last executing test programs: 1m6.847688891s ago: executing program 4 (id=907): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xca, &(0x7f0000000200)=[{}], 0x8, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xaa, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="8e6b849a137b43f29e4b4115042b9aaa030e5772a63c87e646b338d2f6077aec3d6b35d8710ca5225d3a4c9dd3c53ab035e1e5b3a17460caf3e49ad403beab35ddb36eea128f9bbb42512eed2a3a53f46bd525f58b0d6830e9a1c35c9cc3c98b9c3977b2", 0x64, 0x0, &(0x7f0000000440)={0x11, 0x1c, r1, 0x1, 0x5, 0x6, @random="dd2858d95577"}, 0x14) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={&(0x7f0000000480), 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x3c}}, 0x4040004) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) recvmmsg(r4, &(0x7f0000000580), 0x0, 0x1a041, &(0x7f0000000600)={r5, r6+10000000}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$ARPT_SO_GET_ENTRIES(r7, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0x1e, "80f1761313162ce78e0da23d0b28e7bfeed573ff257e8392c14480ceb8f9"}, &(0x7f00000006c0)=0x42) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r8, &(0x7f0000000700)="74436bcaf0a9865a8edbb4f5cdd4d7b955dfbcb4ad0deceeb616709e", 0x1c, 0x4000000, &(0x7f0000000740)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x101}, 0x1c) (async) r9 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x0, @fixed}, &(0x7f00000007c0)=0xe, 0x80800) setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f0000000800)=0x63, 0x2) (async) clock_gettime(0x0, &(0x7f0000002080)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000840)=""/146, 0x92}, {&(0x7f0000000900)=""/10, 0xa}, {&(0x7f0000000940)=""/211, 0xd3}], 0x3, &(0x7f0000000a80)=""/173, 0xad}, 0x1}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000b40)=""/100, 0x64}, {&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/82, 0x52}, {&(0x7f0000001c40)=""/40, 0x28}, {&(0x7f0000001c80)=""/176, 0xb0}, {&(0x7f0000001d40)=""/147, 0x93}, {&(0x7f0000001e00)=""/107, 0x6b}], 0x7, &(0x7f0000001f00)=""/240, 0xf0}, 0x76}], 0x2, 0x40, &(0x7f00000020c0)={r10, r11+10000000}) r12 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r12, 0x0, 0x81, &(0x7f00000021c0)={'nat\x00', 0x0, 0x3, 0x61, [0xfffffffffffffffb, 0x9efa, 0x4000, 0x9, 0x24, 0xfffffffffcdc506a], 0x1, &(0x7f0000002100)=[{}], &(0x7f0000002140)=""/97}, &(0x7f0000002240)=0x78) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), r2) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000026c0)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002680)={&(0x7f0000002300)={0x380, r13, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "20ca7e0a80083469c845831811d7423600a39e7632"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x190, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xa2, 0x3, "bf91f9f80ea9f4f0d54d88794c6b263088cbc1189f61feca30b46bd83436f3c8f12d1e0acf6b004ede931769a8a8babb2a0d4d875c9a0d1228516b187564bec32f12f0088f677af9596f348a541fb4ccc3d7dacab5997c1598c33d6985914a750bf78229f82e7d641363b1021c30117676e63b459ff78f760ed22e6944660b6325d3c8a3c61d14396180f1e959f88c0776c6bd7321ea5cdf269a67d13fb7"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "7cf502d58ca6ed68c714db5c78920fc8bcf87b5c8fb3"}}, @TIPC_NLA_NODE_ID={0xa2, 0x3, "ae859c3b293b345cccb84ae4b73362933556f30068e0f927393426793b8d95dd20c099c1b53e17b73679562f8def97cf1c99349c93217595f23d9f02123ba173ef7413c9f6f790fa992fa54d7cbbd5090834bc9df1445a1d165ab4d992f4ae963bf43dac81e5bf76c34dea3a797dab9813f87e5840c66b0e913a75c6a64a773fbc046d846569c6b4f49c6ce9b8585b82ad9becd4c167a6fc1a0cdc6b719a"}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x44, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00', 0x7a458653}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xe2, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe3c4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7fffffff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010102}}}}]}]}, 0x380}, 0x1, 0x0, 0x0, 0x40040d0}, 0x8040) (async) getsockopt$bt_l2cap_L2CAP_LM(r9, 0x6, 0x3, &(0x7f0000002700), &(0x7f0000002740)=0x4) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r14, 0x8933, &(0x7f0000002780)={'wpan4\x00'}) (async) r15 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$int_out(r15, 0x5460, &(0x7f00000027c0)) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002840), r2) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000002940)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x5c, r16, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x76}}}}, [@NL80211_ATTR_KEY_SEQ={0xa, 0xa, "0732ebdc5369"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "5387d25b309e77a1ba643440f0"}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x480c1) 1m6.377473143s ago: executing program 4 (id=912): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'veth1_macvtap\x00', @random="2b1c00004ec6"}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="030600fd9f935771b1c600000000"], 0x14}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$can_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20008000) read$alg(r3, &(0x7f0000000080)=""/16, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4, 0x0, @local, 0x4}, 0x1c) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x5) ppoll(&(0x7f0000000080), 0x0, &(0x7f0000000240), 0x0, 0x0) 1m5.298849311s ago: executing program 3 (id=918): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x7, 0xb593, &(0x7f000000cf3d)=""/195}, 0x23) 1m5.224720191s ago: executing program 1 (id=919): r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0xc10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000240)={r7, 0x5, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000080)={r7, 0x5, 0x6, @multicast}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xd4, 0x1, 0x1, 0x5, 0x0, 0x0, {0x4, 0x0, 0x4}, [@CTA_LABELS_MASK={0x24, 0x17, [0x3ff, 0x6, 0x2, 0xffff, 0x0, 0x2, 0xa8b, 0x7]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5e4f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x80}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x6}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800, 0x0, 0x3, 0x2}, 0x20) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000e8a43dab0014"], 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2a5e986f34c105337f997deb7f6633d62", 0x1e, 0x844, &(0x7f00000000c0)={0x11, 0x3, r4, 0x1, 0x2, 0x6, @local}, 0x14) 1m4.485496358s ago: executing program 3 (id=920): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002240)=@newtfilter={0x6bc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x68c, 0x2, [@TCA_BASIC_POLICE={0x430, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0x5, 0x10000, 0x8, 0x9, 0x4cec96ce, 0x800, 0x3, 0xf59, 0x8, 0x80, 0x101, 0x87, 0x0, 0x2f3, 0xfffffffb, 0xfffffffe, 0xf3900, 0x8, 0x5, 0x9b, 0xff80000, 0xb0d, 0x0, 0x8, 0x9, 0x1, 0x7, 0x1, 0xf6d, 0x6, 0x4, 0x7, 0x80000001, 0x1, 0x2, 0x358, 0x3, 0x9, 0x4, 0x97, 0x4, 0x4, 0x9, 0x54f, 0x0, 0x7, 0x6, 0x6, 0xc19, 0x48, 0x5, 0x3, 0x10000, 0x8, 0x4, 0x7f, 0xc66, 0x3, 0x8, 0xfffffe00, 0xffffffff, 0x101, 0xb6f, 0x8000, 0xd, 0x1, 0xb984, 0x3ff, 0xa, 0xfffffffb, 0x8001, 0x1, 0xe, 0x119, 0xc63, 0x9, 0x80000001, 0x0, 0xa, 0x2, 0x3, 0x8, 0xef69, 0x200, 0x3, 0x1, 0x7fff, 0xda, 0x89, 0x4, 0xffffffff, 0xb666, 0x0, 0x8, 0x401, 0x4, 0xffffffaa, 0x0, 0x1, 0x7, 0x900000, 0x6, 0x8, 0x0, 0xffffff16, 0xd6, 0x3, 0x80000000, 0x95d, 0x4e8f, 0x466, 0x9, 0x9, 0x9, 0x32, 0x0, 0x1fb, 0x9, 0x5, 0x0, 0x1, 0x6, 0xfffffff6, 0x66d, 0x71c3, 0x1, 0x3d5, 0x10, 0x2, 0x4, 0x2, 0x1, 0x401, 0xe8b6720d, 0x4, 0x101, 0xd, 0xe00000, 0x4, 0x4, 0x9, 0x8, 0x8001, 0xffffffc0, 0x1, 0x200, 0x7, 0x0, 0x8c7, 0x9, 0x8, 0x0, 0xc, 0x401, 0x2, 0x5, 0x6c7, 0x9, 0x1000, 0x8, 0x9, 0x7, 0xb41, 0x6, 0x2, 0x7, 0xfffffff8, 0x1, 0x9, 0x80000001, 0xfffffff4, 0xfffffffc, 0xd9e, 0x3, 0xfffffffd, 0x7ba, 0x1, 0x3, 0x401, 0x8, 0x1, 0xacc9, 0x4, 0x0, 0x11ac, 0x7, 0x1, 0x50c36daf, 0xf27a, 0xfffffffb, 0x1, 0x8, 0x2, 0xcee6, 0x0, 0xffff, 0x6, 0x5, 0x8, 0x2, 0x8, 0x3ff, 0x9, 0x7f, 0x4, 0x1, 0x5, 0x228, 0x200, 0x1b6c0, 0x8, 0x3, 0x4, 0x2, 0x64b, 0xa, 0x3, 0x3, 0x3ff, 0x5db, 0x0, 0x7, 0x2, 0x3ff, 0x2, 0x400, 0x2, 0x7cc, 0xc, 0x5, 0xfffffffc, 0x1, 0x2, 0x400000, 0x5f0d, 0x2, 0x8, 0x8, 0x5, 0x7, 0x7, 0x7f, 0x69, 0x0, 0x0, 0x3, 0x1, 0x6, 0xbbc2, 0x6, 0x1ff, 0x7, 0x1c9111fb, 0x9]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xfff3}}, @TCA_BASIC_ACT={0x210, 0x3, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}, @m_mpls={0xb8, 0xe, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xa6a, 0x4, 0x8, 0x4, 0x962}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc6828}]}, {0x5d, 0x6, "b559012c80bc64904bf411ac6f4bd3e8104591a57ca1783fd92077ab30e3ee5522e1b33fb39ebe88e2c809cc26ac726270b198a85079610933ebe30fafafc4697623801b9ea73c93e61e880ec5114adc874d04b49373b70dab"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x60, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xffff, 0x3, 0x3ad, 0x4}}]}, {0x12, 0x6, "b7f3c645d3deb1c277b77feb6ff5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xc4, 0x9, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaef}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xb, 0x2, 0x10000000, 0x0, 0x3}, 0x1}}]}, {0x69, 0x6, "93d12c97439893e472763f97566393e1d63d7ec1e9f4e1658209ca8533bc7d3933a92d3b1acf05dc7f0480f7b3ee60e399e12761a8570be3ad5a9710427c1b1e18a0127f0bd18db0d0d1e11f911c2c2bc7ad9cd3f7341b9ad96263fe1b41eb2d8c49f59073"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x3, 0x4, 0x0, {0x0, 0x0, 0x3, 0x6, 0xd95, 0x8}, {0x7, 0x1, 0x0, 0x67b8, 0x4, 0x6}}}]}]}}]}, 0x6bc}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m3.5649424s ago: executing program 3 (id=922): socket$inet6(0xa, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x1ffffe02, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="2f47df03000000000000bb5c22299a9e2b07180000000304c9def9c9520000000000000500000000"], 0x28) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000540)={'sit0\x00', 0x0, 0x7880, 0x20, 0x6, 0x3, {{0x50, 0x4, 0x0, 0x9, 0x140, 0x67, 0x0, 0x75, 0x2f, 0x0, @multicast2, @rand_addr=0x64010102, {[@lsrr={0x83, 0x7, 0x46, [@local]}, @cipso={0x86, 0x4a, 0x1, [{0x0, 0x8, "cf57574e92bf"}, {0x6, 0x6, "3e1161af"}, {0x5, 0x12, "8ddccef458be8146dd376a1252a70bfe"}, {0x7, 0x6, "e3643f16"}, {0x7, 0x12, "a19178a500000000000000d0a95eeec3"}, {0x1, 0xc, "1d468faca77fdf8bba7a"}]}, @end, @ssrr={0x89, 0x2b, 0x55, [@broadcast, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0xd}, @broadcast, @multicast1, @rand_addr=0x64010100, @loopback, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @cipso={0x86, 0x2d, 0x3, [{0x6, 0x12, "4c56f7301be73f548d1669d069da0a17"}, {0x5, 0x7, "cb705f855c"}, {0x2, 0x8, "e12cb5145657"}, {0x0, 0x4, "77bf"}, {0x2, 0x2}]}, @lsrr={0x83, 0x23, 0xd8, [@private=0xa010101, @empty, @local, @empty, @empty, @multicast2, @rand_addr=0x64010101, @loopback]}, @timestamp_prespec={0x44, 0x3c, 0xdb, 0x3, 0x3, [{@multicast1, 0x5}, {@multicast1, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x7fffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x1}, {@multicast1, 0x3}, {@dev={0xac, 0x14, 0x14, 0xa}, 0x6}]}, @lsrr={0x83, 0x7, 0x45, [@rand_addr=0x64010101]}, @timestamp={0x44, 0x18, 0x6d, 0x0, 0x3, [0x0, 0x0, 0x8, 0x6, 0x8]}, @end]}}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x49, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0xa4}}, 0x0) 1m2.368650222s ago: executing program 1 (id=923): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000005001b0006000000080004", @ANYRES32=0x0, @ANYBLOB="89c98ffbc4448c9846fb73325d60f1f165e037daf87a82799619932d97aed413482ae600a621bc7ea02c0bd3ca40eae581bec1ac5a7fec7f47556fea67d571d77cce9c147eed578c05de1cd5746875ef875f1d91fb5443e88e2ab47805636068d04fb174cbc9a23e899c372155483f4f760f12dcd20f00258d923f56c033b4ee9ecbca231710ece5183edf79c486586bd1c8b0344533095405e63834937b785ff3470afb49fb872b277b30ac0a1581000000000000"], 0x2c}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='scalable\x00', 0x9) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1m2.368045915s ago: executing program 3 (id=924): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={&(0x7f00000001c0)="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", &(0x7f00000002c0)=""/223, &(0x7f00000000c0)="3f5494b0371fe8c3bd11d5fef0e62fb02015e27e1ea84c330b9b1a1f", &(0x7f0000000500)="3f081f741aa21eaf74c16271830f1dd0d73fcc9a2da02c9469b68534f6f77d1a497a12767aa337b0d180053615439b8f8590e7a5ba87ee02000000000000006bd1231412449b9155a4155087d1571c6db3f93616a23d839417d0ac8e8041c481619ad95811c25d4f064022fc69584dd83e5613eb401d82a0bd9c05690d650ef22e0822c1318204f76d93264659270e6f5346bf857fbd8e70ac73bf59ec06f9d69ff42deef40d9418cabfcc2bee8e6360320307343247ecf97ba16ee4808d9da7e627cc72e8806a7bab6c92e9e3a4c772cc5a234b24403f9ba5cb2fed1d6bf242170525cd16a729878f860000", 0x10000, 0xffffffffffffffff, 0x4}, 0x38) ioctl$SIOCSIFMTU(r2, 0x8910, &(0x7f0000000180)={'team0\x00', 0x44}) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@ifindex, 0xffffffffffffffff, 0x1f}, 0x20) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r3, 0x0, 0x24, 0x0, &(0x7f0000000180)) socket$kcm(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000100), 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) write$cgroup_int(0xffffffffffffffff, &(0x7f00000005c0), 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x4001, 0x3, 0x460, 0x0, 0xb, 0x148, 0x0, 0x148, 0x3f0, 0x240, 0x240, 0x3f0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x2d0, 0x338, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x21, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[], 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000005940)=[{0x0}, {&(0x7f00000047c0)=""/4096, 0x1000}, {&(0x7f00000057c0)=""/84, 0x54}, {&(0x7f0000000880)=""/253, 0xfd}], 0x4}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000180)={@private0, 0x400003}) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a30d93f7c2eacf803dc5f6c5630022712844f740258d331ac1066e85993aa6cbdad"], 0x24) 54.693315003s ago: executing program 1 (id=927): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800f7ff00000073114200000000008510000002000000b7d1ff00000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000340)={0x32017984, 0x1}) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000140)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'syz_tun\x00'}) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800098b33dcf84fbeea038e9d450000240000000000219078ac1414bbe000000200000000040190780071cd8e00d332cb"], 0x0) 18.597273491s ago: executing program 2 (id=971): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}}, 0x0) (fail_nth: 8) 18.489371412s ago: executing program 4 (id=928): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x15}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) sendto$inet(r0, &(0x7f0000000280)="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", 0x15f, 0x28000081, &(0x7f0000004ff0)={0x2, 0x0, @broadcast}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000640)=0x7) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0xa, [@struct={0x0, 0x6, 0x0, 0x4, 0x1, 0x0, [{0xc, 0x1, 0x9d04}, {0x10, 0x3}, {0xc, 0x1, 0x1}, {0xa, 0x5, 0xffff}, {0x6, 0x1000005, 0x8}, {0x9, 0x4, 0xca9}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x4}, {0xd, 0x6}, {0x3, 0x1}]}, @fwd={0x8}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x4}}, @enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0x5}, {0x0, 0x7}, {0xe, 0x9}]}, @var={0xe, 0x0, 0x0, 0xe, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x4f, 0x30, 0x5f, 0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000540)=""/158, 0x12e, 0x9e, 0x0, 0x170}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x8, 0x6, 0xd, 0x80, 0x0, 0xffffffffffffffff, 0x6, '\x00', r4, r5, 0x2, 0x4, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) pipe(0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f00000004c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x24, r9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000800)=""/212, 0x1a, 0xd4, 0x8}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 17.678893452s ago: executing program 2 (id=973): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000040), 0x4) 17.590842369s ago: executing program 2 (id=974): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000000)="93", 0x34000}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp6(0xa, 0x2, 0x73) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400f5ff", @ANYRES16=r4, @ANYBLOB="810f000000000000000001000000080001000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000700)=ANY=[@ANYBLOB="0004e6ffffff000027aaad84b6dc7994eb68f5f31422247cfe88000000000000000000000000000000000000000000ed28b1ea4c8477c49fb248f4e3020900676bb0c78802f311906ad3e75b51b291eceac23551b32fc1a45ed4286346d2e15bdf3457bfae2bd9657be50473c4b69f029b3ea6539091b8e2eb716aa12c4ec0b22a587acf05be98", @ANYRES64=r4, @ANYRESHEX=r1], 0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x206}}], 0x20}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x48) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(r8, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r7, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r8}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001400)={r2, &(0x7f00000005c0)="ab851574d14f01b91f9858df8260f9ac6a4c2016f50705156e965ea67fe5dd92b96926935581a62b9e4b0c9b6dae8606546691e14492beb712f68f0159d8811d09daa78f251a02eef54ca24736860905b798c2223ac3a9c02c1dc2f84a07c6b3e91ce8e216185bfe6d7d6828efbc06345b2e0089f9e5d0d10851f68dcf9b398e111513f6cb6d1a4f488b172506f6aa8f0fc0f854991dcef9373c66d9fc8c01b662acc64fc9b6bee99a4da437aaedd1a7d8369f9508c0fc0068bdc59051f1a22a9de8b22c616333053bfa0b257cc9457be6a3b4f2b5e6fda827923e00"/235, &(0x7f0000001300)=@tcp=r8, 0x2}, 0x20) r9 = socket(0x200000100000011, 0x803, 0x0) socket$unix(0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000040)) bind$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 17.304230633s ago: executing program 4 (id=975): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)="1966ea7f", 0x4) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xfffffffa}, 0x8) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001200)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010700000000000000000a00000008000300", @ANYRES32=0x0, @ANYBLOB="b5b86ff7001d7bb6b0277e01fcffffffffffff0696ae9a2dd746999a068d1ca56719bb557140e968070f07774051655e2b2451d7be590096ed54fccfa8883724a5eeb00c6be49b711810ee805e6252f4904110f1728e36edba21bd87225da44a0eb6fef9f4"], 0x1c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r2, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f00000001c0)) syz_emit_ethernet(0xfc0, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 17.253470934s ago: executing program 2 (id=976): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x30, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "2bdd4b74a1f6aa675459bc4d77085aa8"}]}}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00'}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000000706010200000000000000000000000005000100070000000800064000000004"], 0x24}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000020000000000002c40df000000000095", @ANYRES32, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x60}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x40801) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f354", 0x14}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f0000000e40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffac}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_route(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)=@ipv4_newaddr={0x18, 0x14, 0x104, 0x70bd2b, 0x25dfdbfe, {0x2, 0x78, 0x21}}, 0xfffffffffffffe0a}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001403000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe000000008500000088000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a7c31de7910d1ed4065a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3503680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dacfeb47479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3de8726c2a61ec45c19f97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9bdce38c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4af05c28308241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5490f6589880ed6eea7b9c670012be05e7de0940313c5870786554df2623d58f5ace92d028f2c71a6ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77962a2cd8a104e16b77d5f7f13b1640d43e11801140caf1a8b1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b905fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf34117a82a96b2ced73abb8e4bb718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000001762e5f5a3a0bc33fdbe28a5ffc83f2f08544eb2794e7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f85d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d801002653c4d9818708e27c89b552d3fcd11ebce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff2a8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4000000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b850580994484305d7a1759782ae57773e0d8b0ab900edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0bd91e328b6a6f732a91f0e2e9120be61e58c79d497247d278888901d44bf77ff246605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c2d0836395fe39f0e11c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc71300000000000021000000b12f0ec0412268860027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b50f3ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861ddb54684cb73e7aeefae47fa09fd88e6043bd52ae84c1bb0c8a6b769f952283a1f4e3842edb3d42c68a2102fa1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e81163bde261fd00000000007271e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d1b8b90bc0df4c4b51b1f922a44ec675203bf8d1548e49262727c3de6daab3b4ed15aa99802e45d0620617e839b5237ddfcf103c91e61d174e3be6c9fd47398797e3b814e751ff31ecb42de6dd9d6b88121aaa680c236a303914e00150e1ec3f144ebc28287d5b51cfb8cabb844d12b140767d0fc24425590024b2e431722392489e3d43b3e31438a0138988083c47c61384d54e9a40fba01cac6e59ec82edc764840fe551c1d57442970cd8e59b9f41094e158c0a1ee855d8515599685486c2a21fa1c107531a0db8306441e8408b34aa90e9736e672d74cb8e78f8bdb93a23d024fc200796836ab396911a56231e953efad6cd83db32ffc595d970108e9547ea0000002730d5d1b70fe8b458ac1651135037b6cb9c8053299f77ab84c5b9fd2f764c3caa9c69377c397d310ddc7bc4bfa165def7b49e28ef196ae263b6829a8419d8860f56c86c288964ac4bc19839d96ff24b981c3a4fd6f93a000000ea9d6b06dafae4c91177"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x2}, 0x10}, 0x90) 17.111225294s ago: executing program 0 (id=977): r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0xc10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000240)={r7, 0x5, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000080)={r7, 0x5, 0x6, @multicast}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xd4, 0x1, 0x1, 0x5, 0x0, 0x0, {0x4, 0x0, 0x4}, [@CTA_LABELS_MASK={0x24, 0x17, [0x3ff, 0x6, 0x2, 0xffff, 0x0, 0x2, 0xa8b, 0x7]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x44, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5e4f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x80}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x6}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800, 0x0, 0x3, 0x2}, 0x20) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000e8a43dab0014"], 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2a5e986f34c105337f997deb7f6633d62", 0x1e, 0x844, &(0x7f00000000c0)={0x11, 0x3, r4, 0x1, 0x2, 0x6, @local}, 0x14) 16.919251942s ago: executing program 1 (id=931): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xb4}}, 0x0) 16.86299349s ago: executing program 0 (id=978): socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0xf0ff, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080603000000000000000008000000000500010006"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x2b) 16.653592117s ago: executing program 4 (id=979): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) (async) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x64}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) 16.362366882s ago: executing program 0 (id=980): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}}}, 0x2, 0x4, 0x800, 0x8, 0xa}, &(0x7f00000002c0)=0x98) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f0000010012000000000000000000000000007fffffff000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff02040000000000000000000000000100000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657328290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) 16.276326723s ago: executing program 0 (id=981): unshare(0x20040600) bpf$MAP_LOOKUP_ELEM(0x3, 0x0, 0x700) 16.2016236s ago: executing program 2 (id=982): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000040), 0x4) 16.193701625s ago: executing program 4 (id=983): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x15}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) sendto$inet(r0, &(0x7f0000000280)="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", 0x15f, 0x28000081, &(0x7f0000004ff0)={0x2, 0x0, @broadcast}, 0x10) ioctl$int_in(r0, 0x0, &(0x7f0000000640)=0x7) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0xa, [@struct={0x0, 0x6, 0x0, 0x4, 0x1, 0x0, [{0xc, 0x1, 0x9d04}, {0x10, 0x3}, {0xc, 0x1, 0x1}, {0xa, 0x5, 0xffff}, {0x6, 0x1000005, 0x8}, {0x9, 0x4, 0xca9}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x4}, {0xd, 0x6}, {0x3, 0x1}]}, @fwd={0x8}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x4}}, @enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0x5}, {0x0, 0x7}, {0xe, 0x9}]}, @var={0xe, 0x0, 0x0, 0xe, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x4f, 0x30, 0x5f, 0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000540)=""/158, 0x12e, 0x9e, 0x0, 0x170}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x8, 0x6, 0xd, 0x80, 0x0, 0xffffffffffffffff, 0x6, '\x00', r4, r5, 0x2, 0x4, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) pipe(0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f00000004c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x24, r9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000800)=""/212, 0x1a, 0xd4, 0x8}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 16.0824161s ago: executing program 0 (id=984): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x1406, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x4}]}, 0x18}}, 0x40084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x3, 0x6, 0x9, 0x4, 0xc8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @jmp={0x5, 0x0, 0x2, 0x2, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xa, 0x8, 0x3, 0x8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1}, 0x90) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$kcm(r3, 0x0, 0x48000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r5 = epoll_create(0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000001180)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000001200)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000001340)) write(r4, &(0x7f00000000c0)="510003000000", 0x6) r9 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0x0, 0x3}}) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000180)=0x8, 0x4) r10 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0xa8a183fffe41dd5c}}, 0x1c) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000040)={@mcast1, 0x32}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = openat$cgroup_devices(r11, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f0000000400)={'b', ' *:* ', 'rm\x00'}, 0x6) 16.013460261s ago: executing program 2 (id=985): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x33, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000000)={0x1, 'bond_slave_1\x00', {}, 0xffff}) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000000)='g', 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r6, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r11, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000009000000000600000018110000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001836000002000000000000000000000085200000050000008520000005000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x23, &(0x7f0000000140)=""/35, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0x2, 0x9, 0x4bad}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1], 0x0, 0x10, 0x7ff}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x6, 0x4, 0x8, 0x2}, 0x48) 15.138742648s ago: executing program 1 (id=986): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x140, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}]]}, 0x24}}, 0x0) 12.971996407s ago: executing program 0 (id=987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000001540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x28, r2, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x71}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x10004044) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001d40)={&(0x7f0000000380)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000460000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00030000000c008f0007000000000000000c009000ff03000000000000c49b23b050b94e061b36e3bb4aae4250e004"], 0x54}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="efff040068940065d0"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0c009936000000d749e2ab46b323682d3928ee5ea2bbc4a62958b1e3da09fdb5bac2aab84c6e00001000000000c200000000000000"], 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x54, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @val={0x76, 0x6}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0xca32]}]}, 0x54}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000200)="a0", 0x0, 0x1}, 0x50) 10.449271479s ago: executing program 1 (id=988): r0 = socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001040)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0xc10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000240)={r7, 0x5, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r5, 0x107, 0x2, &(0x7f0000000080)={r7, 0x5, 0x6, @multicast}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0xdc, 0x1, 0x1, 0x5, 0x0, 0x0, {0x4, 0x0, 0x4}, [@CTA_LABELS_MASK={0x24, 0x17, [0x3ff, 0x6, 0x2, 0xffff, 0x0, 0x2, 0xa8b, 0x7]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5e4f}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x80, 0x80}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x4}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x6}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800, 0x0, 0x3, 0x2}, 0x20) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000e8a43dab0014"], 0x34}}, 0x0) sendto$packet(r0, &(0x7f0000000140)="a6bea8a120e5f8320c30e45010b2a5e986f34c105337f997deb7f6633d62", 0x1e, 0x844, &(0x7f00000000c0)={0x11, 0x3, r4, 0x1, 0x2, 0x6, @local}, 0x14) 6.308780254s ago: executing program 3 (id=930): r0 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="ce05000000000000611051000000000004000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x900adc7f534b7c6b}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x3f}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x6937fb9d}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4000000}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r4, @ANYBLOB="01ff00e1c3ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x6558, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r4, {}, {0xffff}}}, 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003a40)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a50010000000a01030000000000000000010000000900010073797a300000000008000240000000000c0004400000000000000001080002400000000008000240000000010c00044000000000000000020900010073797a3000000000f4000600cc47d0de9bb857c4fac4db836ef7b7b541cec6827b5cc1a2af3416eb2492ae14515943977ff4e662910e5b93446580ced364ce1d62c41a989a7635702cd42b2c625f4c9d8ca6f0fa3dfc4d07f2d4626aefaa2ac28d17e87eb9a52749975c0697c2cccab87e5404e196cf98d4c79baaacfa5abad452834c781677a247f0bf5fe381286dea3560e28d8fa8fc8e7b8267c3669e265a4d0b9c67c6a5978e4969979cf9ad898be1f53e187dd249baa24be662ec4c2f6b010858b1259c7a5dd9abd0c5062c15a1ed37bf7744d3c8a68b2574efb4ebbb5861d5c1e3aa01a74e4a7bb5d1aca4d26f7ee0647078ae5e5fcd4540343c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003801a00000c0a01020000000000000000010000000900020073797a32000000003400038030000080080006400000000024000b8020000180070001006374000014000280080001400000000008000240000000000900010073797a30000000000900010073797a31000000000900010073797a3000000000e8190380cc13008008000340000000"], 0x1c34}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'gre0\x00', &(0x7f0000001000)={'erspan0\x00', 0x0, 0x780, 0x80, 0x3, 0x820, {{0x30, 0x4, 0x2, 0x3f, 0xc0, 0x64, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @noop, @noop, @cipso={0x86, 0x34, 0x1, [{0x7, 0xb, "c59ff8fd82fa91efdc"}, {0x2, 0x9, "ff38a24a6aa73d"}, {0x5, 0x10, "1bf757e8ee1b14f74c7aa977e1f8"}, {0x5, 0xa, "fbcd62cc303e5dd9"}]}, @timestamp={0x44, 0x1c, 0x30, 0x0, 0xf, [0x1368, 0x1f, 0x7, 0x66de, 0x80000000, 0x5]}, @cipso={0x86, 0x57, 0x2, [{0xe70d95644b9b2b0e, 0x5, "9233d6"}, {0x4, 0xc, "c702adffdd399ebde544"}, {0x6, 0x11, "93922bcd5e94581821947fd2e4d362"}, {0x5, 0xa, "e2eae8719c37c8f9"}, {0x2, 0x3, "a0"}, {0x0, 0x8, "4481a2d835f9"}, {0x1, 0x7, "97d6e3ee9d"}, {0x1, 0xc, "49ad3f5596ad44251a95"}, {0xe, 0x7, "a5182d73c4"}]}]}}}}}) getpeername$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001140)=ANY=[@ANYBLOB="000000001900010028bd7000fedbdf2564010101000000000000000000000000fc0200000000000000000000000000004e2300084e2000000a00202088000000", @ANYRES32=r6, @ANYRES32=0xee00, @ANYBLOB="f050000000000000180e000000000000ff0000000000000005000000000000000900000000000000ff0000000000000008000000000000000800000000000000760c0000000000000008000000000000f9ffffffffffffff02000000000000007b8d0000be6b6e000100030300000000000007007f000001000000000000000000000000fe8000000000000000000000000000bb4e2100004e2300070200a0002f000000", @ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB="0100000001000000dc000000000000001f00000000000000020000000000000004000000000000000600000000000000090000000000000074de265800000000ff0f000000007882080000000000000000000000000000000104000000000000740e0000b66b6e00020001020000000000000700fc000000000000000000000000000001fc0200f0ffffffffffffff00000000004e2200004e2200000a0000003b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="09000000000000000300000000000000080000000000000002000000000000000900000000000000fe0c000000000000875f000000000000cf1a00000000000008000000000000009f000000000000001f00000000000000010100000000000005000000b76b6e00010002030000000000001f000400000000000e00fc0000000000000000000000000000010000130064010101000000000000000000000000fe800000000000000000000000000021000000000a00000000001e0000000100"], 0x1c}}, 0x4) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000240)='GPL\x00', 0x1}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r9 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$BATADV_CMD_GET_MESH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000580)) 0s ago: executing program 3 (id=993): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}}]}}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d08020a000000020000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000000000", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(r6, &(0x7f0000000080), 0x12) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x94, &(0x7f0000000080)=[{}]}, 0x10) write$cgroup_int(r6, &(0x7f0000000100)=0x1, 0x12) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r9, 0x0, 0x8ebe, 0x0) openat$cgroup_netprio_ifpriomap(r8, 0x0, 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): 84210][ T6306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.789525][ T6306] __sock_sendmsg+0x221/0x270 [ 97.794253][ T6306] ____sys_sendmsg+0x525/0x7d0 [ 97.799057][ T6306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.804405][ T6306] __sys_sendmsg+0x2b0/0x3a0 [ 97.809030][ T6306] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.814168][ T6306] ? vfs_write+0x7c4/0xc90 [ 97.818660][ T6306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.825027][ T6306] ? do_syscall_64+0x100/0x230 [ 97.829828][ T6306] ? do_syscall_64+0xb6/0x230 [ 97.834542][ T6306] do_syscall_64+0xf3/0x230 [ 97.839079][ T6306] ? clear_bhb_loop+0x35/0x90 [ 97.843789][ T6306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.849714][ T6306] RIP: 0033:0x7f08f8575bd9 [ 97.854328][ T6306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.873961][ T6306] RSP: 002b:00007f08f93f2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.882420][ T6306] RAX: ffffffffffffffda RBX: 00007f08f8704038 RCX: 00007f08f8575bd9 [ 97.890420][ T6306] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 97.898416][ T6306] RBP: 00007f08f93f20a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.906416][ T6306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.914415][ T6306] R13: 000000000000006e R14: 00007f08f8704038 R15: 00007fff55193898 [ 97.922436][ T6306] [ 97.972337][ T6313] warning: `syz.0.375' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.045018][ T6317] netlink: 'syz.3.376': attribute type 1 has an invalid length. [ 98.113250][ T6319] FAULT_INJECTION: forcing a failure. [ 98.113250][ T6319] name failslab, interval 1, probability 0, space 0, times 0 [ 98.132951][ T6319] CPU: 0 PID: 6319 Comm: syz.2.377 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 98.142980][ T6319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.153065][ T6319] Call Trace: [ 98.156365][ T6319] [ 98.159311][ T6319] dump_stack_lvl+0x241/0x360 [ 98.164021][ T6319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.169250][ T6319] ? __pfx__printk+0x10/0x10 [ 98.173882][ T6319] ? ref_tracker_alloc+0x332/0x490 [ 98.179026][ T6319] should_fail_ex+0x3b0/0x4e0 [ 98.183734][ T6319] ? skb_clone+0x20c/0x390 [ 98.188178][ T6319] should_failslab+0x9/0x20 [ 98.192712][ T6319] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 98.198114][ T6319] skb_clone+0x20c/0x390 [ 98.202388][ T6319] __netlink_deliver_tap+0x3cc/0x7c0 [ 98.207710][ T6319] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.212932][ T6319] netlink_deliver_tap+0x19d/0x1b0 [ 98.218067][ T6319] netlink_unicast+0x7b8/0x980 [ 98.222861][ T6319] ? __pfx_netlink_unicast+0x10/0x10 [ 98.228167][ T6319] ? __virt_addr_valid+0x183/0x520 [ 98.233307][ T6319] ? __check_object_size+0x49c/0x900 [ 98.238621][ T6319] ? bpf_lsm_netlink_send+0x9/0x10 [ 98.243758][ T6319] netlink_sendmsg+0x8db/0xcb0 [ 98.248565][ T6319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.253880][ T6319] ? __import_iovec+0x536/0x820 [ 98.258746][ T6319] ? aa_sock_msg_perm+0x91/0x160 [ 98.263714][ T6319] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 98.269017][ T6319] ? security_socket_sendmsg+0x87/0xb0 [ 98.274226][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 98.274478][ T6319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.288527][ T6319] __sock_sendmsg+0x221/0x270 [ 98.293237][ T6319] ____sys_sendmsg+0x525/0x7d0 [ 98.298039][ T6319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.303370][ T6319] __sys_sendmsg+0x2b0/0x3a0 [ 98.307989][ T6319] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.313121][ T6319] ? vfs_write+0x7c4/0xc90 [ 98.317700][ T6319] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.324051][ T6319] ? do_syscall_64+0x100/0x230 [ 98.328843][ T6319] ? do_syscall_64+0xb6/0x230 [ 98.333568][ T6319] do_syscall_64+0xf3/0x230 [ 98.338101][ T6319] ? clear_bhb_loop+0x35/0x90 [ 98.342815][ T6319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.348741][ T6319] RIP: 0033:0x7f08f8575bd9 [ 98.353182][ T6319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.372907][ T6319] RSP: 002b:00007f08f9413048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.381354][ T6319] RAX: ffffffffffffffda RBX: 00007f08f8703f60 RCX: 00007f08f8575bd9 [ 98.389349][ T6319] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 98.397342][ T6319] RBP: 00007f08f94130a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.405351][ T6319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.413340][ T6319] R13: 000000000000000b R14: 00007f08f8703f60 R15: 00007fff55193898 [ 98.421354][ T6319] [ 99.817650][ T6396] FAULT_INJECTION: forcing a failure. [ 99.817650][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 99.880522][ T6396] CPU: 1 PID: 6396 Comm: syz.0.396 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 99.890560][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 99.900640][ T6396] Call Trace: [ 99.903932][ T6396] [ 99.906875][ T6396] dump_stack_lvl+0x241/0x360 [ 99.911610][ T6396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.916844][ T6396] ? __pfx__printk+0x10/0x10 [ 99.921478][ T6396] ? __mutex_trylock_common+0x183/0x2e0 [ 99.927061][ T6396] should_fail_ex+0x3b0/0x4e0 [ 99.931774][ T6396] ? __alloc_skb+0x1c3/0x440 [ 99.936393][ T6396] should_failslab+0x9/0x20 [ 99.940928][ T6396] kmem_cache_alloc_node_noprof+0x71/0x320 [ 99.946770][ T6396] ? rcu_is_watching+0x15/0xb0 [ 99.951610][ T6396] __alloc_skb+0x1c3/0x440 [ 99.956070][ T6396] ? __pfx___alloc_skb+0x10/0x10 [ 99.961127][ T6396] ? get_current_settings+0x481/0x550 [ 99.966544][ T6396] ? __pfx_get_current_settings+0x10/0x10 [ 99.972388][ T6396] mgmt_cmd_complete+0x47/0x580 [ 99.977294][ T6396] ? __pfx_lock_acquire+0x10/0x10 [ 99.982352][ T6396] ? hci_dev_get+0xdc/0x1a0 [ 99.986883][ T6396] ? mgmt_pending_find+0x109/0x130 [ 99.992029][ T6396] set_powered+0x3ab/0x5e0 [ 99.996482][ T6396] ? __pfx_set_powered+0x10/0x10 [ 100.001446][ T6396] ? __pfx_mgmt_init_hdev+0x10/0x10 [ 100.006675][ T6396] ? mgmt_init_hdev+0x453/0x470 [ 100.011556][ T6396] hci_mgmt_cmd+0xc45/0x11d0 [ 100.016200][ T6396] hci_sock_sendmsg+0x7a5/0x11c0 [ 100.021341][ T6396] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 100.026728][ T6396] ? aa_sock_msg_perm+0x91/0x160 [ 100.031693][ T6396] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 100.036997][ T6396] ? security_socket_sendmsg+0x87/0xb0 [ 100.042476][ T6396] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 100.047864][ T6396] __sock_sendmsg+0x221/0x270 [ 100.052571][ T6396] sock_write_iter+0x2dd/0x400 [ 100.057362][ T6396] ? __pfx_sock_write_iter+0x10/0x10 [ 100.062686][ T6396] ? bpf_lsm_file_permission+0x9/0x10 [ 100.068074][ T6396] ? security_file_permission+0x7f/0xa0 [ 100.073664][ T6396] vfs_write+0xa72/0xc90 [ 100.077937][ T6396] ? __pfx_sock_write_iter+0x10/0x10 [ 100.083261][ T6396] ? __pfx_vfs_write+0x10/0x10 [ 100.088079][ T6396] ksys_write+0x1a0/0x2c0 [ 100.092436][ T6396] ? __pfx_ksys_write+0x10/0x10 [ 100.097313][ T6396] ? do_syscall_64+0x100/0x230 [ 100.102116][ T6396] ? do_syscall_64+0xb6/0x230 [ 100.106901][ T6396] do_syscall_64+0xf3/0x230 [ 100.111425][ T6396] ? clear_bhb_loop+0x35/0x90 [ 100.116154][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.122166][ T6396] RIP: 0033:0x7f806d575bd9 [ 100.126601][ T6396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.146238][ T6396] RSP: 002b:00007f806e2d8048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 100.154768][ T6396] RAX: ffffffffffffffda RBX: 00007f806d704038 RCX: 00007f806d575bd9 [ 100.162769][ T6396] RDX: 0000000000000007 RSI: 0000000020000040 RDI: 0000000000000004 [ 100.170764][ T6396] RBP: 00007f806e2d80a0 R08: 0000000000000000 R09: 0000000000000000 [ 100.178754][ T6396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.186750][ T6396] R13: 000000000000006e R14: 00007f806d704038 R15: 00007ffd93982958 [ 100.194770][ T6396] [ 100.228671][ T6403] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 100.808142][ T6438] FAULT_INJECTION: forcing a failure. [ 100.808142][ T6438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.851152][ T6438] CPU: 0 PID: 6438 Comm: syz.3.405 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 100.861271][ T6438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.871439][ T6438] Call Trace: [ 100.874741][ T6438] [ 100.877706][ T6438] dump_stack_lvl+0x241/0x360 [ 100.882431][ T6438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.887660][ T6438] ? __pfx__printk+0x10/0x10 [ 100.892278][ T6438] ? snprintf+0xda/0x120 [ 100.896561][ T6438] should_fail_ex+0x3b0/0x4e0 [ 100.901273][ T6438] _copy_to_user+0x2f/0xb0 [ 100.905723][ T6438] simple_read_from_buffer+0xca/0x150 [ 100.911217][ T6438] proc_fail_nth_read+0x1e9/0x250 [ 100.916358][ T6438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.921929][ T6438] ? rw_verify_area+0x514/0x6b0 [ 100.926806][ T6438] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.932382][ T6438] vfs_read+0x204/0xbd0 [ 100.936573][ T6438] ? __pfx_lock_release+0x10/0x10 [ 100.941643][ T6438] ? __pfx_vfs_read+0x10/0x10 [ 100.946352][ T6438] ? __fget_files+0x29/0x470 [ 100.950976][ T6438] ? __fget_files+0x3f6/0x470 [ 100.955698][ T6438] ksys_read+0x1a0/0x2c0 [ 100.959987][ T6438] ? __pfx_ksys_read+0x10/0x10 [ 100.964775][ T6438] ? do_syscall_64+0x100/0x230 [ 100.969928][ T6438] ? do_syscall_64+0xb6/0x230 [ 100.974641][ T6438] do_syscall_64+0xf3/0x230 [ 100.979175][ T6438] ? clear_bhb_loop+0x35/0x90 [ 100.983888][ T6438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.989895][ T6438] RIP: 0033:0x7f8a9cf746bc [ 100.994330][ T6438] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 101.013957][ T6438] RSP: 002b:00007f8a9dc6f040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.022397][ T6438] RAX: ffffffffffffffda RBX: 00007f8a9d104038 RCX: 00007f8a9cf746bc [ 101.030393][ T6438] RDX: 000000000000000f RSI: 00007f8a9dc6f0b0 RDI: 0000000000000004 [ 101.038386][ T6438] RBP: 00007f8a9dc6f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.046383][ T6438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.054380][ T6438] R13: 000000000000006e R14: 00007f8a9d104038 R15: 00007ffc493dd408 [ 101.062409][ T6438] [ 101.217539][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 102.262933][ T6499] FAULT_INJECTION: forcing a failure. [ 102.262933][ T6499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.302272][ T6499] CPU: 0 PID: 6499 Comm: syz.3.423 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 102.312479][ T6499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.322836][ T6499] Call Trace: [ 102.326137][ T6499] [ 102.329088][ T6499] dump_stack_lvl+0x241/0x360 [ 102.333809][ T6499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.339049][ T6499] ? __pfx__printk+0x10/0x10 [ 102.343676][ T6499] ? __check_object_size+0x77/0x900 [ 102.348944][ T6499] should_fail_ex+0x3b0/0x4e0 [ 102.353664][ T6499] _copy_to_user+0x2f/0xb0 [ 102.358110][ T6499] copy_to_sockptr+0x65/0xa0 [ 102.362733][ T6499] do_ipv6_getsockopt+0x1c53/0x3830 [ 102.367958][ T6499] ? __lock_acquire+0x1346/0x1fd0 [ 102.373068][ T6499] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 102.378666][ T6499] ? aa_label_sk_perm+0x4f0/0x6d0 [ 102.383748][ T6499] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 102.389174][ T6499] ? get_pid_task+0x23/0x1f0 [ 102.393803][ T6499] ? __pfx___might_resched+0x10/0x10 [ 102.399119][ T6499] ipv6_getsockopt+0x108/0x380 [ 102.403925][ T6499] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 102.409244][ T6499] ? aa_sk_perm+0x967/0xab0 [ 102.413793][ T6499] tcp_getsockopt+0x163/0x1c0 [ 102.418497][ T6499] ? __pfx_tcp_getsockopt+0x10/0x10 [ 102.423723][ T6499] ? aa_sock_opt_perm+0x79/0x120 [ 102.428783][ T6499] ? sock_common_getsockopt+0x2e/0xb0 [ 102.434175][ T6499] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 102.440085][ T6499] do_sock_getsockopt+0x373/0x850 [ 102.445134][ T6499] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 102.450698][ T6499] ? __fget_files+0x3f6/0x470 [ 102.455408][ T6499] __sys_getsockopt+0x271/0x330 [ 102.460376][ T6499] ? __pfx___sys_getsockopt+0x10/0x10 [ 102.465777][ T6499] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.472128][ T6499] ? do_syscall_64+0x100/0x230 [ 102.476920][ T6499] __x64_sys_getsockopt+0xb5/0xd0 [ 102.481972][ T6499] do_syscall_64+0xf3/0x230 [ 102.486503][ T6499] ? clear_bhb_loop+0x35/0x90 [ 102.491196][ T6499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.497106][ T6499] RIP: 0033:0x7f8a9cf75bd9 [ 102.501541][ T6499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.521428][ T6499] RSP: 002b:00007f8a9dc90048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 102.529875][ T6499] RAX: ffffffffffffffda RBX: 00007f8a9d103f60 RCX: 00007f8a9cf75bd9 [ 102.537873][ T6499] RDX: 0000000000000006 RSI: 0000000000000029 RDI: 0000000000000003 [ 102.545857][ T6499] RBP: 00007f8a9dc900a0 R08: 0000000020000240 R09: 0000000000000000 [ 102.553840][ T6499] R10: 0000000020001500 R11: 0000000000000246 R12: 0000000000000001 [ 102.561835][ T6499] R13: 000000000000000b R14: 00007f8a9d103f60 R15: 00007ffc493dd408 [ 102.569897][ T6499] [ 102.630910][ T6503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.425'. [ 102.659845][ T6503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.425'. [ 102.764895][ T6518] netlink: 'syz.2.427': attribute type 21 has an invalid length. [ 102.920181][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 103.995781][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 104.391951][ T6608] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 104.562141][ T6617] FAULT_INJECTION: forcing a failure. [ 104.562141][ T6617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.622639][ T6617] CPU: 0 PID: 6617 Comm: syz.4.457 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 104.632750][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.642827][ T6617] Call Trace: [ 104.646117][ T6617] [ 104.649092][ T6617] dump_stack_lvl+0x241/0x360 [ 104.653883][ T6617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.659123][ T6617] ? __pfx__printk+0x10/0x10 [ 104.663734][ T6617] ? __pfx_lock_release+0x10/0x10 [ 104.668786][ T6617] should_fail_ex+0x3b0/0x4e0 [ 104.673492][ T6617] _copy_from_user+0x2f/0xe0 [ 104.678096][ T6617] copy_msghdr_from_user+0xae/0x680 [ 104.683330][ T6617] ? __pfx___might_resched+0x10/0x10 [ 104.688820][ T6617] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 104.694660][ T6617] ? __might_fault+0xaa/0x120 [ 104.699361][ T6617] do_recvmmsg+0x40f/0xae0 [ 104.703810][ T6617] ? __pfx_lock_release+0x10/0x10 [ 104.708858][ T6617] ? __pfx_do_recvmmsg+0x10/0x10 [ 104.713839][ T6617] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 104.719768][ T6617] ? ksys_write+0x23e/0x2c0 [ 104.724300][ T6617] ? __pfx_lock_release+0x10/0x10 [ 104.729352][ T6617] ? vfs_write+0x7c4/0xc90 [ 104.733795][ T6617] ? __mutex_unlock_slowpath+0x21d/0x750 [ 104.739562][ T6617] ? __fget_files+0x3f6/0x470 [ 104.744275][ T6617] __x64_sys_recvmmsg+0x199/0x250 [ 104.749414][ T6617] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 104.754982][ T6617] ? do_syscall_64+0x100/0x230 [ 104.759772][ T6617] ? do_syscall_64+0xb6/0x230 [ 104.764469][ T6617] do_syscall_64+0xf3/0x230 [ 104.769098][ T6617] ? clear_bhb_loop+0x35/0x90 [ 104.773799][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.779723][ T6617] RIP: 0033:0x7f073d575bd9 [ 104.784155][ T6617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.803784][ T6617] RSP: 002b:00007f073e359048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 104.812225][ T6617] RAX: ffffffffffffffda RBX: 00007f073d704038 RCX: 00007f073d575bd9 [ 104.820217][ T6617] RDX: 03ffffffffffff67 RSI: 0000000020002440 RDI: 0000000000000004 [ 104.828215][ T6617] RBP: 00007f073e3590a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.836296][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.844293][ T6617] R13: 000000000000006e R14: 00007f073d704038 R15: 00007ffed219ee08 [ 104.852312][ T6617] [ 105.239579][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.462'. [ 105.269249][ T6635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.463'. [ 105.582874][ T6652] netlink: 'syz.2.469': attribute type 1 has an invalid length. [ 105.746043][ T6659] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.756939][ T6659] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.766661][ T6659] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.775589][ T6659] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.790902][ T6659] vxlan0: entered promiscuous mode [ 105.796055][ T6659] vxlan0: entered allmulticast mode [ 105.816489][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 105.838499][ T6663] netlink: 16 bytes leftover after parsing attributes in process `syz.1.471'. [ 105.901335][ T6659] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.910552][ T6659] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.919457][ T6659] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.928761][ T6659] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.959424][ T6673] netlink: 92 bytes leftover after parsing attributes in process `syz.2.474'. [ 106.585549][ T6705] __nla_validate_parse: 1 callbacks suppressed [ 106.585569][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 106.996923][ T6722] bond0: entered promiscuous mode [ 107.045434][ T6722] bond_slave_0: entered promiscuous mode [ 107.080676][ T6722] bond_slave_1: entered promiscuous mode [ 107.129058][ T6736] FAULT_INJECTION: forcing a failure. [ 107.129058][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 107.151051][ T6736] CPU: 1 PID: 6736 Comm: syz.2.495 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 107.161079][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.171158][ T6736] Call Trace: [ 107.174457][ T6736] [ 107.177400][ T6736] dump_stack_lvl+0x241/0x360 [ 107.182136][ T6736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.187619][ T6736] ? __pfx__printk+0x10/0x10 [ 107.192242][ T6736] should_fail_ex+0x3b0/0x4e0 [ 107.196952][ T6736] ? __alloc_skb+0x1c3/0x440 [ 107.201561][ T6736] should_failslab+0x9/0x20 [ 107.206083][ T6736] kmem_cache_alloc_node_noprof+0x71/0x320 [ 107.211902][ T6736] __alloc_skb+0x1c3/0x440 [ 107.216312][ T6736] ? __dev_queue_xmit+0x16c9/0x3d30 [ 107.221507][ T6736] ? __pfx___alloc_skb+0x10/0x10 [ 107.226439][ T6736] ? netlink_ack_tlv_len+0x6e/0x200 [ 107.231633][ T6736] netlink_ack+0x13f/0xa30 [ 107.236145][ T6736] netlink_rcv_skb+0x262/0x430 [ 107.240904][ T6736] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 107.246363][ T6736] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.251659][ T6736] ? netlink_deliver_tap+0x2e/0x1b0 [ 107.256853][ T6736] netlink_unicast+0x7ea/0x980 [ 107.261615][ T6736] ? __pfx_netlink_unicast+0x10/0x10 [ 107.266983][ T6736] ? __virt_addr_valid+0x183/0x520 [ 107.272111][ T6736] ? __check_object_size+0x49c/0x900 [ 107.277390][ T6736] ? bpf_lsm_netlink_send+0x9/0x10 [ 107.282495][ T6736] netlink_sendmsg+0x8db/0xcb0 [ 107.287269][ T6736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.292553][ T6736] ? __import_iovec+0x536/0x820 [ 107.297395][ T6736] ? aa_sock_msg_perm+0x91/0x160 [ 107.302331][ T6736] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 107.307604][ T6736] ? security_socket_sendmsg+0x87/0xb0 [ 107.313054][ T6736] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.318343][ T6736] __sock_sendmsg+0x221/0x270 [ 107.323017][ T6736] ____sys_sendmsg+0x525/0x7d0 [ 107.327778][ T6736] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.333122][ T6736] __sys_sendmsg+0x2b0/0x3a0 [ 107.337720][ T6736] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.342821][ T6736] ? vfs_write+0x7c4/0xc90 [ 107.347348][ T6736] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.353786][ T6736] ? do_syscall_64+0x100/0x230 [ 107.358546][ T6736] ? do_syscall_64+0xb6/0x230 [ 107.363309][ T6736] do_syscall_64+0xf3/0x230 [ 107.367807][ T6736] ? clear_bhb_loop+0x35/0x90 [ 107.372479][ T6736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.378365][ T6736] RIP: 0033:0x7f08f8575bd9 [ 107.382769][ T6736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.402374][ T6736] RSP: 002b:00007f08f9413048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.410781][ T6736] RAX: ffffffffffffffda RBX: 00007f08f8703f60 RCX: 00007f08f8575bd9 [ 107.418829][ T6736] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 107.426789][ T6736] RBP: 00007f08f94130a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.434746][ T6736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.442702][ T6736] R13: 000000000000000b R14: 00007f08f8703f60 R15: 00007fff55193898 [ 107.450673][ T6736] [ 107.779948][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 107.818905][ T6746] netlink: 'syz.2.499': attribute type 1 has an invalid length. [ 107.977537][ T6764] tipc: Started in network mode [ 108.015109][ T6764] tipc: Node identity , cluster identity 4711 [ 108.027451][ T6764] tipc: Failed to set node id, please configure manually [ 108.058318][ T6764] tipc: Enabling of bearer rejected, failed to enable media [ 108.086903][ T6768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.256046][ T6780] netlink: 'syz.2.508': attribute type 1 has an invalid length. [ 108.298825][ T6781] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 108.336748][ T6780] bond1: entered promiscuous mode [ 108.348348][ T6781] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 108.362619][ T6781] netlink: 9320 bytes leftover after parsing attributes in process `syz.3.509'. [ 108.363177][ T6785] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.376934][ T6781] netlink: 'syz.3.509': attribute type 1 has an invalid length. [ 108.395684][ T6781] netlink: 'syz.3.509': attribute type 2 has an invalid length. [ 108.419568][ T6781] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 108.595423][ T6797] netlink: 'syz.2.514': attribute type 1 has an invalid length. [ 108.621304][ T6798] unknown channel width for channel at 909000KHz? [ 108.668728][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.515'. [ 109.242759][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 109.306546][ T6825] netlink: 'syz.2.522': attribute type 1 has an invalid length. [ 109.493451][ T6835] veth1_macvtap: left promiscuous mode [ 109.748180][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.529'. [ 109.837633][ T6849] netlink: 'syz.4.528': attribute type 1 has an invalid length. [ 109.849313][ T6854] FAULT_INJECTION: forcing a failure. [ 109.849313][ T6854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.895411][ T6854] CPU: 0 PID: 6854 Comm: syz.3.531 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 109.905438][ T6854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 109.915525][ T6854] Call Trace: [ 109.918841][ T6854] [ 109.921787][ T6854] dump_stack_lvl+0x241/0x360 [ 109.926496][ T6854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.931817][ T6854] ? __pfx__printk+0x10/0x10 [ 109.936440][ T6854] ? __pfx_lock_release+0x10/0x10 [ 109.941495][ T6854] should_fail_ex+0x3b0/0x4e0 [ 109.946237][ T6854] _copy_to_user+0x2f/0xb0 [ 109.950678][ T6854] bpf_test_finish+0x22c/0x8b0 [ 109.955473][ T6854] ? __pfx_bpf_test_finish+0x10/0x10 [ 109.960796][ T6854] ? convert___skb_to_skb+0x41/0x620 [ 109.966111][ T6854] ? convert_skb_to___skb+0x2d3/0x510 [ 109.971513][ T6854] bpf_prog_test_run_skb+0xd06/0x13a0 [ 109.976914][ T6854] ? __pfx_lock_release+0x10/0x10 [ 109.981984][ T6854] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 109.987823][ T6854] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 109.993655][ T6854] bpf_prog_test_run+0x33a/0x3b0 [ 109.998621][ T6854] __sys_bpf+0x48d/0x810 [ 110.002901][ T6854] ? __pfx___sys_bpf+0x10/0x10 [ 110.007709][ T6854] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 110.013728][ T6854] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.020093][ T6854] ? do_syscall_64+0x100/0x230 [ 110.024900][ T6854] __x64_sys_bpf+0x7c/0x90 [ 110.029440][ T6854] do_syscall_64+0xf3/0x230 [ 110.031893][ T6864] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.033956][ T6854] ? clear_bhb_loop+0x35/0x90 [ 110.033985][ T6854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.050790][ T6854] RIP: 0033:0x7f8a9cf75bd9 [ 110.055221][ T6854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.074843][ T6854] RSP: 002b:00007f8a9dc90048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 110.083293][ T6854] RAX: ffffffffffffffda RBX: 00007f8a9d103f60 RCX: 00007f8a9cf75bd9 [ 110.091377][ T6854] RDX: 000000000000004c RSI: 0000000020000240 RDI: 000000000000000a [ 110.099374][ T6854] RBP: 00007f8a9dc900a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.107383][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.115380][ T6854] R13: 000000000000000b R14: 00007f8a9d103f60 R15: 00007ffc493dd408 [ 110.123391][ T6854] [ 110.209602][ T6859] can: request_module (can-proto-0) failed. [ 110.342240][ T6876] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 110.385118][ T6876] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.537'. [ 110.604747][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 110.749571][ T6888] ax25_connect(): syz.4.541 uses autobind, please contact jreuter@yaina.de [ 110.766924][ T6888] netlink: 60 bytes leftover after parsing attributes in process `syz.4.541'. [ 110.784949][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 110.805609][ T6888] unsupported nlmsg_type 40 [ 111.242109][ T6910] sctp: [Deprecated]: syz.1.547 (pid 6910) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.242109][ T6910] Use struct sctp_sack_info instead [ 111.464247][ T6923] batadv_slave_1: entered promiscuous mode [ 111.560725][ T6922] batadv_slave_1: left promiscuous mode [ 111.611335][ T6929] __nla_validate_parse: 3 callbacks suppressed [ 111.611354][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.552'. [ 111.751208][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.554'. [ 112.912953][ T6962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.564'. [ 112.960858][ T6962] IPVS: length: 93 != 8 [ 113.770850][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 114.420354][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.4.567'. [ 115.300462][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.578'. [ 115.486460][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.581'. [ 115.636002][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.582'. [ 115.666788][ T7009] netlink: 5056 bytes leftover after parsing attributes in process `syz.4.582'. [ 115.718820][ T7009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.582'. [ 115.887113][ T7024] bridge0: port 3(team0) entered blocking state [ 115.894602][ T7024] bridge0: port 3(team0) entered disabled state [ 115.902169][ T7024] team0: entered allmulticast mode [ 115.907883][ T7015] ax25_connect(): syz.0.584 uses autobind, please contact jreuter@yaina.de [ 115.907909][ T7024] team_slave_0: entered allmulticast mode [ 115.924627][ T7024] team_slave_1: entered allmulticast mode [ 115.946589][ T7024] team0: entered promiscuous mode [ 115.977231][ T7024] team_slave_0: entered promiscuous mode [ 116.008616][ T7024] team_slave_1: entered promiscuous mode [ 116.017993][ T7024] bridge0: port 3(team0) entered blocking state [ 116.024672][ T7024] bridge0: port 3(team0) entered forwarding state [ 116.878569][ T7025] syz.4.586 (7025) used greatest stack depth: 18384 bytes left [ 117.122986][ T7054] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 117.179191][ T7054] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 117.196571][ T7054] gretap1: entered promiscuous mode [ 117.216479][ T7054] gretap1: entered allmulticast mode [ 118.475407][ T7125] __nla_validate_parse: 4 callbacks suppressed [ 118.475435][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 118.542659][ T7125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.614'. [ 118.647561][ T7120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'. [ 118.734136][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 119.181858][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 119.491026][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 119.710093][ T7178] FAULT_INJECTION: forcing a failure. [ 119.710093][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 119.720370][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.634'. [ 119.733559][ T5103] Bluetooth: hci4: command 0x0405 tx timeout [ 119.745875][ T7178] CPU: 0 PID: 7178 Comm: syz.0.635 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 119.756082][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 119.766159][ T7178] Call Trace: [ 119.769542][ T7178] [ 119.772495][ T7178] dump_stack_lvl+0x241/0x360 [ 119.777206][ T7178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.777944][ T7182] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 119.782415][ T7178] ? __pfx__printk+0x10/0x10 [ 119.782472][ T7178] ? stack_trace_save+0x118/0x1d0 [ 119.782497][ T7178] should_fail_ex+0x3b0/0x4e0 [ 119.782524][ T7178] ? __alloc_skb+0x1c3/0x440 [ 119.808322][ T7178] should_failslab+0x9/0x20 [ 119.812858][ T7178] kmem_cache_alloc_node_noprof+0x71/0x320 [ 119.818718][ T7178] __alloc_skb+0x1c3/0x440 [ 119.823165][ T7178] ? __pfx___mutex_lock+0x10/0x10 [ 119.828311][ T7178] ? netlink_recvmsg+0x60a/0x11d0 [ 119.833388][ T7178] ? __pfx___alloc_skb+0x10/0x10 [ 119.838368][ T7178] netlink_dump+0x233/0xe50 [ 119.842917][ T7178] ? __pfx_netlink_dump+0x10/0x10 [ 119.848016][ T7178] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 119.854053][ T7178] ? lockdep_hardirqs_on+0x99/0x150 [ 119.859289][ T7178] ? netlink_recvmsg+0x60a/0x11d0 [ 119.864346][ T7178] ? kmem_cache_free+0x145/0x350 [ 119.869315][ T7178] netlink_recvmsg+0x6bb/0x11d0 [ 119.874385][ T7178] ? __pfx_netlink_recvmsg+0x10/0x10 [ 119.879721][ T7178] ? __pfx___might_resched+0x10/0x10 [ 119.885047][ T7178] ? iovec_from_user+0x61/0x240 [ 119.889930][ T7178] ? __import_iovec+0x361/0x820 [ 119.894808][ T7178] ? __pfx_netlink_recvmsg+0x10/0x10 [ 119.900138][ T7178] sock_recvmsg_nosec+0x18e/0x1d0 [ 119.905201][ T7178] ____sys_recvmsg+0x3c0/0x470 [ 119.910024][ T7178] ? __pfx_____sys_recvmsg+0x10/0x10 [ 119.915357][ T7178] ? __might_fault+0xaa/0x120 [ 119.920072][ T7178] do_recvmmsg+0x474/0xae0 [ 119.924523][ T7178] ? __pfx_lock_release+0x10/0x10 [ 119.929575][ T7178] ? __pfx_do_recvmmsg+0x10/0x10 [ 119.934577][ T7178] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 119.940503][ T7178] ? ksys_write+0x23e/0x2c0 [ 119.945036][ T7178] ? __pfx_lock_release+0x10/0x10 [ 119.950111][ T7178] ? vfs_write+0x7c4/0xc90 [ 119.954564][ T7178] ? __mutex_unlock_slowpath+0x21d/0x750 [ 119.960325][ T7178] ? __fget_files+0x3f6/0x470 [ 119.960400][ T7191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.965026][ T7178] __x64_sys_recvmmsg+0x199/0x250 [ 119.979894][ T7178] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 119.985452][ T7178] ? do_syscall_64+0x100/0x230 [ 119.990252][ T7178] ? do_syscall_64+0xb6/0x230 [ 119.994930][ T7178] do_syscall_64+0xf3/0x230 [ 119.999439][ T7178] ? clear_bhb_loop+0x35/0x90 [ 120.004121][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.010036][ T7178] RIP: 0033:0x7f806d575bd9 [ 120.014443][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.029350][ T7191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.034027][ T7178] RSP: 002b:00007f806e2f9048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 120.034068][ T7178] RAX: ffffffffffffffda RBX: 00007f806d703f60 RCX: 00007f806d575bd9 [ 120.034081][ T7178] RDX: 0000000000000002 RSI: 0000000020004840 RDI: 0000000000000003 [ 120.034092][ T7178] RBP: 00007f806e2f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.034103][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.034114][ T7178] R13: 000000000000000b R14: 00007f806d703f60 R15: 00007ffd93982958 [ 120.034142][ T7178] [ 120.173957][ T7175] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 120.571988][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 120.641743][ T7218] FAULT_INJECTION: forcing a failure. [ 120.641743][ T7218] name failslab, interval 1, probability 0, space 0, times 0 [ 120.690414][ T7218] CPU: 0 PID: 7218 Comm: syz.2.647 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 120.700446][ T7218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 120.710532][ T7218] Call Trace: [ 120.713833][ T7218] [ 120.716787][ T7218] dump_stack_lvl+0x241/0x360 [ 120.721504][ T7218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.726740][ T7218] ? __pfx__printk+0x10/0x10 [ 120.731419][ T7218] ? netlink_insert+0x10b7/0x14b0 [ 120.736598][ T7218] should_fail_ex+0x3b0/0x4e0 [ 120.741311][ T7218] ? __alloc_skb+0x1c3/0x440 [ 120.745940][ T7218] should_failslab+0x9/0x20 [ 120.750569][ T7218] kmem_cache_alloc_node_noprof+0x71/0x320 [ 120.756417][ T7218] __alloc_skb+0x1c3/0x440 [ 120.760870][ T7218] ? __pfx___alloc_skb+0x10/0x10 [ 120.765840][ T7218] ? netlink_autobind+0xd6/0x2f0 [ 120.770804][ T7218] ? netlink_autobind+0x2b0/0x2f0 [ 120.775864][ T7218] netlink_sendmsg+0x631/0xcb0 [ 120.780681][ T7218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.785995][ T7218] ? __import_iovec+0x536/0x820 [ 120.790843][ T7218] ? aa_sock_msg_perm+0x91/0x160 [ 120.795777][ T7218] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 120.801055][ T7218] ? security_socket_sendmsg+0x87/0xb0 [ 120.806514][ T7218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.811792][ T7218] __sock_sendmsg+0x221/0x270 [ 120.816469][ T7218] ____sys_sendmsg+0x525/0x7d0 [ 120.821229][ T7218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.826515][ T7218] __sys_sendmsg+0x2b0/0x3a0 [ 120.831098][ T7218] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.836196][ T7218] ? vfs_write+0x7c4/0xc90 [ 120.840629][ T7218] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.846946][ T7218] ? do_syscall_64+0x100/0x230 [ 120.851707][ T7218] ? do_syscall_64+0xb6/0x230 [ 120.856379][ T7218] do_syscall_64+0xf3/0x230 [ 120.860875][ T7218] ? clear_bhb_loop+0x35/0x90 [ 120.865541][ T7218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.871427][ T7218] RIP: 0033:0x7f08f8575bd9 [ 120.875832][ T7218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.895426][ T7218] RSP: 002b:00007f08f9413048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.903848][ T7218] RAX: ffffffffffffffda RBX: 00007f08f8703f60 RCX: 00007f08f8575bd9 [ 120.911825][ T7218] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 120.919810][ T7218] RBP: 00007f08f94130a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.927795][ T7218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.935765][ T7218] R13: 000000000000000b R14: 00007f08f8703f60 R15: 00007fff55193898 [ 120.943740][ T7218] [ 121.016004][ T7234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.649'. [ 121.282229][ T7226] validate_nla: 1 callbacks suppressed [ 121.282248][ T7226] netlink: 'syz.4.649': attribute type 16 has an invalid length. [ 121.304560][ T7226] netlink: 'syz.4.649': attribute type 17 has an invalid length. [ 121.352481][ T5146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.570108][ T7250] netlink: 172 bytes leftover after parsing attributes in process `syz.0.657'. [ 121.649213][ T7254] netlink: 'syz.4.658': attribute type 3 has an invalid length. [ 121.941687][ T5143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 122.416531][ T7284] netlink: 'syz.4.668': attribute type 1 has an invalid length. [ 123.789939][ T7334] __nla_validate_parse: 5 callbacks suppressed [ 123.789958][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 124.023789][ T7345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.142957][ T7348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.691'. [ 125.019092][ T7376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 125.090528][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.204160][ T7387] FAULT_INJECTION: forcing a failure. [ 125.204160][ T7387] name failslab, interval 1, probability 0, space 0, times 0 [ 125.250629][ T7387] CPU: 0 PID: 7387 Comm: syz.4.706 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 125.260656][ T7387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 125.270709][ T7387] Call Trace: [ 125.274027][ T7387] [ 125.276974][ T7387] dump_stack_lvl+0x241/0x360 [ 125.281652][ T7387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.286844][ T7387] ? __pfx__printk+0x10/0x10 [ 125.291429][ T7387] ? __lock_acquire+0x1346/0x1fd0 [ 125.296448][ T7387] should_fail_ex+0x3b0/0x4e0 [ 125.301166][ T7387] ? __alloc_skb+0x1c3/0x440 [ 125.305755][ T7387] should_failslab+0x9/0x20 [ 125.310259][ T7387] kmem_cache_alloc_node_noprof+0x71/0x320 [ 125.316084][ T7387] __alloc_skb+0x1c3/0x440 [ 125.320499][ T7387] ? validate_chain+0x11e/0x5900 [ 125.325438][ T7387] ? __pfx___alloc_skb+0x10/0x10 [ 125.330377][ T7387] alloc_skb_with_frags+0xc3/0x770 [ 125.335488][ T7387] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 125.340894][ T7387] sock_alloc_send_pskb+0x91a/0xa60 [ 125.346104][ T7387] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 125.351823][ T7387] ? aa_sk_perm+0x967/0xab0 [ 125.356493][ T7387] hci_sock_sendmsg+0x22b/0x11c0 [ 125.361430][ T7387] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 125.366796][ T7387] ? aa_sock_msg_perm+0x91/0x160 [ 125.371748][ T7387] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 125.377022][ T7387] ? security_socket_sendmsg+0x87/0xb0 [ 125.382665][ T7387] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 125.388024][ T7387] __sock_sendmsg+0x221/0x270 [ 125.392700][ T7387] sock_write_iter+0x2dd/0x400 [ 125.397460][ T7387] ? __pfx_sock_write_iter+0x10/0x10 [ 125.402760][ T7387] ? bpf_lsm_file_permission+0x9/0x10 [ 125.408123][ T7387] ? security_file_permission+0x7f/0xa0 [ 125.413670][ T7387] vfs_write+0xa72/0xc90 [ 125.417909][ T7387] ? __pfx_sock_write_iter+0x10/0x10 [ 125.423188][ T7387] ? __pfx_vfs_write+0x10/0x10 [ 125.427955][ T7387] ksys_write+0x1a0/0x2c0 [ 125.432298][ T7387] ? __pfx_ksys_write+0x10/0x10 [ 125.437158][ T7387] ? do_syscall_64+0x100/0x230 [ 125.441932][ T7387] ? do_syscall_64+0xb6/0x230 [ 125.446614][ T7387] do_syscall_64+0xf3/0x230 [ 125.451116][ T7387] ? clear_bhb_loop+0x35/0x90 [ 125.455784][ T7387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.461673][ T7387] RIP: 0033:0x7f073d575bd9 [ 125.466081][ T7387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.485788][ T7387] RSP: 002b:00007f073e37a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 125.494291][ T7387] RAX: ffffffffffffffda RBX: 00007f073d703f60 RCX: 00007f073d575bd9 [ 125.502253][ T7387] RDX: 0000000000000007 RSI: 0000000020000100 RDI: 0000000000000004 [ 125.510219][ T7387] RBP: 00007f073e37a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.518192][ T7387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.526162][ T7387] R13: 000000000000000b R14: 00007f073d703f60 R15: 00007ffed219ee08 [ 125.534140][ T7387] [ 125.893376][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 126.130504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.431150][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 126.842630][ T7428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.722'. [ 127.049697][ T7435] netlink: 'syz.0.724': attribute type 5 has an invalid length. [ 128.079984][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.729'. [ 128.401635][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.734'. [ 128.448493][ T7463] netlink: 36 bytes leftover after parsing attributes in process `syz.4.735'. [ 129.095201][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.742'. [ 129.612317][ T7506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.748'. [ 130.493045][ T5103] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 130.502439][ T5103] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 130.515198][ T5103] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 130.524524][ T5103] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 130.569976][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 130.578358][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 130.616955][ T7530] netlink: 56 bytes leftover after parsing attributes in process `syz.0.756'. [ 130.808960][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.944879][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.009191][ T7533] netlink: 24 bytes leftover after parsing attributes in process `syz.0.757'. [ 131.109297][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.331973][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.523710][ T7527] chnl_net:caif_netlink_parms(): no params data found [ 131.632561][ T7548] netlink: 36 bytes leftover after parsing attributes in process `syz.3.760'. [ 131.721004][ T35] team0: left allmulticast mode [ 131.738590][ T35] team_slave_0: left allmulticast mode [ 131.764960][ T35] team_slave_1: left allmulticast mode [ 131.775668][ T35] team0: left promiscuous mode [ 131.782563][ T35] team_slave_0: left promiscuous mode [ 131.789855][ T35] team_slave_1: left promiscuous mode [ 131.801350][ T35] bridge0: port 3(team0) entered disabled state [ 131.824820][ T35] bridge_slave_1: left allmulticast mode [ 131.840398][ T35] bridge_slave_1: left promiscuous mode [ 131.847100][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.868229][ T35] bridge_slave_0: left allmulticast mode [ 131.874764][ T35] bridge_slave_0: left promiscuous mode [ 131.890496][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.018751][ T7560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 132.038787][ T7560] IPVS: set_ctl: invalid protocol: 136 172.30.0.4:20004 [ 132.058126][ T932] IPVS: starting estimator thread 0... [ 132.170617][ T7561] IPVS: using max 20 ests per chain, 48000 per kthread [ 132.299264][ T7563] netlink: 'syz.1.765': attribute type 9 has an invalid length. [ 132.309641][ T7563] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.765'. [ 132.438853][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.453330][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.464740][ T35] bond0 (unregistering): Released all slaves [ 132.612316][ T4492] Bluetooth: hci1: command tx timeout [ 132.789014][ T7574] netlink: 60 bytes leftover after parsing attributes in process `syz.2.767'. [ 132.860929][ T7527] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.900126][ T7527] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.917822][ T7527] bridge_slave_0: entered allmulticast mode [ 132.927462][ T7527] bridge_slave_0: entered promiscuous mode [ 132.955039][ T7527] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.975700][ T7527] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.010705][ T7527] bridge_slave_1: entered allmulticast mode [ 133.021674][ T7527] bridge_slave_1: entered promiscuous mode [ 133.255725][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.262286][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.286265][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.774'. [ 133.346919][ T7527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.383803][ T7527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.556005][ T7527] team0: Port device team_slave_0 added [ 133.557899][ T7612] netlink: 300 bytes leftover after parsing attributes in process `syz.3.778'. [ 133.758788][ T7527] team0: Port device team_slave_1 added [ 133.950019][ T35] hsr_slave_0: left promiscuous mode [ 133.963070][ T35] hsr_slave_1: left promiscuous mode [ 133.978173][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.989508][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.012423][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.020106][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.089810][ T35] veth1_macvtap: left promiscuous mode [ 134.104405][ T35] veth0_macvtap: left promiscuous mode [ 134.121976][ T35] veth1_vlan: left promiscuous mode [ 134.129977][ T35] veth0_vlan: left promiscuous mode [ 134.690650][ T4492] Bluetooth: hci1: command tx timeout [ 134.833263][ T35] team0 (unregistering): Port device team_slave_1 removed [ 134.874477][ T35] team0 (unregistering): Port device team_slave_0 removed [ 135.519314][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.550725][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.626797][ T7527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.651965][ T7645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.783'. [ 135.684050][ T7527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.697405][ T7527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.770318][ T7527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.059977][ T7527] hsr_slave_0: entered promiscuous mode [ 136.120649][ T7527] hsr_slave_1: entered promiscuous mode [ 136.139291][ T7527] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.172944][ T7527] Cannot create hsr debugfs directory [ 136.398821][ T7674] netlink: 28 bytes leftover after parsing attributes in process `syz.2.793'. [ 136.425299][ T7682] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 136.525596][ T7688] netlink: 830 bytes leftover after parsing attributes in process `syz.1.795'. [ 136.774259][ T4492] Bluetooth: hci1: command tx timeout [ 136.822955][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 136.905701][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 137.557832][ T7715] netlink: 'syz.3.802': attribute type 9 has an invalid length. [ 137.589377][ T7715] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.802'. [ 137.823838][ T7527] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 137.864216][ T7527] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 137.884186][ T7527] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 137.907937][ T7527] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 138.217990][ T7527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.273256][ T7527] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.317664][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.324899][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.362313][ T932] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.369527][ T932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.579148][ T7527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.821088][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.811'. [ 138.856994][ T4492] Bluetooth: hci1: command tx timeout [ 139.096251][ T7763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.813'. [ 139.197064][ T7527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.040915][ T7807] FAULT_INJECTION: forcing a failure. [ 140.040915][ T7807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.136216][ T7527] veth0_vlan: entered promiscuous mode [ 140.138258][ T7807] CPU: 1 PID: 7807 Comm: syz.1.821 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 140.151697][ T7807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 140.161785][ T7807] Call Trace: [ 140.165080][ T7807] [ 140.168031][ T7807] dump_stack_lvl+0x241/0x360 [ 140.172742][ T7807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.178398][ T7807] ? __pfx__printk+0x10/0x10 [ 140.183014][ T7807] ? __pfx_lock_release+0x10/0x10 [ 140.188057][ T7807] ? aa_label_sk_perm+0x4f0/0x6d0 [ 140.193126][ T7807] should_fail_ex+0x3b0/0x4e0 [ 140.197836][ T7807] _copy_from_iter+0x1f6/0x1960 [ 140.202711][ T7807] ? __pfx___might_resched+0x10/0x10 [ 140.207993][ T7807] ? __pfx__copy_from_iter+0x10/0x10 [ 140.213287][ T7807] bcm_sendmsg+0x157/0x7a0 [ 140.217710][ T7807] ? __pfx_bcm_sendmsg+0x10/0x10 [ 140.222641][ T7807] ? __import_iovec+0x536/0x820 [ 140.227478][ T7807] ? aa_sock_msg_perm+0x91/0x160 [ 140.232410][ T7807] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 140.237684][ T7807] ? security_socket_sendmsg+0x87/0xb0 [ 140.243133][ T7807] ? __pfx_bcm_sendmsg+0x10/0x10 [ 140.248057][ T7807] __sock_sendmsg+0x221/0x270 [ 140.252734][ T7807] ____sys_sendmsg+0x525/0x7d0 [ 140.257500][ T7807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.262791][ T7807] __sys_sendmsg+0x2b0/0x3a0 [ 140.267376][ T7807] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.272477][ T7807] ? vfs_write+0x7c4/0xc90 [ 140.276914][ T7807] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.283232][ T7807] ? do_syscall_64+0x100/0x230 [ 140.287993][ T7807] ? do_syscall_64+0xb6/0x230 [ 140.292664][ T7807] do_syscall_64+0xf3/0x230 [ 140.297161][ T7807] ? clear_bhb_loop+0x35/0x90 [ 140.301829][ T7807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.307716][ T7807] RIP: 0033:0x7f2bccf75bd9 [ 140.312119][ T7807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.331713][ T7807] RSP: 002b:00007f2bcddce048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.340114][ T7807] RAX: ffffffffffffffda RBX: 00007f2bcd104038 RCX: 00007f2bccf75bd9 [ 140.348072][ T7807] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004 [ 140.356048][ T7807] RBP: 00007f2bcddce0a0 R08: 0000000000000000 R09: 0000000000000000 [ 140.364024][ T7807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.372013][ T7807] R13: 000000000000006e R14: 00007f2bcd104038 R15: 00007ffcc5a733b8 [ 140.380004][ T7807] [ 140.385538][ T7527] veth1_vlan: entered promiscuous mode [ 140.438337][ T7527] veth0_macvtap: entered promiscuous mode [ 140.445395][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 140.459788][ T7527] veth1_macvtap: entered promiscuous mode [ 140.545764][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.582234][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.615114][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.636773][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.647876][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.678101][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.699314][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.730667][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.768435][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.825150][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.860341][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.892842][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.920748][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 140.923852][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.017740][ T7527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.040366][ T7527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.076316][ T7527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.151780][ T7835] netlink: 52 bytes leftover after parsing attributes in process `syz.1.828'. [ 141.152314][ T7527] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.191867][ T7527] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.213653][ T7527] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.229192][ T7527] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.268688][ T7838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.828'. [ 141.642990][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.691755][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.757293][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.785024][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.669539][ T7902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.845'. [ 142.710078][ T7908] netlink: 16 bytes leftover after parsing attributes in process `syz.1.847'. [ 142.800492][ T7911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.849'. [ 143.460180][ T7938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.856'. [ 143.528435][ T5103] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.543249][ T5103] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.561742][ T5103] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.569619][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'. [ 143.580010][ T5103] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.589044][ T5103] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.600080][ T5103] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.831089][ T7953] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 144.046524][ T7941] chnl_net:caif_netlink_parms(): no params data found [ 144.357196][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.395468][ T7974] FAULT_INJECTION: forcing a failure. [ 144.395468][ T7974] name failslab, interval 1, probability 0, space 0, times 0 [ 144.418946][ T7974] CPU: 1 PID: 7974 Comm: syz.3.868 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 144.428970][ T7974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 144.439039][ T7974] Call Trace: [ 144.442331][ T7974] [ 144.445269][ T7974] dump_stack_lvl+0x241/0x360 [ 144.449969][ T7974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.455191][ T7974] ? __pfx__printk+0x10/0x10 [ 144.459806][ T7974] ? __pfx___might_resched+0x10/0x10 [ 144.465112][ T7974] ? __asan_memset+0x23/0x50 [ 144.469719][ T7974] should_fail_ex+0x3b0/0x4e0 [ 144.474423][ T7974] ? sctp_stream_init_ext+0x56/0x180 [ 144.479736][ T7974] should_failslab+0x9/0x20 [ 144.484264][ T7974] kmalloc_trace_noprof+0x6c/0x2c0 [ 144.489400][ T7974] sctp_stream_init_ext+0x56/0x180 [ 144.494532][ T7974] sctp_sendmsg_to_asoc+0x12fd/0x1800 [ 144.499914][ T7974] ? sctp_v6_to_sk_saddr+0x101/0x1c0 [ 144.505225][ T7974] ? __asan_memcpy+0x40/0x70 [ 144.509826][ T7974] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 144.515227][ T7974] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 144.520960][ T7974] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 144.526434][ T7974] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 144.532253][ T7974] ? sctp_sendmsg+0xbb9/0x3520 [ 144.537129][ T7974] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 144.542687][ T7974] ? security_sctp_bind_connect+0x90/0xb0 [ 144.548424][ T7974] sctp_sendmsg+0x1bc3/0x3520 [ 144.553141][ T7974] ? __pfx_sctp_sendmsg+0x10/0x10 [ 144.558184][ T7974] ? __pfx_aa_sk_perm+0x10/0x10 [ 144.563065][ T7974] ? inet_sendmsg+0x330/0x390 [ 144.567757][ T7974] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 144.573052][ T7974] ? security_socket_sendmsg+0x87/0xb0 [ 144.578703][ T7974] __sock_sendmsg+0x1a6/0x270 [ 144.583416][ T7974] __sys_sendto+0x3a4/0x4f0 [ 144.587939][ T7974] ? __pfx___sys_sendto+0x10/0x10 [ 144.593004][ T7974] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 144.599006][ T7974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 144.605362][ T7974] __x64_sys_sendto+0xde/0x100 [ 144.610143][ T7974] do_syscall_64+0xf3/0x230 [ 144.614667][ T7974] ? clear_bhb_loop+0x35/0x90 [ 144.619365][ T7974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.625281][ T7974] RIP: 0033:0x7f8a9cf75bd9 [ 144.629707][ T7974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.649330][ T7974] RSP: 002b:00007f8a9dc90048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 144.657848][ T7974] RAX: ffffffffffffffda RBX: 00007f8a9d103f60 RCX: 00007f8a9cf75bd9 [ 144.665841][ T7974] RDX: 000000000001a000 RSI: 0000000020000500 RDI: 0000000000000003 [ 144.673826][ T7974] RBP: 00007f8a9dc900a0 R08: 0000000020000100 R09: 000000000000001c [ 144.681808][ T7974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.689792][ T7974] R13: 000000000000000b R14: 00007f8a9d103f60 R15: 00007ffc493dd408 [ 144.697892][ T7974] [ 144.881393][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.935865][ T7941] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.964626][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 144.981443][ T7941] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.005710][ T7941] bridge_slave_0: entered allmulticast mode [ 145.021777][ T7941] bridge_slave_0: entered promiscuous mode [ 145.051679][ T7941] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.058831][ T7941] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.097998][ T7941] bridge_slave_1: entered allmulticast mode [ 145.130567][ T7941] bridge_slave_1: entered promiscuous mode [ 145.200059][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.328837][ T7941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.415407][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.483498][ T7941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.493986][ T7997] FAULT_INJECTION: forcing a failure. [ 145.493986][ T7997] name failslab, interval 1, probability 0, space 0, times 0 [ 145.515428][ T7997] CPU: 1 PID: 7997 Comm: syz.3.877 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 145.525461][ T7997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 145.535535][ T7997] Call Trace: [ 145.538836][ T7997] [ 145.541782][ T7997] dump_stack_lvl+0x241/0x360 [ 145.546493][ T7997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.551716][ T7997] ? __pfx__printk+0x10/0x10 [ 145.556339][ T7997] should_fail_ex+0x3b0/0x4e0 [ 145.561302][ T7997] ? rtnl_newlink+0xf2/0x20a0 [ 145.566016][ T7997] should_failslab+0x9/0x20 [ 145.570633][ T7997] kmalloc_trace_noprof+0x6c/0x2c0 [ 145.575809][ T7997] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.580860][ T7997] rtnl_newlink+0xf2/0x20a0 [ 145.585406][ T7997] ? __pfx_lock_acquire+0x10/0x10 [ 145.590462][ T7997] ? __mutex_lock+0x99b/0xd70 [ 145.595245][ T7997] ? __pfx_lock_release+0x10/0x10 [ 145.600296][ T7997] ? do_raw_spin_lock+0x14f/0x370 [ 145.605353][ T7997] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.610400][ T7997] ? do_raw_spin_unlock+0x13c/0x8b0 [ 145.615628][ T7997] ? __mutex_lock+0x9a5/0xd70 [ 145.620331][ T7997] ? __mutex_lock+0x527/0xd70 [ 145.625030][ T7997] ? rtnetlink_rcv_msg+0x842/0x1180 [ 145.630253][ T7997] ? __pfx___mutex_lock+0x10/0x10 [ 145.635308][ T7997] ? __pfx_rtnl_newlink+0x10/0x10 [ 145.640355][ T7997] rtnetlink_rcv_msg+0x89b/0x1180 [ 145.645409][ T7997] ? rtnetlink_rcv_msg+0x208/0x1180 [ 145.650637][ T7997] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.656133][ T7997] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 145.662228][ T7997] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.668583][ T7997] ? __local_bh_enable_ip+0x168/0x200 [ 145.673973][ T7997] ? lockdep_hardirqs_on+0x99/0x150 [ 145.679200][ T7997] ? __local_bh_enable_ip+0x168/0x200 [ 145.684595][ T7997] ? dev_hard_start_xmit+0x773/0x7e0 [ 145.689904][ T7997] ? __dev_queue_xmit+0x2d2/0x3d30 [ 145.695036][ T7997] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 145.700790][ T7997] ? __dev_queue_xmit+0x2d2/0x3d30 [ 145.705924][ T7997] ? __dev_queue_xmit+0x16c9/0x3d30 [ 145.711158][ T7997] ? __dev_queue_xmit+0x2d2/0x3d30 [ 145.716297][ T7997] ? ref_tracker_free+0x643/0x7e0 [ 145.721353][ T7997] netlink_rcv_skb+0x1e3/0x430 [ 145.726144][ T7997] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 145.731632][ T7997] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 145.736969][ T7997] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.742197][ T7997] netlink_unicast+0x7ea/0x980 [ 145.747084][ T7997] ? __pfx_netlink_unicast+0x10/0x10 [ 145.752387][ T7997] ? __virt_addr_valid+0x183/0x520 [ 145.757524][ T7997] ? __check_object_size+0x49c/0x900 [ 145.762833][ T7997] ? bpf_lsm_netlink_send+0x9/0x10 [ 145.767970][ T7997] netlink_sendmsg+0x8db/0xcb0 [ 145.772768][ T7997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.778075][ T7997] ? __import_iovec+0x536/0x820 [ 145.782942][ T7997] ? aa_sock_msg_perm+0x91/0x160 [ 145.787911][ T7997] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 145.793298][ T7997] ? security_socket_sendmsg+0x87/0xb0 [ 145.798781][ T7997] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.804086][ T7997] __sock_sendmsg+0x221/0x270 [ 145.808795][ T7997] ____sys_sendmsg+0x525/0x7d0 [ 145.813605][ T7997] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.818930][ T7997] __sys_sendmsg+0x2b0/0x3a0 [ 145.823543][ T7997] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.828758][ T7997] ? vfs_write+0x7c4/0xc90 [ 145.833232][ T7997] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.839669][ T7997] ? do_syscall_64+0x100/0x230 [ 145.844459][ T7997] ? do_syscall_64+0xb6/0x230 [ 145.849167][ T7997] do_syscall_64+0xf3/0x230 [ 145.853691][ T7997] ? clear_bhb_loop+0x35/0x90 [ 145.858386][ T7997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.864300][ T7997] RIP: 0033:0x7f8a9cf75bd9 [ 145.868730][ T7997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.888356][ T7997] RSP: 002b:00007f8a9dc90048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.896800][ T7997] RAX: ffffffffffffffda RBX: 00007f8a9d103f60 RCX: 00007f8a9cf75bd9 [ 145.904793][ T7997] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 145.912779][ T7997] RBP: 00007f8a9dc900a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.920775][ T7997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.928767][ T7997] R13: 000000000000000b R14: 00007f8a9d103f60 R15: 00007ffc493dd408 [ 145.936783][ T7997] [ 145.941407][ T5103] Bluetooth: hci5: command tx timeout [ 146.101504][ T8005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.879'. [ 146.116400][ T7941] team0: Port device team_slave_0 added [ 146.134430][ T7941] team0: Port device team_slave_1 added [ 146.253519][ T7941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.280312][ T7941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.348614][ T7941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.371534][ T8011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.882'. [ 146.455694][ T8012] FAULT_INJECTION: forcing a failure. [ 146.455694][ T8012] name failslab, interval 1, probability 0, space 0, times 0 [ 146.483803][ T8012] CPU: 1 PID: 8012 Comm: syz.3.882 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 146.493828][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 146.503905][ T8012] Call Trace: [ 146.507207][ T8012] [ 146.510156][ T8012] dump_stack_lvl+0x241/0x360 [ 146.514868][ T8012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.520092][ T8012] ? __pfx__printk+0x10/0x10 [ 146.524703][ T8012] ? __pfx___might_resched+0x10/0x10 [ 146.529996][ T8012] should_fail_ex+0x3b0/0x4e0 [ 146.534694][ T8012] should_failslab+0x9/0x20 [ 146.539213][ T8012] __kmalloc_node_noprof+0xdf/0x440 [ 146.544441][ T8012] ? qdisc_alloc+0x97/0xa80 [ 146.548951][ T8012] qdisc_alloc+0x97/0xa80 [ 146.553281][ T8012] qdisc_create+0x182/0x11a0 [ 146.557888][ T8012] ? __pfx_qdisc_create+0x10/0x10 [ 146.562931][ T8012] tc_modify_qdisc+0xa26/0x1e40 [ 146.567798][ T8012] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 146.573103][ T8012] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 146.578385][ T8012] rtnetlink_rcv_msg+0x89b/0x1180 [ 146.583500][ T8012] ? rtnetlink_rcv_msg+0x208/0x1180 [ 146.588699][ T8012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.594243][ T8012] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.600219][ T8012] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.606550][ T8012] ? __local_bh_enable_ip+0x168/0x200 [ 146.611918][ T8012] ? lockdep_hardirqs_on+0x99/0x150 [ 146.617142][ T8012] ? __local_bh_enable_ip+0x168/0x200 [ 146.622518][ T8012] ? dev_hard_start_xmit+0x773/0x7e0 [ 146.627802][ T8012] ? __dev_queue_xmit+0x2d2/0x3d30 [ 146.632913][ T8012] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 146.638642][ T8012] ? __dev_queue_xmit+0x2d2/0x3d30 [ 146.643751][ T8012] ? __dev_queue_xmit+0x16c9/0x3d30 [ 146.648953][ T8012] ? __dev_queue_xmit+0x2d2/0x3d30 [ 146.654064][ T8012] ? ref_tracker_free+0x643/0x7e0 [ 146.659086][ T8012] netlink_rcv_skb+0x1e3/0x430 [ 146.663848][ T8012] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.669303][ T8012] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.674693][ T8012] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.679912][ T8012] netlink_unicast+0x7ea/0x980 [ 146.684777][ T8012] ? __pfx_netlink_unicast+0x10/0x10 [ 146.690064][ T8012] ? __virt_addr_valid+0x183/0x520 [ 146.695264][ T8012] ? __check_object_size+0x49c/0x900 [ 146.700572][ T8012] ? bpf_lsm_netlink_send+0x9/0x10 [ 146.705683][ T8012] netlink_sendmsg+0x8db/0xcb0 [ 146.710475][ T8012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.715773][ T8012] ? __import_iovec+0x536/0x820 [ 146.720616][ T8012] ? aa_sock_msg_perm+0x91/0x160 [ 146.725552][ T8012] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 146.730826][ T8012] ? security_socket_sendmsg+0x87/0xb0 [ 146.736277][ T8012] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.741551][ T8012] __sock_sendmsg+0x221/0x270 [ 146.746227][ T8012] ____sys_sendmsg+0x525/0x7d0 [ 146.750989][ T8012] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.756305][ T8012] __sys_sendmmsg+0x3b2/0x740 [ 146.761000][ T8012] ? __pfx___sys_sendmmsg+0x10/0x10 [ 146.766233][ T8012] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 146.772217][ T8012] ? ksys_write+0x23e/0x2c0 [ 146.776716][ T8012] ? __pfx_lock_release+0x10/0x10 [ 146.781744][ T8012] ? vfs_write+0x7c4/0xc90 [ 146.786154][ T8012] ? __mutex_unlock_slowpath+0x21d/0x750 [ 146.791778][ T8012] ? __pfx_vfs_write+0x10/0x10 [ 146.796551][ T8012] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.802522][ T8012] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.808838][ T8012] ? do_syscall_64+0x100/0x230 [ 146.813618][ T8012] __x64_sys_sendmmsg+0xa0/0xb0 [ 146.818482][ T8012] do_syscall_64+0xf3/0x230 [ 146.822991][ T8012] ? clear_bhb_loop+0x35/0x90 [ 146.827665][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.833559][ T8012] RIP: 0033:0x7f8a9cf75bd9 [ 146.837979][ T8012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.857586][ T8012] RSP: 002b:00007f8a9dc6f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 146.866008][ T8012] RAX: ffffffffffffffda RBX: 00007f8a9d104038 RCX: 00007f8a9cf75bd9 [ 146.873972][ T8012] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000005 [ 146.881933][ T8012] RBP: 00007f8a9dc6f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.889890][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.897850][ T8012] R13: 000000000000006e R14: 00007f8a9d104038 R15: 00007ffc493dd408 [ 146.905820][ T8012] [ 146.956426][ T7941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.985273][ T7941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.041156][ T7941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.193743][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 147.296482][ T7941] hsr_slave_0: entered promiscuous mode [ 147.311472][ T7941] hsr_slave_1: entered promiscuous mode [ 147.327582][ T7941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.353245][ T7941] Cannot create hsr debugfs directory [ 147.485046][ T50] bridge_slave_1: left allmulticast mode [ 147.494351][ T50] bridge_slave_1: left promiscuous mode [ 147.507625][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.531099][ T50] bridge_slave_0: left allmulticast mode [ 147.547220][ T50] bridge_slave_0: left promiscuous mode [ 147.557543][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.569749][ T8043] netlink: 'syz.2.892': attribute type 1 has an invalid length. [ 147.932930][ T50] dvmrp1 (unregistering): left allmulticast mode [ 147.970866][ T5103] Bluetooth: hci5: command tx timeout [ 148.135249][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.146291][ T50] bond_slave_0: left promiscuous mode [ 148.156820][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.175098][ T50] bond_slave_1: left promiscuous mode [ 148.184648][ T50] bond0 (unregistering): Released all slaves [ 149.202201][ T50] hsr_slave_0: left promiscuous mode [ 149.225607][ T50] hsr_slave_1: left promiscuous mode [ 149.245638][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.900'. [ 149.256458][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.286939][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.309649][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.327917][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.414232][ T50] veth1_macvtap: left promiscuous mode [ 149.419819][ T50] veth0_macvtap: left promiscuous mode [ 149.426290][ T50] veth1_vlan: left promiscuous mode [ 149.446787][ T50] veth0_vlan: left promiscuous mode [ 150.055798][ T5103] Bluetooth: hci5: command tx timeout [ 150.184905][ T50] team0 (unregistering): Port device team_slave_1 removed [ 150.235308][ T50] team0 (unregistering): Port device team_slave_0 removed [ 151.399765][ T7941] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 151.447779][ T7941] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 151.474527][ T7941] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 151.509022][ T7941] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.585054][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.915'. [ 151.805962][ C0] hrtimer: interrupt took 9181070 ns [ 152.184312][ T5103] Bluetooth: hci5: command tx timeout [ 153.973172][ T7941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.168796][ T7941] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.206872][ T7941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.229758][ T7941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.353437][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.360660][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.382035][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.389267][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.709554][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 160.743034][ T7941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.782480][ T7941] veth0_vlan: entered promiscuous mode [ 162.953845][ T8201] netlink: 'syz.3.924': attribute type 9 has an invalid length. [ 162.953871][ T8201] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.924'. [ 163.502189][ T4492] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.504325][ T4492] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.505026][ T4492] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.506197][ T4492] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.507325][ T4492] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 163.507780][ T4492] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 165.561554][ T5103] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 165.563103][ T5103] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 165.564119][ T5103] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 165.565153][ T5103] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 165.565837][ T5103] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 165.566191][ T5103] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 165.590490][ T4492] Bluetooth: hci0: command tx timeout [ 167.610598][ T4492] Bluetooth: hci6: command tx timeout [ 167.660445][ T4492] Bluetooth: hci0: command tx timeout [ 169.690506][ T4492] Bluetooth: hci6: command tx timeout [ 169.741818][ T4492] Bluetooth: hci0: command tx timeout [ 171.740441][ T4492] Bluetooth: hci6: command tx timeout [ 171.840389][ T4492] Bluetooth: hci0: command tx timeout [ 172.193974][ T7941] veth1_vlan: entered promiscuous mode [ 176.760257][ T4492] Bluetooth: hci6: command tx timeout [ 176.933380][ T8229] netlink: 'syz.2.929': attribute type 10 has an invalid length. [ 177.200783][ T4492] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 177.370557][ T4492] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 177.405785][ T5096] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 177.416849][ T5096] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 177.429604][ T5096] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 177.437980][ T5096] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 177.452632][ T5108] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 177.462809][ T5108] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 177.469896][ T5108] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 177.477896][ T5108] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.485725][ T5108] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 177.502415][ T5108] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 182.493837][ T5096] Bluetooth: hci8: command tx timeout [ 182.499627][ T5096] Bluetooth: hci7: command tx timeout [ 182.538231][ T8229] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.549282][ T8229] bond0: (slave team0): Enslaving as an active interface with an up link [ 182.768858][ T7941] veth0_macvtap: entered promiscuous mode [ 182.856399][ T7941] veth1_macvtap: entered promiscuous mode [ 182.996548][ T2446] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.128167][ T2446] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.169142][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.179746][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.191405][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.202156][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.212475][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.223251][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.235549][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.246013][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.257600][ T7941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.276453][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.287839][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.297745][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.308462][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.318573][ T7941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.329225][ T7941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.343353][ T7941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.371080][ T2446] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.425758][ T7941] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.434809][ T7941] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.443866][ T7941] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.452767][ T7941] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.513667][ T2446] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.856207][ T8255] chnl_net:caif_netlink_parms(): no params data found [ 183.973041][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.990805][ T2446] bridge_slave_1: left allmulticast mode [ 183.995123][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.999247][ T2446] bridge_slave_1: left promiscuous mode [ 184.010021][ T2446] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.019967][ T2446] bridge_slave_0: left allmulticast mode [ 184.026655][ T2446] bridge_slave_0: left promiscuous mode [ 184.032662][ T2446] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.336700][ T2446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.347570][ T2446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.358220][ T2446] bond0 (unregistering): Released all slaves [ 184.393206][ T8263] chnl_net:caif_netlink_parms(): no params data found [ 184.412953][ T8260] chnl_net:caif_netlink_parms(): no params data found [ 184.438826][ T2887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.447041][ T2887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.541926][ T5108] Bluetooth: hci2: command 0x0406 tx timeout [ 184.548079][ T5108] Bluetooth: hci7: command tx timeout [ 184.554627][ T5103] Bluetooth: hci8: command tx timeout [ 184.569673][ T5096] Bluetooth: hci3: command 0x0401 tx timeout [ 184.732003][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.739351][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.747319][ T8255] bridge_slave_0: entered allmulticast mode [ 184.754769][ T8255] bridge_slave_0: entered promiscuous mode [ 185.001926][ T8214] chnl_net:caif_netlink_parms(): no params data found [ 185.054449][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.062106][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.069366][ T8255] bridge_slave_1: entered allmulticast mode [ 185.077345][ T8255] bridge_slave_1: entered promiscuous mode [ 185.358045][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.366316][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.374342][ T8263] bridge_slave_0: entered allmulticast mode [ 185.382878][ T8263] bridge_slave_0: entered promiscuous mode [ 185.400670][ T8255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.466931][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.474332][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.481934][ T8263] bridge_slave_1: entered allmulticast mode [ 185.489438][ T8263] bridge_slave_1: entered promiscuous mode [ 185.512480][ T8255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.547384][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.554750][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.562320][ T8260] bridge_slave_0: entered allmulticast mode [ 185.569663][ T8260] bridge_slave_0: entered promiscuous mode [ 185.578788][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.585975][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.593504][ T8260] bridge_slave_1: entered allmulticast mode [ 185.601161][ T8260] bridge_slave_1: entered promiscuous mode [ 185.628710][ T2446] hsr_slave_0: left promiscuous mode [ 185.636034][ T2446] hsr_slave_1: left promiscuous mode [ 185.643504][ T2446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.651896][ T2446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.659677][ T2446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.668493][ T2446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.687828][ T2446] veth1_macvtap: left promiscuous mode [ 185.693478][ T2446] veth0_macvtap: left promiscuous mode [ 185.699145][ T2446] veth1_vlan: left promiscuous mode [ 185.704599][ T2446] veth0_vlan: left promiscuous mode [ 186.108520][ T2446] team0 (unregistering): Port device team_slave_1 removed [ 186.151136][ T2446] team0 (unregistering): Port device team_slave_0 removed [ 186.555114][ T8255] team0: Port device team_slave_0 added [ 186.568149][ T8255] team0: Port device team_slave_1 added [ 186.597120][ T8214] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.605139][ T8214] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.612629][ T8214] bridge_slave_0: entered allmulticast mode [ 186.620896][ T8214] bridge_slave_0: entered promiscuous mode [ 186.621039][ T4492] Bluetooth: hci7: command tx timeout [ 186.628996][ T8214] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.632995][ T5096] Bluetooth: hci8: command tx timeout [ 186.639275][ T8214] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.653024][ T8214] bridge_slave_1: entered allmulticast mode [ 186.660359][ T8214] bridge_slave_1: entered promiscuous mode [ 186.698662][ T8263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.728779][ T8260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.746549][ T8260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.789233][ T8263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.824484][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.831577][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.858241][ T8255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.886771][ T8214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.900443][ T8214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.935036][ T8263] team0: Port device team_slave_0 added [ 186.948910][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.967918][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.001833][ T8255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.078737][ T8263] team0: Port device team_slave_1 added [ 187.121170][ T8260] team0: Port device team_slave_0 added [ 187.302026][ T8260] team0: Port device team_slave_1 added [ 187.346423][ T8214] team0: Port device team_slave_0 added [ 187.358172][ T8214] team0: Port device team_slave_1 added [ 187.384442][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.387678][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.937'. [ 187.393234][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.427558][ T8263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.453120][ T8255] hsr_slave_0: entered promiscuous mode [ 187.459459][ T8255] hsr_slave_1: entered promiscuous mode [ 187.520158][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.527237][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.563284][ T8214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.578193][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.585285][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.611645][ T8263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.649180][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.668197][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.697377][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.728835][ T8214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.747149][ T8214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.775441][ T8214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.798231][ T8346] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 187.809795][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.817104][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.846014][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.865133][ T8344] netlink: 44 bytes leftover after parsing attributes in process `syz.0.938'. [ 187.875324][ T8344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.938'. [ 187.884677][ T8344] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.893765][ T8344] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.900973][ T8344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.101877][ T8263] hsr_slave_0: entered promiscuous mode [ 188.114641][ T8263] hsr_slave_1: entered promiscuous mode [ 188.126458][ T8263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.134760][ T8263] Cannot create hsr debugfs directory [ 188.422275][ T8214] hsr_slave_0: entered promiscuous mode [ 188.438724][ T8367] netlink: 'syz.0.941': attribute type 1 has an invalid length. [ 188.447797][ T8214] hsr_slave_1: entered promiscuous mode [ 188.462508][ T8214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.481018][ T8214] Cannot create hsr debugfs directory [ 188.501961][ T8260] hsr_slave_0: entered promiscuous mode [ 188.508593][ T8260] hsr_slave_1: entered promiscuous mode [ 188.516230][ T8260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.528769][ T8260] Cannot create hsr debugfs directory [ 188.692903][ T5096] Bluetooth: hci8: command tx timeout [ 188.698361][ T5096] Bluetooth: hci7: command tx timeout [ 188.746810][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.899313][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.989317][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.065939][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.384865][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.484568][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.563911][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.655748][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.678398][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.944'. [ 189.885133][ T11] bridge_slave_1: left allmulticast mode [ 189.909633][ T11] bridge_slave_1: left promiscuous mode [ 189.930932][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.955695][ T11] bridge_slave_0: left allmulticast mode [ 189.978317][ T11] bridge_slave_0: left promiscuous mode [ 189.986903][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.008251][ T11] bridge_slave_1: left allmulticast mode [ 190.019254][ T11] bridge_slave_1: left promiscuous mode [ 190.044617][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.056002][ T8398] netlink: 'syz.0.946': attribute type 1 has an invalid length. [ 190.076069][ T11] bridge_slave_0: left allmulticast mode [ 190.086979][ T11] bridge_slave_0: left promiscuous mode [ 190.093515][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.734126][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.745754][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.760054][ T11] bond0 (unregistering): Released all slaves [ 190.837919][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.850798][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.863756][ T11] bond0 (unregistering): Released all slaves [ 190.877541][ T8402] netlink: 44 bytes leftover after parsing attributes in process `syz.0.946'. [ 190.887441][ T8402] netlink: 24 bytes leftover after parsing attributes in process `syz.0.946'. [ 190.897506][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.905018][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.913093][ T8402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.058703][ T8263] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.213740][ T8263] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.329043][ T8263] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.443738][ T8263] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.895609][ T8263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 191.924150][ T8263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 191.943906][ T8263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 192.030252][ T8263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 192.338957][ T11] hsr_slave_0: left promiscuous mode [ 192.350805][ T11] hsr_slave_1: left promiscuous mode [ 192.356971][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.366104][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.374078][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.387021][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.397045][ T11] hsr_slave_0: left promiscuous mode [ 192.405809][ T11] hsr_slave_1: left promiscuous mode [ 192.413921][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.421563][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.448667][ T11] veth1_macvtap: left promiscuous mode [ 192.455519][ T11] veth0_macvtap: left promiscuous mode [ 192.906203][ T11] team0 (unregistering): Port device team_slave_1 removed [ 192.944441][ T11] team0 (unregistering): Port device team_slave_0 removed [ 193.448106][ T11] team0 (unregistering): Port device team_slave_1 removed [ 193.485386][ T11] team0 (unregistering): Port device team_slave_0 removed [ 193.753208][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.951'. [ 193.937233][ T8214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 193.991474][ T8214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.090824][ T8214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.109755][ T8214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.315370][ T8263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.448512][ T8263] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.535939][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.543147][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.601367][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.608526][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.701146][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.707486][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.834140][ T8260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 194.889439][ T8214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.916708][ T8260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 194.948055][ T8260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 194.968261][ T8260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 195.066080][ T8214] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.078088][ T11] IPVS: stop unused estimator thread 0... [ 195.087853][ T8255] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 195.124660][ T8255] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 195.175374][ T8255] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 195.202359][ T4882] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.209482][ T4882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.219787][ T4882] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.226992][ T4882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.247377][ T8255] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 195.287261][ T8263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.488944][ T8263] veth0_vlan: entered promiscuous mode [ 195.545464][ T8260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.604226][ T8263] veth1_vlan: entered promiscuous mode [ 195.680963][ T8260] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.773810][ T4882] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.781035][ T4882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.813102][ T4882] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.820320][ T4882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.837250][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.958'. [ 195.864770][ T8263] veth0_macvtap: entered promiscuous mode [ 195.913478][ T8263] veth1_macvtap: entered promiscuous mode [ 195.938555][ T8255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.963026][ T8214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.007316][ T8260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.077632][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.105812][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.150328][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.171628][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.193700][ T8263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.208788][ T8255] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.243164][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.265180][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.280857][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.302305][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.314423][ T8263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.364283][ T8263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.416670][ T8263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.445905][ T8263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.455858][ T8263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.467858][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.474984][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.503342][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.510527][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.626488][ T8260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.655049][ T8255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.666372][ T8255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.736203][ T8214] veth0_vlan: entered promiscuous mode [ 196.907778][ T8214] veth1_vlan: entered promiscuous mode [ 196.992404][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.011721][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.092519][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.106119][ T8214] veth0_macvtap: entered promiscuous mode [ 197.112252][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.124766][ T8260] veth0_vlan: entered promiscuous mode [ 197.152538][ T8214] veth1_macvtap: entered promiscuous mode [ 197.188428][ T8255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.229442][ T8260] veth1_vlan: entered promiscuous mode [ 197.258146][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.280301][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.311993][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.341635][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.351694][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.368402][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.386752][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.417497][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.441105][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.470371][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.501251][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.516921][ T8214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.529154][ T8214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.549320][ T8214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.613401][ T8214] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.629478][ T8214] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.647181][ T8214] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.657128][ T8214] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.726537][ T8260] veth0_macvtap: entered promiscuous mode [ 197.808761][ T8255] veth0_vlan: entered promiscuous mode [ 197.839896][ T8260] veth1_macvtap: entered promiscuous mode [ 197.894528][ T8559] FAULT_INJECTION: forcing a failure. [ 197.894528][ T8559] name failslab, interval 1, probability 0, space 0, times 0 [ 197.905232][ T8255] veth1_vlan: entered promiscuous mode [ 197.925374][ T8559] CPU: 1 PID: 8559 Comm: syz.2.966 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 197.935402][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 197.945485][ T8559] Call Trace: [ 197.946468][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.948763][ T8559] [ 197.962142][ T8559] dump_stack_lvl+0x241/0x360 [ 197.966875][ T8559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.967061][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.972079][ T8559] ? __pfx__printk+0x10/0x10 [ 197.972118][ T8559] should_fail_ex+0x3b0/0x4e0 [ 197.972143][ T8559] ? __alloc_skb+0x1c3/0x440 [ 197.972165][ T8559] should_failslab+0x9/0x20 [ 197.972193][ T8559] kmem_cache_alloc_node_noprof+0x71/0x320 [ 197.972223][ T8559] __alloc_skb+0x1c3/0x440 [ 197.972249][ T8559] ? __pfx___alloc_skb+0x10/0x10 [ 197.972276][ T8559] ? netlink_ack_tlv_len+0x6e/0x200 [ 197.972304][ T8559] netlink_ack+0x13f/0xa30 [ 197.972325][ T8559] ? __pfx_lock_acquire+0x10/0x10 [ 197.972345][ T8559] ? __pfx_nl80211_del_key+0x10/0x10 [ 197.972369][ T8559] ? __pfx_nl80211_post_doit+0x10/0x10 [ 197.972407][ T8559] netlink_rcv_skb+0x262/0x430 [ 197.972432][ T8559] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.972454][ T8559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.972490][ T8559] ? __netlink_deliver_tap+0x77e/0x7c0 [ 197.972529][ T8559] genl_rcv+0x28/0x40 [ 197.972547][ T8559] netlink_unicast+0x7ea/0x980 [ 197.972573][ T8559] ? __pfx_netlink_unicast+0x10/0x10 [ 197.972591][ T8559] ? __virt_addr_valid+0x183/0x520 [ 197.972619][ T8559] ? __check_object_size+0x49c/0x900 [ 197.972644][ T8559] ? bpf_lsm_netlink_send+0x9/0x10 [ 197.972673][ T8559] netlink_sendmsg+0x8db/0xcb0 [ 197.972709][ T8559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.972736][ T8559] ? __import_iovec+0x536/0x820 [ 197.972754][ T8559] ? aa_sock_msg_perm+0x91/0x160 [ 197.972782][ T8559] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 197.972800][ T8559] ? security_socket_sendmsg+0x87/0xb0 [ 197.972825][ T8559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.972846][ T8559] __sock_sendmsg+0x221/0x270 [ 197.972874][ T8559] ____sys_sendmsg+0x525/0x7d0 [ 197.972907][ T8559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.972949][ T8559] __sys_sendmsg+0x2b0/0x3a0 [ 197.972974][ T8559] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.972992][ T8559] ? vfs_write+0x7c4/0xc90 [ 197.973049][ T8559] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.002093][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.006996][ T8559] ? do_syscall_64+0x100/0x230 [ 198.007032][ T8559] ? do_syscall_64+0xb6/0x230 [ 198.017380][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.021535][ T8559] do_syscall_64+0xf3/0x230 [ 198.021569][ T8559] ? clear_bhb_loop+0x35/0x90 [ 198.021589][ T8559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.021613][ T8559] RIP: 0033:0x7f5c75375bd9 [ 198.026164][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.031047][ T8559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.031065][ T8559] RSP: 002b:00007f5c76169048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 198.031084][ T8559] RAX: ffffffffffffffda RBX: 00007f5c75503f60 RCX: 00007f5c75375bd9 [ 198.031098][ T8559] RDX: 0000000000000000 RSI: 000000002000bf00 RDI: 0000000000000003 [ 198.031109][ T8559] RBP: 00007f5c761690a0 R08: 0000000000000000 R09: 0000000000000000 [ 198.031120][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.031131][ T8559] R13: 000000000000000b R14: 00007f5c75503f60 R15: 00007fff01f41888 [ 198.031157][ T8559] [ 198.310807][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.327377][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.366550][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.386965][ T8260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.438111][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.452012][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.463453][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.474477][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.484715][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.495489][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.505678][ T8260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.517419][ T8260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.539899][ T8260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.597900][ T8260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.608649][ T8260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.627869][ T8260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.638030][ T8260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.681722][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.691428][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.737632][ T8255] veth0_macvtap: entered promiscuous mode [ 198.777922][ T8255] veth1_macvtap: entered promiscuous mode [ 198.875497][ T8586] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 198.885366][ T2887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.894519][ T785] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.902435][ T2887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.036337][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.046550][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.068074][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.077103][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.107042][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.127934][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.149210][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.159885][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.184456][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.204656][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.232581][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.265290][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.319500][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.352194][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.971'. [ 199.372907][ T8594] FAULT_INJECTION: forcing a failure. [ 199.372907][ T8594] name failslab, interval 1, probability 0, space 0, times 0 [ 199.398255][ T8594] CPU: 0 PID: 8594 Comm: syz.2.971 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 199.408280][ T8594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 199.418363][ T8594] Call Trace: [ 199.421666][ T8594] [ 199.424712][ T8594] dump_stack_lvl+0x241/0x360 [ 199.429426][ T8594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.434654][ T8594] ? __pfx__printk+0x10/0x10 [ 199.439270][ T8594] ? __pfx___might_resched+0x10/0x10 [ 199.444572][ T8594] ? stack_depot_init+0x36/0x140 [ 199.449539][ T8594] should_fail_ex+0x3b0/0x4e0 [ 199.454246][ T8594] ? __hw_addr_add_ex+0x1a8/0x610 [ 199.459321][ T8594] should_failslab+0x9/0x20 [ 199.463941][ T8594] kmalloc_trace_noprof+0x6c/0x2c0 [ 199.469096][ T8594] __hw_addr_add_ex+0x1a8/0x610 [ 199.473984][ T8594] dev_addr_init+0x143/0x230 [ 199.478608][ T8594] ? __pfx_dev_addr_init+0x10/0x10 [ 199.483741][ T8594] ? rcu_is_watching+0x15/0xb0 [ 199.488543][ T8594] ? read_word_at_a_time+0xe/0x20 [ 199.493599][ T8594] alloc_netdev_mqs+0x2a7/0xf80 [ 199.498475][ T8594] ? __pfx_ipvlan_link_setup+0x10/0x10 [ 199.503970][ T8594] rtnl_create_link+0x2f9/0xc20 [ 199.508856][ T8594] rtnl_newlink+0x1421/0x20a0 [ 199.513569][ T8594] ? rtnl_newlink+0xab1/0x20a0 [ 199.518379][ T8594] ? __pfx_rtnl_newlink+0x10/0x10 [ 199.523458][ T8594] ? do_raw_spin_unlock+0x13c/0x8b0 [ 199.528698][ T8594] ? __mutex_lock+0x9a5/0xd70 [ 199.533421][ T8594] ? __mutex_lock+0x527/0xd70 [ 199.538164][ T8594] ? __pfx_rtnl_newlink+0x10/0x10 [ 199.543220][ T8594] rtnetlink_rcv_msg+0x89b/0x1180 [ 199.548283][ T8594] ? rtnetlink_rcv_msg+0x208/0x1180 [ 199.553528][ T8594] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.559020][ T8594] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 199.565030][ T8594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.571397][ T8594] ? __local_bh_enable_ip+0x168/0x200 [ 199.576800][ T8594] ? lockdep_hardirqs_on+0x99/0x150 [ 199.582032][ T8594] ? __local_bh_enable_ip+0x168/0x200 [ 199.587435][ T8594] ? dev_hard_start_xmit+0x773/0x7e0 [ 199.592789][ T8594] ? __dev_queue_xmit+0x2d2/0x3d30 [ 199.597938][ T8594] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 199.603694][ T8594] ? __dev_queue_xmit+0x2d2/0x3d30 [ 199.608839][ T8594] ? __dev_queue_xmit+0x16c9/0x3d30 [ 199.614080][ T8594] ? __dev_queue_xmit+0x2d2/0x3d30 [ 199.619233][ T8594] ? ref_tracker_free+0x643/0x7e0 [ 199.624288][ T8594] netlink_rcv_skb+0x1e3/0x430 [ 199.629080][ T8594] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 199.634579][ T8594] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 199.639918][ T8594] ? netlink_deliver_tap+0x2e/0x1b0 [ 199.645145][ T8594] netlink_unicast+0x7ea/0x980 [ 199.650027][ T8594] ? __pfx_netlink_unicast+0x10/0x10 [ 199.655333][ T8594] ? __virt_addr_valid+0x183/0x520 [ 199.660482][ T8594] ? __check_object_size+0x49c/0x900 [ 199.665798][ T8594] ? bpf_lsm_netlink_send+0x9/0x10 [ 199.671046][ T8594] netlink_sendmsg+0x8db/0xcb0 [ 199.675855][ T8594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.681178][ T8594] ? __import_iovec+0x536/0x820 [ 199.686062][ T8594] ? aa_sock_msg_perm+0x91/0x160 [ 199.691051][ T8594] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 199.696359][ T8594] ? security_socket_sendmsg+0x87/0xb0 [ 199.701846][ T8594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 199.707157][ T8594] __sock_sendmsg+0x221/0x270 [ 199.711873][ T8594] ____sys_sendmsg+0x525/0x7d0 [ 199.716674][ T8594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.722004][ T8594] __sys_sendmsg+0x2b0/0x3a0 [ 199.726625][ T8594] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.731759][ T8594] ? vfs_write+0x7c4/0xc90 [ 199.736242][ T8594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.742600][ T8594] ? do_syscall_64+0x100/0x230 [ 199.747398][ T8594] ? do_syscall_64+0xb6/0x230 [ 199.752202][ T8594] do_syscall_64+0xf3/0x230 [ 199.756736][ T8594] ? clear_bhb_loop+0x35/0x90 [ 199.761435][ T8594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.767361][ T8594] RIP: 0033:0x7f5c75375bd9 [ 199.771792][ T8594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.791422][ T8594] RSP: 002b:00007f5c76169048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.799872][ T8594] RAX: ffffffffffffffda RBX: 00007f5c75503f60 RCX: 00007f5c75375bd9 [ 199.807871][ T8594] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 199.815894][ T8594] RBP: 00007f5c761690a0 R08: 0000000000000000 R09: 0000000000000000 [ 199.823890][ T8594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 199.831886][ T8594] R13: 000000000000000b R14: 00007f5c75503f60 R15: 00007fff01f41888 [ 199.839912][ T8594] [ 199.926205][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.973708][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.010264][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.037002][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.070985][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.089937][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.102196][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.118432][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.138677][ T8255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.155834][ T8255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.177462][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.233294][ T8255] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.268286][ T8255] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.300327][ T8255] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.338321][ T8255] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.413856][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.434023][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.091827][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.099690][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.221879][ T4107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.240000][ T4107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.048670][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.987'. [ 217.736830][ T8729] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 218.562363][ T5103] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.571902][ T5103] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.579986][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.589962][ T5103] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 218.600655][ T5103] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 218.608894][ T5103] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 218.660766][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.669963][ T5108] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.678647][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.691126][ T5108] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.701178][ T5108] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.708518][ T5108] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 218.750951][ T5108] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.760988][ T5108] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.769112][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.777838][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.791098][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.800240][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 218.843383][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.853245][ T5108] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.861805][ T5108] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.870051][ T5108] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.878418][ T5108] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 218.890368][ T5108] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 220.610562][ T5100] Bluetooth: hci3: command tx timeout [ 220.810802][ T5100] Bluetooth: hci1: command tx timeout [ 220.860725][ T5100] Bluetooth: hci2: command tx timeout [ 220.960664][ T5100] Bluetooth: hci4: command tx timeout [ 222.690522][ T5100] Bluetooth: hci3: command tx timeout [ 222.899026][ T5100] Bluetooth: hci1: command tx timeout [ 222.940651][ T5100] Bluetooth: hci2: command tx timeout [ 223.040563][ T5100] Bluetooth: hci4: command tx timeout [ 224.793179][ T5100] Bluetooth: hci3: command tx timeout [ 224.950736][ T5100] Bluetooth: hci1: command tx timeout [ 225.030527][ T5100] Bluetooth: hci2: command tx timeout [ 233.020229][ T5100] Bluetooth: hci4: command tx timeout [ 233.025679][ T5100] Bluetooth: hci3: command tx timeout [ 233.033222][ T5100] Bluetooth: hci1: command tx timeout [ 233.038728][ T5100] Bluetooth: hci2: command tx timeout [ 242.534500][ T5108] Bluetooth: hci4: command tx timeout [ 243.150882][ T4492] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 243.260881][ T5100] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 243.370532][ T5100] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 243.615477][ T5100] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 243.752365][ T8733] chnl_net:caif_netlink_parms(): no params data found [ 243.803590][ T5100] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 243.822501][ T5100] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 271.260640][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 271.266993][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.611250][ T5100] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 277.621378][ T5100] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 277.636328][ T5100] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 277.645001][ T5100] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 277.653658][ T5100] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 277.661612][ T5100] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 279.130682][ T5103] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 279.148771][ T5103] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 279.157361][ T5103] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 279.167321][ T5103] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 279.182395][ T5101] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 279.190063][ T5101] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 279.205974][ T5100] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 279.219402][ T5100] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 279.227722][ T5100] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 279.246443][ T5101] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 279.255230][ T5101] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 279.263149][ T5101] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 279.317578][ T5096] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 279.327447][ T5096] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 279.335943][ T5096] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 279.347826][ T5096] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 279.355714][ T5096] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 279.366095][ T5096] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 342.900689][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.908419][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 376.175553][ T5096] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 410.444610][ T52] Bluetooth: hci14: Opcode 0x1003 failed: -110 [ 410.451526][ T5096] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 410.458553][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 410.464905][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 481.601572][ T8815] Bluetooth: hci16: Opcode 0x0c03 failed: -110 [ 482.490158][ T30] INFO: task kworker/u9:1:4492 blocked for more than 169 seconds. [ 482.498012][ T30] Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 482.520276][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 482.528977][ T30] task:kworker/u9:1 state:D stack:25008 pid:4492 tgid:4492 ppid:2 flags:0x00004000 [ 482.560056][ T30] Workqueue: hci10 hci_rx_work [ 482.565066][ T30] Call Trace: [ 482.568354][ T30] [ 482.580082][ T30] __schedule+0x17e8/0x4a20 [ 482.584654][ T30] ? __pfx___schedule+0x10/0x10 [ 482.589547][ T30] ? __pfx_lock_release+0x10/0x10 [ 482.610063][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 482.615580][ T30] ? kthread_data+0x52/0xd0 [ 482.630064][ T30] ? schedule+0x90/0x320 [ 482.634329][ T30] ? wq_worker_sleeping+0x66/0x240 [ 482.639453][ T30] ? schedule+0x90/0x320 [ 482.661065][ T30] schedule+0x14b/0x320 [ 482.665305][ T30] schedule_preempt_disabled+0x13/0x30 [ 482.680068][ T30] __mutex_lock+0x6a4/0xd70 [ 482.686239][ T30] ? __mutex_lock+0x527/0xd70 [ 482.700066][ T30] ? hci_remote_features_evt+0x4c3/0xaf0 [ 482.705729][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 482.730091][ T30] ? skb_queue_tail+0x36/0x120 [ 482.735004][ T30] ? hci_send_cmd+0xb3/0x170 [ 482.739615][ T30] hci_remote_features_evt+0x4c3/0xaf0 [ 482.760095][ T30] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 482.766228][ T30] ? skb_pull_data+0x112/0x230 [ 482.780072][ T30] hci_event_packet+0xac0/0x1540 [ 482.786829][ T30] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 482.800066][ T30] ? __pfx_hci_event_packet+0x10/0x10 [ 482.805466][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 482.820160][ T30] ? hci_send_to_monitor+0xd8/0x7f0 [ 482.825410][ T30] ? kcov_remote_start+0x9e/0x7e0 [ 482.840069][ T30] hci_rx_work+0x3e8/0xca0 [ 482.844711][ T30] ? process_scheduled_works+0x945/0x1830 [ 482.870338][ T30] process_scheduled_works+0xa2c/0x1830 [ 482.875979][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 482.890094][ T30] ? assign_work+0x364/0x3d0 [ 482.894743][ T30] worker_thread+0x86d/0xd50 [ 482.899353][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 482.920219][ T30] ? __kthread_parkme+0x169/0x1d0 [ 482.925309][ T30] ? __pfx_worker_thread+0x10/0x10 [ 482.940064][ T30] kthread+0x2f0/0x390 [ 482.944159][ T30] ? __pfx_worker_thread+0x10/0x10 [ 482.949279][ T30] ? __pfx_kthread+0x10/0x10 [ 482.970131][ T30] ret_from_fork+0x4b/0x80 [ 482.974591][ T30] ? __pfx_kthread+0x10/0x10 [ 482.979198][ T30] ret_from_fork_asm+0x1a/0x30 [ 483.000082][ T30] [ 483.003151][ T30] INFO: task kworker/u9:3:5100 blocked for more than 169 seconds. [ 483.020283][ T30] Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 483.027924][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.046776][ T30] task:kworker/u9:3 state:D stack:25104 pid:5100 tgid:5100 ppid:2 flags:0x00004000 [ 483.057028][ T30] Workqueue: hci11 hci_rx_work [ 483.061844][ T30] Call Trace: [ 483.065195][ T30] [ 483.068137][ T30] __schedule+0x17e8/0x4a20 [ 483.072887][ T30] ? __pfx___schedule+0x10/0x10 [ 483.077755][ T30] ? __pfx_lock_release+0x10/0x10 [ 483.090079][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 483.097238][ T30] ? kthread_data+0x52/0xd0 [ 483.102356][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 483.108649][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 483.129859][ T8810] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 483.136384][ T8804] Bluetooth: hci14: Opcode 0x0c03 failed: -110 [ 483.152430][ T30] ? schedule+0x90/0x320 [ 483.156727][ T30] ? wq_worker_sleeping+0x66/0x240 [ 483.171316][ T30] ? schedule+0x90/0x320 [ 483.175611][ T30] schedule+0x14b/0x320 [ 483.179783][ T30] schedule_preempt_disabled+0x13/0x30 [ 483.200113][ T30] __mutex_lock+0x6a4/0xd70 [ 483.204673][ T30] ? __mutex_lock+0x527/0xd70 [ 483.209363][ T30] ? hci_remote_features_evt+0x4c3/0xaf0 [ 483.230082][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 483.235164][ T30] ? skb_queue_tail+0x36/0x120 [ 483.239971][ T30] ? hci_send_cmd+0xb3/0x170 [ 483.260081][ T30] hci_remote_features_evt+0x4c3/0xaf0 [ 483.265601][ T30] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 483.290125][ T30] ? skb_pull_data+0x112/0x230 [ 483.294965][ T30] hci_event_packet+0xac0/0x1540 [ 483.310131][ T30] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 483.316190][ T30] ? __pfx_hci_event_packet+0x10/0x10 [ 483.330075][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 483.335326][ T30] ? hci_send_to_monitor+0xd8/0x7f0 [ 483.350077][ T30] ? kcov_remote_start+0x9e/0x7e0 [ 483.355151][ T30] hci_rx_work+0x3e8/0xca0 [ 483.359595][ T30] ? process_scheduled_works+0x945/0x1830 [ 483.369078][ T30] process_scheduled_works+0xa2c/0x1830 [ 483.375088][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.381131][ T30] ? assign_work+0x364/0x3d0 [ 483.385744][ T30] worker_thread+0x86d/0xd50 [ 483.390391][ T30] ? __kthread_parkme+0x169/0x1d0 [ 483.395516][ T30] ? __pfx_worker_thread+0x10/0x10 [ 483.401704][ T30] kthread+0x2f0/0x390 [ 483.405798][ T30] ? __pfx_worker_thread+0x10/0x10 [ 483.411766][ T30] ? __pfx_kthread+0x10/0x10 [ 483.416379][ T30] ret_from_fork+0x4b/0x80 [ 483.420924][ T30] ? __pfx_kthread+0x10/0x10 [ 483.425530][ T30] ret_from_fork_asm+0x1a/0x30 [ 483.430358][ T30] [ 483.433575][ T30] INFO: task kworker/u9:4:5101 blocked for more than 170 seconds. [ 483.441416][ T30] Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 483.449057][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.457758][ T30] task:kworker/u9:4 state:D stack:25544 pid:5101 tgid:5101 ppid:2 flags:0x00004000 [ 483.467976][ T30] Workqueue: hci12 hci_rx_work [ 483.472941][ T30] Call Trace: [ 483.476226][ T30] [ 483.479166][ T30] __schedule+0x17e8/0x4a20 [ 483.483739][ T30] ? __pfx___schedule+0x10/0x10 [ 483.488604][ T30] ? __pfx_lock_release+0x10/0x10 [ 483.493671][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 483.499143][ T30] ? kthread_data+0x52/0xd0 [ 483.504794][ T30] ? schedule+0x90/0x320 [ 483.509080][ T30] ? wq_worker_sleeping+0x66/0x240 [ 483.514984][ T30] ? schedule+0x90/0x320 [ 483.519237][ T30] schedule+0x14b/0x320 [ 483.523517][ T30] schedule_preempt_disabled+0x13/0x30 [ 483.528983][ T30] __mutex_lock+0x6a4/0xd70 [ 483.533532][ T30] ? __mutex_lock+0x527/0xd70 [ 483.538218][ T30] ? hci_remote_features_evt+0x4c3/0xaf0 [ 483.543895][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 483.548962][ T30] ? skb_queue_tail+0x36/0x120 [ 483.553774][ T30] ? hci_send_cmd+0xb3/0x170 [ 483.558398][ T30] hci_remote_features_evt+0x4c3/0xaf0 [ 483.563928][ T30] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 483.569929][ T30] ? skb_pull_data+0x112/0x230 [ 483.574824][ T30] hci_event_packet+0xac0/0x1540 [ 483.579781][ T30] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 483.585819][ T30] ? __pfx_hci_event_packet+0x10/0x10 [ 483.591257][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 483.596478][ T30] ? hci_send_to_monitor+0xd8/0x7f0 [ 483.630080][ T30] ? kcov_remote_start+0x9e/0x7e0 [ 483.635160][ T30] hci_rx_work+0x3e8/0xca0 [ 483.639600][ T30] ? process_scheduled_works+0x945/0x1830 [ 483.648793][ T30] process_scheduled_works+0xa2c/0x1830 [ 483.654452][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.660490][ T30] ? assign_work+0x364/0x3d0 [ 483.665094][ T30] worker_thread+0x86d/0xd50 [ 483.669711][ T30] ? __kthread_parkme+0x169/0x1d0 [ 483.675116][ T30] ? __pfx_worker_thread+0x10/0x10 [ 483.680308][ T30] kthread+0x2f0/0x390 [ 483.684575][ T30] ? __pfx_worker_thread+0x10/0x10 [ 483.689702][ T30] ? __pfx_kthread+0x10/0x10 [ 483.694377][ T30] ret_from_fork+0x4b/0x80 [ 483.698826][ T30] ? __pfx_kthread+0x10/0x10 [ 483.703509][ T30] ret_from_fork_asm+0x1a/0x30 [ 483.709926][ T30] [ 483.713002][ T30] INFO: task kworker/u9:5:5103 blocked for more than 170 seconds. [ 483.720905][ T30] Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 483.728533][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.737325][ T30] task:kworker/u9:5 state:D stack:26296 pid:5103 tgid:5103 ppid:2 flags:0x00004000 [ 483.747534][ T30] Workqueue: hci13 hci_rx_work [ 483.752346][ T30] Call Trace: [ 483.755628][ T30] [ 483.758577][ T30] __schedule+0x17e8/0x4a20 [ 483.763141][ T30] ? __pfx___schedule+0x10/0x10 [ 483.768014][ T30] ? __pfx_lock_release+0x10/0x10 [ 483.773169][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 483.778642][ T30] ? kthread_data+0x52/0xd0 [ 483.783179][ T30] ? schedule+0x90/0x320 [ 483.787455][ T30] ? wq_worker_sleeping+0x66/0x240 [ 483.792700][ T30] ? schedule+0x90/0x320 [ 483.796953][ T30] schedule+0x14b/0x320 [ 483.801160][ T30] schedule_preempt_disabled+0x13/0x30 [ 483.806624][ T30] __mutex_lock+0x6a4/0xd70 [ 483.812053][ T30] ? __mutex_lock+0x527/0xd70 [ 483.816754][ T30] ? hci_remote_features_evt+0x4c3/0xaf0 [ 483.823297][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 483.828346][ T30] ? skb_queue_tail+0x36/0x120 [ 483.833160][ T30] ? hci_send_cmd+0xb3/0x170 [ 483.837769][ T30] hci_remote_features_evt+0x4c3/0xaf0 [ 483.843287][ T30] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 483.849286][ T30] ? skb_pull_data+0x112/0x230 [ 483.854101][ T30] hci_event_packet+0xac0/0x1540 [ 483.859061][ T30] ? __pfx_hci_remote_features_evt+0x10/0x10 [ 483.865087][ T30] ? __pfx_hci_event_packet+0x10/0x10 [ 483.870561][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 483.875848][ T30] ? hci_send_to_monitor+0xd8/0x7f0 [ 483.881244][ T30] ? kcov_remote_start+0x9e/0x7e0 [ 483.886306][ T30] hci_rx_work+0x3e8/0xca0 [ 483.890796][ T30] ? process_scheduled_works+0x945/0x1830 [ 483.896531][ T30] process_scheduled_works+0xa2c/0x1830 [ 483.902160][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.908161][ T30] ? assign_work+0x364/0x3d0 [ 483.913705][ T30] worker_thread+0x86d/0xd50 [ 483.918415][ T30] ? __kthread_parkme+0x169/0x1d0 [ 483.924270][ T30] ? __pfx_worker_thread+0x10/0x10 [ 483.929397][ T30] kthread+0x2f0/0x390 [ 483.933529][ T30] ? __pfx_worker_thread+0x10/0x10 [ 483.938661][ T30] ? __pfx_kthread+0x10/0x10 [ 483.943295][ T30] ret_from_fork+0x4b/0x80 [ 483.947722][ T30] ? __pfx_kthread+0x10/0x10 [ 483.952352][ T30] ret_from_fork_asm+0x1a/0x30 [ 483.957227][ T30] [ 483.960283][ T30] INFO: task kworker/u9:8:5108 blocked for more than 141 seconds. [ 483.968096][ T30] Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 483.976276][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.985156][ T30] task:kworker/u9:8 state:D stack:25496 pid:5108 tgid:5108 ppid:2 flags:0x00004000 [ 483.995375][ T30] Workqueue: hci9 hci_rx_work [ 484.000192][ T30] Call Trace: [ 484.003471][ T30] [ 484.006416][ T30] __schedule+0x17e8/0x4a20 [ 484.011024][ T30] ? __pfx___schedule+0x10/0x10 [ 484.017559][ T30] ? __pfx_lock_release+0x10/0x10 [ 484.022755][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 484.028250][ T30] ? kthread_data+0x52/0xd0 [ 484.032813][ T30] ? schedule+0x90/0x320 [ 484.037070][ T30] ? wq_worker_sleeping+0x66/0x240 [ 484.042229][ T30] ? schedule+0x90/0x320 [ 484.046479][ T30] schedule+0x14b/0x320 [ 484.050689][ T30] schedule_preempt_disabled+0x13/0x30 [ 484.056157][ T30] __mutex_lock+0x6a4/0xd70 [ 484.060700][ T30] ? __mutex_lock+0x527/0xd70 [ 484.065395][ T30] ? hci_connect_cfm+0x24/0x150 [ 484.070445][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 484.075551][ T30] ? device_add+0x460/0xbf0 [ 484.080117][ T30] hci_connect_cfm+0x24/0x150 [ 484.084826][ T30] le_conn_complete_evt+0xd3e/0x12e0 [ 484.090515][ T30] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 484.096260][ T30] ? __mutex_unlock_slowpath+0x21d/0x750 [ 484.108407][ T30] ? __copy_skb_header+0x437/0x5b0 [ 484.118103][ T30] ? skb_pull_data+0x112/0x230 [ 484.123131][ T30] hci_le_conn_complete_evt+0x18c/0x420 [ 484.128722][ T30] hci_event_packet+0xa53/0x1540 [ 484.133713][ T30] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 484.139035][ T30] ? __pfx_hci_event_packet+0x10/0x10 [ 484.144481][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 484.149699][ T30] ? kcov_remote_start+0x9e/0x7e0 [ 484.157465][ T30] ? hci_send_to_monitor+0xd8/0x7f0 [ 484.162753][ T30] ? skb_dequeue+0x113/0x150 [ 484.167365][ T30] hci_rx_work+0x3e8/0xca0 [ 484.180111][ T30] ? process_scheduled_works+0x945/0x1830 [ 484.185880][ T30] process_scheduled_works+0xa2c/0x1830 [ 484.228990][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 484.240125][ T30] ? assign_work+0x364/0x3d0 [ 484.244757][ T30] worker_thread+0x86d/0xd50 [ 484.249377][ T30] ? __kthread_parkme+0x169/0x1d0 [ 484.261092][ T30] ? __pfx_worker_thread+0x10/0x10 [ 484.266251][ T30] kthread+0x2f0/0x390 [ 484.270720][ T30] ? __pfx_worker_thread+0x10/0x10 [ 484.275872][ T30] ? __pfx_kthread+0x10/0x10 [ 484.280537][ T30] ret_from_fork+0x4b/0x80 [ 484.284978][ T30] ? __pfx_kthread+0x10/0x10 [ 484.289582][ T30] ret_from_fork_asm+0x1a/0x30 [ 484.294413][ T30] [ 484.297457][ T30] INFO: task syz-executor:8263 blocked for more than 170 seconds. [ 484.305394][ T30] Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 484.313054][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.322870][ T30] task:syz-executor state:D stack:20288 pid:8263 tgid:8263 ppid:1 flags:0x00004006 [ 484.333894][ T30] Call Trace: [ 484.337180][ T30] [ 484.340158][ T30] __schedule+0x17e8/0x4a20 [ 484.344706][ T30] ? __pfx___schedule+0x10/0x10 [ 484.349569][ T30] ? __pfx_lock_release+0x10/0x10 [ 484.355247][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 484.360754][ T30] ? schedule+0x90/0x320 [ 484.365004][ T30] schedule+0x14b/0x320 [ 484.369167][ T30] schedule_preempt_disabled+0x13/0x30 [ 484.375315][ T30] __mutex_lock+0x6a4/0xd70 [ 484.379838][ T30] ? __mutex_lock+0x527/0xd70 [ 484.384563][ T30] ? hci_conn_hash_flush+0xa6/0x240 [ 484.389772][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 484.394841][ T30] ? hci_cmd_sync_dequeue+0x399/0x3d0 [ 484.400261][ T30] hci_conn_hash_flush+0xa6/0x240 [ 484.405297][ T30] hci_dev_close_sync+0x911/0xf60 [ 484.410373][ T30] hci_unregister_dev+0x20b/0x510 [ 484.415411][ T30] vhci_release+0x83/0xd0 [ 484.419749][ T30] ? __pfx_vhci_release+0x10/0x10 [ 484.425804][ T30] __fput+0x406/0x8b0 [ 484.429811][ T30] task_work_run+0x24f/0x310 [ 484.435246][ T30] ? __pfx_task_work_run+0x10/0x10 [ 484.440415][ T30] ? do_exit+0xa22/0x27e0 [ 484.444755][ T30] ? kmem_cache_free+0x145/0x350 [ 484.449702][ T30] do_exit+0xa27/0x27e0 [ 484.453918][ T30] ? __pfx_do_exit+0x10/0x10 [ 484.458517][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 484.463945][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 484.469935][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 484.476426][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 484.481626][ T30] do_group_exit+0x207/0x2c0 [ 484.486874][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 484.492118][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 484.497332][ T30] get_signal+0x16a1/0x1740 [ 484.501894][ T30] ? __pfx_vfs_read+0x10/0x10 [ 484.506584][ T30] ? __pfx_get_signal+0x10/0x10 [ 484.511491][ T30] arch_do_signal_or_restart+0x96/0x860 [ 484.517053][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 484.560256][ T8816] Bluetooth: hci16: Opcode 0x0c03 failed: -4 [ 484.566411][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 484.585810][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 484.610099][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 484.615745][ T30] do_syscall_64+0x100/0x230 [ 484.640089][ T30] ? clear_bhb_loop+0x35/0x90 [ 484.644856][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.680100][ T30] RIP: 0033:0x7f5c753746bc [ 484.684667][ T30] RSP: 002b:00007fff01f41b60 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 484.710081][ T30] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f5c753746bc [ 484.718206][ T30] RDX: 0000000000000028 RSI: 00007fff01f41c60 RDI: 00000000000000f9 [ 484.760085][ T30] RBP: 00007fff01f41bec R08: 0000000000000000 R09: 0079746972756365 [ 484.768105][ T30] R10: 00007f5c754d17e0 R11: 0000000000000246 R12: 0000000000000014 [ 484.810086][ T30] R13: 0000000000031e8d R14: 000000000003132c R15: 0000000000000025 [ 484.818217][ T30] [ 484.850099][ T30] INFO: task syz.4.983:8673 blocked for more than 171 seconds. [ 484.857727][ T30] Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 484.886702][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.895874][ T30] task:syz.4.983 state:D stack:24672 pid:8673 tgid:8673 ppid:8214 flags:0x00004006 [ 484.906148][ T30] Call Trace: [ 484.909444][ T30] [ 484.912430][ T30] __schedule+0x17e8/0x4a20 [ 484.916992][ T30] ? __pfx___schedule+0x10/0x10 [ 484.921954][ T30] ? __pfx_lock_release+0x10/0x10 [ 484.926994][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 484.932515][ T30] ? schedule+0x90/0x320 [ 484.938431][ T30] schedule+0x14b/0x320 [ 484.942658][ T30] schedule_preempt_disabled+0x13/0x30 [ 484.948125][ T30] __mutex_lock+0x6a4/0xd70 [ 484.952675][ T30] ? __mutex_lock+0x527/0xd70 [ 484.957383][ T30] ? hci_conn_hash_flush+0xa6/0x240 [ 484.962640][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 484.967770][ T30] ? hci_cmd_sync_dequeue+0x399/0x3d0 [ 484.973289][ T30] hci_conn_hash_flush+0xa6/0x240 [ 484.978336][ T30] hci_dev_close_sync+0x911/0xf60 [ 484.983413][ T30] hci_unregister_dev+0x20b/0x510 [ 484.988455][ T30] vhci_release+0x83/0xd0 [ 484.992823][ T30] ? __pfx_vhci_release+0x10/0x10 [ 484.997948][ T30] __fput+0x406/0x8b0 [ 485.001982][ T30] task_work_run+0x24f/0x310 [ 485.006596][ T30] ? __pfx_task_work_run+0x10/0x10 [ 485.011749][ T30] ? do_exit+0xa22/0x27e0 [ 485.016087][ T30] ? kmem_cache_free+0x145/0x350 [ 485.021126][ T30] do_exit+0xa27/0x27e0 [ 485.025306][ T30] ? __pfx_do_exit+0x10/0x10 [ 485.030124][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 485.035522][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 485.042430][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 485.049116][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 485.055092][ T30] do_group_exit+0x207/0x2c0 [ 485.059699][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.064946][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 485.070288][ T30] get_signal+0x16a1/0x1740 [ 485.074880][ T30] ? __pfx_get_signal+0x10/0x10 [ 485.079829][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 485.098131][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 485.103857][ T30] arch_do_signal_or_restart+0x96/0x860 [ 485.109430][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 485.115641][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 485.121737][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 485.127474][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 485.133081][ T30] do_syscall_64+0x100/0x230 [ 485.137683][ T30] ? clear_bhb_loop+0x35/0x90 [ 485.143328][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.149236][ T30] RIP: 0033:0x7fe879f75bd9 [ 485.154444][ T30] RSP: 002b:00007ffc7db9c4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 485.162995][ T30] RAX: 0000000000000000 RBX: 0000000000031367 RCX: 00007fe879f75bd9 [ 485.171282][ T30] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 485.179260][ T30] RBP: ffffffffffffffff R08: 0000000000000001 R09: 000000197db9c7df [ 485.187267][ T30] R10: 00007fe879e00000 R11: 0000000000000246 R12: 00007fe87a103f6c [ 485.195273][ T30] R13: 0000000000000032 R14: 00007fe87a105a60 R15: 00007fe87a103f60 [ 485.203305][ T30] [ 485.206337][ T30] INFO: task syz-executor:8733 blocked for more than 142 seconds. [ 485.214173][ T30] Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 485.221896][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.230597][ T30] task:syz-executor state:D stack:20736 pid:8733 tgid:8733 ppid:1 flags:0x00004006 [ 485.241779][ T30] Call Trace: [ 485.245076][ T30] [ 485.248037][ T30] __schedule+0x17e8/0x4a20 [ 485.253493][ T30] ? __pfx___schedule+0x10/0x10 [ 485.258466][ T30] ? __pfx_lock_release+0x10/0x10 [ 485.263661][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 485.269146][ T30] ? schedule+0x90/0x320 [ 485.274131][ T30] schedule+0x14b/0x320 [ 485.278304][ T30] schedule_preempt_disabled+0x13/0x30 [ 485.283807][ T30] __mutex_lock+0x6a4/0xd70 [ 485.288499][ T30] ? __mutex_lock+0x527/0xd70 [ 485.293233][ T30] ? hci_conn_hash_flush+0xa6/0x240 [ 485.298445][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 485.303610][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 485.308840][ T30] hci_conn_hash_flush+0xa6/0x240 [ 485.313917][ T30] hci_dev_close_sync+0x911/0xf60 [ 485.318971][ T30] hci_unregister_dev+0x20b/0x510 [ 485.324135][ T30] vhci_release+0x83/0xd0 [ 485.328476][ T30] ? __pfx_vhci_release+0x10/0x10 [ 485.333543][ T30] __fput+0x406/0x8b0 [ 485.337545][ T30] task_work_run+0x24f/0x310 [ 485.342197][ T30] ? __pfx_task_work_run+0x10/0x10 [ 485.348971][ T30] ? do_exit+0xa22/0x27e0 [ 485.353373][ T30] ? kmem_cache_free+0x145/0x350 [ 485.358328][ T30] do_exit+0xa27/0x27e0 [ 485.362546][ T30] ? __pfx_do_exit+0x10/0x10 [ 485.367172][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 485.372652][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 485.378655][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 485.385202][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 485.390354][ T30] do_group_exit+0x207/0x2c0 [ 485.394985][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 485.400230][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 485.405444][ T30] get_signal+0x16a1/0x1740 [ 485.409980][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 485.415058][ T30] ? __pfx_get_signal+0x10/0x10 [ 485.419933][ T30] arch_do_signal_or_restart+0x96/0x860 [ 485.425594][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 485.431803][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 485.437809][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 485.443580][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 485.450164][ T30] do_syscall_64+0x100/0x230 [ 485.454785][ T30] ? clear_bhb_loop+0x35/0x90 [ 485.459472][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.466130][ T30] RIP: 0033:0x7fec8737796c [ 485.470662][ T30] RSP: 002b:00007ffd2745e6c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 485.479088][ T30] RAX: 000000000000002c RBX: 00007fec88034620 RCX: 00007fec8737796c [ 485.487102][ T30] RDX: 000000000000002c RSI: 00007fec88034670 RDI: 0000000000000003 [ 485.495110][ T30] RBP: 0000000000000000 R08: 00007ffd2745e714 R09: 000000000000000c [ 485.503118][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 485.511132][ T30] R13: 0000000000000000 R14: 00007fec88034670 R15: 0000000000000000 [ 485.519125][ T30] [ 485.522293][ T30] [ 485.522293][ T30] Showing all locks held in the system: [ 485.530063][ T30] 4 locks held by kworker/u8:0/11: [ 485.535177][ T30] #0: ffff888015ed5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 485.546120][ T30] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 485.557618][ T30] #2: ffffffff8f5da8d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 485.567898][ T30] #3: ffffffff8f5e7108 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 485.577378][ T30] 1 lock held by khungtaskd/30: [ 485.582255][ T30] #0: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 485.592168][ T30] 3 locks held by kworker/u8:2/35: [ 485.597303][ T30] #0: ffff88802aa43148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 485.609026][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 485.621872][ T30] #2: ffffffff8f5e7108 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 485.631433][ T30] 5 locks held by kworker/u8:4/80: [ 485.636640][ T30] 2 locks held by kworker/1:2/785: [ 485.641798][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 485.653993][ T30] #1: ffffc900039a7d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 485.665144][ T30] 4 locks held by kworker/u9:1/4492: [ 485.670503][ T30] #0: ffff888077da6148 ((wq_completion)hci10#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 485.681746][ T30] #1: ffffc9000dba7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 485.693842][ T30] #2: ffff88807bea0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 485.703830][ T30] #3: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 485.714483][ T30] 2 locks held by getty/4844: [ 485.719176][ T30] #0: ffff888028fe00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 485.729012][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 485.739295][ T30] 4 locks held by kworker/u9:3/5100: [ 485.744643][ T30] #0: ffff88806950c148 ((wq_completion)hci11#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 485.756709][ T30] #1: ffffc90003737d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 485.769741][ T30] #2: ffff88807bd58078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 485.779949][ T30] #3: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 485.790575][ T30] 4 locks held by kworker/u9:4/5101: [ 485.795871][ T30] #0: ffff88806950d948 ((wq_completion)hci12#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 485.807001][ T30] #1: ffffc90003747d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 485.819065][ T30] #2: ffff8880665c4078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 485.829222][ T30] #3: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 485.839786][ T30] 4 locks held by kworker/u9:5/5103: [ 485.845095][ T30] #0: ffff8880547d2148 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 485.857098][ T30] #1: ffffc90003767d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 485.869966][ T30] #2: ffff8880665c0078 (&hdev->lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x97/0xaf0 [ 485.880188][ T30] #3: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_remote_features_evt+0x4c3/0xaf0 [ 485.890751][ T30] 4 locks held by kworker/u9:8/5108: [ 485.896047][ T30] #0: ffff88806eb15148 ((wq_completion)hci9#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 485.907094][ T30] #1: ffffc900037a7d00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 485.919161][ T30] #2: ffff888015fc8078 (&hdev->lock){+.+.}-{3:3}, at: le_conn_complete_evt+0xb3/0x12e0 [ 485.929124][ T30] #3: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_connect_cfm+0x24/0x150 [ 485.938985][ T30] 3 locks held by kworker/0:4/5143: [ 485.944398][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 485.955430][ T30] #1: ffffc90004187d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 485.967363][ T30] #2: ffffffff8f5e7108 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 485.978796][ T30] 3 locks held by kworker/1:4/5144: [ 485.984385][ T30] 3 locks held by syz-executor/7941: [ 485.989672][ T30] #0: ffff88802227cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 485.999670][ T30] #1: ffff88802227c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 486.009316][ T30] #2: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 486.019402][ T30] 2 locks held by syz-executor/8255: [ 486.024978][ T30] #0: ffff888069d48d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 486.035023][ T30] #1: ffff888069d48078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 486.044671][ T30] 3 locks held by syz-executor/8263: [ 486.049957][ T30] #0: ffff888073844d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 486.059947][ T30] #1: ffff888073844078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 486.071270][ T30] #2: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 486.081863][ T30] 3 locks held by syz.4.983/8673: [ 486.086936][ T30] #0: ffff88807974cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 486.097125][ T30] #1: ffff88807974c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 486.106798][ T30] #2: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 486.116874][ T30] 4 locks held by syz.1.988/8709: [ 486.121924][ T30] #0: ffff888073840d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 486.132216][ T30] #1: ffff888073840078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 486.141952][ T30] #2: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 486.152022][ T30] #3: ffffffff8e339338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 486.163829][ T30] 3 locks held by syz-executor/8731: [ 486.169114][ T30] #0: ffff888062678d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 486.179935][ T30] #1: ffff888062678078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 486.189677][ T30] #2: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 486.199747][ T30] 3 locks held by syz-executor/8733: [ 486.205062][ T30] #0: ffff88802a9f0d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 486.215144][ T30] #1: ffff88802a9f0078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 486.224806][ T30] #2: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 486.234974][ T30] 3 locks held by syz-executor/8735: [ 486.240292][ T30] #0: ffff88802af78d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 486.250364][ T30] #1: ffff88802af78078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 486.259968][ T30] #2: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 486.270945][ T30] 3 locks held by syz-executor/8736: [ 486.276232][ T30] #0: ffff88802af7cd88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 486.287188][ T30] #1: ffff88802af7c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 486.296943][ T30] #2: ffffffff8f751808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 486.307108][ T30] 2 locks held by syz-executor/8749: [ 486.312421][ T30] 2 locks held by syz-executor/8777: [ 486.317704][ T30] #0: ffffffff8f5da8d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 486.327162][ T30] #1: ffffffff8e339338 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 486.338287][ T30] 1 lock held by syz-executor/8785: [ 486.343516][ T30] 1 lock held by syz-executor/8816: [ 486.348711][ T30] #0: ffff8880177d4d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_dev_open+0x1f4/0x300 [ 486.358171][ T30] [ 486.360536][ T30] ============================================= [ 486.360536][ T30] [ 486.370513][ T30] NMI backtrace for cpu 1 [ 486.374858][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 486.384750][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 486.394806][ T30] Call Trace: [ 486.398089][ T30] [ 486.401030][ T30] dump_stack_lvl+0x241/0x360 [ 486.405768][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.410972][ T30] ? __pfx__printk+0x10/0x10 [ 486.415568][ T30] ? vprintk_emit+0x631/0x770 [ 486.420353][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 486.425395][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 486.430346][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 486.435807][ T30] ? _printk+0xd5/0x120 [ 486.439974][ T30] ? __pfx__printk+0x10/0x10 [ 486.444578][ T30] ? __wake_up_klogd+0xcc/0x110 [ 486.449525][ T30] ? __pfx__printk+0x10/0x10 [ 486.454124][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 486.459163][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 486.465151][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 486.471136][ T30] watchdog+0xfde/0x1020 [ 486.475391][ T30] ? watchdog+0x1ea/0x1020 [ 486.479819][ T30] ? __pfx_watchdog+0x10/0x10 [ 486.484499][ T30] kthread+0x2f0/0x390 [ 486.488576][ T30] ? __pfx_watchdog+0x10/0x10 [ 486.493258][ T30] ? __pfx_kthread+0x10/0x10 [ 486.497857][ T30] ret_from_fork+0x4b/0x80 [ 486.502280][ T30] ? __pfx_kthread+0x10/0x10 [ 486.506875][ T30] ret_from_fork_asm+0x1a/0x30 [ 486.511691][ T30] [ 486.515689][ T30] Sending NMI from CPU 1 to CPUs 0: [ 486.521637][ C0] NMI backtrace for cpu 0 [ 486.521649][ C0] CPU: 0 PID: 8749 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 486.521667][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 486.521677][ C0] RIP: 0010:advance_sched+0x56b/0xca0 [ 486.521702][ C0] Code: ed 48 c1 ed 03 42 80 7c 25 00 00 48 8b 5c 24 38 74 08 4c 89 ef e8 d5 8b 6c f8 4f 8b 34 fe 48 89 d8 48 c1 e8 03 42 80 3c 20 00 <74> 08 48 89 df e8 bb 8b 6c f8 4c 8b 23 4c 89 f7 4c 89 e6 e8 9d d8 [ 486.521716][ C0] RSP: 0018:ffffc90000007c90 EFLAGS: 00000046 [ 486.521731][ C0] RAX: 1ffff11004dda2a6 RBX: ffff888026ed1530 RCX: ffff888020d19e00 [ 486.521743][ C0] RDX: ffff888020d19e00 RSI: 0000000000000000 RDI: 0000000000000010 [ 486.521754][ C0] RBP: 1ffff11004dda380 R08: ffffffff898f50d9 R09: fffff52000000f80 [ 486.521766][ C0] R10: dffffc0000000000 R11: fffff52000000f80 R12: dffffc0000000000 [ 486.521778][ C0] R13: ffff888026ed1c00 R14: 0000000000000000 R15: 0000000000000000 [ 486.521789][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 486.521803][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.521814][ C0] CR2: 00005555a3a15680 CR3: 000000000e132000 CR4: 00000000003506f0 [ 486.521828][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 486.521838][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 486.521848][ C0] Call Trace: [ 486.521855][ C0] [ 486.521863][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 486.521881][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 486.521899][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 486.521915][ C0] ? nmi_handle+0x2a/0x5a0 [ 486.521944][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 486.521961][ C0] ? nmi_handle+0x14f/0x5a0 [ 486.521981][ C0] ? nmi_handle+0x2a/0x5a0 [ 486.522002][ C0] ? advance_sched+0x56b/0xca0 [ 486.522022][ C0] ? default_do_nmi+0x63/0x160 [ 486.522039][ C0] ? exc_nmi+0x123/0x1f0 [ 486.522055][ C0] ? end_repeat_nmi+0xf/0x53 [ 486.522072][ C0] ? advance_sched+0x529/0xca0 [ 486.522093][ C0] ? advance_sched+0x56b/0xca0 [ 486.522113][ C0] ? advance_sched+0x56b/0xca0 [ 486.522134][ C0] ? advance_sched+0x56b/0xca0 [ 486.522154][ C0] [ 486.522159][ C0] [ 486.522173][ C0] ? __pfx_advance_sched+0x10/0x10 [ 486.522193][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 486.522215][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 486.522240][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 486.522265][ C0] hrtimer_interrupt+0x396/0x990 [ 486.522297][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 486.522320][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 486.522340][ C0] [ 486.522345][ C0] [ 486.522351][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.522372][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 486.522388][ C0] Code: 2b 00 74 08 4c 89 f7 e8 ba 73 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 486.522401][ C0] RSP: 0018:ffffc900036776c0 EFLAGS: 00000206 [ 486.522414][ C0] RAX: 0000000000000001 RBX: 1ffff920006ceee4 RCX: 0000000000000001 [ 486.522425][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1feb40 [ 486.522437][ C0] RBP: ffffc90003677808 R08: ffffffff92fa8587 R09: 1ffffffff25f50b0 [ 486.522448][ C0] R10: dffffc0000000000 R11: fffffbfff25f50b1 R12: 1ffff920006ceee0 [ 486.522460][ C0] R13: dffffc0000000000 R14: ffffc90003677720 R15: 0000000000000246 [ 486.522490][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 486.522518][ C0] mod_memcg_page_state+0xb7/0x770 [ 486.522533][ C0] ? mod_memcg_page_state+0x96/0x770 [ 486.522549][ C0] ? __pfx___might_resched+0x10/0x10 [ 486.522566][ C0] ? mod_memcg_page_state+0x96/0x770 [ 486.522581][ C0] ? __pfx_mod_memcg_page_state+0x10/0x10 [ 486.522597][ C0] ? free_unref_page+0x634/0xea0 [ 486.522622][ C0] vfree+0x17c/0x2e0 [ 486.522638][ C0] kcov_close+0x2b/0x50 [ 486.522654][ C0] ? __pfx_kcov_close+0x10/0x10 [ 486.522669][ C0] __fput+0x406/0x8b0 [ 486.522691][ C0] task_work_run+0x24f/0x310 [ 486.522714][ C0] ? __pfx_task_work_run+0x10/0x10 [ 486.522734][ C0] ? do_exit+0xa22/0x27e0 [ 486.522751][ C0] ? kmem_cache_free+0x145/0x350 [ 486.522768][ C0] do_exit+0xa27/0x27e0 [ 486.522790][ C0] ? __pfx_do_exit+0x10/0x10 [ 486.522808][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.522830][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 486.522848][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 486.522863][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 486.522881][ C0] do_group_exit+0x207/0x2c0 [ 486.522899][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.522913][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 486.522934][ C0] get_signal+0x16a1/0x1740 [ 486.522961][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 486.522979][ C0] ? __pfx_get_signal+0x10/0x10 [ 486.523005][ C0] arch_do_signal_or_restart+0x96/0x860 [ 486.523025][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 486.523042][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 486.523065][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 486.523086][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 486.523108][ C0] do_syscall_64+0x100/0x230 [ 486.523128][ C0] ? clear_bhb_loop+0x35/0x90 [ 486.523144][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.523164][ C0] RIP: 0033:0x7fa2b597796c [ 486.523177][ C0] Code: Unable to access opcode bytes at 0x7fa2b5977942. [ 486.523185][ C0] RSP: 002b:00007ffde6449650 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 486.523200][ C0] RAX: 0000000000000028 RBX: 00007fa2b6634620 RCX: 00007fa2b597796c [ 486.523211][ C0] RDX: 0000000000000028 RSI: 00007fa2b6634670 RDI: 0000000000000003 [ 486.523221][ C0] RBP: 0000000000000000 R08: 00007ffde64496a4 R09: 000000000000000c [ 486.523231][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 486.523241][ C0] R13: 0000000000000000 R14: 00007fa2b6634670 R15: 0000000000000000 [ 486.523261][ C0] [ 486.523642][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 487.109726][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 487.119640][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 487.129704][ T30] Call Trace: [ 487.132989][ T30] [ 487.136032][ T30] dump_stack_lvl+0x241/0x360 [ 487.140725][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.145932][ T30] ? __pfx__printk+0x10/0x10 [ 487.150729][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 487.156827][ T30] ? vscnprintf+0x5d/0x90 [ 487.161172][ T30] panic+0x349/0x860 [ 487.165316][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 487.171496][ T30] ? __pfx_panic+0x10/0x10 [ 487.175946][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 487.181349][ T30] ? __irq_work_queue_local+0x137/0x410 [ 487.186919][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 487.192297][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 487.198455][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 487.204625][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 487.210785][ T30] watchdog+0x101d/0x1020 [ 487.215125][ T30] ? watchdog+0x1ea/0x1020 [ 487.219549][ T30] ? __pfx_watchdog+0x10/0x10 [ 487.224229][ T30] kthread+0x2f0/0x390 [ 487.228304][ T30] ? __pfx_watchdog+0x10/0x10 [ 487.232981][ T30] ? __pfx_kthread+0x10/0x10 [ 487.237574][ T30] ret_from_fork+0x4b/0x80 [ 487.242000][ T30] ? __pfx_kthread+0x10/0x10 [ 487.246593][ T30] ret_from_fork_asm+0x1a/0x30 [ 487.251379][ T30] [ 488.372151][ T30] Shutting down cpus with NMI [ 488.377076][ T30] Kernel Offset: disabled [ 488.381395][ T30] Rebooting in 86400 seconds..