last executing test programs: 3.087109288s ago: executing program 4 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="850000002f000000350000000000000085000000a3000000950000000000000003000000271e35032007fa95a2c8c037c5a142dfa8d76287946c5197fabd5f98f7024210e81ae0b738e65cb6e22ff5dde5c704d255c2350e06cc7ea7c09c4f42a5f0a8320e13e2c845c0f8612c10b10000002701d3712c7e93363af3166a32d95433bbe362b23d87bd793c171d505c04755a2dd576090c4867a7b63953366c6386d5ec7209d031f40f3012e9576e51a7f550afc852003bf3e4195cc037102f24d85cec074c6949e129890152213c8b2759207e6d067a05000000fe5f17fdab800f4104dbaba46aa43a815b1e5c6d1d224f64be6c4d7f47ef21eb7e46f9aa4a97793d110ee282ab7693d928cf95846be6277c043725cdb8c5324812696a623cd8a4f8dc8dcba00b1b2d2747c4040052087b5efae37b56c0ebfb19a342682fb98c1452b6518a6ef7297f7b3744419af53e5309ec91d83cf4fbd775d9c07d8d591ac3cb35afc4fefb7d3d74a248184f4dac60ff000000b78863e629b3b200000000000000000000000000000000000000449c81c33174c87ee545867a3126af7a8b20744e00000000000000000000000000000000ca4737fed0fa81f29ad592aa4d6d9334b3e9caf89eb0e82a188b981bfc5c1dcfe37d82b066bf8d0a4a585734b3ca74013efb27474cc4d47b51d5d0fbe88af5e6d63839c2853f162a0091e70f5affde4074c167a773c4ba789194d4c9b70f4b9c5504282a48864307ed663bfa54a0423826e273c1c0627fc1185f0ec3362e2c5afded72fda7ed9b14b58fb17f9617a27ef528b0d10d4fbe364c1abdf2664dba0b97a918b0b667052c3b5745f3ab7ad2be5c13d5c284117fc145c07918eb6805e2cf88f4db19f5b5a6911d194ce832957b5d3107b4dc2828253dde17576c0262ff90a299eeb3897bb14704401688c57ec9304e7d980ddf64d1983cee21941167237f06e95d5477c8f75c759325ad7a33514c0af833801bd6b06ed652026e1bca375d8a071e716c1726c5516deebeb9db3903777bd4c9f32e4af98a1e8730e7df0b12148cae60b75b7525102994351dfdfa879e4ba4a556002940f99c3a87875de6e59e0c800ee8807b0d6227cb8619d52397859a412b16ca976328349f03f44dfdec552067870d1d9d698404e5ed6e8175b0d5ab631f0ef56a8be56e24bf46f4447e2c402b6f74d3ba450bfff43797988114debd809fbbcd5fb4b8e52590e84699faccd5c4b293157114a13cd0f86e3c04806fee52e3cc39f725eb4e453634e97dd7fe4233321fa54b93f26d0abbd0a3ac9135867c0c132d5849382762683604f4076da8a0cc1d106dbe3e"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) 3.047650665s ago: executing program 2 (id=1714): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="8ea8a8a120e5f8320c30ce5088a846e947cacb1e92e126e2913f798eddeef39ae13cecf9ac36cb5d9bb133b9b73ff6890af24bd72a7e5cefabb02242c7bc424a30312aa4067377b8016b0039ff10c578dcd93a33b5941be7d83c69fdb4ba5426774ccae8986571e38dd8169d07a9c9bef173565f4dc6fb6d60d4c29a1798540ecb47ab95558bbb65", 0x88, 0x4000, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 2.892943986s ago: executing program 4 (id=1715): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x7a, &(0x7f0000000100)={&(0x7f00000002c0)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x0, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x6, 0x6, "0300"}, {0xc}, {0xc}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) unshare(0x24020400) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r7 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, 0x0, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES64=r7, @ANYBLOB="fb4ffd6204", @ANYRES32=r5, @ANYRESDEC=r7], 0x20000600}}, 0x844) sendmsg$can_bcm(r9, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r6, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x6b324fb906924663, 0x2, 0x1, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001400000229bd7000fedbdf250a9c97fe", @ANYRES32=r8, @ANYBLOB="080000080008000b00000000000000000000000000000000fcc763f3ed9e210af29f0c096a9cf3e7f6d4fd5aa8ff949eb2c52ec2ba61c4b1f86892dd14"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x1) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), r0) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10800004}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r10, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x3e, 0x2, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044884}, 0x24000080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000140)={'ip6erspan0\x00', {0x2, 0x0, @remote}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4008010) socketpair(0x26, 0x802, 0xffffffff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$l2tp6(r11, &(0x7f0000000080)={0xa, 0x0, 0xa28, @empty, 0xffff6d2d, 0x3}, 0x20) 2.864880811s ago: executing program 2 (id=1716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@dellink={0x0, 0x11, 0x400, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x30, 0x2100}, [@IFLA_IFALIAS={0x0, 0x14, 'team0\x00'}, @IFLA_ALT_IFNAME={0x0, 0x35, 'wg2\x00'}, @IFLA_AF_SPEC={0x0, 0x1a, 0x0, 0x1, [@AF_BRIDGE, @AF_MPLS, @AF_BRIDGE, @AF_INET={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x0, 0x1, [{0x0, 0x21, 0x0, 0x0, 0x9}, {0x0, 0x14, 0x0, 0x0, 0x4}, {0x0, 0x6, 0x0, 0x0, 0xfff}, {0x0, 0x21, 0x0, 0x0, 0x3}, {0x0, 0x16, 0x0, 0x0, 0x6459}, {0x0, 0x6, 0x0, 0x0, 0x3b94}, {0x0, 0x7, 0x0, 0x0, 0x7}, {0x0, 0x1c, 0x0, 0x0, 0x5}]}}, @AF_INET]}, @IFLA_ALT_IFNAME={0x0, 0x35, 'veth1_vlan\x00'}, @IFLA_LINKMODE={0x0, 0x11, 0x2}]}, 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc00}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) 2.676481712s ago: executing program 2 (id=1719): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x12, 0x3, 0x0, 0x0) 2.457223181s ago: executing program 2 (id=1722): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000200000000000000ac14140000002300000000000000000000000000000000000a"], 0xb8}}, 0x4040080) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001fdffffffff88ffff00ac1ee100000000002000000000000000403403f438bd9e28000000000000000000000000000000000a0000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) 2.313744532s ago: executing program 2 (id=1723): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x16, 0xb3, 0x82, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x6, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.108897955s ago: executing program 2 (id=1725): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="18008d1e0000000017000900"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00\x00', @ANYRES32, @ANYBLOB="9b36bc0930cf79dc72a93ee0000000000000001900"/32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="0201"], 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0xfffffffd, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r6 = socket$inet(0x2, 0x1, 0x3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_msfilter(r6, 0x0, 0x8, &(0x7f0000000180)=ANY=[], 0x1) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000380)={@remote, 0x4004d, r8}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007900210826bd7000fcdbdf2507000000faffffff0700010001"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) socket$rxrpc(0x21, 0x2, 0x2) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000740)={'filter\x00', 0x10, 0x4, 0x3e8, 0x1f0, 0x0, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@private=0xa010100, @broadcast, 0xffffff00, 0x0, 0x0, 0x4, {}, {@mac=@random="bd22fdd68c29", {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 'veth0_macvtap\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @empty, @loopback, @empty, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) 2.056344076s ago: executing program 1 (id=1726): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="8ea8a8a120e5f8320c30ce5088a846e947cacb1e92e126e2913f798eddeef39ae13cecf9ac36cb5d9bb133b9b73ff6890af24bd72a7e5cefabb02242c7bc424a30312aa4067377b8016b0039ff10c578dcd93a33b5941be7d83c69fdb4ba5426774ccae8986571e38dd8169d07a9c9bef173565f4dc6fb6d60d4c29a1798540ecb47ab95558bbb65", 0x88, 0x4000, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 1.825248653s ago: executing program 1 (id=1728): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f200000028000001294", 0x2e}], 0x1}, 0x0) 1.824865194s ago: executing program 3 (id=1729): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b70800001fffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.572867957s ago: executing program 3 (id=1731): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r5, 0x5953a6d8b15e6715, 0x70bd2c}, 0x14}}, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r6, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000280)=0x80000001, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xecf9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r8}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r6, 0xc0046686, &(0x7f0000001740)={0x1, 0xef0, "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"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r11, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r11}, 0x4) 1.571971256s ago: executing program 1 (id=1732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, 0x0, 0x4000000) socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, 0x0, 0x0, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000004c0)=0xd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004440)={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000ffffffe40700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) 1.283763639s ago: executing program 1 (id=1734): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000200000000000000ac14140000002300000000000000000000000000000000000a"], 0xb8}}, 0x4040080) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec000000210001fdffffffffff110000ac1ee100000000002000000000000000403403f438bd9e28000000000000000000000000000000000a0000edffffff00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011"], 0xec}}, 0x0) 1.224878808s ago: executing program 4 (id=1735): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000140000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.06126942s ago: executing program 4 (id=1736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070060000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a300000000038000380340000800800034000000002280002802400028008000180fffffffb08000180fffffffb"], 0xf8}}, 0x0) 1.041538277s ago: executing program 1 (id=1737): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200004000000000000000de63000085000000270000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c9000000850000005000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000240)={0x2e, @empty, 0x4e21, 0x3, 'dh\x00', 0x0, 0x7b3, 0x6}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r2, &(0x7f0000000680)="0cf5c324657232e64ec10a4b1d7cee826a1e4116fa8d1ac2dfcb400d4766304f6968fb0be6413a6a79aecbfc60204730085b73934d757b95e0564c827b24c2286097b54e5827aeafc92fe3d173e7757b8d3f441b254f7662e461f38f0d491295aa47edef742f998a8f203ab6345f21604b3b6f24aa4a7094d97af2d21e8095057535b0a8cb65c1a30a83299ef77a8a15d2906cf493a59fd25dac9ef23a1a4c132896ec33e6f014666488d8ab246786696d8ad04cbe9f937aabb67d6a218ccdfe3eeee27d03adc8752b7a24b3715c4baaec30f9ddaeda", &(0x7f0000000780)=""/106, 0x4}, 0x20) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000400)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={0x0, 0x34}}, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2bd50000000000006e652d8818ab0400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001400) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='io.max\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @empty, 0x0, "ffff01e03d64a831683fdc3fd440829c82cfc400"}, 0x3c) ioctl$TUNSETOFFLOAD(r3, 0x4010744d, 0x20000000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000600)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r10], 0x50}, 0x1, 0xba01}, 0x0) r11 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) 876.980147ms ago: executing program 4 (id=1739): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x80, 0x7800, 0x3, 0x1, {{0x11, 0x4, 0x1, 0x1, 0x44, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@ra, @ssrr={0x89, 0xf, 0x98, [@private=0xa010102, @local, @empty]}]}}}}}) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) (async) r2 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@rand_addr=0x64010101, 0x4e23, 0x1ff, 0x4e21, 0x2, 0x2, 0xa0, 0x80, 0x2b, r1, r3}, {0xc8, 0x7, 0x8, 0x6, 0x100000000, 0x10000, 0xfff, 0x4}, {0xa6, 0x9, 0x4, 0x7}, 0x7, 0x6e6bbb, 0x0, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d2, 0x3c}, 0x2, @in6=@loopback, 0x3507, 0x1, 0x3, 0x2, 0xffff, 0x2, 0x6}}, 0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x25dfdbfd, {{{@in6=@private1={0xfc, 0x1, '\x00', 0x5}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, r1}, {0x8, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x6e6bbc}}, [@policy_type={0xa, 0x10, {0x3}}]}, 0xcc}}, 0x20008841) 852.109444ms ago: executing program 0 (id=1740): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000028020000090a010400000000200000000700000908000a40000000000900020073797a31000000000900010073797a3000000000080005400000002124001180090001006d6574610000000014000280080001400000000d080002400000001c0800044000000002080005400000001e08000f4000f400010c00104000000000000000020800034000000040"], 0x270}}, 0x24049080) 732.658092ms ago: executing program 4 (id=1741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x10, 0x3f5, 0x1, 0x70bd26, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000085}, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001f0000000a0001007770616e30000000"], 0x20}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r5, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x20040000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x240400c0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@ipv4={'\x00', '\xff\xff', @empty}, @loopback, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xffff0001, 0x5, 0x7, 0x500, 0x9, 0x8000c0}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r7}, 0x18) socket$netlink(0x10, 0x3, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "2ef48b21f49ec79d", "602ce8384f0f31de196f3162ff41587d", "a941b2e1", "99c53b64998d94fd"}, 0x28) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="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"], 0x50}}, 0x20000001) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ap_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYBLOB="80000000080211000001080211002e8be5af32bc0f31da00000802009de715"], 0x2c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f0000000280)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x6d, &(0x7f0000000340)=""/109, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x2}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f00000002c0)={r12, 0x6, 0x20}, 0xc) 597.096143ms ago: executing program 0 (id=1742): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x38, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000680)={r1, 0x8}, 0x14) 596.286592ms ago: executing program 1 (id=1743): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r0, 0x0, 0x100) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x948, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/2376]}, 0x9c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000014000502000000000000000002"], 0x4c}}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0x7, 0x4, 0x4a0, 0x0, 0x1e8, 0x0, 0x3b8, 0x3b8, 0x3b8, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_bridge\x00', 'veth1_to_hsr\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:ldconfig_exec_t:s0\x00'}}}, {{@arp={@multicast2, @rand_addr, 0x0, 0x0, 0xc, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_0\x00', 'veth0_virt_wifi\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@arp={@local, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@random="a1dcf6784022", {[0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'geneve1\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x4f0) socket$igmp(0x2, 0x3, 0x2) r5 = socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x2, {{0xa, 0x1, 0x0, @mcast1={0xff, 0xf}, 0x2}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x4000000, @private0}}}, 0x108) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436040000000000fdff000058000b482bca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a02070000000000000000050000000900010073797a300000000014000000090a0104000000000000000007000001140000001000010000000000000000000084000a60fd79a501e30450beda219357a58e51d0614993f7aeadcd2e635a01ce54f21ef2925d72ab"], 0x5c}}, 0x0) shutdown(r0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="5e0200f3000000380102000304b66f2a662d7989a28a6e74c85e34d32400050001000004000000000000008f"], 0x20) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00'}) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0x4, 0x8, 0x3, 0x100}, {0x8, 0x9, 0x7, 0x4}]}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 563.314596ms ago: executing program 0 (id=1744): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYRES64=r1, @ANYRESOCT=r0], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) 439.264059ms ago: executing program 0 (id=1745): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000004100711217000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 307.973524ms ago: executing program 0 (id=1746): sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x48014) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80001, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) 289.129468ms ago: executing program 3 (id=1747): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x401}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24044040) syz_emit_ethernet(0xe9, &(0x7f0000000500)={@multicast, @local, @void, {@llc_tr={0x11, {@llc={0xd4, 0x80, "9a", "83bacda53740db135531617a589ae4a8fb8ae78104c0e4602e6ad0c14316ba38e2579c2bfc610b457fbdb17af4f529cadef13948450048407c3f67fc5a9ab39053bdc3030b3194cf19805a224409d4ede95374cf4ea7405fbd6ed67064cbb320f5a05f249df8c43dc9c8d5e09d865ec5c96ed0909804bb9db5448528eaf52705131ec20b97bae3f309c87cbd4240b5e80412df70741036810dd6b13ec31e2c1fb0ad683695fea0fcd6c6777bc40899febb92b89dc912fd919daba214d5bb3f94a3dcf0daf76687bc12bc90f544533c61d951561016177194"}}}}}, 0x0) 263.752452ms ago: executing program 0 (id=1748): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r1, 0x21eae}}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$unix(0x1, 0x2, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1dc595f0766418b856f059", 0xfffffe99}], 0x2, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r9, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 69.223928ms ago: executing program 3 (id=1749): socket$inet6(0xa, 0x80003, 0xff) (async) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) (async) close(0x3) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x94}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 68.819989ms ago: executing program 3 (id=1750): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f00000003c0)="8ea8a8a120e5f8320c30ce5088a846e947cacb1e92e126e2913f798eddeef39ae13cecf9ac36cb5d9bb133b9b73ff6890af24bd72a7e5cefabb02242c7bc424a30312aa4067377b8016b0039ff10c578dcd93a33b5941be7d83c69fdb4ba5426774ccae8986571e38dd8169d07a9c9bef173565f4dc6fb6d60d4c29a1798540ecb47ab95558bbb65", 0x88, 0x4000, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 0s ago: executing program 3 (id=1751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a400000000010104000000000000000002000000380001801400018008000100ac1e000108000200e00000010c00028005000100000000001400018008000100e0000001080002000a010101240002800c000280050001000000000014000180080001000000000008000200e00000020800074000000000080008400000000008001540f2e700001c00188008000240000000000800014000000000080003"], 0xa4}}, 0x0) accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140)=0x101, 0xffffffffffffffc1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, 0x0, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="0900000000000000ffc597d02649766f00", @ANYRES32], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r3, 0x8b24, &(0x7f0000000040)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="9c010000", @ANYRES16=0x0, @ANYBLOB="02002c090000ffdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="0a001800030303030303000005001901040000000c007000050001000100000008000c006400000044015a804800018005000700010000001d00010005360160060512031b023004000b602402006c011b0409241800000005000400000000000500070002000000040002000500070002000000e0000180140003000300bed4090006000400050083000500050007000100000044000200114c3e490a4e4244232b29111e103a3143310720410b012d2520492d4e004936260e473b2c54522457491c420e4334011a354d3f121f290d111345283a23411605000700020000004c00020003334a543318570f1a5335310c0c4435523808491b3f465220552e401151430d4108363e272c142b311949102d2b13120a4e0f31110124444a21303813354d0d4b41571939164408140001000460060924180b12041624300b0b160c14000300090001000900f0f3080005000000050018000280140003000200feff0500060010008100ff0000080400cc000a00180003030303030300000400bf00"], 0x19c}, 0x1, 0x0, 0x0, 0x40040}, 0x24008004) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r4, &(0x7f0000000340)="05000000010000", 0x7) socket$nl_route(0x10, 0x3, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r7 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x83, &(0x7f0000000040)={'filter\x00', 0x0, 0x0, 0x90, [], 0x0, 0x0, 0x1000000000000}, &(0x7f00000000c0)=0x108) kernel console output (not intermixed with test programs): entered allmulticast mode [ 92.153840][ T7139] veth2: entered allmulticast mode [ 92.162887][ T7139] veth3: entered allmulticast mode [ 92.174516][ T7142] erspan1: entered promiscuous mode [ 92.179826][ T7142] erspan1: entered allmulticast mode [ 92.185304][ T7146] __nla_validate_parse: 7 callbacks suppressed [ 92.185319][ T7146] netlink: 132 bytes leftover after parsing attributes in process `syz.2.424'. [ 92.288074][ T7128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.358228][ T7148] vlan2: entered promiscuous mode [ 92.434934][ T7163] FAULT_INJECTION: forcing a failure. [ 92.434934][ T7163] name failslab, interval 1, probability 0, space 0, times 0 [ 92.453934][ T7163] CPU: 1 UID: 0 PID: 7163 Comm: syz.3.429 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 92.464578][ T7163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 92.474660][ T7163] Call Trace: [ 92.477960][ T7163] [ 92.480916][ T7163] dump_stack_lvl+0x241/0x360 [ 92.485623][ T7163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.490847][ T7163] ? __pfx__printk+0x10/0x10 [ 92.495466][ T7163] ? __kmalloc_node_noprof+0xb7/0x440 [ 92.500867][ T7163] ? __pfx___might_resched+0x10/0x10 [ 92.506186][ T7163] should_fail_ex+0x3b0/0x4e0 [ 92.510901][ T7163] should_failslab+0xac/0x100 [ 92.515606][ T7163] __kmalloc_node_noprof+0xdf/0x440 [ 92.520828][ T7163] ? __kvmalloc_node_noprof+0x72/0x190 [ 92.526400][ T7163] __kvmalloc_node_noprof+0x72/0x190 [ 92.531713][ T7163] bpf_test_run_xdp_live+0x21d/0x21b0 [ 92.537115][ T7163] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 92.543035][ T7163] ? __pfx_lock_release+0x10/0x10 [ 92.548094][ T7163] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 92.553411][ T7163] ? __pfx___might_resched+0x10/0x10 [ 92.558721][ T7163] ? __mutex_unlock_slowpath+0x21d/0x750 [ 92.564468][ T7163] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 92.569954][ T7163] ? __mutex_unlock_slowpath+0x21d/0x750 [ 92.575617][ T7163] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 92.581447][ T7163] ? synchronize_rcu+0x11b/0x360 [ 92.586410][ T7163] ? __pfx_synchronize_rcu+0x10/0x10 [ 92.591737][ T7163] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 92.598004][ T7163] ? 0xffffffffa00007e0 [ 92.602195][ T7163] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 92.608135][ T7163] ? _copy_from_user+0x99/0xc0 [ 92.612938][ T7163] ? bpf_test_init+0x15a/0x180 [ 92.617724][ T7163] ? xdp_convert_md_to_buff+0x5b/0x330 [ 92.623218][ T7163] bpf_prog_test_run_xdp+0x805/0x11e0 [ 92.628624][ T7163] ? __pfx_lock_release+0x10/0x10 [ 92.633688][ T7163] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.639693][ T7163] ? __fget_files+0x29/0x470 [ 92.644317][ T7163] ? fput+0x1a8/0x230 [ 92.648324][ T7163] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 92.654159][ T7163] bpf_prog_test_run+0x2e4/0x360 [ 92.659129][ T7163] __sys_bpf+0x48d/0x810 [ 92.663403][ T7163] ? __pfx___sys_bpf+0x10/0x10 [ 92.668208][ T7163] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.674219][ T7163] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.680583][ T7163] ? do_syscall_64+0x100/0x230 [ 92.685380][ T7163] __x64_sys_bpf+0x7c/0x90 [ 92.689830][ T7163] do_syscall_64+0xf3/0x230 [ 92.694364][ T7163] ? clear_bhb_loop+0x35/0x90 [ 92.699077][ T7163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.704996][ T7163] RIP: 0033:0x7faf1657e719 [ 92.709443][ T7163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.729081][ T7163] RSP: 002b:00007faf17333038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 92.737532][ T7163] RAX: ffffffffffffffda RBX: 00007faf16735f80 RCX: 00007faf1657e719 [ 92.745531][ T7163] RDX: 0000000000000050 RSI: 0000000020000a40 RDI: 000000000000000a [ 92.753531][ T7163] RBP: 00007faf17333090 R08: 0000000000000000 R09: 0000000000000000 [ 92.761524][ T7163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.769522][ T7163] R13: 0000000000000000 R14: 00007faf16735f80 R15: 00007ffc7c314ce8 [ 92.777534][ T7163] [ 92.884933][ T7186] netlink: 412 bytes leftover after parsing attributes in process `syz.4.437'. [ 92.904428][ T7128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.051662][ T7128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.205335][ T7128] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.233977][ T7128] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.248915][ T7128] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.270839][ T7128] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.322780][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 93.356472][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 93.482409][ T7205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.441'. [ 93.567888][ T7226] FAULT_INJECTION: forcing a failure. [ 93.567888][ T7226] name failslab, interval 1, probability 0, space 0, times 0 [ 93.568450][ T7227] netlink: 48 bytes leftover after parsing attributes in process `syz.0.448'. [ 93.627478][ T7226] CPU: 1 UID: 0 PID: 7226 Comm: syz.2.449 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 93.638121][ T7226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 93.648199][ T7226] Call Trace: [ 93.651497][ T7226] [ 93.654442][ T7226] dump_stack_lvl+0x241/0x360 [ 93.659151][ T7226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.664381][ T7226] ? __pfx__printk+0x10/0x10 [ 93.668993][ T7226] ? __kmalloc_node_noprof+0xb7/0x440 [ 93.674373][ T7226] ? __pfx___might_resched+0x10/0x10 [ 93.679668][ T7226] should_fail_ex+0x3b0/0x4e0 [ 93.684342][ T7226] should_failslab+0xac/0x100 [ 93.689030][ T7226] __kmalloc_node_noprof+0xdf/0x440 [ 93.694227][ T7226] ? __kvmalloc_node_noprof+0x72/0x190 [ 93.699688][ T7226] __kvmalloc_node_noprof+0x72/0x190 [ 93.704973][ T7226] bpf_test_run_xdp_live+0x290/0x21b0 [ 93.710346][ T7226] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 93.716231][ T7226] ? __pfx_lock_release+0x10/0x10 [ 93.721258][ T7226] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 93.726537][ T7226] ? __pfx___might_resched+0x10/0x10 [ 93.731823][ T7226] ? __mutex_unlock_slowpath+0x21d/0x750 [ 93.737455][ T7226] ? __pfx_autoremove_wake_function+0x10/0x10 [ 93.743524][ T7226] ? __mutex_unlock_slowpath+0x21d/0x750 [ 93.749157][ T7226] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 93.754958][ T7226] ? synchronize_rcu+0x11b/0x360 [ 93.759894][ T7226] ? __pfx_synchronize_rcu+0x10/0x10 [ 93.765188][ T7226] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 93.771425][ T7226] ? 0xffffffffa0000854 [ 93.775585][ T7226] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 93.781488][ T7226] ? _copy_from_user+0x99/0xc0 [ 93.786272][ T7226] ? bpf_test_init+0x15a/0x180 [ 93.791053][ T7226] ? xdp_convert_md_to_buff+0x5b/0x330 [ 93.796519][ T7226] bpf_prog_test_run_xdp+0x805/0x11e0 [ 93.801906][ T7226] ? __pfx_lock_release+0x10/0x10 [ 93.806950][ T7226] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.812778][ T7226] ? __fget_files+0x29/0x470 [ 93.817378][ T7226] ? fput+0x1a8/0x230 [ 93.821358][ T7226] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 93.827163][ T7226] bpf_prog_test_run+0x2e4/0x360 [ 93.832106][ T7226] __sys_bpf+0x48d/0x810 [ 93.836354][ T7226] ? __pfx___sys_bpf+0x10/0x10 [ 93.841122][ T7226] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 93.847130][ T7226] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 93.853546][ T7226] ? do_syscall_64+0x100/0x230 [ 93.858310][ T7226] __x64_sys_bpf+0x7c/0x90 [ 93.862753][ T7226] do_syscall_64+0xf3/0x230 [ 93.867254][ T7226] ? clear_bhb_loop+0x35/0x90 [ 93.871931][ T7226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.877823][ T7226] RIP: 0033:0x7f472977e719 [ 93.882233][ T7226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.901837][ T7226] RSP: 002b:00007f472a61c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 93.910250][ T7226] RAX: ffffffffffffffda RBX: 00007f4729935f80 RCX: 00007f472977e719 [ 93.918217][ T7226] RDX: 0000000000000050 RSI: 0000000020000a40 RDI: 000000000000000a [ 93.926180][ T7226] RBP: 00007f472a61c090 R08: 0000000000000000 R09: 0000000000000000 [ 93.934143][ T7226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.942107][ T7226] R13: 0000000000000000 R14: 00007f4729935f80 R15: 00007ffcecbc2a58 [ 93.950103][ T7226] [ 94.045378][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.451'. [ 94.083546][ T7241] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 94.252522][ T7237] openvswitch: netlink: Missing key (keys=40, expected=80) [ 94.394056][ T7261] netlink: 6 bytes leftover after parsing attributes in process `syz.2.460'. [ 94.590907][ T7276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.464'. [ 94.654235][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 94.811649][ T7284] FAULT_INJECTION: forcing a failure. [ 94.811649][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 94.826889][ T7284] CPU: 1 UID: 0 PID: 7284 Comm: syz.2.468 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 94.837541][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 94.847622][ T7284] Call Trace: [ 94.850930][ T7284] [ 94.853886][ T7284] dump_stack_lvl+0x241/0x360 [ 94.858615][ T7284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.863929][ T7284] ? __pfx__printk+0x10/0x10 [ 94.868558][ T7284] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 94.874580][ T7284] ? __pfx___might_resched+0x10/0x10 [ 94.879910][ T7284] should_fail_ex+0x3b0/0x4e0 [ 94.884623][ T7284] should_failslab+0xac/0x100 [ 94.889338][ T7284] __kmalloc_cache_node_noprof+0x74/0x300 [ 94.895089][ T7284] ? page_pool_create_percpu+0x77/0xa00 [ 94.900668][ T7284] ? rcu_is_watching+0x15/0xb0 [ 94.905464][ T7284] page_pool_create_percpu+0x77/0xa00 [ 94.910890][ T7284] bpf_test_run_xdp_live+0x2e6/0x21b0 [ 94.916296][ T7284] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 94.922216][ T7284] ? __pfx_lock_release+0x10/0x10 [ 94.927273][ T7284] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 94.932590][ T7284] ? __pfx___might_resched+0x10/0x10 [ 94.937913][ T7284] ? __mutex_unlock_slowpath+0x21d/0x750 [ 94.943593][ T7284] ? bpf_dispatcher_xdp_func+0x25/0x30 [ 94.949085][ T7284] ? __mutex_unlock_slowpath+0x21d/0x750 [ 94.954743][ T7284] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 94.960571][ T7284] ? synchronize_rcu+0x11b/0x360 [ 94.965523][ T7284] ? __pfx_synchronize_rcu+0x10/0x10 [ 94.970825][ T7284] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 94.977061][ T7284] ? 0xffffffffa00007cc [ 94.981238][ T7284] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 94.987157][ T7284] ? _copy_from_user+0x99/0xc0 [ 94.991938][ T7284] ? bpf_test_init+0x15a/0x180 [ 94.996714][ T7284] ? xdp_convert_md_to_buff+0x5b/0x330 [ 95.002181][ T7284] bpf_prog_test_run_xdp+0x805/0x11e0 [ 95.007583][ T7284] ? __pfx_lock_release+0x10/0x10 [ 95.012619][ T7284] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.018436][ T7284] ? __fget_files+0x29/0x470 [ 95.023061][ T7284] ? fput+0x1a8/0x230 [ 95.027046][ T7284] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 95.032878][ T7284] bpf_prog_test_run+0x2e4/0x360 [ 95.037847][ T7284] __sys_bpf+0x48d/0x810 [ 95.042116][ T7284] ? __pfx___sys_bpf+0x10/0x10 [ 95.046914][ T7284] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.052905][ T7284] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.059254][ T7284] ? do_syscall_64+0x100/0x230 [ 95.064064][ T7284] __x64_sys_bpf+0x7c/0x90 [ 95.068513][ T7284] do_syscall_64+0xf3/0x230 [ 95.073014][ T7284] ? clear_bhb_loop+0x35/0x90 [ 95.077697][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.083609][ T7284] RIP: 0033:0x7f472977e719 [ 95.088044][ T7284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.107658][ T7284] RSP: 002b:00007f472a61c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.107685][ T7284] RAX: ffffffffffffffda RBX: 00007f4729935f80 RCX: 00007f472977e719 [ 95.107699][ T7284] RDX: 0000000000000050 RSI: 0000000020000a40 RDI: 000000000000000a [ 95.107711][ T7284] RBP: 00007f472a61c090 R08: 0000000000000000 R09: 0000000000000000 [ 95.107723][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.107734][ T7284] R13: 0000000000000000 R14: 00007f4729935f80 R15: 00007ffcecbc2a58 [ 95.107762][ T7284] [ 95.246540][ T7294] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 95.381384][ T7304] ipip0: entered promiscuous mode [ 95.940359][ T7319] team0: Port device bridge0 removed [ 96.020138][ T7346] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 96.166603][ T7356] sctp: [Deprecated]: syz.3.490 (pid 7356) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.166603][ T7356] Use struct sctp_sack_info instead [ 96.418266][ T7369] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 96.626978][ T7375] netlink: 'syz.4.498': attribute type 30 has an invalid length. [ 96.699023][ T7375] pimreg3: entered allmulticast mode [ 96.718985][ T7375] netlink: 'syz.4.498': attribute type 30 has an invalid length. [ 96.822675][ T7385] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.961158][ T7392] netlink: 'syz.3.506': attribute type 10 has an invalid length. [ 96.994379][ T7392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.040453][ T7401] FAULT_INJECTION: forcing a failure. [ 97.040453][ T7401] name failslab, interval 1, probability 0, space 0, times 0 [ 97.053703][ T7401] CPU: 1 UID: 0 PID: 7401 Comm: syz.2.509 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 97.064330][ T7401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 97.074396][ T7401] Call Trace: [ 97.077684][ T7401] [ 97.080618][ T7401] dump_stack_lvl+0x241/0x360 [ 97.085301][ T7401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.090505][ T7401] ? __pfx__printk+0x10/0x10 [ 97.095108][ T7401] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 97.100574][ T7401] ? __pfx___might_resched+0x10/0x10 [ 97.105863][ T7401] should_fail_ex+0x3b0/0x4e0 [ 97.110572][ T7401] should_failslab+0xac/0x100 [ 97.115247][ T7401] ? __xdp_reg_mem_model+0x1e3/0x620 [ 97.120529][ T7401] __kmalloc_cache_noprof+0x6c/0x2c0 [ 97.125828][ T7401] __xdp_reg_mem_model+0x1e3/0x620 [ 97.130947][ T7401] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 97.136576][ T7401] ? page_pool_list+0x232/0x280 [ 97.141427][ T7401] ? page_pool_create_percpu+0x64a/0xa00 [ 97.147059][ T7401] xdp_reg_mem_model+0x22/0x40 [ 97.151817][ T7401] bpf_test_run_xdp_live+0x32f/0x21b0 [ 97.157193][ T7401] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 97.163094][ T7401] ? __pfx_lock_release+0x10/0x10 [ 97.168128][ T7401] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 97.173425][ T7401] ? __pfx___might_resched+0x10/0x10 [ 97.178714][ T7401] ? __mutex_unlock_slowpath+0x21d/0x750 [ 97.184346][ T7401] ? __pfx_autoremove_wake_function+0x10/0x10 [ 97.190418][ T7401] ? __mutex_unlock_slowpath+0x21d/0x750 [ 97.196049][ T7401] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 97.201873][ T7401] ? synchronize_rcu+0x11b/0x360 [ 97.206814][ T7401] ? __pfx_synchronize_rcu+0x10/0x10 [ 97.212112][ T7401] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 97.218353][ T7401] ? 0xffffffffa0000814 [ 97.222513][ T7401] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 97.228424][ T7401] ? _copy_from_user+0x99/0xc0 [ 97.233188][ T7401] ? bpf_test_init+0x15a/0x180 [ 97.237949][ T7401] ? xdp_convert_md_to_buff+0x5b/0x330 [ 97.243407][ T7401] bpf_prog_test_run_xdp+0x805/0x11e0 [ 97.248785][ T7401] ? __pfx_lock_release+0x10/0x10 [ 97.253816][ T7401] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.259623][ T7401] ? __fget_files+0x29/0x470 [ 97.264219][ T7401] ? fput+0x1a8/0x230 [ 97.268198][ T7401] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 97.274027][ T7401] bpf_prog_test_run+0x2e4/0x360 [ 97.278986][ T7401] __sys_bpf+0x48d/0x810 [ 97.283245][ T7401] ? __pfx___sys_bpf+0x10/0x10 [ 97.288015][ T7401] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.293997][ T7401] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.300327][ T7401] ? do_syscall_64+0x100/0x230 [ 97.305091][ T7401] __x64_sys_bpf+0x7c/0x90 [ 97.309507][ T7401] do_syscall_64+0xf3/0x230 [ 97.314011][ T7401] ? clear_bhb_loop+0x35/0x90 [ 97.318686][ T7401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.324575][ T7401] RIP: 0033:0x7f472977e719 [ 97.328988][ T7401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.348734][ T7401] RSP: 002b:00007f472a61c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.357147][ T7401] RAX: ffffffffffffffda RBX: 00007f4729935f80 RCX: 00007f472977e719 [ 97.365116][ T7401] RDX: 0000000000000050 RSI: 0000000020000a40 RDI: 000000000000000a [ 97.373088][ T7401] RBP: 00007f472a61c090 R08: 0000000000000000 R09: 0000000000000000 [ 97.381063][ T7401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.389047][ T7401] R13: 0000000000000000 R14: 00007f4729935f80 R15: 00007ffcecbc2a58 [ 97.397047][ T7401] [ 97.455756][ T7394] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 97.466029][ T7399] __nla_validate_parse: 9 callbacks suppressed [ 97.466048][ T7399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.507'. [ 97.571711][ T5854] Bluetooth: hci0: command 0x0419 tx timeout [ 97.578644][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 97.879114][ T7426] netlink: 412 bytes leftover after parsing attributes in process `syz.2.516'. [ 98.029304][ T7436] FAULT_INJECTION: forcing a failure. [ 98.029304][ T7436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.066985][ T7436] CPU: 1 UID: 0 PID: 7436 Comm: syz.0.521 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 98.077628][ T7436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 98.087713][ T7436] Call Trace: [ 98.091021][ T7436] [ 98.093966][ T7436] dump_stack_lvl+0x241/0x360 [ 98.098674][ T7436] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.103905][ T7436] ? __pfx__printk+0x10/0x10 [ 98.108536][ T7436] should_fail_ex+0x3b0/0x4e0 [ 98.113245][ T7436] _copy_to_user+0x31/0xb0 [ 98.117696][ T7436] bpf_test_finish+0x212/0x890 [ 98.122492][ T7436] ? __pfx_bpf_test_finish+0x10/0x10 [ 98.127812][ T7436] ? convert___skb_to_skb+0x41/0x620 [ 98.133129][ T7436] ? convert_skb_to___skb+0x2d3/0x510 [ 98.138881][ T7436] bpf_prog_test_run_skb+0xff0/0x1820 [ 98.144304][ T7436] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 98.150142][ T7436] ? fput+0x1a8/0x230 [ 98.154150][ T7436] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 98.159987][ T7436] bpf_prog_test_run+0x2e4/0x360 [ 98.164961][ T7436] __sys_bpf+0x48d/0x810 [ 98.169234][ T7436] ? __pfx___sys_bpf+0x10/0x10 [ 98.174045][ T7436] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.180068][ T7436] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.186438][ T7436] ? do_syscall_64+0x100/0x230 [ 98.191243][ T7436] __x64_sys_bpf+0x7c/0x90 [ 98.195691][ T7436] do_syscall_64+0xf3/0x230 [ 98.200220][ T7436] ? clear_bhb_loop+0x35/0x90 [ 98.204925][ T7436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.210842][ T7436] RIP: 0033:0x7fe26057e719 [ 98.215281][ T7436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.234908][ T7436] RSP: 002b:00007fe2613d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.243336][ T7436] RAX: ffffffffffffffda RBX: 00007fe260735f80 RCX: 00007fe26057e719 [ 98.251347][ T7436] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 98.259323][ T7436] RBP: 00007fe2613d9090 R08: 0000000000000000 R09: 0000000000000000 [ 98.267306][ T7436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.275302][ T7436] R13: 0000000000000000 R14: 00007fe260735f80 R15: 00007fffaf240888 [ 98.283283][ T7436] [ 98.379968][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 98.445023][ T7459] netlink: 'syz.2.529': attribute type 4 has an invalid length. [ 98.920256][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.536'. [ 99.060890][ T7487] vlan2: entered promiscuous mode [ 99.099202][ T7487] vlan2: entered allmulticast mode [ 99.105033][ T7487] xfrm0: entered allmulticast mode [ 99.137568][ T7487] xfrm0: entered promiscuous mode [ 99.171396][ T7487] team0: Port device vlan2 added [ 99.247660][ T7492] xfrm0: left allmulticast mode [ 99.252599][ T7492] xfrm0: left promiscuous mode [ 99.303439][ T7487] xfrm0: entered allmulticast mode [ 99.316848][ T7487] xfrm0: entered promiscuous mode [ 99.342086][ T7487] syz.3.539 (7487) used greatest stack depth: 18224 bytes left [ 99.432297][ T7509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.546'. [ 99.690180][ T7523] sch_tbf: burst 0 is lower than device bridge_slave_0 mtu (1514) ! [ 100.303813][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 100.311143][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.405992][ T7560] FAULT_INJECTION: forcing a failure. [ 100.405992][ T7560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.411375][ T7566] delete_channel: no stack [ 100.419786][ T7560] CPU: 0 UID: 0 PID: 7560 Comm: syz.4.566 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 100.434570][ T7560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 100.444651][ T7560] Call Trace: [ 100.447944][ T7560] [ 100.450873][ T7560] dump_stack_lvl+0x241/0x360 [ 100.455554][ T7560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.460748][ T7560] ? __pfx__printk+0x10/0x10 [ 100.465343][ T7560] should_fail_ex+0x3b0/0x4e0 [ 100.470027][ T7560] _copy_to_user+0x31/0xb0 [ 100.474450][ T7560] bpf_test_finish+0x212/0x890 [ 100.479220][ T7560] ? __pfx_bpf_test_finish+0x10/0x10 [ 100.484508][ T7560] ? _copy_from_user+0x99/0xc0 [ 100.489273][ T7560] ? bpf_test_init+0x15a/0x180 [ 100.494212][ T7560] bpf_prog_test_run_xdp+0x8f4/0x11e0 [ 100.499593][ T7560] ? __pfx_lock_release+0x10/0x10 [ 100.504625][ T7560] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.510453][ T7560] ? __fget_files+0x29/0x470 [ 100.515055][ T7560] ? fput+0x1a8/0x230 [ 100.519135][ T7560] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 100.524944][ T7560] bpf_prog_test_run+0x2e4/0x360 [ 100.529887][ T7560] __sys_bpf+0x48d/0x810 [ 100.534131][ T7560] ? __pfx___sys_bpf+0x10/0x10 [ 100.538901][ T7560] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 100.544883][ T7560] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.551219][ T7560] ? do_syscall_64+0x100/0x230 [ 100.555989][ T7560] __x64_sys_bpf+0x7c/0x90 [ 100.560406][ T7560] do_syscall_64+0xf3/0x230 [ 100.564906][ T7560] ? clear_bhb_loop+0x35/0x90 [ 100.569589][ T7560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.575481][ T7560] RIP: 0033:0x7f24b137e719 [ 100.579900][ T7560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.599506][ T7560] RSP: 002b:00007f24b20e9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 100.607918][ T7560] RAX: ffffffffffffffda RBX: 00007f24b1535f80 RCX: 00007f24b137e719 [ 100.615884][ T7560] RDX: 0000000000000050 RSI: 0000000020000a40 RDI: 000000000000000a [ 100.623877][ T7560] RBP: 00007f24b20e9090 R08: 0000000000000000 R09: 0000000000000000 [ 100.631850][ T7560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 100.639818][ T7560] R13: 0000000000000000 R14: 00007f24b1535f80 R15: 00007ffee232cb08 [ 100.647882][ T7560] [ 100.707700][ T7573] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.717653][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.564'. [ 100.786157][ T7575] netlink: 'syz.1.572': attribute type 9 has an invalid length. [ 100.805582][ T7575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 101.319268][ T7612] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.480608][ T5852] IPVS: starting estimator thread 0... [ 101.562592][ T7624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 101.577355][ T7620] IPVS: using max 21 ests per chain, 50400 per kthread [ 101.631384][ T7631] netlink: 16 bytes leftover after parsing attributes in process `syz.3.590'. [ 101.783076][ T7641] FAULT_INJECTION: forcing a failure. [ 101.783076][ T7641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.788342][ T7642] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 101.823631][ T7642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.594'. [ 101.825525][ T7641] CPU: 0 UID: 0 PID: 7641 Comm: syz.0.593 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 101.843486][ T7641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 101.853571][ T7641] Call Trace: [ 101.856882][ T7641] [ 101.859835][ T7641] dump_stack_lvl+0x241/0x360 [ 101.864554][ T7641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.869781][ T7641] ? __pfx__printk+0x10/0x10 [ 101.874398][ T7641] ? __pfx_lock_release+0x10/0x10 [ 101.879558][ T7641] should_fail_ex+0x3b0/0x4e0 [ 101.884276][ T7641] _copy_from_user+0x2f/0xc0 [ 101.888906][ T7641] copy_msghdr_from_user+0xae/0x680 [ 101.894145][ T7641] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 101.899996][ T7641] __sys_sendmmsg+0x36d/0x730 [ 101.904712][ T7641] ? __pfx___sys_sendmmsg+0x10/0x10 [ 101.909948][ T7641] ? __pfx_lock_release+0x10/0x10 [ 101.915005][ T7641] ? kstrtouint_from_user+0x128/0x190 [ 101.920419][ T7641] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 101.926322][ T7641] ? ksys_write+0x229/0x2b0 [ 101.930826][ T7641] ? __pfx_lock_release+0x10/0x10 [ 101.935858][ T7641] ? vfs_write+0x730/0xd30 [ 101.940279][ T7641] ? __mutex_unlock_slowpath+0x21d/0x750 [ 101.945918][ T7641] ? __fget_files+0x3f3/0x470 [ 101.950598][ T7641] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 101.956579][ T7641] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.962907][ T7641] ? do_syscall_64+0x100/0x230 [ 101.967670][ T7641] __x64_sys_sendmmsg+0xa0/0xb0 [ 101.972524][ T7641] do_syscall_64+0xf3/0x230 [ 101.977043][ T7641] ? clear_bhb_loop+0x35/0x90 [ 101.981736][ T7641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.987815][ T7641] RIP: 0033:0x7fe26057e719 [ 101.992233][ T7641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.011837][ T7641] RSP: 002b:00007fe2613b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 102.020261][ T7641] RAX: ffffffffffffffda RBX: 00007fe260736058 RCX: 00007fe26057e719 [ 102.028229][ T7641] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000007 [ 102.036194][ T7641] RBP: 00007fe2613b8090 R08: 0000000000000000 R09: 0000000000000000 [ 102.044186][ T7641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.052172][ T7641] R13: 0000000000000000 R14: 00007fe260736058 R15: 00007fffaf240888 [ 102.060170][ T7641] [ 102.340686][ T7656] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 102.532600][ T7670] __nla_validate_parse: 2 callbacks suppressed [ 102.532620][ T7670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.606'. [ 102.607775][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.602'. [ 102.644968][ T7672] netlink: 'syz.0.605': attribute type 10 has an invalid length. [ 102.812762][ T7685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.611'. [ 102.980996][ T7695] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'. [ 103.191324][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 103.197538][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 103.481029][ T7717] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 104.220346][ T7742] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 104.417410][ T7758] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 104.610086][ T7757] netlink: 'syz.4.633': attribute type 11 has an invalid length. [ 104.880853][ T7774] netlink: 104 bytes leftover after parsing attributes in process `syz.1.641'. [ 104.894207][ T7775] netlink: 104 bytes leftover after parsing attributes in process `syz.1.641'. [ 105.069375][ T7780] netlink: 412 bytes leftover after parsing attributes in process `syz.0.643'. [ 105.485470][ T7800] pim6reg1: entered promiscuous mode [ 105.499671][ T7800] pim6reg1: entered allmulticast mode [ 105.847989][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 105.898281][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 105.904426][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 106.132107][ T7833] netlink: 8 bytes leftover after parsing attributes in process `syz.2.665'. [ 106.144215][ T7833] netlink: 24 bytes leftover after parsing attributes in process `syz.2.665'. [ 106.160225][ T7828] netlink: 'syz.3.662': attribute type 11 has an invalid length. [ 106.910157][ T7871] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 106.975791][ T7869] netlink: 'syz.0.676': attribute type 10 has an invalid length. [ 107.665624][ T7903] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 107.712427][ T7908] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 107.849087][ T7905] netlink: 'syz.4.690': attribute type 10 has an invalid length. [ 107.905034][ T7905] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 108.070115][ T7921] __nla_validate_parse: 67 callbacks suppressed [ 108.070134][ T7921] netlink: 16 bytes leftover after parsing attributes in process `syz.4.695'. [ 108.084300][ T7923] netlink: 156 bytes leftover after parsing attributes in process `syz.0.696'. [ 108.252712][ T7927] x_tables: duplicate underflow at hook 3 [ 108.548462][ T7941] netlink: 'syz.1.705': attribute type 4 has an invalid length. [ 108.726871][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.706'. [ 108.758058][ T7951] netlink: 156 bytes leftover after parsing attributes in process `syz.0.708'. [ 109.090607][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 109.096737][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 109.115691][ T7953] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 109.153757][ T7962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.711'. [ 109.220206][ T7964] xt_nat: multiple ranges no longer supported [ 109.472327][ T7968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 109.495678][ T7968] netlink: 228 bytes leftover after parsing attributes in process `syz.1.714'. [ 109.513571][ T7968] netlink: 72 bytes leftover after parsing attributes in process `syz.1.714'. [ 109.939225][ T7982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.720'. [ 109.975141][ T7985] netlink: 156 bytes leftover after parsing attributes in process `syz.1.721'. [ 110.152976][ T7989] FAULT_INJECTION: forcing a failure. [ 110.152976][ T7989] name failslab, interval 1, probability 0, space 0, times 0 [ 110.216597][ T7989] CPU: 1 UID: 0 PID: 7989 Comm: syz.2.722 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 110.227250][ T7989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 110.237334][ T7989] Call Trace: [ 110.240664][ T7989] [ 110.243617][ T7989] dump_stack_lvl+0x241/0x360 [ 110.248331][ T7989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.253557][ T7989] ? __pfx__printk+0x10/0x10 [ 110.258179][ T7989] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 110.264202][ T7989] ? __pfx___might_resched+0x10/0x10 [ 110.269528][ T7989] should_fail_ex+0x3b0/0x4e0 [ 110.274231][ T7989] should_failslab+0xac/0x100 [ 110.278931][ T7989] ? __alloc_skb+0x1c3/0x440 [ 110.283542][ T7989] kmem_cache_alloc_node_noprof+0x71/0x320 [ 110.289374][ T7989] __alloc_skb+0x1c3/0x440 [ 110.293831][ T7989] ? __pfx___alloc_skb+0x10/0x10 [ 110.298801][ T7989] ? netlink_autobind+0xd6/0x2f0 [ 110.303769][ T7989] ? netlink_autobind+0x2b0/0x2f0 [ 110.308821][ T7989] netlink_sendmsg+0x638/0xcb0 [ 110.313624][ T7989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.319024][ T7989] ? aa_sock_msg_perm+0x91/0x160 [ 110.323984][ T7989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.329328][ T7989] __sock_sendmsg+0x221/0x270 [ 110.334039][ T7989] ____sys_sendmsg+0x52a/0x7e0 [ 110.338843][ T7989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.344172][ T7989] __sys_sendmsg+0x292/0x380 [ 110.348792][ T7989] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.353953][ T7989] ? __pfx_vfs_write+0x10/0x10 [ 110.358767][ T7989] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.365131][ T7989] ? do_syscall_64+0x100/0x230 [ 110.369928][ T7989] ? do_syscall_64+0xb6/0x230 [ 110.374631][ T7989] do_syscall_64+0xf3/0x230 [ 110.379329][ T7989] ? clear_bhb_loop+0x35/0x90 [ 110.384037][ T7989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.389951][ T7989] RIP: 0033:0x7f472977e719 [ 110.394386][ T7989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.414016][ T7989] RSP: 002b:00007f472a61c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.422469][ T7989] RAX: ffffffffffffffda RBX: 00007f4729935f80 RCX: 00007f472977e719 [ 110.430467][ T7989] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 110.438466][ T7989] RBP: 00007f472a61c090 R08: 0000000000000000 R09: 0000000000000000 [ 110.446471][ T7989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.454467][ T7989] R13: 0000000000000000 R14: 00007f4729935f80 R15: 00007ffcecbc2a58 [ 110.462478][ T7989] [ 110.670395][ T8002] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 111.286173][ T8027] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 111.967578][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 111.973686][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 112.165362][ T8050] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 112.268384][ T8057] netlink: 'syz.3.743': attribute type 5 has an invalid length. [ 112.316608][ T8061] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20003 [ 112.705743][ T8084] bridge0: port 1(gretap0) entered blocking state [ 112.735452][ T8084] bridge0: port 1(gretap0) entered disabled state [ 112.757889][ T8084] gretap0: entered allmulticast mode [ 112.776607][ T8084] gretap0: entered promiscuous mode [ 112.833386][ T8087] gretap0: left allmulticast mode [ 112.847789][ T8087] gretap0: left promiscuous mode [ 112.861605][ T8087] bridge0: port 1(gretap0) entered disabled state [ 113.550493][ T8131] __nla_validate_parse: 11 callbacks suppressed [ 113.550513][ T8131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'. [ 113.582270][ T8132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 113.591518][ T8132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.769'. [ 113.685909][ T8138] netlink: 16 bytes leftover after parsing attributes in process `syz.3.773'. [ 114.118978][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.4.780'. [ 114.403247][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.783'. [ 114.460585][ T8176] FAULT_INJECTION: forcing a failure. [ 114.460585][ T8176] name failslab, interval 1, probability 0, space 0, times 0 [ 114.492532][ T8176] CPU: 1 UID: 0 PID: 8176 Comm: syz.2.784 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 114.503176][ T8176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 114.513261][ T8176] Call Trace: [ 114.516560][ T8176] [ 114.519507][ T8176] dump_stack_lvl+0x241/0x360 [ 114.524219][ T8176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.529449][ T8176] ? __pfx__printk+0x10/0x10 [ 114.534066][ T8176] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 114.539527][ T8176] ? __pfx___might_resched+0x10/0x10 [ 114.544804][ T8176] ? trace_contention_end+0x3c/0x120 [ 114.550082][ T8176] should_fail_ex+0x3b0/0x4e0 [ 114.554754][ T8176] should_failslab+0xac/0x100 [ 114.559434][ T8176] ? __inet_diag_dump_start+0x9d/0xa50 [ 114.564889][ T8176] __kmalloc_cache_noprof+0x6c/0x2c0 [ 114.570179][ T8176] __inet_diag_dump_start+0x9d/0xa50 [ 114.575490][ T8176] __netlink_dump_start+0x45c/0x790 [ 114.580698][ T8176] inet_diag_rcv_msg_compat+0x209/0x4e0 [ 114.586245][ T8176] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 114.592310][ T8176] ? sock_diag_rcv_msg+0xca/0x5f0 [ 114.597345][ T8176] ? __pfx_lock_release+0x10/0x10 [ 114.602374][ T8176] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 114.608696][ T8176] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 114.614495][ T8176] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 114.620132][ T8176] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 114.626211][ T8176] sock_diag_rcv_msg+0x3dc/0x5f0 [ 114.631156][ T8176] netlink_rcv_skb+0x1e3/0x430 [ 114.635917][ T8176] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 114.641377][ T8176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 114.646678][ T8176] ? netlink_deliver_tap+0x2e/0x1b0 [ 114.651887][ T8176] netlink_unicast+0x7f6/0x990 [ 114.656679][ T8176] ? __pfx_netlink_unicast+0x10/0x10 [ 114.661957][ T8176] ? __virt_addr_valid+0x183/0x530 [ 114.667071][ T8176] ? __check_object_size+0x48e/0x900 [ 114.672358][ T8176] netlink_sendmsg+0x8e4/0xcb0 [ 114.677129][ T8176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.682416][ T8176] ? aa_sock_msg_perm+0x91/0x160 [ 114.687363][ T8176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 114.692645][ T8176] __sock_sendmsg+0x221/0x270 [ 114.697325][ T8176] ____sys_sendmsg+0x52a/0x7e0 [ 114.702106][ T8176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 114.707405][ T8176] __sys_sendmsg+0x292/0x380 [ 114.712008][ T8176] ? __pfx___sys_sendmsg+0x10/0x10 [ 114.717130][ T8176] ? __pfx_vfs_write+0x10/0x10 [ 114.721909][ T8176] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.728237][ T8176] ? do_syscall_64+0x100/0x230 [ 114.733002][ T8176] ? do_syscall_64+0xb6/0x230 [ 114.737684][ T8176] do_syscall_64+0xf3/0x230 [ 114.742239][ T8176] ? clear_bhb_loop+0x35/0x90 [ 114.746915][ T8176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.752807][ T8176] RIP: 0033:0x7f472977e719 [ 114.757248][ T8176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.776864][ T8176] RSP: 002b:00007f472a61c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 114.785309][ T8176] RAX: ffffffffffffffda RBX: 00007f4729935f80 RCX: 00007f472977e719 [ 114.793290][ T8176] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 114.801265][ T8176] RBP: 00007f472a61c090 R08: 0000000000000000 R09: 0000000000000000 [ 114.809266][ T8176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.817244][ T8176] R13: 0000000000000000 R14: 00007f4729935f80 R15: 00007ffcecbc2a58 [ 114.825229][ T8176] [ 114.871570][ T8179] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 115.037985][ T8191] netlink: 24 bytes leftover after parsing attributes in process `syz.1.788'. [ 115.076534][ T8187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 115.236548][ T8201] IPv6: NLM_F_CREATE should be specified when creating new route [ 115.358519][ T8207] netlink: 260 bytes leftover after parsing attributes in process `syz.3.795'. [ 115.443709][ T8212] FAULT_INJECTION: forcing a failure. [ 115.443709][ T8212] name failslab, interval 1, probability 0, space 0, times 0 [ 115.464020][ T8212] CPU: 0 UID: 0 PID: 8212 Comm: syz.2.799 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 115.474665][ T8212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 115.484745][ T8212] Call Trace: [ 115.488048][ T8212] [ 115.491008][ T8212] dump_stack_lvl+0x241/0x360 [ 115.495717][ T8212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.500950][ T8212] ? __pfx__printk+0x10/0x10 [ 115.505568][ T8212] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 115.511576][ T8212] ? __pfx___might_resched+0x10/0x10 [ 115.516896][ T8212] should_fail_ex+0x3b0/0x4e0 [ 115.521604][ T8212] should_failslab+0xac/0x100 [ 115.526288][ T8212] ? __alloc_skb+0x1c3/0x440 [ 115.530884][ T8212] kmem_cache_alloc_node_noprof+0x71/0x320 [ 115.536693][ T8212] ? __inet_diag_dump_start+0x9d/0xa50 [ 115.542163][ T8212] __alloc_skb+0x1c3/0x440 [ 115.546585][ T8212] ? __sys_sendmsg+0x292/0x380 [ 115.551347][ T8212] ? do_syscall_64+0xf3/0x230 [ 115.556021][ T8212] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.562090][ T8212] ? __pfx___alloc_skb+0x10/0x10 [ 115.567070][ T8212] netlink_dump+0x239/0xe10 [ 115.571580][ T8212] ? __pfx_aa_get_newest_label+0x10/0x10 [ 115.577218][ T8212] ? __pfx_aa_get_newest_label+0x10/0x10 [ 115.582849][ T8212] ? __pfx_netlink_dump+0x10/0x10 [ 115.587884][ T8212] ? ns_capable+0x8a/0xf0 [ 115.592211][ T8212] ? __inet_diag_dump_start+0x8c9/0xa50 [ 115.597759][ T8212] __netlink_dump_start+0x5a2/0x790 [ 115.602968][ T8212] inet_diag_rcv_msg_compat+0x209/0x4e0 [ 115.608523][ T8212] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 115.614590][ T8212] ? sock_diag_rcv_msg+0xca/0x5f0 [ 115.619613][ T8212] ? __pfx_lock_release+0x10/0x10 [ 115.624637][ T8212] ? __pfx_inet_diag_dump_start_compat+0x10/0x10 [ 115.630959][ T8212] ? __pfx_inet_diag_dump_compat+0x10/0x10 [ 115.636759][ T8212] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 115.642402][ T8212] ? __pfx_inet_diag_rcv_msg_compat+0x10/0x10 [ 115.648470][ T8212] sock_diag_rcv_msg+0x3dc/0x5f0 [ 115.653415][ T8212] netlink_rcv_skb+0x1e3/0x430 [ 115.658180][ T8212] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 115.663640][ T8212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.668941][ T8212] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.674144][ T8212] netlink_unicast+0x7f6/0x990 [ 115.678915][ T8212] ? __pfx_netlink_unicast+0x10/0x10 [ 115.684200][ T8212] ? __virt_addr_valid+0x183/0x530 [ 115.689311][ T8212] ? __check_object_size+0x48e/0x900 [ 115.694597][ T8212] netlink_sendmsg+0x8e4/0xcb0 [ 115.699369][ T8212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.704654][ T8212] ? aa_sock_msg_perm+0x91/0x160 [ 115.709596][ T8212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.714878][ T8212] __sock_sendmsg+0x221/0x270 [ 115.719555][ T8212] ____sys_sendmsg+0x52a/0x7e0 [ 115.724328][ T8212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.729624][ T8212] __sys_sendmsg+0x292/0x380 [ 115.734219][ T8212] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.739340][ T8212] ? __pfx_vfs_write+0x10/0x10 [ 115.744123][ T8212] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.750451][ T8212] ? do_syscall_64+0x100/0x230 [ 115.755211][ T8212] ? do_syscall_64+0xb6/0x230 [ 115.759885][ T8212] do_syscall_64+0xf3/0x230 [ 115.764385][ T8212] ? clear_bhb_loop+0x35/0x90 [ 115.769067][ T8212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.774966][ T8212] RIP: 0033:0x7f472977e719 [ 115.779382][ T8212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.798998][ T8212] RSP: 002b:00007f472a61c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.807439][ T8212] RAX: ffffffffffffffda RBX: 00007f4729935f80 RCX: 00007f472977e719 [ 115.815421][ T8212] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 115.823400][ T8212] RBP: 00007f472a61c090 R08: 0000000000000000 R09: 0000000000000000 [ 115.831368][ T8212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.839353][ T8212] R13: 0000000000000000 R14: 00007f4729935f80 R15: 00007ffcecbc2a58 [ 115.847363][ T8212] [ 116.192788][ T8233] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 116.504245][ T8241] bond1 (unregistering): Released all slaves [ 116.570161][ T8244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'. [ 126.126683][ T8265] Cannot find set identified by id 0 to match [ 126.274656][ T8275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.814'. [ 126.323401][ T8282] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 126.341850][ T8283] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 126.354817][ T8275] netlink: 592 bytes leftover after parsing attributes in process `syz.2.814'. [ 126.374562][ T8265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.811'. [ 126.441436][ T8265] pim6reg: entered allmulticast mode [ 126.489477][ T8289] netlink: 'syz.0.816': attribute type 2 has an invalid length. [ 126.522946][ T8265] pim6reg: left allmulticast mode [ 126.692218][ T8304] netlink: 412 bytes leftover after parsing attributes in process `syz.3.822'. [ 126.719060][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.818'. [ 126.850223][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.823'. [ 127.171859][ T8328] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.181393][ T8328] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.190122][ T8328] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.198829][ T8328] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.231204][ T8328] vxlan0: entered promiscuous mode [ 127.280969][ T8328] vxlan0: entered allmulticast mode [ 127.303035][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.835'. [ 127.317661][ T8328] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.326173][ T8328] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.335374][ T8328] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.343828][ T8328] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 127.383380][ T8344] netlink: 312 bytes leftover after parsing attributes in process `syz.0.838'. [ 127.393767][ T8344] FAULT_INJECTION: forcing a failure. [ 127.393767][ T8344] name failslab, interval 1, probability 0, space 0, times 0 [ 127.406938][ T8344] CPU: 1 UID: 0 PID: 8344 Comm: syz.0.838 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 127.417565][ T8344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 127.424581][ T8345] netlink: 312 bytes leftover after parsing attributes in process `syz.4.835'. [ 127.427708][ T8344] Call Trace: [ 127.427740][ T8344] [ 127.427750][ T8344] dump_stack_lvl+0x241/0x360 [ 127.427804][ T8344] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.427823][ T8344] ? __pfx__printk+0x10/0x10 [ 127.427839][ T8344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.427873][ T8344] should_fail_ex+0x3b0/0x4e0 [ 127.427897][ T8344] should_failslab+0xac/0x100 [ 127.427919][ T8344] ? __alloc_skb+0x1c3/0x440 [ 127.427942][ T8344] kmem_cache_alloc_node_noprof+0x71/0x320 [ 127.427971][ T8344] __alloc_skb+0x1c3/0x440 [ 127.427998][ T8344] ? __pfx___alloc_skb+0x10/0x10 [ 127.428021][ T8344] ? km_report+0x230/0x240 [ 127.497135][ T8344] ? __pfx_lock_release+0x10/0x10 [ 127.502196][ T8344] xfrm_alloc_compat+0x1b6/0x1690 [ 127.507257][ T8344] ? xfrm_get_translator+0x19/0x240 [ 127.512479][ T8344] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 127.517968][ T8344] xfrm_nlmsg_multicast+0xd7/0x1f0 [ 127.523093][ T8344] xfrm_send_policy_notify+0x1277/0x2360 [ 127.528752][ T8344] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 127.534733][ T8344] ? __pfx_xfrm_policy_bysel_ctx+0x10/0x10 [ 127.540553][ T8344] ? do_trace_netlink_extack+0x8b/0x1f0 [ 127.546097][ T8344] ? __nla_validate_parse+0x27eb/0x3090 [ 127.551651][ T8344] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 127.557635][ T8344] km_policy_notify+0x126/0x210 [ 127.562485][ T8344] ? km_policy_notify+0x2e/0x210 [ 127.567446][ T8344] xfrm_get_policy+0xa16/0x10a0 [ 127.572320][ T8344] ? __pfx_xfrm_get_policy+0x10/0x10 [ 127.577609][ T8344] ? __pfx_aa_get_newest_label+0x10/0x10 [ 127.583244][ T8344] ? preempt_count_add+0x93/0x190 [ 127.588282][ T8344] ? apparmor_capable+0x13b/0x1b0 [ 127.593307][ T8344] ? __nla_parse+0x40/0x60 [ 127.597729][ T8344] xfrm_user_rcv_msg+0x75b/0xa80 [ 127.602670][ T8344] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 127.608153][ T8344] ? __mutex_trylock_common+0x183/0x2e0 [ 127.613699][ T8344] ? __pfx___might_resched+0x10/0x10 [ 127.618992][ T8344] netlink_rcv_skb+0x1e3/0x430 [ 127.623755][ T8344] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 127.629216][ T8344] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 127.634523][ T8344] xfrm_netlink_rcv+0x79/0x90 [ 127.639201][ T8344] netlink_unicast+0x7f6/0x990 [ 127.643970][ T8344] ? __pfx_netlink_unicast+0x10/0x10 [ 127.649253][ T8344] ? __virt_addr_valid+0x183/0x530 [ 127.654362][ T8344] ? __check_object_size+0x48e/0x900 [ 127.659662][ T8344] netlink_sendmsg+0x8e4/0xcb0 [ 127.664441][ T8344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.669733][ T8344] ? aa_sock_msg_perm+0x91/0x160 [ 127.674673][ T8344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.679955][ T8344] __sock_sendmsg+0x221/0x270 [ 127.684631][ T8344] ____sys_sendmsg+0x52a/0x7e0 [ 127.689402][ T8344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.694697][ T8344] __sys_sendmsg+0x292/0x380 [ 127.699290][ T8344] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.704406][ T8344] ? __pfx_vfs_write+0x10/0x10 [ 127.709199][ T8344] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.715626][ T8344] ? do_syscall_64+0x100/0x230 [ 127.720392][ T8344] ? do_syscall_64+0xb6/0x230 [ 127.725090][ T8344] do_syscall_64+0xf3/0x230 [ 127.729593][ T8344] ? clear_bhb_loop+0x35/0x90 [ 127.734283][ T8344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.740174][ T8344] RIP: 0033:0x7fe26057e719 [ 127.744599][ T8344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.764212][ T8344] RSP: 002b:00007fe2613d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.772646][ T8344] RAX: ffffffffffffffda RBX: 00007fe260735f80 RCX: 00007fe26057e719 [ 127.780630][ T8344] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 127.788604][ T8344] RBP: 00007fe2613d9090 R08: 0000000000000000 R09: 0000000000000000 [ 127.796612][ T8344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.804582][ T8344] R13: 0000000000000000 R14: 00007fe260735f80 R15: 00007fffaf240888 [ 127.812592][ T8344] [ 127.824859][ T8347] x_tables: unsorted underflow at hook 3 [ 128.040769][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz.2.842'. [ 128.707393][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 128.713597][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 128.858694][ T8407] FAULT_INJECTION: forcing a failure. [ 128.858694][ T8407] name failslab, interval 1, probability 0, space 0, times 0 [ 128.871504][ T8407] CPU: 1 UID: 0 PID: 8407 Comm: syz.3.865 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 128.882126][ T8407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 128.892212][ T8407] Call Trace: [ 128.895511][ T8407] [ 128.898467][ T8407] dump_stack_lvl+0x241/0x360 [ 128.903177][ T8407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.908402][ T8407] ? __pfx__printk+0x10/0x10 [ 128.913021][ T8407] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 128.919033][ T8407] ? __pfx___might_resched+0x10/0x10 [ 128.924346][ T8407] ? kfree+0x4e/0x440 [ 128.928354][ T8407] ? __nla_parse+0x40/0x60 [ 128.932798][ T8407] should_fail_ex+0x3b0/0x4e0 [ 128.937501][ T8407] should_failslab+0xac/0x100 [ 128.942204][ T8407] ? __alloc_skb+0x1c3/0x440 [ 128.946828][ T8407] kmem_cache_alloc_node_noprof+0x71/0x320 [ 128.952658][ T8407] __alloc_skb+0x1c3/0x440 [ 128.957109][ T8407] ? __pfx___alloc_skb+0x10/0x10 [ 128.962057][ T8407] ? netlink_ack_tlv_len+0x6e/0x200 [ 128.967261][ T8407] netlink_ack+0x13f/0xa30 [ 128.971689][ T8407] netlink_rcv_skb+0x262/0x430 [ 128.976452][ T8407] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 128.981910][ T8407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.987239][ T8407] xfrm_netlink_rcv+0x79/0x90 [ 128.991916][ T8407] netlink_unicast+0x7f6/0x990 [ 128.996678][ T8407] ? __pfx_netlink_unicast+0x10/0x10 [ 129.001956][ T8407] ? __virt_addr_valid+0x183/0x530 [ 129.007067][ T8407] ? __check_object_size+0x48e/0x900 [ 129.012354][ T8407] netlink_sendmsg+0x8e4/0xcb0 [ 129.017130][ T8407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.022418][ T8407] ? aa_sock_msg_perm+0x91/0x160 [ 129.027355][ T8407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.032638][ T8407] __sock_sendmsg+0x221/0x270 [ 129.037312][ T8407] ____sys_sendmsg+0x52a/0x7e0 [ 129.042079][ T8407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.047467][ T8407] __sys_sendmsg+0x292/0x380 [ 129.052060][ T8407] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.057178][ T8407] ? __pfx_vfs_write+0x10/0x10 [ 129.061960][ T8407] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.068292][ T8407] ? do_syscall_64+0x100/0x230 [ 129.073051][ T8407] ? do_syscall_64+0xb6/0x230 [ 129.077723][ T8407] do_syscall_64+0xf3/0x230 [ 129.082219][ T8407] ? clear_bhb_loop+0x35/0x90 [ 129.086892][ T8407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.092782][ T8407] RIP: 0033:0x7faf1657e719 [ 129.097196][ T8407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.116805][ T8407] RSP: 002b:00007faf17333038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.125216][ T8407] RAX: ffffffffffffffda RBX: 00007faf16735f80 RCX: 00007faf1657e719 [ 129.133188][ T8407] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 129.141152][ T8407] RBP: 00007faf17333090 R08: 0000000000000000 R09: 0000000000000000 [ 129.149121][ T8407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.157094][ T8407] R13: 0000000000000000 R14: 00007faf16735f80 R15: 00007ffc7c314ce8 [ 129.165078][ T8407] [ 129.452669][ T5852] IPVS: starting estimator thread 0... [ 129.462382][ T8424] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 129.558335][ T8425] IPVS: using max 20 ests per chain, 48000 per kthread [ 129.611612][ T8441] netlink: 'syz.2.877': attribute type 30 has an invalid length. [ 129.659982][ T8440] bond0: (slave vlan2): Opening slave failed [ 129.691592][ T8443] bond0: (slave vlan2): Opening slave failed [ 130.462421][ T8481] batadv1: entered promiscuous mode [ 130.491549][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 130.884062][ T8510] vlan2: entered allmulticast mode [ 132.166674][ T8566] __nla_validate_parse: 21 callbacks suppressed [ 132.166693][ T8566] netlink: 312 bytes leftover after parsing attributes in process `syz.1.918'. [ 132.231107][ T8566] FAULT_INJECTION: forcing a failure. [ 132.231107][ T8566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.271998][ T8566] CPU: 0 UID: 0 PID: 8566 Comm: syz.1.918 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 132.282650][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 132.292735][ T8566] Call Trace: [ 132.296032][ T8566] [ 132.298984][ T8566] dump_stack_lvl+0x241/0x360 [ 132.303702][ T8566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.308936][ T8566] ? __pfx__printk+0x10/0x10 [ 132.313558][ T8566] ? snprintf+0xda/0x120 [ 132.317828][ T8566] should_fail_ex+0x3b0/0x4e0 [ 132.322533][ T8566] _copy_to_user+0x31/0xb0 [ 132.326987][ T8566] simple_read_from_buffer+0xca/0x150 [ 132.332404][ T8566] proc_fail_nth_read+0x1e9/0x250 [ 132.337465][ T8566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.343039][ T8566] ? rw_verify_area+0x55e/0x6f0 [ 132.347920][ T8566] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 132.353503][ T8566] vfs_read+0x1fc/0xb70 [ 132.357697][ T8566] ? fdget_pos+0x24e/0x320 [ 132.362132][ T8566] ? __pfx_vfs_read+0x10/0x10 [ 132.366853][ T8566] ? __fget_files+0x3f3/0x470 [ 132.371560][ T8566] ? fdget_pos+0x24e/0x320 [ 132.376011][ T8566] ksys_read+0x183/0x2b0 [ 132.380287][ T8566] ? __pfx_ksys_read+0x10/0x10 [ 132.385073][ T8566] ? do_syscall_64+0x100/0x230 [ 132.389853][ T8566] ? do_syscall_64+0xb6/0x230 [ 132.394546][ T8566] do_syscall_64+0xf3/0x230 [ 132.399055][ T8566] ? clear_bhb_loop+0x35/0x90 [ 132.403733][ T8566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.409624][ T8566] RIP: 0033:0x7f3cc497d15c [ 132.414043][ T8566] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 132.433652][ T8566] RSP: 002b:00007f3cc57ea030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 132.442070][ T8566] RAX: ffffffffffffffda RBX: 00007f3cc4b35f80 RCX: 00007f3cc497d15c [ 132.450040][ T8566] RDX: 000000000000000f RSI: 00007f3cc57ea0a0 RDI: 0000000000000004 [ 132.458009][ T8566] RBP: 00007f3cc57ea090 R08: 0000000000000000 R09: 0000000000000000 [ 132.465974][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 132.473946][ T8566] R13: 0000000000000000 R14: 00007f3cc4b35f80 R15: 00007ffd245f8d38 [ 132.481934][ T8566] [ 132.688361][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 132.847312][ T5854] Bluetooth: hci0: command 0x0419 tx timeout [ 132.853445][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 133.179215][ T8602] netlink: 196 bytes leftover after parsing attributes in process `syz.4.931'. [ 133.587292][ T8621] netlink: 412 bytes leftover after parsing attributes in process `syz.1.940'. [ 133.658054][ T8625] netlink: 264 bytes leftover after parsing attributes in process `syz.2.943'. [ 134.169602][ T8638] netlink: 200 bytes leftover after parsing attributes in process `syz.4.948'. [ 134.902362][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.954'. [ 134.928778][ T8655] netlink: 28 bytes leftover after parsing attributes in process `syz.3.954'. [ 135.381462][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'. [ 135.409189][ T5854] Bluetooth: hci0: command 0x0419 tx timeout [ 135.409860][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.628908][ T8679] netlink: 20 bytes leftover after parsing attributes in process `syz.1.962'. [ 135.694637][ T8679] netlink: 312 bytes leftover after parsing attributes in process `syz.1.962'. [ 135.841982][ T8688] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 135.851195][ T8688] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 136.166368][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 136.198986][ T8700] netlink: 'syz.1.971': attribute type 10 has an invalid length. [ 136.319547][ T8700] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 136.330228][ T8700] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.454704][ T8705] netlink: 'syz.1.975': attribute type 24 has an invalid length. [ 136.725715][ T8717] vlan2: entered promiscuous mode [ 136.736181][ T8717] vlan2: entered allmulticast mode [ 136.775691][ T8717] hsr_slave_1: entered allmulticast mode [ 137.062535][ T8734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 137.092356][ T8721] hsr_slave_1 (unregistering): left allmulticast mode [ 137.125649][ T8721] hsr_slave_1 (unregistering): left promiscuous mode [ 137.282398][ T8744] __nla_validate_parse: 2 callbacks suppressed [ 137.282418][ T8744] netlink: 312 bytes leftover after parsing attributes in process `syz.0.988'. [ 137.647369][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 137.650785][ T5854] Bluetooth: hci0: command 0x0419 tx timeout [ 137.700542][ T8768] netlink: 'syz.0.996': attribute type 1 has an invalid length. [ 137.724973][ T8772] netlink: 'syz.3.998': attribute type 8 has an invalid length. [ 137.744022][ T8773] netlink: 20 bytes leftover after parsing attributes in process `syz.2.997'. [ 137.811777][ T8768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.881789][ T8784] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1003'. [ 137.966174][ T8784] macsec0: entered promiscuous mode [ 138.025833][ T8784] veth1_macvtap: left promiscuous mode [ 138.119045][ T8785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.997'. [ 138.141290][ T8784] macsec0 (unregistering): left promiscuous mode [ 138.157335][ T8783] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 138.164769][ T8783] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 138.213646][ T8775] bond1: (slave ip6gretap1): making interface the new active one [ 138.242737][ T8775] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 138.294880][ T8792] vlan2: entered promiscuous mode [ 138.308265][ T8792] bond1: entered promiscuous mode [ 138.327067][ T8792] ip6gretap1: entered promiscuous mode [ 138.337968][ T8792] vlan2: entered allmulticast mode [ 138.347354][ T8792] bond1: entered allmulticast mode [ 138.352515][ T8792] ip6gretap1: entered allmulticast mode [ 138.522502][ T8797] bond0: (slave team0): Releasing backup interface [ 138.619700][ T8797] bond0: (slave bond_slave_0): Releasing backup interface [ 138.705110][ T8797] bond0: (slave bond_slave_1): Releasing backup interface [ 138.771178][ T8797] team0: Port device team_slave_0 removed [ 138.816526][ T8797] team0: Port device team_slave_1 removed [ 138.849601][ T8797] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.884551][ T8797] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.913808][ T8797] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.968973][ T8797] bond0: (slave netdevsim0): Releasing backup interface [ 139.004680][ T8797] bond0: (slave wlan1): Releasing backup interface [ 139.185744][ T8802] team0: Port device wg2 added [ 139.457813][ T8836] netlink: 376 bytes leftover after parsing attributes in process `syz.0.1018'. [ 139.513061][ T8842] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1021'. [ 139.568008][ T8842] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1021'. [ 139.635707][ T8849] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1021'. [ 139.950943][ T8858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'. [ 140.023558][ T8858] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1026'. [ 140.237366][ T8869] team0 (unregistering): Port device wg2 removed [ 140.421171][ T8888] raw_sendmsg: syz.1.1037 forgot to set AF_INET. Fix it! [ 141.088409][ T8926] netlink: 'syz.3.1050': attribute type 1 has an invalid length. [ 141.129893][ T8926] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.300860][ T8997] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.380472][ T9003] 8021q: VLANs not supported on lo [ 142.384420][ T9008] __nla_validate_parse: 12 callbacks suppressed [ 142.384439][ T9008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1076'. [ 142.412585][ T9007] 8021q: VLANs not supported on lo [ 142.599489][ T9022] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1080'. [ 142.611821][ T9018] netlink: 'syz.1.1078': attribute type 10 has an invalid length. [ 142.650247][ T9020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1079'. [ 142.662006][ T9023] netlink: 'syz.1.1078': attribute type 10 has an invalid length. [ 142.674234][ T9025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1081'. [ 142.697033][ T9025] bond0: option ad_select: unable to set because the bond device is up [ 142.792741][ T9035] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1084'. [ 143.484671][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1098'. [ 143.514344][ T9070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1098'. [ 143.811128][ T9092] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 143.863722][ T9092] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 143.889959][ T9092] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 144.043648][ T9112] netlink: 'syz.1.1110': attribute type 33 has an invalid length. [ 144.277403][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1108'. [ 144.653343][ T9148] netlink: 'syz.1.1121': attribute type 8 has an invalid length. [ 144.861783][ T9157] netlink: 312 bytes leftover after parsing attributes in process `syz.2.1126'. [ 145.007573][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 145.018529][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 145.056250][ T9165] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 145.076420][ T9165] netlink: 'syz.1.1130': attribute type 2 has an invalid length. [ 145.528083][ T9194] netlink: 'syz.0.1140': attribute type 27 has an invalid length. [ 145.535063][ T9198] FAULT_INJECTION: forcing a failure. [ 145.535063][ T9198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.570343][ T9198] CPU: 1 UID: 0 PID: 9198 Comm: syz.1.1144 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 145.581080][ T9198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 145.591169][ T9198] Call Trace: [ 145.594468][ T9198] [ 145.597420][ T9198] dump_stack_lvl+0x241/0x360 [ 145.602140][ T9198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.607373][ T9198] ? __pfx__printk+0x10/0x10 [ 145.611990][ T9198] ? __pfx_lock_release+0x10/0x10 [ 145.617052][ T9198] should_fail_ex+0x3b0/0x4e0 [ 145.621759][ T9198] _copy_from_user+0x2f/0xc0 [ 145.626375][ T9198] __sys_bpf+0x1a4/0x810 [ 145.630647][ T9198] ? __pfx___sys_bpf+0x10/0x10 [ 145.635442][ T9198] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.641452][ T9198] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.647812][ T9198] ? do_syscall_64+0x100/0x230 [ 145.652604][ T9198] __x64_sys_bpf+0x7c/0x90 [ 145.657062][ T9198] do_syscall_64+0xf3/0x230 [ 145.661582][ T9198] ? clear_bhb_loop+0x35/0x90 [ 145.666282][ T9198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.672201][ T9198] RIP: 0033:0x7f3cc497e719 [ 145.676640][ T9198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.696276][ T9198] RSP: 002b:00007f3cc57ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 145.704730][ T9198] RAX: ffffffffffffffda RBX: 00007f3cc4b35f80 RCX: 00007f3cc497e719 [ 145.712727][ T9198] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 145.720726][ T9198] RBP: 00007f3cc57ea090 R08: 0000000000000000 R09: 0000000000000000 [ 145.728721][ T9198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.736715][ T9198] R13: 0000000000000000 R14: 00007f3cc4b35f80 R15: 00007ffd245f8d38 [ 145.744725][ T9198] [ 146.025104][ T9211] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 146.328517][ T9231] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 146.732758][ T9254] bridge2: entered promiscuous mode [ 146.741465][ T9254] bridge2: entered allmulticast mode [ 147.268075][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.317480][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.378465][ T972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.399251][ T9285] bond0: entered promiscuous mode [ 147.404334][ T9285] bond_slave_0: entered promiscuous mode [ 147.430659][ T9285] bond_slave_1: entered promiscuous mode [ 147.498711][ T9285] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 147.517930][ T9296] netlink: 'syz.4.1178': attribute type 9 has an invalid length. [ 147.549971][ T9296] macvlan1: entered promiscuous mode [ 147.558779][ T972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.618107][ T972] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.635580][ T9295] netlink: 'syz.2.1177': attribute type 3 has an invalid length. [ 147.667079][ T9290] tipc: Started in network mode [ 147.673981][ T9290] tipc: Node identity ffffffff, cluster identity 4711 [ 147.682184][ T9290] tipc: Node number set to 4294967295 [ 147.741727][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.795689][ T9284] bond0: left promiscuous mode [ 147.816106][ T9284] bond_slave_0: left promiscuous mode [ 147.822219][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.830671][ T9284] bond_slave_1: left promiscuous mode [ 147.836241][ T9284] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 147.915548][ T9318] __nla_validate_parse: 42 callbacks suppressed [ 147.915567][ T9318] netlink: 412 bytes leftover after parsing attributes in process `syz.2.1185'. [ 147.917538][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 147.960158][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 147.997516][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.137553][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 148.252642][ T9334] FAULT_INJECTION: forcing a failure. [ 148.252642][ T9334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.269953][ T9334] CPU: 0 UID: 0 PID: 9334 Comm: syz.1.1190 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 148.280692][ T9334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 148.290778][ T9334] Call Trace: [ 148.294079][ T9334] [ 148.297032][ T9334] dump_stack_lvl+0x241/0x360 [ 148.301739][ T9334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.307009][ T9334] ? __pfx__printk+0x10/0x10 [ 148.311709][ T9334] ? __pfx_lock_release+0x10/0x10 [ 148.316768][ T9334] should_fail_ex+0x3b0/0x4e0 [ 148.321487][ T9334] _copy_from_user+0x2f/0xc0 [ 148.326121][ T9334] __sys_bpf+0x1a4/0x810 [ 148.330407][ T9334] ? __pfx___sys_bpf+0x10/0x10 [ 148.335210][ T9334] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.341196][ T9334] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.341228][ T9334] ? do_syscall_64+0x100/0x230 [ 148.341253][ T9334] __x64_sys_bpf+0x7c/0x90 [ 148.341275][ T9334] do_syscall_64+0xf3/0x230 [ 148.361310][ T9334] ? clear_bhb_loop+0x35/0x90 [ 148.366054][ T9334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.371965][ T9334] RIP: 0033:0x7f3cc497e719 [ 148.376382][ T9334] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.395989][ T9334] RSP: 002b:00007f3cc57ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.404437][ T9334] RAX: ffffffffffffffda RBX: 00007f3cc4b35f80 RCX: 00007f3cc497e719 [ 148.412434][ T9334] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 148.420414][ T9334] RBP: 00007f3cc57ea090 R08: 0000000000000000 R09: 0000000000000000 [ 148.428397][ T9334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.436407][ T9334] R13: 0000000000000000 R14: 00007f3cc4b35f80 R15: 00007ffd245f8d38 [ 148.444412][ T9334] [ 148.756683][ T9352] netlink: 412 bytes leftover after parsing attributes in process `syz.0.1198'. [ 148.862941][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1199'. [ 148.883300][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1199'. [ 148.924115][ T9360] bond0: entered promiscuous mode [ 148.935403][ T9360] bond_slave_0: entered promiscuous mode [ 148.942521][ T9360] bond_slave_1: entered promiscuous mode [ 148.949052][ T9360] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 148.959491][ T9358] bond0: left promiscuous mode [ 148.964302][ T9358] bond_slave_0: left promiscuous mode [ 148.972941][ T9358] bond_slave_1: left promiscuous mode [ 148.987494][ T9358] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 149.619963][ T9395] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (64) [ 149.833692][ T9404] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1218'. [ 149.888595][ T9407] bond0: entered promiscuous mode [ 149.893716][ T9407] bond_slave_0: entered promiscuous mode [ 149.933258][ T9407] bond_slave_1: entered promiscuous mode [ 149.947989][ T9407] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 149.968388][ T9403] bond0: left promiscuous mode [ 149.973228][ T9403] bond_slave_0: left promiscuous mode [ 150.019831][ T9403] bond_slave_1: left promiscuous mode [ 150.045747][ T9403] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 150.192036][ T9426] FAULT_INJECTION: forcing a failure. [ 150.192036][ T9426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.205946][ T9426] CPU: 1 UID: 0 PID: 9426 Comm: syz.1.1226 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 150.210352][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1227'. [ 150.216632][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 150.216651][ T9426] Call Trace: [ 150.216660][ T9426] [ 150.216670][ T9426] dump_stack_lvl+0x241/0x360 [ 150.216698][ T9426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.216725][ T9426] ? __pfx__printk+0x10/0x10 [ 150.216754][ T9426] should_fail_ex+0x3b0/0x4e0 [ 150.216779][ T9426] _copy_from_user+0x2f/0xc0 [ 150.245779][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1227'. [ 150.246637][ T9426] bpf_test_init+0x11f/0x180 [ 150.246674][ T9426] bpf_prog_test_run_skb+0x2bb/0x1820 [ 150.284648][ T9426] ? __pfx_lock_release+0x10/0x10 [ 150.289727][ T9426] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 150.295558][ T9426] ? fput+0x1a8/0x230 [ 150.299549][ T9426] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 150.305361][ T9426] bpf_prog_test_run+0x2e4/0x360 [ 150.310304][ T9426] __sys_bpf+0x48d/0x810 [ 150.314551][ T9426] ? __pfx___sys_bpf+0x10/0x10 [ 150.319326][ T9426] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 150.325311][ T9426] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.331647][ T9426] ? do_syscall_64+0x100/0x230 [ 150.336422][ T9426] __x64_sys_bpf+0x7c/0x90 [ 150.340837][ T9426] do_syscall_64+0xf3/0x230 [ 150.345334][ T9426] ? clear_bhb_loop+0x35/0x90 [ 150.350009][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.355898][ T9426] RIP: 0033:0x7f3cc497e719 [ 150.360310][ T9426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.379916][ T9426] RSP: 002b:00007f3cc57ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 150.388327][ T9426] RAX: ffffffffffffffda RBX: 00007f3cc4b35f80 RCX: 00007f3cc497e719 [ 150.396293][ T9426] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 150.404258][ T9426] RBP: 00007f3cc57ea090 R08: 0000000000000000 R09: 0000000000000000 [ 150.412220][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.420187][ T9426] R13: 0000000000000000 R14: 00007f3cc4b35f80 R15: 00007ffd245f8d38 [ 150.428170][ T9426] [ 150.767351][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 150.782221][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 150.851523][ T9450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1235'. [ 150.909965][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 151.400022][ T9463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.417039][ T9463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.452127][ T9463] bond0 (unregistering): Released all slaves [ 151.869054][ T9493] netlink: 'syz.0.1249': attribute type 5 has an invalid length. [ 151.903187][ T9493] hsr_slave_0: left promiscuous mode [ 151.945119][ T9493] hsr_slave_1: left promiscuous mode [ 152.944020][ T9551] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 152.969703][ T9556] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.017612][ T9551] netlink: 'syz.1.1272': attribute type 10 has an invalid length. [ 153.166802][ T9569] __nla_validate_parse: 4 callbacks suppressed [ 153.166822][ T9569] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1277'. [ 153.247764][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 153.251735][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 153.559376][ T9595] netlink: 412 bytes leftover after parsing attributes in process `syz.3.1289'. [ 153.662958][ T9597] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1290'. [ 153.677028][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 153.693198][ T9597] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1290'. [ 153.707762][ T9597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1290'. [ 153.719043][ T9600] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 153.726494][ T9597] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1290'. [ 153.790468][ T9600] netlink: 'syz.3.1291': attribute type 10 has an invalid length. [ 153.852069][ T9613] xt_socket: unknown flags 0x4 [ 153.896743][ T9611] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 153.914303][ T9611] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 154.158106][ T9629] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1302'. [ 154.472805][ T9639] syzkaller0: entered allmulticast mode [ 154.565674][ T9641] netlink: 'syz.3.1306': attribute type 10 has an invalid length. [ 155.093016][ T9660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1312'. [ 155.214477][ T9663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1313'. [ 155.327508][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 155.337424][ T5857] Bluetooth: hci0: command 0x0419 tx timeout [ 155.586707][ T9687] x_tables: duplicate underflow at hook 3 [ 155.679561][ T9687] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 155.699759][ T9687] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 156.273175][ T9718] netlink: 'syz.4.1332': attribute type 30 has an invalid length. [ 157.418633][ T9748] tipc: Enabled bearer , priority 10 [ 157.632253][ T9767] unsupported nla_type 40 [ 158.283265][ T9791] __nla_validate_parse: 5 callbacks suppressed [ 158.283285][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1356'. [ 158.308325][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1356'. [ 158.824721][ T5854] Bluetooth: hci4: link tx timeout [ 158.830925][ T5854] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.927404][ T5857] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 158.927584][ T5860] Bluetooth: hci0: command 0x0419 tx timeout [ 159.091549][ T9829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1368'. [ 159.107860][ T9833] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1366'. [ 159.114161][ T9829] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1368'. [ 159.438612][ T9853] netlink: 312 bytes leftover after parsing attributes in process `syz.4.1373'. [ 159.466813][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 159.732760][ T9870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1376'. [ 159.749603][ T9872] netlink: 412 bytes leftover after parsing attributes in process `syz.3.1379'. [ 159.959457][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1380'. [ 160.365009][ T9902] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 160.385314][ T9902] macvlan2: entered allmulticast mode [ 160.395289][ T9902] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 160.504149][ T9911] tipc: Enabling of bearer rejected, already enabled [ 160.929189][ T5860] Bluetooth: hci4: command 0x0405 tx timeout [ 161.174487][ T9946] tipc: Enabling of bearer rejected, already enabled [ 161.201676][ T9952] netlink: 'syz.1.1410': attribute type 15 has an invalid length. [ 161.348710][ T9957] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 161.742568][ T9981] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 162.076550][ T9995] tipc: Started in network mode [ 162.089312][ T9997] FAULT_INJECTION: forcing a failure. [ 162.089312][ T9997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.107766][ T9995] tipc: Node identity ac1414aa, cluster identity 4711 [ 162.125279][ T9995] tipc: Enabled bearer , priority 10 [ 162.126616][ T9997] CPU: 0 UID: 0 PID: 9997 Comm: syz.1.1425 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 162.141897][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 162.151979][ T9997] Call Trace: [ 162.155271][ T9997] [ 162.158221][ T9997] dump_stack_lvl+0x241/0x360 [ 162.162932][ T9997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.168168][ T9997] ? __pfx__printk+0x10/0x10 [ 162.172784][ T9997] ? __pfx_lock_release+0x10/0x10 [ 162.177844][ T9997] should_fail_ex+0x3b0/0x4e0 [ 162.182549][ T9997] _copy_from_user+0x2f/0xc0 [ 162.187164][ T9997] copy_msghdr_from_user+0xae/0x680 [ 162.192375][ T9997] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 162.198181][ T9997] __sys_sendmsg+0x22d/0x380 [ 162.202768][ T9997] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.207896][ T9997] ? __pfx_vfs_write+0x10/0x10 [ 162.212684][ T9997] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 162.219015][ T9997] ? do_syscall_64+0x100/0x230 [ 162.223806][ T9997] ? do_syscall_64+0xb6/0x230 [ 162.228491][ T9997] do_syscall_64+0xf3/0x230 [ 162.233013][ T9997] ? clear_bhb_loop+0x35/0x90 [ 162.237702][ T9997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.243599][ T9997] RIP: 0033:0x7f3cc497e719 [ 162.248036][ T9997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.267657][ T9997] RSP: 002b:00007f3cc57ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.276079][ T9997] RAX: ffffffffffffffda RBX: 00007f3cc4b35f80 RCX: 00007f3cc497e719 [ 162.284068][ T9997] RDX: 0000000000004000 RSI: 0000000020000200 RDI: 0000000000000004 [ 162.292039][ T9997] RBP: 00007f3cc57ea090 R08: 0000000000000000 R09: 0000000000000000 [ 162.300007][ T9997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.307978][ T9997] R13: 0000000000000000 R14: 00007f3cc4b35f80 R15: 00007ffd245f8d38 [ 162.315959][ T9997] [ 163.041612][T10040] netlink: 'syz.0.1438': attribute type 11 has an invalid length. [ 163.128727][ T60] tipc: Node number set to 2886997162 [ 163.700296][T10068] __nla_validate_parse: 9 callbacks suppressed [ 163.700317][T10068] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1444'. [ 163.757602][T10068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1444'. [ 163.785214][T10068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1444'. [ 163.836059][T10067] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1444'. [ 163.873375][T10067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1444'. [ 163.906263][T10067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1444'. [ 164.317160][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 164.399089][T10092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1450'. [ 164.680854][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1454'. [ 164.748969][T10105] netlink: 'syz.0.1453': attribute type 10 has an invalid length. [ 165.072763][T10118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1456'. [ 165.631274][T10140] netlink: 'syz.0.1462': attribute type 21 has an invalid length. [ 165.661267][T10140] netlink: 'syz.0.1462': attribute type 1 has an invalid length. [ 166.177153][T10178] bond0: entered promiscuous mode [ 166.183879][T10178] bond_slave_0: entered promiscuous mode [ 166.212661][T10178] bond_slave_1: entered promiscuous mode [ 166.234344][T10178] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 166.298456][T10174] bond0: left promiscuous mode [ 166.303313][T10174] bond_slave_0: left promiscuous mode [ 166.316244][T10174] bond_slave_1: left promiscuous mode [ 166.345922][T10174] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 166.478574][T10196] lo: left allmulticast mode [ 166.483672][T10196] tunl0: left allmulticast mode [ 166.489507][T10196] gre0: left allmulticast mode [ 166.494854][T10196] gretap0: left allmulticast mode [ 166.500830][T10196] erspan0: left allmulticast mode [ 166.506306][T10196] ip_vti0: left allmulticast mode [ 166.519066][T10196] syz.0.1476: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.534694][T10196] CPU: 1 UID: 0 PID: 10196 Comm: syz.0.1476 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 166.545492][T10196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 166.555568][T10196] Call Trace: [ 166.558855][T10196] [ 166.561787][T10196] dump_stack_lvl+0x241/0x360 [ 166.566467][T10196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.571664][T10196] ? __pfx__printk+0x10/0x10 [ 166.576256][T10196] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 166.582671][T10196] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 166.589173][T10196] warn_alloc+0x278/0x410 [ 166.593500][T10196] ? stack_depot_save_flags+0x29/0x830 [ 166.598959][T10196] ? __vmalloc_node_range_noprof+0x106/0x13f0 [ 166.605026][T10196] ? __pfx_warn_alloc+0x10/0x10 [ 166.609876][T10196] ? kasan_save_track+0x3f/0x80 [ 166.614720][T10196] ? __kasan_kmalloc+0x98/0xb0 [ 166.619484][T10196] ? xsk_setsockopt+0x4ea/0x950 [ 166.624333][T10196] ? do_sock_setsockopt+0x3af/0x720 [ 166.629534][T10196] ? __sys_setsockopt+0x1a2/0x250 [ 166.634552][T10196] ? __x64_sys_setsockopt+0xb5/0xd0 [ 166.639749][T10196] ? do_syscall_64+0xf3/0x230 [ 166.644420][T10196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.650488][T10196] __vmalloc_node_range_noprof+0x126/0x13f0 [ 166.656431][T10196] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.662764][T10196] ? __kasan_kmalloc+0x98/0xb0 [ 166.667526][T10196] ? xskq_create+0x54/0x170 [ 166.672034][T10196] vmalloc_user_noprof+0x74/0x80 [ 166.676978][T10196] ? xskq_create+0xb6/0x170 [ 166.681482][T10196] xskq_create+0xb6/0x170 [ 166.685815][T10196] xsk_init_queue+0xa1/0x100 [ 166.690408][T10196] xsk_setsockopt+0x4ea/0x950 [ 166.695346][T10196] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.700546][T10196] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.705403][T10196] ? __pfx_lock_acquire+0x10/0x10 [ 166.710449][T10196] ? aa_sock_opt_perm+0x79/0x120 [ 166.715396][T10196] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.720595][T10196] do_sock_setsockopt+0x3af/0x720 [ 166.725638][T10196] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 166.731189][T10196] ? __fget_files+0x29/0x470 [ 166.735787][T10196] ? __fget_files+0x3f3/0x470 [ 166.740461][T10196] ? __fget_files+0x29/0x470 [ 166.745055][T10196] __sys_setsockopt+0x1a2/0x250 [ 166.749916][T10196] __x64_sys_setsockopt+0xb5/0xd0 [ 166.754941][T10196] do_syscall_64+0xf3/0x230 [ 166.759448][T10196] ? clear_bhb_loop+0x35/0x90 [ 166.764129][T10196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.770020][T10196] RIP: 0033:0x7fe26057e719 [ 166.774437][T10196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.794050][T10196] RSP: 002b:00007fe2613d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.802485][T10196] RAX: ffffffffffffffda RBX: 00007fe260735f80 RCX: 00007fe26057e719 [ 166.810478][T10196] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 166.818459][T10196] RBP: 00007fe2605f1616 R08: 0000000000000004 R09: 0000000000000000 [ 166.826425][T10196] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.834402][T10196] R13: 0000000000000000 R14: 00007fe260735f80 R15: 00007fffaf240888 [ 166.842384][T10196] [ 166.850006][T10196] Mem-Info: [ 166.853182][T10196] active_anon:4682 inactive_anon:0 isolated_anon:0 [ 166.853182][T10196] active_file:1551 inactive_file:38230 isolated_file:0 [ 166.853182][T10196] unevictable:768 dirty:268 writeback:0 [ 166.853182][T10196] slab_reclaimable:10185 slab_unreclaimable:98741 [ 166.853182][T10196] mapped:21693 shmem:1445 pagetables:738 [ 166.853182][T10196] sec_pagetables:0 bounce:0 [ 166.853182][T10196] kernel_misc_reclaimable:0 [ 166.853182][T10196] free:1348685 free_pcp:596 free_cma:0 [ 166.898798][T10196] Node 0 active_anon:18628kB inactive_anon:0kB active_file:6204kB inactive_file:152848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84772kB dirty:1068kB writeback:0kB shmem:4244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11436kB pagetables:2952kB sec_pagetables:0kB all_unreclaimable? no [ 166.936609][T10196] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 166.971610][T10196] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.999986][T10196] lowmem_reserve[]: 0 2463 2464 0 0 [ 167.005675][T10196] Node 0 DMA32 free:1467424kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:18492kB inactive_anon:0kB active_file:6204kB inactive_file:152268kB unevictable:1536kB writepending:1068kB present:3129332kB managed:2550488kB mlocked:0kB bounce:0kB free_pcp:3636kB local_pcp:1544kB free_cma:0kB [ 167.037439][T10196] lowmem_reserve[]: 0 0 0 0 0 [ 167.043007][T10196] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 167.070466][T10196] lowmem_reserve[]: 0 0 0 0 0 [ 167.075358][T10196] Node 1 Normal free:3911140kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 167.105188][T10196] lowmem_reserve[]: 0 0 0 0 0 [ 167.110962][T10196] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 167.124617][T10196] Node 0 DMA32: 105*4kB (UM) 233*8kB (UME) 196*16kB (UME) 309*32kB (UME) 446*64kB (UME) 233*128kB (UM) 152*256kB (UM) 115*512kB (UM) 89*1024kB (UM) 59*2048kB (UM) 265*4096kB (UME) = 1468876kB [ 167.144671][T10196] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 167.157105][T10196] Node 1 Normal: 207*4kB (UME) 83*8kB (UME) 37*16kB (UME) 221*32kB (UME) 87*64kB (UME) 25*128kB (UME) 18*256kB (UM) 7*512kB (UME) 4*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3911172kB [ 167.176878][T10196] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.187897][T10196] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.197821][T10196] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.208058][T10196] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.218176][T10196] 41211 total pagecache pages [ 167.222970][T10196] 0 pages in swap cache [ 167.228821][T10196] Free swap = 124996kB [ 167.233071][T10196] Total swap = 124996kB [ 167.237853][T10196] 2097051 pages RAM [ 167.250821][T10196] 0 pages HighMem/MovableOnly [ 167.255728][T10196] 427643 pages reserved [ 167.260236][T10196] 0 pages cma reserved [ 168.304114][T10265] netlink: 'syz.4.1492': attribute type 1 has an invalid length. [ 168.751504][T10289] netlink: 'syz.2.1497': attribute type 10 has an invalid length. [ 169.083443][T10309] bond0: entered promiscuous mode [ 169.106394][T10309] bond_slave_0: entered promiscuous mode [ 169.117639][T10311] __nla_validate_parse: 6 callbacks suppressed [ 169.117656][T10311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1504'. [ 169.124516][T10309] bond_slave_1: entered promiscuous mode [ 169.157010][T10309] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 169.169181][T10315] FAULT_INJECTION: forcing a failure. [ 169.169181][T10315] name failslab, interval 1, probability 0, space 0, times 0 [ 169.182154][T10315] CPU: 1 UID: 0 PID: 10315 Comm: syz.2.1505 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 169.192942][T10315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 169.203003][T10315] Call Trace: [ 169.206282][T10315] [ 169.209213][T10315] dump_stack_lvl+0x241/0x360 [ 169.213901][T10315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.219100][T10315] ? __pfx__printk+0x10/0x10 [ 169.223694][T10315] should_fail_ex+0x3b0/0x4e0 [ 169.228371][T10315] ? skb_clone+0x20c/0x390 [ 169.232787][T10315] should_failslab+0xac/0x100 [ 169.237463][T10315] ? skb_clone+0x20c/0x390 [ 169.241879][T10315] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 169.247265][T10315] skb_clone+0x20c/0x390 [ 169.251514][T10315] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 169.256711][T10315] dev_queue_xmit_nit+0x249/0xca0 [ 169.261739][T10315] ? dev_queue_xmit_nit+0x2b/0xca0 [ 169.266849][T10315] ? validate_xmit_skb+0x9b8/0xff0 [ 169.271965][T10315] dev_hard_start_xmit+0x15f/0x7e0 [ 169.277079][T10315] ? __pfx_validate_xmit_skb+0x10/0x10 [ 169.282545][T10315] __dev_queue_xmit+0x1b73/0x3f50 [ 169.287572][T10315] ? kasan_save_track+0x51/0x80 [ 169.292419][T10315] ? ____sys_sendmsg+0x52a/0x7e0 [ 169.297364][T10315] ? __dev_queue_xmit+0x2f4/0x3f50 [ 169.302477][T10315] ? __pfx___dev_queue_xmit+0x10/0x10 [ 169.307860][T10315] ? __copy_skb_header+0x437/0x5b0 [ 169.312968][T10315] ? __asan_memcpy+0x40/0x70 [ 169.317565][T10315] ? skb_clone+0x240/0x390 [ 169.321981][T10315] __netlink_deliver_tap+0x56b/0x7f0 [ 169.327280][T10315] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.332485][T10315] netlink_deliver_tap+0x19d/0x1b0 [ 169.337598][T10315] netlink_unicast+0x7c4/0x990 [ 169.342368][T10315] ? __pfx_netlink_unicast+0x10/0x10 [ 169.347649][T10315] ? __virt_addr_valid+0x183/0x530 [ 169.352757][T10315] ? __check_object_size+0x48e/0x900 [ 169.358041][T10315] netlink_sendmsg+0x8e4/0xcb0 [ 169.362813][T10315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.368103][T10315] ? aa_sock_msg_perm+0x91/0x160 [ 169.373057][T10315] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.378337][T10315] __sock_sendmsg+0x221/0x270 [ 169.383011][T10315] ____sys_sendmsg+0x52a/0x7e0 [ 169.387780][T10315] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.393076][T10315] __sys_sendmsg+0x292/0x380 [ 169.397670][T10315] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.402794][T10315] ? __pfx_vfs_write+0x10/0x10 [ 169.407587][T10315] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.413922][T10315] ? do_syscall_64+0x100/0x230 [ 169.418687][T10315] ? do_syscall_64+0xb6/0x230 [ 169.423363][T10315] do_syscall_64+0xf3/0x230 [ 169.427863][T10315] ? clear_bhb_loop+0x35/0x90 [ 169.432536][T10315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.438421][T10315] RIP: 0033:0x7f472977e719 [ 169.442834][T10315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.462432][T10315] RSP: 002b:00007f472a61c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.470846][T10315] RAX: ffffffffffffffda RBX: 00007f4729935f80 RCX: 00007f472977e719 [ 169.478813][T10315] RDX: 0000000000004000 RSI: 0000000020000200 RDI: 0000000000000004 [ 169.486776][T10315] RBP: 00007f472a61c090 R08: 0000000000000000 R09: 0000000000000000 [ 169.494743][T10315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.502711][T10315] R13: 0000000000000000 R14: 00007f4729935f80 R15: 00007ffcecbc2a58 [ 169.510692][T10315] [ 169.535682][T10308] bond0: left promiscuous mode [ 169.540836][T10308] bond_slave_0: left promiscuous mode [ 169.556595][T10308] bond_slave_1: left promiscuous mode [ 169.572727][T10308] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 169.728877][T10323] nbd: must specify at least one socket [ 169.804083][T10323] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1507'. [ 169.838574][T10323] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1507'. [ 169.855617][T10323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1507'. [ 169.969590][T10337] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 170.066463][T10340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1510'. [ 170.129555][T10340] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1510'. [ 170.292640][ T5854] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 170.299553][ T5854] Bluetooth: hci0: command 0x0419 tx timeout [ 170.360379][T10358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1517'. [ 170.370173][T10362] FAULT_INJECTION: forcing a failure. [ 170.370173][T10362] name failslab, interval 1, probability 0, space 0, times 0 [ 170.384323][T10362] CPU: 0 UID: 0 PID: 10362 Comm: syz.2.1518 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 170.395138][T10362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 170.405220][T10362] Call Trace: [ 170.408526][T10362] [ 170.411470][T10362] dump_stack_lvl+0x241/0x360 [ 170.416179][T10362] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.421404][T10362] ? __pfx__printk+0x10/0x10 [ 170.426020][T10362] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 170.431593][T10362] ? __pfx___might_resched+0x10/0x10 [ 170.436904][T10362] should_fail_ex+0x3b0/0x4e0 [ 170.441603][T10362] ? skb_clone+0x20c/0x390 [ 170.446043][T10362] should_failslab+0xac/0x100 [ 170.450750][T10362] ? skb_clone+0x20c/0x390 [ 170.455195][T10362] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 170.460597][T10362] skb_clone+0x20c/0x390 [ 170.464866][T10362] nfnetlink_rcv+0x575/0x2ab0 [ 170.469569][T10362] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 170.475321][T10362] ? __dev_queue_xmit+0x1775/0x3f50 [ 170.480550][T10362] ? kasan_save_track+0x51/0x80 [ 170.485432][T10362] ? ____sys_sendmsg+0x52a/0x7e0 [ 170.490403][T10362] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 170.495566][T10362] ? ref_tracker_free+0x643/0x7e0 [ 170.500614][T10362] ? __asan_memcpy+0x40/0x70 [ 170.505227][T10362] ? __pfx_ref_tracker_free+0x10/0x10 [ 170.510633][T10362] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.515855][T10362] ? skb_clone+0x240/0x390 [ 170.520303][T10362] ? __pfx_lock_release+0x10/0x10 [ 170.525370][T10362] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 170.530866][T10362] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.536096][T10362] netlink_unicast+0x7f6/0x990 [ 170.540895][T10362] ? __pfx_netlink_unicast+0x10/0x10 [ 170.546196][T10362] ? __virt_addr_valid+0x183/0x530 [ 170.551327][T10362] ? __check_object_size+0x48e/0x900 [ 170.556645][T10362] netlink_sendmsg+0x8e4/0xcb0 [ 170.561448][T10362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.566759][T10362] ? aa_sock_msg_perm+0x91/0x160 [ 170.571724][T10362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.577033][T10362] __sock_sendmsg+0x221/0x270 [ 170.581753][T10362] ____sys_sendmsg+0x52a/0x7e0 [ 170.586551][T10362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.591877][T10362] __sys_sendmsg+0x292/0x380 [ 170.596493][T10362] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.601643][T10362] ? __pfx_vfs_write+0x10/0x10 [ 170.606447][T10362] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.612791][T10362] ? do_syscall_64+0x100/0x230 [ 170.617560][T10362] ? do_syscall_64+0xb6/0x230 [ 170.622243][T10362] do_syscall_64+0xf3/0x230 [ 170.626732][T10362] ? clear_bhb_loop+0x35/0x90 [ 170.631403][T10362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.637296][T10362] RIP: 0033:0x7f472977e719 [ 170.641729][T10362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.661362][T10362] RSP: 002b:00007f472a61c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.669797][T10362] RAX: ffffffffffffffda RBX: 00007f4729935f80 RCX: 00007f472977e719 [ 170.677767][T10362] RDX: 0000000000004000 RSI: 0000000020000200 RDI: 0000000000000004 [ 170.685729][T10362] RBP: 00007f472a61c090 R08: 0000000000000000 R09: 0000000000000000 [ 170.693705][T10362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.701689][T10362] R13: 0000000000000000 R14: 00007f4729935f80 R15: 00007ffcecbc2a58 [ 170.709665][T10362] [ 171.034376][T10394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1530'. [ 171.044118][ T5931] IPVS: starting estimator thread 0... [ 171.067414][T10389] tipc: Enabling of bearer rejected, already enabled [ 171.154236][T10396] IPVS: using max 18 ests per chain, 43200 per kthread [ 171.186597][T10401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1532'. [ 171.318161][T10411] FAULT_INJECTION: forcing a failure. [ 171.318161][T10411] name failslab, interval 1, probability 0, space 0, times 0 [ 171.335055][T10409] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1538'. [ 171.346695][T10406] netlink: 'syz.2.1537': attribute type 10 has an invalid length. [ 171.354865][T10411] CPU: 0 UID: 0 PID: 10411 Comm: syz.4.1535 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 171.354896][T10411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 171.354909][T10411] Call Trace: [ 171.354918][T10411] [ 171.354928][T10411] dump_stack_lvl+0x241/0x360 [ 171.354958][T10411] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.354980][T10411] ? __pfx__printk+0x10/0x10 [ 171.355003][T10411] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 171.355036][T10411] ? __pfx___might_resched+0x10/0x10 [ 171.355066][T10411] should_fail_ex+0x3b0/0x4e0 [ 171.355093][T10411] should_failslab+0xac/0x100 [ 171.355115][T10411] ? __alloc_skb+0x1c3/0x440 [ 171.355137][T10411] kmem_cache_alloc_node_noprof+0x71/0x320 [ 171.355163][T10411] __alloc_skb+0x1c3/0x440 [ 171.355190][T10411] ? __pfx___alloc_skb+0x10/0x10 [ 171.355223][T10411] ? netlink_ack_tlv_len+0x6e/0x200 [ 171.355250][T10411] netlink_ack+0x13f/0xa30 [ 171.355276][T10411] ? __kasan_kmalloc+0x98/0xb0 [ 171.355297][T10411] ? nfnetlink_rcv+0x1265/0x2ab0 [ 171.355322][T10411] ? nfnetlink_rcv+0x12c6/0x2ab0 [ 171.355351][T10411] nfnetlink_rcv+0x26b6/0x2ab0 [ 171.355407][T10411] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 171.355472][T10411] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.355494][T10411] ? skb_clone+0x240/0x390 [ 171.355518][T10411] ? __pfx_lock_release+0x10/0x10 [ 171.355556][T10411] ? netlink_deliver_tap+0x2e/0x1b0 [ 171.490823][T10411] netlink_unicast+0x7f6/0x990 [ 171.495602][T10411] ? __pfx_netlink_unicast+0x10/0x10 [ 171.500886][T10411] ? __virt_addr_valid+0x183/0x530 [ 171.505998][T10411] ? __check_object_size+0x48e/0x900 [ 171.511291][T10411] netlink_sendmsg+0x8e4/0xcb0 [ 171.516068][T10411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.521355][T10411] ? aa_sock_msg_perm+0x91/0x160 [ 171.526320][T10411] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.531604][T10411] __sock_sendmsg+0x221/0x270 [ 171.536281][T10411] ____sys_sendmsg+0x52a/0x7e0 [ 171.541051][T10411] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.546349][T10411] __sys_sendmsg+0x292/0x380 [ 171.550976][T10411] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.556112][T10411] ? __pfx_vfs_write+0x10/0x10 [ 171.560888][T10411] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.567230][T10411] ? do_syscall_64+0x100/0x230 [ 171.571993][T10411] ? do_syscall_64+0xb6/0x230 [ 171.576676][T10411] do_syscall_64+0xf3/0x230 [ 171.581177][T10411] ? clear_bhb_loop+0x35/0x90 [ 171.585850][T10411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.591740][T10411] RIP: 0033:0x7f24b137e719 [ 171.596152][T10411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.615765][T10411] RSP: 002b:00007f24b20e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.624179][T10411] RAX: ffffffffffffffda RBX: 00007f24b1535f80 RCX: 00007f24b137e719 [ 171.632145][T10411] RDX: 0000000000004000 RSI: 0000000020000200 RDI: 0000000000000004 [ 171.640112][T10411] RBP: 00007f24b20e9090 R08: 0000000000000000 R09: 0000000000000000 [ 171.648081][T10411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.656050][T10411] R13: 0000000000000000 R14: 00007f24b1535f80 R15: 00007ffee232cb08 [ 171.664032][T10411] [ 171.977559][T10420] syzkaller0: entered promiscuous mode [ 172.005940][T10420] syzkaller0: entered allmulticast mode [ 172.035086][ T11] syzkaller0: tun_net_xmit 48 [ 172.041560][T10420] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 172.356297][T10456] FAULT_INJECTION: forcing a failure. [ 172.356297][T10456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.394798][T10456] CPU: 0 UID: 0 PID: 10456 Comm: syz.0.1551 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 172.405619][T10456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 172.415706][T10456] Call Trace: [ 172.419005][T10456] [ 172.421951][T10456] dump_stack_lvl+0x241/0x360 [ 172.426657][T10456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.431881][T10456] ? __pfx__printk+0x10/0x10 [ 172.436506][T10456] ? snprintf+0xda/0x120 [ 172.440775][T10456] should_fail_ex+0x3b0/0x4e0 [ 172.445473][T10456] _copy_to_user+0x31/0xb0 [ 172.449920][T10456] simple_read_from_buffer+0xca/0x150 [ 172.455330][T10456] proc_fail_nth_read+0x1e9/0x250 [ 172.460388][T10456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.465962][T10456] ? rw_verify_area+0x55e/0x6f0 [ 172.470838][T10456] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.476408][T10456] vfs_read+0x1fc/0xb70 [ 172.480595][T10456] ? fdget_pos+0x24e/0x320 [ 172.485032][T10456] ? __pfx_vfs_read+0x10/0x10 [ 172.489738][T10456] ? __fget_files+0x3f3/0x470 [ 172.494443][T10456] ? fdget_pos+0x24e/0x320 [ 172.498886][T10456] ksys_read+0x183/0x2b0 [ 172.503160][T10456] ? __pfx_ksys_read+0x10/0x10 [ 172.507952][T10456] ? do_syscall_64+0x100/0x230 [ 172.512745][T10456] ? do_syscall_64+0xb6/0x230 [ 172.517462][T10456] do_syscall_64+0xf3/0x230 [ 172.521995][T10456] ? clear_bhb_loop+0x35/0x90 [ 172.526696][T10456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.532609][T10456] RIP: 0033:0x7fe26057d15c [ 172.537043][T10456] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 172.556675][T10456] RSP: 002b:00007fe2613d9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.565122][T10456] RAX: ffffffffffffffda RBX: 00007fe260735f80 RCX: 00007fe26057d15c [ 172.573114][T10456] RDX: 000000000000000f RSI: 00007fe2613d90a0 RDI: 0000000000000005 [ 172.581108][T10456] RBP: 00007fe2613d9090 R08: 0000000000000000 R09: 0000000000000000 [ 172.589103][T10456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.597093][T10456] R13: 0000000000000000 R14: 00007fe260735f80 R15: 00007fffaf240888 [ 172.605106][T10456] [ 172.769732][ T5854] Bluetooth: hci0: command 0x0419 tx timeout [ 172.775875][ T5860] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 174.392623][T10475] __nla_validate_parse: 4 callbacks suppressed [ 174.392644][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 174.415331][T10475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 174.425751][T10475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1558'. [ 174.435597][T10475] IPv6: NLM_F_REPLACE set, but no existing node found! [ 174.795299][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1564'. [ 174.987840][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1570'. [ 175.080963][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1565'. [ 175.369885][T10535] netlink: 'syz.4.1574': attribute type 10 has an invalid length. [ 175.400608][T10535] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 175.438793][T10535] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 175.522882][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1577'. [ 175.600861][T10542] netlink: 'syz.3.1578': attribute type 10 has an invalid length. [ 175.619262][T10542] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 175.690024][T10551] syz_tun: entered allmulticast mode [ 175.703374][T10553] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.869635][T10549] syz_tun: left allmulticast mode [ 176.016470][T10570] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1587'. [ 176.454170][T10591] tipc: Enabling of bearer rejected, already enabled [ 176.494537][T10593] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1594'. [ 176.607520][ T5854] Bluetooth: hci0: command 0x0419 tx timeout [ 176.613787][ T5860] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 176.634323][T10599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 176.783796][T10603] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 176.824029][T10603] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 176.869946][T10607] x_tables: duplicate underflow at hook 3 [ 176.893485][T10603] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 176.916199][T10607] xt_TPROXY: Can be used only with -p tcp or -p udp [ 177.574550][T10657] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 177.622040][T10657] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 177.664513][T10667] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 177.714733][T10657] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 177.735867][T10661] tipc: Started in network mode [ 177.742859][T10661] tipc: Node identity ac141427, cluster identity 4711 [ 177.752052][T10661] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.766201][T10661] tipc: Enabled bearer , priority 10 [ 177.887806][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.027715][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 178.619411][T10722] netem: change failed [ 178.877321][ T5852] tipc: Node number set to 2886997031 [ 179.007802][ T5854] Bluetooth: hci0: command 0x0419 tx timeout [ 179.014084][ T5860] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 179.635654][T10772] vlan0: entered promiscuous mode [ 179.662475][T10772] vlan0: entered allmulticast mode [ 179.688472][T10773] netlink: 'syz.1.1654': attribute type 8 has an invalid length. [ 179.707996][T10770] netlink: 'syz.2.1653': attribute type 10 has an invalid length. [ 179.840122][T10790] IPVS: length: 101 != 24 [ 179.938727][T10794] __nla_validate_parse: 12 callbacks suppressed [ 179.938746][T10794] netlink: 412 bytes leftover after parsing attributes in process `syz.3.1660'. [ 180.081648][T10798] FAULT_INJECTION: forcing a failure. [ 180.081648][T10798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.095027][T10798] CPU: 1 UID: 0 PID: 10798 Comm: syz.3.1661 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 180.105824][T10798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 180.115906][T10798] Call Trace: [ 180.119214][T10798] [ 180.122167][T10798] dump_stack_lvl+0x241/0x360 [ 180.126882][T10798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.132114][T10798] ? __pfx__printk+0x10/0x10 [ 180.136734][T10798] ? __pfx_lock_release+0x10/0x10 [ 180.141803][T10798] should_fail_ex+0x3b0/0x4e0 [ 180.146510][T10798] _copy_from_iter+0x21f/0x1e70 [ 180.151386][T10798] ? __virt_addr_valid+0x183/0x530 [ 180.156522][T10798] ? __pfx_lock_release+0x10/0x10 [ 180.161582][T10798] ? __alloc_skb+0x28f/0x440 [ 180.166210][T10798] ? __pfx__copy_from_iter+0x10/0x10 [ 180.171525][T10798] ? __virt_addr_valid+0x183/0x530 [ 180.176745][T10798] ? __virt_addr_valid+0x183/0x530 [ 180.181878][T10798] ? __virt_addr_valid+0x45f/0x530 [ 180.187015][T10798] ? __check_object_size+0x48e/0x900 [ 180.192329][T10798] netlink_sendmsg+0x73d/0xcb0 [ 180.197131][T10798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.202448][T10798] ? aa_sock_msg_perm+0x91/0x160 [ 180.207422][T10798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.212733][T10798] __sock_sendmsg+0x221/0x270 [ 180.217436][T10798] sock_write_iter+0x2d7/0x3f0 [ 180.222225][T10798] ? __pfx_sock_write_iter+0x10/0x10 [ 180.227551][T10798] do_iter_readv_writev+0x600/0x880 [ 180.232777][T10798] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 180.238618][T10798] ? bpf_lsm_file_permission+0x9/0x10 [ 180.244008][T10798] ? security_file_permission+0x74/0x280 [ 180.249663][T10798] ? rw_verify_area+0x1c3/0x6f0 [ 180.254544][T10798] vfs_writev+0x376/0xba0 [ 180.258909][T10798] ? __pfx_vfs_writev+0x10/0x10 [ 180.263820][T10798] ? fdget_pos+0x19a/0x320 [ 180.268267][T10798] do_writev+0x1b1/0x350 [ 180.272543][T10798] ? __pfx_do_writev+0x10/0x10 [ 180.277337][T10798] ? do_syscall_64+0x100/0x230 [ 180.282133][T10798] ? do_syscall_64+0xb6/0x230 [ 180.288753][T10798] do_syscall_64+0xf3/0x230 [ 180.293289][T10798] ? clear_bhb_loop+0x35/0x90 [ 180.297998][T10798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.303915][T10798] RIP: 0033:0x7faf1657e719 [ 180.308353][T10798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.327990][T10798] RSP: 002b:00007faf17333038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 180.336468][T10798] RAX: ffffffffffffffda RBX: 00007faf16735f80 RCX: 00007faf1657e719 [ 180.344473][T10798] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000008 [ 180.352471][T10798] RBP: 00007faf17333090 R08: 0000000000000000 R09: 0000000000000000 [ 180.360476][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.368484][T10798] R13: 0000000000000000 R14: 00007faf16735f80 R15: 00007ffc7c314ce8 [ 180.376519][T10798] [ 180.844599][T10815] netlink: 'syz.3.1664': attribute type 10 has an invalid length. [ 180.863745][T10790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.996288][T10821] netlink: 'syz.0.1665': attribute type 23 has an invalid length. [ 181.004534][T10821] netlink: 'syz.0.1665': attribute type 11 has an invalid length. [ 181.012673][T10821] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1665'. [ 181.135181][T10831] netlink: 'syz.4.1669': attribute type 21 has an invalid length. [ 181.345728][T10847] FAULT_INJECTION: forcing a failure. [ 181.345728][T10847] name failslab, interval 1, probability 0, space 0, times 0 [ 181.437080][T10847] CPU: 0 UID: 0 PID: 10847 Comm: syz.3.1672 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 181.447907][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 181.457990][T10847] Call Trace: [ 181.461292][T10847] [ 181.464243][T10847] dump_stack_lvl+0x241/0x360 [ 181.468960][T10847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.474196][T10847] ? __pfx__printk+0x10/0x10 [ 181.478828][T10847] ? ref_tracker_alloc+0x332/0x490 [ 181.483975][T10847] should_fail_ex+0x3b0/0x4e0 [ 181.488861][T10847] ? skb_clone+0x20c/0x390 [ 181.493316][T10847] should_failslab+0xac/0x100 [ 181.498032][T10847] ? skb_clone+0x20c/0x390 [ 181.502492][T10847] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 181.507906][T10847] skb_clone+0x20c/0x390 [ 181.512186][T10847] __netlink_deliver_tap+0x3cc/0x7f0 [ 181.517491][T10847] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.522698][T10847] netlink_deliver_tap+0x19d/0x1b0 [ 181.527815][T10847] netlink_unicast+0x7c4/0x990 [ 181.532592][T10847] ? __pfx_netlink_unicast+0x10/0x10 [ 181.537876][T10847] ? __virt_addr_valid+0x183/0x530 [ 181.542990][T10847] ? __check_object_size+0x48e/0x900 [ 181.548285][T10847] netlink_sendmsg+0x8e4/0xcb0 [ 181.553062][T10847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.558352][T10847] ? aa_sock_msg_perm+0x91/0x160 [ 181.563292][T10847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.568581][T10847] __sock_sendmsg+0x221/0x270 [ 181.573258][T10847] sock_write_iter+0x2d7/0x3f0 [ 181.578024][T10847] ? __pfx_sock_write_iter+0x10/0x10 [ 181.583355][T10847] do_iter_readv_writev+0x600/0x880 [ 181.588557][T10847] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 181.594285][T10847] ? bpf_lsm_file_permission+0x9/0x10 [ 181.599652][T10847] ? security_file_permission+0x74/0x280 [ 181.605284][T10847] ? rw_verify_area+0x1c3/0x6f0 [ 181.610142][T10847] vfs_writev+0x376/0xba0 [ 181.614483][T10847] ? __pfx_vfs_writev+0x10/0x10 [ 181.619361][T10847] ? fdget_pos+0x19a/0x320 [ 181.623793][T10847] do_writev+0x1b1/0x350 [ 181.628042][T10847] ? __pfx_do_writev+0x10/0x10 [ 181.632805][T10847] ? do_syscall_64+0x100/0x230 [ 181.637573][T10847] ? do_syscall_64+0xb6/0x230 [ 181.642247][T10847] do_syscall_64+0xf3/0x230 [ 181.646745][T10847] ? clear_bhb_loop+0x35/0x90 [ 181.651425][T10847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.657316][T10847] RIP: 0033:0x7faf1657e719 [ 181.661725][T10847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.681335][T10847] RSP: 002b:00007faf17333038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 181.689755][T10847] RAX: ffffffffffffffda RBX: 00007faf16735f80 RCX: 00007faf1657e719 [ 181.697751][T10847] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000008 [ 181.705808][T10847] RBP: 00007faf17333090 R08: 0000000000000000 R09: 0000000000000000 [ 181.713774][T10847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.721742][T10847] R13: 0000000000000000 R14: 00007faf16735f80 R15: 00007ffc7c314ce8 [ 181.729746][T10847] [ 181.832815][T10862] ipt_rpfilter: unknown options [ 181.887294][ C1] net_ratelimit: 10 callbacks suppressed [ 181.887315][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.995937][T10865] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1674'. [ 182.290303][T10882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1678'. [ 182.461841][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1681'. [ 182.540869][T10894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1682'. [ 182.574092][T10896] bond0: entered promiscuous mode [ 182.599397][T10896] bond_slave_0: entered promiscuous mode [ 182.647989][T10896] bond_slave_1: entered promiscuous mode [ 182.671164][T10896] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 182.759478][T10895] bond0: left promiscuous mode [ 182.774121][T10895] bond_slave_0: left promiscuous mode [ 182.787653][T10895] bond_slave_1: left promiscuous mode [ 182.795286][T10895] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 182.937271][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 183.169451][T10910] netlink: 'syz.4.1686': attribute type 4 has an invalid length. [ 183.360347][T10936] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1695'. [ 183.556195][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1696'. [ 183.581681][T10947] bond0: entered promiscuous mode [ 183.591381][T10947] bond_slave_0: entered promiscuous mode [ 183.593669][T10949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1696'. [ 183.617498][T10947] bond_slave_1: entered promiscuous mode [ 183.623327][T10947] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 183.660486][T10939] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 183.690555][T10955] netlink: 'syz.0.1696': attribute type 10 has an invalid length. [ 183.699821][T10955] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 183.738956][T10946] bond0: left promiscuous mode [ 183.764373][T10946] bond_slave_0: left promiscuous mode [ 183.775882][T10946] bond_slave_1: left promiscuous mode [ 183.786006][T10946] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 183.863849][T10961] netlink: 'syz.0.1705': attribute type 4 has an invalid length. [ 183.967337][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 184.069474][T10968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1707'. [ 184.366164][T10991] netlink: 'syz.0.1713': attribute type 10 has an invalid length. [ 184.421522][T10991] bond0: (slave wlan1): Releasing backup interface [ 184.457764][T10991] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 184.536776][T11000] xt_l2tp: missing protocol rule (udp|l2tpip) [ 184.712886][T11005] netlink: 'syz.0.1718': attribute type 10 has an invalid length. [ 184.773563][T11005] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 184.857398][T11005] team0: Port device netdevsim0 removed [ 184.880424][T11005] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 184.914125][T11005] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 184.999211][T11022] __nla_validate_parse: 1 callbacks suppressed [ 184.999232][T11022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1720'. [ 185.017296][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.095918][T11030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1724'. [ 185.149092][T11015] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 185.266176][T11035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1725'. [ 185.341006][T11043] netlink: 412 bytes leftover after parsing attributes in process `syz.3.1727'. [ 185.528539][T10994] netlink: 'syz.4.1715': attribute type 9 has an invalid length. [ 185.547357][T10994] netlink: 'syz.4.1715': attribute type 7 has an invalid length. [ 185.568311][T11056] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 185.600098][T11056] bond0: (slave wlan1): Releasing backup interface [ 185.811526][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1732'. [ 185.812211][T11060] sctp: [Deprecated]: syz.0.1730 (pid 11060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.812211][T11060] Use struct sctp_sack_info instead [ 185.833568][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1732'. [ 185.967845][ T5849] Bluetooth: hci0: command 0x0419 tx timeout [ 185.968820][ T5860] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 186.047339][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.198459][T11076] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1733'. [ 186.225241][T11084] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1736'. [ 186.302942][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1737'. [ 186.321570][T11089] pimreg: entered allmulticast mode [ 186.327497][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 186.334446][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 186.347312][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 186.461680][T11094] validate_nla: 2 callbacks suppressed [ 186.461700][T11094] netlink: 'syz.1.1737': attribute type 10 has an invalid length. [ 186.548629][T11102] netlink: 412 bytes leftover after parsing attributes in process `syz.0.1740'. [ 186.607134][T11106] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.086388][T11130] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 187.097332][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.244990][T11137] netlink: 'syz.0.1748': attribute type 10 has an invalid length. [ 187.254045][T11137] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 187.272606][T11137] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 187.283074][T11137] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 187.352286][ T5860] ================================================================== [ 187.360391][ T5860] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 187.368052][ T5860] Read of size 8 at addr ffff888032fd4898 by task kworker/u9:7/5860 [ 187.376051][ T5860] [ 187.378394][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: kworker/u9:7 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 187.389266][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 187.399341][ T5860] Workqueue: hci0 hci_cmd_sync_work [ 187.404573][ T5860] Call Trace: [ 187.407868][ T5860] [ 187.410811][ T5860] dump_stack_lvl+0x241/0x360 [ 187.415509][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 187.420729][ T5860] ? __pfx__printk+0x10/0x10 [ 187.425338][ T5860] ? _printk+0xd5/0x120 [ 187.429509][ T5860] ? __virt_addr_valid+0x183/0x530 [ 187.434645][ T5860] ? __virt_addr_valid+0x183/0x530 [ 187.439954][ T5860] print_report+0x169/0x550 [ 187.444483][ T5860] ? __virt_addr_valid+0x183/0x530 [ 187.449617][ T5860] ? __virt_addr_valid+0x183/0x530 [ 187.454753][ T5860] ? __virt_addr_valid+0x45f/0x530 [ 187.459884][ T5860] ? __phys_addr+0xba/0x170 [ 187.464402][ T5860] ? set_powered_sync+0x3a/0xc0 [ 187.469250][ T5860] kasan_report+0x143/0x180 [ 187.473749][ T5860] ? set_powered_sync+0x3a/0xc0 [ 187.478597][ T5860] set_powered_sync+0x3a/0xc0 [ 187.483270][ T5860] ? __pfx_set_powered_sync+0x10/0x10 [ 187.488639][ T5860] hci_cmd_sync_work+0x22b/0x400 [ 187.493574][ T5860] ? process_scheduled_works+0x976/0x1850 [ 187.499291][ T5860] process_scheduled_works+0xa63/0x1850 [ 187.504858][ T5860] ? __pfx_process_scheduled_works+0x10/0x10 [ 187.510835][ T5860] ? assign_work+0x364/0x3d0 [ 187.515427][ T5860] worker_thread+0x870/0xd30 [ 187.520018][ T5860] ? __kthread_parkme+0x169/0x1d0 [ 187.525062][ T5860] ? __pfx_worker_thread+0x10/0x10 [ 187.530169][ T5860] kthread+0x2f0/0x390 [ 187.534240][ T5860] ? __pfx_worker_thread+0x10/0x10 [ 187.539348][ T5860] ? __pfx_kthread+0x10/0x10 [ 187.543935][ T5860] ret_from_fork+0x4b/0x80 [ 187.548446][ T5860] ? __pfx_kthread+0x10/0x10 [ 187.553027][ T5860] ret_from_fork_asm+0x1a/0x30 [ 187.557791][ T5860] [ 187.560796][ T5860] [ 187.563104][ T5860] Allocated by task 11141: [ 187.567503][ T5860] kasan_save_track+0x3f/0x80 [ 187.572181][ T5860] __kasan_kmalloc+0x98/0xb0 [ 187.576775][ T5860] __kmalloc_cache_noprof+0x19c/0x2c0 [ 187.582142][ T5860] mgmt_pending_new+0x65/0x250 [ 187.586902][ T5860] mgmt_pending_add+0x36/0x120 [ 187.591668][ T5860] set_powered+0x3cd/0x5e0 [ 187.596116][ T5860] hci_mgmt_cmd+0xc47/0x11d0 [ 187.600793][ T5860] hci_sock_sendmsg+0x7b8/0x11c0 [ 187.605730][ T5860] __sock_sendmsg+0x221/0x270 [ 187.610403][ T5860] sock_write_iter+0x2d7/0x3f0 [ 187.615163][ T5860] vfs_write+0xaeb/0xd30 [ 187.619402][ T5860] ksys_write+0x183/0x2b0 [ 187.623720][ T5860] do_syscall_64+0xf3/0x230 [ 187.628215][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.634100][ T5860] [ 187.636412][ T5860] Freed by task 11035: [ 187.640466][ T5860] kasan_save_track+0x3f/0x80 [ 187.645134][ T5860] kasan_save_free_info+0x40/0x50 [ 187.650173][ T5860] __kasan_slab_free+0x59/0x70 [ 187.654933][ T5860] kfree+0x1a0/0x440 [ 187.658820][ T5860] settings_rsp+0x2bc/0x390 [ 187.663318][ T5860] mgmt_pending_foreach+0xd1/0x130 [ 187.668420][ T5860] __mgmt_power_off+0x106/0x430 [ 187.673263][ T5860] hci_dev_close_sync+0x6c4/0x11c0 [ 187.678366][ T5860] hci_dev_close+0x112/0x210 [ 187.682959][ T5860] sock_do_ioctl+0x158/0x460 [ 187.687538][ T5860] sock_ioctl+0x626/0x8e0 [ 187.691858][ T5860] __se_sys_ioctl+0xf9/0x170 [ 187.696442][ T5860] do_syscall_64+0xf3/0x230 [ 187.700941][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.706922][ T5860] [ 187.709236][ T5860] The buggy address belongs to the object at ffff888032fd4880 [ 187.709236][ T5860] which belongs to the cache kmalloc-96 of size 96 [ 187.723122][ T5860] The buggy address is located 24 bytes inside of [ 187.723122][ T5860] freed 96-byte region [ffff888032fd4880, ffff888032fd48e0) [ 187.736777][ T5860] [ 187.739107][ T5860] The buggy address belongs to the physical page: [ 187.745520][ T5860] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888032fd4680 pfn:0x32fd4 [ 187.755614][ T5860] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 187.762721][ T5860] page_type: f5(slab) [ 187.766719][ T5860] raw: 00fff00000000000 ffff88801ac41280 ffffea000510b0c0 dead000000000006 [ 187.775321][ T5860] raw: ffff888032fd4680 000000008020001a 00000001f5000000 0000000000000000 [ 187.783908][ T5860] page dumped because: kasan: bad access detected [ 187.790330][ T5860] page_owner tracks the page as allocated [ 187.796051][ T5860] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 60, tgid 60 (kworker/1:1), ts 68497741286, free_ts 68494819802 [ 187.814899][ T5860] post_alloc_hook+0x1f3/0x230 [ 187.819667][ T5860] get_page_from_freelist+0x303f/0x3190 [ 187.825204][ T5860] __alloc_pages_noprof+0x292/0x710 [ 187.830390][ T5860] alloc_pages_mpol_noprof+0x3e8/0x680 [ 187.835873][ T5860] alloc_slab_page+0x6a/0x140 [ 187.840541][ T5860] allocate_slab+0x5a/0x2f0 [ 187.845034][ T5860] ___slab_alloc+0xcd1/0x14b0 [ 187.849706][ T5860] __slab_alloc+0x58/0xa0 [ 187.854032][ T5860] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 187.859403][ T5860] nsim_fib_event_work+0x19c5/0x4130 [ 187.864695][ T5860] process_scheduled_works+0xa63/0x1850 [ 187.870238][ T5860] worker_thread+0x870/0xd30 [ 187.874827][ T5860] kthread+0x2f0/0x390 [ 187.878889][ T5860] ret_from_fork+0x4b/0x80 [ 187.883305][ T5860] ret_from_fork_asm+0x1a/0x30 [ 187.888063][ T5860] page last free pid 5220 tgid 5220 stack trace: [ 187.894378][ T5860] free_unref_page+0xcfb/0xf20 [ 187.899148][ T5860] __put_partials+0xeb/0x130 [ 187.903741][ T5860] put_cpu_partial+0x17c/0x250 [ 187.908498][ T5860] __slab_free+0x2ea/0x3d0 [ 187.912913][ T5860] qlist_free_all+0x9a/0x140 [ 187.917504][ T5860] kasan_quarantine_reduce+0x14f/0x170 [ 187.922980][ T5860] __kasan_slab_alloc+0x23/0x80 [ 187.927843][ T5860] kmem_cache_alloc_noprof+0x135/0x2a0 [ 187.933325][ T5860] getname_flags+0xb7/0x540 [ 187.937824][ T5860] vfs_fstatat+0x12c/0x190 [ 187.942599][ T5860] __x64_sys_newfstatat+0x11d/0x1a0 [ 187.947807][ T5860] do_syscall_64+0xf3/0x230 [ 187.952311][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.958213][ T5860] [ 187.960528][ T5860] Memory state around the buggy address: [ 187.966147][ T5860] ffff888032fd4780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 187.974202][ T5860] ffff888032fd4800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 187.982255][ T5860] >ffff888032fd4880: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 187.990305][ T5860] ^ [ 187.995160][ T5860] ffff888032fd4900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 188.003226][ T5860] ffff888032fd4980: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 188.011279][ T5860] ================================================================== [ 188.027316][ T5860] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 188.034551][ T5860] CPU: 0 UID: 0 PID: 5860 Comm: kworker/u9:7 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 188.045423][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 188.055527][ T5860] Workqueue: hci0 hci_cmd_sync_work [ 188.060761][ T5860] Call Trace: [ 188.064147][ T5860] [ 188.067093][ T5860] dump_stack_lvl+0x241/0x360 [ 188.071796][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.077015][ T5860] ? __pfx__printk+0x10/0x10 [ 188.081625][ T5860] ? preempt_schedule+0xe1/0xf0 [ 188.086496][ T5860] ? vscnprintf+0x5d/0x90 [ 188.090858][ T5860] panic+0x349/0x880 [ 188.094775][ T5860] ? check_panic_on_warn+0x21/0xb0 [ 188.099911][ T5860] ? __pfx_panic+0x10/0x10 [ 188.104352][ T5860] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 188.110361][ T5860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 188.116719][ T5860] ? print_report+0x502/0x550 [ 188.121424][ T5860] check_panic_on_warn+0x86/0xb0 [ 188.126385][ T5860] ? set_powered_sync+0x3a/0xc0 [ 188.131261][ T5860] end_report+0x77/0x160 [ 188.135528][ T5860] kasan_report+0x154/0x180 [ 188.140064][ T5860] ? set_powered_sync+0x3a/0xc0 [ 188.144941][ T5860] set_powered_sync+0x3a/0xc0 [ 188.149637][ T5860] ? __pfx_set_powered_sync+0x10/0x10 [ 188.155033][ T5860] hci_cmd_sync_work+0x22b/0x400 [ 188.159996][ T5860] ? process_scheduled_works+0x976/0x1850 [ 188.165737][ T5860] process_scheduled_works+0xa63/0x1850 [ 188.171317][ T5860] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.177319][ T5860] ? assign_work+0x364/0x3d0 [ 188.181940][ T5860] worker_thread+0x870/0xd30 [ 188.186556][ T5860] ? __kthread_parkme+0x169/0x1d0 [ 188.191604][ T5860] ? __pfx_worker_thread+0x10/0x10 [ 188.196766][ T5860] kthread+0x2f0/0x390 [ 188.200850][ T5860] ? __pfx_worker_thread+0x10/0x10 [ 188.205995][ T5860] ? __pfx_kthread+0x10/0x10 [ 188.210608][ T5860] ret_from_fork+0x4b/0x80 [ 188.215050][ T5860] ? __pfx_kthread+0x10/0x10 [ 188.219664][ T5860] ret_from_fork_asm+0x1a/0x30 [ 188.224643][ T5860] [ 188.227831][ T5860] Kernel Offset: disabled [ 188.232464][ T5860] Rebooting in 86400 seconds..