last executing test programs: 1m20.950482437s ago: executing program 0 (id=686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000ffffff80000000000000000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) 1m5.042171339s ago: executing program 0 (id=686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000ffffff80000000000000000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) 51.963759544s ago: executing program 0 (id=686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000ffffff80000000000000000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) 36.450419885s ago: executing program 0 (id=686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000ffffff80000000000000000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) 21.419309681s ago: executing program 0 (id=686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000ffffff80000000000000000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000040a06409000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000010000000000000095137e08554824cc64615c4c000ade8523d69d45a8d9687aa2ce6699279371dee43fdadebf1937f2a13ba6d9f0f73bc718aff001bc98534ceed7f7a8470961bc10c5a69b68231afe4b26449bddcaaf092b4730796f3e6c148356ceefef574da9ef4076549db21fcfd2a68473bcf13b82479bc8d12382471ea73cacee18c06745ba9088abcb71b7bf1fd6abdb798216e36ba165c9cb4b41c5c96d8688366ab47ad2491ecb78e5cda1484a80575db5a1990ba948e611d9a11e8103176ce743f0c184c3f14c34f2d75ae4d6b2e8cb14a75f95032176323dc372cb21688ec7362fec943403ec262519be90db3ae32c9d77897cd683b1f576e8c058d12c997f1dbf6580b3a1bb1c2181643125fd70e6d3963bc8d024e990e1beab279a1b5362e8181314db6943c1952796e6e7155ff77ba4a027e351a9febedf6a39886b10680ac03029e45554ed47ec814f27fa49"], 0xb8}}, 0x0) 9.776442456s ago: executing program 0 (id=686): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000ffffff80000000000000000000000000000000000000000000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000040a06409000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000010000000000000095137e08554824cc64615c4c000ade8523d69d45a8d9687aa2ce6699279371dee43fdadebf1937f2a13ba6d9f0f73bc718aff001bc98534ceed7f7a8470961bc10c5a69b68231afe4b26449bddcaaf092b4730796f3e6c148356ceefef574da9ef4076549db21fcfd2a68473bcf13b82479bc8d12382471ea73cacee18c06745ba9088abcb71b7bf1fd6abdb798216e36ba165c9cb4b41c5c96d8688366ab47ad2491ecb78e5cda1484a80575db5a1990ba948e611d9a11e8103176ce743f0c184c3f14c34f2d75ae4d6b2e8cb14a75f95032176323dc372cb21688ec7362fec943403ec262519be90db3ae32c9d77897cd683b1f576e8c058d12c997f1dbf6580b3a1bb1c2181643125fd70e6d3963bc8d024e990e1beab279a1b5362e8181314db6943c1952796e6e7155ff77ba4a027e351a9febedf6a39886b10680ac03029e45554ed47ec814f27fa49"], 0xb8}}, 0x0) 3.478022226s ago: executing program 3 (id=1643): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000052000100000000006fe810d50242d2a00c0005"], 0x20}}, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x5, [@volatile={0xa, 0x0, 0x0, 0x9, 0x5}, @func={0x2, 0x0, 0x0, 0xc, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x4, 0x9}}, @ptr={0xb, 0x0, 0x0, 0x2, 0x2}, @ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x4, 0x5}, {0x9, 0x3}]}]}, {0x0, [0x2e, 0x2e, 0x61]}}, &(0x7f0000000500)=""/4096, 0x81, 0x1000, 0x1, 0x906b40a7}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000000000000000000000031d0a6e400f3ca06346d132a47a793851000000600000018040000", @ANYRES64=r1, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000001500)=""/209, 0x0, 0x62, '\x00', 0x0, 0x0, r1}, 0x90) 3.391370506s ago: executing program 3 (id=1644): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006100000085000000d000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe80, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = accept4(r1, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000010c0)=0xffff) recvmsg(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)=""/101, 0x65}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xb, "52aa3fcc6c9910fa6bd60b"}, &(0x7f0000000180)=0x13) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={r4, 0x6, 0xa}, 0x8) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendmsg$inet6(r3, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 3.000365332s ago: executing program 2 (id=1650): socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x4000000000002, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r2], 0x4c}}, 0x1000000000000000) 2.831087908s ago: executing program 2 (id=1653): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0x8, 0xfa04, 0xc0, 0x6c02, 0x258, 0x194, 0x194, 0x258, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x98, 0x90, 0x0, {0x0, 0x74020000}, [@common=@inet=@socket1={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@broadcast, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:man_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 2.692282468s ago: executing program 1 (id=1656): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000c, 0x12, r0, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), 0x4) 2.652300003s ago: executing program 2 (id=1657): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000180)={0x18, 0x0, {0x4, @broadcast, 'syzkaller0\x00'}}) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x102, 0x0) sendto$inet6(r2, &(0x7f0000000300)="ce7f6857d8f891d36327ebca82463fe7d4bc35c13bbae64ca911f5", 0x1b, 0x24008040, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @mcast2, 0x1ff}, 0x1c) write$binfmt_script(r1, &(0x7f0000000140), 0x208e24b) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1}, 0x18) sendmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000400)="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", 0xffc}], 0x1, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES64], 0x2d0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r10, 0xffffffffffffffff, 0x34, 0x0, 0x4000, @link_id}, 0x20) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000001400)=ANY=[@ANYRESOCT=r7, @ANYBLOB="afa680936817441865b92a9640b3139e8a24233fae5c0e54a62493554701f1162825d756e8c89d6000b09fbed1a27df25c87482976f0cda7206afd145584acd05e10ec1be07880c69edf7db828ae143267625853186d7b14223c9c550d880e00def4e977dc534c6ef02d460626894dbfd840b373a575be6243243007d25e5048e09fd8c9fbe1917537af7d5892"], 0xfffffffffffffea8) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00\a\x00'/20, @ANYRES32=r9, @ANYBLOB="000000000a0002002ee308099cc800000600050002000000"], 0x30}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 2.526096222s ago: executing program 1 (id=1659): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x464, 0x300, 0x70bd27, 0x25dfdbfe, "d42bff611df679eae7", ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (async) recvmmsg(r0, &(0x7f0000001200)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000180)=""/46, 0x2e}, {&(0x7f00000001c0)=""/130, 0x82}], 0x2, &(0x7f00000002c0)=""/201, 0xc9}, 0x5}, {{&(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000440)=""/232, 0xe8}], 0x1, &(0x7f0000000580)=""/199, 0xc7}, 0x76}, {{&(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/19, 0x13}, {&(0x7f0000000740)=""/38, 0x26}, {&(0x7f0000000780)=""/47, 0x2f}], 0x3}, 0x8}, {{&(0x7f0000000800)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000880)=""/135, 0x87}, {&(0x7f0000000940)=""/32, 0x20}, {&(0x7f0000000980)=""/129, 0x81}, {&(0x7f0000000a40)=""/41, 0x29}, {&(0x7f0000000a80)=""/153, 0x99}, {&(0x7f0000000b40)=""/174, 0xae}, {&(0x7f0000000c00)=""/149, 0x95}, {&(0x7f0000000cc0)=""/203, 0xcb}, {&(0x7f0000000dc0)=""/132, 0x84}, {&(0x7f0000000e80)=""/8, 0x8}], 0xa, &(0x7f0000000f80)=""/56, 0x38}, 0x552}, {{&(0x7f0000000fc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @private}}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000001040)=""/49, 0x31}, {&(0x7f0000001080)=""/52, 0x34}], 0x2, &(0x7f0000001100)=""/212, 0xd4}, 0x7}], 0x5, 0x40, &(0x7f0000001340)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, 0xfffffffffffffffd, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x42e4557e749ffed8}, 0xc, &(0x7f0000001480)={&(0x7f00000013c0)={0x94, 0x2, 0x8, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8906}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xc}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88b5}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x15}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x400}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xf995}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0xffff}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x1198}, @CTA_TIMEOUT_TCP_CLOSE={0x8, 0x8, 0x1, 0x0, 0xfc000000}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x271}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4001}, 0x4000010) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001540), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000001600)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x2480200}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x1c, r4, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000048}, 0x8014) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000016c0)={0x1, 0x58, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000017c0)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@restrict={0xc, 0x0, 0x0, 0xb, 0x1}, @volatile={0x6, 0x0, 0x0, 0x9, 0x2}]}, {0x0, [0x61, 0x30, 0x30, 0x5f, 0x30, 0x2e]}}, &(0x7f0000001740)=""/118, 0x38, 0x76, 0x1, 0x2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001800)={0x1b, 0x0, 0x0, 0xfffffffe, 0x0, r5, 0x9, '\x00', r6, r7, 0x2, 0x2, 0x3}, 0x48) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000001880), r2) (async) getsockname$packet(r1, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001900)=0x14) (async) getsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000001940), &(0x7f0000001980)=0x4) (async) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000019c0)={0x0, 0x85, "ac7870bf02ef7ac9293a413a141801015324e92de78c41ec551eeab9fa1280868cda1438ebb9029bb9424fce723f220ad7edd60270fcc1dd026234d254d2fd71390fa0238828154ecf7887420aeebdb842d8de71e76a5f01f4cf7c60429313d2e2a981d97919b7c4fac75ac4554a36e2cb5512bedb0cd3d5a59f5e13343c55f431f2dc4014"}, &(0x7f0000001a80)=0x8d) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001ac0)={0x0, 0x81, 0x3, 0x6cd4, 0x8, 0x5, 0x5, 0xff, {r8, @in={{0x2, 0x4e23, @multicast1}}, 0x9, 0xca57, 0xa8, 0x4, 0x1}}, &(0x7f0000001b80)=0xb0) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001bc0)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000001c00), r10) (async) connect$pppl2tp(r2, &(0x7f0000001c40)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote}, 0x3}}, 0x26) pipe(&(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000001d00)=0x0) sendmsg$AUDIT_SET(r12, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x3c, 0x3e9, 0x100, 0x70bd2a, 0x25dfdbfd, {0x4, 0x1, 0x1, r13, 0xffff, 0x100, 0x13c, 0x9, 0x0, 0x1857, 0xb89}, [""]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4004800) (async) setsockopt$XDP_RX_RING(r11, 0x11b, 0x2, &(0x7f0000001e00)=0x1008001, 0x4) (async) recvmsg$can_raw(r9, &(0x7f0000003280)={&(0x7f0000001e40)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000003180)=[{&(0x7f0000001ec0)=""/104, 0x68}, {&(0x7f0000001f40)=""/51, 0x33}, {&(0x7f0000001f80)=""/187, 0xbb}, {&(0x7f0000002040)=""/79, 0x4f}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/177, 0xb1}], 0x6, &(0x7f0000003200)=""/95, 0x5f}, 0x2) (async) r14 = socket(0x22, 0x2, 0x4) getsockopt$inet_pktinfo(r14, 0x0, 0x8, &(0x7f00000032c0)={0x0, @initdev, @multicast1}, &(0x7f0000003300)=0xc) getsockopt$WPAN_WANTACK(r14, 0x0, 0x0, &(0x7f0000003340), &(0x7f0000003380)=0x4) (async, rerun: 64) ioctl$sock_x25_SIOCADDRT(r14, 0x890b, &(0x7f00000033c0)={@null, 0xf, 'geneve1\x00'}) (rerun: 64) 2.445760422s ago: executing program 3 (id=1660): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}]}, 0x3c}}, 0x0) (fail_nth: 5) 2.303088471s ago: executing program 1 (id=1662): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x102, 0x0) sendto$inet6(r2, &(0x7f0000000300)="ce7f6857d8f891d36327ebca82463fe7d4bc35c13bbae64ca911f5", 0x1b, 0x24008040, &(0x7f0000000080)={0xa, 0x4e20, 0x3, @mcast2, 0x1ff}, 0x1c) write$binfmt_script(r1, &(0x7f0000000140), 0x208e24b) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1}, 0x18) sendmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000400)="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", 0xffc}], 0x1, &(0x7f0000000240)=ANY=[@ANYRES64=r1, @ANYRES64], 0x2d0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000420095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1300000007"], 0xd) (fail_nth: 8) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@NDA_LLADDR={0xa, 0x2, @random="2ee308099cc8"}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0x30}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) 1.96663406s ago: executing program 3 (id=1663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x18}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4004004) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000001380)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.827356438s ago: executing program 4 (id=1664): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x80, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_INET6={0x48, 0x1800, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0x80}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2800128008000100677470001c00028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x50}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge0\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r4}) (async) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_setlink={0x80, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@IFLA_AF_SPEC={0x8, 0xc, 0x0, 0x0, [@AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0x58, 0x1a, 0x0, 0x1, [@AF_INET6={0x48, 0x1800, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}]}, 0x80}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB="50000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="2800128008000100677470001c00028008000100", @ANYRES32=r1, @ANYBLOB="080002"], 0x50}}, 0x0) (async) 1.443186721s ago: executing program 4 (id=1665): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}}, 0x0) 1.442427819s ago: executing program 4 (id=1666): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0xfff, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000000, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000200)={0x0, "3aa6a4"}, 0x6) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x437, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c054}, 0xc090) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'veth1_vlan\x00', 0xd3}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2b, 0x1, 0x6) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x11e, 0x1, 0x0, 0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000180)=0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000240)={{{@in=@rand_addr=0x64010101, @in=@loopback, 0x4e21, 0x6, 0x4e21, 0x9, 0xa, 0x20, 0x80, 0x4c, 0x0, r4}, {0x0, 0xfffffffffffffffe, 0x8aa1, 0x7, 0xffff, 0x8, 0x3}, {0x7, 0x6c, 0xb, 0x14}, 0xfffff069, 0x6e6bb9, 0x1, 0x1, 0x2, 0x2}, {{@in=@multicast1, 0x372e, 0x32}, 0xa, @in=@rand_addr=0x64010102, 0x3504, 0x0, 0x1, 0xb0, 0x66, 0xff, 0x9}}, 0xe8) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x500, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000000a06050000000000000000000000000009ffffffffffffff7f00010005000100070000000400078061a4ec54d2121d69deda1a89ba7e1139950b3ffddb8979d9f4594b7df091639ec5ea61957a43cc963dc98b570229cc20ccbbdc47cf5b2c7eeccd57f64679a5c6a6192305672d722211dadbf1e3"], 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x80) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r6, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="e4a1ee69571600000187b5a5ec5b808245"], 0x10}, {&(0x7f0000000540)=ANY=[@ANYBLOB="0100000000007744a22dcaff62b90c3af1f74a9062375826aa91297f5990a68553bd2ee6a2a3487a116f7a5613426a956efe0a0680e281bd75974d9f64a1cb3a083e1799701400"/82], 0x10}], 0x2, 0x0, 0x5e}, 0x0) 1.334152899s ago: executing program 2 (id=1667): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)='\x00', 0x1, 0x24000085, &(0x7f00000001c0)={0x11, 0x19, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000014}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000002600), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, r4, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0xd6, @media='eth\x00'}}}}, 0x68}}, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0), &(0x7f0000000300)=0xe) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x800, 0x70bd29, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44008054}, 0x800) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.084521871s ago: executing program 2 (id=1668): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000200)={0x1d, r2, 0x2, {}, 0x2}, 0x18) socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write(r3, &(0x7f0000000200)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f66952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e41f206d930eda2769c56e6d5e3d541ce9a21c3ce5cb5f", 0xfff7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r4, 0x1, {0x1}, 0xff}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x1d, 0x0, 0x1, {0x2, 0xe6f7f5baf71692db}}, 0x18, &(0x7f0000000180)={&(0x7f0000000300)}}, 0xee) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$can_j1939(0x1d, 0x2, 0x7) r8 = socket$inet6(0xa, 0x80002, 0x53a) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote, r10}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1c, &(0x7f0000002ec0)={@private0, r10}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r11}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYRES16=r1, @ANYRES16=r12, @ANYBLOB="000228bd7000fedbdf250d00000008000600080000001400028008000400ff070000080005000500000008000400f9ffffff080004000400000008220500fffeffff0800050002000000300001800c00070010000000000000000600010002000000060001000a0000000700060072720000080009003a0000002800018014000300fe80000000000000000000000000001e08000900060000000800050003000000"], 0xa8}, 0x1, 0x0, 0x0, 0x48801}, 0x120048c0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000667210000000000850000ebac0000009500000000000020000300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.083575029s ago: executing program 1 (id=1678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800800040000000000080013"], 0x44}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000008080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0xc0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_VERSION={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.005979233s ago: executing program 3 (id=1669): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000064000000000000000000000079101800000000006320e0ff0000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x90) 906.990848ms ago: executing program 1 (id=1670): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3ff}]}, 0x2c}}, 0x40) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="c21504239e1dc595f0766418b856f059", 0xfffffe99}], 0x2, &(0x7f0000001a00)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000005d80)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x34000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98008000", @ANYRES16, @ANYBLOB="02002abd7000fddbdf250b0000008400018014000300ac1e0001000000000000000000000000080009001e00000014000300ac1414bb0000000000000000000000000c00070030"], 0x98}}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x154, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x59}, @TCA_CHOKE_STAB={0x104, 0x2, "1a0358e37b9d53891bb18969e18433f9a93c354a67d6059004071ec097c107a4a2953dc6f4ef1d431b353a1dc137ae9b6b92ce47f9caa9e66416e16b350d597d0f8cf690297814e942c450648c0b828eff44fe872507e3672b3c358b58bc506de741d4f1dfdf32e53a9d6fd0f9a6808d0c8171fe5d5233b1dda577cf5efa23ba84a58f7368145f2489094a32d6e5b6214dba36b25bfa226cf9694f916764e63f70e75906181ae26d1e8a1631b5a43f565661dd433e91cf944b7a4f0bec5ed44fdeabc011c13ec62f87a96cde2b8d9e0a012951617211bbfe2247c21ea4803973a93f761e7485686af233e8b6be47b756652a032fd5715bf9965d85653882606f"}]}}]}, 0x154}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001400)={'syztnl0\x00', &(0x7f0000001380)={'syztnl0\x00', r6, 0x2f, 0x2, 0x3, 0x7, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7, 0x5b0, 0x9}}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0100001000130700000000000000007f000001000000000000000000000000200100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001200726663dbbce377af637d0528616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040"], 0x13c}}, 0x0) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x3}, 0x6) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000001f00000000000085000000bc0000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r12 = accept4(r11, 0x0, 0x0, 0x0) sendmsg$kcm(r12, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 888.841071ms ago: executing program 3 (id=1671): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0xfffffefb}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x1}, @IFLA_IPTUN_LINK={0x8, 0x1, r1}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r3, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xd}]}]}, 0x3c}, 0x5}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x4b79, 0x4) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000040)=0xaf2, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) recvmmsg(r5, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/148, 0x94}}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r4, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_TAIL={0x3f, 0xf, [@rann={0x7e, 0x15, {{0x1, 0x72}, 0xdd, 0x8, @device_b, 0x8, 0x40, 0xfff}}, @peer_mgmt={0x75, 0x14, {0x0, 0x0, @void, @void, @val="dd83674faa2ca847cb08ab7c7474560e"}}, @peer_mgmt={0x75, 0x4, {0x0, 0x1, @void, @void, @void}}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004090}, 0x4000040) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r8, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x79, &(0x7f0000000280)=ANY=[], 0x8) 542.837927ms ago: executing program 4 (id=1672): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x11, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x64}}}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x35, &(0x7f0000000080)=""/53, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) 450.319485ms ago: executing program 4 (id=1673): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local={0xac, 0x14, 0x14, 0x64}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa682c726}, 0x0) 449.810193ms ago: executing program 4 (id=1674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xb}, {0x0, 0x5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x100}, @TCA_CAKE_AUTORATE={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000000)={'mangle\x00', 0x7003}, &(0x7f0000000100)=0x54) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000001c0)={0x2f, 0x12, 0x0, 0xa, 0x0, [@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @empty, @dev={0xfe, 0x80, '\x00', 0x3f}, @local, @loopback, @remote, @private0, @mcast1]}, 0x98) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000000000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000000000ddef0b922726984cc293c32fd9f773908f23dd040ffcbf5b4b0f0e9b17ddf917eb5a12a0d33435ddb89c0ebca3869a2904275e7e2fc02e9d10c5c387f222f626916d829ac1383fdf03483d69eaa2ab417c1254f5195c8439b90b7947f875bee20d3799dcb20789d99c301cda91abc3043357ac9b317480e87dfad2a70e67edaf9096c1008e06a77a9502ea49f137b3efadbf02ab4267e82f0eb480b28654c11311e2f74cafa56cbf4c0213549204815510ea31a8ebcde46ad804ea8c931bccdbb78eddafe622e57a4adfbcef887a36ec", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028006000200000000000a000100aaaaaaaaaabb0000"], 0x48}}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x48180) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}) write$ppp(r6, &(0x7f0000000140)="1627", 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x30000008}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r7, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) 11.652023ms ago: executing program 1 (id=1675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x9, 0x0, 0x23, @local, @private1, 0x8000, 0x7, 0x400, 0x80000001}}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8, 0x1, 0xab59, 0x0, r1, 0x7, '\x00', r2, r3, 0x2, 0x5, 0x3, 0xc}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x15, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000000000000a50a000000000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 2 (id=1676): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x80001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r4, &(0x7f0000000100)='H', &(0x7f0000000000)=@tcp6=r5}, 0x20) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f00000001c0), &(0x7f0000000140)=@tcp=r6}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'caif0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x74}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r9, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}, @NL80211_ATTR_PMKID={0x14, 0x55, "5851e6087952a2634137f18e32d044d6"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x16}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x401}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) kernel console output (not intermixed with test programs): 0x1a7/0xcf0 [ 160.118352][ T8642] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.123841][ T8642] ? ref_tracker_free+0x643/0x7e0 [ 160.128894][ T8642] netlink_rcv_skb+0x1e3/0x430 [ 160.133675][ T8642] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.139171][ T8642] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.144498][ T8642] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.149713][ T8642] netlink_unicast+0x7f6/0x990 [ 160.154524][ T8642] ? __pfx_netlink_unicast+0x10/0x10 [ 160.159828][ T8642] ? __virt_addr_valid+0x183/0x530 [ 160.164964][ T8642] ? __check_object_size+0x49c/0x900 [ 160.170262][ T8642] ? bpf_lsm_netlink_send+0x9/0x10 [ 160.175381][ T8642] netlink_sendmsg+0x8e4/0xcb0 [ 160.180169][ T8642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.185467][ T8642] ? __import_iovec+0x536/0x820 [ 160.190310][ T8642] ? aa_sock_msg_perm+0x91/0x160 [ 160.195239][ T8642] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 160.200513][ T8642] ? security_socket_sendmsg+0x87/0xb0 [ 160.205978][ T8642] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.211264][ T8642] __sock_sendmsg+0x221/0x270 [ 160.215950][ T8642] ____sys_sendmsg+0x525/0x7d0 [ 160.217262][ T8651] FAULT_INJECTION: forcing a failure. [ 160.217262][ T8651] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.220812][ T8642] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.220857][ T8642] __sys_sendmsg+0x2b0/0x3a0 [ 160.220882][ T8642] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.248922][ T8642] ? vfs_write+0x7c4/0xc90 [ 160.253390][ T8642] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.259731][ T8642] ? do_syscall_64+0x100/0x230 [ 160.264500][ T8642] ? do_syscall_64+0xb6/0x230 [ 160.269188][ T8642] do_syscall_64+0xf3/0x230 [ 160.273707][ T8642] ? clear_bhb_loop+0x35/0x90 [ 160.278399][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.284319][ T8642] RIP: 0033:0x7f6f9ef79e79 [ 160.288758][ T8642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.308387][ T8642] RSP: 002b:00007f6f9e9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.316906][ T8642] RAX: ffffffffffffffda RBX: 00007f6f9f115f80 RCX: 00007f6f9ef79e79 [ 160.324897][ T8642] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 160.332901][ T8642] RBP: 00007f6f9e9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 160.340992][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.348985][ T8642] R13: 0000000000000000 R14: 00007f6f9f115f80 R15: 00007ffddc090158 [ 160.356994][ T8642] [ 160.360016][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.1.1070 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 160.370703][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 160.380768][ T8651] Call Trace: [ 160.384044][ T8651] [ 160.386971][ T8651] dump_stack_lvl+0x241/0x360 [ 160.391662][ T8651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.396860][ T8651] ? __pfx__printk+0x10/0x10 [ 160.401456][ T8651] ? __pfx_lock_release+0x10/0x10 [ 160.406481][ T8651] should_fail_ex+0x3b0/0x4e0 [ 160.411155][ T8651] _copy_from_user+0x2f/0xe0 [ 160.415738][ T8651] copy_msghdr_from_user+0xae/0x680 [ 160.420934][ T8651] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 160.426744][ T8651] __sys_sendmsg+0x23d/0x3a0 [ 160.431327][ T8651] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.436426][ T8651] ? vfs_write+0x7c4/0xc90 [ 160.440864][ T8651] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.447183][ T8651] ? do_syscall_64+0x100/0x230 [ 160.451937][ T8651] ? do_syscall_64+0xb6/0x230 [ 160.456603][ T8651] do_syscall_64+0xf3/0x230 [ 160.461093][ T8651] ? clear_bhb_loop+0x35/0x90 [ 160.465769][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.471651][ T8651] RIP: 0033:0x7f9dcc379e79 [ 160.476059][ T8651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.495667][ T8651] RSP: 002b:00007f9dcd12c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.504085][ T8651] RAX: ffffffffffffffda RBX: 00007f9dcc516058 RCX: 00007f9dcc379e79 [ 160.512076][ T8651] RDX: 0000000000000000 RSI: 0000000020002740 RDI: 0000000000000004 [ 160.520051][ T8651] RBP: 00007f9dcd12c090 R08: 0000000000000000 R09: 0000000000000000 [ 160.528015][ T8651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.535979][ T8651] R13: 0000000000000001 R14: 00007f9dcc516058 R15: 00007ffc63624f48 [ 160.543958][ T8651] [ 160.775321][ T8660] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1071'. [ 160.814930][ T8660] vlan4: entered promiscuous mode [ 160.839509][ T8473] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.852618][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.862909][ T8473] bridge_slave_0: entered allmulticast mode [ 160.884861][ T8473] bridge_slave_0: entered promiscuous mode [ 160.928631][ T8473] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.936543][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.943766][ T8473] bridge_slave_1: entered allmulticast mode [ 160.980705][ T8473] bridge_slave_1: entered promiscuous mode [ 161.153626][ T8473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.171581][ T8679] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 161.185270][ T8473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.289418][ T8682] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1080'. [ 161.566799][ T8473] team0: Port device team_slave_0 added [ 161.608735][ T8473] team0: Port device team_slave_1 added [ 161.656142][ T5235] Bluetooth: hci0: command tx timeout [ 161.756370][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.763361][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.784331][ T8709] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 161.835811][ T8473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.892835][ T8473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.953398][ T8473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.010236][ T8473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.148377][ T8718] Bluetooth: MGMT ver 1.23 [ 162.164731][ T8473] hsr_slave_0: entered promiscuous mode [ 162.172554][ T8721] FAULT_INJECTION: forcing a failure. [ 162.172554][ T8721] name failslab, interval 1, probability 0, space 0, times 0 [ 162.185568][ T8721] CPU: 0 UID: 0 PID: 8721 Comm: syz.1.1087 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 162.186380][ T8473] hsr_slave_1: entered promiscuous mode [ 162.196244][ T8721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 162.196259][ T8721] Call Trace: [ 162.196267][ T8721] [ 162.196276][ T8721] dump_stack_lvl+0x241/0x360 [ 162.196304][ T8721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.196322][ T8721] ? __pfx__printk+0x10/0x10 [ 162.196348][ T8721] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 162.196370][ T8721] ? __pfx___might_resched+0x10/0x10 [ 162.196391][ T8721] ? __lock_acquire+0x137a/0x2040 [ 162.196419][ T8721] should_fail_ex+0x3b0/0x4e0 [ 162.196445][ T8721] should_failslab+0xac/0x100 [ 162.196471][ T8721] ? __alloc_skb+0x1c3/0x440 [ 162.196492][ T8721] kmem_cache_alloc_node_noprof+0x71/0x320 [ 162.196518][ T8721] __alloc_skb+0x1c3/0x440 [ 162.196538][ T8721] ? validate_chain+0x11e/0x5900 [ 162.196560][ T8721] ? __pfx___alloc_skb+0x10/0x10 [ 162.196590][ T8721] alloc_skb_with_frags+0xc3/0x770 [ 162.196619][ T8721] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 162.196644][ T8721] sock_alloc_send_pskb+0x91a/0xa60 [ 162.298842][ T8721] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 162.304577][ T8721] ? aa_sk_perm+0x96d/0xab0 [ 162.309077][ T8721] hci_sock_sendmsg+0x22b/0x11c0 [ 162.314041][ T8721] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 162.319408][ T8721] ? aa_sock_msg_perm+0x91/0x160 [ 162.324336][ T8721] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 162.329785][ T8721] ? security_socket_sendmsg+0x87/0xb0 [ 162.335239][ T8721] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 162.340606][ T8721] __sock_sendmsg+0x221/0x270 [ 162.345284][ T8721] sock_write_iter+0x2dd/0x400 [ 162.350055][ T8721] ? __pfx_sock_write_iter+0x10/0x10 [ 162.355343][ T8721] ? bpf_lsm_file_permission+0x9/0x10 [ 162.360752][ T8721] ? security_file_permission+0x7f/0xa0 [ 162.366292][ T8721] vfs_write+0xa72/0xc90 [ 162.370530][ T8721] ? __pfx_sock_write_iter+0x10/0x10 [ 162.375819][ T8721] ? __pfx_vfs_write+0x10/0x10 [ 162.380591][ T8721] ksys_write+0x1a0/0x2c0 [ 162.384915][ T8721] ? __pfx_ksys_write+0x10/0x10 [ 162.389758][ T8721] ? do_syscall_64+0x100/0x230 [ 162.394512][ T8721] ? do_syscall_64+0xb6/0x230 [ 162.399266][ T8721] do_syscall_64+0xf3/0x230 [ 162.403843][ T8721] ? clear_bhb_loop+0x35/0x90 [ 162.408522][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.414408][ T8721] RIP: 0033:0x7f9dcc379e79 [ 162.418818][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.438420][ T8721] RSP: 002b:00007f9dcd14d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 162.447004][ T8721] RAX: ffffffffffffffda RBX: 00007f9dcc515f80 RCX: 00007f9dcc379e79 [ 162.454968][ T8721] RDX: 000000000000000d RSI: 0000000020000200 RDI: 000000000000000c [ 162.462933][ T8721] RBP: 00007f9dcd14d090 R08: 0000000000000000 R09: 0000000000000000 [ 162.470898][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.479118][ T8721] R13: 0000000000000000 R14: 00007f9dcc515f80 R15: 00007ffc63624f48 [ 162.487097][ T8721] [ 162.491831][ T8473] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.499960][ T8473] Cannot create hsr debugfs directory [ 163.099233][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1092'. [ 163.120202][ T8746] vlan4: entered promiscuous mode [ 163.291273][ T8752] xt_TPROXY: Can be used only with -p tcp or -p udp [ 163.444750][ T8750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1093'. [ 163.481546][ T8759] netlink: 73 bytes leftover after parsing attributes in process `syz.3.1096'. [ 163.552083][ T8759] dvmrp1: entered allmulticast mode [ 163.616676][ T8766] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 163.721665][ T8771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1098'. [ 163.734722][ T8473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.742337][ T5235] Bluetooth: hci0: command tx timeout [ 163.754557][ T8473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.773759][ T8473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.789413][ T8473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.050484][ T8473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.105091][ T8473] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.159749][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.167035][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.200821][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.208049][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.283696][ T8473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 164.325770][ T8473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 164.479550][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 164.565824][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 164.811751][ T8473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.053476][ T8825] tipc: Started in network mode [ 165.062373][ T8825] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 165.087174][ T8825] tipc: Enabled bearer , priority 10 [ 165.134824][ T8825] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1112'. [ 165.264183][ T8838] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 165.266986][ T8473] veth0_vlan: entered promiscuous mode [ 165.346284][ T8473] veth1_vlan: entered promiscuous mode [ 165.411572][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1118'. [ 165.424015][ T8473] veth0_macvtap: entered promiscuous mode [ 165.460211][ T8473] veth1_macvtap: entered promiscuous mode [ 165.491555][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.525466][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.551628][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.568925][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.581168][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.591940][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.607543][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.620170][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.630672][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.641860][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.653779][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.738842][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.787829][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.813031][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.845464][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.875499][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.900451][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.921772][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.942784][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.962661][ T8473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.990238][ T8473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.016865][ T8473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.062314][ T8473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.095800][ T46] tipc: Node number set to 10463914 [ 166.125577][ T8473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.151728][ T8473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.182232][ T8473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.266352][ T8882] __nla_validate_parse: 1 callbacks suppressed [ 166.266374][ T8882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1127'. [ 166.427515][ T2518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.460700][ T2518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.545287][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.595727][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.368794][ T8921] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 167.604449][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1139'. [ 167.954102][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1141'. [ 168.156038][ T8969] tun0: tun_chr_ioctl cmd 1074025675 [ 168.161475][ T8969] tun0: persist enabled [ 168.178518][ T8969] tun0: tun_chr_ioctl cmd 1074025675 [ 168.183877][ T8969] tun0: persist disabled [ 168.193166][ T8972] FAULT_INJECTION: forcing a failure. [ 168.193166][ T8972] name failslab, interval 1, probability 0, space 0, times 0 [ 168.240415][ T8972] CPU: 1 UID: 0 PID: 8972 Comm: syz.4.1145 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 168.251292][ T8972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 168.261372][ T8972] Call Trace: [ 168.264678][ T8972] [ 168.267632][ T8972] dump_stack_lvl+0x241/0x360 [ 168.272340][ T8972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.277565][ T8972] ? __pfx__printk+0x10/0x10 [ 168.282188][ T8972] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 168.288188][ T8972] ? __pfx___might_resched+0x10/0x10 [ 168.293503][ T8972] should_fail_ex+0x3b0/0x4e0 [ 168.298205][ T8972] should_failslab+0xac/0x100 [ 168.302908][ T8972] ? __alloc_skb+0x1c3/0x440 [ 168.307514][ T8972] kmem_cache_alloc_node_noprof+0x71/0x320 [ 168.313343][ T8972] __alloc_skb+0x1c3/0x440 [ 168.317787][ T8972] ? __pfx___alloc_skb+0x10/0x10 [ 168.322744][ T8972] ? netlink_autobind+0xd6/0x2f0 [ 168.327693][ T8972] ? netlink_autobind+0x2b0/0x2f0 [ 168.332745][ T8972] netlink_sendmsg+0x638/0xcb0 [ 168.337538][ T8972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.342852][ T8972] ? __import_iovec+0x536/0x820 [ 168.347726][ T8972] ? aa_sock_msg_perm+0x91/0x160 [ 168.352685][ T8972] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 168.358077][ T8972] ? security_socket_sendmsg+0x87/0xb0 [ 168.363565][ T8972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.368862][ T8972] __sock_sendmsg+0x221/0x270 [ 168.373542][ T8972] ____sys_sendmsg+0x525/0x7d0 [ 168.378321][ T8972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.383634][ T8972] __sys_sendmsg+0x2b0/0x3a0 [ 168.388397][ T8972] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.393499][ T8972] ? vfs_write+0x7c4/0xc90 [ 168.397937][ T8972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.404257][ T8972] ? do_syscall_64+0x100/0x230 [ 168.409013][ T8972] ? do_syscall_64+0xb6/0x230 [ 168.413687][ T8972] do_syscall_64+0xf3/0x230 [ 168.418181][ T8972] ? clear_bhb_loop+0x35/0x90 [ 168.422853][ T8972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.428735][ T8972] RIP: 0033:0x7f2337979e79 [ 168.433139][ T8972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.452820][ T8972] RSP: 002b:00007f2338790038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.461271][ T8972] RAX: ffffffffffffffda RBX: 00007f2337b15f80 RCX: 00007f2337979e79 [ 168.469240][ T8972] RDX: 0000000000000000 RSI: 0000000020002740 RDI: 0000000000000004 [ 168.477201][ T8972] RBP: 00007f2338790090 R08: 0000000000000000 R09: 0000000000000000 [ 168.485161][ T8972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.493123][ T8972] R13: 0000000000000000 R14: 00007f2337b15f80 R15: 00007fff07da96e8 [ 168.501096][ T8972] [ 168.684512][ T8982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 168.692867][ T8986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1149'. [ 168.704355][ T8982] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1147'. [ 168.876464][ T8996] netlink: 'syz.3.1151': attribute type 10 has an invalid length. [ 169.020237][ T9004] openvswitch: netlink: Key type 10780 is out of range max 32 [ 169.039322][ T9000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1151'. [ 169.056462][ T9005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 169.290656][ T9011] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1154'. [ 169.423893][ T9019] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 169.849439][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.952830][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 170.339276][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.466097][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.590231][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.953739][ T9074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.999671][ T35] bridge_slave_1: left allmulticast mode [ 171.025559][ T35] bridge_slave_1: left promiscuous mode [ 171.032158][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.086584][ T35] bridge_slave_0: left allmulticast mode [ 171.122801][ T35] bridge_slave_0: left promiscuous mode [ 171.148695][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.284176][ T9085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.324535][ T9090] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 171.377228][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.392003][ T9085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.405251][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.426818][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.435706][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.443781][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.455125][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.797201][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.813488][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.845054][ T35] bond0 (unregistering): Released all slaves [ 171.862625][ T9088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1170'. [ 171.873941][ T9099] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 172.416791][ T35] hsr_slave_0: left promiscuous mode [ 172.432370][ T35] hsr_slave_1: left promiscuous mode [ 172.448562][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.462822][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.504217][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.515442][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.605118][ T35] veth1_macvtap: left promiscuous mode [ 172.630226][ T35] veth0_macvtap: left promiscuous mode [ 172.640093][ T9131] xt_TPROXY: Can be used only with -p tcp or -p udp [ 172.647309][ T35] veth1_vlan: left promiscuous mode [ 172.652647][ T35] veth0_vlan: left promiscuous mode [ 173.122991][ T35] team0 (unregistering): Port device team_slave_1 removed [ 173.162323][ T35] team0 (unregistering): Port device team_slave_0 removed [ 173.496016][ T5235] Bluetooth: hci0: command tx timeout [ 173.571386][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1177'. [ 173.598670][ T9141] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1179'. [ 173.851254][ T9091] chnl_net:caif_netlink_parms(): no params data found [ 174.065872][ T9161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1185'. [ 174.245983][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1185'. [ 174.359543][ T5235] block nbd17: Receive control failed (result -107) [ 174.439479][ T9161] nbd17: detected capacity change from 0 to 256 [ 174.468078][ T9180] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 174.498867][ T6531] block nbd17: Dead connection, failed to find a fallback [ 174.605648][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.619880][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.630480][ T9091] bridge_slave_0: entered allmulticast mode [ 174.643144][ T9091] bridge_slave_0: entered promiscuous mode [ 174.654082][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.663520][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.674471][ T9091] bridge_slave_1: entered allmulticast mode [ 174.684035][ T9091] bridge_slave_1: entered promiscuous mode [ 174.703145][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1191'. [ 174.724337][ T9189] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1190'. [ 174.766692][ T9189] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 174.863610][ T9091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.921531][ T9091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.057026][ T9091] team0: Port device team_slave_0 added [ 175.074479][ T9091] team0: Port device team_slave_1 added [ 175.115705][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 175.187046][ T9210] netlink: 'syz.2.1194': attribute type 1 has an invalid length. [ 175.204815][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.212933][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.245849][ T9091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.279343][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.286646][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.313573][ T9091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.355773][ T9213] FAULT_INJECTION: forcing a failure. [ 175.355773][ T9213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.393782][ T9213] CPU: 1 UID: 0 PID: 9213 Comm: syz.2.1196 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 175.404507][ T9213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 175.414582][ T9213] Call Trace: [ 175.417909][ T9213] [ 175.420838][ T9213] dump_stack_lvl+0x241/0x360 [ 175.425518][ T9213] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.430806][ T9213] ? __pfx__printk+0x10/0x10 [ 175.435408][ T9213] ? __pfx_lock_release+0x10/0x10 [ 175.440436][ T9213] should_fail_ex+0x3b0/0x4e0 [ 175.445112][ T9213] _copy_to_user+0x2f/0xb0 [ 175.449530][ T9213] sock_do_ioctl+0x382/0x460 [ 175.454126][ T9213] ? __pfx_sock_do_ioctl+0x10/0x10 [ 175.459249][ T9213] sock_ioctl+0x629/0x8e0 [ 175.463574][ T9213] ? __pfx_sock_ioctl+0x10/0x10 [ 175.468417][ T9213] ? __fget_files+0x29/0x470 [ 175.473006][ T9213] ? __fget_files+0x3f6/0x470 [ 175.477767][ T9213] ? __fget_files+0x29/0x470 [ 175.482356][ T9213] ? bpf_lsm_file_ioctl+0x9/0x10 [ 175.487286][ T9213] ? security_file_ioctl+0x87/0xb0 [ 175.492389][ T9213] ? __pfx_sock_ioctl+0x10/0x10 [ 175.497330][ T9213] __se_sys_ioctl+0xfc/0x170 [ 175.501927][ T9213] do_syscall_64+0xf3/0x230 [ 175.506422][ T9213] ? clear_bhb_loop+0x35/0x90 [ 175.511094][ T9213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.516979][ T9213] RIP: 0033:0x7f9c70979e79 [ 175.521392][ T9213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.540994][ T9213] RSP: 002b:00007f9c717b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 175.549404][ T9213] RAX: ffffffffffffffda RBX: 00007f9c70b15f80 RCX: 00007f9c70979e79 [ 175.557370][ T9213] RDX: 0000000020000040 RSI: 0000000000008946 RDI: 0000000000000008 [ 175.565331][ T9213] RBP: 00007f9c717b9090 R08: 0000000000000000 R09: 0000000000000000 [ 175.573299][ T9213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 175.581262][ T9213] R13: 0000000000000000 R14: 00007f9c70b15f80 R15: 00007ffd8aceeaa8 [ 175.589237][ T9213] [ 175.600432][ T5235] Bluetooth: hci0: command tx timeout [ 175.721498][ T9091] hsr_slave_0: entered promiscuous mode [ 175.731566][ T9091] hsr_slave_1: entered promiscuous mode [ 175.773263][ T9091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.812294][ T9091] Cannot create hsr debugfs directory [ 176.154708][ T9240] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.1201'. [ 176.198667][ T9240] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1201'. [ 176.219378][ T9245] ip6t_srh: unknown srh invflags A757 [ 176.306221][ T9245] wireguard2: entered promiscuous mode [ 176.311765][ T9245] wireguard2: entered allmulticast mode [ 176.646763][ T9262] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 176.828378][ T9269] FAULT_INJECTION: forcing a failure. [ 176.828378][ T9269] name failslab, interval 1, probability 0, space 0, times 0 [ 176.847286][ T9269] CPU: 0 UID: 0 PID: 9269 Comm: syz.3.1209 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 176.858004][ T9269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 176.868079][ T9269] Call Trace: [ 176.871382][ T9269] [ 176.874327][ T9269] dump_stack_lvl+0x241/0x360 [ 176.879029][ T9269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.884250][ T9269] ? __pfx__printk+0x10/0x10 [ 176.888870][ T9269] ? __kmalloc_node_noprof+0xb7/0x440 [ 176.894264][ T9269] ? __pfx___might_resched+0x10/0x10 [ 176.899578][ T9269] should_fail_ex+0x3b0/0x4e0 [ 176.904288][ T9269] should_failslab+0xac/0x100 [ 176.908998][ T9269] __kmalloc_node_noprof+0xdf/0x440 [ 176.914221][ T9269] ? qdisc_alloc+0x97/0xa80 [ 176.918755][ T9269] qdisc_alloc+0x97/0xa80 [ 176.923117][ T9269] qdisc_create_dflt+0x62/0x4b0 [ 176.927995][ T9269] taprio_init+0x424/0xc80 [ 176.932428][ T9269] ? ____sys_sendmsg+0x525/0x7d0 [ 176.937387][ T9269] ? __sys_sendmsg+0x2b0/0x3a0 [ 176.942171][ T9269] ? do_syscall_64+0xf3/0x230 [ 176.946881][ T9269] ? __pfx_taprio_init+0x10/0x10 [ 176.951842][ T9269] ? lockdep_rtnl_is_held+0x26/0x40 [ 176.957054][ T9269] ? qdisc_lookup+0x350/0x6b0 [ 176.961733][ T9269] ? __pfx_taprio_init+0x10/0x10 [ 176.966667][ T9269] qdisc_create+0x9d4/0x11a0 [ 176.971258][ T9269] ? __pfx_qdisc_create+0x10/0x10 [ 176.976284][ T9269] tc_modify_qdisc+0xa26/0x1e40 [ 176.981141][ T9269] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 176.986439][ T9269] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 176.991718][ T9269] rtnetlink_rcv_msg+0x73f/0xcf0 [ 176.996652][ T9269] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 177.001765][ T9269] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.007224][ T9269] ? ref_tracker_free+0x643/0x7e0 [ 177.012283][ T9269] netlink_rcv_skb+0x1e3/0x430 [ 177.017387][ T9269] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 177.022858][ T9269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.028169][ T9269] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.033373][ T9269] netlink_unicast+0x7f6/0x990 [ 177.038150][ T9269] ? __pfx_netlink_unicast+0x10/0x10 [ 177.043432][ T9269] ? __virt_addr_valid+0x183/0x530 [ 177.048535][ T9269] ? __check_object_size+0x49c/0x900 [ 177.053807][ T9269] ? bpf_lsm_netlink_send+0x9/0x10 [ 177.058923][ T9269] netlink_sendmsg+0x8e4/0xcb0 [ 177.063686][ T9269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.068960][ T9269] ? __import_iovec+0x536/0x820 [ 177.073804][ T9269] ? aa_sock_msg_perm+0x91/0x160 [ 177.078734][ T9269] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 177.084011][ T9269] ? security_socket_sendmsg+0x87/0xb0 [ 177.089469][ T9269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.094739][ T9269] __sock_sendmsg+0x221/0x270 [ 177.099501][ T9269] ____sys_sendmsg+0x525/0x7d0 [ 177.104262][ T9269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.109551][ T9269] __sys_sendmsg+0x2b0/0x3a0 [ 177.114188][ T9269] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.119289][ T9269] ? vfs_write+0x7c4/0xc90 [ 177.123729][ T9269] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 177.130049][ T9269] ? do_syscall_64+0x100/0x230 [ 177.134805][ T9269] ? do_syscall_64+0xb6/0x230 [ 177.139472][ T9269] do_syscall_64+0xf3/0x230 [ 177.143964][ T9269] ? clear_bhb_loop+0x35/0x90 [ 177.148639][ T9269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.154525][ T9269] RIP: 0033:0x7f6f9ef79e79 [ 177.158935][ T9269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.178533][ T9269] RSP: 002b:00007f6f9e9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.186944][ T9269] RAX: ffffffffffffffda RBX: 00007f6f9f115f80 RCX: 00007f6f9ef79e79 [ 177.194906][ T9269] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000004 [ 177.202949][ T9269] RBP: 00007f6f9e9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 177.210914][ T9269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.218877][ T9269] R13: 0000000000000000 R14: 00007f6f9f115f80 R15: 00007ffddc090158 [ 177.226852][ T9269] [ 177.612483][ T9091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 177.657631][ T5235] Bluetooth: hci0: command tx timeout [ 177.676590][ T9091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 177.722073][ T9091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 177.749134][ T9091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 177.765950][ T9285] __nla_validate_parse: 2 callbacks suppressed [ 177.765968][ T9285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1212'. [ 177.782396][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1215'. [ 177.821491][ T9289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1214'. [ 177.839633][ T9289] vlan3: entered promiscuous mode [ 178.206502][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.305223][ T9091] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.315690][ T9317] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1221'. [ 178.500326][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.507539][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.569906][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.577142][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.686342][ T9338] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 179.264131][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.500196][ T9091] veth0_vlan: entered promiscuous mode [ 179.578020][ T9091] veth1_vlan: entered promiscuous mode [ 179.713125][ T9373] syzkaller1: entered promiscuous mode [ 179.731462][ T9373] syzkaller1: entered allmulticast mode [ 179.740175][ T5232] Bluetooth: hci0: command tx timeout [ 179.796300][ T9091] veth0_macvtap: entered promiscuous mode [ 179.954490][ T9370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1232'. [ 179.963525][ T25] IPVS: starting estimator thread 0... [ 180.038006][ T9385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1232'. [ 180.058114][ T9389] IPVS: using max 16 ests per chain, 38400 per kthread [ 180.113512][ T9091] veth1_macvtap: entered promiscuous mode [ 180.164993][ T9392] vlan0: entered allmulticast mode [ 180.199404][ T9395] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 180.216959][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 180.289081][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.311370][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.331928][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.348775][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.367165][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.389278][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.399685][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.416942][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.432936][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.450267][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.474294][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.536999][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.552696][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.571497][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.583456][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.594198][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.609780][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.621260][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.632124][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.651868][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.673388][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.688484][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.715146][ T9091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.737702][ T9091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.754358][ T9091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.764368][ T9091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.040542][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.047472][ T9430] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 181.073769][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.142776][ T2581] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.169658][ T2581] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.177325][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.208668][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.231312][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.245010][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.253518][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.261719][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 181.268495][ T5232] Bluetooth: hci3: command 0x0406 tx timeout [ 181.274567][ T4620] Bluetooth: hci2: command 0x0406 tx timeout [ 181.298463][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.319437][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.336086][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.341923][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.349087][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.355689][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.375648][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.381466][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.416605][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.422317][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.476341][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.516070][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.662396][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.672347][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.708899][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.746495][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.752262][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.768234][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.776607][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.803532][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.817103][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.836850][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.857851][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.901693][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.921860][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.937032][ T9437] IPVS: Unknown mcast interface: vcan0 [ 181.957981][ T9469] tipc: Trying to set illegal importance in message [ 182.235927][ T9482] netlink: 'syz.2.1257': attribute type 21 has an invalid length. [ 182.244636][ T9482] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1257'. [ 182.293004][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'. [ 182.481226][ T9499] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.526058][ T9499] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 182.609370][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1261'. [ 182.758431][ T5243] block nbd18: Receive control failed (result -107) [ 182.849955][ T9505] nbd18: detected capacity change from 0 to 256 [ 182.896864][ T6945] block nbd18: Dead connection, failed to find a fallback [ 183.097649][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.620205][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.692650][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.763474][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.945634][ T35] bridge_slave_1: left allmulticast mode [ 183.951336][ T35] bridge_slave_1: left promiscuous mode [ 183.983510][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.066324][ T35] bridge_slave_0: left allmulticast mode [ 184.072039][ T35] bridge_slave_0: left promiscuous mode [ 184.109244][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.154516][ T9549] __nla_validate_parse: 1 callbacks suppressed [ 184.154537][ T9549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'. [ 184.510021][ T9567] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 184.529387][ T9567] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.1274'. [ 184.556194][ T9567] netlink: 'syz.3.1274': attribute type 2 has an invalid length. [ 184.585022][ T9567] netlink: 'syz.3.1274': attribute type 1 has an invalid length. [ 184.629667][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.642433][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.655692][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.675684][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.683442][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 184.692884][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.103815][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.136511][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.170767][ T35] bond0 (unregistering): Released all slaves [ 185.216054][ T9577] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1278'. [ 185.564703][ T9594] atomic_op ffff8880606df998 conn xmit_atomic 0000000000000000 [ 186.149430][ T35] hsr_slave_0: left promiscuous mode [ 186.182817][ T35] hsr_slave_1: left promiscuous mode [ 186.205893][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.216671][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.237565][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.252262][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.287796][ T35] veth1_macvtap: left promiscuous mode [ 186.293664][ T35] veth0_macvtap: left promiscuous mode [ 186.303851][ T35] veth1_vlan: left promiscuous mode [ 186.310688][ T35] veth0_vlan: left promiscuous mode [ 186.775942][ T5235] Bluetooth: hci0: command tx timeout [ 187.212518][ T35] team0 (unregistering): Port device team_slave_1 removed [ 187.261383][ T35] team0 (unregistering): Port device team_slave_0 removed [ 187.987854][ T9637] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1290'. [ 188.030091][ T9637] vlan3: entered promiscuous mode [ 188.055013][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1301'. [ 188.085040][ T9570] chnl_net:caif_netlink_parms(): no params data found [ 188.237556][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 188.275983][ T9655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1293'. [ 188.333294][ T9657] bridge0: port 3(vlan3) entered blocking state [ 188.392535][ T9657] bridge0: port 3(vlan3) entered disabled state [ 188.399132][ T9657] vlan3: entered allmulticast mode [ 188.428357][ T9657] vlan3: left allmulticast mode [ 188.751070][ T9570] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.762254][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.792155][ T9570] bridge_slave_0: entered allmulticast mode [ 188.795797][ T9680] netlink: 'syz.4.1299': attribute type 1 has an invalid length. [ 188.805927][ T9570] bridge_slave_0: entered promiscuous mode [ 188.815001][ T9570] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.826067][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.833315][ T9570] bridge_slave_1: entered allmulticast mode [ 188.847440][ T9570] bridge_slave_1: entered promiscuous mode [ 188.855956][ T5235] Bluetooth: hci0: command tx timeout [ 188.861758][ T9680] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1299'. [ 189.032647][ T9570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.106091][ T9570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.271976][ T9701] syzkaller1: entered promiscuous mode [ 189.284586][ T9701] syzkaller1: entered allmulticast mode [ 189.306002][ T9570] team0: Port device team_slave_0 added [ 189.447646][ T9570] team0: Port device team_slave_1 added [ 189.537699][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.565715][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.637281][ T9570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.699849][ T9570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.729546][ T9570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.790679][ T9570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.807829][ T9723] FAULT_INJECTION: forcing a failure. [ 189.807829][ T9723] name failslab, interval 1, probability 0, space 0, times 0 [ 189.845192][ T9723] CPU: 0 UID: 0 PID: 9723 Comm: syz.2.1309 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 189.856000][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 189.866048][ T9723] Call Trace: [ 189.869317][ T9723] [ 189.872240][ T9723] dump_stack_lvl+0x241/0x360 [ 189.876915][ T9723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.882106][ T9723] ? __pfx__printk+0x10/0x10 [ 189.886709][ T9723] should_fail_ex+0x3b0/0x4e0 [ 189.891381][ T9723] should_failslab+0xac/0x100 [ 189.896058][ T9723] ? __alloc_skb+0x1c3/0x440 [ 189.900755][ T9723] kmem_cache_alloc_node_noprof+0x71/0x320 [ 189.906564][ T9723] __alloc_skb+0x1c3/0x440 [ 189.910972][ T9723] ? trace_contention_end+0x3c/0x120 [ 189.916257][ T9723] ? __pfx___alloc_skb+0x10/0x10 [ 189.921187][ T9723] ? __local_bh_enable_ip+0x168/0x200 [ 189.926594][ T9723] ? hci_sock_sendmsg+0x617/0x11c0 [ 189.931700][ T9723] ? lockdep_hardirqs_on+0x99/0x150 [ 189.936901][ T9723] hci_mgmt_cmd+0x1c1/0x11d0 [ 189.941493][ T9723] hci_sock_sendmsg+0x7b8/0x11c0 [ 189.946435][ T9723] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 189.951801][ T9723] ? aa_sock_msg_perm+0x91/0x160 [ 189.956732][ T9723] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 189.962007][ T9723] ? security_socket_sendmsg+0x87/0xb0 [ 189.967462][ T9723] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 189.972826][ T9723] __sock_sendmsg+0x221/0x270 [ 189.977504][ T9723] sock_write_iter+0x2dd/0x400 [ 189.982266][ T9723] ? __pfx_sock_write_iter+0x10/0x10 [ 189.987607][ T9723] ? bpf_lsm_file_permission+0x9/0x10 [ 189.992977][ T9723] ? security_file_permission+0x7f/0xa0 [ 189.998523][ T9723] vfs_write+0xa72/0xc90 [ 190.002767][ T9723] ? __pfx_sock_write_iter+0x10/0x10 [ 190.008051][ T9723] ? __pfx_vfs_write+0x10/0x10 [ 190.012856][ T9723] ksys_write+0x1a0/0x2c0 [ 190.017199][ T9723] ? __pfx_ksys_write+0x10/0x10 [ 190.022045][ T9723] ? do_syscall_64+0x100/0x230 [ 190.026817][ T9723] ? do_syscall_64+0xb6/0x230 [ 190.031491][ T9723] do_syscall_64+0xf3/0x230 [ 190.035988][ T9723] ? clear_bhb_loop+0x35/0x90 [ 190.040670][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.046566][ T9723] RIP: 0033:0x7f9c70979e79 [ 190.050977][ T9723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.070573][ T9723] RSP: 002b:00007f9c717b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.078981][ T9723] RAX: ffffffffffffffda RBX: 00007f9c70b15f80 RCX: 00007f9c70979e79 [ 190.086946][ T9723] RDX: 000000000000000d RSI: 0000000020000200 RDI: 000000000000000c [ 190.094913][ T9723] RBP: 00007f9c717b9090 R08: 0000000000000000 R09: 0000000000000000 [ 190.102881][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.110844][ T9723] R13: 0000000000000000 R14: 00007f9c70b15f80 R15: 00007ffd8aceeaa8 [ 190.118819][ T9723] [ 190.164473][ T9723] Bluetooth: MGMT ver 1.23 [ 190.443806][ T9570] hsr_slave_0: entered promiscuous mode [ 190.463008][ T9570] hsr_slave_1: entered promiscuous mode [ 190.486234][ T9570] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.497646][ T9737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1312'. [ 190.514635][ T9570] Cannot create hsr debugfs directory [ 190.587211][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1312'. [ 190.714092][ T5235] block nbd19: Receive control failed (result -107) [ 190.796037][ T9737] nbd19: detected capacity change from 0 to 256 [ 190.808939][ T5230] block nbd19: Dead connection, failed to find a fallback [ 190.836705][ T5230] block nbd19: shutting down sockets [ 190.842048][ T5230] blk_print_req_error: 27 callbacks suppressed [ 190.842061][ T5230] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 190.901178][ T5230] buffer_io_error: 27 callbacks suppressed [ 190.901195][ T5230] Buffer I/O error on dev nbd19, logical block 0, async page read [ 190.939000][ T5235] Bluetooth: hci0: command tx timeout [ 190.982942][ T5230] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.019628][ T9744] openvswitch: netlink: Missing key (keys=40, expected=80) [ 191.038295][ T5230] Buffer I/O error on dev nbd19, logical block 0, async page read [ 191.057505][ T5230] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.085296][ T5230] Buffer I/O error on dev nbd19, logical block 0, async page read [ 191.093342][ T5230] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.170189][ T5230] Buffer I/O error on dev nbd19, logical block 0, async page read [ 191.225841][ T5230] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.249291][ T5230] Buffer I/O error on dev nbd19, logical block 0, async page read [ 191.279983][ T5230] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.320819][ T5230] Buffer I/O error on dev nbd19, logical block 0, async page read [ 191.365728][ T5230] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.374948][ T5230] Buffer I/O error on dev nbd19, logical block 0, async page read [ 191.397716][ T5230] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.423210][ T5230] Buffer I/O error on dev nbd19, logical block 0, async page read [ 191.450961][ T5230] ldm_validate_partition_table(): Disk read failed. [ 191.470474][ T5230] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.496938][ T5230] Buffer I/O error on dev nbd19, logical block 0, async page read [ 191.515285][ T9766] netlink: 'syz.4.1319': attribute type 2 has an invalid length. [ 191.527405][ T5230] I/O error, dev nbd19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 191.545870][ T9766] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1319'. [ 191.555031][ T5230] Buffer I/O error on dev nbd19, logical block 0, async page read [ 191.596389][ T5230] Dev nbd19: unable to read RDB block 0 [ 191.610111][ T5230] nbd19: unable to read partition table [ 191.646917][ T5230] ldm_validate_partition_table(): Disk read failed. [ 191.679073][ T5230] Dev nbd19: unable to read RDB block 0 [ 191.685011][ T5230] nbd19: unable to read partition table [ 192.286611][ T9794] netlink: 'syz.4.1325': attribute type 10 has an invalid length. [ 192.484588][ T9570] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.511055][ T9570] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.575159][ T9570] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.610189][ T9570] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.834839][ T9812] lo speed is unknown, defaulting to 1000 [ 192.939423][ T9812] lo speed is unknown, defaulting to 1000 [ 192.970722][ T9812] lo speed is unknown, defaulting to 1000 [ 192.993928][ T9570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.017349][ T5235] Bluetooth: hci0: command tx timeout [ 193.122356][ T9570] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.201547][ T2530] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.208805][ T2530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.268311][ T2530] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.275523][ T2530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.702192][ T5315] lo speed is unknown, defaulting to 1000 [ 193.710434][ T9812] infiniband syz0: set active [ 193.725221][ T9812] infiniband syz0: added lo [ 193.763787][ T9812] syz0: rxe_create_cq: returned err = -12 [ 193.789770][ T9812] infiniband syz0: Couldn't create ib_mad CQ [ 193.803460][ T9812] infiniband syz0: Couldn't open port 1 [ 193.919592][ T9812] RDS/IB: syz0: added [ 193.937232][ T9812] smc: adding ib device syz0 with port count 1 [ 193.943618][ T9812] smc: ib device syz0 port 1 has pnetid [ 193.961608][ T9570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.010977][ T8] lo speed is unknown, defaulting to 1000 [ 194.027806][ T9812] lo speed is unknown, defaulting to 1000 [ 194.152571][ T9570] veth0_vlan: entered promiscuous mode [ 194.193842][ T9570] veth1_vlan: entered promiscuous mode [ 194.235671][ T9870] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1342'. [ 194.315801][ T9570] veth0_macvtap: entered promiscuous mode [ 194.359838][ T9570] veth1_macvtap: entered promiscuous mode [ 194.442205][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.493661][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.505055][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.520158][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.552504][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.568374][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.593832][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.614104][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.635320][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.675625][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.702868][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.725246][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.744995][ T9812] lo speed is unknown, defaulting to 1000 [ 194.751418][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.784228][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.804537][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.838055][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.874344][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.905778][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.934543][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.945767][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.955808][ T9570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.966418][ T9570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.975770][ T9890] nbd: nbd4 already in use [ 194.979298][ T9570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.036546][ T9570] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.045290][ T9570] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.081220][ T9570] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.110549][ T9570] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.290523][ T9812] lo speed is unknown, defaulting to 1000 [ 195.463541][ T2518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.497243][ T2518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.639251][ T9920] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1352'. [ 195.661803][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.668807][ T9920] block nbd0: NBD_DISCONNECT [ 195.674890][ T9920] block nbd0: Send disconnect failed -32 [ 195.684856][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.705687][ T9920] block nbd0: shutting down sockets [ 195.739299][ T9927] FAULT_INJECTION: forcing a failure. [ 195.739299][ T9927] name failslab, interval 1, probability 0, space 0, times 0 [ 195.783859][ T9927] CPU: 0 UID: 0 PID: 9927 Comm: syz.3.1353 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 195.794581][ T9927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 195.804651][ T9927] Call Trace: [ 195.807924][ T9927] [ 195.810843][ T9927] dump_stack_lvl+0x241/0x360 [ 195.815516][ T9927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.820702][ T9927] ? __pfx__printk+0x10/0x10 [ 195.825289][ T9927] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 195.831264][ T9927] ? __pfx___might_resched+0x10/0x10 [ 195.836560][ T9927] should_fail_ex+0x3b0/0x4e0 [ 195.841246][ T9927] should_failslab+0xac/0x100 [ 195.845942][ T9927] ? __alloc_skb+0x1c3/0x440 [ 195.850537][ T9927] kmem_cache_alloc_node_noprof+0x71/0x320 [ 195.856347][ T9927] __alloc_skb+0x1c3/0x440 [ 195.860764][ T9927] ? __pfx___alloc_skb+0x10/0x10 [ 195.865701][ T9927] ? netlink_ack_tlv_len+0x6e/0x200 [ 195.871076][ T9927] netlink_ack+0x13f/0xa30 [ 195.875499][ T9927] ? __pfx_lock_acquire+0x10/0x10 [ 195.880527][ T9927] netlink_rcv_skb+0x262/0x430 [ 195.885281][ T9927] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.890297][ T9927] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.895594][ T9927] genl_rcv+0x28/0x40 [ 195.899567][ T9927] netlink_unicast+0x7f6/0x990 [ 195.904330][ T9927] ? __pfx_netlink_unicast+0x10/0x10 [ 195.909608][ T9927] ? __virt_addr_valid+0x183/0x530 [ 195.914711][ T9927] ? __check_object_size+0x49c/0x900 [ 195.919982][ T9927] ? bpf_lsm_netlink_send+0x9/0x10 [ 195.925118][ T9927] netlink_sendmsg+0x8e4/0xcb0 [ 195.929886][ T9927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.935164][ T9927] ? __import_iovec+0x536/0x820 [ 195.940008][ T9927] ? aa_sock_msg_perm+0x91/0x160 [ 195.944935][ T9927] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 195.950217][ T9927] ? security_socket_sendmsg+0x87/0xb0 [ 195.955672][ T9927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.960942][ T9927] __sock_sendmsg+0x221/0x270 [ 195.965621][ T9927] ____sys_sendmsg+0x525/0x7d0 [ 195.970384][ T9927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.975671][ T9927] __sys_sendmsg+0x2b0/0x3a0 [ 195.980254][ T9927] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.985362][ T9927] ? vfs_write+0x7c4/0xc90 [ 195.989811][ T9927] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 195.996137][ T9927] ? do_syscall_64+0x100/0x230 [ 196.000893][ T9927] ? do_syscall_64+0xb6/0x230 [ 196.005569][ T9927] do_syscall_64+0xf3/0x230 [ 196.010149][ T9927] ? clear_bhb_loop+0x35/0x90 [ 196.014821][ T9927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.020725][ T9927] RIP: 0033:0x7f6f9ef79e79 [ 196.025144][ T9927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.044759][ T9927] RSP: 002b:00007f6f9e9de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.053176][ T9927] RAX: ffffffffffffffda RBX: 00007f6f9f116058 RCX: 00007f6f9ef79e79 [ 196.061143][ T9927] RDX: 0000000000000000 RSI: 0000000020002740 RDI: 0000000000000004 [ 196.069191][ T9927] RBP: 00007f6f9e9de090 R08: 0000000000000000 R09: 0000000000000000 [ 196.077151][ T9927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.085114][ T9927] R13: 0000000000000001 R14: 00007f6f9f116058 R15: 00007ffddc090158 [ 196.093102][ T9927] [ 196.119168][ T40] blk_print_req_error: 28 callbacks suppressed [ 196.119189][ T40] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.138377][ T40] buffer_io_error: 28 callbacks suppressed [ 196.138396][ T40] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.153884][ T5245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.164408][ T5245] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.174166][ T9929] FAULT_INJECTION: forcing a failure. [ 196.174166][ T9929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.188005][ T9929] CPU: 0 UID: 0 PID: 9929 Comm: syz.1.1354 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 196.198712][ T9929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 196.207727][ T5245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.208762][ T9929] Call Trace: [ 196.208773][ T9929] [ 196.223998][ T9929] dump_stack_lvl+0x241/0x360 [ 196.228696][ T9929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.233914][ T9929] ? __pfx__printk+0x10/0x10 [ 196.238535][ T9929] ? __pfx_lock_release+0x10/0x10 [ 196.243590][ T9929] should_fail_ex+0x3b0/0x4e0 [ 196.248284][ T9929] _copy_to_user+0x2f/0xb0 [ 196.252699][ T9929] bpf_test_finish+0x593/0x8b0 [ 196.257467][ T9929] ? __pfx_bpf_test_finish+0x10/0x10 [ 196.262746][ T9929] ? _copy_from_user+0xa6/0xe0 [ 196.267500][ T9929] ? bpf_test_init+0x15a/0x180 [ 196.272258][ T9929] bpf_prog_test_run_xdp+0x905/0x11b0 [ 196.277628][ T9929] ? __pfx_lock_release+0x10/0x10 [ 196.282649][ T9929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 196.288451][ T9929] ? __fget_files+0x29/0x470 [ 196.293044][ T9929] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 196.298849][ T9929] bpf_prog_test_run+0x33a/0x3b0 [ 196.303784][ T9929] __sys_bpf+0x48d/0x810 [ 196.308018][ T9929] ? __pfx___sys_bpf+0x10/0x10 [ 196.312780][ T9929] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.318754][ T9929] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.325076][ T9929] ? do_syscall_64+0x100/0x230 [ 196.329838][ T9929] __x64_sys_bpf+0x7c/0x90 [ 196.334254][ T9929] do_syscall_64+0xf3/0x230 [ 196.338751][ T9929] ? clear_bhb_loop+0x35/0x90 [ 196.343427][ T9929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.349314][ T9929] RIP: 0033:0x7f9dcc379e79 [ 196.353720][ T9929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.373423][ T9929] RSP: 002b:00007f9dcd14d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 196.381829][ T9929] RAX: ffffffffffffffda RBX: 00007f9dcc515f80 RCX: 00007f9dcc379e79 [ 196.389792][ T9929] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 196.397754][ T9929] RBP: 00007f9dcd14d090 R08: 0000000000000000 R09: 0000000000000000 [ 196.405713][ T9929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.413672][ T9929] R13: 0000000000000000 R14: 00007f9dcc515f80 R15: 00007ffc63624f48 [ 196.421907][ T9929] [ 196.435443][ T5245] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.445279][ T5245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.545746][ T5245] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.553645][ T5245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.583611][ T5245] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.608618][ T5245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.618157][ T9935] netlink: 'syz.4.1356': attribute type 9 has an invalid length. [ 196.661249][ T5245] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.696130][ T5245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.723761][ T9812] lo speed is unknown, defaulting to 1000 [ 196.730154][ T5245] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.765509][ T5245] ldm_validate_partition_table(): Disk read failed. [ 196.772257][ T5245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.802515][ T5245] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.835645][ T5245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.846892][ T5245] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.854771][ T5245] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 196.873941][ T9945] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1359'. [ 196.903275][ T9947] netlink: 'syz.4.1360': attribute type 10 has an invalid length. [ 196.905780][ T5245] Buffer I/O error on dev nbd0, logical block 0, async page read [ 196.935916][ T5245] Dev nbd0: unable to read RDB block 0 [ 196.942032][ T9947] syz_tun: entered promiscuous mode [ 196.950231][ T5245] nbd0: unable to read partition table [ 196.985861][ T9948] netlink: 'syz.4.1360': attribute type 3 has an invalid length. [ 197.007115][ T5245] ldm_validate_partition_table(): Disk read failed. [ 197.029505][ T9947] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 197.051853][ T5245] Dev nbd0: unable to read RDB block 0 [ 197.066279][ T5245] nbd0: unable to read partition table [ 197.072823][ T9948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 197.126008][ T9947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1360'. [ 197.251689][ T9812] lo speed is unknown, defaulting to 1000 [ 197.622834][ T9971] xt_TPROXY: Can be used only with -p tcp or -p udp [ 197.744477][ T9812] lo speed is unknown, defaulting to 1000 [ 198.073880][ T9991] sctp: [Deprecated]: syz.4.1370 (pid 9991) Use of struct sctp_assoc_value in delayed_ack socket option. [ 198.073880][ T9991] Use struct sctp_sack_info instead [ 198.101095][ T9991] openvswitch: netlink: Unknown nsh attribute 0 [ 198.558162][ T2581] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.712439][T10012] syzkaller1: entered promiscuous mode [ 198.730570][T10012] syzkaller1: entered allmulticast mode [ 198.793928][T10019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1374'. [ 199.463186][ T2581] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.520818][ T2581] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.668644][ T2581] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.786837][T10043] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1378'. [ 199.993894][T10054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1381'. [ 200.043151][T10054] vlan3: entered promiscuous mode [ 200.238869][ T2581] bridge_slave_1: left allmulticast mode [ 200.244567][ T2581] bridge_slave_1: left promiscuous mode [ 200.275268][ T2581] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.368177][ T2581] bridge_slave_0: left allmulticast mode [ 200.374784][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.384828][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.392078][ T2581] bridge_slave_0: left promiscuous mode [ 200.392256][ T2581] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.407035][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.426168][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.440716][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.449133][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.283788][T10093] rdma_rxe: rxe_newlink: failed to add lo [ 201.322522][ T2581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.334654][ T2581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.347405][ T2581] bond0 (unregistering): Released all slaves [ 201.517353][T10062] lo speed is unknown, defaulting to 1000 [ 201.806005][T10108] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1389'. [ 202.001694][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1394'. [ 202.084219][T10116] netlink: 'syz.3.1395': attribute type 11 has an invalid length. [ 202.547471][ T5235] Bluetooth: hci0: command tx timeout [ 202.616868][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1399'. [ 202.676672][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 202.827564][ T5235] block nbd0: Receive control failed (result -107) [ 202.829355][ T2581] hsr_slave_0: left promiscuous mode [ 202.897168][T10147] nbd0: detected capacity change from 0 to 256 [ 202.945230][ T5230] block nbd0: Dead connection, failed to find a fallback [ 202.962872][ T2581] hsr_slave_1: left promiscuous mode [ 202.972905][ T2581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.983940][ T2581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.007076][ T2581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.026010][ T2581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.062209][ T2581] veth1_macvtap: left promiscuous mode [ 203.068522][ T2581] veth0_macvtap: left promiscuous mode [ 203.074388][ T2581] veth1_vlan: left promiscuous mode [ 203.081759][ T2581] veth0_vlan: left promiscuous mode [ 203.528567][ T2581] team0 (unregistering): Port device team_slave_1 removed [ 203.564111][ T2581] team0 (unregistering): Port device team_slave_0 removed [ 203.936394][T10161] bridge0: entered promiscuous mode [ 203.941978][T10161] macvlan2: entered allmulticast mode [ 203.948220][T10161] bridge0: entered allmulticast mode [ 204.385660][T10190] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 204.561400][T10062] chnl_net:caif_netlink_parms(): no params data found [ 204.616463][ T5235] Bluetooth: hci0: command tx timeout [ 204.812953][T10208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 205.003093][T10208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 205.004155][T10062] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.056402][T10062] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.065509][T10208] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1414'. [ 205.085599][T10062] bridge_slave_0: entered allmulticast mode [ 205.108058][T10062] bridge_slave_0: entered promiscuous mode [ 205.154615][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1415'. [ 205.245880][T10062] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.271744][T10062] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.298048][T10062] bridge_slave_1: entered allmulticast mode [ 205.313332][T10062] bridge_slave_1: entered promiscuous mode [ 205.459435][T10233] ieee802154 phy1 wpan1: encryption failed: -22 [ 205.488042][T10062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.532271][T10062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.714420][T10249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1422'. [ 205.734439][T10247] FAULT_INJECTION: forcing a failure. [ 205.734439][T10247] name failslab, interval 1, probability 0, space 0, times 0 [ 205.743470][T10062] team0: Port device team_slave_0 added [ 205.768646][T10062] team0: Port device team_slave_1 added [ 205.794888][T10247] CPU: 1 UID: 0 PID: 10247 Comm: syz.3.1421 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 205.805697][T10247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 205.815770][T10247] Call Trace: [ 205.819066][T10247] [ 205.822015][T10247] dump_stack_lvl+0x241/0x360 [ 205.826721][T10247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.831940][T10247] ? __pfx__printk+0x10/0x10 [ 205.836552][T10247] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 205.842553][T10247] ? __pfx___might_resched+0x10/0x10 [ 205.847879][T10247] should_fail_ex+0x3b0/0x4e0 [ 205.852579][T10247] should_failslab+0xac/0x100 [ 205.857282][T10247] ? __alloc_skb+0x1c3/0x440 [ 205.861899][T10247] kmem_cache_alloc_node_noprof+0x71/0x320 [ 205.867731][T10247] __alloc_skb+0x1c3/0x440 [ 205.872173][T10247] ? __pfx___alloc_skb+0x10/0x10 [ 205.877129][T10247] ? netlink_ack_tlv_len+0x6e/0x200 [ 205.882337][T10247] netlink_ack+0x13f/0xa30 [ 205.886749][T10247] ? __pfx_lock_acquire+0x10/0x10 [ 205.891765][T10247] ? __pfx_nl802154_set_cca_ed_level+0x10/0x10 [ 205.897906][T10247] ? __pfx_nl802154_post_doit+0x10/0x10 [ 205.903453][T10247] netlink_rcv_skb+0x262/0x430 [ 205.908210][T10247] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.913225][T10247] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.918524][T10247] genl_rcv+0x28/0x40 [ 205.922494][T10247] netlink_unicast+0x7f6/0x990 [ 205.927258][T10247] ? __pfx_netlink_unicast+0x10/0x10 [ 205.932533][T10247] ? __virt_addr_valid+0x183/0x530 [ 205.937635][T10247] ? __check_object_size+0x49c/0x900 [ 205.942946][T10247] ? bpf_lsm_netlink_send+0x9/0x10 [ 205.948052][T10247] netlink_sendmsg+0x8e4/0xcb0 [ 205.952814][T10247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.958092][T10247] ? __import_iovec+0x536/0x820 [ 205.962936][T10247] ? aa_sock_msg_perm+0x91/0x160 [ 205.967956][T10247] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 205.973237][T10247] ? security_socket_sendmsg+0x87/0xb0 [ 205.978693][T10247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.983962][T10247] __sock_sendmsg+0x221/0x270 [ 205.988636][T10247] ____sys_sendmsg+0x525/0x7d0 [ 205.993397][T10247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.998685][T10247] __sys_sendmsg+0x2b0/0x3a0 [ 206.003268][T10247] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.008458][T10247] ? vfs_write+0x7c4/0xc90 [ 206.012916][T10247] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.019247][T10247] ? do_syscall_64+0x100/0x230 [ 206.024006][T10247] ? do_syscall_64+0xb6/0x230 [ 206.028681][T10247] do_syscall_64+0xf3/0x230 [ 206.033182][T10247] ? clear_bhb_loop+0x35/0x90 [ 206.037861][T10247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.043750][T10247] RIP: 0033:0x7f6f9ef79e79 [ 206.048157][T10247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.067758][T10247] RSP: 002b:00007f6f9e9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.076166][T10247] RAX: ffffffffffffffda RBX: 00007f6f9f115f80 RCX: 00007f6f9ef79e79 [ 206.084218][T10247] RDX: 0000000000000000 RSI: 0000000020002740 RDI: 0000000000000004 [ 206.092179][T10247] RBP: 00007f6f9e9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 206.100139][T10247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.108099][T10247] R13: 0000000000000000 R14: 00007f6f9f115f80 R15: 00007ffddc090158 [ 206.116075][T10247] [ 206.138385][T10062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.152303][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.195546][T10062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.207622][T10254] FAULT_INJECTION: forcing a failure. [ 206.207622][T10254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.215182][T10255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.237681][T10254] CPU: 1 UID: 0 PID: 10254 Comm: syz.1.1423 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 206.248489][T10254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 206.258559][T10254] Call Trace: [ 206.261857][T10254] [ 206.264805][T10254] dump_stack_lvl+0x241/0x360 [ 206.269597][T10254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.274815][T10254] ? __pfx__printk+0x10/0x10 [ 206.279435][T10254] ? snprintf+0xda/0x120 [ 206.283701][T10254] should_fail_ex+0x3b0/0x4e0 [ 206.287181][T10259] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 206.288382][T10254] _copy_to_user+0x2f/0xb0 [ 206.288415][T10254] simple_read_from_buffer+0xca/0x150 [ 206.301692][T10062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.305715][T10254] proc_fail_nth_read+0x1ec/0x260 [ 206.305745][T10254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.305771][T10254] ? rw_verify_area+0x520/0x6b0 [ 206.305792][T10254] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.305814][T10254] vfs_read+0x204/0xbc0 [ 206.305834][T10254] ? __pfx_lock_release+0x10/0x10 [ 206.313870][T10062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.317747][T10254] ? __pfx_vfs_read+0x10/0x10 [ 206.317776][T10254] ? __fget_files+0x29/0x470 [ 206.317801][T10254] ? __fget_files+0x3f6/0x470 [ 206.317839][T10254] ksys_read+0x1a0/0x2c0 [ 206.317867][T10254] ? __pfx_ksys_read+0x10/0x10 [ 206.317889][T10254] ? do_syscall_64+0x100/0x230 [ 206.317913][T10254] ? do_syscall_64+0xb6/0x230 [ 206.317935][T10254] do_syscall_64+0xf3/0x230 [ 206.317953][T10254] ? clear_bhb_loop+0x35/0x90 [ 206.317979][T10254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.318000][T10254] RIP: 0033:0x7f9dcc3788bc [ 206.318019][T10254] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 206.318036][T10254] RSP: 002b:00007f9dcd14d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.318057][T10254] RAX: ffffffffffffffda RBX: 00007f9dcc515f80 RCX: 00007f9dcc3788bc [ 206.318072][T10254] RDX: 000000000000000f RSI: 00007f9dcd14d0a0 RDI: 0000000000000004 [ 206.318084][T10254] RBP: 00007f9dcd14d090 R08: 0000000000000000 R09: 0000000000000000 [ 206.318096][T10254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.318107][T10254] R13: 0000000000000000 R14: 00007f9dcc515f80 R15: 00007ffc63624f48 [ 206.325800][T10062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.328472][T10254] [ 206.364043][T10255] Bluetooth: hci3: unsupported parameter 64512 [ 206.535843][T10255] Bluetooth: hci3: unsupported parameter 64 [ 206.555215][T10255] Bluetooth: hci3: unsupported parameter 64512 [ 206.561786][T10255] Bluetooth: hci3: unsupported parameter 64 [ 206.603698][T10062] hsr_slave_0: entered promiscuous mode [ 206.630509][T10062] hsr_slave_1: entered promiscuous mode [ 206.665583][T10062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.673285][T10062] Cannot create hsr debugfs directory [ 206.706012][ T5235] Bluetooth: hci0: command tx timeout [ 206.765931][T10272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 207.430890][T10297] __nla_validate_parse: 2 callbacks suppressed [ 207.430909][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1435'. [ 207.433061][T10302] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1437'. [ 207.532348][T10302] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 208.056805][T10331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 208.144354][T10062] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.185034][T10062] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.235310][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1448'. [ 208.239701][T10062] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.347326][T10062] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.654509][T10062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.668771][T10363] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1454'. [ 208.748552][T10062] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.757455][T10367] Bluetooth: MGMT ver 1.23 [ 208.776712][ T5235] Bluetooth: hci0: command tx timeout [ 208.810305][ T2518] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.817520][ T2518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.908268][ T2518] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.915489][ T2518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.959288][T10375] netlink: 'syz.1.1457': attribute type 21 has an invalid length. [ 208.998103][T10375] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1457'. [ 209.252998][T10389] pim6reg1: entered promiscuous mode [ 209.270173][T10389] pim6reg1: entered allmulticast mode [ 209.746996][T10062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.973943][T10062] veth0_vlan: entered promiscuous mode [ 210.066877][T10062] veth1_vlan: entered promiscuous mode [ 210.207139][T10062] veth0_macvtap: entered promiscuous mode [ 210.288770][T10062] veth1_macvtap: entered promiscuous mode [ 210.397760][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.440188][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.492504][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.521412][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.535619][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.568416][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.621743][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.655476][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.690324][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.724198][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.777264][T10062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.852447][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.882479][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.910218][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.941485][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.969097][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.003450][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.035579][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.063162][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.081969][T10062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.103663][T10062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.128789][T10062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.192228][T10062] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.225941][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 211.233684][T10062] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.258142][T10062] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.272814][T10062] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.340505][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'. [ 211.439246][ T5235] block nbd20: Receive control failed (result -107) [ 211.462431][T10480] nbd20: detected capacity change from 0 to 256 [ 211.529012][ T5245] block nbd20: Dead connection, failed to find a fallback [ 211.701219][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.740893][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.829790][T10500] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1492'. [ 211.872521][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.906430][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.982563][T10509] Cannot find set identified by id 65535 to match [ 212.039084][T10512] Cannot find set identified by id 0 to match [ 212.042715][T10506] lo speed is unknown, defaulting to 1000 [ 212.065665][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1496'. [ 212.105866][T10515] xt_recent: Unsupported userspace flags (00000042) [ 212.268820][T10522] infiniband syz0: set active [ 212.301032][T10522] bridge_slave_0: left allmulticast mode [ 212.327906][T10522] bridge_slave_0: left promiscuous mode [ 212.333871][T10522] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.367398][T10522] bridge_slave_1: left allmulticast mode [ 212.377871][T10522] bridge_slave_1: left promiscuous mode [ 212.406194][T10522] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.453320][T10522] bond0: (slave bond_slave_0): Releasing backup interface [ 212.512051][T10522] bond0: (slave bond_slave_1): Releasing backup interface [ 212.522321][T10536] RDS: rds_bind could not find a transport for ::c001:20:0:0, load rds_tcp or rds_rdma? [ 212.584760][T10522] team0: Port device team_slave_0 removed [ 212.627263][T10522] team0: Port device team_slave_1 removed [ 212.642070][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.653641][T10522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.663343][T10522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.673482][T10522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.701775][T10522] dummy0: left promiscuous mode [ 212.729459][T10522] team0: Port device vlan2 removed [ 212.753123][ T5280] lo speed is unknown, defaulting to 1000 [ 212.830051][T10523] team0: Port device wg2 added [ 213.095259][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1504'. [ 213.644041][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.162402][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.231786][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.273571][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.376169][ T35] bridge_slave_1: left allmulticast mode [ 214.381846][ T35] bridge_slave_1: left promiscuous mode [ 214.390648][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.399605][ T35] bridge_slave_0: left allmulticast mode [ 214.405242][ T35] bridge_slave_0: left promiscuous mode [ 214.411334][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.841147][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.873713][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.907310][ T35] bond0 (unregistering): Released all slaves [ 214.947253][T10595] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1510'. [ 214.962435][T10597] vlan4: entered promiscuous mode [ 214.974256][T10597] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 214.999745][T10597] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 215.030044][ T5243] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.039556][ T5243] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.049447][ T5243] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.074224][ T5243] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.097836][ T5243] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.105269][ T5243] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.162171][T10605] lo speed is unknown, defaulting to 1000 [ 215.931990][T10616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1515'. [ 215.981217][T10613] Cannot find set identified by id 65535 to match [ 216.219852][T10625] tipc: Started in network mode [ 216.231646][T10625] tipc: Node identity , cluster identity 4711 [ 216.306686][T10633] FAULT_INJECTION: forcing a failure. [ 216.306686][T10633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.320660][T10633] CPU: 1 UID: 0 PID: 10633 Comm: syz.3.1521 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 216.331461][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.341537][T10633] Call Trace: [ 216.344831][T10633] [ 216.347782][T10633] dump_stack_lvl+0x241/0x360 [ 216.352482][T10633] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.353853][T10627] netlink: 'syz.4.1519': attribute type 3 has an invalid length. [ 216.357678][T10633] ? __pfx__printk+0x10/0x10 [ 216.357720][T10633] should_fail_ex+0x3b0/0x4e0 [ 216.374690][T10633] _copy_from_user+0x2f/0xe0 [ 216.379302][T10633] sctp_setsockopt+0xcc/0x11c0 [ 216.384067][T10633] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 216.389951][T10633] do_sock_setsockopt+0x3af/0x720 [ 216.394973][T10633] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 216.400507][T10633] ? __fget_files+0x29/0x470 [ 216.405094][T10633] ? __fget_files+0x3f6/0x470 [ 216.409780][T10633] __sys_setsockopt+0x1ae/0x250 [ 216.414628][T10633] __x64_sys_setsockopt+0xb5/0xd0 [ 216.419645][T10633] do_syscall_64+0xf3/0x230 [ 216.424139][T10633] ? clear_bhb_loop+0x35/0x90 [ 216.428811][T10633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.434696][T10633] RIP: 0033:0x7f6f9ef79e79 [ 216.439101][T10633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.458698][T10633] RSP: 002b:00007f6f9e9de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 216.467131][T10633] RAX: ffffffffffffffda RBX: 00007f6f9f116058 RCX: 00007f6f9ef79e79 [ 216.475093][T10633] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 216.483056][T10633] RBP: 00007f6f9e9de090 R08: 000000000000000a R09: 0000000000000000 [ 216.491106][T10633] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 216.499069][T10633] R13: 0000000000000001 R14: 00007f6f9f116058 R15: 00007ffddc090158 [ 216.507132][T10633] [ 216.521412][T10627] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1519'. [ 216.704942][T10640] vlan3: entered promiscuous mode [ 216.760960][T10640] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 216.799987][T10640] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 216.871023][ T35] hsr_slave_0: left promiscuous mode [ 216.884129][ T35] hsr_slave_1: left promiscuous mode [ 216.902909][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.916388][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.933114][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.960861][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.051233][ T35] veth1_macvtap: left promiscuous mode [ 217.062711][ T35] veth0_macvtap: left promiscuous mode [ 217.101647][ T35] veth1_vlan: left promiscuous mode [ 217.121757][ T35] veth0_vlan: left promiscuous mode [ 217.175488][ T5243] Bluetooth: hci0: command tx timeout [ 217.228151][T10655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1530'. [ 217.319630][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1530'. [ 217.377843][ T5243] block nbd21: Receive control failed (result -107) [ 217.440508][T10655] nbd21: detected capacity change from 0 to 256 [ 217.782089][ T35] team0 (unregistering): Port device team_slave_1 removed [ 217.824839][ T35] team0 (unregistering): Port device team_slave_0 removed [ 218.167147][T10605] chnl_net:caif_netlink_parms(): no params data found [ 218.402446][T10677] Cannot find set identified by id 65535 to match [ 218.492545][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.510333][T10605] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.533694][T10605] bridge_slave_0: entered allmulticast mode [ 218.571451][T10605] bridge_slave_0: entered promiscuous mode [ 218.600969][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.630823][T10605] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.644759][T10605] bridge_slave_1: entered allmulticast mode [ 218.655012][T10605] bridge_slave_1: entered promiscuous mode [ 218.672410][T10678] syzkaller1: entered promiscuous mode [ 218.678399][T10678] syzkaller1: entered allmulticast mode [ 218.684269][T10685] netlink: 'syz.3.1539': attribute type 3 has an invalid length. [ 218.715758][T10685] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1539'. [ 218.810680][T10605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.832522][T10690] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1541'. [ 218.866918][T10690] vlan3: entered promiscuous mode [ 218.938013][T10605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.994428][T10697] netlink: 'syz.4.1543': attribute type 11 has an invalid length. [ 219.118782][T10605] team0: Port device team_slave_0 added [ 219.144180][T10605] team0: Port device team_slave_1 added [ 219.161031][T10702] syzkaller1: entered promiscuous mode [ 219.168222][T10702] syzkaller1: entered allmulticast mode [ 219.261508][ T5243] Bluetooth: hci0: command tx timeout [ 219.316652][T10605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.336854][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.401738][T10605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.441421][T10605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.456804][T10605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.510600][T10605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.614524][T10605] hsr_slave_0: entered promiscuous mode [ 219.623055][T10605] hsr_slave_1: entered promiscuous mode [ 219.629821][T10605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.637711][T10605] Cannot create hsr debugfs directory [ 219.889003][T10719] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 220.185546][T10728] netlink: 'syz.2.1553': attribute type 3 has an invalid length. [ 220.208506][T10728] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1553'. [ 220.230569][T10729] netlink: 'syz.3.1554': attribute type 13 has an invalid length. [ 220.259622][T10729] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1554'. [ 220.270629][T10729] syz_tun: refused to change device tx_queue_len [ 220.277410][T10729] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 220.402047][T10605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.435914][T10605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.461195][T10605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.483793][T10605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.696794][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1558'. [ 220.750719][T10605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.867384][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 220.876491][T10605] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.920055][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.927307][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.974598][ T5243] block nbd22: Receive control failed (result -107) [ 220.986352][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.993558][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.026080][T10744] nbd22: detected capacity change from 0 to 256 [ 221.219078][T10758] Cannot find set identified by id 0 to match [ 221.337371][ T5243] Bluetooth: hci0: command tx timeout [ 221.565966][T10605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.620450][T10772] netlink: 'syz.4.1567': attribute type 13 has an invalid length. [ 221.649258][T10772] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1567'. [ 221.717606][T10772] syz_tun: refused to change device tx_queue_len [ 221.731905][T10772] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 221.807638][T10605] veth0_vlan: entered promiscuous mode [ 221.841178][T10780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1569'. [ 221.856964][T10605] veth1_vlan: entered promiscuous mode [ 221.932352][T10605] veth0_macvtap: entered promiscuous mode [ 221.971064][T10605] veth1_macvtap: entered promiscuous mode [ 222.005284][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1571'. [ 222.021861][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.040541][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.050758][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.062674][T10786] netdevsim netdevsim4 netdevsim1: Unsupported IPsec algorithm [ 222.072268][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.091147][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.109470][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.119727][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.146175][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.164333][T10605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.190192][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.205190][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.217262][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.228225][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.238482][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.261461][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.271496][T10605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.289994][T10605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.304696][T10605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.320948][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 222.343780][T10605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.360667][T10605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.371577][T10605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.385243][T10605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.589505][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.611538][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.640544][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.649996][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.583272][T10823] netlink: 'syz.4.1583': attribute type 21 has an invalid length. [ 224.013235][T10839] __nla_validate_parse: 4 callbacks suppressed [ 224.013256][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1591'. [ 224.039105][T10841] Cannot find set identified by id 0 to match [ 224.814791][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1595'. [ 225.152259][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.241827][T10864] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1597'. [ 226.275824][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1596'. [ 226.563786][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.573275][ T5235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.582331][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.590877][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.599332][ T5235] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 226.609167][ T5235] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.649239][T10872] lo speed is unknown, defaulting to 1000 [ 226.776653][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.851930][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.961440][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.011357][T10872] chnl_net:caif_netlink_parms(): no params data found [ 227.161352][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1613'. [ 227.430376][T10872] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.452452][T10872] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.475699][T10872] bridge_slave_0: entered allmulticast mode [ 227.496223][T10872] bridge_slave_0: entered promiscuous mode [ 227.537662][T10872] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.556236][T10872] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.579380][T10872] bridge_slave_1: entered allmulticast mode [ 227.594543][T10872] bridge_slave_1: entered promiscuous mode [ 227.735030][ T52] bridge_slave_1: left allmulticast mode [ 227.755116][ T52] bridge_slave_1: left promiscuous mode [ 227.768982][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.789911][ T52] bridge_slave_0: left allmulticast mode [ 227.810328][ T52] bridge_slave_0: left promiscuous mode [ 227.817429][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.360518][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.372088][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.385723][ T52] bond0 (unregistering): Released all slaves [ 228.404261][T10872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.414081][T10903] netlink: 'syz.1.1606': attribute type 13 has an invalid length. [ 228.424052][T10903] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1606'. [ 228.489855][T10872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.568410][T10911] xt_TPROXY: Can be used only with -p tcp or -p udp [ 228.695805][ T5235] Bluetooth: hci0: command tx timeout [ 228.757414][T10872] team0: Port device team_slave_0 added [ 228.759260][T10915] Bluetooth: MGMT ver 1.23 [ 228.814010][T10872] team0: Port device team_slave_1 added [ 228.944314][T10872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.965727][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.994138][T10872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.022685][T10872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.032044][T10872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.038809][T10932] xt_TPROXY: Can be used only with -p tcp or -p udp [ 229.061489][T10872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.340345][T10872] hsr_slave_0: entered promiscuous mode [ 229.355227][T10872] hsr_slave_1: entered promiscuous mode [ 229.364767][T10872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.378378][T10872] Cannot create hsr debugfs directory [ 229.400887][ T52] hsr_slave_0: left promiscuous mode [ 229.407337][ T52] hsr_slave_1: left promiscuous mode [ 229.414741][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.429846][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.444863][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.456058][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.482155][ T52] veth1_macvtap: left promiscuous mode [ 229.488245][ T52] veth0_macvtap: left promiscuous mode [ 229.493924][ T52] veth1_vlan: left promiscuous mode [ 229.509718][ T52] veth0_vlan: left promiscuous mode [ 230.064312][T10962] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1630'. [ 230.101154][ T52] team0 (unregistering): Port device team_slave_1 removed [ 230.147616][ T52] team0 (unregistering): Port device team_slave_0 removed [ 230.260855][T10966] IPVS: length: 146 != 24 [ 230.779732][T10975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1634'. [ 230.780620][ T5235] Bluetooth: hci0: command tx timeout [ 230.939116][T10981] FAULT_INJECTION: forcing a failure. [ 230.939116][T10981] name failslab, interval 1, probability 0, space 0, times 0 [ 230.964175][T10981] CPU: 1 UID: 0 PID: 10981 Comm: syz.2.1637 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 230.975002][T10981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 230.985079][T10981] Call Trace: [ 230.988390][T10981] [ 230.991340][T10981] dump_stack_lvl+0x241/0x360 [ 230.996046][T10981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.001266][T10981] ? __pfx__printk+0x10/0x10 [ 231.005887][T10981] ? stack_trace_save+0x118/0x1d0 [ 231.010913][T10981] ? __pfx_validate_chain+0x10/0x10 [ 231.016108][T10981] ? __pfx_stack_trace_save+0x10/0x10 [ 231.021482][T10981] should_fail_ex+0x3b0/0x4e0 [ 231.026159][T10981] should_failslab+0xac/0x100 [ 231.030837][T10981] ? __alloc_skb+0x1c3/0x440 [ 231.035427][T10981] kmem_cache_alloc_node_noprof+0x71/0x320 [ 231.041241][T10981] __alloc_skb+0x1c3/0x440 [ 231.045657][T10981] ? __pfx___alloc_skb+0x10/0x10 [ 231.050595][T10981] ? mark_lock+0x9a/0x350 [ 231.054926][T10981] _sctp_make_chunk+0x58/0x460 [ 231.059693][T10981] sctp_make_strreset_req+0x7c/0x1160 [ 231.065062][T10981] ? __local_bh_enable_ip+0x168/0x200 [ 231.070430][T10981] ? sctp_stream_outq_is_empty+0x190/0x1e0 [ 231.076233][T10981] sctp_send_reset_streams+0x70d/0xd70 [ 231.082032][T10981] ? do_raw_spin_unlock+0x13c/0x8b0 [ 231.087228][T10981] sctp_setsockopt+0x845/0x11c0 [ 231.092076][T10981] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 231.097961][T10981] do_sock_setsockopt+0x3af/0x720 [ 231.102982][T10981] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 231.108517][T10981] ? __fget_files+0x29/0x470 [ 231.113103][T10981] ? __fget_files+0x3f6/0x470 [ 231.117783][T10981] __sys_setsockopt+0x1ae/0x250 [ 231.122630][T10981] __x64_sys_setsockopt+0xb5/0xd0 [ 231.127649][T10981] do_syscall_64+0xf3/0x230 [ 231.132144][T10981] ? clear_bhb_loop+0x35/0x90 [ 231.136820][T10981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.142703][T10981] RIP: 0033:0x7f9c70979e79 [ 231.147108][T10981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.166711][T10981] RSP: 002b:00007f9c717b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 231.175120][T10981] RAX: ffffffffffffffda RBX: 00007f9c70b15f80 RCX: 00007f9c70979e79 [ 231.183081][T10981] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003 [ 231.191043][T10981] RBP: 00007f9c717b9090 R08: 000000000000000a R09: 0000000000000000 [ 231.199003][T10981] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 231.206965][T10981] R13: 0000000000000000 R14: 00007f9c70b15f80 R15: 00007ffd8aceeaa8 [ 231.214939][T10981] [ 231.505676][T11000] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1642'. [ 231.526437][T11000] netlink: 'syz.2.1642': attribute type 2 has an invalid length. [ 231.539738][T11000] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1642'. [ 231.633004][T11004] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.642455][T11004] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.651646][T11004] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.660880][T11004] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.670400][T11004] vxlan0: entered promiscuous mode [ 231.677389][T11004] vxlan0: entered allmulticast mode [ 231.688544][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1646'. [ 231.698409][T11004] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.703926][T11009] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1646'. [ 231.707386][T11004] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.725606][T11004] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.734494][T11004] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.886734][T10872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.912877][T10872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.930531][T10872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.951834][T10872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.173372][T10872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.220274][T10872] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.250115][ T2518] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.257347][ T2518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.306851][ T978] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.314033][ T978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.484831][T11041] FAULT_INJECTION: forcing a failure. [ 232.484831][T11041] name failslab, interval 1, probability 0, space 0, times 0 [ 232.517462][T11041] CPU: 0 UID: 0 PID: 11041 Comm: syz.3.1660 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 232.528284][T11041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 232.538362][T11041] Call Trace: [ 232.541668][T11041] [ 232.544616][T11041] dump_stack_lvl+0x241/0x360 [ 232.549316][T11041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.554535][T11041] ? __pfx__printk+0x10/0x10 [ 232.559154][T11041] ? __kmalloc_noprof+0xb0/0x400 [ 232.564108][T11041] ? __pfx___might_resched+0x10/0x10 [ 232.569415][T11041] should_fail_ex+0x3b0/0x4e0 [ 232.574112][T11041] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 232.580370][T11041] should_failslab+0xac/0x100 [ 232.585058][T11041] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 232.591294][T11041] __kmalloc_noprof+0xd8/0x400 [ 232.596054][T11041] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 232.602118][T11041] genl_rcv_msg+0x802/0xec0 [ 232.606613][T11041] ? mark_lock+0x9a/0x350 [ 232.610945][T11041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.615981][T11041] ? __pfx_lock_acquire+0x10/0x10 [ 232.621026][T11041] ? __pfx_netlbl_unlabel_staticremovedef+0x10/0x10 [ 232.627613][T11041] ? __pfx___might_resched+0x10/0x10 [ 232.632899][T11041] netlink_rcv_skb+0x1e3/0x430 [ 232.637654][T11041] ? __pfx_genl_rcv_msg+0x10/0x10 [ 232.642673][T11041] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 232.647971][T11041] genl_rcv+0x28/0x40 [ 232.651946][T11041] netlink_unicast+0x7f6/0x990 [ 232.656714][T11041] ? __pfx_netlink_unicast+0x10/0x10 [ 232.661988][T11041] ? __virt_addr_valid+0x183/0x530 [ 232.667092][T11041] ? __check_object_size+0x49c/0x900 [ 232.672368][T11041] ? bpf_lsm_netlink_send+0x9/0x10 [ 232.677476][T11041] netlink_sendmsg+0x8e4/0xcb0 [ 232.682246][T11041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.687524][T11041] ? __import_iovec+0x536/0x820 [ 232.692367][T11041] ? aa_sock_msg_perm+0x91/0x160 [ 232.697300][T11041] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 232.702578][T11041] ? security_socket_sendmsg+0x87/0xb0 [ 232.708039][T11041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.713314][T11041] __sock_sendmsg+0x221/0x270 [ 232.717991][T11041] ____sys_sendmsg+0x525/0x7d0 [ 232.722753][T11041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.728045][T11041] __sys_sendmsg+0x2b0/0x3a0 [ 232.732633][T11041] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.737735][T11041] ? vfs_write+0x7c4/0xc90 [ 232.742180][T11041] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 232.748502][T11041] ? do_syscall_64+0x100/0x230 [ 232.753431][T11041] ? do_syscall_64+0xb6/0x230 [ 232.758100][T11041] do_syscall_64+0xf3/0x230 [ 232.762593][T11041] ? clear_bhb_loop+0x35/0x90 [ 232.767268][T11041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.773152][T11041] RIP: 0033:0x7f6f9ef79e79 [ 232.777560][T11041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.797263][T11041] RSP: 002b:00007f6f9e9ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.805668][T11041] RAX: ffffffffffffffda RBX: 00007f6f9f115f80 RCX: 00007f6f9ef79e79 [ 232.813629][T11041] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004 [ 232.821590][T11041] RBP: 00007f6f9e9ff090 R08: 0000000000000000 R09: 0000000000000000 [ 232.829565][T11041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.837629][T11041] R13: 0000000000000000 R14: 00007f6f9f115f80 R15: 00007ffddc090158 [ 232.845619][T11041] [ 232.855948][ T5235] Bluetooth: hci0: command tx timeout [ 233.038871][T11046] FAULT_INJECTION: forcing a failure. [ 233.038871][T11046] name failslab, interval 1, probability 0, space 0, times 0 [ 233.055831][T11046] CPU: 0 UID: 0 PID: 11046 Comm: syz.1.1662 Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 233.066639][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 233.076712][T11046] Call Trace: [ 233.080007][T11046] [ 233.082953][T11046] dump_stack_lvl+0x241/0x360 [ 233.087917][T11046] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.091779][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 233.093157][T11046] ? __pfx__printk+0x10/0x10 [ 233.106606][T11046] should_fail_ex+0x3b0/0x4e0 [ 233.111318][T11046] should_failslab+0xac/0x100 [ 233.116023][T11046] ? __alloc_skb+0x1c3/0x440 [ 233.120630][T11046] kmem_cache_alloc_node_noprof+0x71/0x320 [ 233.126464][T11046] __alloc_skb+0x1c3/0x440 [ 233.130899][T11046] ? __build_skb_around+0x245/0x3d0 [ 233.131749][T10872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.136098][T11046] ? __pfx___alloc_skb+0x10/0x10 [ 233.136119][T11046] ? __alloc_skb+0x28f/0x440 [ 233.136136][T11046] ? __lock_acquire+0x1f90/0x2040 [ 233.136168][T11046] create_monitor_ctrl_event+0x35/0x4d0 [ 233.162968][T11046] ? skb_put+0x114/0x1f0 [ 233.167251][T11046] mgmt_cmd_status+0x1d4/0x4d0 [ 233.172039][T11046] hci_mgmt_cmd+0xc47/0x11d0 [ 233.176653][T11046] hci_sock_sendmsg+0x7b8/0x11c0 [ 233.181617][T11046] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 233.187012][T11046] ? aa_sock_msg_perm+0x91/0x160 [ 233.191970][T11046] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 233.197275][T11046] ? security_socket_sendmsg+0x87/0xb0 [ 233.202763][T11046] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 233.208160][T11046] __sock_sendmsg+0x221/0x270 [ 233.211002][T10872] veth0_vlan: entered promiscuous mode [ 233.212867][T11046] sock_write_iter+0x2dd/0x400 [ 233.212901][T11046] ? __pfx_sock_write_iter+0x10/0x10 [ 233.228397][T11046] ? bpf_lsm_file_permission+0x9/0x10 [ 233.233801][T11046] ? security_file_permission+0x7f/0xa0 [ 233.239012][T10872] veth1_vlan: entered promiscuous mode [ 233.239484][T11046] vfs_write+0xa72/0xc90 [ 233.249267][T11046] ? __pfx_sock_write_iter+0x10/0x10 [ 233.254588][T11046] ? __pfx_vfs_write+0x10/0x10 [ 233.259484][T11046] ksys_write+0x1a0/0x2c0 [ 233.263846][T11046] ? __pfx_ksys_write+0x10/0x10 [ 233.268731][T11046] ? do_syscall_64+0x100/0x230 [ 233.273515][T11046] ? do_syscall_64+0xb6/0x230 [ 233.278216][T11046] do_syscall_64+0xf3/0x230 [ 233.282595][T10872] veth0_macvtap: entered promiscuous mode [ 233.282722][T11046] ? clear_bhb_loop+0x35/0x90 [ 233.293113][T11046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.293244][T10872] veth1_macvtap: entered promiscuous mode [ 233.299002][T11046] RIP: 0033:0x7f9dcc379e79 [ 233.299023][T11046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.299038][T11046] RSP: 002b:00007f9dcd14d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 233.299061][T11046] RAX: ffffffffffffffda RBX: 00007f9dcc515f80 RCX: 00007f9dcc379e79 [ 233.299076][T11046] RDX: 000000000000000d RSI: 0000000020000200 RDI: 000000000000000c [ 233.299089][T11046] RBP: 00007f9dcd14d090 R08: 0000000000000000 R09: 0000000000000000 [ 233.333910][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.337174][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.337191][T11046] R13: 0000000000000000 R14: 00007f9dcc515f80 R15: 00007ffc63624f48 [ 233.337223][T11046] [ 233.402251][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.425370][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.436542][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.446998][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.457973][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.469090][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.480191][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.492648][T10872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.546968][T11069] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1666'. [ 233.548817][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.589497][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.601439][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.612414][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.626356][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.627177][T11072] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1666'. [ 233.643010][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.662553][T10872] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.673339][T10872] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.692239][T10872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.706460][T10872] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.716090][T10872] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.724821][T10872] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.734082][T10872] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.822959][T11077] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 233.894563][T11078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1668'. [ 233.959366][ T978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.993719][ T978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.044021][ T978] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.064319][ T978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.101951][T11088] netlink: 'syz.1.1670': attribute type 3 has an invalid length. [ 234.492819][T11096] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.501968][T11096] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.510726][T11096] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.519874][T11096] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.529958][T11096] vxlan0: entered promiscuous mode [ 234.557929][T11097] lo speed is unknown, defaulting to 1000 [ 234.856027][ T30] INFO: task udevd:5236 blocked for more than 143 seconds. [ 234.863277][ T30] Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 234.909322][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 234.939389][ T30] task:udevd state:D stack:21072 pid:5236 tgid:5236 ppid:1 flags:0x00000002 [ 234.957529][ T30] Call Trace: [ 234.960848][ T30] [ 234.963802][ T30] __schedule+0x1800/0x4a60 [ 234.973471][ T30] ? __pfx___schedule+0x10/0x10 [ 234.978801][ T30] ? __blk_flush_plug+0x449/0x500 [ 234.983857][ T30] ? __pfx_lock_release+0x10/0x10 [ 234.996388][ T30] ? lockdep_init_map_type+0x3fa/0x910 [ 235.002313][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 235.026465][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.033088][ T30] ? schedule+0x90/0x320 [ 235.037814][ T30] schedule+0x14b/0x320 [ 235.042375][ T30] schedule_timeout+0x1be/0x310 [ 235.047482][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 235.053006][ T30] ? __pfx_process_timeout+0x10/0x10 [ 235.058630][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 235.064211][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 235.068959][ T30] ? __pfx_validate_chain+0x10/0x10 [ 235.074174][ T30] ? validate_chain+0x11e/0x5900 [ 235.079340][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 235.084384][ T30] ? __lock_acquire+0x137a/0x2040 [ 235.089657][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 235.095989][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 235.101921][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 235.107359][ T30] ? sbitmap_get+0x289/0x3f0 [ 235.112062][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 235.118291][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 235.124203][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 235.130617][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 235.137584][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 235.143534][ T30] ? __pfx___might_resched+0x10/0x10 [ 235.149295][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 235.155312][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 235.160842][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 235.166063][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 235.171396][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 235.177684][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 235.183602][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 235.188973][ T30] __blk_flush_plug+0x420/0x500 [ 235.193837][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 235.199433][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 235.204560][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 235.209948][ T30] __submit_bio+0x422/0x560 [ 235.214480][ T30] ? __pfx___submit_bio+0x10/0x10 [ 235.219717][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 235.226274][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 235.232953][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 235.239046][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 235.245139][ T30] ? __pfx___might_resched+0x10/0x10 [ 235.250791][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 235.257251][ T30] block_read_full_folio+0x93b/0xcd0 [ 235.262565][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 235.268099][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 235.273953][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 235.278962][ T30] ? folio_add_lru+0x357/0xd70 [ 235.283752][ T30] ? folio_add_lru+0x58f/0xd70 [ 235.288644][ T30] filemap_read_folio+0x1a0/0x790 [ 235.293685][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 235.299564][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 235.305135][ T30] ? __filemap_get_folio+0x984/0xc10 [ 235.310537][ T30] do_read_cache_folio+0x134/0x820 [ 235.315818][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 235.321297][ T30] read_part_sector+0xb3/0x330 [ 235.326748][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 235.331709][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 235.336629][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 235.342206][ T30] ? snprintf+0xda/0x120 [ 235.346530][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 235.354143][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 235.358958][ T30] ? vsnprintf+0x184/0x1da0 [ 235.363616][ T30] ? __pfx_snprintf+0x10/0x10 [ 235.368434][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 235.373219][ T30] bdev_disk_changed+0x72c/0x13d0 [ 235.378425][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 235.383925][ T30] blkdev_get_whole+0x2d2/0x450 [ 235.388917][ T30] bdev_open+0x2d4/0xc60 [ 235.393180][ T30] blkdev_open+0x3e8/0x570 [ 235.397724][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 235.402677][ T30] do_dentry_open+0x970/0x1440 [ 235.407619][ T30] vfs_open+0x3e/0x330 [ 235.411782][ T30] path_openat+0x2b3e/0x3470 [ 235.416666][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 235.422134][ T30] ? __lock_acquire+0x137a/0x2040 [ 235.427319][ T30] ? __pfx_path_openat+0x10/0x10 [ 235.432376][ T30] do_filp_open+0x235/0x490 [ 235.439727][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 235.444814][ T30] ? _raw_spin_unlock+0x28/0x50 [ 235.452811][ T30] ? alloc_fd+0x5a1/0x640 [ 235.457451][ T30] do_sys_openat2+0x13e/0x1d0 [ 235.462174][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.467474][ T30] ? bpf_trace_run2+0x1fc/0x540 [ 235.472335][ T30] ? bpf_trace_run2+0x36e/0x540 [ 235.477429][ T30] __x64_sys_openat+0x247/0x2a0 [ 235.482306][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.487816][ T30] ? rcu_is_watching+0x15/0xb0 [ 235.492601][ T30] ? trace_sys_enter+0x1f/0xd0 [ 235.502225][ T30] do_syscall_64+0xf3/0x230 [ 235.506913][ T30] ? clear_bhb_loop+0x35/0x90 [ 235.511610][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.517634][ T30] RIP: 0033:0x7f572d3169a4 [ 235.522062][ T30] RSP: 002b:00007ffef6e625c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.530516][ T30] RAX: ffffffffffffffda RBX: 00005571131d6230 RCX: 00007f572d3169a4 [ 235.538638][ T30] RDX: 00000000000a0800 RSI: 00005571131cbc00 RDI: 00000000ffffff9c [ 235.546795][ T30] RBP: 00005571131cbc00 R08: 0000000000000001 R09: 7fffffffffffffff [ 235.555221][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 235.563372][ T30] R13: 00005571131d3a70 R14: 0000000000000002 R15: 00005571131c2910 [ 235.571530][ T30] [ 235.574729][ T30] INFO: task udevd:5696 blocked for more than 144 seconds. [ 235.582841][ T30] Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 235.590539][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 235.599439][ T30] task:udevd state:D stack:20536 pid:5696 tgid:5696 ppid:1 flags:0x00004002 [ 235.609698][ T30] Call Trace: [ 235.613096][ T30] [ 235.616193][ T30] __schedule+0x1800/0x4a60 [ 235.620732][ T30] ? __pfx___schedule+0x10/0x10 [ 235.625751][ T30] ? __blk_flush_plug+0x449/0x500 [ 235.630801][ T30] ? __pfx_lock_release+0x10/0x10 [ 235.635962][ T30] ? __asan_memset+0x23/0x50 [ 235.640577][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 235.646448][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.652810][ T30] ? schedule+0x90/0x320 [ 235.657993][ T30] schedule+0x14b/0x320 [ 235.662191][ T30] schedule_timeout+0x1be/0x310 [ 235.667160][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 235.672553][ T30] ? __pfx_process_timeout+0x10/0x10 [ 235.678006][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 235.683497][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 235.688303][ T30] ? __pfx_validate_chain+0x10/0x10 [ 235.693532][ T30] ? validate_chain+0x11e/0x5900 [ 235.698576][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 235.703602][ T30] ? __lock_acquire+0x137a/0x2040 [ 235.708791][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 235.714982][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 235.720820][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 235.725997][ T30] ? sbitmap_get+0x289/0x3f0 [ 235.730628][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 235.737333][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 235.743513][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 235.750353][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 235.757790][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 235.763100][ T30] ? __pfx___might_resched+0x10/0x10 [ 235.769034][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 235.775036][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 235.780569][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 235.785740][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 235.791049][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 235.796761][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 235.802669][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 235.808135][ T30] __blk_flush_plug+0x420/0x500 [ 235.813012][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 235.818513][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 235.823644][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 235.828958][ T30] __submit_bio+0x422/0x560 [ 235.833491][ T30] ? __pfx___submit_bio+0x10/0x10 [ 235.838722][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 235.844985][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 235.851692][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 235.857505][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 235.863705][ T30] ? __pfx___might_resched+0x10/0x10 [ 235.869173][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 235.875406][ T30] block_read_full_folio+0x93b/0xcd0 [ 235.880710][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 235.886527][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 235.892376][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 235.899197][ T30] ? folio_add_lru+0x357/0xd70 [ 235.903995][ T30] ? folio_add_lru+0x58f/0xd70 [ 235.909089][ T30] filemap_read_folio+0x1a0/0x790 [ 235.914133][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 235.919656][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 235.925216][ T30] ? __filemap_get_folio+0x984/0xc10 [ 235.930723][ T30] do_read_cache_folio+0x134/0x820 [ 235.935891][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 235.941373][ T30] read_part_sector+0xb3/0x330 [ 235.946590][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 235.951560][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 235.956495][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 235.962407][ T30] ? snprintf+0xda/0x120 [ 235.967139][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 235.972815][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 235.977922][ T30] ? vsnprintf+0x184/0x1da0 [ 235.982689][ T30] ? __pfx_snprintf+0x10/0x10 [ 235.987823][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 235.992611][ T30] bdev_disk_changed+0x72c/0x13d0 [ 235.997888][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 236.003392][ T30] blkdev_get_whole+0x2d2/0x450 [ 236.008502][ T30] bdev_open+0x2d4/0xc60 [ 236.012763][ T30] blkdev_open+0x3e8/0x570 [ 236.017339][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 236.022298][ T30] do_dentry_open+0x970/0x1440 [ 236.027246][ T30] vfs_open+0x3e/0x330 [ 236.031329][ T30] path_openat+0x2b3e/0x3470 [ 236.036035][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 236.041426][ T30] ? __lock_acquire+0x137a/0x2040 [ 236.046698][ T30] ? __pfx_path_openat+0x10/0x10 [ 236.051668][ T30] do_filp_open+0x235/0x490 [ 236.056473][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 236.061531][ T30] ? _raw_spin_unlock+0x28/0x50 [ 236.067246][ T30] ? alloc_fd+0x5a1/0x640 [ 236.071627][ T30] do_sys_openat2+0x13e/0x1d0 [ 236.076499][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.081715][ T30] __x64_sys_openat+0x247/0x2a0 [ 236.086682][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 236.092065][ T30] ? exc_page_fault+0x590/0x8c0 [ 236.097008][ T30] ? do_syscall_64+0xb6/0x230 [ 236.101692][ T30] do_syscall_64+0xf3/0x230 [ 236.106488][ T30] ? clear_bhb_loop+0x35/0x90 [ 236.111192][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.117185][ T30] RIP: 0033:0x7f572d3169a4 [ 236.121610][ T30] RSP: 002b:00007ffef6e625c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.130147][ T30] RAX: ffffffffffffffda RBX: 00005571131e65c0 RCX: 00007f572d3169a4 [ 236.138793][ T30] RDX: 00000000000a0800 RSI: 00005571131e6950 RDI: 00000000ffffff9c [ 236.147189][ T30] RBP: 00005571131e6950 R08: 0000000000000001 R09: 7fffffffffffffff [ 236.155179][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 236.163294][ T30] R13: 00005571131e6150 R14: 00007ffef6e6266c R15: 00005571131c2910 [ 236.171915][ T30] [ 236.183495][ T30] INFO: task udevd:6186 blocked for more than 144 seconds. [ 236.191175][ T30] Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 236.199717][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 236.208445][ T30] task:udevd state:D stack:22032 pid:6186 tgid:6186 ppid:1 flags:0x00004002 [ 236.220977][ T30] Call Trace: [ 236.224385][ T30] [ 236.227474][ T30] __schedule+0x1800/0x4a60 [ 236.231994][ T30] ? __pfx___schedule+0x10/0x10 [ 236.237989][ T30] ? __blk_flush_plug+0x449/0x500 [ 236.243033][ T30] ? __pfx_lock_release+0x10/0x10 [ 236.248427][ T30] ? __asan_memset+0x23/0x50 [ 236.253036][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 236.258975][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.265318][ T30] ? schedule+0x90/0x320 [ 236.270905][ T30] schedule+0x14b/0x320 [ 236.275083][ T30] schedule_timeout+0x1be/0x310 [ 236.280306][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 236.285757][ T30] ? __pfx_process_timeout+0x10/0x10 [ 236.291050][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 236.296591][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 236.301213][ T30] ? __pfx_validate_chain+0x10/0x10 [ 236.306608][ T30] ? validate_chain+0x11e/0x5900 [ 236.311550][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 236.316714][ T30] ? __lock_acquire+0x137a/0x2040 [ 236.321782][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 236.331680][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 236.337593][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 236.342642][ T30] ? sbitmap_get+0x289/0x3f0 [ 236.347659][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 236.353764][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 236.359745][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 236.366307][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 236.373869][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 236.380192][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.385683][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 236.391785][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 236.397257][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 236.402385][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 236.407727][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 236.413287][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 236.419415][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 236.424734][ T30] __blk_flush_plug+0x420/0x500 [ 236.429643][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 236.435019][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 236.440618][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 236.446209][ T30] __submit_bio+0x422/0x560 [ 236.450813][ T30] ? __pfx___submit_bio+0x10/0x10 [ 236.456447][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 236.462713][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 236.469405][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 236.475769][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 236.481774][ T30] ? __pfx___might_resched+0x10/0x10 [ 236.487128][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 236.493308][ T30] block_read_full_folio+0x93b/0xcd0 [ 236.498744][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 236.504129][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 236.510154][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 236.515027][ T30] ? folio_add_lru+0x357/0xd70 [ 236.519966][ T30] ? folio_add_lru+0x58f/0xd70 [ 236.524747][ T30] filemap_read_folio+0x1a0/0x790 [ 236.529802][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 236.535269][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 236.542128][ T30] ? __filemap_get_folio+0x984/0xc10 [ 236.548084][ T30] do_read_cache_folio+0x134/0x820 [ 236.553230][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 236.559082][ T30] read_part_sector+0xb3/0x330 [ 236.563873][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 236.569862][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 236.574685][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 236.581932][ T30] ? snprintf+0xda/0x120 [ 236.586265][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 236.591938][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 236.596667][ T30] ? vsnprintf+0x184/0x1da0 [ 236.601183][ T30] ? __pfx_snprintf+0x10/0x10 [ 236.606207][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 236.610988][ T30] bdev_disk_changed+0x72c/0x13d0 [ 236.616194][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 236.621675][ T30] blkdev_get_whole+0x2d2/0x450 [ 236.626592][ T30] bdev_open+0x2d4/0xc60 [ 236.630850][ T30] blkdev_open+0x3e8/0x570 [ 236.635264][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 236.640607][ T30] do_dentry_open+0x970/0x1440 [ 236.645489][ T30] vfs_open+0x3e/0x330 [ 236.649574][ T30] path_openat+0x2b3e/0x3470 [ 236.654178][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 236.659828][ T30] ? __lock_acquire+0x137a/0x2040 [ 236.664984][ T30] ? __pfx_path_openat+0x10/0x10 [ 236.670550][ T30] do_filp_open+0x235/0x490 [ 236.675207][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 236.680804][ T30] ? _raw_spin_unlock+0x28/0x50 [ 236.686112][ T30] ? alloc_fd+0x5a1/0x640 [ 236.690477][ T30] do_sys_openat2+0x13e/0x1d0 [ 236.695156][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.700589][ T30] __x64_sys_openat+0x247/0x2a0 [ 236.705603][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 236.711010][ T30] ? do_syscall_64+0x100/0x230 [ 236.715850][ T30] ? do_syscall_64+0xb6/0x230 [ 236.720532][ T30] do_syscall_64+0xf3/0x230 [ 236.725023][ T30] ? clear_bhb_loop+0x35/0x90 [ 236.729908][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.735886][ T30] RIP: 0033:0x7f572d3169a4 [ 236.740306][ T30] RSP: 002b:00007ffef6e625c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.748834][ T30] RAX: ffffffffffffffda RBX: 00005571131e5e60 RCX: 00007f572d3169a4 [ 236.756939][ T30] RDX: 00000000000a0800 RSI: 0000557113204520 RDI: 00000000ffffff9c [ 236.764905][ T30] RBP: 0000557113204520 R08: 0000000000000001 R09: 7fffffffffffffff [ 236.773007][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 236.781243][ T30] R13: 00005571131e8d20 R14: 0000000000000001 R15: 00005571131c2910 [ 236.789852][ T30] [ 236.793042][ T30] [ 236.793042][ T30] Showing all locks held in the system: [ 236.804311][ T30] 3 locks held by kworker/u8:0/11: [ 236.811990][T11096] __nla_validate_parse: 2 callbacks suppressed [ 236.812004][T11096] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1674'. [ 236.821549][ T30] 3 locks held by kworker/1:0/25: [ 236.834206][ T30] #0: ffff8880b933e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 236.844698][ T30] #1: ffff8880b9328948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 236.856824][ T30] #2: ffffffff8e938380 (rcu_read_lock_bh){....}-{1:2}, at: wg_packet_tx_worker+0x25f/0x810 [ 236.867365][ T30] 1 lock held by khungtaskd/30: [ 236.872251][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 236.882409][ T30] 3 locks held by kworker/u8:10/2581: [ 236.888389][ T30] #0: ffff88802a929148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 236.900212][ T30] #1: ffffc9000976fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 236.913115][ T30] #2: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 236.922948][ T30] 2 locks held by getty/4981: [ 236.930669][ T30] #0: ffff88802af1f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 236.941223][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 236.951492][ T30] 3 locks held by udevd/5230: [ 236.956241][ T30] #0: ffff888020a244c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 236.965813][ T30] #1: ffff88802097a610 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 236.975431][ T30] #2: ffff888020ab8380 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 236.984435][ T30] 3 locks held by kworker/u9:3/5235: [ 236.991088][ T30] #0: ffff88802b3a5148 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 237.003619][ T30] #1: ffffc900035f7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 237.016983][ T30] #2: ffff888024ef8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 237.027228][ T30] 3 locks held by udevd/5236: [ 237.031940][ T30] #0: ffff888020b144c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.041871][ T30] #1: ffff888020997310 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.051978][ T30] #2: ffff888021068180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.061466][ T30] 3 locks held by udevd/5245: [ 237.066287][ T30] #0: ffff8880737484c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.075738][ T30] #1: ffff88802d915710 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.085742][ T30] #2: ffff8880234f8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.097549][ T30] 3 locks held by kworker/1:3/5280: [ 237.102772][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 237.114361][ T30] #1: ffffc90003f2fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 237.127757][ T30] #2: ffff88805a244240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 237.137972][ T30] 3 locks held by udevd/5620: [ 237.142692][ T30] #0: ffff88802116f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.152647][ T30] #1: ffff88801f755a10 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.162385][ T30] #2: ffff888021240180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.171867][ T30] 3 locks held by udevd/5696: [ 237.176673][ T30] #0: ffff888020b104c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.186162][ T30] #1: ffff88802097ac90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.196516][ T30] #2: ffff888020b98180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.205664][ T30] 3 locks held by udevd/6186: [ 237.210354][ T30] #0: ffff888020b4f4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.219646][ T30] #1: ffff88801f712c90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.229356][ T30] #2: ffff888021090180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.238488][ T30] 3 locks held by udevd/6349: [ 237.243673][ T30] #0: ffff888020b3c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.253039][ T30] #1: ffff888020bf3090 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.262776][ T30] #2: ffff8880211a0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.271911][ T30] 3 locks held by udevd/6531: [ 237.276644][ T30] #0: ffff8880607754c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.286127][ T30] #1: ffff88802e840c90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.295970][ T30] #2: ffff88802d5d8180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.304980][ T30] 3 locks held by udevd/6945: [ 237.309791][ T30] #0: ffff8880684484c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.319212][ T30] #1: ffff88802f241c90 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.329425][ T30] #2: ffff88802de08180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.339138][ T30] 3 locks held by udevd/7579: [ 237.343820][ T30] #0: ffff8880213584c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.353354][ T30] #1: ffff888021023990 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.363071][ T30] #2: ffff8880213a0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.372175][ T30] 3 locks held by udevd/7739: [ 237.377019][ T30] #0: ffff8880212974c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.386423][ T30] #1: ffff88801f4a8910 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.396336][ T30] #2: ffff888021338180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.405579][ T30] 3 locks held by udevd/8098: [ 237.410266][ T30] #0: ffff88801c69c4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 237.420325][ T30] #1: ffff888071af5590 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 237.430006][ T30] #2: ffff888067ce0180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 237.439214][ T30] 1 lock held by syz-executor/10872: [ 237.444512][ T30] #0: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x7b2/0x1000 [ 237.453994][ T30] 2 locks held by syz.4.1674/11097: [ 237.459349][ T30] #0: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x8a/0x1f0 [ 237.468535][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 237.480415][ T30] 1 lock held by syz.2.1676/11101: [ 237.485804][ T30] #0: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 237.497050][ T30] [ 237.500337][ T30] ============================================= [ 237.500337][ T30] [ 237.509742][ T30] NMI backtrace for cpu 1 [ 237.514085][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 237.524597][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 237.534644][ T30] Call Trace: [ 237.537914][ T30] [ 237.540834][ T30] dump_stack_lvl+0x241/0x360 [ 237.545507][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.550707][ T30] ? __pfx__printk+0x10/0x10 [ 237.555295][ T30] ? vprintk_emit+0x667/0x7c0 [ 237.559966][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 237.565072][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 237.570009][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 237.575470][ T30] ? _printk+0xd5/0x120 [ 237.579629][ T30] ? __pfx__printk+0x10/0x10 [ 237.584212][ T30] ? __wake_up_klogd+0xcc/0x110 [ 237.589058][ T30] ? __pfx__printk+0x10/0x10 [ 237.593645][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 237.598670][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 237.604643][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 237.610621][ T30] watchdog+0xff4/0x1040 [ 237.614860][ T30] ? watchdog+0x1ea/0x1040 [ 237.619277][ T30] ? __pfx_watchdog+0x10/0x10 [ 237.623948][ T30] kthread+0x2f0/0x390 [ 237.628012][ T30] ? __pfx_watchdog+0x10/0x10 [ 237.632679][ T30] ? __pfx_kthread+0x10/0x10 [ 237.637262][ T30] ret_from_fork+0x4b/0x80 [ 237.641680][ T30] ? __pfx_kthread+0x10/0x10 [ 237.646267][ T30] ret_from_fork_asm+0x1a/0x30 [ 237.651032][ T30] [ 237.654835][ T30] Sending NMI from CPU 1 to CPUs 0: [ 237.661216][ C0] NMI backtrace for cpu 0 [ 237.661228][ C0] CPU: 0 UID: 0 PID: 4663 Comm: syslogd Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 237.661250][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 237.661260][ C0] RIP: 0010:file_remove_privs_flags+0x0/0x590 [ 237.661282][ C0] Code: 6e ff ff ff 48 89 ef e8 1e 5d e7 ff e9 61 ff ff ff 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 237.661295][ C0] RSP: 0018:ffffc90003137c68 EFLAGS: 00000246 [ 237.661310][ C0] RAX: ffffffff8213758d RBX: 000000000000005e RCX: ffff88807d835a00 [ 237.661322][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802ec87680 [ 237.661333][ C0] RBP: ffffc90003137e10 R08: ffffffff81d7861e R09: 1ffff11005dccae9 [ 237.661345][ C0] R10: dffffc0000000000 R11: ffffed1005dccaea R12: ffff88802ec87680 [ 237.661357][ C0] R13: ffff88802ee65740 R14: ffffc90003137d70 R15: ffffc90003137d20 [ 237.661369][ C0] FS: 00007f7d3f8d9380(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 237.661384][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 237.661394][ C0] CR2: 00007f233870cd58 CR3: 000000002cf78000 CR4: 00000000003506f0 [ 237.661408][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 237.661418][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 237.661428][ C0] Call Trace: [ 237.661434][ C0] [ 237.661440][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 237.661460][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 237.661482][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 237.661500][ C0] ? nmi_handle+0x2a/0x5a0 [ 237.661524][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 237.661543][ C0] ? nmi_handle+0x14f/0x5a0 [ 237.661558][ C0] ? nmi_handle+0x2a/0x5a0 [ 237.661573][ C0] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 237.661591][ C0] ? default_do_nmi+0x63/0x160 [ 237.661610][ C0] ? exc_nmi+0x123/0x1f0 [ 237.661628][ C0] ? end_repeat_nmi+0xf/0x53 [ 237.661650][ C0] ? shmem_file_write_iter+0x9e/0x120 [ 237.661666][ C0] ? file_remove_privs+0xd/0x20 [ 237.661683][ C0] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 237.661701][ C0] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 237.661719][ C0] ? __pfx_file_remove_privs_flags+0x10/0x10 [ 237.661736][ C0] [ 237.661741][ C0] [ 237.661746][ C0] shmem_file_write_iter+0xab/0x120 [ 237.661765][ C0] vfs_write+0xa72/0xc90 [ 237.661785][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 237.661803][ C0] ? __pfx_vfs_write+0x10/0x10 [ 237.661820][ C0] ? vfs_fstatat+0xfd/0x190 [ 237.661845][ C0] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 237.661875][ C0] ksys_write+0x1a0/0x2c0 [ 237.661896][ C0] ? __pfx_ksys_write+0x10/0x10 [ 237.661915][ C0] ? do_syscall_64+0x100/0x230 [ 237.661931][ C0] ? do_syscall_64+0xb6/0x230 [ 237.661947][ C0] do_syscall_64+0xf3/0x230 [ 237.661962][ C0] ? clear_bhb_loop+0x35/0x90 [ 237.661981][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.661998][ C0] RIP: 0033:0x7f7d3fa2dbf2 [ 237.662010][ C0] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83 [ 237.662023][ C0] RSP: 002b:00007ffe6fe3b758 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 237.662037][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7d3fa2dbf2 [ 237.662048][ C0] RDX: 000000000000005e RSI: 00005652221dac50 RDI: 0000000000000003 [ 237.662058][ C0] RBP: 00005652221dac50 R08: 0000000000000001 R09: 0000000000000000 [ 237.662068][ C0] R10: 00007f7d3fbcc3a3 R11: 0000000000000246 R12: 000000000000005e [ 237.662078][ C0] R13: 00007f7d3f8d9300 R14: 0000000000000004 R15: 00005652221daa60 [ 237.662097][ C0] [ 237.673994][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 237.674010][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00138-g8af174ea863c #0 [ 237.674030][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 237.674042][ T30] Call Trace: [ 237.674049][ T30] [ 237.674056][ T30] dump_stack_lvl+0x241/0x360 [ 237.674081][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.674099][ T30] ? __pfx__printk+0x10/0x10 [ 237.674120][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.674148][ T30] ? vscnprintf+0x5d/0x90 [ 237.674170][ T30] panic+0x349/0x860 [ 237.674194][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 237.674215][ T30] ? __pfx_panic+0x10/0x10 [ 237.674235][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 237.674255][ T30] ? __irq_work_queue_local+0x137/0x410 [ 237.674278][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 237.674296][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 237.674319][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 237.674340][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 237.674363][ T30] watchdog+0x1033/0x1040 [ 237.674386][ T30] ? watchdog+0x1ea/0x1040 [ 237.674413][ T30] ? __pfx_watchdog+0x10/0x10 [ 237.674434][ T30] kthread+0x2f0/0x390 [ 237.674457][ T30] ? __pfx_watchdog+0x10/0x10 [ 237.674478][ T30] ? __pfx_kthread+0x10/0x10 [ 237.674501][ T30] ret_from_fork+0x4b/0x80 [ 237.674522][ T30] ? __pfx_kthread+0x10/0x10 [ 237.674544][ T30] ret_from_fork_asm+0x1a/0x30 [ 237.674577][ T30] [ 237.682180][ T30] Kernel Offset: disabled [ 238.189412][ T30] Rebooting in 86400 seconds..