last executing test programs: 11.290742374s ago: executing program 3 (id=1130): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r0, 0xff, 0x0, 0x0, 0x900) 11.106920888s ago: executing program 3 (id=1133): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000740)={0x0, 0xa00, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x19, 0x400, 0x5, 0xd, 0x180, 0x1, 0x2fdc4a4d, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0xfffffffffffffef2, 0xffffffa1, 0x0, 0x4}, 0x20) socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) write$binfmt_elf64(r2, &(0x7f00000014c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005f010900de50d1aa3dd355d57b26d710dbc65c1898e47b4d0000d0a144d2a1c4bc75bd9139466e7b11d4aa943bbcb92e5d7b91afd7e09719035d4d3721"], 0xed) write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0', [{0x20, 'hash\x00'}, {0x20, ':'}, {0x20, '\x00'}], 0xa, "dbe1e8cbec59c68786138aca09be8ddb1aec362c2a784ca8933bfe0bd9b1b81977626a1e3f7737d461912f07c80ef3c25e5ca69e183e26335eecacfa757aa91e22abca480c93a0fc0bf72da0e73f60e62bf8db32a9012d4d4539b817b0c2eb07d3c831a8fc97c48411ee258044"}, 0x82) r4 = socket$alg(0x26, 0x5, 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendfile(r5, r2, 0x0, 0xfacf) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYRES8=r3], 0x124}, 0x1, 0x0, 0x0, 0x810}, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x8, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) 10.896160238s ago: executing program 4 (id=1140): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200000400000000000000080009000d090000", 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x101, 0xffc, 0x7}, 0x48) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="b6", 0x1}], 0x1}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000001880)="0245bf56", 0x4, 0x0, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x360, 0x11, 0x148, 0x360, 0x10, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x1be6, 0x80}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x2000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x528) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000040000000850000207b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000611250000000000095000000000000009a29cb8b5c1eb2b65a3b89fe404972c75122e8da58d72be3fc0758d0e732a39b100bd6debd50ecc672a49134cc3f07d954c02fa5897f7e438a6950692c728efe67a42d1c261c70d02ce10b6a9bcdedfae5cc05967778e1fbf4741969876beaadd34c83f7bfc7b8ff9ecf09bfee57f7fbc796791204cc0b73f9b20d9631785398ae6026293d87ee0cfc0906600807016519ed588fd9f6a0bd4130839ddf5c9c442268e474a7e9d3de67f4aa614db6653ed52361412fae30045ae21a6af2f728a57485ee629cc66327dffe568ced6ac25d0b18a08de85d9aee69b7e89fc2d02f3faa4f13"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x8d, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="100000001400017d"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000005a027b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000a9dd1b3000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000100)=ANY=[], 0x9) socket$can_j1939(0x1d, 0x2, 0x7) 10.76687815s ago: executing program 2 (id=1142): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0x7f, 0x0, 0x0, 0xcd}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 10.689780298s ago: executing program 4 (id=1144): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r2 = socket(0x23, 0x5, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000702000000feffff7a0af0ff9100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000009000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd005d41ce4e7bb3626d6e0d3e6600cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb059bafe3c6431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4071ade12f41de4f6df6a936b4ec3827c739bb39a01000000fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36eb005c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d001000080000000004ba3f0151fdbbd4e97d62ecc645e143a60f10800000000000000826151e2b42bf0ed0c8cef3ba2a730a00c87fa550cf960e63fda48a29682881eb8c9cfa72b08eecc952a1a2982492a210e00d2bfea3b8d357d61abe37bafd7c310a5d8f922afe7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d856a25992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7e472f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee278226f24cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b4268d99704d9a90cf27e281c1b05077ca60fdecb2717e21f8f197b1866108b6e8c71e26032176066439783568628f0309c3afa716d3706e1fa89917e131fff0000003e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e91a2d2478ce30000000000000000000032ccd19aaa33464267e240b44efe147aa6514ff3fd62efaafb6295f2973c5f90cf33b04a8305536cb5d859d4e274d95f4d024e8fa9d5062c6087e4c999d1bf835a50b42d4e0b36bbada6ef48af5627e279ab229e90fdcc1b254b9c53b79b8016edd205a3aea1373ff2d5b7e1fa51282dfe1ff2f8a615252d0a800022fcc3750d76d3fa4c55c4aeb19e8a25b73bd2294a1d443f20245d6c27924be7204558d988b58e2958cf1f4364e3083247dd5f6659630ad2d834151a474c8616f2a3ab1cca175795aacba246a05a1e965275265c1057487c0f5cc1b47933fc02010090f07469ab5620b151b4d57716c0f402101cdd6193d99ecf67838cf8c2ad356997268446ffce30ead1912bbbad3fe80cf6cc144f8578e9b9cd8737a376bfe0f9f197621489b6b46993a432c5875ea5e3126d4e45ad787f43b1abd550aab300c199708c921a97b4d2a2f82df25470cca25e118a4096adddf947c964a4d15e10cdb403b45c4cb2d97d6fc69f30888a188b5924a9446988f9532ea3a0a2638300d55c8c769185"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r3, @ANYBLOB, @ANYRES32], 0x44}}, 0x0) 10.675719997s ago: executing program 2 (id=1145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp}, 0x20) recvmmsg(r1, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x14f) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000080), 0x4) 10.600504519s ago: executing program 4 (id=1147): socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket(0x200000000000011, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@generic="92"]}, 0x18}}, 0x0) unshare(0x2c060000) unshare(0x24020400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfece) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100039040000001b2ebaf8a9114d5b00", @ANYRES32=r5, @ANYBLOB="00000000000000001800128008000100677265000c00028008000100", @ANYRES32=r5], 0x38}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={@local, 0x0, r5}) listen(r2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0xffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) 10.594408295s ago: executing program 1 (id=1148): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000200000000000000000000008500000087000000850000000800000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x40000000015, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r0, &(0x7f0000000040), 0x12) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES8=r1, @ANYRESHEX, @ANYBLOB="a3da01010ab0b1497edd477f31a9645452bbab3223551821a7f20de20fa9d8ce7d4b616e67606309a034f378963ce4e59a9af31109effcd1ffc141cee41027ce6668f23e3fb1d522616e6654d3c926cb216fa2c7e532aef55ed28fbf469fe0"], 0x48}}, 0x44000) r4 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="f9"], 0x28}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r6, @ANYBLOB="f9"], 0x28}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x6, 0x0, 0x86786001a11c1426, 0x1, 0x5, 0x5}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x6, 0x0, 0x86786001a11c1426, 0x1, 0x5, 0x5}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000270000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000dcdb9743b702000008000000b70300000000000085000010060000009500000000000000dcdf4e52c384264bb4327b714d2e05f46261161bb7a1e56680ad49585a8ad31e9c0ab68a82263acee159545e2d1c11f5395d2f5aaf5a5e3d5f68467f78300a08bf22575aa5fd5ca15375b6c8c7e0ae4bf8a9c9ef1a1f38bd5ba81dbc12ad"], &(0x7f0000000080)='GPL\x00'}, 0x90) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000270000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000dcdb9743b702000008000000b70300000000000085000010060000009500000000000000dcdf4e52c384264bb4327b714d2e05f46261161bb7a1e56680ad49585a8ad31e9c0ab68a82263acee159545e2d1c11f5395d2f5aaf5a5e3d5f68467f78300a08bf22575aa5fd5ca15375b6c8c7e0ae4bf8a9c9ef1a1f38bd5ba81dbc12ad"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x3, 0x0) (async) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$unix(r9, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) (async) bind$unix(r9, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e23}, 0x6e) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xfffffffffffffca3, 0x2, [@TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 10.535147426s ago: executing program 0 (id=1149): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010"], 0x3c}}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_IP_IPSEC_POLICY(r0, 0xd00, 0x10, &(0x7f0000000380)={{{@in=@empty, @in6=@remote}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, 0xe8) 10.505661691s ago: executing program 0 (id=1150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x700, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x1c}}, 0x0) 10.50485554s ago: executing program 2 (id=1151): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000002d007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000ac0)=@deltaction={0x24, 0x31, 0x1, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) socket$kcm(0xa, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c0000000000000000020000000900010073797a300000000008000240000000020900010073797a310000000014000000110001"], 0x5c}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a30000000030a010800000000000000000200000008000b400000000008000a40000000040900010073797a310000000014000000110001"], 0x58}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, r7) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010000100000000000000000000001000", @ANYRES32=r5, @ANYBLOB="0000000000000000200016801c00018018000c", @ANYRESDEC=r2], 0x48}}, 0x0) 10.429727197s ago: executing program 0 (id=1152): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x7000000) 10.351152134s ago: executing program 1 (id=1153): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x8847, 0x0, {}, [@RTA_NEWDST={0x84}]}, 0xa0}}, 0x0) 10.345179008s ago: executing program 0 (id=1154): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200000400000000000000080009000d090000", 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x101, 0xffc, 0x7}, 0x48) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="b6", 0x1}], 0x1}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000001880)="0245bf56", 0x4, 0x0, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x360, 0x11, 0x148, 0x360, 0x10, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x1be6, 0x80}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x2000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x528) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000040000000850000207b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000611250000000000095000000000000009a29cb8b5c1eb2b65a3b89fe404972c75122e8da58d72be3fc0758d0e732a39b100bd6debd50ecc672a49134cc3f07d954c02fa5897f7e438a6950692c728efe67a42d1c261c70d02ce10b6a9bcdedfae5cc05967778e1fbf4741969876beaadd34c83f7bfc7b8ff9ecf09bfee57f7fbc796791204cc0b73f9b20d9631785398ae6026293d87ee0cfc0906600807016519ed588fd9f6a0bd4130839ddf5c9c442268e474a7e9d3de67f4aa614db6653ed52361412fae30045ae21a6af2f728a57485ee629cc66327dffe568ced6ac25d0b18a08de85d9aee69b7e89fc2d02f3faa4f13"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x8d, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x10000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="100000001400017d"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000005a027b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000a9dd1b3000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000100)=ANY=[], 0x9) socket$can_j1939(0x1d, 0x2, 0x7) 10.331503303s ago: executing program 4 (id=1155): socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) listen(0xffffffffffffffff, 0x3fffff) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xa) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000114b4d8170200000000000000ee", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffb}, @TCA_NETEM_RATE64={0xc, 0x8, 0x654534bf5327d02e}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x2}}]}}}]}, 0x78}}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) (async) r4 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) (async) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r3, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r3, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x1c) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x480}, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x0, 0x3) bind$inet6(r7, 0x0, 0x0) epoll_create1(0x0) socket$unix(0x1, 0x0, 0x0) (async) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x15) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 10.219187848s ago: executing program 1 (id=1156): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 10.189394457s ago: executing program 3 (id=1157): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123f51c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e3962dcddef6af1a11972a6b4975022278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd0971d379380bf63432872cfed453870000b219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d3f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d3112874ec51d6fe048ba6866adebab53168770a71ad901ace383e7927de217d6bf74daf41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafce5c1b3f97a297c9e490f241999085afabdd529f62ca0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637f99f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec737555392a0b06491cba71f897144910fe050038ec9e475e89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb6179d257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0117c9b737b9b59418006c1bc1aafa2768e82597251e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b101000f49e298727340e87cdefb40e56e9cfad973347d0de7ba4754ff231a1b933d8f931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf444b032dad13007b82e6044f643fc8cd07a97e2bbe636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935f602325984386b21b96492ae662082b56cf666e63a757c0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e71338a40c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2603bfab96831957a08e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d01af43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627ebe92d48aa5fc0a7bf1b5108b34d22ad004de8274c22c8ba823d964969c9f02bb78c598fa8701b000884de710b54e5ab2e8ff0c7ae23e0b601ac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105b65007c8ff1f00a8ce7e31f7c9c3e3fa61aab967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa1904122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700ba363ca3182105960bef3378a980000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450cfe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c32e4f1f22af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b404797056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa58291c4eb9d4e08ad7a9c5f04be1ab59719a8200007bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b7f76c78ba0b44ec0bdfa0d32d7030000003a073b12eb579032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e02b7cd25385f3b9628471b4364987b0b2c82a8b0f976387ebb62ead0e1b761e6ec9b824fe006ea52c0c469e3bd8fed05a486bd5511144ebb63d56d61da5fcb58e196a8923edaf228b0cb96b856b15c90b154494fb0cff768b3417fcc89acb9b9b4f8581c82ff3121b5920f4e71508eea4341ec618f4d9110928ea8dd17e36f3beb0c07d911c00eb4054ad48cab563c5ad97d732c3653635df7600091973d44ff94ac6d670ecc085501bd91b586adf858b41d918fd58f8577adb541857dbbf33be97c4809c6595ebfff19b34cec7fd877e8f2aad6a1a6a4ec6dbb3de42bb2e75b4768d139d7b7ff5d51e6863b6704901b59fd92495608395fce98c267a3846b67e7a5b57d995e07dca8db555aea5a0f6f1cd85d791f22d06ff37fcbb22b2d9296b36faee22e513b276fc8494ce31699343278aa8f531ee549d2ba495059c80d5748d8a0cb19df27338aaafbf0849c31572d17a786383b3f619212651a076e5148fa6421f5405e65ee31e6fbd510d92c17fe12a7f203066848e2a9adef66ad7ae8edea20fb8c7233de3736949e15b88699c2f8576060cf95d2593828abde6e2eed2a717655782ae9e589f5de9792c810ec07a842bca96e594f13211eae7ee1919b7af1e33ff726792cbb1366fb8a3684370e35122b0ad40f55846ca7d39cf6f9a1cfa5460f537e89e1c5f3cd10a3d8ae3ecec0c7e4114aec30742d88f313d74447723808da0889e34b31c13a79b8bb105cdcb234d56246bbf003c0ad03ff20f573df9604720d652b0a0cc5d90a284b5c7824bfdc4e3f18eaf9820ffbd8c4f32c8de631c181ab76505dac753fec759b0414cb3c5dfa02b6a3b93ff79bcf8c613b4a9124923e7e6ce74266fd78564000000000ce0d3ac2350502cf4a410152ee893d57622bee2b52df83cd30b4ae17d507fba05e7055db7e6d4cfc085773b900ca50bee4d49529f24bab389fb87fbb481340e8ce1810727212dc5e96d99de07611cb588a5d8b5c510c1f5b3fb568971646821b50dc2542003eb60a4ee9398ae4b6681c29cd921fb35b12ca111f12c59ac39dde4bf4f7524362304610979f5199ef9d271af60a421e29c6483423157ed4c2721123ddf33313a97ec1a55115b6df23157ad17b5e544db26c46d31b2e7375c37ace025955c9482e1ef841554c202c356842233c57c258f8f2043b4b6de433e8a2fb9365b65496c5777c1a1a223763d51190a24fb4047ad7ff6258f1b000000000000000000000000e0ef07726228fb150d09f697ee3db6cc096676225780d422fe917a5c57bedabb42399727b386e979dde3b7243dad1f78e8592937866cfc017f3a8ad31c53115fb7f3452bd3318c4a17cc80bcab32d9ed35273c3c930719ddb5b757f9d85cc86ddd"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x80086601, &(0x7f0000000100)={r2}) 10.185741017s ago: executing program 1 (id=1158): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0xf1ff, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x10, 0x2, [@TCA_RED_FLAGS={0xc}]}}]}, 0x3c}}, 0x0) 10.154496804s ago: executing program 0 (id=1159): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x2}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000ffffffde0000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000000c0)=0x3, 0x4) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)={0x0, 0x0}, 0x8) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r7, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x12, &(0x7f0000000040), 0x4) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex, 0xffffffffffffffff, 0x33, 0x0, 0x0, @prog_id=r6}, 0x20) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r9, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084060004000000000001"], 0x0, 0x42}, 0x20) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 10.153700149s ago: executing program 2 (id=1160): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000330000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x4c, &(0x7f0000000100)=0x58f, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000340)=0x8) r4 = socket(0x2c, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=@newtclass={0x4a8, 0x28, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0x3, 0xe}, {0x10, 0x10}}, [@tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_FSC={0x10}]}}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_htb={{0x8}, {0x8, 0x2, [@TCA_HTB_OFFLOAD={0x4}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}]}}, @tclass_kind_options=@c_htb={{0x8}, {0x408, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x3, 0x7, 0x0, 0xffffa99c, 0x4, 0x1f, 0x50, 0x0, 0x4, 0x7, 0x7, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0xfff, 0x9, 0x0, 0x1000, 0x1ff, 0x0, 0x101, 0x6, 0x0, 0x6, 0x7, 0x3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x6, 0x0, 0x0, 0x2, 0x5, 0x2, 0x7, 0x200, 0x0, 0x8, 0x45, 0x0, 0x0, 0x7, 0x1, 0x5, 0x3, 0x4, 0xfffff7c3, 0x7fff, 0x0, 0x1b1, 0x6, 0x0, 0x0, 0x0, 0x3, 0xff, 0xa81, 0x5, 0x53, 0x1, 0x1, 0x8, 0x9, 0x7, 0x3, 0x3ff, 0x1, 0x1, 0x5, 0xfffffff9, 0x8, 0x4, 0x0, 0x9, 0xfffeffff, 0x7ff, 0x0, 0x0, 0x0, 0x200, 0x0, 0xfffff001, 0xb4, 0x0, 0x0, 0x2fb5, 0x3, 0x0, 0x7, 0x9, 0x1ff, 0xffff866c, 0x0, 0x3, 0x1e85, 0xff, 0x80, 0x8, 0x9, 0x9, 0x9, 0x80, 0x3ff, 0x20, 0x81, 0xffffffff, 0x4, 0x80, 0x3425, 0xfff, 0x1f, 0x0, 0x6, 0x800, 0x2, 0xffffffff, 0x80000001, 0xfff, 0x9, 0x1, 0x4, 0x6, 0x4, 0x1, 0x101, 0x80, 0x7, 0x9, 0x3dc, 0x80000000, 0x81, 0x9a1c, 0xe638, 0xa6, 0x1f, 0xffff, 0x0, 0x7ffffffd, 0x3, 0x80000000, 0x7, 0x8000, 0x627, 0x4, 0x9, 0xffff7fff, 0x1ff, 0x0, 0x8000, 0xf1da, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffff000, 0x1, 0x100, 0x1f, 0x7, 0x6, 0xffff, 0x7, 0x9, 0x8, 0x8000, 0x6, 0xfff, 0x0, 0x6, 0x0, 0x0, 0x40, 0x3f, 0x1, 0x3, 0x9, 0x3ff, 0x7, 0x9, 0x7ff, 0x1, 0x3f, 0x5, 0x542b, 0x5, 0x7fffffff, 0x1ff, 0x3, 0x77bb, 0x80000000, 0x6, 0x401, 0x4, 0x1ff, 0x5, 0x22, 0xca, 0x4, 0x0, 0x0, 0x9, 0x6, 0xbd27, 0xc8c1b24b, 0xfff, 0x8, 0x0, 0x7, 0x100, 0x87, 0x6, 0x1000, 0x5, 0xe, 0x0, 0x3, 0xda25, 0x3fa6, 0x401, 0x0, 0x0, 0xde83, 0x200, 0x0, 0x4004, 0xfffffffb, 0x8, 0x80, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x4, 0x2, 0x80000001, 0x7f, 0x0, 0xfffffff8, 0x0, 0x0, 0xfffffeff, 0x3f, 0x10, 0x1, 0x8]}]}}, @tclass_kind_options=@c_skbprio={0xc}, @TCA_RATE={0x6, 0x5, {0x40}}]}, 0x4a8}, 0x1, 0x0, 0x0, 0x400404d}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x13) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c0016800800010007"], 0x38}}, 0x0) 10.066969962s ago: executing program 4 (id=1161): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="f40000000000000079116c000000000006000000000000e389081e6a6349009500"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r2, 0x0, 0x78) vmsplice(r2, &(0x7f0000000480)=[{&(0x7f0000000280)="18", 0x1}], 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x35}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300058651000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b00000000000500100005"], 0x30}}, 0x0) 10.066208279s ago: executing program 1 (id=1162): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000740)=r1, 0x4) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket(0x0, 0x0, 0x0) r4 = socket$packet(0x11, 0x0, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r5 = socket(0x11, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f0000000080), 0x4) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x8048000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r6}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000009c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffa, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x94e}]}]}]}}]}, 0xa4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 10.038713774s ago: executing program 0 (id=1163): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000002c0)="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", 0x13f}], 0x1}}], 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09003200030030000000600000000b002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022eb"], 0xfdef) 9.390160886s ago: executing program 1 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0xfff, 0x100000, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000018500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000027112190000000000951d0007000000006ab92d8dcb607a25d27f5a4c5baa2ba5d50b5a7f2cd17c04581b69ab8900e9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xf, 0x7, &(0x7f0000000380)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x51}}]}, &(0x7f0000000180)='syzkaller\x00'}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x5c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}, @TCA_RATE={0x6}]}, 0x5c}}, 0x0) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x118}, {&(0x7f00000007c0)=""/154, 0x504}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x34000, &(0x7f0000003700)={0x77359400}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000e6fd3a15e90602a300000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, r6, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x40030000000000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x0, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) socket$inet6_udplite(0xa, 0x2, 0x88) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 7.334046279s ago: executing program 4 (id=1165): socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x3, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) socket(0x200000000000011, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x18, 0x0, 0x3, 0x5, 0x0, 0x0, {}, [@generic="92"]}, 0x18}}, 0x0) unshare(0x2c060000) unshare(0x24020400) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfece) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000100039040000001b2ebaf8a9114d5b00", @ANYRES32=r5, @ANYBLOB="00000000000000001800128008000100677265000c00028008000100", @ANYRES32=r5], 0x38}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={@local, 0x0, r5}) listen(r2, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) connect$unix(r7, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0xffff) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) 7.333464155s ago: executing program 3 (id=1166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x33fe0, 0x0, 0x9, 0x101, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x70}}, 0x0) 176.808318ms ago: executing program 2 (id=1167): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x201}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 175.782856ms ago: executing program 3 (id=1168): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 27.026694ms ago: executing program 2 (id=1169): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000c00)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2}, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x100006, 0x9}, 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r1, &(0x7f0000003780)=""/4096, 0x1000) r3 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20000044) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 3 (id=1170): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070200000400000000000000080009000d090000", 0x24) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x101, 0xffc, 0x7}, 0x48) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="b6", 0x1}], 0x1}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000001880)="0245bf56", 0x4, 0x0, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @local}, 0x14) r3 = socket$nl_crypto(0x10, 0x3, 0x15) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x360, 0x11, 0x148, 0x360, 0x10, 0x430, 0x2a8, 0x2a8, 0x430, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x1be6, 0x80}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0, 0x0, {0x0, 0x2000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x528) bpf$LINK_DETACH(0x22, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000040000000850000207b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0x9d, &(0x7f0000000280)=""/157}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0x8d, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) r6 = socket$rds(0x15, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r6, &(0x7f0000000080)={0x10000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_crypto(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)=ANY=[@ANYBLOB="100000001400017d"], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b708000000005a027b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000a9dd1b3000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, &(0x7f0000000100)=ANY=[], 0x9) socket$can_j1939(0x1d, 0x2, 0x7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 57.631548][ T5081] cgroup: Unknown subsys name 'net' [ 57.792811][ T5081] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.151378][ T5081] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.417799][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.426000][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.442340][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.449973][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.468102][ T5105] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.476665][ T5105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.484641][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.497459][ T5105] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.501003][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.505860][ T5105] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.513276][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.527537][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.529729][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.535969][ T5106] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.543128][ T5110] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.550106][ T5105] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.556604][ T5110] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.563227][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.570619][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.578744][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.584766][ T5110] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 62.598674][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 62.605803][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.606934][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 62.619987][ T5110] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.622230][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.644401][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 62.656312][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.664048][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 62.673801][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.149809][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 63.245919][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 63.317875][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 63.352208][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 63.430973][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 63.503496][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.511487][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.520551][ T5095] bridge_slave_0: entered allmulticast mode [ 63.528578][ T5095] bridge_slave_0: entered promiscuous mode [ 63.537479][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.544607][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.552084][ T5091] bridge_slave_0: entered allmulticast mode [ 63.558928][ T5091] bridge_slave_0: entered promiscuous mode [ 63.567521][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.574624][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.582085][ T5091] bridge_slave_1: entered allmulticast mode [ 63.588940][ T5091] bridge_slave_1: entered promiscuous mode [ 63.644036][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.651267][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.658660][ T5095] bridge_slave_1: entered allmulticast mode [ 63.665563][ T5095] bridge_slave_1: entered promiscuous mode [ 63.711722][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.721202][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.729363][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.739874][ T5101] bridge_slave_0: entered allmulticast mode [ 63.746987][ T5101] bridge_slave_0: entered promiscuous mode [ 63.769474][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.784866][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.804762][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.812576][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.820285][ T5101] bridge_slave_1: entered allmulticast mode [ 63.827254][ T5101] bridge_slave_1: entered promiscuous mode [ 63.846687][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.929895][ T5095] team0: Port device team_slave_0 added [ 63.944039][ T5091] team0: Port device team_slave_0 added [ 63.952031][ T5091] team0: Port device team_slave_1 added [ 63.958769][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.966425][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.973636][ T5093] bridge_slave_0: entered allmulticast mode [ 63.980652][ T5093] bridge_slave_0: entered promiscuous mode [ 63.990575][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.002909][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.013481][ T5095] team0: Port device team_slave_1 added [ 64.040287][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.048175][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.055443][ T5093] bridge_slave_1: entered allmulticast mode [ 64.062210][ T5093] bridge_slave_1: entered promiscuous mode [ 64.150385][ T5101] team0: Port device team_slave_0 added [ 64.166957][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.173922][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.200096][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.212444][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.220723][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.228799][ T5090] bridge_slave_0: entered allmulticast mode [ 64.236089][ T5090] bridge_slave_0: entered promiscuous mode [ 64.250216][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.257515][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.283554][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.297335][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.311666][ T5101] team0: Port device team_slave_1 added [ 64.318141][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.328434][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.355216][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.378448][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.385899][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.393086][ T5090] bridge_slave_1: entered allmulticast mode [ 64.400370][ T5090] bridge_slave_1: entered promiscuous mode [ 64.408343][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.415813][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.441946][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.455427][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.539049][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.546684][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.572733][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.585593][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.592915][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.619430][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.643834][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.667204][ T5093] team0: Port device team_slave_0 added [ 64.679198][ T5091] hsr_slave_0: entered promiscuous mode [ 64.685929][ T5098] Bluetooth: hci0: command tx timeout [ 64.687421][ T5099] Bluetooth: hci2: command tx timeout [ 64.691576][ T5106] Bluetooth: hci1: command tx timeout [ 64.697103][ T5110] Bluetooth: hci4: command tx timeout [ 64.710219][ T5091] hsr_slave_1: entered promiscuous mode [ 64.733042][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.758325][ T5093] team0: Port device team_slave_1 added [ 64.765330][ T5106] Bluetooth: hci3: command tx timeout [ 64.794109][ T5095] hsr_slave_0: entered promiscuous mode [ 64.801445][ T5095] hsr_slave_1: entered promiscuous mode [ 64.809324][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.817232][ T5095] Cannot create hsr debugfs directory [ 64.859095][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.869119][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.899230][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.912091][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.919514][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.945995][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.978231][ T5090] team0: Port device team_slave_0 added [ 65.044115][ T5090] team0: Port device team_slave_1 added [ 65.085867][ T5101] hsr_slave_0: entered promiscuous mode [ 65.092060][ T5101] hsr_slave_1: entered promiscuous mode [ 65.099191][ T5101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.106882][ T5101] Cannot create hsr debugfs directory [ 65.127447][ T5093] hsr_slave_0: entered promiscuous mode [ 65.133906][ T5093] hsr_slave_1: entered promiscuous mode [ 65.140886][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.148773][ T5093] Cannot create hsr debugfs directory [ 65.192580][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.199710][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.226161][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.278310][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.285474][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.311851][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.558727][ T5090] hsr_slave_0: entered promiscuous mode [ 65.566843][ T5090] hsr_slave_1: entered promiscuous mode [ 65.573157][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.581223][ T5090] Cannot create hsr debugfs directory [ 65.668550][ T5091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.682922][ T5091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.721888][ T5091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.775280][ T5091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.797283][ T5095] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.813462][ T5095] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.849982][ T5095] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.862094][ T5095] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.947706][ T5093] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.979444][ T5093] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.989239][ T5093] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.024582][ T5093] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.086823][ T5101] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.098395][ T5101] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.110815][ T5101] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.122234][ T5101] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.271781][ T5090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.282993][ T5090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.307346][ T5090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.317916][ T5090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.354288][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.426889][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.447023][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.493689][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.500963][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.516005][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.572704][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.593850][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.600991][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.615068][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.622619][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.632844][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.640030][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.690756][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.719101][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.766504][ T5106] Bluetooth: hci2: command tx timeout [ 66.766575][ T5098] Bluetooth: hci1: command tx timeout [ 66.771933][ T5099] Bluetooth: hci4: command tx timeout [ 66.777479][ T5098] Bluetooth: hci0: command tx timeout [ 66.794614][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.801824][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.819397][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.846561][ T5098] Bluetooth: hci3: command tx timeout [ 66.847621][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.871755][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.879005][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.891282][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.898560][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.989066][ T5093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.999950][ T5093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.048498][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.055651][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.140663][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.193687][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.237268][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.322129][ T5148] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.329319][ T5148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.361884][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.369089][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.425796][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.474551][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.581064][ T5091] veth0_vlan: entered promiscuous mode [ 67.647606][ T5091] veth1_vlan: entered promiscuous mode [ 67.660748][ T5095] veth0_vlan: entered promiscuous mode [ 67.734476][ T5095] veth1_vlan: entered promiscuous mode [ 67.828303][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.854064][ T5091] veth0_macvtap: entered promiscuous mode [ 67.870310][ T5095] veth0_macvtap: entered promiscuous mode [ 67.893238][ T5091] veth1_macvtap: entered promiscuous mode [ 67.909156][ T5095] veth1_macvtap: entered promiscuous mode [ 67.974557][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.010307][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.023945][ T5101] veth0_vlan: entered promiscuous mode [ 68.056192][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.067313][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.082818][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.094392][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.105994][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.117585][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.129712][ T5095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.138849][ T5095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.148528][ T5095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.157623][ T5095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.184860][ T5101] veth1_vlan: entered promiscuous mode [ 68.211155][ T5091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.220678][ T5091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.230149][ T5091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.239839][ T5091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.271214][ T5093] veth0_vlan: entered promiscuous mode [ 68.333730][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.357478][ T5093] veth1_vlan: entered promiscuous mode [ 68.372481][ T5101] veth0_macvtap: entered promiscuous mode [ 68.390610][ T5101] veth1_macvtap: entered promiscuous mode [ 68.468924][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.474034][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.489927][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.490029][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.500326][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.519125][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.534714][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.586353][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.588631][ T5093] veth0_macvtap: entered promiscuous mode [ 68.594200][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.610893][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.628486][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.638552][ T5101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.654072][ T5101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.668996][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.692948][ T5093] veth1_macvtap: entered promiscuous mode [ 68.718560][ T5101] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.728246][ T5101] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.737516][ T5101] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.751264][ T5101] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.784113][ T5090] veth0_vlan: entered promiscuous mode [ 68.826585][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.834617][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.844759][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.846785][ T5098] Bluetooth: hci2: command tx timeout [ 68.855289][ T5106] Bluetooth: hci4: command tx timeout [ 68.858342][ T5110] Bluetooth: hci0: command tx timeout [ 68.872377][ T5099] Bluetooth: hci1: command tx timeout [ 68.878849][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.887479][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.900100][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.911005][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.921876][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.932189][ T5110] Bluetooth: hci3: command tx timeout [ 68.938437][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.948931][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.960451][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.001241][ T5090] veth1_vlan: entered promiscuous mode [ 69.017712][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.028898][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.039066][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.049632][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.059665][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.071143][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.085260][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.134253][ T5093] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.145746][ T5093] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.154488][ T5093] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.172479][ T5093] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.245941][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.253796][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.383180][ T2904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.400057][ T2904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.484894][ T5090] veth0_macvtap: entered promiscuous mode [ 69.512056][ T5180] netlink: 'syz.2.3': attribute type 11 has an invalid length. [ 69.515251][ T2887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.521846][ T5184] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.542970][ T5090] veth1_macvtap: entered promiscuous mode [ 69.587103][ T2887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.650780][ T2887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.660818][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.672236][ T2887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.682132][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.692473][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.703299][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.713226][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.723936][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.734032][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.744568][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.756516][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.805467][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.859808][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.881435][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.908529][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.908779][ T5194] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.923085][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.945645][ T5195] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 69.949314][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.963779][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.974570][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.990923][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.010009][ T5090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.040453][ T5090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.050704][ T5090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.061194][ T5090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.467721][ T5209] netlink: 'syz.2.11': attribute type 21 has an invalid length. [ 70.482149][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11'. [ 70.609581][ T5219] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16'. [ 70.626295][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.684906][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.834830][ T5225] Bluetooth: MGMT ver 1.22 [ 70.926922][ T5110] Bluetooth: hci0: command tx timeout [ 70.927204][ T5099] Bluetooth: hci1: command tx timeout [ 70.932388][ T5110] Bluetooth: hci4: command tx timeout [ 70.938080][ T5098] Bluetooth: hci2: command tx timeout [ 71.005328][ T5098] Bluetooth: hci3: command tx timeout [ 71.099297][ T5225] netlink: 248 bytes leftover after parsing attributes in process `syz.3.17'. [ 71.121650][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.134728][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.364416][ T5243] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 71.734175][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.745152][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.025588][ T5282] IPv6: NLM_F_REPLACE set, but no existing node found! [ 72.329967][ T5292] netlink: 248 bytes leftover after parsing attributes in process `syz.1.35'. [ 72.569663][ T5310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.39'. [ 72.631977][ T5305] Bluetooth: MGMT ver 1.22 [ 72.648580][ T5305] Bluetooth: hci3: invalid len left 7, exp >= 42 [ 72.667408][ T5316] netlink: 168 bytes leftover after parsing attributes in process `syz.3.43'. [ 72.673073][ T5305] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.715544][ T5316] netlink: 'syz.3.43': attribute type 2 has an invalid length. [ 72.726616][ T5316] netlink: 60 bytes leftover after parsing attributes in process `syz.3.43'. [ 72.921029][ T5316] pim6reg1: entered promiscuous mode [ 72.935790][ T5316] pim6reg1: entered allmulticast mode [ 73.148593][ T5334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.44'. [ 73.272856][ T5334] macvlan2: entered promiscuous mode [ 73.309391][ T5334] macvlan2: entered allmulticast mode [ 73.437142][ T5344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.51'. [ 73.459013][ T5344] netlink: 'syz.3.51': attribute type 18 has an invalid length. [ 73.525099][ T5344] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.534156][ T5344] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.541842][ T5343] netlink: 248 bytes leftover after parsing attributes in process `syz.0.52'. [ 73.543028][ T5344] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.560548][ T5344] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.654606][ T5344] vxlan0: entered promiscuous mode [ 73.773900][ T5356] warning: `syz.0.55' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.952287][ T5363] FAULT_INJECTION: forcing a failure. [ 73.952287][ T5363] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 73.979481][ T5363] CPU: 1 PID: 5363 Comm: syz.0.58 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 73.989416][ T5363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 73.999586][ T5363] Call Trace: [ 74.002878][ T5363] [ 74.005823][ T5363] dump_stack_lvl+0x241/0x360 [ 74.010533][ T5363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.015752][ T5363] ? __pfx__printk+0x10/0x10 [ 74.020369][ T5363] should_fail_ex+0x3b0/0x4e0 [ 74.025070][ T5363] prepare_alloc_pages+0x1da/0x5d0 [ 74.030206][ T5363] __alloc_pages_noprof+0x166/0x6c0 [ 74.035424][ T5363] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 74.041170][ T5363] ? __pfx_validate_chain+0x10/0x10 [ 74.046397][ T5363] alloc_pages_mpol_noprof+0x3e8/0x680 [ 74.051882][ T5363] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 74.057891][ T5363] vma_alloc_folio_noprof+0xf3/0x1f0 [ 74.063198][ T5363] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 74.069115][ T5363] ? __lock_acquire+0x1346/0x1fd0 [ 74.074155][ T5363] folio_prealloc+0x31/0x170 [ 74.078759][ T5363] handle_pte_fault+0x257b/0x7090 [ 74.083820][ T5363] ? __pfx_lock_acquire+0x10/0x10 [ 74.088862][ T5363] ? __pfx_handle_pte_fault+0x10/0x10 [ 74.094266][ T5363] ? do_raw_spin_lock+0x14f/0x370 [ 74.099330][ T5363] ? follow_page_pte+0x29a/0x1ee0 [ 74.104379][ T5363] ? follow_page_pte+0x83f/0x1ee0 [ 74.109420][ T5363] ? __pfx_lock_release+0x10/0x10 [ 74.114473][ T5363] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.119700][ T5363] handle_mm_fault+0x10df/0x1ba0 [ 74.124691][ T5363] ? __pfx_handle_mm_fault+0x10/0x10 [ 74.130103][ T5363] ? __pfx_find_vma+0x10/0x10 [ 74.134806][ T5363] ? vma_is_secretmem+0xd/0x50 [ 74.139588][ T5363] ? check_vma_flags+0x531/0x5a0 [ 74.144540][ T5363] __get_user_pages+0x6ec/0x16a0 [ 74.149515][ T5363] ? __pfx___get_user_pages+0x10/0x10 [ 74.154905][ T5363] ? __pfx_lock_acquire+0x10/0x10 [ 74.159948][ T5363] __gup_longterm_locked+0x1ff6/0x2a80 [ 74.165449][ T5363] ? __pfx___gup_longterm_locked+0x10/0x10 [ 74.171275][ T5363] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 74.177285][ T5363] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 74.183308][ T5363] gup_fast_fallback+0x2742/0x2b50 [ 74.184898][ T5367] netlink: 'syz.1.59': attribute type 2 has an invalid length. [ 74.188441][ T5363] ? __pfx_gup_fast_fallback+0x10/0x10 [ 74.188508][ T5363] ? __sys_getsockopt+0x271/0x330 [ 74.188533][ T5363] ? do_syscall_64+0xf3/0x230 [ 74.188553][ T5363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.188610][ T5363] ? is_valid_gup_args+0x124/0x200 [ 74.188630][ T5363] pin_user_pages_fast+0xcc/0x160 [ 74.188651][ T5363] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 74.188667][ T5363] ? rds_info_getsockopt+0x20c/0x600 [ 74.188691][ T5363] ? rds_info_getsockopt+0x20c/0x600 [ 74.188714][ T5363] ? __kmalloc_noprof+0x217/0x400 [ 74.188735][ T5363] rds_info_getsockopt+0x22e/0x600 [ 74.188759][ T5363] ? __might_fault+0xaa/0x120 [ 74.188778][ T5363] ? __pfx_lock_release+0x10/0x10 [ 74.188801][ T5363] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 74.188829][ T5363] ? __might_fault+0xc6/0x120 [ 74.188849][ T5363] ? rds_getsockopt+0x177/0x530 [ 74.188870][ T5363] ? __pfx_rds_getsockopt+0x10/0x10 [ 74.188892][ T5363] do_sock_getsockopt+0x373/0x850 [ 74.188924][ T5363] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 74.188949][ T5363] ? __fget_files+0x3f6/0x470 [ 74.188985][ T5363] __sys_getsockopt+0x271/0x330 [ 74.189013][ T5363] ? __pfx___sys_getsockopt+0x10/0x10 [ 74.189038][ T5363] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.189059][ T5363] ? do_syscall_64+0x100/0x230 [ 74.189083][ T5363] __x64_sys_getsockopt+0xb5/0xd0 [ 74.189111][ T5363] do_syscall_64+0xf3/0x230 [ 74.189133][ T5363] ? clear_bhb_loop+0x35/0x90 [ 74.189157][ T5363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.189186][ T5363] RIP: 0033:0x7f952c975bd9 [ 74.189205][ T5363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.189226][ T5363] RSP: 002b:00007f952c3ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 74.189248][ T5363] RAX: ffffffffffffffda RBX: 00007f952cb03f60 RCX: 00007f952c975bd9 [ 74.189263][ T5363] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000003 [ 74.189276][ T5363] RBP: 00007f952c3ff0a0 R08: 0000000020000000 R09: 0000000000000000 [ 74.189289][ T5363] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000002 [ 74.189301][ T5363] R13: 000000000000000b R14: 00007f952cb03f60 R15: 00007ffd12d47cf8 [ 74.189331][ T5363] [ 74.726591][ T5381] netlink: 'syz.1.65': attribute type 10 has an invalid length. [ 74.734377][ T5381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.764695][ T5381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.821690][ T5381] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 75.066588][ T5392] FAULT_INJECTION: forcing a failure. [ 75.066588][ T5392] name failslab, interval 1, probability 0, space 0, times 1 [ 75.121695][ T5392] CPU: 0 PID: 5392 Comm: syz.1.69 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 75.131720][ T5392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 75.141798][ T5392] Call Trace: [ 75.145104][ T5392] [ 75.148048][ T5392] dump_stack_lvl+0x241/0x360 [ 75.152765][ T5392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.157996][ T5392] ? __pfx__printk+0x10/0x10 [ 75.159606][ T5395] netlink: 'syz.0.70': attribute type 9 has an invalid length. [ 75.162586][ T5392] ? rcu_is_watching+0x15/0xb0 [ 75.162612][ T5392] ? trace_contention_end+0x3c/0x120 [ 75.180332][ T5392] should_fail_ex+0x3b0/0x4e0 [ 75.185030][ T5392] ? __alloc_skb+0x1c3/0x440 [ 75.189638][ T5392] should_failslab+0x9/0x20 [ 75.194157][ T5392] kmem_cache_alloc_node_noprof+0x71/0x320 [ 75.199984][ T5392] __alloc_skb+0x1c3/0x440 [ 75.204438][ T5392] ? __pfx___alloc_skb+0x10/0x10 [ 75.206455][ T5395] netlink: 'syz.0.70': attribute type 6 has an invalid length. [ 75.209382][ T5392] ? netlink_ack_tlv_len+0x6e/0x200 [ 75.222206][ T5392] netlink_ack+0x13f/0xa30 [ 75.226645][ T5392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 75.232178][ T5392] netlink_rcv_skb+0x262/0x430 [ 75.236962][ T5392] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 75.242440][ T5392] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.247753][ T5392] ? netlink_deliver_tap+0x2e/0x1b0 [ 75.252978][ T5392] netlink_unicast+0x7f0/0x990 [ 75.257774][ T5392] ? __pfx_netlink_unicast+0x10/0x10 [ 75.263074][ T5392] ? __virt_addr_valid+0x183/0x530 [ 75.268209][ T5392] ? __check_object_size+0x49c/0x900 [ 75.273505][ T5392] ? bpf_lsm_netlink_send+0x9/0x10 [ 75.278643][ T5392] netlink_sendmsg+0x8e4/0xcb0 [ 75.283440][ T5392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.288746][ T5392] ? __import_iovec+0x536/0x820 [ 75.293609][ T5392] ? aa_sock_msg_perm+0x91/0x160 [ 75.298563][ T5392] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 75.303952][ T5392] ? security_socket_sendmsg+0x87/0xb0 [ 75.309434][ T5392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.314736][ T5392] __sock_sendmsg+0x221/0x270 [ 75.319435][ T5392] ____sys_sendmsg+0x525/0x7d0 [ 75.324227][ T5392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.329717][ T5392] __sys_sendmsg+0x2b0/0x3a0 [ 75.334327][ T5392] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.339449][ T5392] ? vfs_write+0x7c4/0xc90 [ 75.343919][ T5392] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 75.350266][ T5392] ? do_syscall_64+0x100/0x230 [ 75.355139][ T5392] ? do_syscall_64+0xb6/0x230 [ 75.359834][ T5392] do_syscall_64+0xf3/0x230 [ 75.364360][ T5392] ? clear_bhb_loop+0x35/0x90 [ 75.369409][ T5392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.375318][ T5392] RIP: 0033:0x7f6f74b75bd9 [ 75.379743][ T5392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.399370][ T5392] RSP: 002b:00007f6f758f7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.407804][ T5392] RAX: ffffffffffffffda RBX: 00007f6f74d03f60 RCX: 00007f6f74b75bd9 [ 75.415885][ T5392] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 75.423887][ T5392] RBP: 00007f6f758f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 75.431876][ T5392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.439865][ T5392] R13: 000000000000000b R14: 00007f6f74d03f60 R15: 00007fffe8dce948 [ 75.447871][ T5392] [ 75.680225][ T5408] __nla_validate_parse: 3 callbacks suppressed [ 75.680245][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.77'. [ 75.836694][ T5417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'. [ 75.855335][ T5417] netlink: 'syz.2.79': attribute type 18 has an invalid length. [ 75.892490][ T5417] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.901455][ T5417] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.910735][ T5417] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.919821][ T5417] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.963501][ T5417] vxlan0: entered promiscuous mode [ 76.060417][ T5427] delete_channel: no stack [ 76.156125][ T5431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'. [ 76.468039][ T5441] bridge0: entered promiscuous mode [ 76.494542][ T5441] bridge0: left promiscuous mode [ 76.553052][ T5446] Bluetooth: hci3: invalid len left 7, exp >= 16 [ 77.295416][ T5466] netlink: 'syz.1.95': attribute type 11 has an invalid length. [ 77.317735][ T5478] delete_channel: no stack [ 77.429445][ T5481] netlink: 168 bytes leftover after parsing attributes in process `syz.2.100'. [ 77.435555][ T5484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.98'. [ 77.456948][ T5481] netlink: 'syz.2.100': attribute type 2 has an invalid length. [ 77.502124][ T5481] netlink: 60 bytes leftover after parsing attributes in process `syz.2.100'. [ 77.725488][ T5481] pim6reg1: entered promiscuous mode [ 77.732781][ T5481] pim6reg1: entered allmulticast mode [ 78.072207][ T5501] dccp_invalid_packet: P.Data Offset(0) too small [ 78.455868][ T5515] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.110'. [ 78.492710][ T5516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 78.552515][ T5519] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 78.838948][ T5528] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 79.734844][ T5559] Zero length message leads to an empty skb [ 79.772614][ T5560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.125'. [ 80.019055][ T5572] bridge0: entered promiscuous mode [ 80.072766][ T5572] bridge0: left promiscuous mode [ 80.401631][ T5589] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 80.788771][ T5605] netlink: 'syz.0.141': attribute type 21 has an invalid length. [ 80.817553][ T5605] netlink: 132 bytes leftover after parsing attributes in process `syz.0.141'. [ 80.866016][ T5605] netlink: 'syz.0.141': attribute type 1 has an invalid length. [ 80.880863][ T5605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.141'. [ 81.677312][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.691287][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.701415][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.737059][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.744889][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.753062][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.802331][ T5636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 81.944529][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.973088][ T783] cfg80211: failed to load regulatory.db [ 82.157651][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.395963][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.554211][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.669592][ T5665] FAULT_INJECTION: forcing a failure. [ 82.669592][ T5665] name failslab, interval 1, probability 0, space 0, times 0 [ 82.697133][ T5665] CPU: 0 PID: 5665 Comm: syz.3.158 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 82.707161][ T5665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 82.717344][ T5665] Call Trace: [ 82.720654][ T5665] [ 82.723598][ T5665] dump_stack_lvl+0x241/0x360 [ 82.728304][ T5665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.733528][ T5665] ? __pfx__printk+0x10/0x10 [ 82.738140][ T5665] ? netlink_insert+0x10b7/0x14b0 [ 82.743258][ T5665] should_fail_ex+0x3b0/0x4e0 [ 82.747934][ T5665] ? __alloc_skb+0x1c3/0x440 [ 82.752648][ T5665] should_failslab+0x9/0x20 [ 82.757165][ T5665] kmem_cache_alloc_node_noprof+0x71/0x320 [ 82.762986][ T5665] __alloc_skb+0x1c3/0x440 [ 82.767428][ T5665] ? __pfx___alloc_skb+0x10/0x10 [ 82.772392][ T5665] ? netlink_autobind+0xd6/0x2f0 [ 82.777356][ T5665] ? netlink_autobind+0x2b0/0x2f0 [ 82.782398][ T5665] netlink_sendmsg+0x638/0xcb0 [ 82.787168][ T5665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.792453][ T5665] ? __import_iovec+0x536/0x820 [ 82.797313][ T5665] ? aa_sock_msg_perm+0x91/0x160 [ 82.802243][ T5665] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 82.807644][ T5665] ? security_socket_sendmsg+0x87/0xb0 [ 82.813113][ T5665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 82.818397][ T5665] __sock_sendmsg+0x221/0x270 [ 82.823074][ T5665] ____sys_sendmsg+0x525/0x7d0 [ 82.827841][ T5665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.833133][ T5665] __sys_sendmsg+0x2b0/0x3a0 [ 82.837721][ T5665] ? __pfx___sys_sendmsg+0x10/0x10 [ 82.842824][ T5665] ? vfs_write+0x7c4/0xc90 [ 82.847259][ T5665] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.853574][ T5665] ? do_syscall_64+0x100/0x230 [ 82.858334][ T5665] ? do_syscall_64+0xb6/0x230 [ 82.863007][ T5665] do_syscall_64+0xf3/0x230 [ 82.867530][ T5665] ? clear_bhb_loop+0x35/0x90 [ 82.872216][ T5665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.878109][ T5665] RIP: 0033:0x7fe57e775bd9 [ 82.882521][ T5665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.902208][ T5665] RSP: 002b:00007fe57f531048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.910658][ T5665] RAX: ffffffffffffffda RBX: 00007fe57e903f60 RCX: 00007fe57e775bd9 [ 82.918671][ T5665] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000004 [ 82.926678][ T5665] RBP: 00007fe57f5310a0 R08: 0000000000000000 R09: 0000000000000000 [ 82.934677][ T5665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.942682][ T5665] R13: 000000000000000b R14: 00007fe57e903f60 R15: 00007fff83e07ec8 [ 82.950823][ T5665] [ 82.951287][ T5632] chnl_net:caif_netlink_parms(): no params data found [ 83.470742][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.489019][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.516968][ T5632] bridge_slave_0: entered allmulticast mode [ 83.524101][ T5632] bridge_slave_0: entered promiscuous mode [ 83.560733][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.579103][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.595431][ T5632] bridge_slave_1: entered allmulticast mode [ 83.610540][ T5697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 83.612739][ T5632] bridge_slave_1: entered promiscuous mode [ 83.663560][ T35] bridge_slave_1: left allmulticast mode [ 83.676837][ T35] bridge_slave_1: left promiscuous mode [ 83.686299][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.759705][ T35] bridge_slave_0: left allmulticast mode [ 83.766452][ T35] bridge_slave_0: left promiscuous mode [ 83.772452][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.805670][ T5099] Bluetooth: hci2: command tx timeout [ 84.132268][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.146653][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.157624][ T35] bond0 (unregistering): Released all slaves [ 84.171031][ T5698] netlink: 47 bytes leftover after parsing attributes in process `syz.0.166'. [ 84.351482][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.382917][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.582963][ T5720] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 84.607795][ T5720] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.173'. [ 84.643900][ T5720] netlink: 'syz.1.173': attribute type 1 has an invalid length. [ 84.717227][ T5734] dccp_invalid_packet: P.Data Offset(0) too small [ 84.811775][ T5632] team0: Port device team_slave_0 added [ 84.819496][ T5741] dccp_invalid_packet: pskb_may_pull failed [ 84.845453][ T5731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.177'. [ 84.921608][ T5632] team0: Port device team_slave_1 added [ 85.268319][ T5764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.182'. [ 85.456037][ T5772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.182'. [ 85.513361][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.556204][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.619379][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.682792][ T5768] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 85.735474][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.742464][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.828524][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.885267][ T5099] Bluetooth: hci2: command 0x041b tx timeout [ 85.925103][ T35] hsr_slave_0: left promiscuous mode [ 85.956300][ T35] hsr_slave_1: left promiscuous mode [ 85.971336][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.979051][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.008479][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.027100][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.054231][ T35] veth1_macvtap: left promiscuous mode [ 86.060763][ T35] veth0_macvtap: left promiscuous mode [ 86.073274][ T35] veth1_vlan: left promiscuous mode [ 86.078763][ T35] veth0_vlan: left promiscuous mode [ 86.492748][ T35] team0 (unregistering): Port device team_slave_1 removed [ 86.522959][ T35] team0 (unregistering): Port device team_slave_0 removed [ 86.846614][ T5632] hsr_slave_0: entered promiscuous mode [ 86.867984][ T5632] hsr_slave_1: entered promiscuous mode [ 86.890615][ T5632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.902722][ T5632] Cannot create hsr debugfs directory [ 87.233875][ T5806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 87.247349][ T5811] dccp_invalid_packet: P.Data Offset(0) too small [ 87.796168][ T5834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.199'. [ 87.965599][ T5098] Bluetooth: hci2: command 0x041b tx timeout [ 88.168588][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.202'. [ 88.493433][ T5860] dvmrp2: entered allmulticast mode [ 88.536898][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.207'. [ 88.568157][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.592534][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.627065][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.670151][ T5869] netlink: 24 bytes leftover after parsing attributes in process `syz.3.210'. [ 88.683168][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.758637][ T5871] can: request_module (can-proto-0) failed. [ 89.083723][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.142421][ T5893] netlink: 256 bytes leftover after parsing attributes in process `syz.0.217'. [ 89.188623][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.254563][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.261776][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.292487][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.299701][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.581408][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 89.742904][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 89.787279][ T5929] dccp_invalid_packet: P.Data Offset(0) too small [ 90.033135][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.045527][ T5098] Bluetooth: hci2: command 0x041b tx timeout [ 90.092826][ T5945] dccp_invalid_packet: P.Data Offset(0) too small [ 90.223859][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 90.259094][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 90.312475][ T5952] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 90.507124][ T5963] dummy0: entered promiscuous mode [ 90.542806][ T5963] batman_adv: batadv0: Adding interface: macvtap1 [ 90.573243][ T5963] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.624090][ T5963] batman_adv: batadv0: Interface activated: macvtap1 [ 90.720315][ T5979] netlink: 'syz.0.239': attribute type 7 has an invalid length. [ 90.756694][ T5979] netlink: 'syz.0.239': attribute type 8 has an invalid length. [ 90.875117][ T5143] IPVS: starting estimator thread 0... [ 90.975481][ T5987] IPVS: using max 22 ests per chain, 52800 per kthread [ 91.010079][ T5632] veth0_vlan: entered promiscuous mode [ 91.105939][ T5632] veth1_vlan: entered promiscuous mode [ 91.181493][ T6002] netlink: 'syz.3.241': attribute type 10 has an invalid length. [ 91.287852][ T6002] team0: Device dummy0 failed to register rx_handler [ 91.402665][ T6005] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 91.447923][ T6008] batadv0: entered promiscuous mode [ 91.530114][ T5632] veth0_macvtap: entered promiscuous mode [ 91.576792][ T5632] veth1_macvtap: entered promiscuous mode [ 91.659706][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.705237][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.753705][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.816640][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.854641][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.873978][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.896595][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.959059][ T6050] netlink: 'syz.1.254': attribute type 3 has an invalid length. [ 91.979331][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.979345][ T6050] netlink: 'syz.1.254': attribute type 1 has an invalid length. [ 92.035086][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.085250][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.127400][ T5098] Bluetooth: hci2: command 0x041b tx timeout [ 92.137216][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.167837][ T6054] can: request_module (can-proto-0) failed. [ 92.174041][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.195112][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.213167][ T5632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.225580][ T5632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.238758][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.260596][ T5632] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.334487][ T5632] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.372894][ T5632] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.400964][ T5632] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.481009][ T6077] __nla_validate_parse: 5 callbacks suppressed [ 92.481028][ T6077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 92.525732][ T6077] netlink: 'syz.0.259': attribute type 18 has an invalid length. [ 92.576709][ T6077] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.585889][ T6077] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.594618][ T6077] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.603492][ T6077] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.623993][ T6077] vxlan0: entered promiscuous mode [ 92.639904][ T6083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.262'. [ 92.679301][ T6083] macvlan2: entered allmulticast mode [ 92.686452][ T6083] team_slave_0: entered promiscuous mode [ 92.692451][ T6083] team_slave_1: entered promiscuous mode [ 92.709073][ T6083] team0: entered allmulticast mode [ 92.714699][ T6083] team_slave_0: entered allmulticast mode [ 92.724115][ T6083] team_slave_1: entered allmulticast mode [ 92.738677][ T6083] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.749448][ T6083] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 92.843671][ T2904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.855338][ T6090] dccp_invalid_packet: P.Data Offset(0) too small [ 92.882993][ T2904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.975889][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.986998][ T6092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 92.998699][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.029875][ T6092] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 93.402626][ T6122] dccp_invalid_packet: P.Data Offset(0) too small [ 93.457967][ T6123] netlink: 'syz.4.275': attribute type 2 has an invalid length. [ 93.491138][ T6123] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.275'. [ 93.864217][ T6141] ipvlan2: entered promiscuous mode [ 93.892997][ T6141] ipvlan2: entered allmulticast mode [ 93.904342][ T6141] syz_tun: entered allmulticast mode [ 93.989719][ T6147] netlink: 'syz.0.283': attribute type 9 has an invalid length. [ 94.098992][ T6149] gretap0: entered promiscuous mode [ 94.119995][ T6149] gretap0: left promiscuous mode [ 94.220526][ T6162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.287'. [ 94.454045][ T6179] netlink: 64 bytes leftover after parsing attributes in process `syz.2.291'. [ 94.487286][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 94.510137][ T6175] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 94.560126][ T6171] netlink: 'syz.2.291': attribute type 10 has an invalid length. [ 94.639325][ T6171] team0: Device netdevsim0 failed to register rx_handler [ 95.118695][ T6207] team0: entered promiscuous mode [ 95.139289][ T6207] team_slave_0: entered promiscuous mode [ 95.163518][ T6207] team_slave_1: entered promiscuous mode [ 95.216556][ T6205] team0: left promiscuous mode [ 95.236336][ T6205] team_slave_0: left promiscuous mode [ 95.242390][ T6205] team_slave_1: left promiscuous mode [ 95.637946][ T6222] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 96.437040][ T6274] Cannot find add_set index 0 as target [ 96.572408][ T6283] netlink: 92 bytes leftover after parsing attributes in process `syz.1.330'. [ 96.941307][ T6307] netlink: 56 bytes leftover after parsing attributes in process `syz.4.339'. [ 96.994120][ T6307] tipc: Started in network mode [ 97.024807][ T6307] tipc: Node identity 20010000000000000000000000000001, cluster identity 4711 [ 97.062840][ T6307] tipc: Enabling of bearer rejected, failed to enable media [ 97.413591][ T6334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.343'. [ 97.821852][ T6350] netlink: 20 bytes leftover after parsing attributes in process `syz.3.348'. [ 97.958965][ T6367] netlink: 32 bytes leftover after parsing attributes in process `syz.3.348'. [ 98.660708][ T6408] x_tables: duplicate underflow at hook 3 [ 98.868144][ T6413] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 99.243258][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.372'. [ 99.293015][ T6433] netlink: 168 bytes leftover after parsing attributes in process `syz.0.373'. [ 99.355887][ T6432] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.398387][ T6441] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 99.499841][ T6432] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.528070][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.0.378'. [ 99.672391][ T6432] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.729838][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 99.817810][ T6432] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 99.881845][ T6460] netlink: 'syz.1.383': attribute type 4 has an invalid length. [ 99.903464][ T6460] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.383'. [ 99.922974][ T6432] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.946967][ T6460] netlink: 18430 bytes leftover after parsing attributes in process `syz.1.383'. [ 100.124550][ T6432] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.156727][ T6432] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.177121][ T6432] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.198541][ T6432] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.259496][ T6482] x_tables: duplicate underflow at hook 3 [ 100.373753][ T6491] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 100.407875][ T6492] netlink: 16 bytes leftover after parsing attributes in process `syz.3.389'. [ 100.767133][ T6498] netlink: 'syz.2.392': attribute type 3 has an invalid length. [ 100.782319][ T6498] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.392'. [ 101.283069][ T6509] netlink: 'syz.3.396': attribute type 4 has an invalid length. [ 101.311248][ T6510] netlink: 'syz.2.397': attribute type 8 has an invalid length. [ 101.865879][ T6541] bridge_slave_1: left allmulticast mode [ 101.882674][ T6541] bridge_slave_1: left promiscuous mode [ 101.923800][ T6541] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.085382][ T6552] xt_hashlimit: max too large, truncated to 1048576 [ 102.406418][ T6575] trusted_key: syz.2.420 sent an empty control message without MSG_MORE. [ 102.678852][ T6590] bridge_slave_1: left allmulticast mode [ 102.692902][ T6590] bridge_slave_1: left promiscuous mode [ 102.701064][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.711457][ T6592] nbd: device at index 4 is going down [ 102.844111][ T6587] netlink: 'syz.4.424': attribute type 29 has an invalid length. [ 102.875213][ T6587] netlink: 'syz.4.424': attribute type 29 has an invalid length. [ 103.022965][ T6608] netlink: 'syz.3.432': attribute type 4 has an invalid length. [ 103.031452][ T6609] __nla_validate_parse: 5 callbacks suppressed [ 103.031469][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.4.431'. [ 103.052299][ T6608] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.432'. [ 103.082680][ T6609] netlink: 72 bytes leftover after parsing attributes in process `syz.4.431'. [ 103.100682][ T6609] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 103.123832][ T6608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.432'. [ 103.152384][ T6613] vlan2: entered promiscuous mode [ 103.167923][ T6613] batadv0: entered promiscuous mode [ 103.197013][ T6617] FAULT_INJECTION: forcing a failure. [ 103.197013][ T6617] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 103.212223][ T6613] team0: Port device vlan2 added [ 103.222825][ T6617] CPU: 1 PID: 6617 Comm: syz.4.435 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 103.232885][ T6617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 103.243028][ T6617] Call Trace: [ 103.246316][ T6617] [ 103.249247][ T6617] dump_stack_lvl+0x241/0x360 [ 103.253931][ T6617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.259211][ T6617] ? __pfx__printk+0x10/0x10 [ 103.263807][ T6617] ? __pfx_lock_release+0x10/0x10 [ 103.268831][ T6617] should_fail_ex+0x3b0/0x4e0 [ 103.273511][ T6617] _copy_from_user+0x2f/0xe0 [ 103.278099][ T6617] generic_map_update_batch+0x567/0x900 [ 103.283655][ T6617] ? __pfx_generic_map_update_batch+0x10/0x10 [ 103.289726][ T6617] ? __pfx_generic_map_update_batch+0x10/0x10 [ 103.295797][ T6617] bpf_map_do_batch+0x3e0/0x690 [ 103.300646][ T6617] __sys_bpf+0x377/0x810 [ 103.304886][ T6617] ? __pfx___sys_bpf+0x10/0x10 [ 103.309660][ T6617] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 103.315659][ T6617] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 103.321978][ T6617] ? do_syscall_64+0x100/0x230 [ 103.326741][ T6617] __x64_sys_bpf+0x7c/0x90 [ 103.331153][ T6617] do_syscall_64+0xf3/0x230 [ 103.335653][ T6617] ? clear_bhb_loop+0x35/0x90 [ 103.340327][ T6617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.346212][ T6617] RIP: 0033:0x7f7e9b175bd9 [ 103.350619][ T6617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.370223][ T6617] RSP: 002b:00007f7e9beb9048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 103.378679][ T6617] RAX: ffffffffffffffda RBX: 00007f7e9b303f60 RCX: 00007f7e9b175bd9 [ 103.386665][ T6617] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 103.394657][ T6617] RBP: 00007f7e9beb90a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.402622][ T6617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 103.410586][ T6617] R13: 000000000000000b R14: 00007f7e9b303f60 R15: 00007fff263b9a98 [ 103.418651][ T6617] [ 103.650031][ T6626] netlink: 'syz.4.437': attribute type 11 has an invalid length. [ 103.748943][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 103.786993][ T6634] netlink: 76 bytes leftover after parsing attributes in process `syz.1.442'. [ 103.796255][ T6634] netlink: 5 bytes leftover after parsing attributes in process `syz.1.442'. [ 104.013549][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 104.447832][ T6666] validate_nla: 1 callbacks suppressed [ 104.447850][ T6666] netlink: 'syz.1.451': attribute type 3 has an invalid length. [ 104.473543][ T6667] netlink: 60 bytes leftover after parsing attributes in process `syz.4.453'. [ 104.483079][ T6666] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.451'. [ 104.711458][ T6684] netlink: 'syz.4.457': attribute type 4 has an invalid length. [ 104.822965][ T6689] xt_hashlimit: max too large, truncated to 1048576 [ 105.042745][ T6706] FAULT_INJECTION: forcing a failure. [ 105.042745][ T6706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.056630][ T6706] CPU: 0 PID: 6706 Comm: syz.2.464 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 105.066641][ T6706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 105.076696][ T6706] Call Trace: [ 105.079964][ T6706] [ 105.082883][ T6706] dump_stack_lvl+0x241/0x360 [ 105.087643][ T6706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.092839][ T6706] ? __pfx__printk+0x10/0x10 [ 105.097420][ T6706] ? __pfx_lock_release+0x10/0x10 [ 105.102458][ T6706] should_fail_ex+0x3b0/0x4e0 [ 105.107168][ T6706] _copy_from_user+0x2f/0xe0 [ 105.111782][ T6706] copy_msghdr_from_user+0xae/0x680 [ 105.117098][ T6706] ? timespec64_add_safe+0x1be/0x220 [ 105.122412][ T6706] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 105.128261][ T6706] do_recvmmsg+0x40f/0xae0 [ 105.132693][ T6706] ? mark_lock+0x9a/0x350 [ 105.137053][ T6706] ? __pfx_do_recvmmsg+0x10/0x10 [ 105.142029][ T6706] ? __pfx___might_resched+0x10/0x10 [ 105.147310][ T6706] ? __might_fault+0xaa/0x120 [ 105.152021][ T6706] ? __pfx_lock_release+0x10/0x10 [ 105.157035][ T6706] ? vfs_write+0x7c4/0xc90 [ 105.161458][ T6706] ? get_timespec64+0x19c/0x280 [ 105.166400][ T6706] __x64_sys_recvmmsg+0x1b8/0x250 [ 105.171419][ T6706] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 105.176956][ T6706] ? do_syscall_64+0x100/0x230 [ 105.181713][ T6706] ? do_syscall_64+0xb6/0x230 [ 105.186384][ T6706] do_syscall_64+0xf3/0x230 [ 105.190886][ T6706] ? clear_bhb_loop+0x35/0x90 [ 105.195568][ T6706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.201454][ T6706] RIP: 0033:0x7fe8edf75bd9 [ 105.205862][ T6706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.225826][ T6706] RSP: 002b:00007fe8eed00048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 105.234320][ T6706] RAX: ffffffffffffffda RBX: 00007fe8ee103f60 RCX: 00007fe8edf75bd9 [ 105.242280][ T6706] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 105.250324][ T6706] RBP: 00007fe8eed000a0 R08: 0000000020003700 R09: 0000000000000000 [ 105.258283][ T6706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.266241][ T6706] R13: 000000000000000b R14: 00007fe8ee103f60 R15: 00007ffe482ff5c8 [ 105.274237][ T6706] [ 105.962578][ T6748] vlan3: entered promiscuous mode [ 106.060949][ T29] audit: type=1107 audit(1720768659.164:2): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ξR\4M' [ 106.071284][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 106.079277][ T29] audit: type=1107 audit(1720768659.174:3): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ξR\4M' [ 106.382384][ T6771] veth0_vlan: entered allmulticast mode [ 106.497352][ T6770] netlink: 'syz.4.491': attribute type 17 has an invalid length. [ 106.674124][ T6792] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 107.540572][ T6833] netlink: 'syz.2.511': attribute type 4 has an invalid length. [ 107.576568][ T6836] netlink: 'syz.4.513': attribute type 4 has an invalid length. [ 107.596498][ T6837] netlink: 'syz.4.513': attribute type 4 has an invalid length. [ 107.744891][ T6844] tipc: Started in network mode [ 107.756801][ T6844] tipc: Node identity 74725f6c656e3a2, cluster identity 4711 [ 107.768176][ T6844] tipc: Enabling of bearer rejected, failed to enable media [ 108.229629][ T6869] __nla_validate_parse: 11 callbacks suppressed [ 108.229648][ T6869] netlink: 56 bytes leftover after parsing attributes in process `syz.2.526'. [ 108.448341][ T6879] xt_ecn: cannot match TCP bits for non-tcp packets [ 108.533777][ T6882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 108.550618][ T6883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.531'. [ 108.915571][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 109.025497][ T6905] netlink: 'syz.2.542': attribute type 3 has an invalid length. [ 109.082772][ T6905] netlink: 'syz.2.542': attribute type 3 has an invalid length. [ 109.139716][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 109.500488][ T6935] veth0_vlan: entered allmulticast mode [ 109.646362][ T6948] netlink: 44 bytes leftover after parsing attributes in process `syz.4.556'. [ 109.870838][ T6963] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (128) [ 110.340965][ T6985] FAULT_INJECTION: forcing a failure. [ 110.340965][ T6985] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.369421][ T6985] CPU: 0 PID: 6985 Comm: syz.3.568 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 110.379500][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 110.389578][ T6985] Call Trace: [ 110.392878][ T6985] [ 110.395824][ T6985] dump_stack_lvl+0x241/0x360 [ 110.400525][ T6985] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.405790][ T6985] ? __pfx__printk+0x10/0x10 [ 110.410405][ T6985] ? __pfx_lock_release+0x10/0x10 [ 110.415452][ T6985] should_fail_ex+0x3b0/0x4e0 [ 110.420155][ T6985] _copy_from_user+0x2f/0xe0 [ 110.424762][ T6985] copy_msghdr_from_user+0xae/0x680 [ 110.429995][ T6985] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 110.435841][ T6985] __sys_sendmsg+0x23d/0x3a0 [ 110.440450][ T6985] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.445573][ T6985] ? vfs_write+0x7c4/0xc90 [ 110.450042][ T6985] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 110.456387][ T6985] ? do_syscall_64+0x100/0x230 [ 110.461172][ T6985] ? do_syscall_64+0xb6/0x230 [ 110.465877][ T6985] do_syscall_64+0xf3/0x230 [ 110.470399][ T6985] ? clear_bhb_loop+0x35/0x90 [ 110.475094][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.481008][ T6985] RIP: 0033:0x7fe57e775bd9 [ 110.485436][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.505136][ T6985] RSP: 002b:00007fe57f531048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.513547][ T6985] RAX: ffffffffffffffda RBX: 00007fe57e903f60 RCX: 00007fe57e775bd9 [ 110.521513][ T6985] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000004 [ 110.529473][ T6985] RBP: 00007fe57f5310a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.537454][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.545433][ T6985] R13: 000000000000000b R14: 00007fe57e903f60 R15: 00007fff83e07ec8 [ 110.553418][ T6985] [ 111.023284][ T7010] dccp_invalid_packet: P.Data Offset(0) too small [ 111.220462][ T7020] IPVS: length: 24 != 1656 [ 111.377250][ T7026] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 111.386057][ T7024] veth0_vlan: entered allmulticast mode [ 111.686966][ T7040] netlink: 48 bytes leftover after parsing attributes in process `syz.2.585'. [ 112.031983][ T7062] dccp_invalid_packet: P.Data Offset(0) too small [ 112.049754][ T7061] netlink: 'syz.4.593': attribute type 15 has an invalid length. [ 113.014754][ T7117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.609'. [ 113.093160][ T7117] batadv0: left promiscuous mode [ 113.301038][ T7129] FAULT_INJECTION: forcing a failure. [ 113.301038][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 113.323516][ T7129] CPU: 0 PID: 7129 Comm: syz.4.618 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 113.333722][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 113.343885][ T7129] Call Trace: [ 113.347188][ T7129] [ 113.350140][ T7129] dump_stack_lvl+0x241/0x360 [ 113.354857][ T7129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.360102][ T7129] ? __pfx__printk+0x10/0x10 [ 113.364717][ T7129] ? __pfx___might_resched+0x10/0x10 [ 113.370038][ T7129] should_fail_ex+0x3b0/0x4e0 [ 113.374747][ T7129] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 113.381006][ T7129] should_failslab+0x9/0x20 [ 113.385533][ T7129] __kmalloc_noprof+0xd8/0x400 [ 113.390322][ T7129] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 113.396422][ T7129] genl_rcv_msg+0x802/0xec0 [ 113.400953][ T7129] ? mark_lock+0x9a/0x350 [ 113.405327][ T7129] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.410386][ T7129] ? __pfx_lock_acquire+0x10/0x10 [ 113.415782][ T7129] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 113.421166][ T7129] ? __pfx_nl80211_set_station+0x10/0x10 [ 113.426797][ T7129] ? __pfx_nl80211_post_doit+0x10/0x10 [ 113.432270][ T7129] ? __pfx___might_resched+0x10/0x10 [ 113.437554][ T7129] netlink_rcv_skb+0x1e3/0x430 [ 113.442332][ T7129] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.447347][ T7129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.452628][ T7129] ? __netlink_deliver_tap+0x77e/0x7c0 [ 113.458084][ T7129] genl_rcv+0x28/0x40 [ 113.462074][ T7129] netlink_unicast+0x7f0/0x990 [ 113.466850][ T7129] ? __pfx_netlink_unicast+0x10/0x10 [ 113.472148][ T7129] ? __virt_addr_valid+0x183/0x530 [ 113.477287][ T7129] ? __check_object_size+0x49c/0x900 [ 113.482604][ T7129] ? bpf_lsm_netlink_send+0x9/0x10 [ 113.487748][ T7129] netlink_sendmsg+0x8e4/0xcb0 [ 113.492548][ T7129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.497862][ T7129] ? __import_iovec+0x536/0x820 [ 113.502732][ T7129] ? aa_sock_msg_perm+0x91/0x160 [ 113.507778][ T7129] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 113.513078][ T7129] ? security_socket_sendmsg+0x87/0xb0 [ 113.518543][ T7129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.523827][ T7129] __sock_sendmsg+0x221/0x270 [ 113.528503][ T7129] ____sys_sendmsg+0x525/0x7d0 [ 113.533264][ T7129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.538550][ T7129] __sys_sendmsg+0x2b0/0x3a0 [ 113.543131][ T7129] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.548234][ T7129] ? vfs_write+0x7c4/0xc90 [ 113.552678][ T7129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.558995][ T7129] ? do_syscall_64+0x100/0x230 [ 113.563753][ T7129] ? do_syscall_64+0xb6/0x230 [ 113.568426][ T7129] do_syscall_64+0xf3/0x230 [ 113.572922][ T7129] ? clear_bhb_loop+0x35/0x90 [ 113.577595][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.583481][ T7129] RIP: 0033:0x7f7e9b175bd9 [ 113.587888][ T7129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.607484][ T7129] RSP: 002b:00007f7e9beb9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.615984][ T7129] RAX: ffffffffffffffda RBX: 00007f7e9b303f60 RCX: 00007f7e9b175bd9 [ 113.623948][ T7129] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 113.631914][ T7129] RBP: 00007f7e9beb90a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.639881][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.647842][ T7129] R13: 000000000000000b R14: 00007f7e9b303f60 R15: 00007fff263b9a98 [ 113.655906][ T7129] [ 113.976649][ T7156] netlink: 3 bytes leftover after parsing attributes in process `syz.4.627'. [ 114.040697][ T7156] netlink: 'syz.4.627': attribute type 1 has an invalid length. [ 114.064344][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.627'. [ 114.082917][ T7156] netlink: 64 bytes leftover after parsing attributes in process `syz.4.627'. [ 114.096681][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.4.627'. [ 114.159612][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'. [ 114.234222][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.632'. [ 114.245457][ T7167] netlink: 32 bytes leftover after parsing attributes in process `syz.4.632'. [ 114.274728][ T7162] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.340770][ T7172] syzkaller1: entered promiscuous mode [ 114.355602][ T7172] syzkaller1: entered allmulticast mode [ 114.551824][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 114.567902][ T7184] netlink: 84 bytes leftover after parsing attributes in process `syz.4.632'. [ 114.577628][ T7183] netlink: 24 bytes leftover after parsing attributes in process `syz.0.638'. [ 115.145112][ T7195] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 115.518769][ T7215] xt_hashlimit: max too large, truncated to 1048576 [ 116.271527][ T7250] xt_hashlimit: max too large, truncated to 1048576 [ 116.782135][ T7273] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 116.794810][ T7273] netlink: 'syz.1.671': attribute type 1 has an invalid length. [ 116.815528][ T7273] netlink: 'syz.1.671': attribute type 2 has an invalid length. [ 116.974769][ T7280] xt_hashlimit: max too large, truncated to 1048576 [ 117.290180][ T7304] dccp_invalid_packet: P.Data Offset(0) too small [ 117.828457][ T7329] xt_hashlimit: max too large, truncated to 1048576 [ 118.075442][ T7340] tipc: Publication distribution failure [ 119.059058][ T7401] dccp_invalid_packet: P.Data Offset(0) too small [ 119.063522][ T7400] FAULT_INJECTION: forcing a failure. [ 119.063522][ T7400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.090536][ T7400] CPU: 0 PID: 7400 Comm: syz.1.714 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 119.100565][ T7400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 119.110626][ T7400] Call Trace: [ 119.113896][ T7400] [ 119.116828][ T7400] dump_stack_lvl+0x241/0x360 [ 119.121540][ T7400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.129724][ T7400] ? __pfx__printk+0x10/0x10 [ 119.134348][ T7400] ? __pfx_lock_release+0x10/0x10 [ 119.139405][ T7400] should_fail_ex+0x3b0/0x4e0 [ 119.144117][ T7400] strncpy_from_user+0x36/0x2f0 [ 119.148983][ T7400] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 119.154606][ T7400] getname_flags+0xfa/0x4f0 [ 119.159115][ T7400] do_sys_openat2+0xd2/0x1d0 [ 119.163731][ T7400] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.168923][ T7400] __x64_sys_openat+0x247/0x2a0 [ 119.173762][ T7400] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.179120][ T7400] ? exc_page_fault+0x590/0x8c0 [ 119.183959][ T7400] ? do_syscall_64+0xb6/0x230 [ 119.188625][ T7400] do_syscall_64+0xf3/0x230 [ 119.193114][ T7400] ? clear_bhb_loop+0x35/0x90 [ 119.197786][ T7400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.203683][ T7400] RIP: 0033:0x7f6f74b74610 [ 119.208087][ T7400] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 79 8d 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 cc 8d 02 00 8b 44 [ 119.227680][ T7400] RSP: 002b:00007f6f758f6f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 119.236127][ T7400] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6f74b74610 [ 119.244139][ T7400] RDX: 0000000000000002 RSI: 00007f6f758f6fb0 RDI: 00000000ffffff9c [ 119.252125][ T7400] RBP: 00007f6f758f6fb0 R08: 0000000000000000 R09: 0000000000000000 [ 119.260087][ T7400] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 119.268056][ T7400] R13: 000000000000000b R14: 00007f6f74d03f60 R15: 00007fffe8dce948 [ 119.276033][ T7400] [ 119.423149][ T7412] __nla_validate_parse: 8 callbacks suppressed [ 119.423167][ T7412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 119.638852][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 119.701838][ T7430] netlink: 16 bytes leftover after parsing attributes in process `syz.2.724'. [ 119.973990][ T7448] FAULT_INJECTION: forcing a failure. [ 119.973990][ T7448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.006205][ T7448] CPU: 0 PID: 7448 Comm: syz.1.732 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 120.016232][ T7448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 120.026309][ T7448] Call Trace: [ 120.029607][ T7448] [ 120.032558][ T7448] dump_stack_lvl+0x241/0x360 [ 120.037262][ T7448] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.042484][ T7448] ? __pfx__printk+0x10/0x10 [ 120.047083][ T7448] ? __pfx_lock_release+0x10/0x10 [ 120.052114][ T7448] should_fail_ex+0x3b0/0x4e0 [ 120.056792][ T7448] strncpy_from_user+0x36/0x2f0 [ 120.061643][ T7448] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 120.067274][ T7448] getname_flags+0xfa/0x4f0 [ 120.071774][ T7448] do_sys_openat2+0xd2/0x1d0 [ 120.076357][ T7448] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.081552][ T7448] __x64_sys_openat+0x247/0x2a0 [ 120.086393][ T7448] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.091759][ T7448] ? exc_page_fault+0x590/0x8c0 [ 120.096603][ T7448] ? do_syscall_64+0xb6/0x230 [ 120.101277][ T7448] do_syscall_64+0xf3/0x230 [ 120.105774][ T7448] ? clear_bhb_loop+0x35/0x90 [ 120.110444][ T7448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.116329][ T7448] RIP: 0033:0x7f6f74b74610 [ 120.120734][ T7448] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 79 8d 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 cc 8d 02 00 8b 44 [ 120.140749][ T7448] RSP: 002b:00007f6f758f6f20 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 120.149190][ T7448] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f6f74b74610 [ 120.157154][ T7448] RDX: 0000000000000002 RSI: 00007f6f758f6fb0 RDI: 00000000ffffff9c [ 120.165125][ T7448] RBP: 00007f6f758f6fb0 R08: 0000000000000000 R09: 0000000000000000 [ 120.173098][ T7448] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 120.181062][ T7448] R13: 000000000000000b R14: 00007f6f74d03f60 R15: 00007fffe8dce948 [ 120.189130][ T7448] [ 120.668721][ T7472] netlink: 16 bytes leftover after parsing attributes in process `syz.1.737'. [ 120.696576][ T7477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.739'. [ 120.861641][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.740'. [ 120.932612][ T7487] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.019595][ T7491] netlink: 'syz.3.743': attribute type 4 has an invalid length. [ 121.027763][ T7491] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.743'. [ 121.040938][ T7491] netlink: 18430 bytes leftover after parsing attributes in process `syz.3.743'. [ 121.267541][ T7512] xt_hashlimit: max too large, truncated to 1048576 [ 121.408368][ T7516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.752'. [ 121.631256][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 121.816071][ T7541] syz_tun: entered allmulticast mode [ 122.417761][ T7569] ieee802154 phy0 wpan0: encryption failed: -90 [ 122.684270][ T7540] syz_tun: left allmulticast mode [ 123.200173][ T7627] bridge0: entered promiscuous mode [ 123.211437][ T7624] xt_hashlimit: max too large, truncated to 1048576 [ 123.222597][ T7623] xt_CT: No such helper "snmp_trap" [ 123.230606][ T7627] bridge0: left promiscuous mode [ 123.501308][ T7640] xt_hashlimit: max too large, truncated to 1048576 [ 124.519955][ T7714] xt_hashlimit: max too large, truncated to 1048576 [ 124.972771][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.047450][ T7732] IPv6: NLM_F_REPLACE set, but no existing node found! [ 125.409380][ T7751] dccp_invalid_packet: P.Data Offset(0) too small [ 126.246367][ T7768] __nla_validate_parse: 11 callbacks suppressed [ 126.246387][ T7768] netlink: 48 bytes leftover after parsing attributes in process `syz.1.838'. [ 126.545961][ T7770] netlink: 40 bytes leftover after parsing attributes in process `syz.3.839'. [ 126.733970][ T7776] xt_TCPMSS: Only works on TCP SYN packets [ 126.869804][ T7779] tipc: Enabled bearer , priority 10 [ 127.105353][ T7785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.843'. [ 127.154581][ T7785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'. [ 127.561725][ T7797] netlink: 'syz.1.850': attribute type 4 has an invalid length. [ 127.584312][ T7797] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.850'. [ 127.615250][ T7797] netlink: 18430 bytes leftover after parsing attributes in process `syz.1.850'. [ 127.760473][ T7802] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.851'. [ 127.770734][ T7802] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 127.790010][ T7802] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 127.877731][ T1799] tipc: Node number set to 536936449 [ 127.972698][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802e273c00: rx timeout, send abort [ 127.982930][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802cbf2c00: rx timeout, send abort [ 127.991554][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802e273c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.007288][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802cbf2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 128.341531][ T7822] xt_hashlimit: max too large, truncated to 1048576 [ 128.684654][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.866'. [ 128.707162][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.864'. [ 128.735364][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.0.864'. [ 128.837558][ T7844] batman_adv: batadv0: Adding interface: vlan0 [ 128.868042][ T7844] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.908102][ T7844] batman_adv: batadv0: Interface activated: vlan0 [ 129.038821][ T7853] veth0_vlan: entered allmulticast mode [ 129.176159][ T7858] xt_hashlimit: max too large, truncated to 1048576 [ 129.253660][ T7861] netlink: 'syz.3.874': attribute type 4 has an invalid length. [ 129.532042][ T7873] @: renamed from veth0_vlan (while UP) [ 129.550398][ T7875] FAULT_INJECTION: forcing a failure. [ 129.550398][ T7875] name failslab, interval 1, probability 0, space 0, times 0 [ 129.563415][ T7875] CPU: 0 PID: 7875 Comm: syz.3.879 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 129.573419][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 129.583494][ T7875] Call Trace: [ 129.586792][ T7875] [ 129.589738][ T7875] dump_stack_lvl+0x241/0x360 [ 129.594441][ T7875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.599664][ T7875] ? __pfx__printk+0x10/0x10 [ 129.604283][ T7875] should_fail_ex+0x3b0/0x4e0 [ 129.608975][ T7875] ? skb_clone+0x20c/0x390 [ 129.613384][ T7875] should_failslab+0x9/0x20 [ 129.617888][ T7875] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 129.623269][ T7875] skb_clone+0x20c/0x390 [ 129.627501][ T7875] ? dev_queue_xmit_nit+0x220/0xc10 [ 129.632691][ T7875] dev_queue_xmit_nit+0x419/0xc10 [ 129.637710][ T7875] ? dev_queue_xmit_nit+0x2b/0xc10 [ 129.642813][ T7875] ? validate_xmit_skb+0x9f9/0x1120 [ 129.648022][ T7875] dev_hard_start_xmit+0x15f/0x7e0 [ 129.653130][ T7875] ? __pfx_validate_xmit_skb+0x10/0x10 [ 129.658618][ T7875] __dev_queue_xmit+0x1b63/0x3e90 [ 129.663666][ T7875] ? kasan_save_track+0x51/0x80 [ 129.668540][ T7875] ? do_syscall_64+0xf3/0x230 [ 129.674039][ T7875] ? __dev_queue_xmit+0x2da/0x3e90 [ 129.679164][ T7875] ? __pfx___dev_queue_xmit+0x10/0x10 [ 129.684648][ T7875] ? __copy_skb_header+0x437/0x5b0 [ 129.689774][ T7875] ? __asan_memcpy+0x40/0x70 [ 129.694362][ T7875] ? __copy_skb_header+0x437/0x5b0 [ 129.699609][ T7875] ? __skb_clone+0x454/0x6c0 [ 129.704225][ T7875] ? skb_clone+0x240/0x390 [ 129.708644][ T7875] __netlink_deliver_tap+0x54d/0x7c0 [ 129.713945][ T7875] ? netlink_deliver_tap+0x2e/0x1b0 [ 129.719147][ T7875] netlink_deliver_tap+0x19d/0x1b0 [ 129.724281][ T7875] netlink_unicast+0x7be/0x990 [ 129.729084][ T7875] ? __pfx_netlink_unicast+0x10/0x10 [ 129.734374][ T7875] ? __virt_addr_valid+0x183/0x530 [ 129.739489][ T7875] ? __check_object_size+0x49c/0x900 [ 129.744769][ T7875] ? bpf_lsm_netlink_send+0x9/0x10 [ 129.749881][ T7875] netlink_sendmsg+0x8e4/0xcb0 [ 129.754653][ T7875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.759934][ T7875] ? __import_iovec+0x536/0x820 [ 129.764777][ T7875] ? aa_sock_msg_perm+0x91/0x160 [ 129.769809][ T7875] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 129.775130][ T7875] ? security_socket_sendmsg+0x87/0xb0 [ 129.780582][ T7875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.785860][ T7875] __sock_sendmsg+0x221/0x270 [ 129.790538][ T7875] ____sys_sendmsg+0x525/0x7d0 [ 129.795494][ T7875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.800781][ T7875] __sys_sendmsg+0x2b0/0x3a0 [ 129.805367][ T7875] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.810462][ T7875] ? vfs_write+0x7c4/0xc90 [ 129.814903][ T7875] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 129.821233][ T7875] ? do_syscall_64+0x100/0x230 [ 129.825996][ T7875] ? do_syscall_64+0xb6/0x230 [ 129.830668][ T7875] do_syscall_64+0xf3/0x230 [ 129.835163][ T7875] ? clear_bhb_loop+0x35/0x90 [ 129.839837][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.845811][ T7875] RIP: 0033:0x7fe57e775bd9 [ 129.850216][ T7875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.869897][ T7875] RSP: 002b:00007fe57f531048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.878300][ T7875] RAX: ffffffffffffffda RBX: 00007fe57e903f60 RCX: 00007fe57e775bd9 [ 129.886266][ T7875] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 129.894228][ T7875] RBP: 00007fe57f5310a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.902193][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.910159][ T7875] R13: 000000000000000b R14: 00007fe57e903f60 R15: 00007fff83e07ec8 [ 129.918150][ T7875] [ 130.772709][ T7923] xt_hashlimit: max too large, truncated to 1048576 [ 131.402530][ T7948] __nla_validate_parse: 7 callbacks suppressed [ 131.402549][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'. [ 131.449255][ T7953] netlink: 80 bytes leftover after parsing attributes in process `syz.3.908'. [ 131.565351][ T5098] Bluetooth: hci0: command tx timeout [ 131.853274][ T7966] netlink: 36 bytes leftover after parsing attributes in process `syz.1.912'. [ 132.058390][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.913'. [ 132.692588][ T7996] bridge_slave_1: left allmulticast mode [ 132.710660][ T7996] bridge_slave_1: left promiscuous mode [ 132.738117][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.805726][ T7996] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 132.855297][ T8002] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.866834][ T8002] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.876296][ T8002] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.885344][ T8002] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 132.895962][ T8002] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 132.905451][ T8002] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 132.914691][ T8002] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 132.924191][ T8002] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 132.939750][ T8002] geneve2: entered promiscuous mode [ 132.946254][ T8002] geneve2: entered allmulticast mode [ 132.979119][ T7997] macsec1: entered promiscuous mode [ 132.984484][ T7997] macvlan0: entered promiscuous mode [ 132.993202][ T7997] macvlan0: left promiscuous mode [ 133.182942][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.195067][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.221914][ T8012] netlink: 'syz.2.924': attribute type 1 has an invalid length. [ 133.247226][ T8012] bond1: entered promiscuous mode [ 133.252510][ T8015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.926'. [ 133.267919][ T8012] ip6gretap2: entered promiscuous mode [ 133.274476][ T8012] ip6gretap2: entered allmulticast mode [ 133.285936][ T8012] bond1: (slave ip6gretap2): making interface the new active one [ 133.295637][ T8012] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 133.310971][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.4.925'. [ 133.383413][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz.1.928'. [ 133.402399][ T8022] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 133.463731][ T8027] wg1: entered promiscuous mode [ 133.588372][ T8035] dccp_invalid_packet: P.Data Offset(0) too small [ 133.771048][ T8044] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 133.794616][ T8044] team0: Device ipvlan1 failed to register rx_handler [ 133.892213][ T8041] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.907144][ T8041] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.918476][ T8041] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.927924][ T8041] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 133.940002][ T8041] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 133.951893][ T8041] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 133.963151][ T8041] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 133.994450][ T8041] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 134.019519][ T8041] geneve2: entered promiscuous mode [ 134.028253][ T8041] geneve2: entered allmulticast mode [ 134.073489][ T8046] macsec2: entered promiscuous mode [ 134.087881][ T8046] macvlan0: entered promiscuous mode [ 134.120979][ T8046] macvlan0: left promiscuous mode [ 134.537664][ T8084] dccp_invalid_packet: P.Data Offset(0) too small [ 134.558735][ T8083] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 134.571146][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.948'. [ 134.790049][ T8098] bridge0: port 3(macvlan4) entered blocking state [ 134.799545][ T8098] bridge0: port 3(macvlan4) entered disabled state [ 134.811637][ T8098] macvlan4: entered allmulticast mode [ 134.840395][ T8098] macvlan4: entered promiscuous mode [ 134.969998][ T8103] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 135.308669][ T8115] xt_hashlimit: max too large, truncated to 1048576 [ 135.775686][ T8133] netlink: 4 bytes leftover after parsing attributes in process `syz.2.963'. [ 135.923766][ T8140] netlink: 'syz.1.965': attribute type 4 has an invalid length. [ 135.960509][ T8141] netlink: 'syz.1.965': attribute type 4 has an invalid length. [ 136.128029][ T8149] xt_HMARK: spi-set and port-set can't be combined [ 136.206930][ T8156] dccp_invalid_packet: P.Data Offset(0) too small [ 136.574412][ T5099] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.584242][ T5099] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.593121][ T5099] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.606828][ T5099] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.616982][ T5099] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 136.624528][ T5099] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 136.813442][ T35] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.875787][ T35] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.879336][ T8186] netlink: 'syz.1.981': attribute type 2 has an invalid length. [ 136.902218][ T8186] netlink: 'syz.1.981': attribute type 2 has an invalid length. [ 136.976731][ T35] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.110625][ T35] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.172303][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 137.233982][ T8203] netlink: 44 bytes leftover after parsing attributes in process `syz.0.988'. [ 137.322021][ T8174] chnl_net:caif_netlink_parms(): no params data found [ 137.492902][ T8219] netlink: 'syz.2.994': attribute type 2 has an invalid length. [ 137.494522][ T8213] xt_hashlimit: max too large, truncated to 1048576 [ 137.508875][ T8219] netlink: 'syz.2.994': attribute type 2 has an invalid length. [ 137.578359][ T8225] dccp_invalid_packet: P.Data Offset(0) too small [ 137.628535][ T35] bridge_slave_1: left allmulticast mode [ 137.634223][ T35] bridge_slave_1: left promiscuous mode [ 137.641400][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.706358][ T35] bridge_slave_0: left allmulticast mode [ 137.723555][ T35] bridge_slave_0: left promiscuous mode [ 137.753864][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.159228][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.179318][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.193029][ T35] bond0 (unregistering): Released all slaves [ 138.231448][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.239004][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.254723][ T8174] bridge_slave_0: entered allmulticast mode [ 138.282687][ T8174] bridge_slave_0: entered promiscuous mode [ 138.343670][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.372983][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.393353][ T8174] bridge_slave_1: entered allmulticast mode [ 138.414839][ T8174] bridge_slave_1: entered promiscuous mode [ 138.452245][ T35] tipc: Disabling bearer [ 138.477453][ T35] tipc: Left network mode [ 138.531494][ T8174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.577379][ T8174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.686268][ T5098] Bluetooth: hci2: command tx timeout [ 138.872272][ T8174] team0: Port device team_slave_0 added [ 138.887889][ T8253] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1003'. [ 138.938945][ T8174] team0: Port device team_slave_1 added [ 139.136954][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1007'. [ 139.162971][ T8261] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1007'. [ 139.276385][ T8278] dccp_invalid_packet: P.Data Offset(0) too small [ 139.292342][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.313006][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.341335][ T8174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.451314][ T35] hsr_slave_0: left promiscuous mode [ 139.454801][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 139.480418][ T35] hsr_slave_1: left promiscuous mode [ 139.502879][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.514304][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.529744][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.537721][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.548439][ T35] batman_adv: batadv0: Interface deactivated: vlan0 [ 139.555619][ T35] batman_adv: batadv0: Removing interface: vlan0 [ 139.584823][ T35] veth1_macvtap: left promiscuous mode [ 139.590730][ T35] veth0_macvtap: left promiscuous mode [ 139.596786][ T35] veth1_vlan: left promiscuous mode [ 139.602227][ T35] @: left promiscuous mode [ 140.060865][ T35] team0 (unregistering): Port device team_slave_1 removed [ 140.096521][ T35] team0 (unregistering): Port device team_slave_0 removed [ 140.420961][ T8174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.445567][ T8174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.485161][ T8174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.535163][ T8300] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1018'. [ 140.619374][ T8309] xt_hashlimit: max too large, truncated to 1048576 [ 140.741558][ T8174] hsr_slave_0: entered promiscuous mode [ 140.766100][ T5098] Bluetooth: hci2: command tx timeout [ 140.795538][ T8174] hsr_slave_1: entered promiscuous mode [ 140.835309][ T8174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.868908][ T8174] Cannot create hsr debugfs directory [ 141.003483][ T8331] xt_hashlimit: max too large, truncated to 1048576 [ 141.129483][ T8337] netlink: 'syz.2.1028': attribute type 29 has an invalid length. [ 141.150102][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 141.183294][ T8332] netlink: 'syz.2.1028': attribute type 29 has an invalid length. [ 141.199542][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1028'. [ 141.426742][ T8350] FAULT_INJECTION: forcing a failure. [ 141.426742][ T8350] name failslab, interval 1, probability 0, space 0, times 0 [ 141.439969][ T8350] CPU: 1 PID: 8350 Comm: syz.0.1033 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 141.450039][ T8350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.460222][ T8350] Call Trace: [ 141.463512][ T8350] [ 141.466451][ T8350] dump_stack_lvl+0x241/0x360 [ 141.471143][ T8350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.476356][ T8350] ? __pfx__printk+0x10/0x10 [ 141.480987][ T8350] should_fail_ex+0x3b0/0x4e0 [ 141.485679][ T8350] ? sctp_add_bind_addr+0x89/0x3a0 [ 141.490813][ T8350] should_failslab+0x9/0x20 [ 141.495428][ T8350] kmalloc_trace_noprof+0x6c/0x2c0 [ 141.500561][ T8350] sctp_add_bind_addr+0x89/0x3a0 [ 141.505513][ T8350] sctp_copy_local_addr_list+0x311/0x500 [ 141.511179][ T8350] ? sctp_copy_local_addr_list+0xab/0x500 [ 141.516912][ T8350] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 141.523073][ T8350] ? sctp_v4_is_any+0x35/0x60 [ 141.527753][ T8350] sctp_bind_addr_copy+0xad/0x3b0 [ 141.532790][ T8350] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 141.539118][ T8350] sctp_connect_new_asoc+0x2f3/0x6c0 [ 141.544398][ T8350] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 141.550200][ T8350] ? sctp_sendmsg+0xbb9/0x3520 [ 141.554969][ T8350] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 141.560510][ T8350] ? security_sctp_bind_connect+0x90/0xb0 [ 141.566228][ T8350] sctp_sendmsg+0x219a/0x3520 [ 141.570913][ T8350] ? __pfx_sctp_sendmsg+0x10/0x10 [ 141.575935][ T8350] ? __pfx_aa_sk_perm+0x10/0x10 [ 141.580792][ T8350] ? inet_sendmsg+0x330/0x390 [ 141.585467][ T8350] __sock_sendmsg+0x1a6/0x270 [ 141.590141][ T8350] ____sys_sendmsg+0x525/0x7d0 [ 141.594907][ T8350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.600372][ T8350] __sys_sendmmsg+0x3b2/0x740 [ 141.605054][ T8350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 141.610259][ T8350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.616588][ T8350] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 141.622906][ T8350] ? __send_signal_locked+0xb44/0xdc0 [ 141.628272][ T8350] ? __lock_task_sighand+0x2a5/0x2d0 [ 141.633546][ T8350] ? __lock_task_sighand+0x29/0x2d0 [ 141.638793][ T8350] ? group_send_sig_info+0x2e0/0x310 [ 141.644091][ T8350] ? bpf_trace_run2+0x1fc/0x540 [ 141.648934][ T8350] ? bpf_send_signal_common+0x2dd/0x430 [ 141.654487][ T8350] ? __pfx_lock_release+0x10/0x10 [ 141.659515][ T8350] ? bpf_trace_run2+0x1fc/0x540 [ 141.664365][ T8350] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.670338][ T8350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.676674][ T8350] __x64_sys_sendmmsg+0xa0/0xb0 [ 141.681521][ T8350] do_syscall_64+0xf3/0x230 [ 141.686105][ T8350] ? clear_bhb_loop+0x35/0x90 [ 141.690777][ T8350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.696754][ T8350] RIP: 0033:0x7f952c975bd9 [ 141.701161][ T8350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.720778][ T8350] RSP: 002b:00007f952c3ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 141.729209][ T8350] RAX: ffffffffffffffda RBX: 00007f952cb03f60 RCX: 00007f952c975bd9 [ 141.737191][ T8350] RDX: 0000000000000002 RSI: 0000000020000e40 RDI: 0000000000000003 [ 141.745162][ T8350] RBP: 00007f952c3ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.753129][ T8350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.761093][ T8350] R13: 000000000000000b R14: 00007f952cb03f60 R15: 00007ffd12d47cf8 [ 141.769075][ T8350] [ 141.982129][ T8358] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 142.033370][ T8358] wg1 speed is unknown, defaulting to 1000 [ 142.044565][ T8174] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.071396][ T8358] wg1 speed is unknown, defaulting to 1000 [ 142.084088][ T8362] ip6gretap0: entered promiscuous mode [ 142.093040][ T8362] vlan3: entered promiscuous mode [ 142.099309][ T8362] vlan3: entered allmulticast mode [ 142.107835][ T8362] ip6gretap0: entered allmulticast mode [ 142.114348][ T8174] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.135904][ T8358] wg1 speed is unknown, defaulting to 1000 [ 142.142174][ T8366] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1041'. [ 142.167259][ T8174] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.201719][ T8174] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.425091][ T8380] netlink: 'syz.3.1047': attribute type 10 has an invalid length. [ 142.474366][ T8380] team0: Device veth1_macvtap failed to register rx_handler [ 142.532035][ T8174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.581387][ T8174] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.600721][ T8358] infiniband syz1: set active [ 142.608054][ T45] wg1 speed is unknown, defaulting to 1000 [ 142.625038][ T8358] infiniband syz1: added wg1 [ 142.625768][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.636926][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.740036][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.747366][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.809050][ T8358] RDS/IB: syz1: added [ 142.814143][ T8358] smc: adding ib device syz1 with port count 1 [ 142.844402][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1050'. [ 142.844859][ T8358] smc: ib device syz1 port 1 has pnetid [ 142.854483][ T5099] Bluetooth: hci2: command tx timeout [ 142.911400][ T5147] wg1 speed is unknown, defaulting to 1000 [ 142.923493][ T8174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 143.015665][ T8358] wg1 speed is unknown, defaulting to 1000 [ 143.033332][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1051'. [ 143.060969][ T8393] netlink: 'syz.0.1051': attribute type 2 has an invalid length. [ 143.503104][ T8174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.645199][ T8396] syz.3.1050 (8396) used greatest stack depth: 17648 bytes left [ 143.673425][ T8358] wg1 speed is unknown, defaulting to 1000 [ 144.111590][ T8174] veth0_vlan: entered promiscuous mode [ 144.164976][ T8174] veth1_vlan: entered promiscuous mode [ 144.241828][ T8412] wg1 speed is unknown, defaulting to 1000 [ 144.266711][ T8174] veth0_macvtap: entered promiscuous mode [ 144.302251][ T8174] veth1_macvtap: entered promiscuous mode [ 144.342941][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.359841][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.381651][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.401181][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.412462][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.429444][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.442861][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.462532][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.474840][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.485361][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.499851][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.512010][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.523966][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.535443][ T8174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.550303][ T8174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.563180][ T8174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.574553][ T8440] netlink: 'syz.0.1064': attribute type 3 has an invalid length. [ 144.612924][ T8174] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.628610][ T8174] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.638723][ T8174] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.647688][ T8174] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.653329][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 144.674538][ T8358] wg1 speed is unknown, defaulting to 1000 [ 144.823601][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.839693][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.925796][ T5099] Bluetooth: hci2: command 0x0419 tx timeout [ 144.985059][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1066'. [ 145.001896][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.006876][ T8358] wg1 speed is unknown, defaulting to 1000 [ 145.010597][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.250345][ T8454] Unknown options in mask 1f4 [ 145.430465][ T8358] wg1 speed is unknown, defaulting to 1000 [ 146.439578][ T8489] netlink: 'syz.0.1081': attribute type 21 has an invalid length. [ 146.461141][ T8489] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1081'. [ 146.553465][ T8495] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 146.562935][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 146.590911][ T8495] rdma_rxe: rxe_newlink: failed to add wg1 [ 147.005908][ T5099] Bluetooth: hci2: command 0x0419 tx timeout [ 147.204210][ T8538] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 147.249829][ T8538] rdma_rxe: rxe_newlink: failed to add wg1 [ 147.279650][ T8542] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1101'. [ 147.326678][ T8542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1101'. [ 147.445803][ T8555] tipc: Started in network mode [ 147.450718][ T8555] tipc: Node identity 7ff, cluster identity 4711 [ 147.506586][ T8555] tipc: Node number set to 2047 [ 147.647004][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 147.766025][ T8575] veth0_vlan: entered allmulticast mode [ 148.099980][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1118'. [ 148.264844][ T8603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1120'. [ 148.603688][ T8614] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1124'. [ 148.623308][ T8619] netlink: 'syz.0.1126': attribute type 29 has an invalid length. [ 148.641816][ T8619] netlink: 'syz.0.1126': attribute type 29 has an invalid length. [ 148.654516][ T8614] openvswitch: netlink: Multiple metadata blocks provided [ 148.774612][ T8626] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1129'. [ 148.812635][ T8626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1129'. [ 148.831072][ T8630] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1131'. [ 148.884436][ T8630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1131'. [ 149.210609][ T8646] xt_hashlimit: max too large, truncated to 1048576 [ 149.480824][ T8668] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1148'. [ 149.499184][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1147'. [ 149.510473][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1148'. [ 149.609122][ T8679] nftables ruleset with unbound chain [ 149.727493][ T8687] xt_hashlimit: max too large, truncated to 1048576 [ 150.014455][ C1] hrtimer: interrupt took 5769828 ns [ 152.615586][ T8719] SET target dimension over the limit! [ 152.623798][ T5098] Bluetooth: hci2: command 0x0419 tx timeout [ 159.785622][ T5110] Bluetooth: hci2: command 0x0419 tx timeout [ 159.800079][ T8724] __nla_validate_parse: 5 callbacks suppressed [ 159.800097][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1165'. [ 185.184845][ T8732] xt_hashlimit: max too large, truncated to 1048576 [ 211.885090][ T19] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-...D } 2664 jiffies s: 9705 root: 0x2/. [ 211.924434][ T19] rcu: blocking rcu_node structures (internal RCU debug): [ 211.947747][ T19] Sending NMI from CPU 0 to CPUs 1: [ 211.953208][ C1] NMI backtrace for cpu 1 [ 211.953221][ C1] CPU: 1 PID: 8718 Comm: syz.1.1164 Not tainted 6.10.0-rc7-syzkaller-01603-g80ab5445da62 #0 [ 211.953239][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 211.953249][ C1] RIP: 0010:__lock_acquire+0x126d/0x1fd0 [ 211.953274][ C1] Code: 10 8b 18 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 80 55 fc 92 be 08 00 00 00 e8 cb d8 89 00 48 0f a3 1d 73 d5 89 11 <73> 1d 48 69 c3 c8 00 00 00 48 8d 98 80 b4 ca 92 48 ba 00 00 00 00 [ 211.953287][ C1] RSP: 0018:ffffc90000a18a30 EFLAGS: 00000057 [ 211.953301][ C1] RAX: 0000000000000001 RBX: 0000000000000a1a RCX: ffffffff81728005 [ 211.953313][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff92fc56c0 [ 211.953323][ C1] RBP: 1974f5b97b4faf5e R08: ffffffff92fc56c7 R09: 1ffffffff25f8ad8 [ 211.953335][ C1] R10: dffffc0000000000 R11: fffffbfff25f8ad9 R12: ffff8880684ebc00 [ 211.953347][ C1] R13: ffff8880684ebc00 R14: 0000000000000001 R15: ffff8880684ebc00 [ 211.953359][ C1] FS: 00007f6f758f76c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 211.953373][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.953385][ C1] CR2: 0000557a1f4c3b28 CR3: 000000002bfe2000 CR4: 00000000003506f0 [ 211.953399][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.953408][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.953418][ C1] Call Trace: [ 211.953425][ C1] [ 211.953432][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 211.953455][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 211.953473][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 211.953503][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 211.953521][ C1] ? nmi_handle+0x14f/0x5a0 [ 211.953543][ C1] ? nmi_handle+0x2a/0x5a0 [ 211.953566][ C1] ? __lock_acquire+0x126d/0x1fd0 [ 211.953581][ C1] ? default_do_nmi+0x63/0x160 [ 211.953603][ C1] ? exc_nmi+0x123/0x1f0 [ 211.953624][ C1] ? end_repeat_nmi+0xf/0x53 [ 211.953648][ C1] ? __lock_acquire+0x1265/0x1fd0 [ 211.953665][ C1] ? __lock_acquire+0x126d/0x1fd0 [ 211.953681][ C1] ? __lock_acquire+0x126d/0x1fd0 [ 211.953698][ C1] ? __lock_acquire+0x126d/0x1fd0 [ 211.953714][ C1] [ 211.953720][ C1] [ 211.953733][ C1] lock_acquire+0x1ed/0x550 [ 211.953748][ C1] ? advance_sched+0xab/0xca0 [ 211.953773][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 211.953791][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 211.953813][ C1] ? __hrtimer_run_queues+0x477/0xd50 [ 211.953835][ C1] ? __pfx_lock_release+0x10/0x10 [ 211.953853][ C1] ? __pfx_advance_sched+0x10/0x10 [ 211.953874][ C1] _raw_spin_lock+0x2e/0x40 [ 211.953893][ C1] ? advance_sched+0xab/0xca0 [ 211.953913][ C1] advance_sched+0xab/0xca0 [ 211.953934][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 211.953955][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 211.953980][ C1] ? __pfx_advance_sched+0x10/0x10 [ 211.954001][ C1] __hrtimer_run_queues+0x59b/0xd50 [ 211.954022][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 211.954047][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 211.954068][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 211.954089][ C1] hrtimer_interrupt+0x396/0x990 [ 211.954125][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 211.954149][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 211.954166][ C1] [ 211.954171][ C1] [ 211.954177][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 211.954198][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp2+0x81/0x90 [ 211.954216][ C1] Code: 8d 42 28 4c 39 c8 77 22 89 f8 89 f6 49 ff c2 4c 89 11 48 c7 44 0a 08 03 00 00 00 48 89 44 0a 10 48 89 74 0a 18 4c 89 44 0a 20 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 211.954228][ C1] RSP: 0018:ffffc90014a975d8 EFLAGS: 00000297 [ 211.954241][ C1] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffff8880684ebc00 [ 211.954252][ C1] RDX: ffff8880684ebc00 RSI: 0000000000000001 RDI: 0000000000000003 [ 211.954262][ C1] RBP: ffffc90014a976c0 R08: ffffffff81f935cc R09: ffffffff81f92983 [ 211.954274][ C1] R10: 0000000000000005 R11: ffff8880684ebc00 R12: 0000000000000000 [ 211.954283][ C1] R13: ffffffffffffffff R14: 0000000000000001 R15: 0000000000000000 [ 211.954297][ C1] ? policy_nodemask+0x53/0x7e0 [ 211.954318][ C1] ? alloc_pages_mpol_noprof+0x18c/0x680 [ 211.954345][ C1] alloc_pages_mpol_noprof+0x18c/0x680 [ 211.954370][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 211.954396][ C1] ? alloc_pages_noprof+0xef/0x170 [ 211.954419][ C1] get_free_pages_noprof+0xc/0x30 [ 211.954435][ C1] kasan_populate_vmalloc_pte+0x38/0xe0 [ 211.954455][ C1] __apply_to_page_range+0x8a8/0xe50 [ 211.954481][ C1] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 211.954503][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 211.954526][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 211.954548][ C1] ? kmem_cache_alloc_node_noprof+0x1c4/0x320 [ 211.954567][ C1] alloc_vmap_area+0x1d41/0x23e0 [ 211.954593][ C1] ? __pfx_alloc_vmap_area+0x10/0x10 [ 211.954609][ C1] ? __kasan_kmalloc+0x98/0xb0 [ 211.954630][ C1] ? kmalloc_node_trace_noprof+0x1d3/0x300 [ 211.954646][ C1] ? __get_vm_area_node+0x113/0x270 [ 211.954662][ C1] ? array_map_alloc+0x285/0x720 [ 211.954683][ C1] __get_vm_area_node+0x1a9/0x270 [ 211.954704][ C1] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 211.954723][ C1] ? array_map_alloc+0x285/0x720 [ 211.954742][ C1] ? mark_lock+0x9a/0x350 [ 211.954758][ C1] ? __pfx_validate_chain+0x10/0x10 [ 211.954784][ C1] ? mark_lock+0x9a/0x350 [ 211.954804][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 211.954822][ C1] ? apparmor_capable+0x138/0x1b0 [ 211.954843][ C1] ? bpf_lsm_capable+0x9/0x10 [ 211.954862][ C1] ? security_capable+0x90/0xb0 [ 211.954880][ C1] bpf_map_area_alloc+0xfc/0x120 [ 211.954897][ C1] ? array_map_alloc+0x285/0x720 [ 211.954918][ C1] array_map_alloc+0x285/0x720 [ 211.954937][ C1] ? __lock_acquire+0x1f61/0x1fd0 [ 211.954954][ C1] map_create+0x90c/0x1200 [ 211.954977][ C1] ? security_bpf+0x87/0xb0 [ 211.954992][ C1] __sys_bpf+0x6d1/0x810 [ 211.955015][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 211.955043][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 211.955062][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.955080][ C1] ? exc_page_fault+0x590/0x8c0 [ 211.955100][ C1] __x64_sys_bpf+0x7c/0x90 [ 211.955127][ C1] do_syscall_64+0xf3/0x230 [ 211.955146][ C1] ? clear_bhb_loop+0x35/0x90 [ 211.955166][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.955187][ C1] RIP: 0033:0x7f6f74b75bd9 [ 211.955201][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.955214][ C1] RSP: 002b:00007f6f758f7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 211.955229][ C1] RAX: ffffffffffffffda RBX: 00007f6f74d03f60 RCX: 00007f6f74b75bd9 [ 211.955241][ C1] RDX: 0000000000000048 RSI: 0000000020000200 RDI: 0000000000000000 [ 211.955251][ C1] RBP: 00007f6f74be4e60 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 211.955262][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 211.955271][ C1] R13: 000000000000000b R14: 00007f6f74d03f60 R15: 00007fffe8dce948 [ 211.955289][ C1]