c22cb17d2ca222a6f961ff6b6ce604cf353f8edf9eff9e91832b2a74b1e7e0bb419a08d2ca"}, {0x48, 0x10a, 0x10000, "9aecf217568b48b7188a11ce3827f33203e73d539b1c544bea8176a6c88161883c3f2739e235166b6277caf2bc73e6cc13f358"}, {0x18, 0x111, 0x4, "b313adf8"}], 0x1b8}, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000000)=@ethtool_coalesce={0x26}}) 1.932234695s ago: executing program 2 (id=2409): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x130, 0x32, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2cb4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff5d}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x563}]}, 0x130}}, 0x4880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="340000001400b5952cbc7000ffdbdf250a0080c8", @ANYRES32, @ANYBLOB="140002000000000000000000000000000000000108000900ff"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000440)={r0, 0x4, 0x8, 0x2}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0x8800}, 0x8044) 1.747663393s ago: executing program 2 (id=2412): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x24004840) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe) (async) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0xf, 0x0, 0x0, 0x9, 0x8000, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@mcast1, 0xf, 0x0, 0x0, 0x9, 0x8000, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x37}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4c044}, 0x20000000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r5, 0x4, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x21f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40001) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r1, 0x4, 0x101, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x7e}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20044085}, 0x20040010) vmsplice(r0, &(0x7f0000001780)=[{&(0x7f0000000600)="7546aa16d6211e539478d53bffee7cf65c12873dea090304eaa73ad139ca84d7da514ad79c2044111a60ddf9a8833856c53cb939c6e56940c4e3e5e874664ce0cb46748165c8b647d20722c1367657264fb5de29441aff38e433ce23edf1db38f62fb98277e5b289a2bb551f46d000c2ba8df4079c4120948dbb4183b581998cfda0f3da", 0x84}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="2b5cb017030df3523acbe0380d6a8d15309ae3b5397db477a783e5cfe298f002c4ad669cedd85c0be7ddb1738d17ae7dd94d91849d762f1a1450987b1ba839492a2b5eb6ef3b4061d58cb25e12f5c2f96934eb3b5c9a66bfcf9c81c050ed25d4adc62f48e230", 0x66}, {&(0x7f0000001740)="9a8bf92af03e6f53aecd03cfa8685394e147eba4a8eb77", 0x17}], 0x4, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x7f}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r6, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x1, 0x7f}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001980)={&(0x7f0000001900)={0x5c, r5, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7fff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xb9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3a0f}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x73}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x4800) sendmsg$SEG6_CMD_GET_TUNSRC(r6, &(0x7f0000001b40)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001a40)={0x88, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x800}, @SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x4841}, 0x44000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001bc0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x5c, r8, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x2cc5df62587239cb) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x5c, r8, 0x4, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x9}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x4}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xe}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x2cc5df62587239cb) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x38, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x2}, @val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x6a}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$tipc(0x1e, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000001e40)=0x3, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8042) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001f40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f00)={&(0x7f0000001ec0)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x8042) close(r3) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x2c, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x67}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x80) (async) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r11, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x2c, r1, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x9, 0x67}}}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x80) 1.534073726s ago: executing program 2 (id=2415): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x29, 0x1a, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000000000003900000008000300", @ANYRES32=r1, @ANYBLOB="10005a800c00038005000400c3"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 1.4364605s ago: executing program 1 (id=2416): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000180)=[{0x0}], 0x1}, 0x140) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x2000000, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x44) 1.288372123s ago: executing program 2 (id=2418): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14f500001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a3000000000240004800c000180080001006c6f670014000180090001006d61737100"], 0xd4}}, 0x0) 1.172467399s ago: executing program 3 (id=2419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0xfffffff5, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0xec, 0x14, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_OBJ_USERDATA={0xae, 0x8, "f15b1d87b5d1853c55e6b2d17b1db9aba3ca5ba0c2b7bfcacd790b238e93a6a3f0d0395f35b4c4b4972910aa2ae72ced4e2811dc283c4046dc272ed0d43e82e700eea56544c4915505c0b17e06dd8cebcf3cdfe9cc52ab2c4a4741dce953c3274eb5a0c7a8c8ed9d7fc76f969073458e265bc1e078116c7456ad72c975747658ed37f76daebf688db336cdacbf5f4615c6fb47ec1526a13cc04f1f3b3b0b0079cb926dd7215bb30ff277"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x801, 0x0, 0x0, {0x19e90c48ab8a626c, 0x0, 0x9}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_USERDATA={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELTABLE={0xe4, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x17, 0x6, "72f929d22b219ae71189032ce5228a14b3a6b9"}, @NFTA_TABLE_USERDATA={0x94, 0x6, "ce6bfc76581425eaa9f52108b3928048448942095e562fc85ea8a947a77d5754d427046e3febeb4bac16d806db3e947c6ae661496945ad6872f9f658751e90c3d33f6a238118708dccc20a482246e75ceb7827e5ac3f17ff97e9816e831faa97d898b587415a167cf39ae1756f62f67f92233b54963e2b17be3fe2cf0015598dce610b875222d5aff11992ac560e9401"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2ac}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) 1.171909322s ago: executing program 1 (id=2420): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x10) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB='@\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08074c07784308000100", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0700000000000000df25040000009837987b1a4756051fde752e89de0330987c1c17af75e8eda942"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.168100185s ago: executing program 0 (id=2421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "f8e00311da4fa70a", "8c444834520a1a9b483a16297c4a14b8", "97a7038f", "6415b6cbb4564161"}, 0x28) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000240)="26885e3b477e010d746413f05fa060d3d4e7e85a727e0b4a189eb2745bafb7361d126f86993771e649570852d1a62777e59db8dc1c08d6a1565c448496763c896ef50a4a983d4cec7ba8cd3565d538118476552f1896aa3164ca70361afa54fd7840eb8531713786a0c420b84a3a6ac1", 0x70}, {&(0x7f00000003c0)="3f1fac85415f6946be89d855064508c617e2abc9bf4cdb012945945aed1a7ee0a05a4d467cb5617096db4bf5f343ec3f0944b4287c270f318fd6ce46a8bd97a7d654bf1f7e58aa669c6233e58a62742a205a419af730dd41bb130651e8d2d041e87ee9a8c66c91702541e6fb0d88cb7c94", 0x71}, {&(0x7f0000000540)="1d174a5ff0c5a3b477c1f9f96498ae0684fa188a587f9a919250c999ee2a9af5d9e47a5f8ac22ffd87e6b135b9e58f352339e2bad08fa500eb85fd56", 0x3c}, {&(0x7f0000000440)="4914317123fa3d5cee474e36be6c03ec031a08a3c2669cb01d9024e374baa142b5ebec7748e256ef77c77121ac51eb122ab6b51e4c3f9ccc60481a140bacfe63b2ef06be96490089a103e29babf54e114552a11ca621f0f3ddac77b89a07d718e8e6393fad4be315cb8199d0fa396458460453814fc5716cf67a2d85fb4b73960950c017d9efa57312773a2b66275cadb73fee2a5a8d99845d87d70b4958b5953416c7eb833e0b8748bcb9f44e6322bf00e166c17549cc298fe2d6a27c88b4a75c9267", 0xc3}, {&(0x7f0000000740)="b70f375ac2425f13bfcd5dee09f86bb14c9f10f54025207fc0c28042e4b184e2423061290d7b518884ace6a029f0363679bbf07654183f8256ec9ada334dc56603335e5c486f4c577df640c508c6ab8579e7c3e2e7f7897c24a2fe78d83283a0f9c6338c6cd3f6e8c0b6f960db5cd2b58fd89a450995ac5d913601cebdffb3f77c177e38277a33979a24d650169f9cd12fc97bc83863d16b1a1cf3f778eba586691a36e6ada4516f5535d3b4e77a8148eb03921e474f697ceef035b84bbffc8b664a77a6c5e7d0a40841d761dbfaa8f0ae7c38b709d7667c593d8c3c488dbd988cc38e1d14106f9841fdd513c68568511ca2a9d4732f037d0c475e1b22e5dfa77484d6198fbc91f95c850f8fc05aaf5aa9feb8f4f16918b4d3df4bb6986f94cee4312a736a6b457ac05bbab11f266c97e8931834f94e64d0712c7252319a16771d74c87842d1ace573a609b125923d8b0ab8aa205542d4e405837b3bde921f2b200a7913ac80e6b417197ce3f237bd46d0f64e193ea28cdb78f6d93243962c615b90c420425fec775c302b9ed0edf9e84bf4492558ddc4dd6ac11f969a2bd00df52a06d7b680b10729871fe0fb92f34849d0feaaa04fe6065b41ad1b973e69f90f5c253e7032629333a30f82f7e78c5cd3815f8253c34a83940eff6daadb8349f39117e3ac58e9accffb59325e39809b45047c2824eb28587e7a3d825fa99b33d2b573a30ed8874a8160c8ade19352d521a209d16402529b491c9ce87f66cdc1d1e3291e1c4e17d0feb0bf92b4a7240256bc3d73cb1f017a9188473ef02badb553a28867981c0d64b1d8eee79bfec3a55af3174500f7780978db5732d1a96df59a41126d62b55693b16371843349446bca3000ba39cdffa777985b6194761aff76321f5b958f2a10875e97032379cda51d4c07193982e24363f60a5eeb9554fd1baa519295a43542d3ab87285d45b04af4b80cedcf40fcd6aa28fff8127f33ec0f7c5c6a7e9637a7bd55a2897769f3f9d2aaa12ed41c90f3c93472cc81abde087452b987fd875ae5a86a5f160d46acb3126f5a50467ec303c8c2f2d21e03bfeab57beb2acd765a7e8d512f24fde1f2863664d3baf37755763ab718136cdd1fb81f9949cfb835a75bdc207d77e227567c3e0a9b33f682cb710d8aed08207240b1c5e4da51833bb84277679c0dc3587cc957fd76fc969c9919ab0ff411cd7ba5382a300da60292f0d48f876b178d810416f3533604d77b6a2973fd190af4c818289df4a36a267f47c002314a7b88010e02938f6719aaf9609c3dfab1c99d39f1ea1ae5c44aeae56755ea6da82ff129205eb5c6caa7d469883bc54ee665bb7c71d0546eccb96db5f513ef270bf22fd0c504e35d969a0d0a71af9e9787e51fa4cb4f8a96cbe48ec193ec24f5d242b97b932afdbd781165c164c5a6c801f941de54a1de184710d0f885ed8ae7a3ed64124c08bab3268b79b47cb6c03b6dc66267da02e25ca344ec550b881a49390ffbf93af33a7f1c9d9202b83c69dc8e27536670490d56ee478bdf2f9a6c66bd4b41a10d85b6410dff3dac9336bdb5eafbb75e8c4e7fcaa085d41ee61b7a73bdd6a51f50c7db340172a9552d3af12b70ea7e5b42d6fa1d715253ee4c69da3290ceb218ca6ee5da686f8a27f9d94849703aa635b662a51cf6ff35b75d11752be24dc761df4bde312bc54162efdf3141a079d95e1fbba0c7332d5d2afd3a9e37d319afffe83c00542805866d5c6cac4b89a06949cf3b3702b92b2a381bf90e359aab5fed4ae89b91af04667004f7e22f54bed80e78aed44f4f0db59a0438702ef05e3ff1284959eb061651cdce30158adfb66c98fe5b85171ea422b05c3a0b62c4e52f5660acad848a77607c49d4bc8c16babbda01ae45f3061924ede761a7c9f29c6eff1a83b967a634c54fe3f75d5e39db4f008cc200a16bdb75982a2188ecd9e7dda9e4c3b3538494fc299520d292872ab3c4d870602503b9a751b0095a6ea35311d4d781e0955067d51e5f59f4c83ab141f2c99052c02cebaa426a7140e557339323ff0e5f1c188d9bcfd10921693cafc86d990a7becd72d5732377e669c592dfadd75130ed6cc0aa9c7547038b842c7e2c7288531a3bf4e85ce2d5f9ef6c711a1784c62ca9e1b63258ad458f3c0ff37e550d764ce60dc9aeacec6ef648a5f45e8f86c2d759ef624763ed5c9875693abdbb0c17db726a473cc46e0be58207d0f86329ce2b91bb12baf9360fad19348e389fba6ea4379681939f4686dca8fced0354e04ff6cbe056bdb89b38e29a8c2337ac2a0f89c0078772d4b3c6edf004c9eed9c094776272ce48ff24eea5cf5b23c4eb7acc71f569771ea07b2af6a0ba28323eeb812ef7dc296bc608d19e5e996f6b9821ee5d8cedcdb4704b9cbc0b1147b524e7780d160bf69973d7927262ae00f9220717ed900a1edac81eb4c7ddf3fe1cf1934753e7c5e8182856c29aad786d7883db36f3080291ff9f5302fa3c987f5dfac350d6099134a767ea776a90e316e4658daf27ec19e511b839c4a84d60dc698c59bb695f9261efddaadf730040438a407b40df5a8cc534f737874015a7042aac4ecc1d2df2b2ae029b28d0ae1c0e759556dd4e47247dc63cb8d6f306b3fa8d0d3e4427cf37ecf8a3deb4b9d1e4ea6deaefdd94ebbccba06dfc123bc19070224a30bfae3a217ca44fc7c51f9bfb7b936ecf78f5e94cc4e95ec2c5a4d20dbe293af64594caacef7ed33dc6f3b80c55d5d259cfd06f696e684a3c134e3d78504f6d406d74c7f03a22a2afc162af98d637cde1178213d3b3401c25e01130012bdb877e324d25d949d1641a2bdde0509f3a6a889959a423605d2328fc7974e2a98ab60bf940480e8ff3d584e24f7de7ac8e7a93c88ce8d85bd8ce0f0e85b0142c4914666390e964f3921ed8cbeb3c086d63432cf17a26d267e50345814948932ff15191bc3e3c1b3751ba3e4b12c4422530ad24a1e65922db1f80e895183d1f2625fa6b8387200d66c663823812f2fa325f8a837b2a2588d689d502d50d6fc64369f4adb727745e042f9dba9497a50c4e3b2e521c2208816e31025bbd47276ce3debd3cfb1aa10bf7be2f5e7feee950464dd3999a8d2b5c307ec55a1a7fe0a50fbab622509bc0b62726f3732ebdda50b00c696cda2d7c5f631ee6799db1776977bff8626889f4e21cb2750acbbf7c63c6175653f037b69ce7ea5c9f00cc881882de15ebb78125dd8f2665f4c74b12e45e41bc9459763e15c2f03f6240fd60b5acd175f290ee88df71dfb050816133c10d4e502c43f39af83fbbb0c39099df3a255ef68a80d9400eea903bd5e03eb1b60ba3dc9884b430de0ac6a4cd3877ab43901ff3fe0abb778dca32f9f84325fb43f39ba399836fa1052f2ef0282a8573df63cea945fcdacc8768a434b485d55da34083e5357d11b44992fb67250aba3eb936fa79fa6f3a24bb2f60dc3b2c5b6335d289359a7b324f1ec23467065176a2d3dd538c17b169c50844d45d7a13ec54cb12ea9a93b73c588c66851315aef04e5a72fa4d290b145ee8f3a2d6ab8929ace30ce67f715841c6c9db7b754aaf9dbd2a8d010dabe8bad4961bcb282382c8c8edee6527e5cc16ea9435c9627942f4c37323bb821a191176684875a000d4f08636fd7ac29d74b4b23c2f8df59071c1625fac94cc827979dce4d9a3c5dc9180ea6e649fe78fe424fca06c0db9285f55115b30c1afc5d8dcb2b0c1e04b971ca66f57d21ab3cc7ae383c3568841f87df33a179d07f2173a7cd494a74e07bc13568dd142a6fb9ac023ad246c7bf9c60dce787da4a2159173b92ceb9b4d39b237defc53e9d41f2bd0c85cffcaa0496143596a995bdcf4b911ab4fa5d525b6af194470e52367e6f741e6e2ab9229e7228773a29835079851bb3b9a5cbbf44fb7ad540c9c85a14c594b0395bd2a060e83f2b08690c1ba236a8c095dce780ad9e52988fe0368609aa82914071504d1254293736dc8a8a48778719cdd11bb393c81271d55737f9d186c479560d9772eef3dc24c6a0de6e5dd2b177996defe9498b15fee253876f2e8bcca2006c4df2642d69929997d4c8a8b9", 0xb4e}], 0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "924008a5ff797aa5", "13fb69d17e536b150bef618d0ee755a3", "3237b1ef", "921bb91a3e011405"}, 0x28) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0xff4}], 0x1}, 0x20) 1.143841119s ago: executing program 2 (id=2422): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x2}, 0x2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x4, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x4}, {0x8, 0xb}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000048}, 0x8040) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote}, 0x1, 0x3, 0x4}}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)="4857448ded56e2394a1eb5b049a96452c971157cd887862eab354c02c244dc313c026f71150d623ee1105fa8b38213f6e61aa3675ec36771a7edc53efd74ef935855c40445e8a9f38eb8fbf5a3019e10885689d9703c10d58082c31e626d95da1708ca5cb512e0186d346333533a763cc889a7d7cb00f20e10753f076affb0873924534abab47c557c0374911eb63f9cf8e388b7", 0x94}, {&(0x7f0000000480)="ff09cfd931db01ca6ad77c95179cc8dca8c47a69f5060b11e79e91b66c8cf8bfb2084481d0b65656e366c6c694106d6b30cdf86b7da5ad5bf51d79224e4bcd271dca913da400bf76c9418cc4ebd0769518ded225b4cac39b7eaa99d1d5d4618d1abb668a5c369b", 0x67}, {&(0x7f0000000500)="0abd11d1fef65cac351aba1fa8284c4a84a6f760593248d3682ad33c345dfadb90444782087d399b39d80cff68ef73e9e7461f2876ae12dcd733ff288e636e446f4ecb6f7caab200e6c537f6ec2a6474cf0d650e2966fcc47a78b0a1ce38ca80e5d6d0", 0x63}, {&(0x7f0000000580)="634323fa35dcf3244b7ef67459b5605ad71e8f290a294ecb9cfb8d4994bb2edbb57c8f0c2af7a44b3a81c36a53eb87d7f3fd51bca14983bf54d9784f28529c02733c0230129292872079cd9f955baac02f5165b311915d2712f70c42fdfdc09736", 0x61}], 0x4, &(0x7f0000000600)=[{0x110, 0x84, 0x1ff, "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"}, {0xa8, 0x104, 0x2, "132e912445a6c87b11c1330fc313c55267ec9ed318182249d992f81c18f460db037155b3ff868ede7da742386dcda53c22384c71433fbc186385d15300afa7d156df9237b3b67d288a67e0ebdbb70bfc0db91774a5417c05b7e7a369f485f8c9a7a2bc04c21c4e5a04b3c714fd106e3b22370dc0cdd25b3c9a58bf6f9cce91f134165d4a9ef40e5f353d204122f5ffcaf762af"}], 0x1b8}, 0x20040001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) 1.000493521s ago: executing program 3 (id=2423): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x130, 0x32, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2cb4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff5d}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x563}]}, 0x130}}, 0x4880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="340000001400b5952cbc7000ffdbdf250a0080c8", @ANYRES32, @ANYBLOB="140002000000000000000000000000000000000108000900ff"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000440)={r0, 0x4, 0x8, 0x2}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0x8800}, 0x8044) 996.66861ms ago: executing program 0 (id=2424): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x45}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x10000, {{0xa, 0x4e21, 0x36, @loopback, 0x3}}}, 0x88) 869.48343ms ago: executing program 3 (id=2425): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xfc, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_ADDEND={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @filter_kind_options=@f_flow={{0x9}, {0xa4, 0x2, [@TCA_FLOW_ACT={0x90, 0x9, 0x0, 0x1, [@m_ife={0x8c, 0x8, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x8, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}]}]}, {0x59, 0x6, "e341fa816823b110fea6c798338ac51f0458deb9ce9ba0113bffa8139e3c0c15513b805734becea7df15fc8faa2d69b7926d3e17a51a5dc94aa85950690f6ea77d6201079660d0f2310a22028ebd6cc949ceab2a2f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x7}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 834.532473ms ago: executing program 1 (id=2426): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3fb, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, &(0x7f0000000180)=""/181, &(0x7f0000000000)=0xb5) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a0000002300", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/80, 0x50}], 0x1}, 0x40010163) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002cc0), r4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000000100)={0x68, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x3c, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x14}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd4b8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, 0x68}}, 0x4000000) clock_gettime(0x1, &(0x7f0000000340)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='reno\x00', 0x5) 772.55895ms ago: executing program 0 (id=2427): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdebe9298b01e47819567b44e6730f0800", "6d02cd81", "066580001e00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000400)="5c00000013006bcc9e3be05c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002002c26d330196e87c0568cff3407000c0006007c2ed239122dbd94c9affe1801c00364bc24eab556a705251e618294ff0051f60a84", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 557.13825ms ago: executing program 0 (id=2428): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x1b, 0x8b, 0x4000069}, 0x2c) (async) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) r4 = socket(0x15, 0x5, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x80, 0x40, 0xff2, 0x4, {{0x29, 0x4, 0x1, 0x37, 0xa4, 0x66, 0x0, 0x3, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xf0, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}}, {@multicast1, 0x4}]}, @generic={0x89, 0x5, "df1a28"}, @lsrr={0x83, 0x2b, 0x10, [@remote, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @multicast1]}, @ssrr={0x89, 0x7, 0x21, [@broadcast]}, @timestamp={0x44, 0x24, 0x95, 0x0, 0xf, [0x0, 0x5, 0xf7, 0x1, 0xfffffffe, 0x6, 0x7, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xc, [@local, @private=0xa010102, @broadcast]}, @generic={0x83, 0xf, "5216ee5ade7047b3b0a0a890f4"}, @end, @end]}}}}}) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000019580)={{{@in=@multicast1, @in6=@loopback, 0x4e23, 0x9, 0x4e22, 0x6, 0xa, 0x120, 0x80, 0x0, r5, r6}, {0x0, 0x4, 0x59, 0x9b91, 0x241, 0x5, 0x3, 0xa1f}, {0x2, 0xf, 0x5, 0xdde}, 0x7bc4, 0x6e6bb0, 0x2, 0x1, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x4d6, 0x33}, 0xa, @in=@private=0xa010101, 0x3500, 0x3, 0x3, 0xd8, 0x2, 0xb0ba, 0x7}}, 0xe8) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) (async) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000003700010324bd70028ae79ca907"], 0x14}}, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', r5, 0xffffffffffffffff, 0x2, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) r11 = openat$cgroup_ro(r9, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r10, r11, 0x0, 0x8001) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000019840)=@generic={&(0x7f0000019800)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019900)={0x18, 0x11, &(0x7f0000019680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x3a, &(0x7f0000019740)=""/58, 0x41000, 0x5c, '\x00', 0x0, 0x0, r11, 0x8, &(0x7f0000019780)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000197c0)={0x5, 0x9, 0xa}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000019880)=[r12, 0x1], &(0x7f00000198c0)=[{0x1, 0x4, 0x4, 0x2}, {0x1, 0x2, 0xf, 0x1}, {0x3, 0x2, 0x2, 0x4}, {0x1, 0x5, 0x1, 0x3}], 0x10, 0xf9f, @void, @value}, 0x94) 476.645891ms ago: executing program 1 (id=2429): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r7, &(0x7f00000006c0)=[{&(0x7f00000000c0)="89e7ee16710000b4080f", 0xa}, {&(0x7f0000000640)="d8f5aa1f", 0xfffffee0}], 0x2) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xfffffffffffffe0a, 0x2, [@TCA_CAKE_MPU={0x8}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c00028006000840000000000500070000000006050009"], 0x4c}}, 0x0) socket$netlink(0x10, 0x3, 0x4) accept4(r0, 0x0, 0x0, 0x0) 400.212243ms ago: executing program 3 (id=2430): r0 = socket$kcm(0xa, 0x6, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r4 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000004000000020000000500000000010200", @ANYRES32, @ANYBLOB="390e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="9bc6708f15fc02000000040054df4f02ed0e738fdac471b6ba63f70000ffffffff01"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000a5ac694def71f3d5ff57dfb9912dedf7f39b7238e788ca7269e3322ec5b760569d1a894bf2b62d9c810883da2d5c8c03bace2ac3ce2d73822ca9cae5f01ca9c44aaf2eddf04a8e"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='sys_enter\x00', r10}, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000440)='ns/pid\x00') openat$cgroup_ro(r7, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r11, 0x4) 331.52581ms ago: executing program 0 (id=2431): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x7, 0x3, 0x3e22, 0x5, 0xf, 0xb, 0x9, {0x0, @in6={{0xa, 0x4e23, 0xf0, @empty, 0x7}}, 0x3, 0x7, 0x291, 0xd, 0xe6f}}, &(0x7f00000000c0)=0xb0) (async) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) sendmmsg$inet6(r3, &(0x7f0000009f40)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000b80)="60ff7255ed92cd2bb440460605a56cfd5ca4bf9fc65573a3e11343a5482d2a57a0c5ddd38122b05c8a17bc1cd44f2d30", 0x30}, {&(0x7f0000000bc0)="5cf7aec70d5a9e3cf634de9a8c4cc99b2b447f0d0023cca7c6991b8287805c", 0x1f}, {&(0x7f0000000c00)="60ce6cdc55c5f6ddba69e6fae55079067d69947a7e76f49d230f85de89838d9f109451704e1f1e103ab16552f6932b13fa4e1e094eeb34d70b5a38040f95cdf20d6ed90c3b3973896e7b51634507bf2ee80fc0f220b06a3f96ed63415ee68c49e01e67d22c64b0a38b891e4aa46e028164b28064d179e16c5e1a4b0e42dbe6d77ca61011fe7fcc1a4974ea97a856ccf668af7e51c8a3", 0x96}, {&(0x7f0000000cc0)="dcb3116312e4840d75b79858514ae8435a8f856f35f4b3bf971968889f2e369c1d8db2c3afb89496a3da76c77132cf52e41a198bf116fef02e0768f1f879359428c6441df0a933d8cd573e9ec4e856f4a69e6ecc105a1ee5a2ecfa51fc3a8a825545072393936a192defe381852f4fa075d6afd6bec4a024c1bb5639ebe5ebc355bf2e518daea1bdd173b713cb76ee8812b97b4672494a7439b523712d9fad5da8363f1dd31f162241f0253f24576b4ffb051aa25b14ed76c59d7caaca74595e5cf4f64bf809e7723e7d79a4d53480d80a9399fe9fddc747a623ad56b9fb0352a9c9e3d73b6e6892538cd14bb314b9d6f75de957816f0fc3", 0xf8}, {&(0x7f0000000dc0)="ee5a9d4617e6907f41e1e92bf3a575b662dfabac2541063f44082a79c5edbb4d65161decd0621dcd86e4734afb5b3e142d003a06b58dfab69f48067d", 0x3c}], 0x5}}], 0x1, 0x8005) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300002b3e00000000000000", @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028005001d0000000000"], 0x3c}}, 0x54) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 217.350859ms ago: executing program 3 (id=2432): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) recvmsg$unix(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000180)=[{0x0}], 0x1}, 0x140) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x40000000, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x44) 141.131984ms ago: executing program 2 (id=2433): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r1}, 0x10) r3 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r3, r2, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$kcm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/66, 0x42}], 0x1}, 0x40000040) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, r6, 0x1, 0x70bd2d, 0xffffffff, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}]}]}, 0x38}}, 0x48094) 80.332772ms ago: executing program 1 (id=2434): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "f8e00311da4fa70a", "8c444834520a1a9b483a16297c4a14b8", "97a7038f", "6415b6cbb4564161"}, 0x28) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000240)="26885e3b477e010d746413f05fa060d3d4e7e85a727e0b4a189eb2745bafb7361d126f86993771e649570852d1a62777e59db8dc1c08d6a1565c448496763c896ef50a4a983d4cec7ba8cd3565d538118476552f1896aa3164ca70361afa54fd7840eb8531713786a0c420b84a3a6ac1", 0x70}, {&(0x7f00000003c0)="3f1fac85415f6946be89d855064508c617e2abc9bf4cdb012945945aed1a7ee0a05a4d467cb5617096db4bf5f343ec3f0944b4287c270f318fd6ce46a8bd97a7d654bf1f7e58aa669c6233e58a62742a205a419af730dd41bb130651e8d2d041e87ee9a8c66c91702541e6fb0d88cb7c94", 0x71}, {&(0x7f0000000540)="1d174a5ff0c5a3b477c1f9f96498ae0684fa188a587f9a919250c999ee2a9af5d9e47a5f8ac22ffd87e6b135b9e58f352339e2bad08fa500eb85fd56", 0x3c}, {&(0x7f0000000440)="4914317123fa3d5cee474e36be6c03ec031a08a3c2669cb01d9024e374baa142b5ebec7748e256ef77c77121ac51eb122ab6b51e4c3f9ccc60481a140bacfe63b2ef06be96490089a103e29babf54e114552a11ca621f0f3ddac77b89a07d718e8e6393fad4be315cb8199d0fa396458460453814fc5716cf67a2d85fb4b73960950c017d9efa57312773a2b66275cadb73fee2a5a8d99845d87d70b4958b5953416c7eb833e0b8748bcb9f44e6322bf00e166c17549cc298fe2d6a27c88b4a75c9267", 0xc3}, {&(0x7f0000000740)="b70f375ac2425f13bfcd5dee09f86bb14c9f10f54025207fc0c28042e4b184e2423061290d7b518884ace6a029f0363679bbf07654183f8256ec9ada334dc56603335e5c486f4c577df640c508c6ab8579e7c3e2e7f7897c24a2fe78d83283a0f9c6338c6cd3f6e8c0b6f960db5cd2b58fd89a450995ac5d913601cebdffb3f77c177e38277a33979a24d650169f9cd12fc97bc83863d16b1a1cf3f778eba586691a36e6ada4516f5535d3b4e77a8148eb03921e474f697ceef035b84bbffc8b664a77a6c5e7d0a40841d761dbfaa8f0ae7c38b709d7667c593d8c3c488dbd988cc38e1d14106f9841fdd513c68568511ca2a9d4732f037d0c475e1b22e5dfa77484d6198fbc91f95c850f8fc05aaf5aa9feb8f4f16918b4d3df4bb6986f94cee4312a736a6b457ac05bbab11f266c97e8931834f94e64d0712c7252319a16771d74c87842d1ace573a609b125923d8b0ab8aa205542d4e405837b3bde921f2b200a7913ac80e6b417197ce3f237bd46d0f64e193ea28cdb78f6d93243962c615b90c420425fec775c302b9ed0edf9e84bf4492558ddc4dd6ac11f969a2bd00df52a06d7b680b10729871fe0fb92f34849d0feaaa04fe6065b41ad1b973e69f90f5c253e7032629333a30f82f7e78c5cd3815f8253c34a83940eff6daadb8349f39117e3ac58e9accffb59325e39809b45047c2824eb28587e7a3d825fa99b33d2b573a30ed8874a8160c8ade19352d521a209d16402529b491c9ce87f66cdc1d1e3291e1c4e17d0feb0bf92b4a7240256bc3d73cb1f017a9188473ef02badb553a28867981c0d64b1d8eee79bfec3a55af3174500f7780978db5732d1a96df59a41126d62b55693b16371843349446bca3000ba39cdffa777985b6194761aff76321f5b958f2a10875e97032379cda51d4c07193982e24363f60a5eeb9554fd1baa519295a43542d3ab87285d45b04af4b80cedcf40fcd6aa28fff8127f33ec0f7c5c6a7e9637a7bd55a2897769f3f9d2aaa12ed41c90f3c93472cc81abde087452b987fd875ae5a86a5f160d46acb3126f5a50467ec303c8c2f2d21e03bfeab57beb2acd765a7e8d512f24fde1f2863664d3baf37755763ab718136cdd1fb81f9949cfb835a75bdc207d77e227567c3e0a9b33f682cb710d8aed08207240b1c5e4da51833bb84277679c0dc3587cc957fd76fc969c9919ab0ff411cd7ba5382a300da60292f0d48f876b178d810416f3533604d77b6a2973fd190af4c818289df4a36a267f47c002314a7b88010e02938f6719aaf9609c3dfab1c99d39f1ea1ae5c44aeae56755ea6da82ff129205eb5c6caa7d469883bc54ee665bb7c71d0546eccb96db5f513ef270bf22fd0c504e35d969a0d0a71af9e9787e51fa4cb4f8a96cbe48ec193ec24f5d242b97b932afdbd781165c164c5a6c801f941de54a1de184710d0f885ed8ae7a3ed64124c08bab3268b79b47cb6c03b6dc66267da02e25ca344ec550b881a49390ffbf93af33a7f1c9d9202b83c69dc8e27536670490d56ee478bdf2f9a6c66bd4b41a10d85b6410dff3dac9336bdb5eafbb75e8c4e7fcaa085d41ee61b7a73bdd6a51f50c7db340172a9552d3af12b70ea7e5b42d6fa1d715253ee4c69da3290ceb218ca6ee5da686f8a27f9d94849703aa635b662a51cf6ff35b75d11752be24dc761df4bde312bc54162efdf3141a079d95e1fbba0c7332d5d2afd3a9e37d319afffe83c00542805866d5c6cac4b89a06949cf3b3702b92b2a381bf90e359aab5fed4ae89b91af04667004f7e22f54bed80e78aed44f4f0db59a0438702ef05e3ff1284959eb061651cdce30158adfb66c98fe5b85171ea422b05c3a0b62c4e52f5660acad848a77607c49d4bc8c16babbda01ae45f3061924ede761a7c9f29c6eff1a83b967a634c54fe3f75d5e39db4f008cc200a16bdb75982a2188ecd9e7dda9e4c3b3538494fc299520d292872ab3c4d870602503b9a751b0095a6ea35311d4d781e0955067d51e5f59f4c83ab141f2c99052c02cebaa426a7140e557339323ff0e5f1c188d9bcfd10921693cafc86d990a7becd72d5732377e669c592dfadd75130ed6cc0aa9c7547038b842c7e2c7288531a3bf4e85ce2d5f9ef6c711a1784c62ca9e1b63258ad458f3c0ff37e550d764ce60dc9aeacec6ef648a5f45e8f86c2d759ef624763ed5c9875693abdbb0c17db726a473cc46e0be58207d0f86329ce2b91bb12baf9360fad19348e389fba6ea4379681939f4686dca8fced0354e04ff6cbe056bdb89b38e29a8c2337ac2a0f89c0078772d4b3c6edf004c9eed9c094776272ce48ff24eea5cf5b23c4eb7acc71f569771ea07b2af6a0ba28323eeb812ef7dc296bc608d19e5e996f6b9821ee5d8cedcdb4704b9cbc0b1147b524e7780d160bf69973d7927262ae00f9220717ed900a1edac81eb4c7ddf3fe1cf1934753e7c5e8182856c29aad786d7883db36f3080291ff9f5302fa3c987f5dfac350d6099134a767ea776a90e316e4658daf27ec19e511b839c4a84d60dc698c59bb695f9261efddaadf730040438a407b40df5a8cc534f737874015a7042aac4ecc1d2df2b2ae029b28d0ae1c0e759556dd4e47247dc63cb8d6f306b3fa8d0d3e4427cf37ecf8a3deb4b9d1e4ea6deaefdd94ebbccba06dfc123bc19070224a30bfae3a217ca44fc7c51f9bfb7b936ecf78f5e94cc4e95ec2c5a4d20dbe293af64594caacef7ed33dc6f3b80c55d5d259cfd06f696e684a3c134e3d78504f6d406d74c7f03a22a2afc162af98d637cde1178213d3b3401c25e01130012bdb877e324d25d949d1641a2bdde0509f3a6a889959a423605d2328fc7974e2a98ab60bf940480e8ff3d584e24f7de7ac8e7a93c88ce8d85bd8ce0f0e85b0142c4914666390e964f3921ed8cbeb3c086d63432cf17a26d267e50345814948932ff15191bc3e3c1b3751ba3e4b12c4422530ad24a1e65922db1f80e895183d1f2625fa6b8387200d66c663823812f2fa325f8a837b2a2588d689d502d50d6fc64369f4adb727745e042f9dba9497a50c4e3b2e521c2208816e31025bbd47276ce3debd3cfb1aa10bf7be2f5e7feee950464dd3999a8d2b5c307ec55a1a7fe0a50fbab622509bc0b62726f3732ebdda50b00c696cda2d7c5f631ee6799db1776977bff8626889f4e21cb2750acbbf7c63c6175653f037b69ce7ea5c9f00cc881882de15ebb78125dd8f2665f4c74b12e45e41bc9459763e15c2f03f6240fd60b5acd175f290ee88df71dfb050816133c10d4e502c43f39af83fbbb0c39099df3a255ef68a80d9400eea903bd5e03eb1b60ba3dc9884b430de0ac6a4cd3877ab43901ff3fe0abb778dca32f9f84325fb43f39ba399836fa1052f2ef0282a8573df63cea945fcdacc8768a434b485d55da34083e5357d11b44992fb67250aba3eb936fa79fa6f3a24bb2f60dc3b2c5b6335d289359a7b324f1ec23467065176a2d3dd538c17b169c50844d45d7a13ec54cb12ea9a93b73c588c66851315aef04e5a72fa4d290b145ee8f3a2d6ab8929ace30ce67f715841c6c9db7b754aaf9dbd2a8d010dabe8bad4961bcb282382c8c8edee6527e5cc16ea9435c9627942f4c37323bb821a191176684875a000d4f08636fd7ac29d74b4b23c2f8df59071c1625fac94cc827979dce4d9a3c5dc9180ea6e649fe78fe424fca06c0db9285f55115b30c1afc5d8dcb2b0c1e04b971ca66f57d21ab3cc7ae383c3568841f87df33a179d07f2173a7cd494a74e07bc13568dd142a6fb9ac023ad246c7bf9c60dce787da4a2159173b92ceb9b4d39b237defc53e9d41f2bd0c85cffcaa0496143596a995bdcf4b911ab4fa5d525b6af194470e52367e6f741e6e2ab9229e7228773a29835079851bb3b9a5cbbf44fb7ad540c9c85a14c594b0395bd2a060e83f2b08690c1ba236a8c095dce780ad9e52988fe0368609aa82914071504d1254293736dc8a8a48778719cdd11bb393c81271d55737f9d186c479560d9772eef3dc24c6a0de6e5dd2b177996defe9498b15fee253876f2e8bcca2006c4df2642d69929997d4c8a8b9", 0xb4e}], 0x5) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x303}, "924008a5ff797aa5", "13fb69d17e536b150bef618d0ee755a3", "3237b1ef", "921bb91a3e011405"}, 0x28) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/114, 0xff4}], 0x1}, 0x20) 60.582197ms ago: executing program 0 (id=2435): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="c1", 0x1}], 0x1}}], 0x1, 0x20000800) (async) getsockopt$inet6_int(r0, 0x29, 0x18, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x2, 0x0, 0x1, 0xb1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 31.643507ms ago: executing program 3 (id=2436): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x10) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08074c07784308000100", @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) sendmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0700000000000000df25040000009837987b1a4756051fde752e89de0330987c1c17af75e8eda942"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 0s ago: executing program 1 (id=2437): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2093}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000180)=@gettaction={0x134, 0x32, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe1}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2cb4}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff5d}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xb}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x4}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x563}]}, 0x134}}, 0x4880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="340000001400b5952cbc7000ffdbdf250a0080c8", @ANYRES32, @ANYBLOB="140002000000000000000000000000000000000108000900ff"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x40040) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000440)={r0, 0x4, 0x8, 0x2}) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)=ANY=[], 0x240}, 0x1, 0x0, 0x0, 0x8800}, 0x8044) kernel console output (not intermixed with test programs): R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.983199][T10787] R13: 0000000000000000 R14: 00007f705e975fa0 R15: 00007fff5b60d298 [ 212.991199][T10787] [ 213.122917][T10787] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.343709][T10805] netlink: 'syz.1.1539': attribute type 4 has an invalid length. [ 213.435514][T10811] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1542'. [ 213.481271][T10809] netlink: 'syz.1.1539': attribute type 4 has an invalid length. [ 213.494621][T10804] syzkaller0: entered promiscuous mode [ 213.500167][T10804] syzkaller0: entered allmulticast mode [ 213.710137][T10823] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1545'. [ 213.715106][T10826] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1545'. [ 215.317087][T10832] netlink: 'syz.2.1546': attribute type 9 has an invalid length. [ 215.334199][T10832] netlink: 'syz.2.1546': attribute type 6 has an invalid length. [ 215.454513][T10834] batadv0: entered promiscuous mode [ 215.507841][T10836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.574621][T10845] FAULT_INJECTION: forcing a failure. [ 215.574621][T10845] name failslab, interval 1, probability 0, space 0, times 0 [ 215.600710][T10845] CPU: 0 UID: 0 PID: 10845 Comm: syz.0.1551 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 215.611555][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.621659][T10845] Call Trace: [ 215.624979][T10845] [ 215.627958][T10845] dump_stack_lvl+0x241/0x360 [ 215.632704][T10845] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.637958][T10845] ? __pfx__printk+0x10/0x10 [ 215.642607][T10845] ? fs_reclaim_acquire+0x93/0x130 [ 215.647765][T10845] ? __pfx___might_resched+0x10/0x10 [ 215.653090][T10845] ? dynamic_dname+0x141/0x1b0 [ 215.657924][T10845] should_fail_ex+0x3b0/0x4e0 [ 215.662673][T10845] should_failslab+0xac/0x100 [ 215.667406][T10845] __kmalloc_noprof+0xdd/0x4c0 [ 215.672239][T10845] ? tomoyo_encode+0x26f/0x540 [ 215.677059][T10845] tomoyo_encode+0x26f/0x540 [ 215.681695][T10845] ? __pfx_sockfs_dname+0x10/0x10 [ 215.686760][T10845] tomoyo_realpath_from_path+0x59e/0x5e0 [ 215.692422][T10845] tomoyo_path_number_perm+0x236/0x860 [ 215.697904][T10845] ? __lock_acquire+0x1397/0x2100 [ 215.702946][T10845] ? tomoyo_path_number_perm+0x206/0x860 [ 215.708634][T10845] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.714674][T10845] ? __fget_files+0x2a/0x410 [ 215.719288][T10845] ? __fget_files+0x2a/0x410 [ 215.723899][T10845] security_file_ioctl+0xc6/0x2a0 [ 215.728947][T10845] __se_sys_ioctl+0x46/0x170 [ 215.733555][T10845] do_syscall_64+0xf3/0x230 [ 215.738080][T10845] ? clear_bhb_loop+0x35/0x90 [ 215.742771][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.748686][T10845] RIP: 0033:0x7f6eb4b85d29 [ 215.753116][T10845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.772737][T10845] RSP: 002b:00007f6eb5a70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.781194][T10845] RAX: ffffffffffffffda RBX: 00007f6eb4d75fa0 RCX: 00007f6eb4b85d29 [ 215.789186][T10845] RDX: 0000000000000000 RSI: 00000000400448cb RDI: 0000000000000004 [ 215.797167][T10845] RBP: 00007f6eb5a70090 R08: 0000000000000000 R09: 0000000000000000 [ 215.805150][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.813158][T10845] R13: 0000000000000000 R14: 00007f6eb4d75fa0 R15: 00007ffe81180528 [ 215.821157][T10845] [ 215.862511][T10845] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.916968][T10853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1553'. [ 215.993514][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 216.606361][T10896] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 216.646103][T10886] syzkaller0: entered promiscuous mode [ 216.671111][T10886] syzkaller0: entered allmulticast mode [ 217.318001][T10933] Cannot find map_set index 0 as target [ 217.679890][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1572'. [ 217.699914][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1572'. [ 217.720240][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1572'. [ 219.104131][T10916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.218849][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1574'. [ 219.261667][T10957] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.282066][T10957] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 219.297833][T10957] vlan0: entered promiscuous mode [ 219.303681][T10957] bond6: entered promiscuous mode [ 219.308804][T10957] ip6gretap1: entered promiscuous mode [ 219.316210][T10957] vlan0: entered allmulticast mode [ 219.321797][T10957] bond6: entered allmulticast mode [ 219.327057][T10957] ip6gretap1: entered allmulticast mode [ 219.481026][ T3502] batadv0: left promiscuous mode [ 219.799650][T10983] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1584'. [ 219.841184][T10988] batadv0: entered promiscuous mode [ 219.904363][T10988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.013793][T10991] syzkaller0: entered promiscuous mode [ 220.028005][T10991] syzkaller0: entered allmulticast mode [ 220.054090][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'. [ 221.934243][T10999] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 222.189971][T11025] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1594'. [ 222.202002][T11027] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1595'. [ 222.323260][T11036] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 223.138414][T11080] syzkaller0: entered promiscuous mode [ 223.164595][T11080] syzkaller0: entered allmulticast mode [ 223.186193][T11088] syz_tun: entered promiscuous mode [ 223.199217][T11088] batadv_slave_0: entered promiscuous mode [ 223.309587][T11088] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 223.327697][T11088] Cannot create hsr debugfs directory [ 223.835355][T11097] IPVS: length: 139 != 2674479760 [ 223.963821][T11090] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 225.259968][T11094] netlink: 'syz.3.1612': attribute type 29 has an invalid length. [ 225.552606][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 225.806824][T11136] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1621'. [ 225.848431][T11138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1624'. [ 225.886231][T11141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1623'. [ 226.271805][T11153] syzkaller0: entered promiscuous mode [ 226.282852][T11153] syzkaller0: entered allmulticast mode [ 227.341610][T11180] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1640'. [ 228.507458][T11183] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1641'. [ 228.567621][T11191] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 228.785358][T11200] netlink: 'syz.1.1649': attribute type 33 has an invalid length. [ 228.827784][T11200] team_slave_0: left promiscuous mode [ 228.848297][T11204] netlink: 'syz.3.1647': attribute type 2 has an invalid length. [ 228.854772][T11200] team_slave_1: left promiscuous mode [ 228.921062][T11200] netlink: 'syz.1.1649': attribute type 33 has an invalid length. [ 228.959810][T11200] netlink: 'syz.1.1649': attribute type 33 has an invalid length. [ 228.984800][T11200] netlink: 'syz.1.1649': attribute type 33 has an invalid length. [ 229.007878][ T5886] IPVS: starting estimator thread 0... [ 229.010153][T11210] FAULT_INJECTION: forcing a failure. [ 229.010153][T11210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.024860][T11200] netlink: 'syz.1.1649': attribute type 33 has an invalid length. [ 229.056650][T11200] netlink: 'syz.1.1649': attribute type 33 has an invalid length. [ 229.074287][T11210] CPU: 0 UID: 0 PID: 11210 Comm: syz.2.1651 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 229.085148][T11210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.088166][T11200] netlink: 'syz.1.1649': attribute type 33 has an invalid length. [ 229.095220][T11210] Call Trace: [ 229.095235][T11210] [ 229.095245][T11210] dump_stack_lvl+0x241/0x360 [ 229.095284][T11210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.095317][T11210] ? __pfx__printk+0x10/0x10 [ 229.113738][T11200] netlink: 'syz.1.1649': attribute type 33 has an invalid length. [ 229.114037][T11210] ? __pfx_lock_release+0x10/0x10 [ 229.136752][T11210] should_fail_ex+0x3b0/0x4e0 [ 229.141496][T11210] _copy_from_user+0x2f/0xc0 [ 229.146156][T11210] do_ip_vs_get_ctl+0x286/0xd90 [ 229.151065][T11210] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 229.156515][T11210] ? __mutex_unlock_slowpath+0x21e/0x790 [ 229.162214][T11210] ? __pfx___mutex_lock+0x10/0x10 [ 229.167299][T11210] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 229.173356][T11210] ? __might_fault+0xaa/0x120 [ 229.178103][T11210] ? __pfx_lock_release+0x10/0x10 [ 229.183182][T11210] ? aa_label_sk_perm+0x4f3/0x6c0 [ 229.188272][T11210] nf_getsockopt+0x299/0x2c0 [ 229.192914][T11210] ip_getsockopt+0x222/0x2e0 [ 229.197565][T11210] ? __pfx_ip_getsockopt+0x10/0x10 [ 229.202745][T11210] ipv6_getsockopt+0x1ba/0x360 [ 229.207576][T11210] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 229.212924][T11210] ? __pfx___might_resched+0x10/0x10 [ 229.218266][T11210] ? __might_fault+0xaa/0x120 [ 229.223014][T11210] tcp_getsockopt+0x163/0x1c0 [ 229.227755][T11210] ? __pfx_tcp_getsockopt+0x10/0x10 [ 229.233020][T11210] ? __might_fault+0xc6/0x120 [ 229.237757][T11210] ? sock_common_getsockopt+0x2e/0xb0 [ 229.243185][T11210] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 229.249141][T11210] do_sock_getsockopt+0x3c4/0x7e0 [ 229.254230][T11210] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 229.259829][T11210] ? __fget_files+0x2a/0x410 [ 229.264494][T11210] ? __fget_files+0x395/0x410 [ 229.269238][T11210] ? __fget_files+0x2a/0x410 [ 229.273917][T11210] __x64_sys_getsockopt+0x2a1/0x370 [ 229.279145][T11210] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 229.284929][T11210] ? do_syscall_64+0x100/0x230 [ 229.289721][T11210] ? do_syscall_64+0xb6/0x230 [ 229.294424][T11210] do_syscall_64+0xf3/0x230 [ 229.298953][T11210] ? clear_bhb_loop+0x35/0x90 [ 229.303660][T11210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.309615][T11210] RIP: 0033:0x7f7cb0985d29 [ 229.314059][T11210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.333705][T11210] RSP: 002b:00007f7cb17bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 229.342164][T11210] RAX: ffffffffffffffda RBX: 00007f7cb0b75fa0 RCX: 00007f7cb0985d29 [ 229.350195][T11210] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000003 [ 229.358219][T11210] RBP: 00007f7cb17bc090 R08: 0000000020000100 R09: 0000000000000000 [ 229.366247][T11210] R10: 0000000020001640 R11: 0000000000000246 R12: 0000000000000001 [ 229.374273][T11210] R13: 0000000000000000 R14: 00007f7cb0b75fa0 R15: 00007ffefc245978 [ 229.382317][T11210] [ 229.418920][T11212] IPVS: using max 23 ests per chain, 55200 per kthread [ 229.579866][T11220] syzkaller0: entered promiscuous mode [ 229.627711][T11220] syzkaller0: entered allmulticast mode [ 229.787215][T11240] Unsupported ieee802154 address type: 0 [ 229.891946][T11244] sctp: [Deprecated]: syz.3.1663 (pid 11244) Use of struct sctp_assoc_value in delayed_ack socket option. [ 229.891946][T11244] Use struct sctp_sack_info instead [ 230.062683][T11244] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1663'. [ 230.600889][T11254] Cannot find add_set index 1 as target [ 230.834353][T11258] FAULT_INJECTION: forcing a failure. [ 230.834353][T11258] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.855208][T11258] CPU: 1 UID: 0 PID: 11258 Comm: syz.2.1668 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 230.866048][T11258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 230.876123][T11258] Call Trace: [ 230.879413][T11258] [ 230.882355][T11258] dump_stack_lvl+0x241/0x360 [ 230.887062][T11258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.892316][T11258] ? __pfx__printk+0x10/0x10 [ 230.896950][T11258] ? snprintf+0xda/0x120 [ 230.901214][T11258] should_fail_ex+0x3b0/0x4e0 [ 230.905921][T11258] _copy_to_user+0x31/0xb0 [ 230.910382][T11258] simple_read_from_buffer+0xca/0x150 [ 230.915777][T11258] proc_fail_nth_read+0x1e9/0x250 [ 230.920831][T11258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.926451][T11258] ? rw_verify_area+0x55e/0x6f0 [ 230.931345][T11258] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 230.936917][T11258] vfs_read+0x1fc/0xb70 [ 230.941101][T11258] ? __pfx___mutex_lock+0x10/0x10 [ 230.946150][T11258] ? __pfx_vfs_read+0x10/0x10 [ 230.950846][T11258] ? __fget_files+0x2a/0x410 [ 230.955480][T11258] ? __fget_files+0x395/0x410 [ 230.960168][T11258] ? __fget_files+0x2a/0x410 [ 230.964785][T11258] ksys_read+0x18f/0x2b0 [ 230.969039][T11258] ? __pfx_ksys_read+0x10/0x10 [ 230.973815][T11258] ? do_syscall_64+0x100/0x230 [ 230.978595][T11258] ? do_syscall_64+0xb6/0x230 [ 230.983310][T11258] do_syscall_64+0xf3/0x230 [ 230.987883][T11258] ? clear_bhb_loop+0x35/0x90 [ 230.992596][T11258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.998504][T11258] RIP: 0033:0x7f7cb098473c [ 231.002926][T11258] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 231.022555][T11258] RSP: 002b:00007f7cb17bc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.030993][T11258] RAX: ffffffffffffffda RBX: 00007f7cb0b75fa0 RCX: 00007f7cb098473c [ 231.038995][T11258] RDX: 000000000000000f RSI: 00007f7cb17bc0a0 RDI: 0000000000000004 [ 231.046992][T11258] RBP: 00007f7cb17bc090 R08: 0000000000000000 R09: 0000000000000000 [ 231.054994][T11258] R10: 0000000020001640 R11: 0000000000000246 R12: 0000000000000001 [ 231.063004][T11258] R13: 0000000000000000 R14: 00007f7cb0b75fa0 R15: 00007ffefc245978 [ 231.071035][T11258] [ 232.353262][T11272] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 232.466602][T11263] syzkaller0: entered promiscuous mode [ 232.484371][T11263] syzkaller0: entered allmulticast mode [ 232.577474][T11281] validate_nla: 58 callbacks suppressed [ 232.577497][T11281] netlink: 'syz.4.1676': attribute type 4 has an invalid length. [ 232.656215][T11288] netlink: 'syz.4.1676': attribute type 4 has an invalid length. [ 233.507751][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803476cc00: rx timeout, send abort [ 234.017428][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88803476cc00: abort rx timeout. Force session deactivation [ 234.381345][T11294] team_slave_0: entered promiscuous mode [ 234.387140][T11294] team_slave_1: entered promiscuous mode [ 234.417354][T11294] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 234.581702][T11299] netlink: 'syz.2.1681': attribute type 2 has an invalid length. [ 234.674654][T11303] pim6reg1: entered promiscuous mode [ 234.680032][T11303] pim6reg1: entered allmulticast mode [ 234.701024][T11307] xt_TCPMSS: Only works on TCP SYN packets [ 234.913348][T11301] syzkaller0: entered promiscuous mode [ 234.919051][T11301] syzkaller0: entered allmulticast mode [ 234.988521][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1686'. [ 236.924083][T11313] netlink: 'syz.2.1686': attribute type 29 has an invalid length. [ 236.959074][T11337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 237.204293][T11349] netlink: 'syz.4.1696': attribute type 2 has an invalid length. [ 237.616777][T11372] syzkaller0: entered promiscuous mode [ 237.622912][T11372] syzkaller0: entered allmulticast mode [ 237.629255][T11375] netlink: 'syz.2.1704': attribute type 29 has an invalid length. [ 237.793035][T11385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1704'. [ 239.465210][T11375] netlink: 'syz.2.1704': attribute type 29 has an invalid length. [ 239.583725][T11394] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1709'. [ 239.619312][T11396] netlink: 'syz.1.1710': attribute type 1 has an invalid length. [ 239.672438][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1710'. [ 239.686770][T11396] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1710'. [ 239.933426][T11410] dvmrp1: entered allmulticast mode [ 239.942019][T11410] dvmrp1: left allmulticast mode [ 240.166076][T11425] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 240.357965][T11433] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 240.450434][T11437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1724'. [ 240.459599][T11437] netlink: 'syz.4.1724': attribute type 7 has an invalid length. [ 240.540051][T11437] netlink: 'syz.4.1724': attribute type 8 has an invalid length. [ 240.569804][T11432] syzkaller0: entered promiscuous mode [ 240.575225][T11439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1725'. [ 240.575347][T11439] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 240.597166][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 240.608991][T11432] syzkaller0: entered allmulticast mode [ 240.707571][T11437] erspan0: entered promiscuous mode [ 240.723960][T11437] erspan0: left promiscuous mode [ 241.021878][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1731'. [ 242.747112][T11458] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.796082][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1735'. [ 242.804531][T11459] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 242.830070][T11460] vlan2: entered promiscuous mode [ 242.856363][T11460] bond4: entered promiscuous mode [ 242.866378][T11460] ip6gretap1: entered promiscuous mode [ 242.887920][T11460] vlan2: entered allmulticast mode [ 242.893728][T11460] bond4: entered allmulticast mode [ 242.903610][T11460] ip6gretap1: entered allmulticast mode [ 242.977381][T11478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1736'. [ 243.056678][T11485] netlink: 'syz.2.1738': attribute type 12 has an invalid length. [ 243.235088][T11496] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1740'. [ 243.251096][T11496] netlink: 'syz.0.1740': attribute type 7 has an invalid length. [ 243.268072][T11496] netlink: 'syz.0.1740': attribute type 8 has an invalid length. [ 243.276047][T11496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1740'. [ 243.306192][T11496] erspan0: entered promiscuous mode [ 243.314829][T11496] gretap0: entered promiscuous mode [ 243.358599][T11496] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 243.381855][T11496] Cannot create hsr debugfs directory [ 243.387468][T11496] hsr1: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.637079][T11511] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 243.663253][T11512] IPVS: set_ctl: invalid protocol: 43 127.0.0.1:20004 [ 243.707932][T11504] syzkaller0: entered promiscuous mode [ 243.732057][T11504] syzkaller0: entered allmulticast mode [ 243.907476][T11507] netlink: 516 bytes leftover after parsing attributes in process `syz.1.1744'. [ 245.902599][T11532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.141708][T11554] Can't find ip_set type [ 246.192288][T11563] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1757'. [ 246.227130][T11563] netlink: 'syz.4.1757': attribute type 7 has an invalid length. [ 246.251292][T11563] netlink: 'syz.4.1757': attribute type 8 has an invalid length. [ 246.259144][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1757'. [ 246.325831][T11563] erspan0: entered promiscuous mode [ 246.349167][T11572] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1760'. [ 246.351370][T11563] erspan0: left promiscuous mode [ 246.671191][T11592] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1761'. [ 246.912527][T11600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.981434][T11603] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 246.998193][T11608] IPVS: length: 139 != 8 [ 247.394135][T11634] netlink: 'syz.2.1777': attribute type 29 has an invalid length. [ 247.402611][T11634] netlink: 'syz.2.1777': attribute type 29 has an invalid length. [ 247.464835][T11638] FAULT_INJECTION: forcing a failure. [ 247.464835][T11638] name failslab, interval 1, probability 0, space 0, times 0 [ 247.478141][T11638] CPU: 0 UID: 0 PID: 11638 Comm: syz.2.1777 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 247.488963][T11638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 247.499064][T11638] Call Trace: [ 247.502391][T11638] [ 247.505368][T11638] dump_stack_lvl+0x241/0x360 [ 247.510106][T11638] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.515365][T11638] ? __pfx__printk+0x10/0x10 [ 247.520034][T11638] ? fs_reclaim_acquire+0x93/0x130 [ 247.525293][T11638] ? __pfx___might_resched+0x10/0x10 [ 247.530633][T11638] should_fail_ex+0x3b0/0x4e0 [ 247.535383][T11638] should_failslab+0xac/0x100 [ 247.540125][T11638] __kmalloc_noprof+0xdd/0x4c0 [ 247.544954][T11638] ? kstrtouint_from_user+0x128/0x190 [ 247.550380][T11638] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 247.556159][T11638] tomoyo_realpath_from_path+0xcf/0x5e0 [ 247.561783][T11638] tomoyo_path_number_perm+0x236/0x860 [ 247.567312][T11638] ? __lock_acquire+0x1397/0x2100 [ 247.572396][T11638] ? tomoyo_path_number_perm+0x206/0x860 [ 247.578096][T11638] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 247.584189][T11638] ? __fget_files+0x2a/0x410 [ 247.588843][T11638] ? __fget_files+0x2a/0x410 [ 247.593503][T11638] security_file_ioctl+0xc6/0x2a0 [ 247.598601][T11638] __se_sys_ioctl+0x46/0x170 [ 247.603251][T11638] do_syscall_64+0xf3/0x230 [ 247.607816][T11638] ? clear_bhb_loop+0x35/0x90 [ 247.612542][T11638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.618494][T11638] RIP: 0033:0x7f7cb0985d29 [ 247.622987][T11638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.642644][T11638] RSP: 002b:00007f7cb179b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.651127][T11638] RAX: ffffffffffffffda RBX: 00007f7cb0b76080 RCX: 00007f7cb0985d29 [ 247.659149][T11638] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000009 [ 247.667175][T11638] RBP: 00007f7cb179b090 R08: 0000000000000000 R09: 0000000000000000 [ 247.675198][T11638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.683216][T11638] R13: 0000000000000000 R14: 00007f7cb0b76080 R15: 00007ffefc245978 [ 247.691257][T11638] [ 247.719585][T11638] ERROR: Out of memory at tomoyo_realpath_from_path. [ 247.955884][T11656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.212339][T11666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1782'. [ 248.369880][T11671] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1783'. [ 248.554197][T11680] x_tables: duplicate entry at hook 1 [ 248.568390][T11680] netlink: 'syz.2.1785': attribute type 1 has an invalid length. [ 248.594151][T11680] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.614462][T11680] bond5: (slave gretap1): making interface the new active one [ 248.626331][T11680] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 249.471554][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1797'. [ 249.601909][T11724] netlink: 'syz.0.1798': attribute type 29 has an invalid length. [ 249.630089][T11724] netlink: 'syz.0.1798': attribute type 29 has an invalid length. [ 249.717658][T11727] netlink: 'syz.4.1801': attribute type 29 has an invalid length. [ 249.739130][T11727] netlink: 'syz.4.1801': attribute type 29 has an invalid length. [ 249.839631][T11729] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 250.499233][T11762] FAULT_INJECTION: forcing a failure. [ 250.499233][T11762] name failslab, interval 1, probability 0, space 0, times 0 [ 250.522714][T11762] CPU: 1 UID: 0 PID: 11762 Comm: syz.2.1814 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 250.533568][T11762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 250.543680][T11762] Call Trace: [ 250.546994][T11762] [ 250.549958][T11762] dump_stack_lvl+0x241/0x360 [ 250.554696][T11762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.559950][T11762] ? __pfx__printk+0x10/0x10 [ 250.564630][T11762] ? kmem_cache_alloc_noprof+0x48/0x380 [ 250.570228][T11762] ? __pfx___might_resched+0x10/0x10 [ 250.575565][T11762] should_fail_ex+0x3b0/0x4e0 [ 250.580317][T11762] should_failslab+0xac/0x100 [ 250.585053][T11762] ? skb_clone+0x20c/0x390 [ 250.589525][T11762] kmem_cache_alloc_noprof+0x70/0x380 [ 250.594961][T11762] skb_clone+0x20c/0x390 [ 250.599263][T11762] nfnetlink_rcv+0x575/0x2ab0 [ 250.603996][T11762] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 250.609783][T11762] ? __dev_queue_xmit+0x1775/0x3f50 [ 250.615030][T11762] ? kasan_save_track+0x51/0x80 [ 250.619926][T11762] ? ____sys_sendmsg+0x52a/0x7e0 [ 250.624915][T11762] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 250.630101][T11762] ? ref_tracker_free+0x643/0x7e0 [ 250.635177][T11762] ? __asan_memcpy+0x40/0x70 [ 250.639815][T11762] ? __pfx_ref_tracker_free+0x10/0x10 [ 250.645253][T11762] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.650488][T11762] ? skb_clone+0x240/0x390 [ 250.654946][T11762] ? __pfx_lock_release+0x10/0x10 [ 250.660015][T11762] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 250.665530][T11762] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.670783][T11762] netlink_unicast+0x7f6/0x990 [ 250.675629][T11762] ? __pfx_netlink_unicast+0x10/0x10 [ 250.680972][T11762] ? __virt_addr_valid+0x45f/0x530 [ 250.686138][T11762] ? __phys_addr_symbol+0x2f/0x70 [ 250.691208][T11762] ? __check_object_size+0x47a/0x730 [ 250.696518][T11762] netlink_sendmsg+0x8e4/0xcb0 [ 250.701312][T11762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.706632][T11762] ? aa_sock_msg_perm+0x91/0x160 [ 250.711591][T11762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.716894][T11762] __sock_sendmsg+0x221/0x270 [ 250.721603][T11762] ____sys_sendmsg+0x52a/0x7e0 [ 250.726481][T11762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.731779][T11762] ? __fget_files+0x2a/0x410 [ 250.736390][T11762] ? __fget_files+0x2a/0x410 [ 250.741009][T11762] __sys_sendmsg+0x269/0x350 [ 250.745622][T11762] ? __pfx_lock_release+0x10/0x10 [ 250.750675][T11762] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.755822][T11762] ? __pfx_vfs_write+0x10/0x10 [ 250.760626][T11762] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.766969][T11762] ? do_syscall_64+0x100/0x230 [ 250.771756][T11762] ? do_syscall_64+0xb6/0x230 [ 250.776453][T11762] do_syscall_64+0xf3/0x230 [ 250.780980][T11762] ? clear_bhb_loop+0x35/0x90 [ 250.785698][T11762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.791618][T11762] RIP: 0033:0x7f7cb0985d29 [ 250.796045][T11762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.815670][T11762] RSP: 002b:00007f7cb17bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.824106][T11762] RAX: ffffffffffffffda RBX: 00007f7cb0b75fa0 RCX: 00007f7cb0985d29 [ 250.832095][T11762] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 250.840083][T11762] RBP: 00007f7cb17bc090 R08: 0000000000000000 R09: 0000000000000000 [ 250.848071][T11762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.856055][T11762] R13: 0000000000000000 R14: 00007f7cb0b75fa0 R15: 00007ffefc245978 [ 250.864056][T11762] [ 250.909739][T11770] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 251.267411][T11786] netlink: 'syz.0.1827': attribute type 9 has an invalid length. [ 251.290445][T11786] netlink: 'syz.0.1827': attribute type 6 has an invalid length. [ 251.308519][T11791] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 251.353165][T11791] netlink: 'syz.2.1826': attribute type 29 has an invalid length. [ 251.363846][T11791] netlink: 'syz.2.1826': attribute type 29 has an invalid length. [ 251.373006][T11782] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 63 [ 251.388756][T11788] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.532455][T11800] FAULT_INJECTION: forcing a failure. [ 251.532455][T11800] name failslab, interval 1, probability 0, space 0, times 0 [ 251.556097][T11800] CPU: 0 UID: 0 PID: 11800 Comm: syz.2.1831 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 251.566946][T11800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.577055][T11800] Call Trace: [ 251.580373][T11800] [ 251.583342][T11800] dump_stack_lvl+0x241/0x360 [ 251.588086][T11800] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.593341][T11800] ? __pfx__printk+0x10/0x10 [ 251.597994][T11800] ? __kmalloc_cache_noprof+0x48/0x390 [ 251.603594][T11800] ? __pfx___might_resched+0x10/0x10 [ 251.608926][T11800] should_fail_ex+0x3b0/0x4e0 [ 251.613666][T11800] should_failslab+0xac/0x100 [ 251.618404][T11800] __kmalloc_cache_noprof+0x70/0x390 [ 251.623744][T11800] ? nfnetlink_rcv+0x1265/0x2ab0 [ 251.628704][T11800] nfnetlink_rcv+0x1265/0x2ab0 [ 251.633536][T11800] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 251.638753][T11800] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.644001][T11800] ? skb_clone+0x240/0x390 [ 251.648517][T11800] ? __pfx_lock_release+0x10/0x10 [ 251.653572][T11800] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.658785][T11800] netlink_unicast+0x7f6/0x990 [ 251.663583][T11800] ? __pfx_netlink_unicast+0x10/0x10 [ 251.668887][T11800] ? __virt_addr_valid+0x45f/0x530 [ 251.674028][T11800] ? __phys_addr_symbol+0x2f/0x70 [ 251.679093][T11800] ? __check_object_size+0x47a/0x730 [ 251.684434][T11800] netlink_sendmsg+0x8e4/0xcb0 [ 251.689267][T11800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.694577][T11800] ? aa_sock_msg_perm+0x91/0x160 [ 251.699554][T11800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.704881][T11800] __sock_sendmsg+0x221/0x270 [ 251.709588][T11800] ____sys_sendmsg+0x52a/0x7e0 [ 251.714392][T11800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.719697][T11800] ? __fget_files+0x2a/0x410 [ 251.724311][T11800] ? __fget_files+0x2a/0x410 [ 251.728922][T11800] __sys_sendmsg+0x269/0x350 [ 251.733538][T11800] ? __pfx_lock_release+0x10/0x10 [ 251.738597][T11800] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.743742][T11800] ? __pfx_vfs_write+0x10/0x10 [ 251.748555][T11800] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.754899][T11800] ? do_syscall_64+0x100/0x230 [ 251.759702][T11800] ? do_syscall_64+0xb6/0x230 [ 251.764434][T11800] do_syscall_64+0xf3/0x230 [ 251.769053][T11800] ? clear_bhb_loop+0x35/0x90 [ 251.773771][T11800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.779684][T11800] RIP: 0033:0x7f7cb0985d29 [ 251.784136][T11800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.803784][T11800] RSP: 002b:00007f7cb17bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.812246][T11800] RAX: ffffffffffffffda RBX: 00007f7cb0b75fa0 RCX: 00007f7cb0985d29 [ 251.820268][T11800] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 251.828267][T11800] RBP: 00007f7cb17bc090 R08: 0000000000000000 R09: 0000000000000000 [ 251.836265][T11800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.844304][T11800] R13: 0000000000000000 R14: 00007f7cb0b75fa0 R15: 00007ffefc245978 [ 251.852310][T11800] [ 252.056472][T11809] xt_NFQUEUE: number of total queues is 0 [ 252.076795][T11809] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.094886][T11809] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1833'. [ 252.126371][T11809] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1833'. [ 252.171007][T11809] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1833'. [ 252.216650][T11822] netlink: 'syz.0.1838': attribute type 9 has an invalid length. [ 252.238068][T11821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.365455][T11831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1839'. [ 252.392295][T11830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1841'. [ 252.402535][T11830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1841'. [ 252.613808][T11840] FAULT_INJECTION: forcing a failure. [ 252.613808][T11840] name failslab, interval 1, probability 0, space 0, times 0 [ 252.648584][T11840] CPU: 1 UID: 0 PID: 11840 Comm: syz.3.1842 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 252.659433][T11840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 252.669534][T11840] Call Trace: [ 252.672855][T11840] [ 252.675817][T11840] dump_stack_lvl+0x241/0x360 [ 252.680548][T11840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.685786][T11840] ? __pfx__printk+0x10/0x10 [ 252.690398][T11840] ? __kmalloc_cache_noprof+0x48/0x390 [ 252.695878][T11840] ? __pfx___might_resched+0x10/0x10 [ 252.701207][T11840] should_fail_ex+0x3b0/0x4e0 [ 252.705911][T11840] should_failslab+0xac/0x100 [ 252.710609][T11840] __kmalloc_cache_noprof+0x70/0x390 [ 252.715920][T11840] ? rfcomm_dlc_alloc+0x76/0x410 [ 252.720881][T11840] rfcomm_dlc_alloc+0x76/0x410 [ 252.725667][T11840] rfcomm_dev_ioctl+0xf3e/0x2220 [ 252.730640][T11840] ? __pfx_lock_release+0x10/0x10 [ 252.735687][T11840] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 252.741074][T11840] ? tomoyo_path_number_perm+0x679/0x860 [ 252.746732][T11840] ? tomoyo_path_number_perm+0x679/0x860 [ 252.752396][T11840] ? __lock_acquire+0x1397/0x2100 [ 252.757441][T11840] ? bt_sock_ioctl+0xe9/0x2c0 [ 252.762135][T11840] sock_do_ioctl+0x158/0x460 [ 252.766751][T11840] ? __pfx_sock_do_ioctl+0x10/0x10 [ 252.771896][T11840] sock_ioctl+0x626/0x8e0 [ 252.776247][T11840] ? __pfx_sock_ioctl+0x10/0x10 [ 252.781117][T11840] ? __fget_files+0x2a/0x410 [ 252.785731][T11840] ? __fget_files+0x2a/0x410 [ 252.790343][T11840] ? __pfx_sock_ioctl+0x10/0x10 [ 252.795212][T11840] __se_sys_ioctl+0xf5/0x170 [ 252.799819][T11840] do_syscall_64+0xf3/0x230 [ 252.804345][T11840] ? clear_bhb_loop+0x35/0x90 [ 252.809033][T11840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.814946][T11840] RIP: 0033:0x7f705e785d29 [ 252.819373][T11840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.839001][T11840] RSP: 002b:00007f705f606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.847435][T11840] RAX: ffffffffffffffda RBX: 00007f705e976080 RCX: 00007f705e785d29 [ 252.855424][T11840] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000009 [ 252.863410][T11840] RBP: 00007f705f606090 R08: 0000000000000000 R09: 0000000000000000 [ 252.871395][T11840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.879387][T11840] R13: 0000000000000000 R14: 00007f705e976080 R15: 00007fff5b60d298 [ 252.887387][T11840] [ 253.305193][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 253.318935][T11867] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 253.330807][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 253.427967][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 253.437334][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1855'. [ 253.702372][T11885] FAULT_INJECTION: forcing a failure. [ 253.702372][T11885] name failslab, interval 1, probability 0, space 0, times 0 [ 253.750777][T11885] CPU: 1 UID: 0 PID: 11885 Comm: syz.0.1858 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 253.761626][T11885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 253.771724][T11885] Call Trace: [ 253.775033][T11885] [ 253.777999][T11885] dump_stack_lvl+0x241/0x360 [ 253.782777][T11885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.788041][T11885] ? __pfx__printk+0x10/0x10 [ 253.792691][T11885] ? __kmalloc_cache_noprof+0x48/0x390 [ 253.798210][T11885] ? __pfx___might_resched+0x10/0x10 [ 253.803550][T11885] should_fail_ex+0x3b0/0x4e0 [ 253.808299][T11885] should_failslab+0xac/0x100 [ 253.813028][T11885] __kmalloc_cache_noprof+0x70/0x390 [ 253.818361][T11885] ? nfnetlink_rcv+0x1265/0x2ab0 [ 253.823360][T11885] nfnetlink_rcv+0x1265/0x2ab0 [ 253.828228][T11885] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 253.833457][T11885] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.838700][T11885] ? skb_clone+0x240/0x390 [ 253.843167][T11885] ? __pfx_lock_release+0x10/0x10 [ 253.848250][T11885] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.853496][T11885] netlink_unicast+0x7f6/0x990 [ 253.858323][T11885] ? __pfx_netlink_unicast+0x10/0x10 [ 253.863660][T11885] ? __virt_addr_valid+0x45f/0x530 [ 253.868821][T11885] ? __phys_addr_symbol+0x2f/0x70 [ 253.873891][T11885] ? __check_object_size+0x47a/0x730 [ 253.879249][T11885] netlink_sendmsg+0x8e4/0xcb0 [ 253.884083][T11885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.889421][T11885] ? aa_sock_msg_perm+0x91/0x160 [ 253.894405][T11885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.899734][T11885] __sock_sendmsg+0x221/0x270 [ 253.904466][T11885] ____sys_sendmsg+0x52a/0x7e0 [ 253.909289][T11885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.914623][T11885] ? __fget_files+0x2a/0x410 [ 253.919266][T11885] ? __fget_files+0x2a/0x410 [ 253.923912][T11885] __sys_sendmsg+0x269/0x350 [ 253.928547][T11885] ? __pfx_lock_release+0x10/0x10 [ 253.933621][T11885] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.938795][T11885] ? __pfx_vfs_write+0x10/0x10 [ 253.943632][T11885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.950010][T11885] ? do_syscall_64+0x100/0x230 [ 253.954837][T11885] ? do_syscall_64+0xb6/0x230 [ 253.959572][T11885] do_syscall_64+0xf3/0x230 [ 253.964135][T11885] ? clear_bhb_loop+0x35/0x90 [ 253.968858][T11885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.974809][T11885] RIP: 0033:0x7f6eb4b85d29 [ 253.979269][T11885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.998926][T11885] RSP: 002b:00007f6eb5a70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.007401][T11885] RAX: ffffffffffffffda RBX: 00007f6eb4d75fa0 RCX: 00007f6eb4b85d29 [ 254.015424][T11885] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 254.023445][T11885] RBP: 00007f6eb5a70090 R08: 0000000000000000 R09: 0000000000000000 [ 254.031463][T11885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.039481][T11885] R13: 0000000000000000 R14: 00007f6eb4d75fa0 R15: 00007ffe81180528 [ 254.047524][T11885] [ 254.292772][T11907] tipc: Invalid UDP bearer configuration [ 254.292818][T11907] tipc: Enabling of bearer rejected, failed to enable media [ 254.483322][T11923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.619773][T11928] validate_nla: 4 callbacks suppressed [ 254.619829][T11928] netlink: 'syz.0.1873': attribute type 7 has an invalid length. [ 254.701283][T11928] netlink: 'syz.0.1873': attribute type 8 has an invalid length. [ 254.824578][T11936] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 254.857856][T11936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.898039][T11938] FAULT_INJECTION: forcing a failure. [ 254.898039][T11938] name failslab, interval 1, probability 0, space 0, times 0 [ 254.954779][T11938] CPU: 0 UID: 0 PID: 11938 Comm: syz.4.1877 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 254.965632][T11938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 254.975737][T11938] Call Trace: [ 254.979062][T11938] [ 254.982056][T11938] dump_stack_lvl+0x241/0x360 [ 254.986816][T11938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.992085][T11938] ? __pfx__printk+0x10/0x10 [ 254.996742][T11938] ? __kmalloc_cache_noprof+0x48/0x390 [ 255.002264][T11938] ? __pfx___might_resched+0x10/0x10 [ 255.007616][T11938] should_fail_ex+0x3b0/0x4e0 [ 255.012373][T11938] should_failslab+0xac/0x100 [ 255.017120][T11938] __kmalloc_cache_noprof+0x70/0x390 [ 255.022467][T11938] ? nfnetlink_rcv+0x1265/0x2ab0 [ 255.027466][T11938] nfnetlink_rcv+0x1265/0x2ab0 [ 255.032318][T11938] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 255.037540][T11938] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.042816][T11938] ? skb_clone+0x240/0x390 [ 255.047290][T11938] ? __pfx_lock_release+0x10/0x10 [ 255.052394][T11938] ? netlink_deliver_tap+0x2e/0x1b0 [ 255.057653][T11938] netlink_unicast+0x7f6/0x990 [ 255.062498][T11938] ? __pfx_netlink_unicast+0x10/0x10 [ 255.067851][T11938] ? __virt_addr_valid+0x45f/0x530 [ 255.073017][T11938] ? __phys_addr_symbol+0x2f/0x70 [ 255.078100][T11938] ? __check_object_size+0x47a/0x730 [ 255.083536][T11938] netlink_sendmsg+0x8e4/0xcb0 [ 255.088415][T11938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.093762][T11938] ? aa_sock_msg_perm+0x91/0x160 [ 255.098763][T11938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.104100][T11938] __sock_sendmsg+0x221/0x270 [ 255.108846][T11938] ____sys_sendmsg+0x52a/0x7e0 [ 255.113682][T11938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.119025][T11938] ? __fget_files+0x2a/0x410 [ 255.123676][T11938] ? __fget_files+0x2a/0x410 [ 255.128418][T11938] __sys_sendmsg+0x269/0x350 [ 255.133056][T11938] ? __pfx_lock_release+0x10/0x10 [ 255.138136][T11938] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.143319][T11938] ? __pfx_vfs_write+0x10/0x10 [ 255.148166][T11938] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.154542][T11938] ? do_syscall_64+0x100/0x230 [ 255.159360][T11938] ? do_syscall_64+0xb6/0x230 [ 255.164100][T11938] do_syscall_64+0xf3/0x230 [ 255.168667][T11938] ? clear_bhb_loop+0x35/0x90 [ 255.168857][T11949] FAULT_INJECTION: forcing a failure. [ 255.168857][T11949] name failslab, interval 1, probability 0, space 0, times 0 [ 255.173368][T11938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.173406][T11938] RIP: 0033:0x7f9ee4f85d29 [ 255.173427][T11938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.173448][T11938] RSP: 002b:00007f9ee5e45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.224478][T11938] RAX: ffffffffffffffda RBX: 00007f9ee5175fa0 RCX: 00007f9ee4f85d29 [ 255.232475][T11938] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 255.240472][T11938] RBP: 00007f9ee5e45090 R08: 0000000000000000 R09: 0000000000000000 [ 255.248521][T11938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.256535][T11938] R13: 0000000000000000 R14: 00007f9ee5175fa0 R15: 00007ffe790703e8 [ 255.264563][T11938] [ 255.267612][T11949] CPU: 1 UID: 0 PID: 11949 Comm: syz.2.1881 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 255.278433][T11949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 255.288568][T11949] Call Trace: [ 255.291864][T11949] [ 255.294806][T11949] dump_stack_lvl+0x241/0x360 [ 255.299511][T11949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.304732][T11949] ? __pfx__printk+0x10/0x10 [ 255.309346][T11949] ? fs_reclaim_acquire+0x93/0x130 [ 255.314481][T11949] ? __pfx___might_resched+0x10/0x10 [ 255.319793][T11949] should_fail_ex+0x3b0/0x4e0 [ 255.324500][T11949] should_failslab+0xac/0x100 [ 255.329197][T11949] __kmalloc_noprof+0xdd/0x4c0 [ 255.333977][T11949] ? kstrtouint_from_user+0x128/0x190 [ 255.339366][T11949] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 255.345109][T11949] tomoyo_realpath_from_path+0xcf/0x5e0 [ 255.350681][T11949] tomoyo_path_number_perm+0x236/0x860 [ 255.356162][T11949] ? __lock_acquire+0x1397/0x2100 [ 255.361206][T11949] ? tomoyo_path_number_perm+0x206/0x860 [ 255.366865][T11949] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 255.372901][T11949] ? __fget_files+0x2a/0x410 [ 255.377526][T11949] ? __fget_files+0x2a/0x410 [ 255.382167][T11949] security_file_ioctl+0xc6/0x2a0 [ 255.387215][T11949] __se_sys_ioctl+0x46/0x170 [ 255.391824][T11949] do_syscall_64+0xf3/0x230 [ 255.396356][T11949] ? clear_bhb_loop+0x35/0x90 [ 255.401046][T11949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.406963][T11949] RIP: 0033:0x7f7cb0985d29 [ 255.411397][T11949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.431058][T11949] RSP: 002b:00007f7cb17bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 255.439494][T11949] RAX: ffffffffffffffda RBX: 00007f7cb0b75fa0 RCX: 00007f7cb0985d29 [ 255.447482][T11949] RDX: 00000000200004c0 RSI: 0000000000008955 RDI: 0000000000000003 [ 255.455470][T11949] RBP: 00007f7cb17bc090 R08: 0000000000000000 R09: 0000000000000000 [ 255.463459][T11949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.471466][T11949] R13: 0000000000000000 R14: 00007f7cb0b75fa0 R15: 00007ffefc245978 [ 255.479464][T11949] [ 255.483512][T11949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 255.719880][T11956] Cannot find del_set index 17 as target [ 255.828021][T11963] netlink: 'syz.4.1889': attribute type 6 has an invalid length. [ 255.836236][T11963] netlink: 'syz.4.1889': attribute type 5 has an invalid length. [ 255.844136][T11964] netlink: 'syz.4.1889': attribute type 6 has an invalid length. [ 255.852202][T11964] netlink: 'syz.4.1889': attribute type 5 has an invalid length. [ 255.899274][T11968] netlink: 'syz.1.1890': attribute type 7 has an invalid length. [ 255.906250][T11969] netlink: 'syz.0.1886': attribute type 21 has an invalid length. [ 255.907289][T11968] netlink: 'syz.1.1890': attribute type 8 has an invalid length. [ 255.941534][T11969] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.044830][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.045756][T11968] erspan0: entered promiscuous mode [ 256.076475][T11968] batadv_slave_1: entered promiscuous mode [ 256.083872][T11968] gretap0: entered promiscuous mode [ 256.170937][T11983] FAULT_INJECTION: forcing a failure. [ 256.170937][T11983] name failslab, interval 1, probability 0, space 0, times 0 [ 256.184270][T11983] CPU: 0 UID: 0 PID: 11983 Comm: syz.0.1895 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 256.195101][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 256.205661][T11983] Call Trace: [ 256.209070][T11983] [ 256.212046][T11983] dump_stack_lvl+0x241/0x360 [ 256.216787][T11983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.222188][T11983] ? __pfx__printk+0x10/0x10 [ 256.226874][T11983] ? fs_reclaim_acquire+0x93/0x130 [ 256.232053][T11983] ? __pfx___might_resched+0x10/0x10 [ 256.237422][T11983] ? dynamic_dname+0x141/0x1b0 [ 256.242253][T11983] should_fail_ex+0x3b0/0x4e0 [ 256.247000][T11983] should_failslab+0xac/0x100 [ 256.251742][T11983] __kmalloc_noprof+0xdd/0x4c0 [ 256.256579][T11983] ? tomoyo_encode+0x26f/0x540 [ 256.261409][T11983] tomoyo_encode+0x26f/0x540 [ 256.266064][T11983] ? __pfx_sockfs_dname+0x10/0x10 [ 256.271164][T11983] tomoyo_realpath_from_path+0x59e/0x5e0 [ 256.276879][T11983] tomoyo_path_number_perm+0x236/0x860 [ 256.282420][T11983] ? __lock_acquire+0x1397/0x2100 [ 256.287518][T11983] ? tomoyo_path_number_perm+0x206/0x860 [ 256.293228][T11983] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 256.299328][T11983] ? __fget_files+0x2a/0x410 [ 256.303992][T11983] ? __fget_files+0x2a/0x410 [ 256.308650][T11983] security_file_ioctl+0xc6/0x2a0 [ 256.313736][T11983] __se_sys_ioctl+0x46/0x170 [ 256.318383][T11983] do_syscall_64+0xf3/0x230 [ 256.322938][T11983] ? clear_bhb_loop+0x35/0x90 [ 256.327659][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.333608][T11983] RIP: 0033:0x7f6eb4b85d29 [ 256.338068][T11983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.357728][T11983] RSP: 002b:00007f6eb5a70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.366214][T11983] RAX: ffffffffffffffda RBX: 00007f6eb4d75fa0 RCX: 00007f6eb4b85d29 [ 256.374241][T11983] RDX: 00000000200004c0 RSI: 0000000000008955 RDI: 0000000000000003 [ 256.382267][T11983] RBP: 00007f6eb5a70090 R08: 0000000000000000 R09: 0000000000000000 [ 256.390292][T11983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.398322][T11983] R13: 0000000000000000 R14: 00007f6eb4d75fa0 R15: 00007ffe81180528 [ 256.406370][T11983] [ 256.410907][T11983] ERROR: Out of memory at tomoyo_realpath_from_path. [ 256.564722][T11993] netlink: 'syz.3.1899': attribute type 29 has an invalid length. [ 257.020393][T12018] FAULT_INJECTION: forcing a failure. [ 257.020393][T12018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.060970][T12018] CPU: 1 UID: 0 PID: 12018 Comm: syz.1.1910 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 257.071824][T12018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.081928][T12018] Call Trace: [ 257.085249][T12018] [ 257.088217][T12018] dump_stack_lvl+0x241/0x360 [ 257.092955][T12018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.098224][T12018] ? __pfx__printk+0x10/0x10 [ 257.102876][T12018] ? __pfx_lock_release+0x10/0x10 [ 257.107959][T12018] should_fail_ex+0x3b0/0x4e0 [ 257.112710][T12018] _copy_from_user+0x2f/0xc0 [ 257.117356][T12018] arp_ioctl+0x142/0x530 [ 257.121636][T12018] ? __pfx_arp_ioctl+0x10/0x10 [ 257.126446][T12018] inet_ioctl+0x2b5/0x4f0 [ 257.130803][T12018] ? tomoyo_path_number_perm+0x206/0x860 [ 257.136465][T12018] ? __pfx_inet_ioctl+0x10/0x10 [ 257.141340][T12018] ? tomoyo_path_number_perm+0x679/0x860 [ 257.147011][T12018] ? __lock_acquire+0x1397/0x2100 [ 257.152065][T12018] ? tomoyo_path_number_perm+0x206/0x860 [ 257.157737][T12018] sock_do_ioctl+0x158/0x460 [ 257.162396][T12018] ? __pfx_sock_do_ioctl+0x10/0x10 [ 257.167561][T12018] sock_ioctl+0x626/0x8e0 [ 257.171931][T12018] ? __pfx_sock_ioctl+0x10/0x10 [ 257.176829][T12018] ? __fget_files+0x2a/0x410 [ 257.181463][T12018] ? __fget_files+0x2a/0x410 [ 257.186096][T12018] ? __pfx_sock_ioctl+0x10/0x10 [ 257.191001][T12018] __se_sys_ioctl+0xf5/0x170 [ 257.195617][T12018] do_syscall_64+0xf3/0x230 [ 257.200153][T12018] ? clear_bhb_loop+0x35/0x90 [ 257.204849][T12018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.210772][T12018] RIP: 0033:0x7f6e02385d29 [ 257.215208][T12018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.234937][T12018] RSP: 002b:00007f6e0318f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.243378][T12018] RAX: ffffffffffffffda RBX: 00007f6e02575fa0 RCX: 00007f6e02385d29 [ 257.251370][T12018] RDX: 00000000200004c0 RSI: 0000000000008955 RDI: 0000000000000003 [ 257.259366][T12018] RBP: 00007f6e0318f090 R08: 0000000000000000 R09: 0000000000000000 [ 257.267357][T12018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.275349][T12018] R13: 0000000000000000 R14: 00007f6e02575fa0 R15: 00007ffc9746ca58 [ 257.283375][T12018] [ 257.312014][T12014] __nla_validate_parse: 17 callbacks suppressed [ 257.312041][T12014] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1909'. [ 257.334192][T12014] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1909'. [ 257.441514][T12020] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.1912'. [ 257.877280][T12048] FAULT_INJECTION: forcing a failure. [ 257.877280][T12048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.890938][T12048] CPU: 1 UID: 0 PID: 12048 Comm: syz.0.1923 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 257.901772][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.911878][T12048] Call Trace: [ 257.915257][T12048] [ 257.918241][T12048] dump_stack_lvl+0x241/0x360 [ 257.922980][T12048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.928234][T12048] ? __pfx__printk+0x10/0x10 [ 257.932887][T12048] ? snprintf+0xda/0x120 [ 257.937183][T12048] should_fail_ex+0x3b0/0x4e0 [ 257.941928][T12048] _copy_to_user+0x31/0xb0 [ 257.946411][T12048] simple_read_from_buffer+0xca/0x150 [ 257.951838][T12048] proc_fail_nth_read+0x1e9/0x250 [ 257.956917][T12048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.962521][T12048] ? rw_verify_area+0x55e/0x6f0 [ 257.967434][T12048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.973034][T12048] vfs_read+0x1fc/0xb70 [ 257.977248][T12048] ? __pfx___mutex_lock+0x10/0x10 [ 257.982330][T12048] ? __pfx_vfs_read+0x10/0x10 [ 257.987057][T12048] ? __fget_files+0x2a/0x410 [ 257.991699][T12048] ? __fget_files+0x395/0x410 [ 257.996424][T12048] ? __fget_files+0x2a/0x410 [ 258.001070][T12048] ksys_read+0x18f/0x2b0 [ 258.005350][T12048] ? __pfx_ksys_read+0x10/0x10 [ 258.010134][T12048] ? do_syscall_64+0x100/0x230 [ 258.014933][T12048] ? do_syscall_64+0xb6/0x230 [ 258.019637][T12048] do_syscall_64+0xf3/0x230 [ 258.024165][T12048] ? clear_bhb_loop+0x35/0x90 [ 258.028859][T12048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.034772][T12048] RIP: 0033:0x7f6eb4b8473c [ 258.039203][T12048] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 258.058827][T12048] RSP: 002b:00007f6eb5a70030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 258.067287][T12048] RAX: ffffffffffffffda RBX: 00007f6eb4d75fa0 RCX: 00007f6eb4b8473c [ 258.075274][T12048] RDX: 000000000000000f RSI: 00007f6eb5a700a0 RDI: 0000000000000004 [ 258.083270][T12048] RBP: 00007f6eb5a70090 R08: 0000000000000000 R09: 0000000000000000 [ 258.091265][T12048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.099248][T12048] R13: 0000000000000000 R14: 00007f6eb4d75fa0 R15: 00007ffe81180528 [ 258.107253][T12048] [ 258.260805][T12060] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 258.273090][T12061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1928'. [ 258.277296][T12060] team0: Device ipvlan2 is already an upper device of the team interface [ 258.370893][T12070] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1930'. [ 258.383905][T12062] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1926'. [ 258.400705][T12072] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 258.451661][T12072] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1931'. [ 258.471232][T12062] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1926'. [ 258.487225][T12062] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1926'. [ 258.518856][T12071] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 258.831138][T12089] team0: mtu less than device minimum [ 259.048495][T12102] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1939'. [ 259.843307][T12139] xt_CT: You must specify a L4 protocol and not use inversions on it [ 259.908059][T12144] FAULT_INJECTION: forcing a failure. [ 259.908059][T12144] name failslab, interval 1, probability 0, space 0, times 0 [ 259.920801][T12144] CPU: 1 UID: 0 PID: 12144 Comm: syz.1.1950 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 259.931625][T12144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.941735][T12144] Call Trace: [ 259.945058][T12144] [ 259.948037][T12144] dump_stack_lvl+0x241/0x360 [ 259.952784][T12144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.958044][T12144] ? __pfx__printk+0x10/0x10 [ 259.962704][T12144] should_fail_ex+0x3b0/0x4e0 [ 259.967454][T12144] should_failslab+0xac/0x100 [ 259.972191][T12144] ? skb_clone+0x20c/0x390 [ 259.976665][T12144] kmem_cache_alloc_noprof+0x70/0x380 [ 259.982103][T12144] skb_clone+0x20c/0x390 [ 259.986404][T12144] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 259.991661][T12144] dev_queue_xmit_nit+0x249/0xca0 [ 259.996740][T12144] ? dev_queue_xmit_nit+0x2b/0xca0 [ 260.001908][T12144] ? validate_xmit_skb+0x9b8/0xff0 [ 260.007094][T12144] dev_hard_start_xmit+0x15f/0x7d0 [ 260.012272][T12144] ? __pfx_validate_xmit_skb+0x10/0x10 [ 260.017802][T12144] __dev_queue_xmit+0x1b73/0x3f50 [ 260.022892][T12144] ? netlink_unicast+0x39d/0x990 [ 260.027905][T12144] ? __sys_sendmsg+0x269/0x350 [ 260.032728][T12144] ? __dev_queue_xmit+0x2f4/0x3f50 [ 260.037899][T12144] ? __pfx___dev_queue_xmit+0x10/0x10 [ 260.043354][T12144] ? __copy_skb_header+0x437/0x5b0 [ 260.048527][T12144] ? __asan_memcpy+0x40/0x70 [ 260.053164][T12144] ? __copy_skb_header+0x437/0x5b0 [ 260.058341][T12144] ? __skb_clone+0x454/0x6c0 [ 260.063040][T12144] ? skb_clone+0x240/0x390 [ 260.067509][T12144] __netlink_deliver_tap+0x56b/0x7f0 [ 260.072856][T12144] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.078113][T12144] netlink_deliver_tap+0x19d/0x1b0 [ 260.083274][T12144] netlink_sendskb+0x68/0x140 [ 260.088017][T12144] netlink_unicast+0x39d/0x990 [ 260.092855][T12144] ? __pfx_netlink_unicast+0x10/0x10 [ 260.098225][T12144] nfnetlink_rcv+0x26bd/0x2ab0 [ 260.103087][T12144] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 260.108310][T12144] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.113562][T12144] ? skb_clone+0x240/0x390 [ 260.118033][T12144] ? __pfx_lock_release+0x10/0x10 [ 260.123125][T12144] ? netlink_deliver_tap+0x2e/0x1b0 [ 260.128380][T12144] netlink_unicast+0x7f6/0x990 [ 260.133218][T12144] ? __pfx_netlink_unicast+0x10/0x10 [ 260.138562][T12144] ? __virt_addr_valid+0x45f/0x530 [ 260.143728][T12144] ? __phys_addr_symbol+0x2f/0x70 [ 260.148812][T12144] ? __check_object_size+0x47a/0x730 [ 260.154166][T12144] netlink_sendmsg+0x8e4/0xcb0 [ 260.158997][T12144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.164335][T12144] ? aa_sock_msg_perm+0x91/0x160 [ 260.169342][T12144] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.174692][T12144] __sock_sendmsg+0x221/0x270 [ 260.179442][T12144] ____sys_sendmsg+0x52a/0x7e0 [ 260.184278][T12144] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.189624][T12144] ? __fget_files+0x2a/0x410 [ 260.194283][T12144] ? __fget_files+0x2a/0x410 [ 260.198954][T12144] __sys_sendmsg+0x269/0x350 [ 260.203606][T12144] ? __pfx_lock_release+0x10/0x10 [ 260.208689][T12144] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.213872][T12144] ? __pfx_vfs_write+0x10/0x10 [ 260.218715][T12144] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.225104][T12144] ? do_syscall_64+0x100/0x230 [ 260.229938][T12144] ? do_syscall_64+0xb6/0x230 [ 260.234692][T12144] do_syscall_64+0xf3/0x230 [ 260.239262][T12144] ? clear_bhb_loop+0x35/0x90 [ 260.243991][T12144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.249956][T12144] RIP: 0033:0x7f6e02385d29 [ 260.254421][T12144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.274082][T12144] RSP: 002b:00007f6e0318f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.282558][T12144] RAX: ffffffffffffffda RBX: 00007f6e02575fa0 RCX: 00007f6e02385d29 [ 260.290583][T12144] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 260.298607][T12144] RBP: 00007f6e0318f090 R08: 0000000000000000 R09: 0000000000000000 [ 260.306625][T12144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.314643][T12144] R13: 0000000000000000 R14: 00007f6e02575fa0 R15: 00007ffc9746ca58 [ 260.322684][T12144] [ 260.738116][T12172] IPVS: set_ctl: invalid protocol: 22 100.1.1.0:20000 [ 262.244581][T12254] TCP: tcp_parse_options: Illegal window scaling value 72 > 14 received [ 262.495374][T12262] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 85 [ 262.858240][T12274] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 262.897858][T12274] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.822005][T12325] __nla_validate_parse: 8 callbacks suppressed [ 263.822030][T12325] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1990'. [ 263.851064][ T5850] Bluetooth: hci4: link tx timeout [ 263.857298][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 263.964684][T12334] validate_nla: 7 callbacks suppressed [ 263.964717][T12334] netlink: 'syz.1.1995': attribute type 1 has an invalid length. [ 264.073518][T12332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.180214][T12347] SET target dimension over the limit! [ 264.219159][T12334] 8021q: adding VLAN 0 to HW filter on device bond8 [ 264.251479][T12341] 8021q: adding VLAN 0 to HW filter on device bond9 [ 264.275188][T12341] bond8: (slave bond9): Enslaving as an active interface with a down link [ 264.359477][T12354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2001'. [ 264.376382][T12332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.391862][T12354] netlink: 'syz.3.2001': attribute type 7 has an invalid length. [ 264.410648][T12357] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2003'. [ 264.411487][ T5850] Bluetooth: hci4: link tx timeout [ 264.426045][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 264.428643][T12354] netlink: 'syz.3.2001': attribute type 8 has an invalid length. [ 264.445677][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 264.522500][T12364] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2004'. [ 264.549301][T12332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.702285][T12332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.809184][T12372] netlink: 'syz.1.2008': attribute type 1 has an invalid length. [ 264.854305][T12372] netlink: 'syz.1.2008': attribute type 1 has an invalid length. [ 264.960074][T12332] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.023570][T12332] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.070406][T12332] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.121788][T12332] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.236254][T12391] SET target dimension over the limit! [ 265.245695][T12395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2013'. [ 265.465242][T12406] netlink: 'syz.3.2017': attribute type 1 has an invalid length. [ 265.491649][T12406] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2017'. [ 265.623720][T12414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2019'. [ 265.685951][T12414] netlink: 'syz.3.2019': attribute type 7 has an invalid length. [ 265.736892][T12414] netlink: 'syz.3.2019': attribute type 8 has an invalid length. [ 265.777649][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2019'. [ 265.874195][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 265.955449][T12432] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 266.187748][T12442] SET target dimension over the limit! [ 266.638972][T12471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2036'. [ 266.648348][T12471] netlink: 'syz.2.2036': attribute type 7 has an invalid length. [ 266.656271][T12471] netlink: 'syz.2.2036': attribute type 8 has an invalid length. [ 266.902799][T12481] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 266.921000][T12482] (unnamed net_device) (uninitialized): option coupled_control: invalid value (52) [ 266.977248][T12485] FAULT_INJECTION: forcing a failure. [ 266.977248][T12485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.026297][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.3.2042 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 267.037156][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 267.047269][T12485] Call Trace: [ 267.050295][T12487] SET target dimension over the limit! [ 267.050565][T12485] [ 267.050580][T12485] dump_stack_lvl+0x241/0x360 [ 267.050623][T12485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.050656][T12485] ? __pfx__printk+0x10/0x10 [ 267.073585][T12485] ? __pfx_lock_release+0x10/0x10 [ 267.078675][T12485] should_fail_ex+0x3b0/0x4e0 [ 267.083421][T12485] _copy_from_user+0x2f/0xc0 [ 267.088067][T12485] do_sock_getsockopt+0x1d1/0x7e0 [ 267.093156][T12485] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 267.098757][T12485] ? __fget_files+0x2a/0x410 [ 267.103406][T12485] ? __fget_files+0x395/0x410 [ 267.108135][T12485] ? __fget_files+0x2a/0x410 [ 267.112794][T12485] __x64_sys_getsockopt+0x2a1/0x370 [ 267.118064][T12485] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 267.123842][T12485] ? do_syscall_64+0x100/0x230 [ 267.128675][T12485] ? do_syscall_64+0xb6/0x230 [ 267.133415][T12485] do_syscall_64+0xf3/0x230 [ 267.137978][T12485] ? clear_bhb_loop+0x35/0x90 [ 267.142703][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.148659][T12485] RIP: 0033:0x7f705e785d29 [ 267.153131][T12485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.172791][T12485] RSP: 002b:00007f705f627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 267.181271][T12485] RAX: ffffffffffffffda RBX: 00007f705e975fa0 RCX: 00007f705e785d29 [ 267.189299][T12485] RDX: 0000000000000072 RSI: 0000000000000084 RDI: 0000000000000003 [ 267.197326][T12485] RBP: 00007f705f627090 R08: 0000000020000080 R09: 0000000000000000 [ 267.205357][T12485] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 267.213380][T12485] R13: 0000000000000000 R14: 00007f705e975fa0 R15: 00007fff5b60d298 [ 267.221429][T12485] [ 267.441218][T12501] x_tables: duplicate underflow at hook 3 [ 267.458000][T12497] tipc: Enabled bearer , priority 0 [ 267.633110][T12502] syzkaller0: entered promiscuous mode [ 267.643520][T12502] syzkaller0: entered allmulticast mode [ 267.650051][T12502] tipc: Resetting bearer [ 267.679966][T12507] IPv6: sit3: Disabled Multicast RS [ 267.688792][T12496] tipc: Resetting bearer [ 268.126431][T12520] Cannot find map_set index 0 as target [ 269.605252][T12496] tipc: Disabling bearer [ 269.615082][T12491] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 269.646120][T12522] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 269.827393][T12535] validate_nla: 3 callbacks suppressed [ 269.827419][T12535] netlink: 'syz.1.2061': attribute type 1 has an invalid length. [ 269.861744][T12536] FAULT_INJECTION: forcing a failure. [ 269.861744][T12536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.880643][T12535] __nla_validate_parse: 7 callbacks suppressed [ 269.880663][T12535] netlink: 134728 bytes leftover after parsing attributes in process `syz.1.2061'. [ 269.900964][T12536] CPU: 1 UID: 0 PID: 12536 Comm: syz.3.2059 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 269.911844][T12536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 269.921919][T12536] Call Trace: [ 269.925209][T12536] [ 269.928149][T12536] dump_stack_lvl+0x241/0x360 [ 269.932856][T12536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.938077][T12536] ? __pfx__printk+0x10/0x10 [ 269.942686][T12536] ? __pfx_lock_release+0x10/0x10 [ 269.947737][T12536] should_fail_ex+0x3b0/0x4e0 [ 269.952454][T12536] _copy_from_user+0x2f/0xc0 [ 269.957092][T12536] sctp_getsockopt_default_prinfo+0xc4/0x680 [ 269.963107][T12536] ? __local_bh_enable_ip+0x168/0x200 [ 269.968506][T12536] ? __pfx_sctp_getsockopt_default_prinfo+0x10/0x10 [ 269.975119][T12536] sctp_getsockopt+0x77b/0xbb0 [ 269.979901][T12536] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 269.985826][T12536] do_sock_getsockopt+0x3c4/0x7e0 [ 269.990880][T12536] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 269.996440][T12536] ? __fget_files+0x2a/0x410 [ 270.001054][T12536] ? __fget_files+0x395/0x410 [ 270.005753][T12536] ? __fget_files+0x2a/0x410 [ 270.010369][T12536] __x64_sys_getsockopt+0x2a1/0x370 [ 270.015599][T12536] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 270.021340][T12536] ? do_syscall_64+0x100/0x230 [ 270.026151][T12536] ? do_syscall_64+0xb6/0x230 [ 270.030866][T12536] do_syscall_64+0xf3/0x230 [ 270.035407][T12536] ? clear_bhb_loop+0x35/0x90 [ 270.040111][T12536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.046032][T12536] RIP: 0033:0x7f705e785d29 [ 270.050464][T12536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.070108][T12536] RSP: 002b:00007f705f627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 270.078547][T12536] RAX: ffffffffffffffda RBX: 00007f705e975fa0 RCX: 00007f705e785d29 [ 270.086535][T12536] RDX: 0000000000000072 RSI: 0000000000000084 RDI: 0000000000000003 [ 270.094571][T12536] RBP: 00007f705f627090 R08: 0000000020000080 R09: 0000000000000000 [ 270.102572][T12536] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 270.110567][T12536] R13: 0000000000000000 R14: 00007f705e975fa0 R15: 00007fff5b60d298 [ 270.118584][T12536] [ 270.169015][T12540] sctp: [Deprecated]: syz.2.2063 (pid 12540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.169015][T12540] Use struct sctp_sack_info instead [ 270.237974][T12540] sctp: [Deprecated]: syz.2.2063 (pid 12540) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.237974][T12540] Use struct sctp_sack_info instead [ 270.301194][T12547] FAULT_INJECTION: forcing a failure. [ 270.301194][T12547] name failslab, interval 1, probability 0, space 0, times 0 [ 270.314367][T12547] CPU: 0 UID: 0 PID: 12547 Comm: syz.0.2065 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 270.325194][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 270.335301][T12547] Call Trace: [ 270.338620][T12547] [ 270.341590][T12547] dump_stack_lvl+0x241/0x360 [ 270.346326][T12547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.351585][T12547] ? __pfx__printk+0x10/0x10 [ 270.356223][T12547] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 270.362260][T12547] ? __pfx___might_resched+0x10/0x10 [ 270.366705][T12549] netlink: 'syz.2.2063': attribute type 32 has an invalid length. [ 270.367570][T12547] ? kasan_save_track+0x51/0x80 [ 270.367604][T12547] ? kasan_save_free_info+0x40/0x50 [ 270.385535][T12547] should_fail_ex+0x3b0/0x4e0 [ 270.390283][T12547] should_failslab+0xac/0x100 [ 270.390589][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 270.394992][T12547] kmem_cache_alloc_node_noprof+0x77/0x380 [ 270.409700][T12547] ? __alloc_skb+0x1c3/0x440 [ 270.414347][T12547] __alloc_skb+0x1c3/0x440 [ 270.418821][T12547] ? __pfx___alloc_skb+0x10/0x10 [ 270.423814][T12547] ? netlink_ack_tlv_len+0x6e/0x200 [ 270.429067][T12547] netlink_ack+0x145/0xa50 [ 270.433537][T12547] ? lockdep_hardirqs_on+0x99/0x150 [ 270.438805][T12547] ? nfnetlink_rcv+0x27ad/0x2ab0 [ 270.443801][T12547] ? nfnetlink_rcv+0x27ad/0x2ab0 [ 270.448786][T12547] nfnetlink_rcv+0x26bd/0x2ab0 [ 270.453632][T12547] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 270.458834][T12547] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.464156][T12547] ? skb_clone+0x240/0x390 [ 270.468614][T12547] ? __pfx_lock_release+0x10/0x10 [ 270.473702][T12547] ? netlink_deliver_tap+0x2e/0x1b0 [ 270.476188][T12549] (unnamed net_device) (uninitialized): option coupled_control: invalid value (119) [ 270.478921][T12547] netlink_unicast+0x7f6/0x990 [ 270.478973][T12547] ? __pfx_netlink_unicast+0x10/0x10 [ 270.498446][T12547] ? __virt_addr_valid+0x45f/0x530 [ 270.503607][T12547] ? __phys_addr_symbol+0x2f/0x70 [ 270.508686][T12547] ? __check_object_size+0x47a/0x730 [ 270.514025][T12547] netlink_sendmsg+0x8e4/0xcb0 [ 270.518857][T12547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.524192][T12547] ? aa_sock_msg_perm+0x91/0x160 [ 270.529158][T12547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.534457][T12547] __sock_sendmsg+0x221/0x270 [ 270.539155][T12547] ____sys_sendmsg+0x52a/0x7e0 [ 270.543963][T12547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.549260][T12547] ? __fget_files+0x2a/0x410 [ 270.553870][T12547] ? __fget_files+0x2a/0x410 [ 270.558487][T12547] __sys_sendmsg+0x269/0x350 [ 270.563090][T12547] ? __pfx_lock_release+0x10/0x10 [ 270.568129][T12547] ? __pfx___sys_sendmsg+0x10/0x10 [ 270.573269][T12547] ? __pfx_vfs_write+0x10/0x10 [ 270.578070][T12547] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 270.584415][T12547] ? do_syscall_64+0x100/0x230 [ 270.589204][T12547] ? do_syscall_64+0xb6/0x230 [ 270.593903][T12547] do_syscall_64+0xf3/0x230 [ 270.598431][T12547] ? clear_bhb_loop+0x35/0x90 [ 270.603122][T12547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.609033][T12547] RIP: 0033:0x7f6eb4b85d29 [ 270.613459][T12547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.633081][T12547] RSP: 002b:00007f6eb5a70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.641515][T12547] RAX: ffffffffffffffda RBX: 00007f6eb4d75fa0 RCX: 00007f6eb4b85d29 [ 270.649506][T12547] RDX: 0000000020000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 270.657489][T12547] RBP: 00007f6eb5a70090 R08: 0000000000000000 R09: 0000000000000000 [ 270.665469][T12547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 270.673452][T12547] R13: 0000000000000000 R14: 00007f6eb4d75fa0 R15: 00007ffe81180528 [ 270.681449][T12547] [ 270.687439][T12553] SET target dimension over the limit! [ 270.944239][T12572] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2073'. [ 271.128530][T12582] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 271.244442][T12585] netlink: 'syz.3.2080': attribute type 5 has an invalid length. [ 271.566186][T12602] SET target dimension over the limit! [ 272.172137][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 272.207390][T12632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2093'. [ 272.277082][T12636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2095'. [ 272.310882][T12642] SET target dimension over the limit! [ 272.531297][T12649] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2098'. [ 272.948281][T12668] dccp_invalid_packet: P.Data Offset(0) too small [ 273.035888][T12676] SET target dimension over the limit! [ 273.638314][T12710] FAULT_INJECTION: forcing a failure. [ 273.638314][T12710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.653054][T12710] CPU: 0 UID: 0 PID: 12710 Comm: syz.4.2124 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 273.663884][T12710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 273.673958][T12710] Call Trace: [ 273.677287][T12710] [ 273.680229][T12710] dump_stack_lvl+0x241/0x360 [ 273.684933][T12710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.690153][T12710] ? __pfx__printk+0x10/0x10 [ 273.694763][T12710] ? __pfx_lock_release+0x10/0x10 [ 273.699806][T12710] should_fail_ex+0x3b0/0x4e0 [ 273.704509][T12710] _copy_from_user+0x2f/0xc0 [ 273.709119][T12710] copy_msghdr_from_user+0xae/0x680 [ 273.714384][T12710] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 273.720218][T12710] ? __fget_files+0x2a/0x410 [ 273.724831][T12710] ? __fget_files+0x2a/0x410 [ 273.729444][T12710] __sys_sendmsg+0x209/0x350 [ 273.734047][T12710] ? __pfx_lock_release+0x10/0x10 [ 273.739116][T12710] ? __pfx___sys_sendmsg+0x10/0x10 [ 273.744258][T12710] ? __pfx_vfs_write+0x10/0x10 [ 273.749055][T12710] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 273.755397][T12710] ? do_syscall_64+0x100/0x230 [ 273.760188][T12710] ? do_syscall_64+0xb6/0x230 [ 273.764894][T12710] do_syscall_64+0xf3/0x230 [ 273.769417][T12710] ? clear_bhb_loop+0x35/0x90 [ 273.774109][T12710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.780025][T12710] RIP: 0033:0x7f9ee4f85d29 [ 273.784449][T12710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.804067][T12710] RSP: 002b:00007f9ee5e45038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 273.812503][T12710] RAX: ffffffffffffffda RBX: 00007f9ee5175fa0 RCX: 00007f9ee4f85d29 [ 273.820489][T12710] RDX: 0000000000004010 RSI: 0000000020001400 RDI: 0000000000000003 [ 273.828476][T12710] RBP: 00007f9ee5e45090 R08: 0000000000000000 R09: 0000000000000000 [ 273.836455][T12710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 273.844435][T12710] R13: 0000000000000000 R14: 00007f9ee5175fa0 R15: 00007ffe790703e8 [ 273.852432][T12710] [ 274.126874][T12719] netlink: 'syz.4.2128': attribute type 29 has an invalid length. [ 274.141709][T12719] netlink: 'syz.4.2128': attribute type 29 has an invalid length. [ 274.291560][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2131'. [ 274.489679][T12744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2137'. [ 274.512620][T12744] bond0: (slave macvlan5): Error -98 calling set_mac_address [ 274.550805][T12747] sctp: [Deprecated]: syz.0.2139 (pid 12747) Use of int in max_burst socket option. [ 274.550805][T12747] Use struct sctp_assoc_value instead [ 274.635326][T12750] FAULT_INJECTION: forcing a failure. [ 274.635326][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 274.664504][T12750] CPU: 1 UID: 0 PID: 12750 Comm: syz.3.2140 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 274.675359][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 274.685457][T12750] Call Trace: [ 274.688767][T12750] [ 274.691736][T12750] dump_stack_lvl+0x241/0x360 [ 274.696483][T12750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.701733][T12750] ? __pfx__printk+0x10/0x10 [ 274.706369][T12750] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 274.712404][T12750] ? __pfx___might_resched+0x10/0x10 [ 274.717744][T12750] should_fail_ex+0x3b0/0x4e0 [ 274.722474][T12750] should_failslab+0xac/0x100 [ 274.727176][T12750] kmem_cache_alloc_node_noprof+0x77/0x380 [ 274.733007][T12750] ? __alloc_skb+0x1c3/0x440 [ 274.737621][T12750] __alloc_skb+0x1c3/0x440 [ 274.742058][T12750] ? __pfx___alloc_skb+0x10/0x10 [ 274.747009][T12750] ? netlink_autobind+0xd6/0x2f0 [ 274.751963][T12750] ? netlink_autobind+0x2b0/0x2f0 [ 274.757003][T12750] netlink_sendmsg+0x638/0xcb0 [ 274.761839][T12750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.767234][T12750] ? aa_sock_msg_perm+0x91/0x160 [ 274.772197][T12750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.777501][T12750] __sock_sendmsg+0x221/0x270 [ 274.782202][T12750] ____sys_sendmsg+0x52a/0x7e0 [ 274.786992][T12750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.792296][T12750] ? __fget_files+0x2a/0x410 [ 274.796909][T12750] ? __fget_files+0x2a/0x410 [ 274.801526][T12750] __sys_sendmsg+0x269/0x350 [ 274.806133][T12750] ? __pfx_lock_release+0x10/0x10 [ 274.811177][T12750] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.816314][T12750] ? __pfx_vfs_write+0x10/0x10 [ 274.821111][T12750] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 274.827458][T12750] ? do_syscall_64+0x100/0x230 [ 274.832248][T12750] ? do_syscall_64+0xb6/0x230 [ 274.836950][T12750] do_syscall_64+0xf3/0x230 [ 274.841477][T12750] ? clear_bhb_loop+0x35/0x90 [ 274.846166][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.852079][T12750] RIP: 0033:0x7f705e785d29 [ 274.856511][T12750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 274.876140][T12750] RSP: 002b:00007f705f627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.884579][T12750] RAX: ffffffffffffffda RBX: 00007f705e975fa0 RCX: 00007f705e785d29 [ 274.892567][T12750] RDX: 0000000000004010 RSI: 0000000020001400 RDI: 0000000000000003 [ 274.900549][T12750] RBP: 00007f705f627090 R08: 0000000000000000 R09: 0000000000000000 [ 274.908531][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.916525][T12750] R13: 0000000000000000 R14: 00007f705e975fa0 R15: 00007fff5b60d298 [ 274.924526][T12750] [ 275.085282][T12762] 8021q: adding VLAN 0 to HW filter on device macvlan8 [ 275.223340][T12772] sch_tbf: burst 5729 is lower than device lo mtu (65550) ! [ 275.420163][T12786] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2153'. [ 275.526502][T12791] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.629824][T12796] netlink: 'syz.1.2157': attribute type 1 has an invalid length. [ 275.651119][T12796] netlink: 236 bytes leftover after parsing attributes in process `syz.1.2157'. [ 275.883439][T12811] netlink: 'syz.4.2164': attribute type 1 has an invalid length. [ 275.924353][T12808] netlink: 'syz.2.2160': attribute type 29 has an invalid length. [ 275.924839][T12811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2164'. [ 275.970138][T12814] netlink: 'syz.2.2160': attribute type 29 has an invalid length. [ 276.216838][T12836] FAULT_INJECTION: forcing a failure. [ 276.216838][T12836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.239898][T12836] CPU: 1 UID: 0 PID: 12836 Comm: syz.3.2171 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 276.250752][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 276.260898][T12836] Call Trace: [ 276.264202][T12836] [ 276.267147][T12836] dump_stack_lvl+0x241/0x360 [ 276.271859][T12836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.277080][T12836] ? __pfx__printk+0x10/0x10 [ 276.281695][T12836] ? __pfx_lock_release+0x10/0x10 [ 276.286745][T12836] should_fail_ex+0x3b0/0x4e0 [ 276.291451][T12836] _copy_from_iter+0x1e9/0x1c20 [ 276.296321][T12836] ? __virt_addr_valid+0x183/0x530 [ 276.301458][T12836] ? __alloc_skb+0x28f/0x440 [ 276.306094][T12836] ? __pfx__copy_from_iter+0x10/0x10 [ 276.311414][T12836] ? __virt_addr_valid+0x183/0x530 [ 276.316544][T12836] ? __virt_addr_valid+0x183/0x530 [ 276.321690][T12836] ? __virt_addr_valid+0x45f/0x530 [ 276.326827][T12836] ? __phys_addr_symbol+0x2f/0x70 [ 276.331866][T12836] ? __check_object_size+0x47a/0x730 [ 276.337177][T12836] netlink_sendmsg+0x73d/0xcb0 [ 276.341970][T12836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.347273][T12836] ? aa_sock_msg_perm+0x91/0x160 [ 276.352233][T12836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.357532][T12836] __sock_sendmsg+0x221/0x270 [ 276.362232][T12836] ____sys_sendmsg+0x52a/0x7e0 [ 276.367027][T12836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 276.372379][T12836] ? __fget_files+0x2a/0x410 [ 276.376988][T12836] ? __fget_files+0x2a/0x410 [ 276.381604][T12836] __sys_sendmsg+0x269/0x350 [ 276.386209][T12836] ? __pfx_lock_release+0x10/0x10 [ 276.391250][T12836] ? __pfx___sys_sendmsg+0x10/0x10 [ 276.396387][T12836] ? __pfx_vfs_write+0x10/0x10 [ 276.401188][T12836] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 276.407536][T12836] ? do_syscall_64+0x100/0x230 [ 276.412331][T12836] ? do_syscall_64+0xb6/0x230 [ 276.417031][T12836] do_syscall_64+0xf3/0x230 [ 276.421555][T12836] ? clear_bhb_loop+0x35/0x90 [ 276.426249][T12836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.432161][T12836] RIP: 0033:0x7f705e785d29 [ 276.436616][T12836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.456238][T12836] RSP: 002b:00007f705f627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 276.464718][T12836] RAX: ffffffffffffffda RBX: 00007f705e975fa0 RCX: 00007f705e785d29 [ 276.472702][T12836] RDX: 0000000000004010 RSI: 0000000020001400 RDI: 0000000000000003 [ 276.480685][T12836] RBP: 00007f705f627090 R08: 0000000000000000 R09: 0000000000000000 [ 276.488665][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.496646][T12836] R13: 0000000000000000 R14: 00007f705e975fa0 R15: 00007fff5b60d298 [ 276.504643][T12836] [ 276.658846][T12845] lo speed is unknown, defaulting to 1000 [ 276.674025][T12845] lo speed is unknown, defaulting to 1000 [ 276.680337][T12845] lo speed is unknown, defaulting to 1000 [ 276.706447][T12845] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 276.755816][T12853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2174'. [ 276.770197][T12848] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2174'. [ 276.790425][T12845] lo speed is unknown, defaulting to 1000 [ 276.803485][T12845] lo speed is unknown, defaulting to 1000 [ 276.842880][T12845] lo speed is unknown, defaulting to 1000 [ 276.880762][T12845] lo speed is unknown, defaulting to 1000 [ 276.893537][T12845] lo speed is unknown, defaulting to 1000 [ 277.283558][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 277.293118][T12881] IPv6: Can't replace route, no match found [ 277.304968][T12888] bridge0: port 3(veth0_to_bridge) entered blocking state [ 277.339089][T12888] bridge0: port 3(veth0_to_bridge) entered disabled state [ 277.369561][T12888] veth0_to_bridge: entered allmulticast mode [ 277.425703][T12888] veth0_to_bridge: entered promiscuous mode [ 277.446369][T12888] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 277.449919][T12894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2188'. [ 277.471903][T12894] netlink: 'syz.2.2188': attribute type 1 has an invalid length. [ 277.495106][T12888] bridge0: port 3(veth0_to_bridge) entered blocking state [ 277.503822][T12888] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 277.526046][T12889] vlan6: entered promiscuous mode [ 277.567510][T12897] netlink: 'syz.3.2189': attribute type 29 has an invalid length. [ 277.575978][T12899] bond0: option resend_igmp: invalid value (7540) [ 277.582875][T12899] bond0: option resend_igmp: allowed values 0 - 255 [ 277.642303][T12894] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.686959][T12901] netlink: 'syz.3.2189': attribute type 29 has an invalid length. [ 277.810842][T12912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2192'. [ 277.832199][T12915] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2191'. [ 277.848351][T12912] netlink: 'syz.4.2192': attribute type 6 has an invalid length. [ 277.911409][T12915] 8021q: adding VLAN 0 to HW filter on device bond8 [ 277.929573][T12918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2193'. [ 278.232790][T12943] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 278.541048][T12958] FAULT_INJECTION: forcing a failure. [ 278.541048][T12958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 278.554447][T12958] CPU: 1 UID: 0 PID: 12958 Comm: syz.0.2205 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 278.565269][T12958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 278.575374][T12958] Call Trace: [ 278.578695][T12958] [ 278.581663][T12958] dump_stack_lvl+0x241/0x360 [ 278.586407][T12958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.591667][T12958] ? __pfx__printk+0x10/0x10 [ 278.596307][T12958] ? __pfx_lock_release+0x10/0x10 [ 278.601389][T12958] should_fail_ex+0x3b0/0x4e0 [ 278.606131][T12958] _copy_from_user+0x2f/0xc0 [ 278.610794][T12958] copy_msghdr_from_user+0xae/0x680 [ 278.613162][T12962] Cannot find map_set index 0 as target [ 278.616036][T12958] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 278.616078][T12958] ? __fget_files+0x2a/0x410 [ 278.632086][T12958] ? __fget_files+0x2a/0x410 [ 278.636733][T12958] __sys_sendmsg+0x209/0x350 [ 278.641350][T12958] ? __pfx_lock_release+0x10/0x10 [ 278.646397][T12958] ? __pfx___sys_sendmsg+0x10/0x10 [ 278.651538][T12958] ? __pfx_vfs_write+0x10/0x10 [ 278.656336][T12958] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 278.662688][T12958] ? do_syscall_64+0x100/0x230 [ 278.667480][T12958] ? do_syscall_64+0xb6/0x230 [ 278.672190][T12958] do_syscall_64+0xf3/0x230 [ 278.676718][T12958] ? clear_bhb_loop+0x35/0x90 [ 278.681413][T12958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.687328][T12958] RIP: 0033:0x7f6eb4b85d29 [ 278.691754][T12958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.711374][T12958] RSP: 002b:00007f6eb5a70038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.719802][T12958] RAX: ffffffffffffffda RBX: 00007f6eb4d75fa0 RCX: 00007f6eb4b85d29 [ 278.727790][T12958] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 278.735779][T12958] RBP: 00007f6eb5a70090 R08: 0000000000000000 R09: 0000000000000000 [ 278.743762][T12958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.751769][T12958] R13: 0000000000000000 R14: 00007f6eb4d75fa0 R15: 00007ffe81180528 [ 278.759766][T12958] [ 279.472247][T12999] FAULT_INJECTION: forcing a failure. [ 279.472247][T12999] name failslab, interval 1, probability 0, space 0, times 0 [ 279.492981][T12999] CPU: 1 UID: 0 PID: 12999 Comm: syz.2.2218 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 279.503837][T12999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 279.513940][T12999] Call Trace: [ 279.517260][T12999] [ 279.520234][T12999] dump_stack_lvl+0x241/0x360 [ 279.524975][T12999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.530238][T12999] ? __pfx__printk+0x10/0x10 [ 279.534882][T12999] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 279.540916][T12999] ? __pfx___might_resched+0x10/0x10 [ 279.546260][T12999] should_fail_ex+0x3b0/0x4e0 [ 279.550999][T12999] should_failslab+0xac/0x100 [ 279.555701][T12999] kmem_cache_alloc_node_noprof+0x77/0x380 [ 279.561540][T12999] ? __alloc_skb+0x1c3/0x440 [ 279.566189][T12999] __alloc_skb+0x1c3/0x440 [ 279.570663][T12999] ? __pfx___alloc_skb+0x10/0x10 [ 279.575664][T12999] ? netlink_autobind+0xd6/0x2f0 [ 279.580647][T12999] ? netlink_autobind+0x2b0/0x2f0 [ 279.585729][T12999] netlink_sendmsg+0x638/0xcb0 [ 279.590547][T12999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.595883][T12999] ? aa_sock_msg_perm+0x91/0x160 [ 279.600877][T12999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.606199][T12999] __sock_sendmsg+0x221/0x270 [ 279.610927][T12999] ____sys_sendmsg+0x52a/0x7e0 [ 279.615748][T12999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 279.621090][T12999] ? __fget_files+0x2a/0x410 [ 279.625761][T12999] ? __fget_files+0x2a/0x410 [ 279.630407][T12999] __sys_sendmsg+0x269/0x350 [ 279.635047][T12999] ? __pfx_lock_release+0x10/0x10 [ 279.640126][T12999] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.645311][T12999] ? __pfx_vfs_write+0x10/0x10 [ 279.650146][T12999] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.656527][T12999] ? do_syscall_64+0x100/0x230 [ 279.661346][T12999] ? do_syscall_64+0xb6/0x230 [ 279.666091][T12999] do_syscall_64+0xf3/0x230 [ 279.670664][T12999] ? clear_bhb_loop+0x35/0x90 [ 279.675394][T12999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.681354][T12999] RIP: 0033:0x7f7cb0985d29 [ 279.685876][T12999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.705617][T12999] RSP: 002b:00007f7cb17bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.714089][T12999] RAX: ffffffffffffffda RBX: 00007f7cb0b75fa0 RCX: 00007f7cb0985d29 [ 279.722128][T12999] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 279.730152][T12999] RBP: 00007f7cb17bc090 R08: 0000000000000000 R09: 0000000000000000 [ 279.738172][T12999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.746193][T12999] R13: 0000000000000000 R14: 00007f7cb0b75fa0 R15: 00007ffefc245978 [ 279.754287][T12999] [ 279.922636][T13023] SET target dimension over the limit! [ 279.958933][T13024] netlink: 'syz.0.2225': attribute type 4 has an invalid length. [ 280.585257][T13062] SET target dimension over the limit! [ 280.834549][T13070] tipc: Enabled bearer , priority 0 [ 280.867383][T13073] netlink: 'syz.1.2242': attribute type 29 has an invalid length. [ 281.028503][T13060] syzkaller0: entered promiscuous mode [ 281.041665][T13060] syzkaller0: entered allmulticast mode [ 281.056150][T13060] tipc: Resetting bearer [ 281.082697][T13077] netlink: 'syz.1.2242': attribute type 29 has an invalid length. [ 281.107303][T13058] tipc: Resetting bearer [ 281.442004][T13098] FAULT_INJECTION: forcing a failure. [ 281.442004][T13098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.477958][T13098] CPU: 1 UID: 0 PID: 13098 Comm: syz.2.2248 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 281.488815][T13098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 281.498903][T13098] Call Trace: [ 281.502201][T13098] [ 281.505146][T13098] dump_stack_lvl+0x241/0x360 [ 281.509862][T13098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.515086][T13098] ? __pfx__printk+0x10/0x10 [ 281.519697][T13098] ? __pfx_lock_release+0x10/0x10 [ 281.524745][T13098] should_fail_ex+0x3b0/0x4e0 [ 281.529458][T13098] _copy_from_iter+0x1e9/0x1c20 [ 281.534336][T13098] ? __virt_addr_valid+0x183/0x530 [ 281.539475][T13098] ? __alloc_skb+0x28f/0x440 [ 281.544088][T13098] ? __pfx__copy_from_iter+0x10/0x10 [ 281.549422][T13098] ? __virt_addr_valid+0x183/0x530 [ 281.554569][T13098] ? __virt_addr_valid+0x183/0x530 [ 281.559708][T13098] ? __virt_addr_valid+0x45f/0x530 [ 281.564868][T13098] ? __phys_addr_symbol+0x2f/0x70 [ 281.569912][T13098] ? __check_object_size+0x47a/0x730 [ 281.575222][T13098] netlink_sendmsg+0x73d/0xcb0 [ 281.580013][T13098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.585349][T13098] ? aa_sock_msg_perm+0x91/0x160 [ 281.590320][T13098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 281.595625][T13098] __sock_sendmsg+0x221/0x270 [ 281.600336][T13098] ____sys_sendmsg+0x52a/0x7e0 [ 281.605127][T13098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 281.610490][T13098] ? __fget_files+0x2a/0x410 [ 281.615147][T13098] ? __fget_files+0x2a/0x410 [ 281.619780][T13098] __sys_sendmsg+0x269/0x350 [ 281.624397][T13098] ? __pfx_lock_release+0x10/0x10 [ 281.629447][T13098] ? __pfx___sys_sendmsg+0x10/0x10 [ 281.634606][T13098] ? __pfx_vfs_write+0x10/0x10 [ 281.639414][T13098] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.645763][T13098] ? do_syscall_64+0x100/0x230 [ 281.650561][T13098] ? do_syscall_64+0xb6/0x230 [ 281.655267][T13098] do_syscall_64+0xf3/0x230 [ 281.659797][T13098] ? clear_bhb_loop+0x35/0x90 [ 281.664497][T13098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.670413][T13098] RIP: 0033:0x7f7cb0985d29 [ 281.674853][T13098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.694477][T13098] RSP: 002b:00007f7cb17bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 281.702933][T13098] RAX: ffffffffffffffda RBX: 00007f7cb0b75fa0 RCX: 00007f7cb0985d29 [ 281.710941][T13098] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 281.718942][T13098] RBP: 00007f7cb17bc090 R08: 0000000000000000 R09: 0000000000000000 [ 281.726948][T13098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.734951][T13098] R13: 0000000000000000 R14: 00007f7cb0b75fa0 R15: 00007ffefc245978 [ 281.742966][T13098] [ 281.964328][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.991530][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 282.026328][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 282.054041][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 282.086743][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 282.097927][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 283.704263][T13058] tipc: Disabling bearer [ 283.717547][T13103] netlink: 'syz.0.2249': attribute type 8 has an invalid length. [ 283.725573][T13103] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 283.758452][T13100] lo speed is unknown, defaulting to 1000 [ 283.952660][T13119] __nla_validate_parse: 5 callbacks suppressed [ 283.952683][T13119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2253'. [ 284.008533][T13127] SET target dimension over the limit! [ 284.122198][T13134] vlan1: entered allmulticast mode [ 284.123071][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 284.132721][T13134] veth0_vlan: entered allmulticast mode [ 284.200823][ T5850] Bluetooth: hci4: command tx timeout [ 284.215881][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2257'. [ 284.267430][T13100] chnl_net:caif_netlink_parms(): no params data found [ 284.425290][T13145] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 284.735100][T13157] netlink: 'syz.2.2261': attribute type 29 has an invalid length. [ 284.768285][T13153] netlink: 'syz.2.2261': attribute type 29 has an invalid length. [ 285.010173][T13100] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.040245][T13100] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.084008][T13182] SET target dimension over the limit! [ 285.089868][T13100] bridge_slave_0: entered allmulticast mode [ 285.142530][T13100] bridge_slave_0: entered promiscuous mode [ 285.172688][T13100] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.201477][T13100] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.208817][T13100] bridge_slave_1: entered allmulticast mode [ 285.231404][T13100] bridge_slave_1: entered promiscuous mode [ 285.374513][T13100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.388844][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.399323][T13185] batadv_slave_0: entered allmulticast mode [ 285.468850][T13100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.609377][T13203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2275'. [ 285.631922][T13203] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.655538][T13212] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2274'. [ 285.701285][T13100] team0: Port device team_slave_0 added [ 285.742756][T13100] team0: Port device team_slave_1 added [ 285.771494][T13205] netlink: 'syz.1.2274': attribute type 2 has an invalid length. [ 285.896949][T13100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.937511][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.036885][T13100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.080328][T13100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.104230][T13100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.172571][T13233] FAULT_INJECTION: forcing a failure. [ 286.172571][T13233] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.192561][T13233] CPU: 1 UID: 0 PID: 13233 Comm: syz.1.2282 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 286.203417][T13233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 286.213523][T13233] Call Trace: [ 286.216930][T13233] [ 286.219982][T13233] dump_stack_lvl+0x241/0x360 [ 286.224721][T13233] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.229984][T13233] ? __pfx__printk+0x10/0x10 [ 286.234651][T13233] ? snprintf+0xda/0x120 [ 286.238961][T13233] should_fail_ex+0x3b0/0x4e0 [ 286.243713][T13233] _copy_to_user+0x31/0xb0 [ 286.248197][T13233] simple_read_from_buffer+0xca/0x150 [ 286.253629][T13233] proc_fail_nth_read+0x1e9/0x250 [ 286.258717][T13233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.264330][T13233] ? rw_verify_area+0x55e/0x6f0 [ 286.269240][T13233] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 286.270747][ T5850] Bluetooth: hci4: command tx timeout [ 286.274813][T13233] vfs_read+0x1fc/0xb70 [ 286.274863][T13233] ? __pfx___mutex_lock+0x10/0x10 [ 286.289466][T13233] ? __pfx_vfs_read+0x10/0x10 [ 286.294284][T13233] ? __fget_files+0x2a/0x410 [ 286.298936][T13233] ? __fget_files+0x395/0x410 [ 286.303671][T13233] ? __fget_files+0x2a/0x410 [ 286.308323][T13233] ksys_read+0x18f/0x2b0 [ 286.312619][T13233] ? __pfx_ksys_read+0x10/0x10 [ 286.317428][T13233] ? do_syscall_64+0x100/0x230 [ 286.322258][T13233] ? do_syscall_64+0xb6/0x230 [ 286.326995][T13233] do_syscall_64+0xf3/0x230 [ 286.331555][T13233] ? clear_bhb_loop+0x35/0x90 [ 286.336286][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.341730][T13100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.342207][T13233] RIP: 0033:0x7f6e0238473c [ 286.342235][T13233] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 286.376824][T13233] RSP: 002b:00007f6e0318f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 286.385296][T13233] RAX: ffffffffffffffda RBX: 00007f6e02575fa0 RCX: 00007f6e0238473c [ 286.393133][T13246] xt_l2tp: missing protocol rule (udp|l2tpip) [ 286.393289][T13233] RDX: 000000000000000f RSI: 00007f6e0318f0a0 RDI: 0000000000000004 [ 286.407388][T13233] RBP: 00007f6e0318f090 R08: 0000000000000000 R09: 0000000000000000 [ 286.415408][T13233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 286.423429][T13233] R13: 0000000000000000 R14: 00007f6e02575fa0 R15: 00007ffc9746ca58 [ 286.431472][T13233] [ 286.471247][T13238] geneve2: entered promiscuous mode [ 286.478131][T13238] geneve2: entered allmulticast mode [ 286.557057][T13250] ªªªªªª: renamed from syzkaller0 [ 286.667814][T13100] hsr_slave_0: entered promiscuous mode [ 286.729317][T13100] hsr_slave_1: entered promiscuous mode [ 286.792432][T13100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.800074][T13100] Cannot create hsr debugfs directory [ 286.832730][T13261] netlink: 'syz.1.2292': attribute type 29 has an invalid length. [ 286.856704][T13261] netlink: 'syz.1.2292': attribute type 29 has an invalid length. [ 286.872121][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2290'. [ 287.027734][T13273] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 287.057855][T13273] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 287.257478][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2294'. [ 287.322391][T13100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.612496][T13100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.727065][T13308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2298'. [ 287.784516][T13100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.826562][T13305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2297'. [ 287.846348][T13305] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2297'. [ 287.856984][T13312] veth0_to_team: entered promiscuous mode [ 287.887381][T13312] veth0_to_team: left promiscuous mode [ 287.949276][T13100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.213647][T13328] 8021q: adding VLAN 0 to HW filter on device macvlan9 [ 288.350970][ T5850] Bluetooth: hci4: command tx timeout [ 288.388991][T13100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 288.455642][T13100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 288.494464][T13100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 288.553230][T13100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.736957][T13359] netlink: 'syz.2.2309': attribute type 29 has an invalid length. [ 288.780620][T13359] netlink: 'syz.2.2309': attribute type 29 has an invalid length. [ 288.840381][T13100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.884171][T13100] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.926107][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.933406][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.949819][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.957103][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.355405][T13381] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.389425][T13100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.413043][T13389] __nla_validate_parse: 4 callbacks suppressed [ 289.413064][T13389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2315'. [ 289.430297][T13386] 8021q: adding VLAN 0 to HW filter on device macvlan10 [ 289.451851][T13389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2315'. [ 289.464680][T13389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2315'. [ 289.480963][T13389] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2315'. [ 289.510033][T13390] x_tables: unsorted entry at hook 3 [ 289.528850][T13390] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2317'. [ 289.611579][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 289.696208][T13399] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2320'. [ 289.803939][T13404] netlink: 'syz.2.2319': attribute type 29 has an invalid length. [ 289.824632][T13404] netlink: 'syz.2.2319': attribute type 29 has an invalid length. [ 289.833747][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 289.843516][T13404] netlink: 'syz.2.2319': attribute type 29 has an invalid length. [ 289.851749][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2323'. [ 289.872214][T13404] netlink: 'syz.2.2319': attribute type 29 has an invalid length. [ 289.893559][T13404] netlink: 'syz.2.2319': attribute type 29 has an invalid length. [ 289.919172][T13404] netlink: 'syz.2.2319': attribute type 29 has an invalid length. [ 290.023601][T13100] veth0_vlan: entered promiscuous mode [ 290.086610][T13100] veth1_vlan: entered promiscuous mode [ 290.135870][T13418] sctp: [Deprecated]: syz.1.2322 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.135870][T13418] Use struct sctp_sack_info instead [ 290.177267][T13418] sctp: [Deprecated]: syz.1.2322 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.177267][T13418] Use struct sctp_sack_info instead [ 290.204995][T13418] sctp: [Deprecated]: syz.1.2322 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.204995][T13418] Use struct sctp_sack_info instead [ 290.207410][T13100] veth0_macvtap: entered promiscuous mode [ 290.237477][T13418] sctp: [Deprecated]: syz.1.2322 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.237477][T13418] Use struct sctp_sack_info instead [ 290.276498][T13100] veth1_macvtap: entered promiscuous mode [ 290.291353][T13418] sctp: [Deprecated]: syz.1.2322 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.291353][T13418] Use struct sctp_sack_info instead [ 290.321172][T13418] sctp: [Deprecated]: syz.1.2322 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.321172][T13418] Use struct sctp_sack_info instead [ 290.357953][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.390564][T13418] sctp: [Deprecated]: syz.1.2322 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.390564][T13418] Use struct sctp_sack_info instead [ 290.411419][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.431429][T13418] sctp: [Deprecated]: syz.1.2322 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.431429][T13418] Use struct sctp_sack_info instead [ 290.438652][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.448655][ T5850] Bluetooth: hci4: command tx timeout [ 290.472039][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.486559][T13100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.503156][T13418] sctp: [Deprecated]: syz.1.2322 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.503156][T13418] Use struct sctp_sack_info instead [ 290.511295][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.542580][T13418] sctp: [Deprecated]: syz.1.2322 (pid 13418) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.542580][T13418] Use struct sctp_sack_info instead [ 290.553281][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.569691][T13100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.582926][T13100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.595254][T13100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.612452][T13100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.622095][T13100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.631560][T13100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.641486][T13100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.703345][T13436] team_slave_0: entered promiscuous mode [ 290.709377][T13436] team_slave_1: entered promiscuous mode [ 290.731954][T13436] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 290.835909][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.864380][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.942985][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.956574][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'. [ 290.980264][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.183768][T13456] FAULT_INJECTION: forcing a failure. [ 291.183768][T13456] name failslab, interval 1, probability 0, space 0, times 0 [ 291.207321][T13458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 291.231793][T13456] CPU: 1 UID: 0 PID: 13456 Comm: syz.3.2337 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 291.242642][T13456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 291.252751][T13456] Call Trace: [ 291.256076][T13456] [ 291.259052][T13456] dump_stack_lvl+0x241/0x360 [ 291.263790][T13456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.269056][T13456] ? __pfx__printk+0x10/0x10 [ 291.273713][T13456] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 291.279760][T13456] ? __pfx___might_resched+0x10/0x10 [ 291.285184][T13456] should_fail_ex+0x3b0/0x4e0 [ 291.286136][T13458] bridge5: entered promiscuous mode [ 291.289903][T13456] should_failslab+0xac/0x100 [ 291.289943][T13456] kmem_cache_alloc_node_noprof+0x77/0x380 [ 291.289976][T13456] ? __alloc_skb+0x1c3/0x440 [ 291.297017][T13458] bridge5: entered allmulticast mode [ 291.299850][T13456] __alloc_skb+0x1c3/0x440 [ 291.299892][T13456] ? __pfx___alloc_skb+0x10/0x10 [ 291.325011][T13456] ? netlink_autobind+0xd6/0x2f0 [ 291.330004][T13456] ? netlink_autobind+0x2b0/0x2f0 [ 291.335100][T13456] netlink_sendmsg+0x638/0xcb0 [ 291.339939][T13456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.345289][T13456] ? aa_sock_msg_perm+0x91/0x160 [ 291.350298][T13456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.355643][T13456] __sock_sendmsg+0x221/0x270 [ 291.360390][T13456] ____sys_sendmsg+0x52a/0x7e0 [ 291.365221][T13456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.370559][T13456] ? __fget_files+0x2a/0x410 [ 291.375216][T13456] ? __fget_files+0x2a/0x410 [ 291.379873][T13456] __sys_sendmsg+0x269/0x350 [ 291.384521][T13456] ? __pfx_lock_release+0x10/0x10 [ 291.389605][T13456] ? __pfx___sys_sendmsg+0x10/0x10 [ 291.394782][T13456] ? __pfx_vfs_write+0x10/0x10 [ 291.399621][T13456] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 291.406000][T13456] ? do_syscall_64+0x100/0x230 [ 291.410822][T13456] ? do_syscall_64+0xb6/0x230 [ 291.415557][T13456] do_syscall_64+0xf3/0x230 [ 291.420137][T13456] ? clear_bhb_loop+0x35/0x90 [ 291.424866][T13456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.430816][T13456] RIP: 0033:0x7f705e785d29 [ 291.435277][T13456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.454930][T13456] RSP: 002b:00007f705f627038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.463390][T13456] RAX: ffffffffffffffda RBX: 00007f705e975fa0 RCX: 00007f705e785d29 [ 291.471412][T13456] RDX: 0000000000000044 RSI: 0000000020000080 RDI: 0000000000000004 [ 291.479412][T13456] RBP: 00007f705f627090 R08: 0000000000000000 R09: 0000000000000000 [ 291.487400][T13456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.495401][T13456] R13: 0000000000000000 R14: 00007f705e975fa0 R15: 00007fff5b60d298 [ 291.503425][T13456] [ 291.724649][T13468] bridge_slave_1: left allmulticast mode [ 291.746758][T13468] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.759787][T13468] bridge_slave_0: left allmulticast mode [ 291.775966][T13468] bridge_slave_0: left promiscuous mode [ 291.790963][T13468] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.895343][T13472] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 291.907457][T13477] validate_nla: 5 callbacks suppressed [ 291.907479][T13477] netlink: 'syz.1.2344': attribute type 29 has an invalid length. [ 291.938168][T13477] netlink: 'syz.1.2344': attribute type 29 has an invalid length. [ 292.006993][T13480] netlink: 'syz.3.2346': attribute type 1 has an invalid length. [ 292.216983][T13491] netlink: 'syz.2.2350': attribute type 11 has an invalid length. [ 292.365150][T13495] openvswitch: netlink: Missing valid actions attribute. [ 292.382526][T13495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.433889][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.959553][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.047226][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.059131][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.083465][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.097989][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.107376][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 293.115112][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.175693][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.217766][T13516] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 293.274999][T13511] lo speed is unknown, defaulting to 1000 [ 293.335674][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.366909][T13523] netlink: 'syz.2.2360': attribute type 7 has an invalid length. [ 293.390364][T13523] netlink: 'syz.2.2360': attribute type 8 has an invalid length. [ 293.672797][ T11] bridge_slave_1: left allmulticast mode [ 293.679049][ T11] bridge_slave_1: left promiscuous mode [ 293.687118][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.730804][ T11] bridge_slave_0: left allmulticast mode [ 293.736626][ T11] bridge_slave_0: left promiscuous mode [ 293.744737][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.389231][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.404592][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.415982][ T11] bond0 (unregistering): Released all slaves [ 294.440378][T13544] netlink: 'syz.0.2368': attribute type 29 has an invalid length. [ 294.454229][T13553] IPv6: sit1: Disabled Multicast RS [ 294.480119][T13545] netlink: 'syz.0.2368': attribute type 29 has an invalid length. [ 294.518537][T13511] chnl_net:caif_netlink_parms(): no params data found [ 294.624039][T13558] __nla_validate_parse: 22 callbacks suppressed [ 294.624061][T13558] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2372'. [ 294.650280][T13558] netlink: 'syz.2.2372': attribute type 7 has an invalid length. [ 294.658551][T13558] netlink: 'syz.2.2372': attribute type 8 has an invalid length. [ 294.678971][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2372'. [ 294.775837][T13561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2371'. [ 294.814211][T13561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2371'. [ 294.888519][T13565] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2373'. [ 294.888892][T13561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2371'. [ 294.911294][T13565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2373'. [ 294.956815][T13561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2371'. [ 294.998253][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2373'. [ 295.024162][T13565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2373'. [ 295.153571][ T54] Bluetooth: hci4: command tx timeout [ 295.218875][T13511] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.258897][T13511] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.280886][T13511] bridge_slave_0: entered allmulticast mode [ 295.288199][T13511] bridge_slave_0: entered promiscuous mode [ 295.297001][T13511] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.304277][T13511] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.340932][T13511] bridge_slave_1: entered allmulticast mode [ 295.348239][T13511] bridge_slave_1: entered promiscuous mode [ 295.413654][ T11] hsr_slave_0: left promiscuous mode [ 295.420046][ T11] hsr_slave_1: left promiscuous mode [ 295.437273][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.445840][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.474860][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.490790][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.555124][ T11] veth1_macvtap: left promiscuous mode [ 295.563527][ T11] veth0_macvtap: left promiscuous mode [ 295.569207][ T11] veth1_vlan: left promiscuous mode [ 295.576195][ T11] veth0_vlan: left promiscuous mode [ 296.359069][ T11] team0 (unregistering): Port device team_slave_1 removed [ 296.419876][ T11] team0 (unregistering): Port device team_slave_0 removed [ 296.929706][T13511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.966629][T13511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.169918][T13511] team0: Port device team_slave_0 added [ 297.215155][T13511] team0: Port device team_slave_1 added [ 297.234203][ T5850] Bluetooth: hci4: command tx timeout [ 297.359600][T13511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.373421][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.400351][T13511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.431809][T13511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.438825][T13511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.468215][T13511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.543854][T13511] hsr_slave_0: entered promiscuous mode [ 297.566665][T13511] hsr_slave_1: entered promiscuous mode [ 297.577247][T13511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.585423][T13511] Cannot create hsr debugfs directory [ 297.748829][T13642] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 297.869041][ T9] hid-generic 0005:0458:0059.0002: item fetching failed at offset 0/13 [ 297.886013][ T9] hid-generic 0005:0458:0059.0002: probe with driver hid-generic failed with error -22 [ 298.331039][T13511] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 298.346149][T13511] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 298.364898][T13511] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 298.383968][T13511] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 298.511016][ T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 298.525206][T13677] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 298.608430][T13511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.643272][T13511] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.726424][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.733683][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.752675][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.759885][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.287969][T13511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.311002][ T54] Bluetooth: hci4: command tx timeout [ 299.424617][T13724] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 299.578895][T13511] veth0_vlan: entered promiscuous mode [ 299.607316][T13511] veth1_vlan: entered promiscuous mode [ 299.638263][T13511] veth0_macvtap: entered promiscuous mode [ 299.646842][T13511] veth1_macvtap: entered promiscuous mode [ 299.662539][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.673350][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.683581][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.694175][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.705371][T13511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.716043][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.726668][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.736655][T13511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.747264][T13511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.758937][T13511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.779054][T13511] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.788577][T13511] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.800604][T13511] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.809395][T13511] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.005206][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.023623][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.083499][T13747] __nla_validate_parse: 16 callbacks suppressed [ 300.083520][T13747] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2429'. [ 300.083640][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.141669][T13747] netlink: 'syz.1.2429': attribute type 8 has an invalid length. [ 300.149178][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.450850][T13651] ================================================================== [ 300.458983][T13651] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fb/0xee0 [ 300.463417][T13769] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.466469][T13651] Read of size 8 at addr ffff8880767d0060 by task khidpd_04580059/13651 [ 300.466495][T13651] [ 300.466506][T13651] CPU: 0 UID: 0 PID: 13651 Comm: khidpd_04580059 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 300.466533][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.502408][T13771] 8021q: adding VLAN 0 to HW filter on device macvlan11 [ 300.508977][T13651] Call Trace: [ 300.508995][T13651] [ 300.509005][T13651] dump_stack_lvl+0x241/0x360 [ 300.509044][T13651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.509073][T13651] ? __pfx__printk+0x10/0x10 [ 300.509101][T13651] ? _printk+0xd5/0x120 [ 300.509127][T13651] ? __virt_addr_valid+0x183/0x530 [ 300.509152][T13651] ? __virt_addr_valid+0x183/0x530 [ 300.509179][T13651] print_report+0x169/0x550 [ 300.509205][T13651] ? __virt_addr_valid+0x183/0x530 [ 300.509230][T13651] ? __virt_addr_valid+0x183/0x530 [ 300.565853][T13651] ? __virt_addr_valid+0x45f/0x530 [ 300.570987][T13651] ? __phys_addr+0xba/0x170 [ 300.575502][T13651] ? __mutex_lock+0x7fb/0xee0 [ 300.580193][T13651] kasan_report+0x143/0x180 [ 300.584705][T13651] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 300.590611][T13651] ? __mutex_lock+0x7fb/0xee0 [ 300.595303][T13651] __mutex_lock+0x7fb/0xee0 [ 300.599821][T13651] ? __mutex_lock+0x5ef/0xee0 [ 300.604519][T13651] ? l2cap_unregister_user+0x6a/0x1c0 [ 300.609910][T13651] ? __pfx___mutex_lock+0x10/0x10 [ 300.614954][T13651] ? __pfx___timer_delete_sync+0x10/0x10 [ 300.620601][T13651] l2cap_unregister_user+0x6a/0x1c0 [ 300.625819][T13651] hidp_session_thread+0x450/0x490 [ 300.630942][T13651] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 300.636847][T13651] ? __pfx_hidp_session_thread+0x10/0x10 [ 300.642494][T13651] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 300.648400][T13651] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 300.654665][T13651] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 300.660923][T13651] ? __kthread_parkme+0x169/0x1d0 [ 300.665954][T13651] ? __pfx_hidp_session_thread+0x10/0x10 [ 300.671598][T13651] kthread+0x2f0/0x390 [ 300.675676][T13651] ? __pfx_hidp_session_thread+0x10/0x10 [ 300.681327][T13651] ? __pfx_kthread+0x10/0x10 [ 300.685930][T13651] ret_from_fork+0x4b/0x80 [ 300.690354][T13651] ? __pfx_kthread+0x10/0x10 [ 300.694952][T13651] ret_from_fork_asm+0x1a/0x30 [ 300.699728][T13651] [ 300.702750][T13651] [ 300.705071][T13651] Allocated by task 13511: [ 300.709487][T13651] kasan_save_track+0x3f/0x80 [ 300.714173][T13651] __kasan_kmalloc+0x98/0xb0 [ 300.718769][T13651] __kmalloc_noprof+0x285/0x4c0 [ 300.723631][T13651] hci_alloc_dev_priv+0x27/0x2030 [ 300.728672][T13651] vhci_create_device+0x116/0x6a0 [ 300.733709][T13651] vhci_write+0x3cf/0x490 [ 300.738050][T13651] vfs_write+0xaeb/0xd30 [ 300.742298][T13651] ksys_write+0x18f/0x2b0 [ 300.746629][T13651] do_syscall_64+0xf3/0x230 [ 300.751150][T13651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.757059][T13651] [ 300.759381][T13651] Freed by task 13511: [ 300.763448][T13651] kasan_save_track+0x3f/0x80 [ 300.768130][T13651] kasan_save_free_info+0x40/0x50 [ 300.773163][T13651] __kasan_slab_free+0x59/0x70 [ 300.777934][T13651] kfree+0x196/0x430 [ 300.781836][T13651] hci_release_dev+0x1525/0x16b0 [ 300.786775][T13651] bt_host_release+0x83/0x90 [ 300.791379][T13651] device_release+0x99/0x1c0 [ 300.795979][T13651] kobject_put+0x22f/0x480 [ 300.800409][T13651] vhci_release+0x88/0xd0 [ 300.804762][T13651] __fput+0x23c/0xa50 [ 300.808753][T13651] task_work_run+0x24f/0x310 [ 300.813355][T13651] do_exit+0xa2f/0x28e0 [ 300.817519][T13651] do_group_exit+0x207/0x2c0 [ 300.822115][T13651] __x64_sys_exit_group+0x3f/0x40 [ 300.827144][T13651] x64_sys_call+0x26a8/0x26b0 [ 300.831824][T13651] do_syscall_64+0xf3/0x230 [ 300.836346][T13651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.842252][T13651] [ 300.844578][T13651] Last potentially related work creation: [ 300.850294][T13651] kasan_save_stack+0x3f/0x60 [ 300.855012][T13651] __kasan_record_aux_stack+0xac/0xc0 [ 300.860400][T13651] insert_work+0x3e/0x330 [ 300.864754][T13651] __queue_work+0xb66/0xf50 [ 300.869261][T13651] queue_work_on+0x1c2/0x380 [ 300.873856][T13651] process_scheduled_works+0xa66/0x1840 [ 300.879409][T13651] worker_thread+0x870/0xd30 [ 300.884009][T13651] kthread+0x2f0/0x390 [ 300.888084][T13651] ret_from_fork+0x4b/0x80 [ 300.892506][T13651] ret_from_fork_asm+0x1a/0x30 [ 300.897272][T13651] [ 300.899596][T13651] Second to last potentially related work creation: [ 300.906178][T13651] kasan_save_stack+0x3f/0x60 [ 300.910861][T13651] __kasan_record_aux_stack+0xac/0xc0 [ 300.916248][T13651] insert_work+0x3e/0x330 [ 300.920605][T13651] __queue_work+0xc8b/0xf50 [ 300.925113][T13651] call_timer_fn+0x187/0x650 [ 300.929710][T13651] __run_timer_base+0x695/0x8e0 [ 300.934572][T13651] run_timer_softirq+0xb7/0x170 [ 300.939442][T13651] handle_softirqs+0x2d4/0x9b0 [ 300.944223][T13651] __irq_exit_rcu+0xf7/0x220 [ 300.948825][T13651] irq_exit_rcu+0x9/0x30 [ 300.953081][T13651] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 300.958813][T13651] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 300.964812][T13651] [ 300.967136][T13651] The buggy address belongs to the object at ffff8880767d0000 [ 300.967136][T13651] which belongs to the cache kmalloc-8k of size 8192 [ 300.981191][T13651] The buggy address is located 96 bytes inside of [ 300.981191][T13651] freed 8192-byte region [ffff8880767d0000, ffff8880767d2000) [ 300.994993][T13651] [ 300.997319][T13651] The buggy address belongs to the physical page: [ 301.003760][T13651] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x767d0 [ 301.012555][T13651] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 301.021071][T13651] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 301.028626][T13651] page_type: f5(slab) [ 301.032615][T13651] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 301.041201][T13651] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 301.049789][T13651] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 301.058502][T13651] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 301.067237][T13651] head: 00fff00000000003 ffffea0001d9f401 ffffffffffffffff 0000000000000000 [ 301.075914][T13651] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 301.084586][T13651] page dumped because: kasan: bad access detected [ 301.091020][T13651] page_owner tracks the page as allocated [ 301.096736][T13651] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 13511, tgid 13511 (syz-executor), ts 293023110790, free_ts 292987574236 [ 301.118459][T13651] post_alloc_hook+0x1f3/0x230 [ 301.123250][T13651] get_page_from_freelist+0x365c/0x37a0 [ 301.128802][T13651] __alloc_pages_noprof+0x292/0x710 [ 301.134005][T13651] alloc_pages_mpol_noprof+0x3e8/0x680 [ 301.139474][T13651] alloc_slab_page+0x6a/0x110 [ 301.144162][T13651] allocate_slab+0x5a/0x2b0 [ 301.148678][T13651] ___slab_alloc+0xc27/0x14a0 [ 301.153370][T13651] __slab_alloc+0x58/0xa0 [ 301.157716][T13651] __kmalloc_noprof+0x2e6/0x4c0 [ 301.162605][T13651] hci_alloc_dev_priv+0x27/0x2030 [ 301.167646][T13651] vhci_create_device+0x116/0x6a0 [ 301.172685][T13651] vhci_write+0x3cf/0x490 [ 301.177027][T13651] vfs_write+0xaeb/0xd30 [ 301.181273][T13651] ksys_write+0x18f/0x2b0 [ 301.185612][T13651] do_syscall_64+0xf3/0x230 [ 301.190128][T13651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.196038][T13651] page last free pid 5843 tgid 5843 stack trace: [ 301.202365][T13651] free_unref_page+0xd3f/0x1010 [ 301.207241][T13651] __slab_free+0x2c2/0x380 [ 301.211661][T13651] qlist_free_all+0x9a/0x140 [ 301.216255][T13651] kasan_quarantine_reduce+0x14f/0x170 [ 301.221736][T13651] __kasan_slab_alloc+0x23/0x80 [ 301.226595][T13651] kmem_cache_alloc_noprof+0x1d9/0x380 [ 301.232066][T13651] getname_flags+0xb7/0x540 [ 301.236579][T13651] user_path_at+0x24/0x60 [ 301.240922][T13651] __x64_sys_umount+0xf1/0x170 [ 301.245695][T13651] do_syscall_64+0xf3/0x230 [ 301.250209][T13651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.256131][T13651] [ 301.258471][T13651] Memory state around the buggy address: [ 301.264115][T13651] ffff8880767cff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 301.272185][T13651] ffff8880767cff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 301.280254][T13651] >ffff8880767d0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 301.288346][T13651] ^ [ 301.295564][T13651] ffff8880767d0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 301.303631][T13651] ffff8880767d0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 301.311695][T13651] ================================================================== [ 301.323051][T13651] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 301.330309][T13651] CPU: 0 UID: 0 PID: 13651 Comm: khidpd_04580059 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 301.341543][T13651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.351677][T13651] Call Trace: [ 301.354986][T13651] [ 301.357950][T13651] dump_stack_lvl+0x241/0x360 [ 301.362681][T13651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.367937][T13651] ? __pfx__printk+0x10/0x10 [ 301.372591][T13651] ? vscnprintf+0x5d/0x90 [ 301.376966][T13651] panic+0x349/0x880 [ 301.380909][T13651] ? check_panic_on_warn+0x21/0xb0 [ 301.386070][T13651] ? __pfx_panic+0x10/0x10 [ 301.390537][T13651] ? mark_lock+0x9a/0x360 [ 301.394920][T13651] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 301.400868][T13651] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 301.406810][T13651] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 301.413187][T13651] ? print_report+0x502/0x550 [ 301.417918][T13651] check_panic_on_warn+0x86/0xb0 [ 301.422900][T13651] ? __mutex_lock+0x7fb/0xee0 [ 301.427624][T13651] end_report+0x77/0x160 [ 301.431910][T13651] kasan_report+0x154/0x180 [ 301.436448][T13651] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 301.442394][T13651] ? __mutex_lock+0x7fb/0xee0 [ 301.447126][T13651] __mutex_lock+0x7fb/0xee0 [ 301.451667][T13651] ? __mutex_lock+0x5ef/0xee0 [ 301.456363][T13651] ? l2cap_unregister_user+0x6a/0x1c0 [ 301.461763][T13651] ? __pfx___mutex_lock+0x10/0x10 [ 301.466809][T13651] ? __pfx___timer_delete_sync+0x10/0x10 [ 301.472459][T13651] l2cap_unregister_user+0x6a/0x1c0 [ 301.477681][T13651] hidp_session_thread+0x450/0x490 [ 301.482805][T13651] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 301.488717][T13651] ? __pfx_hidp_session_thread+0x10/0x10 [ 301.494369][T13651] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 301.500282][T13651] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 301.506569][T13651] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 301.512827][T13651] ? __kthread_parkme+0x169/0x1d0 [ 301.517863][T13651] ? __pfx_hidp_session_thread+0x10/0x10 [ 301.523510][T13651] kthread+0x2f0/0x390 [ 301.527593][T13651] ? __pfx_hidp_session_thread+0x10/0x10 [ 301.533241][T13651] ? __pfx_kthread+0x10/0x10 [ 301.537847][T13651] ret_from_fork+0x4b/0x80 [ 301.542274][T13651] ? __pfx_kthread+0x10/0x10 [ 301.546875][T13651] ret_from_fork_asm+0x1a/0x30 [ 301.551652][T13651] [ 301.555040][T13651] Kernel Offset: disabled [ 301.559383][T13651] Rebooting in 86400 seconds..