last executing test programs: 1m25.783633181s ago: executing program 3 (id=8578): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x1, @local}}, 0x1e) bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) write$tun(r4, &(0x7f0000000100)={@val={0x0, 0x88f5}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @dev, @void, {@llc_tr={0x11, {@snap={0xaa, 0x1, "e7c4", "26d129", 0x88f5, "d3364b"}}}}}}, 0x1e) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01708d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x50040080}, 0x40844) syz_genetlink_get_family_id$ethtool(0x0, r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000190a01020000000000000000000000000900010073797a3000000000000006008af74402e7bebf2554e6e91481fd5f1ffe1f3c7645183b4d44a4c836c964e41bfe887f1633eb945f4e7c43da6f1acc7d540600000000000000c649bc41b2072c874a71b8b9335974"], 0x58}}, 0x0) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x34, r8, 0x6ae3e61d32b8160b, 0x0, 0x0, {0x3d}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) socket(0x11, 0x800000003, 0x0) 1m25.439978285s ago: executing program 3 (id=8583): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040507fe056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270015000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) close(r0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) unshare(0x4000400) close(0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000040)=r3) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) 1m10.834374688s ago: executing program 3 (id=8583): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040507fe056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270015000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) close(r0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) unshare(0x4000400) close(0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000040)=r3) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) 1m7.196083524s ago: executing program 0 (id=8765): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ffffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@gettaction={0x3c, 0x32, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x1ff}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x3c}}, 0x81) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0000001000010400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0041000010110621140012800b0001006c6f7770616e000004000280080005"], 0x3c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x6, &(0x7f0000000140)={0x7f, {{0x29, 0x4e22, 0x0, @local}}}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$MRT6_PIM(r6, 0x29, 0xcf, &(0x7f0000000540)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_rose_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @null, @netrom={'nr', 0x0}, 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x31, &(0x7f0000000000)=0xe0, 0x4) syz_emit_ethernet(0x32, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r8, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xbc, 0x453, 0x20, 0x70bd2d, 0x25dfdbfd, "a2af7d6b9801f068a66e59f6fb4167476b34c1c5be1c8ccdd9a12c775137395302e74e1d60e6e33ee4e4dfc2d951ce2b362a03d6ec443b568c10f33faff4d3017ff94dd26c9f27cd327f570e1779fdd99fcd1b0e767f93ca7db42206729da2a2eb983d2190bd4625335948b9a697c312c1d222af6838d6721dac98084811664f1ff186351c5c63be672cf968b9880a85dd6224e6424336478e1d830499a50ea34d59c13bc521225cd257f0", ["", "", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x110, 0x210, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @empty}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f77a4a2a222f5b9d9d1ac799fbb255c6fb8a52e5e1298b0fb0a2e65cb160"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@local, @multicast1, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 1m6.826337974s ago: executing program 0 (id=8769): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000400)={0x20002007}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000000)={0x8000a213}) r3 = socket$qrtr(0x2a, 0x2, 0x0) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000040)="4fc931ba2978dc8f4c9bc319933a6063132b9cd32ac9660cc92553d86514cd3b41eb3fa4e4116d3a889150daa85ea0273aeb8eed", 0x34}, {0x0}, {&(0x7f00000001c0)="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", 0xfb}, {&(0x7f00000002c0)}, {&(0x7f0000000380)="a487b49501906ed090cede9f434cece75996af8f2122ecf196f079b4e01d3da1441d72197c84cf9e5f3a3be01cd9f6682ffbdb297cc8229ee91f4186711ea631b84074bf5484ed835a33cb0fe538b2a074648a9b56eff9c75cee6ff17304a07b1331d9840289b84286c313dca16176b96ec598411a13c60f71c9ffa4e763bdcd003f0cf6621ca17a3892adc453af0f4dc04a425ceae154135854549706bc7545", 0xa0}], 0x5) getsockname$qrtr(r3, 0x0, &(0x7f0000000580)) bind$qrtr(r3, &(0x7f00000005c0)={0x2a, 0x2, 0x4000}, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'team_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x60, r5, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r7}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8003}}, {0x8, 0x6, r9}}}]}}]}, 0x60}}, 0x0) bind$qrtr(r3, &(0x7f0000000c00)={0x2a, 0x1, 0x1}, 0xc) bind$qrtr(r3, &(0x7f0000001000)={0x2a, 0x1, 0x3fff}, 0xc) r10 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r10, 0x6, 0x28, 0x0, &(0x7f0000001a80)) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c0000001000030400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140014006772657461703000000000000000000008002e0000000000080013"], 0x9c}, 0x1, 0xffffffea}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="0200000002000077000000001a000000"], 0x10}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r12}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r13}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r13}, 0x20) 1m6.098846918s ago: executing program 0 (id=8775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010000000000000000d755f39c395818a12635cfa89f895af0d506c0b9e50000000000000000000000000000000000fe8000000000000000000000000000aa00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000800180000000080480003006465666c61746500"/248], 0x140}}, 0x0) unshare(0x8040480) shutdown(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x46d39000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x4, 0x0, &(0x7f0000000e40)) socket$inet6_sctp(0xa, 0x35843b7e498939fb, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974790000f7ff000000000000000000000000004e00020000000000000000000000000000000000000000000000005300"/72], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000008000000000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) unshare(0x200) epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x3e, 0x0, &(0x7f0000000000), 0x8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000100)={0x4a, 0x101, 0x7, 0xa, 0x8f}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x17, 0x0, &(0x7f00000000c0)) 52.834530724s ago: executing program 3 (id=8583): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040507fe056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270015000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) close(r0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) unshare(0x4000400) close(0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000040)=r3) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) 50.075896001s ago: executing program 0 (id=8775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010000000000000000d755f39c395818a12635cfa89f895af0d506c0b9e50000000000000000000000000000000000fe8000000000000000000000000000aa00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000800180000000080480003006465666c61746500"/248], 0x140}}, 0x0) unshare(0x8040480) shutdown(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x46d39000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x4, 0x0, &(0x7f0000000e40)) socket$inet6_sctp(0xa, 0x35843b7e498939fb, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974790000f7ff000000000000000000000000004e00020000000000000000000000000000000000000000000000005300"/72], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000008000000000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) unshare(0x200) epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x3e, 0x0, &(0x7f0000000000), 0x8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000100)={0x4a, 0x101, 0x7, 0xa, 0x8f}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x17, 0x0, &(0x7f00000000c0)) 35.048936867s ago: executing program 3 (id=8583): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040507fe056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270015000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) close(r0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) unshare(0x4000400) close(0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000040)=r3) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) 33.636147318s ago: executing program 0 (id=8775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010000000000000000d755f39c395818a12635cfa89f895af0d506c0b9e50000000000000000000000000000000000fe8000000000000000000000000000aa00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000800180000000080480003006465666c61746500"/248], 0x140}}, 0x0) unshare(0x8040480) shutdown(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x46d39000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x4, 0x0, &(0x7f0000000e40)) socket$inet6_sctp(0xa, 0x35843b7e498939fb, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974790000f7ff000000000000000000000000004e00020000000000000000000000000000000000000000000000005300"/72], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000008000000000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) unshare(0x200) epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x3e, 0x0, &(0x7f0000000000), 0x8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000100)={0x4a, 0x101, 0x7, 0xa, 0x8f}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x17, 0x0, &(0x7f00000000c0)) 4.052537267s ago: executing program 4 (id=9044): socket$packet(0x11, 0x2, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x28, &(0x7f00000004c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @alu={0x7, 0x1, 0x4, 0xff77af751d0ee103, 0x7, 0x10, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088, 0x41000, 0x56}, 0x90) r2 = socket$inet6(0xa, 0xa, 0x36) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001800)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000980)="000000c8320100"/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000002f80)="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", 0xfffffdef}], 0x1}}], 0x1, 0x0) socket$isdn(0x22, 0x3, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0xfffffffffffffc50) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000080)) r5 = socket$inet6(0xa, 0x800, 0x5) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x2004, @private0={0xfc, 0x0, '\x00', 0x1}, 0x3}, 0x1c) write(r2, &(0x7f0000000200)="89", 0x3f80) 3.641717742s ago: executing program 4 (id=9047): r0 = socket$kcm(0x2b, 0x1, 0x0) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@polexpire={0xcc, 0x1b, 0x319516ae726afe1b, 0x0, 0x0, {{{@in6=@private1}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x0, 0x2}}]}, 0xcc}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x0, 0x1}, {}]}]}}, 0x0, 0x4a}, 0x20) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @private0}], 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, 0x0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x7) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000008400000005"], 0x18}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000000)='GPL\x00', 0x7, 0x9, &(0x7f00000004c0)=""/4086}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75}, 0x38) poll(&(0x7f0000000240)=[{r1, 0x40}, {r1, 0x200}, {r0, 0x2100}, {r0, 0x8}, {0xffffffffffffffff, 0xa100}, {r0, 0x4000}, {r1, 0x404a}], 0x7, 0x3ff) 3.641527625s ago: executing program 1 (id=9048): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0x0, @local, 0x0, 0x11, 'none\x00'}, 0x2c) 3.557241508s ago: executing program 1 (id=9050): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x10, r1}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[@ANYRES32=r5], 0xc8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1f, &(0x7f0000000500)=@raw=[@jmp={0x5, 0x0, 0xb, 0x4, 0x9, 0xfffffffffffffffe, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0xab}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}}, @generic={0xff, 0xf, 0x3, 0x10eb, 0xc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 3.465696349s ago: executing program 3 (id=8583): r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be040507fe056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270015000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) close(r0) r2 = socket$kcm(0x2b, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) unshare(0x4000400) close(0x3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000040)=r3) close(r2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) 3.424054357s ago: executing program 4 (id=9052): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x141343, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="89e7ee2c7cdad9b4b47380c94305", 0xe}], 0x1) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x59) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x7b, &(0x7f0000000080)="587d325c94f244b6a5c501c9ce1ad2e3a90dc9e9a94f7882334f24e61c208e559291013b32aaddf18d72f44e23e18ffe277f14754aff7aa2c32cd82671e00458b9bd53b4eb714a7875301da5c87b56d3e36c141960cb49b9f25eb29aae0c159505a4c22a1900ac792dc8f284f041b51fdd9819fdf58837e1002e92", 0x16, 0x0, &(0x7f00000003c0)="05199d02eb74affb25d74025bff71fd248b52736c60e"}) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, 0x0, 0x69) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xd546014d3177070c}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2f0, 0x130, 0x7203, 0x148, 0x130, 0x148, 0x258, 0x240, 0x240, 0x258, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 3.044257328s ago: executing program 0 (id=8775): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0x4) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="400100001000010000000000000000d755f39c395818a12635cfa89f895af0d506c0b9e50000000000000000000000000000000000fe8000000000000000000000000000aa00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001000000006c000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000800180000000080480003006465666c61746500"/248], 0x140}}, 0x0) unshare(0x8040480) shutdown(0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x46d39000) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x4, 0x0, &(0x7f0000000e40)) socket$inet6_sctp(0xa, 0x35843b7e498939fb, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974790000f7ff000000000000000000000000004e00020000000000000000000000000000000000000000000000005300"/72], 0x48) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000008000000000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00'}, 0x80) unshare(0x200) epoll_pwait(0xffffffffffffffff, 0xffffffffffffffff, 0x3e, 0x0, &(0x7f0000000000), 0x8) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000100)={0x4a, 0x101, 0x7, 0xa, 0x8f}) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x17, 0x0, &(0x7f00000000c0)) 2.627622138s ago: executing program 2 (id=9053): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=@gettaction={0x24, 0x32, 0x0, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x564}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x2000}, 0x10bc}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.627305277s ago: executing program 1 (id=9054): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000840)=ANY=[@ANYBLOB="bbbbbbbbbbbbfffffb88000086dd60f6690900482f00fc020000000000000000000000000000ff020000000000000000000000000001242088a800000000000a000000000800000086dd08"], 0x0) 2.552312533s ago: executing program 1 (id=9055): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x1, @local}}, 0x1e) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r3 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030021000b63d25a80648c2594f90124fc60350c030b022e0009083582c137153e370248078000f01708d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x50040080}, 0x40844) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="58000000190a01020000000000000000000000000900010073797a3000000000000006008af74402e7bebf2554e6e91481fd5f1ffe1f3c7645183b4d44a4c836c964e41bfe887f1633eb945f4e7c43da6f1acc7d540600000000000000c649bc41b2072c874a71b8b9335974"], 0x58}}, 0x0) 688.347209ms ago: executing program 2 (id=9056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x5, 0x0, 0x2000000, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x58}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3e0, 0x0, 0x1f8, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x4, &(0x7f0000000280), {[{{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xff, 0x1, 0x7, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x400, 0x9, 0xc000, 0x0, 0x3f, 'veth1_virt_wifi\x00', 'veth0_virt_wifi\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x4, 0xffffffff}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@arp={@empty, @remote, 0x0, 0x0, 0xa, 0x8, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x0, 0x3ff, 0x8001, 0x6, 0x3, 0x8, 'pim6reg1\x00', 'team_slave_0\x00', {}, {}, 0x0, 0x1}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "17c5790b3a882468546b068c6a619f9fe011b59100d77a94c328f0e85ece"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x8}, 0x48) r2 = socket$inet(0x2, 0x6, 0x0) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000000)="8bea030401", 0x5) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x29) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000800)=0x9, 0x4) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r4, 0x8934, &(0x7f0000000c00)) bind$bt_hci(0xffffffffffffffff, &(0x7f00000007c0)={0x1f, 0x3}, 0x6) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f00000002c0)={'broute\x00', 0x0, 0x0, 0x0, [0x20, 0x0, 0xdb09, 0xfffffffffffff801, 0x4]}, &(0x7f0000000340)=0x78) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r5, &(0x7f00000000c0)={0x10, 0x2}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 687.726149ms ago: executing program 4 (id=9057): socket$kcm(0x10, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x11fa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="022786dd02ec2800030030000000600000060100040081e949b938a9bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 513.411193ms ago: executing program 1 (id=9058): socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b4090a79507df79f298129da487130d5f24b46001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad379e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee293fbd165a5a68488a010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a18159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7962b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac2bba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f407000000000000006d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab669ab377e4c2422a47e9ffe2d4a2d32f7528751313694bf57704400b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6940b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d30902208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c8000000000000003a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f000000000facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296115d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc05000000000000006c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a4619a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806b90cc39c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d3133319e069f9648a2ff93060ff073b3a113e47e447c030931651dd315003b7a6a47c912853826c4c65433a2bb560ae99ec4b227eda2e63a1cb1a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e5f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec90f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754c68b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8adbd2c2604eab3a62a28611da1dae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412cbbdebae06edb51a134301d2627d4927287daf9dcae6720334862d3a18094f1edd9e350337cbb804004d1755cfe7d7fa01872fb99815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2b63a6038ab5546ba1e5ad6a329f2c627100e0442f865fc6c179ad3edcb6b000000000000000b0000000000000000ac192d48d76e2a8cae83ae850f73fdfbaca81b6b7b1a0d7b517f41fbd46aa24b0f4b8e0202e3a580947f1925ba4de097e8dcb6bd7f686322b45d4a544ca1e83b592d4a6d46d0a0dc39634550bc77d4cabba01b283082e66778de7c61a1a36838d36c2f8e58cef603770ee3d6a9625be0bc21d2be2da69ac9e9c5e88278d39239501b465102ad16d651ea8bb8cee35527c1ad42ac6a565e449929ccb4469bdd6824b64e13579b7188566e735200000000000000000094e05bcda1e96e4c33ccf6d74046e45bafe9d512c43a3e485dedad9a38b34f7fcd00fafcc25dc36716f0e21e0632425b7a1c1a6bc15c3fc07d914c88103411d8d2b77b72a796fd3aaa7ea493c7bc43e63b2b0d05ad5682121682096b224933fa20255d58a680cc2ec200"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) (async) socket(0x10, 0x80002, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x15, 0x800, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000010400000600"/32], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0xfffffffffffffe06, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r4}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10) (async, rerun: 64) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x21, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff05007f0000180000000000003ea5a22bfbf471d0c9a59d5daf63a3bd91a6cd6de81b0d3b3d5714130511a5eb3f327326435d9117b5ba6fb3e8cbc5f95d", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000ff000000001811000019750634c60b9af3da865697e16c43561261cb724ee1603d30fc2f6b1b57868d10790e58417865a287ca97dd9c6bea30ce3f62816e4748811072405115fa0f18c84cf2", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000afa272c4007c56ff0017e5e31e52ce53710f15f57bea60b6321c88af5a3f3d5e49fe34b4e50a5e2ce194a8028b3d587815124e2ccc91eb71ac13c85fae90320a4ee4473491bb6c32be018c3c537f5beaef092703813ec6688c610744e12fbb7236f2fea04e75bdff833bb005df418349e830d98cd1dcf3fde57810bc50aac86d915b83b6585fff786a9f3056a290bfadf2269dd2a4d72a85e6d365e37d1f9eab1933fd5d0b3c7159544aa6d2a117bff5da982bdf4dedf0ff5b891349fcd77b9fb549b2f3c3413736d746dd8bdf8f9fad72c9e610a593f6765d26b05888d79ee0105ad427fc5b", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f00800fee0ffff00124000632177fbac1414ac14141644", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="7c02000000000000000000000000000085000000221c00009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) 455.029879ms ago: executing program 2 (id=9059): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x18, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 284.230383ms ago: executing program 1 (id=9060): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@mpls_getroute={0x24, 0x1a, 0x803, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x4}, [@RTA_DST={0x8, 0x1, {0x61}}]}, 0x24}}, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040), 0x12) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x20}, 0xc) 283.642491ms ago: executing program 2 (id=9061): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x88) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400"/11], 0x18}}], 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) openat$cgroup_type(r6, &(0x7f0000000200), 0x2, 0x0) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000000)={0x0, 0xffffffffffffff63, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020301010000000000000000f20000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000840}, 0x8000) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000580)={0x1d, 0x0, 0x2, {0x2, 0xff, 0x1}, 0xfd}, 0x18) recvmsg(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)=""/27, 0x1b}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000500)={&(0x7f0000000300), 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xbc, 0x0, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_NAT_DST={0x98, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @empty}}, @CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x100}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4081}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000100)={0x24, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_MASK={0x8}]}, 0x24}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r7}]}, {0xc88}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000080)=[@in={0x2, 0x0, @private}]}, &(0x7f0000000100)=0x10) 188.377405ms ago: executing program 4 (id=9062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) socket(0xf, 0xf, 0xfffffffb) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x50}}, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@call, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) close(r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r4, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0xd27}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000380)="1695", 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x9, &(0x7f0000000340)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000003c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000000640)=""/195, 0x41100, 0x4, '\x00', r5, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[r4, r4, r4, r6], 0x0, 0x10, 0x7}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r7}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000200), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x7, 0x2}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r9, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x5, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x70}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x7c}}, 0x0) 174.413164ms ago: executing program 2 (id=9063): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x18, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d65746100000000140002800800014000000012080002400000000014000000fe1f01"], 0xd8}}, 0x0) 75.88524ms ago: executing program 4 (id=9064): socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x2e1e}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40850) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r2, 0x1, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000800)={0x0, 0x400300, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x900, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) r8 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="17ac989e01000100000000000000009427571aa1c0d5bd0335ffffff7f47e6027080537cd04ab80f5e0d0f74ae5344c329ea0979", @ANYRES64=r0, @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x804}, 0x0) bind$inet6(r6, &(0x7f0000000240)={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001900010000001000000000000a000000000000000000000008001700ffffffff060015"], 0x40}}, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000110020850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 2 (id=9065): socket(0x2, 0x801, 0x100) (fail_nth: 6) kernel console output (not intermixed with test programs): T31769] ? clear_bhb_loop+0x35/0x90 [ 732.291278][T31769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.297164][T31769] RIP: 0033:0x7f2db8575bd9 [ 732.301572][T31769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 732.321181][T31769] RSP: 002b:00007f2db93c4048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 732.329591][T31769] RAX: ffffffffffffffda RBX: 00007f2db8703f60 RCX: 00007f2db8575bd9 [ 732.337564][T31769] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000c [ 732.345527][T31769] RBP: 00007f2db93c40a0 R08: 0000000000000000 R09: 0000000000000000 [ 732.353497][T31769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 732.361463][T31769] R13: 000000000000004d R14: 00007f2db8703f60 R15: 00007ffdb1ae8988 [ 732.369446][T31769] [ 732.676149][T31792] nbd: must specify at least one socket [ 732.761527][T31792] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 732.803208][T31792] macvtap2: entered promiscuous mode [ 732.825761][T31792] macvtap2: entered allmulticast mode [ 732.837214][T31797] syz_tun: entered allmulticast mode [ 732.875644][T31797] syz_tun: left allmulticast mode [ 733.536003][T31849] netlink: 'syz.3.8535': attribute type 16 has an invalid length. [ 733.551888][T31849] netlink: 'syz.3.8535': attribute type 17 has an invalid length. [ 734.020808][T31868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.223245][T31886] __nla_validate_parse: 16 callbacks suppressed [ 734.223269][T31886] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8545'. [ 734.308660][T31893] FAULT_INJECTION: forcing a failure. [ 734.308660][T31893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 734.329697][T31893] CPU: 0 PID: 31893 Comm: syz.4.8548 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 [ 734.339922][T31893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 734.350007][T31893] Call Trace: [ 734.353307][T31893] [ 734.356254][T31893] dump_stack_lvl+0x241/0x360 [ 734.360967][T31893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 734.366190][T31893] ? __pfx__printk+0x10/0x10 [ 734.370346][T31890] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8547'. [ 734.370790][T31893] ? snprintf+0xda/0x120 [ 734.383978][T31893] should_fail_ex+0x3b0/0x4e0 [ 734.388685][T31893] _copy_to_user+0x2f/0xb0 [ 734.393125][T31893] simple_read_from_buffer+0xca/0x150 [ 734.398620][T31893] proc_fail_nth_read+0x1e9/0x250 [ 734.403667][T31893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.409239][T31893] ? rw_verify_area+0x520/0x6b0 [ 734.414115][T31893] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 734.419683][T31893] vfs_read+0x204/0xbc0 [ 734.423843][T31893] ? __pfx_lock_release+0x10/0x10 [ 734.428894][T31893] ? __pfx_vfs_read+0x10/0x10 [ 734.433589][T31893] ? __fget_files+0x29/0x470 [ 734.438180][T31893] ? __fget_files+0x3f6/0x470 [ 734.442864][T31893] ksys_read+0x1a0/0x2c0 [ 734.447105][T31893] ? __pfx_ksys_read+0x10/0x10 [ 734.451866][T31893] ? do_syscall_64+0x100/0x230 [ 734.456713][T31893] ? do_syscall_64+0xb6/0x230 [ 734.461392][T31893] do_syscall_64+0xf3/0x230 [ 734.465899][T31893] ? clear_bhb_loop+0x35/0x90 [ 734.470576][T31893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.476463][T31893] RIP: 0033:0x7ff9b8f746bc [ 734.480880][T31893] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 734.500574][T31893] RSP: 002b:00007ff9b9de6040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 734.508985][T31893] RAX: ffffffffffffffda RBX: 00007ff9b9103f60 RCX: 00007ff9b8f746bc [ 734.516948][T31893] RDX: 000000000000000f RSI: 00007ff9b9de60b0 RDI: 0000000000000005 [ 734.524910][T31893] RBP: 00007ff9b9de60a0 R08: 0000000000000000 R09: 0000000000000014 [ 734.532873][T31893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 734.540835][T31893] R13: 000000000000000b R14: 00007ff9b9103f60 R15: 00007ffd89e77968 [ 734.548818][T31893] [ 734.708696][T31900] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8550'. [ 734.850045][T31909] netlink: 'syz.1.8553': attribute type 1 has an invalid length. [ 734.958885][T31917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8556'. [ 734.993701][T31917] ip6gretap0: entered promiscuous mode [ 735.014287][T31917] macvtap1: entered promiscuous mode [ 735.035815][T31917] macvtap1: entered allmulticast mode [ 735.048876][T31917] ip6gretap0: entered allmulticast mode [ 735.134182][T31926] netlink: 277 bytes leftover after parsing attributes in process `syz.0.8560'. [ 735.240662][T31929] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8561'. [ 735.347164][T31941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8564'. [ 735.357985][T31941] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8564'. [ 735.409617][T31943] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8565'. [ 736.072989][T31972] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8575'. [ 736.172950][T31973] bond5: entered promiscuous mode [ 736.200566][T31976] bridge13: the hash_elasticity option has been deprecated and is always 16 [ 736.221479][T31976] bridge13: entered promiscuous mode [ 736.230212][T31976] bond5: (slave bridge13): Enslaving as an active interface with an up link [ 736.247286][T31973] bond5 (unregistering): (slave bridge13): Releasing backup interface [ 736.291635][T31973] bridge13: left promiscuous mode [ 736.334534][T31973] bond5 (unregistering): Released all slaves [ 736.348927][T31985] xt_socket: unknown flags 0x8 [ 736.435439][T31982] netlink: 'syz.1.8581': attribute type 10 has an invalid length. [ 736.456343][T31982] macvlan0: entered promiscuous mode [ 736.478898][T31982] macvlan0: entered allmulticast mode [ 736.522476][T31982] veth1_vlan: entered allmulticast mode [ 736.574977][T31982] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 736.609925][T31992] netlink: 'syz.0.8584': attribute type 2 has an invalid length. [ 736.644307][T31992] netlink: 'syz.0.8584': attribute type 1 has an invalid length. [ 736.743387][ T8152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.040339][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 737.112239][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 737.122138][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 737.131416][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 737.140143][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 737.148236][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 737.266318][ T8152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.464121][ T8152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.609548][T32024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 737.641730][ T8152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.954672][ T8152] bridge_slave_0: left allmulticast mode [ 737.975492][ T8152] bridge_slave_0: left promiscuous mode [ 737.995269][ T8152] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.050802][ T8152] veth1_to_bond: left allmulticast mode [ 738.080968][ T8152] veth1_to_bond: left promiscuous mode [ 738.086670][ T8152] bridge1: port 1(veth1_to_bond) entered disabled state [ 738.496407][ T8152] ip6gretap0 (unregistering): left allmulticast mode [ 739.184753][ T8152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.196351][ T8152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.221822][ T8152] bond0 (unregistering): Released all slaves [ 739.236302][T32005] caif0 speed is unknown, defaulting to 1000 [ 739.243885][T32047] __nla_validate_parse: 17 callbacks suppressed [ 739.243903][T32047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8601'. [ 739.298216][ T5106] Bluetooth: hci3: command tx timeout [ 739.495228][T32058] tipc: Started in network mode [ 739.500317][T32058] tipc: Node identity 1, cluster identity 2 [ 739.517480][T32058] tipc: Node number set to 1 [ 739.522360][T32058] tipc: Cannot configure node identity twice [ 739.552706][T32060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8605'. [ 739.754304][T32070] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8607'. [ 739.845179][T32016] caif0 speed is unknown, defaulting to 1000 [ 740.655059][T32090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8613'. [ 740.669556][T32094] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8614'. [ 740.826607][T32097] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8615'. [ 740.932319][T32096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8614'. [ 740.971404][T32094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8614'. [ 741.008798][T32100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8615'. [ 741.226306][T32108] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8618'. [ 741.285014][ T8152] hsr_slave_0: left promiscuous mode [ 741.310912][ T8152] hsr_slave_1: left promiscuous mode [ 741.326071][ T8152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.339227][ T8152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.353002][ T8152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.367719][ T5106] Bluetooth: hci3: command tx timeout [ 741.378403][ T8152] veth1_macvtap: left promiscuous mode [ 741.384116][ T8152] veth0_macvtap: left promiscuous mode [ 741.390480][ T8152] veth1_vlan: left promiscuous mode [ 741.395836][ T8152] veth0_vlan: left promiscuous mode [ 741.986749][ T8152] team0 (unregistering): Port device team_slave_1 removed [ 742.037397][ T8152] team0 (unregistering): Port device team_slave_0 removed [ 742.539582][T32116] tipc: Started in network mode [ 742.559879][T32116] tipc: Node identity ac1414aa, cluster identity 4711 [ 742.570458][T32116] tipc: New replicast peer: 0.0.0.0 [ 742.586666][T32116] tipc: Enabled bearer , priority 10 [ 742.665655][T32005] chnl_net:caif_netlink_parms(): no params data found [ 743.094792][T32005] bridge0: port 1(bridge_slave_0) entered blocking state [ 743.115733][T32005] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.137679][T32005] bridge_slave_0: entered allmulticast mode [ 743.146464][T32005] bridge_slave_0: entered promiscuous mode [ 743.190274][T32005] bridge0: port 2(bridge_slave_1) entered blocking state [ 743.207676][T32005] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.215108][T32005] bridge_slave_1: entered allmulticast mode [ 743.224463][T32005] bridge_slave_1: entered promiscuous mode [ 743.360252][T32005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 743.421319][T32005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 743.448312][ T5106] Bluetooth: hci3: command tx timeout [ 743.544376][T32005] team0: Port device team_slave_0 added [ 743.596414][T32005] team0: Port device team_slave_1 added [ 743.650242][ T5142] tipc: Node number set to 2886997162 [ 743.689111][T32005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 743.710342][T32005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.756799][T32005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 743.786412][T32005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 743.796730][T32005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 743.825303][T32005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.928701][T32005] hsr_slave_0: entered promiscuous mode [ 743.939292][T32005] hsr_slave_1: entered promiscuous mode [ 743.955214][T32005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.970171][T32005] Cannot create hsr debugfs directory [ 744.014409][T32181] netlink: 'syz.1.8639': attribute type 1 has an invalid length. [ 744.038470][T32182] netlink: 'syz.1.8639': attribute type 1 has an invalid length. [ 744.128421][T32187] Bluetooth: MGMT ver 1.22 [ 744.631368][T32219] __nla_validate_parse: 12 callbacks suppressed [ 744.631390][T32219] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8649'. [ 744.862780][T32228] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8653'. [ 745.038872][T32240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8653'. [ 745.056858][T32005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 745.074692][T32005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 745.114116][T32005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 745.164431][T32005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 745.528633][ T5106] Bluetooth: hci3: command tx timeout [ 745.562958][T32005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.611427][T32005] 8021q: adding VLAN 0 to HW filter on device team0 [ 745.631017][T32262] netlink: 'syz.0.8663': attribute type 8 has an invalid length. [ 745.661016][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.668246][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 745.713273][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.720475][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.805453][T32270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 745.821302][T32005] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 746.017894][T32281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8669'. [ 746.135473][T32281] veth1_to_bond: left allmulticast mode [ 746.149847][T32281] veth1_to_bond: left promiscuous mode [ 746.163550][T32281] bridge12: port 1(veth1_to_bond) entered disabled state [ 746.184225][T32292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8670'. [ 746.222849][T32281] bridge14: port 1(veth1_to_bond) entered blocking state [ 746.232006][T32281] bridge14: port 1(veth1_to_bond) entered disabled state [ 746.242669][T32281] veth1_to_bond: entered allmulticast mode [ 746.251403][T32281] veth1_to_bond: entered promiscuous mode [ 746.342260][T32005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.497289][T32005] veth0_vlan: entered promiscuous mode [ 746.544535][T32302] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8675'. [ 746.555479][T32005] veth1_vlan: entered promiscuous mode [ 746.584413][T32303] netlink: 'syz.4.8674': attribute type 8 has an invalid length. [ 746.698584][T32309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8678'. [ 746.747956][T32005] veth0_macvtap: entered promiscuous mode [ 746.771693][T32005] veth1_macvtap: entered promiscuous mode [ 746.863396][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.918023][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.931378][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.945888][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.959131][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 746.972817][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 746.983531][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.004448][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.017490][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.042119][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.061793][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.094368][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.117376][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.139255][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.164093][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.180334][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.195671][T32005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.233979][T32302] caif0 speed is unknown, defaulting to 1000 [ 747.260456][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.315254][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.377669][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.399076][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.417405][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.440361][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.460839][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.472884][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.483279][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.494567][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.567527][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.593695][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.613433][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.637475][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.649647][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.671065][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.682000][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.692914][T32005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.703669][T32005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.716707][T32005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.752282][T32005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.783045][T32005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.792075][T32005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.807842][T32005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.972995][T32347] netlink: 'syz.0.8687': attribute type 1 has an invalid length. [ 748.086380][T32349] netlink: 'syz.4.8688': attribute type 33 has an invalid length. [ 748.096567][T32349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8688'. [ 748.124321][T32349] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 748.199542][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.225167][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.322023][T32352] netlink: 'syz.4.8689': attribute type 8 has an invalid length. [ 748.425653][ T8160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.456872][ T8160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.954732][T32382] netlink: 80 bytes leftover after parsing attributes in process `syz.2.8697'. [ 749.230740][T32393] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8700'. [ 749.247031][T32382] caif0 speed is unknown, defaulting to 1000 [ 749.959902][T32415] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8709'. [ 750.197213][T32429] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8713'. [ 750.793862][T32455] bond0: entered promiscuous mode [ 750.801720][T32455] bond_slave_0: entered promiscuous mode [ 750.827209][T32455] bond_slave_1: entered promiscuous mode [ 750.845863][T32455] team1: entered promiscuous mode [ 750.860796][T32455] team2: entered promiscuous mode [ 750.872822][T32455] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 750.885303][T32455] team3: entered promiscuous mode [ 750.899543][T32455] bond2: entered promiscuous mode [ 750.915680][T32455] bond3: entered promiscuous mode [ 751.065252][T25530] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.113927][T32471] bridge0: left promiscuous mode [ 751.120140][T32471] bridge0: entered allmulticast mode [ 751.132184][T32474] pim6reg: entered allmulticast mode [ 751.142370][T32471] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.149558][T32471] bridge0: port 1(bridge_slave_0) entered listening state [ 751.167858][T32471] bridge0: entered promiscuous mode [ 751.434762][T32484] netlink: 356 bytes leftover after parsing attributes in process `syz.2.8732'. [ 751.597862][T32491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8734'. [ 751.726101][T32495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8737'. [ 751.789890][T25530] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.809139][ T4490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 751.820215][T32501] FAULT_INJECTION: forcing a failure. [ 751.820215][T32501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.827212][T32504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 751.835388][ T4490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 751.851342][T32501] CPU: 0 PID: 32501 Comm: syz.2.8739 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 [ 751.861530][T32501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 751.871604][T32501] Call Trace: [ 751.874904][T32501] [ 751.877850][T32501] dump_stack_lvl+0x241/0x360 [ 751.879417][T32509] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8738'. [ 751.882539][T32501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 751.896569][T32501] ? __pfx__printk+0x10/0x10 [ 751.901174][T32501] ? snprintf+0xda/0x120 [ 751.905420][T32501] should_fail_ex+0x3b0/0x4e0 [ 751.910104][T32501] _copy_to_user+0x2f/0xb0 [ 751.914513][T32501] simple_read_from_buffer+0xca/0x150 [ 751.919885][T32501] proc_fail_nth_read+0x1e9/0x250 [ 751.924902][T32501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.930440][T32501] ? rw_verify_area+0x520/0x6b0 [ 751.935281][T32501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 751.940816][T32501] vfs_read+0x204/0xbc0 [ 751.944963][T32501] ? __pfx_lock_release+0x10/0x10 [ 751.949984][T32501] ? __pfx_vfs_read+0x10/0x10 [ 751.954653][T32501] ? __fget_files+0x29/0x470 [ 751.959237][T32501] ? __fget_files+0x3f6/0x470 [ 751.963919][T32501] ksys_read+0x1a0/0x2c0 [ 751.968159][T32501] ? __pfx_ksys_read+0x10/0x10 [ 751.972915][T32501] ? do_syscall_64+0x100/0x230 [ 751.977675][T32501] ? do_syscall_64+0xb6/0x230 [ 751.982345][T32501] do_syscall_64+0xf3/0x230 [ 751.986837][T32501] ? clear_bhb_loop+0x35/0x90 [ 751.991508][T32501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.997398][T32501] RIP: 0033:0x7f6ca21746bc [ 752.001806][T32501] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 752.021411][T32501] RSP: 002b:00007f6ca2e68040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 752.029822][T32501] RAX: ffffffffffffffda RBX: 00007f6ca2303f60 RCX: 00007f6ca21746bc [ 752.037786][T32501] RDX: 000000000000000f RSI: 00007f6ca2e680b0 RDI: 0000000000000004 [ 752.045746][T32501] RBP: 00007f6ca2e680a0 R08: 0000000000000000 R09: 0000000000000000 [ 752.053706][T32501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 752.061662][T32501] R13: 000000000000000b R14: 00007f6ca2303f60 R15: 00007ffc371ec0b8 [ 752.069640][T32501] [ 752.099140][ T4490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 752.112279][ T4490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 752.125723][ T4490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 752.133344][ T4490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 752.281002][T25530] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.367887][T32520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8744'. [ 752.432977][T32523] netlink: 356 bytes leftover after parsing attributes in process `syz.0.8746'. [ 752.468025][T25530] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.499887][T32520] veth1_to_bond: left allmulticast mode [ 752.521732][T32520] veth1_to_bond: left promiscuous mode [ 752.535569][T32520] bridge2: port 1(veth1_to_bond) entered disabled state [ 752.559579][T32520] bridge3: port 1(veth1_to_bond) entered blocking state [ 752.568196][T32520] bridge3: port 1(veth1_to_bond) entered disabled state [ 752.575400][T32520] veth1_to_bond: entered allmulticast mode [ 752.590201][T32520] veth1_to_bond: entered promiscuous mode [ 752.597311][T32520] bridge3: port 1(veth1_to_bond) entered blocking state [ 752.604691][T32520] bridge3: port 1(veth1_to_bond) entered forwarding state [ 752.918088][T25530] bridge_slave_1: left allmulticast mode [ 752.924585][T25530] bridge_slave_1: left promiscuous mode [ 752.950680][T25530] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.980019][T25530] bridge_slave_0: left allmulticast mode [ 753.007625][T25530] bridge_slave_0: left promiscuous mode [ 753.013411][T25530] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.697789][T25530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.718943][T25530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.740806][T25530] bond0 (unregistering): Released all slaves [ 753.776067][T32537] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8750'. [ 753.798342][T32502] caif0 speed is unknown, defaulting to 1000 [ 753.969303][T32560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8757'. [ 754.176828][T32573] FAULT_INJECTION: forcing a failure. [ 754.176828][T32573] name failslab, interval 1, probability 0, space 0, times 0 [ 754.278261][T32573] CPU: 0 PID: 32573 Comm: syz.0.8762 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 [ 754.288461][T32573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 754.298520][T32573] Call Trace: [ 754.301802][T32573] [ 754.304737][T32573] dump_stack_lvl+0x241/0x360 [ 754.309433][T32573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.314638][T32573] ? __pfx__printk+0x10/0x10 [ 754.319238][T32573] ? __pfx___might_resched+0x10/0x10 [ 754.324539][T32573] should_fail_ex+0x3b0/0x4e0 [ 754.329237][T32573] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 754.334962][T32573] should_failslab+0x9/0x20 [ 754.339467][T32573] __kmalloc_noprof+0xd8/0x400 [ 754.344231][T32573] ? kfree+0x4e/0x360 [ 754.348222][T32573] tomoyo_realpath_from_path+0xcf/0x5e0 [ 754.353788][T32573] tomoyo_path_number_perm+0x23a/0x880 [ 754.359263][T32573] ? tomoyo_path_number_perm+0x208/0x880 [ 754.364906][T32573] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 754.370940][T32573] ? __fget_files+0x29/0x470 [ 754.375545][T32573] ? __fget_files+0x3f6/0x470 [ 754.380226][T32573] ? __fget_files+0x29/0x470 [ 754.384830][T32573] security_file_ioctl+0x75/0xb0 [ 754.389784][T32573] __se_sys_ioctl+0x47/0x170 [ 754.394382][T32573] do_syscall_64+0xf3/0x230 [ 754.398892][T32573] ? clear_bhb_loop+0x35/0x90 [ 754.403579][T32573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.409476][T32573] RIP: 0033:0x7f15ef975bd9 [ 754.413899][T32573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.433524][T32573] RSP: 002b:00007f15f069e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.441970][T32573] RAX: ffffffffffffffda RBX: 00007f15efb03f60 RCX: 00007f15ef975bd9 [ 754.447303][ T4490] Bluetooth: hci3: command tx timeout [ 754.449939][T32573] RDX: 0000000020000040 RSI: 0000000000008b32 RDI: 0000000000000004 [ 754.463686][T32573] RBP: 00007f15f069e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 754.471675][T32573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.479657][T32573] R13: 000000000000000b R14: 00007f15efb03f60 R15: 00007ffcebf2d988 [ 754.487649][T32573] [ 754.525969][T32573] ERROR: Out of memory at tomoyo_realpath_from_path. [ 754.621720][T32586] FAULT_INJECTION: forcing a failure. [ 754.621720][T32586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.635009][T32586] CPU: 1 PID: 32586 Comm: syz.1.8766 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 [ 754.645184][T32586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 754.655250][T32586] Call Trace: [ 754.658524][T32586] [ 754.661439][T32586] dump_stack_lvl+0x241/0x360 [ 754.666108][T32586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.671297][T32586] ? __pfx__printk+0x10/0x10 [ 754.675882][T32586] ? snprintf+0xda/0x120 [ 754.680116][T32586] should_fail_ex+0x3b0/0x4e0 [ 754.684783][T32586] _copy_to_user+0x2f/0xb0 [ 754.689200][T32586] simple_read_from_buffer+0xca/0x150 [ 754.694600][T32586] proc_fail_nth_read+0x1e9/0x250 [ 754.699645][T32586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 754.705196][T32586] ? rw_verify_area+0x520/0x6b0 [ 754.710042][T32586] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 754.715590][T32586] vfs_read+0x204/0xbc0 [ 754.719745][T32586] ? __pfx_vfs_read+0x10/0x10 [ 754.724418][T32586] ? get_timespec64+0x19c/0x280 [ 754.729265][T32586] ksys_read+0x1a0/0x2c0 [ 754.733496][T32586] ? __pfx_ksys_read+0x10/0x10 [ 754.738257][T32586] ? do_syscall_64+0x100/0x230 [ 754.743036][T32586] ? do_syscall_64+0xb6/0x230 [ 754.747730][T32586] do_syscall_64+0xf3/0x230 [ 754.752243][T32586] ? clear_bhb_loop+0x35/0x90 [ 754.756911][T32586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.762789][T32586] RIP: 0033:0x7f2db85746bc [ 754.767190][T32586] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 754.786790][T32586] RSP: 002b:00007f2db93c4040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 754.795210][T32586] RAX: ffffffffffffffda RBX: 00007f2db8703f60 RCX: 00007f2db85746bc [ 754.803188][T32586] RDX: 000000000000000f RSI: 00007f2db93c40b0 RDI: 0000000000000004 [ 754.811145][T32586] RBP: 00007f2db93c40a0 R08: 0000000000000000 R09: 0000000000000000 [ 754.819101][T32586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 754.827069][T32586] R13: 000000000000004d R14: 00007f2db8703f60 R15: 00007ffdb1ae8988 [ 754.835068][T32586] [ 754.895819][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 754.895839][ T29] audit: type=1107 audit(1720968871.117:52): pid=32582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¢¯}k˜ðh¦nYöûAgGk4ÁžŒÍÙ¡,wQ79SçN`æã>ääßÂÙQÎ+6*ÖìD;VŒó?¯ôÓùMÒlŸ'Í2WyýÙŸÍv“Ê}´"r¢¢ë˜=!½F%3YH¹¦—ÃÁÒ"¯h8Ör¬˜HfOñ†5\c¾g,ùh¹ˆ [ 754.895839][ T29] …Ýb$æBC6GŽƒ™¥£MYÁ;Å!"\ÒWð' [ 755.101693][T32593] dccp_invalid_packet: P.Data Offset(172) too large [ 755.234137][T32599] FAULT_INJECTION: forcing a failure. [ 755.234137][T32599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 755.265038][T32599] CPU: 1 PID: 32599 Comm: syz.1.8771 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 [ 755.275233][T32599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 755.285301][T32599] Call Trace: [ 755.288589][T32599] [ 755.291529][T32599] dump_stack_lvl+0x241/0x360 [ 755.296229][T32599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 755.301460][T32599] ? __pfx__printk+0x10/0x10 [ 755.306075][T32599] should_fail_ex+0x3b0/0x4e0 [ 755.310782][T32599] _copy_from_user+0x2f/0xe0 [ 755.315389][T32599] move_addr_to_kernel+0x82/0x150 [ 755.320429][T32599] __sys_sendto+0x2a3/0x4f0 [ 755.324958][T32599] ? __pfx___sys_sendto+0x10/0x10 [ 755.330039][T32599] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 755.336050][T32599] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 755.342394][T32599] __x64_sys_sendto+0xde/0x100 [ 755.347175][T32599] do_syscall_64+0xf3/0x230 [ 755.351693][T32599] ? clear_bhb_loop+0x35/0x90 [ 755.356396][T32599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.362301][T32599] RIP: 0033:0x7f2db857796c [ 755.366737][T32599] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 755.386360][T32599] RSP: 002b:00007f2db93c2ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 755.394796][T32599] RAX: ffffffffffffffda RBX: 00007f2db93c2fd0 RCX: 00007f2db857796c [ 755.402771][T32599] RDX: 0000000000000024 RSI: 00007f2db93c3020 RDI: 0000000000000005 [ 755.410744][T32599] RBP: 0000000000000000 R08: 00007f2db93c2f24 R09: 000000000000000c [ 755.418728][T32599] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 755.426696][T32599] R13: 00007f2db93c2f78 R14: 00007f2db93c3020 R15: 0000000000000000 [ 755.434665][T32599] [ 755.446072][T32595] netlink: 'syz.2.8770': attribute type 2 has an invalid length. [ 755.657275][T25530] hsr_slave_0: left promiscuous mode [ 755.675941][T25530] hsr_slave_1: left promiscuous mode [ 755.684766][T25530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 755.719614][T25530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 755.760383][T25530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 755.768465][T25530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 755.827292][T25530] veth1_macvtap: left promiscuous mode [ 755.843533][T25530] veth0_macvtap: left promiscuous mode [ 755.853325][T25530] veth1_vlan: left promiscuous mode [ 755.865717][T25530] veth0_vlan: left promiscuous mode [ 756.096245][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 756.106951][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 756.115922][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 756.128540][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 756.136286][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 756.143849][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 756.491433][ T4490] Bluetooth: hci3: command tx timeout [ 756.588517][T25530] team0 (unregistering): Port device team_slave_1 removed [ 756.644084][T25530] team0 (unregistering): Port device team_slave_0 removed [ 757.082678][T32502] chnl_net:caif_netlink_parms(): no params data found [ 757.320124][T32625] No such timeout policy "syz0" [ 757.461997][T32630] tipc: New replicast peer: 0.0.0.0 [ 757.479240][T32630] tipc: Enabled bearer , priority 10 [ 757.516227][T32502] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.527513][T32502] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.534837][T32502] bridge_slave_0: entered allmulticast mode [ 757.555937][T32502] bridge_slave_0: entered promiscuous mode [ 757.608960][T32502] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.643300][T32502] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.661577][T32502] bridge_slave_1: entered allmulticast mode [ 757.677746][T32502] bridge_slave_1: entered promiscuous mode [ 757.746015][T32641] netlink: 'syz.1.8783': attribute type 3 has an invalid length. [ 757.812231][T32502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.825775][T32644] __nla_validate_parse: 1 callbacks suppressed [ 757.825794][T32644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8785'. [ 757.856142][T32502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.876242][T32615] caif0 speed is unknown, defaulting to 1000 [ 757.976067][T32502] team0: Port device team_slave_0 added [ 758.027662][T32502] team0: Port device team_slave_1 added [ 758.198397][T25530] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.235147][T32502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.243384][T32502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.269780][ T4490] Bluetooth: hci0: command tx timeout [ 758.288419][T32502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.413129][T25530] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.459574][T32502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 758.466626][T32502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 758.494216][T32502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 758.555857][T25530] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.567739][ T4490] Bluetooth: hci3: command tx timeout [ 758.601694][T32668] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8792'. [ 758.680796][T25530] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.724860][T32502] hsr_slave_0: entered promiscuous mode [ 758.733350][T32502] hsr_slave_1: entered promiscuous mode [ 758.746697][T32502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.754465][T32502] Cannot create hsr debugfs directory [ 759.114379][T25530] bridge_slave_0: left allmulticast mode [ 759.123687][T25530] bridge_slave_0: left promiscuous mode [ 759.130623][T25530] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.245737][T32685] netlink: 644 bytes leftover after parsing attributes in process `syz.4.8797'. [ 759.666610][T25530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 759.676306][T25530] bond_slave_0: left promiscuous mode [ 759.685312][T25530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.698584][T25530] bond_slave_1: left promiscuous mode [ 759.708606][T25530] bond0 (unregistering): Released all slaves [ 759.722552][T25530] bond1 (unregistering): Released all slaves [ 759.808969][T32615] chnl_net:caif_netlink_parms(): no params data found [ 759.911803][T25530] tipc: Left network mode [ 760.218364][T32705] netlink: 'syz.1.8801': attribute type 4 has an invalid length. [ 760.238270][T32615] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.245392][T32615] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.274972][T32615] bridge_slave_0: entered allmulticast mode [ 760.283214][T32615] bridge_slave_0: entered promiscuous mode [ 760.292759][T32615] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.302270][T32615] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.310783][T32615] bridge_slave_1: entered allmulticast mode [ 760.318692][T32615] bridge_slave_1: entered promiscuous mode [ 760.328143][ T4490] Bluetooth: hci0: command tx timeout [ 760.428847][T32694] caif0 speed is unknown, defaulting to 1000 [ 760.479092][T32615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 760.498345][T32615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 760.658091][ T4490] Bluetooth: hci3: command tx timeout [ 760.723443][T32615] team0: Port device team_slave_0 added [ 760.791577][T32615] team0: Port device team_slave_1 added [ 760.847667][T32502] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 761.066993][T32718] xt_hashlimit: max too large, truncated to 1048576 [ 761.171868][T32502] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 761.219009][T32718] xt_socket: unknown flags 0x4 [ 761.252707][T32722] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8803'. [ 761.280509][T32615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.288192][T32615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 761.315315][T32615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.319931][T32720] xt_l2tp: unknown flags: 10 [ 761.329995][T32502] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 761.360370][T32502] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 761.419812][T25530] hsr_slave_0: left promiscuous mode [ 761.426097][T25530] hsr_slave_1: left promiscuous mode [ 761.439218][T25530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.457103][T25530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.472552][T25530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.494925][T25530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.542676][T25530] veth1_macvtap: left promiscuous mode [ 761.555019][T25530] veth0_macvtap: left promiscuous mode [ 761.560974][T25530] veth1_vlan: left promiscuous mode [ 761.566314][T25530] veth0_vlan: left promiscuous mode [ 761.693152][T25530] pim6reg (unregistering): left allmulticast mode [ 762.310839][T25530] team0 (unregistering): Port device team_slave_1 removed [ 762.364927][T25530] team0 (unregistering): Port device team_slave_0 removed [ 762.418463][ T4490] Bluetooth: hci0: command tx timeout [ 762.765298][T32615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.774112][T32615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.801897][T32615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 763.224523][T32615] hsr_slave_0: entered promiscuous mode [ 763.243807][T32615] hsr_slave_1: entered promiscuous mode [ 763.694790][T32748] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8811'. [ 763.806340][T32749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8811'. [ 763.936629][T32739] caif0 speed is unknown, defaulting to 1000 [ 764.069401][T32752] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8812'. [ 764.106622][T32502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.152262][T32502] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.211755][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.218974][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 764.276772][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 764.284004][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 764.315878][T32753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8812'. [ 764.487828][ T4490] Bluetooth: hci0: command tx timeout [ 764.659877][T32762] macsec0: entered allmulticast mode [ 764.669707][T32762] veth1_macvtap: entered allmulticast mode [ 764.708765][T32758] veth1_macvtap: left allmulticast mode [ 764.727505][T32758] veth1_macvtap: left promiscuous mode [ 764.741659][T32759] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8815'. [ 765.171099][T32615] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 765.189525][T32502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.219185][T32615] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 765.245108][T32615] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 765.262781][T32615] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 765.323953][T32502] veth0_vlan: entered promiscuous mode [ 765.381007][ T310] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8818'. [ 765.425812][T32502] veth1_vlan: entered promiscuous mode [ 765.548955][ T318] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8822'. [ 765.665568][T32502] veth0_macvtap: entered promiscuous mode [ 765.698528][T32502] veth1_macvtap: entered promiscuous mode [ 765.740606][T32615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.814980][ T319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8822'. [ 765.824097][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.824122][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.824134][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.824147][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.824161][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.824174][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.824187][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.824201][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.824218][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.824232][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.824246][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.824260][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.824276][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 765.824290][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.833603][T32502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 766.012532][ T325] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8824'. [ 766.019199][T32615] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.086724][ T327] FAULT_INJECTION: forcing a failure. [ 766.086724][ T327] name failslab, interval 1, probability 0, space 0, times 0 [ 766.121487][ T327] CPU: 1 PID: 327 Comm: syz.4.8825 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 [ 766.131512][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 766.141572][ T327] Call Trace: [ 766.144858][ T327] [ 766.147794][ T327] dump_stack_lvl+0x241/0x360 [ 766.152490][ T327] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.157694][ T327] ? __pfx__printk+0x10/0x10 [ 766.162298][ T327] ? ref_tracker_alloc+0x332/0x490 [ 766.167419][ T327] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 766.172885][ T327] should_fail_ex+0x3b0/0x4e0 [ 766.177585][ T327] ? skb_clone+0x20c/0x390 [ 766.182005][ T327] should_failslab+0x9/0x20 [ 766.186509][ T327] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 766.191892][ T327] skb_clone+0x20c/0x390 [ 766.196142][ T327] __netlink_deliver_tap+0x3cc/0x7c0 [ 766.201531][ T327] ? netlink_deliver_tap+0x2e/0x1b0 [ 766.206736][ T327] netlink_deliver_tap+0x19d/0x1b0 [ 766.211857][ T327] netlink_sendskb+0x68/0x140 [ 766.216541][ T327] netlink_unicast+0x39d/0x990 [ 766.221313][ T327] ? __asan_memcpy+0x40/0x70 [ 766.225925][ T327] ? __pfx_netlink_unicast+0x10/0x10 [ 766.231241][ T327] netlink_rcv_skb+0x262/0x430 [ 766.236017][ T327] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 766.241472][ T327] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 766.246771][ T327] ? netlink_deliver_tap+0x2e/0x1b0 [ 766.251966][ T327] netlink_unicast+0x7f0/0x990 [ 766.256731][ T327] ? __pfx_netlink_unicast+0x10/0x10 [ 766.262003][ T327] ? __virt_addr_valid+0x183/0x530 [ 766.267115][ T327] ? __check_object_size+0x49c/0x900 [ 766.272388][ T327] ? bpf_lsm_netlink_send+0x9/0x10 [ 766.277502][ T327] netlink_sendmsg+0x8e4/0xcb0 [ 766.282279][ T327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.287560][ T327] ? aa_sock_msg_perm+0x91/0x160 [ 766.292493][ T327] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 766.297767][ T327] ? security_socket_sendmsg+0x87/0xb0 [ 766.303221][ T327] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.308496][ T327] __sock_sendmsg+0x221/0x270 [ 766.313170][ T327] sock_write_iter+0x2dd/0x400 [ 766.317928][ T327] ? __pfx_sock_write_iter+0x10/0x10 [ 766.323221][ T327] do_iter_readv_writev+0x5a4/0x800 [ 766.328420][ T327] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 766.334136][ T327] ? bpf_lsm_file_permission+0x9/0x10 [ 766.339499][ T327] ? security_file_permission+0x7f/0xa0 [ 766.345045][ T327] ? rw_verify_area+0x1d2/0x6b0 [ 766.349893][ T327] vfs_writev+0x37c/0xbb0 [ 766.354225][ T327] ? __pfx_lock_acquire+0x10/0x10 [ 766.359242][ T327] ? __pfx_vfs_writev+0x10/0x10 [ 766.364082][ T327] ? vfs_write+0x7c4/0xc90 [ 766.368501][ T327] ? __fget_files+0x29/0x470 [ 766.373102][ T327] do_writev+0x1b1/0x350 [ 766.377341][ T327] ? __pfx_do_writev+0x10/0x10 [ 766.382105][ T327] ? do_syscall_64+0x100/0x230 [ 766.387124][ T327] ? do_syscall_64+0xb6/0x230 [ 766.391807][ T327] do_syscall_64+0xf3/0x230 [ 766.396303][ T327] ? clear_bhb_loop+0x35/0x90 [ 766.400976][ T327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.406862][ T327] RIP: 0033:0x7ff9b8f75bd9 [ 766.411268][ T327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.430865][ T327] RSP: 002b:00007ff9b9de6048 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 766.439270][ T327] RAX: ffffffffffffffda RBX: 00007ff9b9103f60 RCX: 00007ff9b8f75bd9 [ 766.447234][ T327] RDX: 0000000000000002 RSI: 0000000020000bc0 RDI: 0000000000000004 [ 766.455199][ T327] RBP: 00007ff9b9de60a0 R08: 0000000000000000 R09: 0000000000000000 [ 766.463247][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.471209][ T327] R13: 000000000000000b R14: 00007ff9b9103f60 R15: 00007ffd89e77968 [ 766.479188][ T327] [ 766.487103][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.498277][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.508703][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.527546][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.541182][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.553986][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.564966][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.576518][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.608337][ T325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8824'. [ 766.615102][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.637390][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.647277][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.671198][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.695407][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.707031][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.717235][T32502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 766.729725][T32502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.741363][T32502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 766.752550][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.759793][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.773696][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.780952][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.802910][T32502] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.825640][T32502] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.846071][T32502] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.867416][T32502] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.128100][ T5106] Bluetooth: hci0: command 0x0405 tx timeout [ 767.252592][ T8152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.280644][ T8152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.429396][T25530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.465444][T25530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.623471][T32615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 767.834068][ T359] netlink: 'syz.1.8834': attribute type 1 has an invalid length. [ 767.909213][ T347] caif0 speed is unknown, defaulting to 1000 [ 767.916440][T32615] veth0_vlan: entered promiscuous mode [ 768.001773][T32615] veth1_vlan: entered promiscuous mode [ 768.032817][ T359] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 768.053672][ T359] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 768.095252][ T359] bond5: (slave vcan1): making interface the new active one [ 768.114775][ T359] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 768.223526][T32615] veth0_macvtap: entered promiscuous mode [ 768.263285][T32615] veth1_macvtap: entered promiscuous mode [ 768.343360][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.364670][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.378984][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.392618][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.402745][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.421709][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.439505][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.458884][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.477075][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.511088][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.637823][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.668942][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.709575][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.745024][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.758876][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.769546][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.781623][T32615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.890476][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.913539][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.923723][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.945830][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.971711][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.984862][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.995271][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.007909][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.018728][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.030589][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.040718][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.070210][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.082362][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.096511][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.107807][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.118881][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.151981][ T385] __nla_validate_parse: 7 callbacks suppressed [ 769.152003][ T385] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8841'. [ 769.167314][T32615] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.178175][T32615] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.193672][T32615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.210006][T32615] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.232496][T32615] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.255022][T32615] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.296706][T32615] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.478609][ T8142] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.567207][ T393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8844'. [ 769.712084][ T8142] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.758742][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 769.772127][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 769.784956][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 769.804524][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 769.813869][ T399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8845'. [ 769.824190][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 769.833884][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 769.997275][ T402] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 770.021977][ T8142] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.288956][ T8142] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.415998][ T407] netlink: 6 bytes leftover after parsing attributes in process `syz.1.8847'. [ 770.426625][ T407] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 770.455762][ T8136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.470362][ T8136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.569577][T25530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.594370][T25530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.669262][ T8142] bridge_slave_1: left allmulticast mode [ 770.674964][ T8142] bridge_slave_1: left promiscuous mode [ 770.694942][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.716916][ T8142] bridge_slave_0: left allmulticast mode [ 770.733188][ T8142] bridge_slave_0: left promiscuous mode [ 770.757581][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.881651][ T418] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8850'. [ 771.005115][ T419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8850'. [ 771.372218][ T403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 771.434903][ T8142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.455231][ T8142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.467201][ T8142] bond0 (unregistering): Released all slaves [ 771.478604][ T410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8848'. [ 771.567724][ T397] caif0 speed is unknown, defaulting to 1000 [ 771.575386][ T422] syz.1.8851 (422) used obsolete PPPIOCDETACH ioctl [ 772.009041][ T5106] Bluetooth: hci3: command tx timeout [ 772.194956][ T402] caif0 speed is unknown, defaulting to 1000 [ 772.699650][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.709168][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.723889][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.734893][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.744026][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 772.756944][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 772.826936][ T441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8855'. [ 772.852847][ T441] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8855'. [ 773.140045][ T397] chnl_net:caif_netlink_parms(): no params data found [ 773.211281][ T451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8857'. [ 773.248426][ T8142] hsr_slave_0: left promiscuous mode [ 773.266307][ T8142] hsr_slave_1: left promiscuous mode [ 773.273072][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.291149][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.310770][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.327535][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.403860][ T8142] veth1_macvtap: left promiscuous mode [ 773.414511][ T8142] veth0_macvtap: left promiscuous mode [ 773.420818][ T8142] veth1_vlan: left promiscuous mode [ 773.428099][ T8142] veth0_vlan: left promiscuous mode [ 774.093926][ T5106] Bluetooth: hci3: command tx timeout [ 774.157610][ T8142] team0 (unregistering): Port device team_slave_1 removed [ 774.211116][ T8142] team0 (unregistering): Port device team_slave_0 removed [ 774.686120][ T440] caif0 speed is unknown, defaulting to 1000 [ 774.808066][ T5106] Bluetooth: hci0: command tx timeout [ 774.885353][ T397] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.918205][ T472] __nla_validate_parse: 1 callbacks suppressed [ 774.918227][ T472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8862'. [ 774.935885][ T397] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.966969][ T397] bridge_slave_0: entered allmulticast mode [ 775.010197][ T397] bridge_slave_0: entered promiscuous mode [ 775.032208][ T397] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.054069][ T397] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.098296][ T397] bridge_slave_1: entered allmulticast mode [ 775.150888][ T397] bridge_slave_1: entered promiscuous mode [ 775.483651][ T397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.522866][ T397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.689295][ T397] team0: Port device team_slave_0 added [ 775.710178][ T397] team0: Port device team_slave_1 added [ 775.716154][ T491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8867'. [ 775.725833][ T491] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8867'. [ 775.798493][ T397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.805582][ T397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.832982][ T397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.973289][ T8142] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.996186][ T397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 776.004503][ T397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.032411][ T397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.066232][ T506] IPVS: length: 33 != 24 [ 776.105211][ T8142] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.121746][ T501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8869'. [ 776.131811][ T504] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8870'. [ 776.167571][ T5106] Bluetooth: hci3: command tx timeout [ 776.216345][ T8142] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.303758][ T397] hsr_slave_0: entered promiscuous mode [ 776.313401][ T397] hsr_slave_1: entered promiscuous mode [ 776.321645][ T397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.337638][ T397] Cannot create hsr debugfs directory [ 776.441791][ T8142] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.499838][ T511] netlink: 'syz.2.8872': attribute type 16 has an invalid length. [ 776.508966][ T511] netlink: 'syz.2.8872': attribute type 17 has an invalid length. [ 776.626592][ T513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8873'. [ 776.827520][ T8142] bridge_slave_1: left allmulticast mode [ 776.833930][ T8142] bridge_slave_1: left promiscuous mode [ 776.840804][ T8142] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.853021][ T8142] bridge_slave_0: left allmulticast mode [ 776.863694][ T8142] bridge_slave_0: left promiscuous mode [ 776.872951][ T8142] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.883868][ T530] netlink: zone id is out of range [ 776.891620][ T5106] Bluetooth: hci0: command tx timeout [ 776.897238][ T530] netlink: zone id is out of range [ 776.902781][ T530] netlink: zone id is out of range [ 776.908101][ T530] netlink: zone id is out of range [ 776.926210][ T530] netlink: set zone limit has 4 unknown bytes [ 777.002080][ T533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8876'. [ 777.499669][ T8142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.511641][ T8142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.522456][ T8142] bond0 (unregistering): Released all slaves [ 777.558597][ T546] netlink: 'syz.1.8880': attribute type 8 has an invalid length. [ 777.566723][ T547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8879'. [ 777.586903][ T547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8879'. [ 777.662746][ T440] chnl_net:caif_netlink_parms(): no params data found [ 777.776698][ T556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8881'. [ 778.238176][ T440] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.245587][ T440] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.253075][ T5106] Bluetooth: hci3: command tx timeout [ 778.259704][ T440] bridge_slave_0: entered allmulticast mode [ 778.300541][ T440] bridge_slave_0: entered promiscuous mode [ 778.418802][ T440] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.430429][ T440] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.446151][ T440] bridge_slave_1: entered allmulticast mode [ 778.458487][ T440] bridge_slave_1: entered promiscuous mode [ 778.698877][ T8142] hsr_slave_0: left promiscuous mode [ 778.709943][ T8142] hsr_slave_1: left promiscuous mode [ 778.729105][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 778.743858][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.768477][ T8142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 778.775957][ T8142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 778.877637][ T8142] veth1_macvtap: left promiscuous mode [ 778.883220][ T8142] veth0_macvtap: left promiscuous mode [ 778.906327][ T8142] veth1_vlan: left promiscuous mode [ 778.917658][ T8142] veth0_vlan: left promiscuous mode [ 778.969292][ T5106] Bluetooth: hci0: command tx timeout [ 779.584861][ T8142] team0 (unregistering): Port device team_slave_1 removed [ 779.640919][ T8142] team0 (unregistering): Port device team_slave_0 removed [ 780.129444][ T440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 780.144210][ T570] caif0 speed is unknown, defaulting to 1000 [ 780.189739][ T591] __nla_validate_parse: 3 callbacks suppressed [ 780.189760][ T591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8892'. [ 780.209373][ T591] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8892'. [ 780.259656][ T440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 780.432059][ T598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8894'. [ 780.455820][ T440] team0: Port device team_slave_0 added [ 780.488462][ T440] team0: Port device team_slave_1 added [ 780.647578][ T397] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 780.672068][ T397] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 780.719308][ T605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8896'. [ 780.749062][ T440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.766438][ T440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.806167][ T440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.819567][ T440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.826627][ T440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.854654][ T440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.878824][ T397] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 780.911600][ T397] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 781.049206][ T5106] Bluetooth: hci0: command tx timeout [ 781.105118][ T440] hsr_slave_0: entered promiscuous mode [ 781.117848][ T440] hsr_slave_1: entered promiscuous mode [ 781.519171][ T625] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8903'. [ 781.922824][ T397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.982470][ T634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8907'. [ 782.042311][ T397] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.077992][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.085266][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.165979][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.173192][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.385203][ T650] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8912'. [ 782.455831][ T652] netlink: 'syz.2.8914': attribute type 12 has an invalid length. [ 782.613341][ T440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 782.644498][ T440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 782.690741][ T440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 782.750745][ T440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 782.784681][ T658] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8916'. [ 782.841066][ T397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.923786][ T669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8918'. [ 783.241129][ T397] veth0_vlan: entered promiscuous mode [ 783.266880][ T397] veth1_vlan: entered promiscuous mode [ 783.302115][ T440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.304391][ T686] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 783.363110][ T440] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.405332][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.412563][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.456929][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.464170][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.485993][ T397] veth0_macvtap: entered promiscuous mode [ 783.499019][ T397] veth1_macvtap: entered promiscuous mode [ 783.585350][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.616608][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.642272][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.659584][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.671453][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.682099][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.693231][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.704224][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.714626][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.725338][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.735515][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.746205][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.765729][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 783.781771][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.794995][ T397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.828678][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.849511][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.880268][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.905620][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.925629][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.942893][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 783.964462][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 783.987020][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.007650][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.030938][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.047524][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.064963][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.075198][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.086500][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.111753][ T397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 784.123812][ T712] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8930'. [ 784.132626][ T397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 784.144641][ T397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 784.192148][ T397] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.207971][ T397] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.216708][ T397] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.228972][ T397] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.559458][ T440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.643304][ T8142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.680822][ T8142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 784.952701][T25529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 784.963904][ T440] veth0_vlan: entered promiscuous mode [ 784.971858][T25529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.018864][ T440] veth1_vlan: entered promiscuous mode [ 785.118897][ T440] veth0_macvtap: entered promiscuous mode [ 785.142921][ T440] veth1_macvtap: entered promiscuous mode [ 785.401124][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.403502][ T749] No such timeout policy "syz0" [ 785.439401][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.470849][ T749] __nla_validate_parse: 2 callbacks suppressed [ 785.470872][ T749] netlink: 324 bytes leftover after parsing attributes in process `syz.4.8942'. [ 785.486228][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.517592][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.555344][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.575027][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.615625][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.637456][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.647530][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.659990][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.673318][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.676466][ T4490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 785.683922][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.683955][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.683973][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.683992][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 785.684007][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.685877][ T440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.721056][ T4490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 785.762177][ T4490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 785.777127][ T4490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 785.820737][ T4490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 785.831149][ T4490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 785.893801][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.905743][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.915746][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.926257][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.947433][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.958498][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.969784][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.973672][ T763] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8944'. [ 785.980477][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.980504][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.980522][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.980551][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.980566][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.980590][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.980605][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.980631][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.980645][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.980665][ T440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 785.980679][ T440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 785.984107][ T440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 786.150667][ T440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.177139][ T440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.186124][ T440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.195231][ T440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.233012][ T765] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8946'. [ 786.471539][ T8142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.501444][ T8142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.546992][ T755] caif0 speed is unknown, defaulting to 1000 [ 786.625531][ T8152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 786.669680][ T8152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 786.688181][ T769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8948'. [ 786.959627][ T8136] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.076820][ T765] caif0 speed is unknown, defaulting to 1000 [ 787.347152][ T8136] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.558279][ T8136] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.602678][ T755] chnl_net:caif_netlink_parms(): no params data found [ 787.720163][ T8136] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.937866][ T4490] Bluetooth: hci3: command tx timeout [ 787.980815][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 787.992655][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 788.014680][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 788.023377][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 788.042145][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 788.054104][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 788.347812][ T755] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.354992][ T755] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.377832][ T755] bridge_slave_0: entered allmulticast mode [ 788.395700][ T755] bridge_slave_0: entered promiscuous mode [ 788.410655][ T755] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.437856][ T755] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.445202][ T755] bridge_slave_1: entered allmulticast mode [ 788.464060][ T755] bridge_slave_1: entered promiscuous mode [ 788.674339][ T755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.721330][ T755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.750334][ T8136] bridge_slave_1: left allmulticast mode [ 788.762530][ T8136] bridge_slave_1: left promiscuous mode [ 788.776425][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.779190][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 788.794653][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 788.802973][ T8136] bridge_slave_0: left allmulticast mode [ 788.803371][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 788.819756][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 788.822279][ T8136] bridge_slave_0: left promiscuous mode [ 788.827575][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 788.839851][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 788.843977][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.295769][ T8136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.308492][ T8136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.320402][ T8136] bond0 (unregistering): Released all slaves [ 789.427946][ T789] caif0 speed is unknown, defaulting to 1000 [ 789.585648][ T755] team0: Port device team_slave_0 added [ 789.610043][ T755] team0: Port device team_slave_1 added [ 789.731310][ T806] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8956'. [ 789.858416][ T755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.865408][ T755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.921745][ T755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.941075][ T755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.948324][ T755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.996733][ T755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.008078][ T4490] Bluetooth: hci3: command tx timeout [ 790.049399][ T817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 790.066895][ T799] caif0 speed is unknown, defaulting to 1000 [ 790.182010][ T4490] Bluetooth: hci0: command tx timeout [ 790.304305][ T755] hsr_slave_0: entered promiscuous mode [ 790.319301][ T755] hsr_slave_1: entered promiscuous mode [ 790.345611][ T755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.367548][ T755] Cannot create hsr debugfs directory [ 790.887679][ T4490] Bluetooth: hci4: command tx timeout [ 790.927726][ T8136] hsr_slave_0: left promiscuous mode [ 790.940116][ T8136] hsr_slave_1: left promiscuous mode [ 790.972196][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.989008][ T8136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.030935][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 791.072785][ T8136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.076978][ T846] xt_time: unknown flags 0x4 [ 791.159108][ T8136] veth1_macvtap: left promiscuous mode [ 791.174926][ T8136] veth0_macvtap: left promiscuous mode [ 791.180840][ T8136] veth1_vlan: left promiscuous mode [ 791.196361][ T8136] veth0_vlan: left promiscuous mode [ 791.756829][ T8136] team0 (unregistering): Port device team_slave_1 removed [ 791.817184][ T8136] team0 (unregistering): Port device team_slave_0 removed [ 792.087573][ T4490] Bluetooth: hci3: command tx timeout [ 792.248027][ T4490] Bluetooth: hci0: command tx timeout [ 792.368300][ T835] caif0 speed is unknown, defaulting to 1000 [ 792.968149][ T4490] Bluetooth: hci4: command tx timeout [ 794.168104][ T4490] Bluetooth: hci3: command tx timeout [ 794.332306][ T4490] Bluetooth: hci0: command tx timeout [ 794.593548][ T755] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.680635][ T799] chnl_net:caif_netlink_parms(): no params data found [ 794.760123][ T755] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.896710][ T755] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.047536][ T4490] Bluetooth: hci4: command tx timeout [ 795.122395][ T755] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.231943][ T789] chnl_net:caif_netlink_parms(): no params data found [ 795.459834][ T799] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.467052][ T799] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.488187][ T799] bridge_slave_0: entered allmulticast mode [ 795.509162][ T799] bridge_slave_0: entered promiscuous mode [ 795.633621][ T799] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.642766][ T799] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.650198][ T799] bridge_slave_1: entered allmulticast mode [ 795.665708][ T799] bridge_slave_1: entered promiscuous mode [ 795.883407][ T8136] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.018833][ T755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 796.029954][ T755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 796.050857][ T755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 796.066548][ T799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.126365][ T8136] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.179817][ T789] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.187053][ T789] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.208054][ T789] bridge_slave_0: entered allmulticast mode [ 796.215508][ T789] bridge_slave_0: entered promiscuous mode [ 796.237265][ T789] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.249088][ T789] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.257242][ T789] bridge_slave_1: entered allmulticast mode [ 796.265728][ T789] bridge_slave_1: entered promiscuous mode [ 796.274613][ T755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 796.288824][ T799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.293477][ T880] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 796.338167][ T8136] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.409192][ T4490] Bluetooth: hci0: command tx timeout [ 796.469275][ T8136] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.543137][ T799] team0: Port device team_slave_0 added [ 796.620095][ T789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.645975][ T789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 796.669654][ T799] team0: Port device team_slave_1 added [ 796.736511][ T789] team0: Port device team_slave_0 added [ 796.850337][ T789] team0: Port device team_slave_1 added [ 796.903218][ T799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.915598][ T799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.942867][ T799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.046931][ T789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.075577][ T789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.120020][ T789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.130687][ T4490] Bluetooth: hci4: command tx timeout [ 797.150212][ T799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.157210][ T799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.206689][ T799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.270586][ T789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.288279][ T789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.347871][ T789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.505283][ T902] FAULT_INJECTION: forcing a failure. [ 797.505283][ T902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 797.518261][ T8136] bridge_slave_1: left allmulticast mode [ 797.524178][ T8136] bridge_slave_1: left promiscuous mode [ 797.532509][ T902] CPU: 0 PID: 902 Comm: syz.1.8977 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 [ 797.542524][ T902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 797.552604][ T902] Call Trace: [ 797.555549][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.555879][ T902] [ 797.565834][ T902] dump_stack_lvl+0x241/0x360 [ 797.570537][ T902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 797.575758][ T902] ? __pfx__printk+0x10/0x10 [ 797.580370][ T902] ? __pfx_lock_release+0x10/0x10 [ 797.585416][ T902] ? vfs_write+0x7c4/0xc90 [ 797.589858][ T902] should_fail_ex+0x3b0/0x4e0 [ 797.594566][ T902] _copy_from_user+0x2f/0xe0 [ 797.599181][ T902] __sys_bpf+0x1a4/0x810 [ 797.603451][ T902] ? __pfx___sys_bpf+0x10/0x10 [ 797.608250][ T902] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 797.614255][ T902] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 797.620604][ T902] ? do_syscall_64+0x100/0x230 [ 797.625388][ T902] __x64_sys_bpf+0x7c/0x90 [ 797.629828][ T902] do_syscall_64+0xf3/0x230 [ 797.634358][ T902] ? clear_bhb_loop+0x35/0x90 [ 797.639063][ T902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.644979][ T902] RIP: 0033:0x7f2db8575bd9 [ 797.649410][ T902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 797.669037][ T902] RSP: 002b:00007f2db93c4048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 797.677474][ T902] RAX: ffffffffffffffda RBX: 00007f2db8703f60 RCX: 00007f2db8575bd9 [ 797.685465][ T902] RDX: 0000000000000020 RSI: 00000000200002c0 RDI: 0000000000000003 [ 797.693454][ T902] RBP: 00007f2db93c40a0 R08: 0000000000000000 R09: 0000000000000000 [ 797.701443][ T902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 797.709436][ T902] R13: 000000000000004d R14: 00007f2db8703f60 R15: 00007ffdb1ae8988 [ 797.717444][ T902] [ 797.726978][ T8136] bridge_slave_0: left allmulticast mode [ 797.736177][ T8136] bridge_slave_0: left promiscuous mode [ 797.749033][ T8136] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.315458][ T927] xt_time: unknown flags 0x4 [ 798.375564][ T8136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 798.388955][ T8136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 798.409604][ T8136] bond0 (unregistering): Released all slaves [ 798.432523][ T799] hsr_slave_0: entered promiscuous mode [ 798.440193][ T799] hsr_slave_1: entered promiscuous mode [ 798.446411][ T799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.455325][ T799] Cannot create hsr debugfs directory [ 800.513661][ T789] hsr_slave_0: entered promiscuous mode [ 800.522553][ T789] hsr_slave_1: entered promiscuous mode [ 800.529005][ T789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 800.536553][ T789] Cannot create hsr debugfs directory [ 800.615364][ T933] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8982'. [ 801.124240][ T755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.617121][ T8136] hsr_slave_0: left promiscuous mode [ 801.623921][ T8136] hsr_slave_1: left promiscuous mode [ 801.638869][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.646331][ T8136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.668928][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.676919][ T8136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.745321][ T8136] veth1_macvtap: left promiscuous mode [ 801.763949][ T8136] veth0_macvtap: left promiscuous mode [ 801.774010][ T8136] veth1_vlan: left promiscuous mode [ 801.780554][ T8136] veth0_vlan: left promiscuous mode [ 802.330343][ T8136] team0 (unregistering): Port device team_slave_1 removed [ 802.372755][ T8136] team0 (unregistering): Port device team_slave_0 removed [ 802.881954][ T938] caif0 speed is unknown, defaulting to 1000 [ 802.906367][ T755] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.029915][T27252] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.037083][T27252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.170107][T27252] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.177360][T27252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.369687][ T755] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 803.395069][ T755] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 803.425032][ T969] xt_time: unknown flags 0x4 [ 805.493629][ T755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 805.676032][ T755] veth0_vlan: entered promiscuous mode [ 805.700006][ T755] veth1_vlan: entered promiscuous mode [ 805.897230][ T755] veth0_macvtap: entered promiscuous mode [ 805.927048][ T755] veth1_macvtap: entered promiscuous mode [ 805.945055][ T799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 805.969412][ T987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 805.986157][ T799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 806.009141][ T799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 806.024577][ T799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 806.043493][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.061454][ T988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.071334][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.071358][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.071375][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.071398][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.071412][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.071435][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.071449][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.071478][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.071491][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.071510][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.071525][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.071553][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 806.071574][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.073809][ T755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.109839][ T987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.191888][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.253609][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.265015][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.278523][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.288742][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.299380][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.309737][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.321929][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.337193][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.348534][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.358457][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.373843][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.386504][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.397176][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.407102][ T755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.425782][ T755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.436994][ T755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.533943][ T755] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.556703][ T755] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.568738][ T755] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.595962][ T755] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.636065][ T789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 806.662083][ T789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 806.679167][ T789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 806.724147][ T789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 806.978581][ T1010] xt_time: unknown flags 0x4 [ 808.990787][ T799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.005252][T25531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.038616][T25531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.051664][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.153832][ T8160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 809.167315][ T789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.183995][ T8160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 809.225428][ T799] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.267111][ T1029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9009'. [ 809.298174][ T1029] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9009'. [ 809.381835][T27248] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.389066][T27248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.410640][T27248] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.417861][T27248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.461218][ T789] 8021q: adding VLAN 0 to HW filter on device team0 [ 809.495925][T27248] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.503174][T27248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 809.634473][T27252] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.641691][T27252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.723934][ T799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 809.749206][ T799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 809.939399][ T1061] dummy0: entered promiscuous mode [ 809.958923][ T1061] dummy0: left promiscuous mode [ 810.381621][ T1082] xt_time: unknown flags 0x4 [ 810.424134][ T1081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9021'. [ 810.446011][ T1081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9021'. [ 812.502378][ T1101] netlink: 'syz.1.9026': attribute type 4 has an invalid length. [ 812.543949][ T789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.584827][ T799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.680697][ T1110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9029'. [ 812.699351][ T1110] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9029'. [ 812.740704][ T1110] netlink: 'syz.2.9029': attribute type 1 has an invalid length. [ 812.858906][ T799] veth0_vlan: entered promiscuous mode [ 812.891128][ T789] veth0_vlan: entered promiscuous mode [ 812.898112][ T1117] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9031'. [ 812.966110][ T789] veth1_vlan: entered promiscuous mode [ 812.989085][ T799] veth1_vlan: entered promiscuous mode [ 813.089598][ T1124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9033'. [ 813.102860][ T1124] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9033'. [ 813.192122][ T789] veth0_macvtap: entered promiscuous mode [ 813.222189][ T799] veth0_macvtap: entered promiscuous mode [ 813.252802][ T789] veth1_macvtap: entered promiscuous mode [ 813.278999][ T799] veth1_macvtap: entered promiscuous mode [ 813.332864][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.360565][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.370829][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.382699][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.393016][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.403668][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.413805][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.424520][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.434639][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.447313][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.460179][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.470799][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.481528][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.492119][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.502114][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.514614][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.526971][ T789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.552167][ T1117] caif0 speed is unknown, defaulting to 1000 [ 813.564841][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.587063][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.608372][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.628051][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.658063][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.696974][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.727581][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.777477][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.802741][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.835460][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.850013][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.886367][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.898718][ T1142] netlink: 'syz.1.9037': attribute type 1 has an invalid length. [ 813.902480][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.906454][ T1142] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.9037'. [ 813.921918][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.934050][ T1142] netlink: 'syz.1.9037': attribute type 1 has an invalid length. [ 813.952765][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.964772][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.974817][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.985408][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.999973][ T799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.010823][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.022833][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.033661][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.044383][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.054925][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.066435][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.076413][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.086979][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.097300][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.108002][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.117981][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.128480][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.139503][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.150477][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.164173][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.197455][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.207311][ T789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.237424][ T789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.259693][ T789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.282602][ T789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.307389][ T789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.316120][ T789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.337767][ T789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.382062][ T1144] netlink: 'syz.1.9037': attribute type 1 has an invalid length. [ 814.396380][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.417457][ T1144] netlink: 9372 bytes leftover after parsing attributes in process `syz.1.9037'. [ 814.431026][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.437106][ T1144] netlink: 'syz.1.9037': attribute type 1 has an invalid length. [ 814.450748][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.477489][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.497530][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.517424][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.527270][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.557412][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.567257][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.601829][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.621261][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.642145][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.662970][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.676143][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.687077][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.700764][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.710914][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.721762][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.750690][ T799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.772121][ T799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.791263][ T799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.800946][ T1147] netlink: 'syz.4.9038': attribute type 4 has an invalid length. [ 814.892110][ T799] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.905361][ T799] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.914517][ T799] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.927475][ T799] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.167238][ T1155] xt_time: unknown flags 0x4 [ 815.169488][ T1152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9040'. [ 815.250041][ T1154] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9040'. [ 817.465736][T25530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.484517][T25530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.668631][ T8142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.676493][ T8142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.685332][T25531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.718515][T25531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 817.892942][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.922589][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.028459][ T1178] netlink: 5 bytes leftover after parsing attributes in process `syz.2.9045'. [ 818.091121][ T1178] Bluetooth: MGMT ver 1.22 [ 818.227582][ T1189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9049'. [ 818.241535][ T1189] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9049'. [ 818.424151][T25530] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.515185][ T1196] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9051'. [ 818.572374][ T1201] netlink: 'syz.1.9050': attribute type 4 has an invalid length. [ 818.691565][T25530] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.724582][ T1205] xt_time: unknown flags 0x4 [ 818.907474][T25530] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.979673][ T5106] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 818.990416][ T5106] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 819.001188][ T5106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 819.010556][ T5106] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 819.029414][ T5106] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 819.038277][ T5106] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 819.338748][ T1217] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9055'. [ 819.459433][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 819.483958][ T4490] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 819.494366][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 819.517600][ T4490] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 819.531308][ T4490] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 819.539846][ T4490] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 821.061680][T25530] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.129880][ T5106] Bluetooth: hci0: command tx timeout [ 821.542115][ T1241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9061'. [ 821.552202][ T1241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9061'. [ 821.573640][T25530] bridge_slave_1: left allmulticast mode [ 821.581408][T25530] bridge_slave_1: left promiscuous mode [ 821.603271][T25530] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.620365][ T5106] Bluetooth: hci4: command tx timeout [ 821.654327][T25530] bridge_slave_0: left allmulticast mode [ 821.661313][T25530] bridge_slave_0: left promiscuous mode [ 821.667091][T25530] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.815788][ T1254] FAULT_INJECTION: forcing a failure. [ 821.815788][ T1254] name failslab, interval 1, probability 0, space 0, times 0 [ 821.830758][ T1254] CPU: 1 PID: 1254 Comm: syz.2.9065 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 [ 821.840868][ T1254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 821.850954][ T1254] Call Trace: [ 821.854259][ T1254] [ 821.857211][ T1254] dump_stack_lvl+0x241/0x360 [ 821.861907][ T1254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 821.867098][ T1254] ? __pfx__printk+0x10/0x10 [ 821.871681][ T1254] ? __pfx___might_resched+0x10/0x10 [ 821.876960][ T1254] ? __asan_memset+0x23/0x50 [ 821.881547][ T1254] should_fail_ex+0x3b0/0x4e0 [ 821.886221][ T1254] ? security_inode_alloc+0x28/0x120 [ 821.891519][ T1254] should_failslab+0x9/0x20 [ 821.896045][ T1254] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 821.901445][ T1254] security_inode_alloc+0x28/0x120 [ 821.906582][ T1254] inode_init_always+0x947/0xc70 [ 821.911536][ T1254] ? __pfx_sock_alloc_inode+0x10/0x10 [ 821.916907][ T1254] new_inode_pseudo+0x9e/0x1e0 [ 821.921668][ T1254] __sock_create+0x123/0x920 [ 821.926337][ T1254] ? __asan_memset+0x23/0x50 [ 821.930919][ T1254] smc_create_clcsk+0x39/0x1b0 [ 821.935677][ T1254] inet_create+0xb8f/0xe70 [ 821.940095][ T1254] ? inet_create+0x9c/0xe70 [ 821.944616][ T1254] ? __sock_create+0x337/0x920 [ 821.949396][ T1254] __sock_create+0x490/0x920 [ 821.954018][ T1254] __sys_socket+0x150/0x3c0 [ 821.958551][ T1254] ? __pfx___sys_socket+0x10/0x10 [ 821.963595][ T1254] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 821.969933][ T1254] ? do_syscall_64+0x100/0x230 [ 821.974721][ T1254] __x64_sys_socket+0x7a/0x90 [ 821.979396][ T1254] do_syscall_64+0xf3/0x230 [ 821.983895][ T1254] ? clear_bhb_loop+0x35/0x90 [ 821.988593][ T1254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.994511][ T1254] RIP: 0033:0x7f277b575bd9 [ 821.998953][ T1254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.018663][ T1254] RSP: 002b:00007f277c34a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 822.027093][ T1254] RAX: ffffffffffffffda RBX: 00007f277b703f60 RCX: 00007f277b575bd9 [ 822.035152][ T1254] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 822.043135][ T1254] RBP: 00007f277c34a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 822.051133][ T1254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.059151][ T1254] R13: 000000000000000b R14: 00007f277b703f60 R15: 00007ffe7cf85798 [ 822.067133][ T1254] [ 822.080573][ T1254] socket: no more sockets [ 822.085074][ T1254] ------------[ cut here ]------------ [ 822.091412][ T1254] refcount_t: underflow; use-after-free. [ 822.097763][ T1254] WARNING: CPU: 1 PID: 1254 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 822.107181][ T1254] Modules linked in: [ 822.111214][ T1254] CPU: 1 PID: 1254 Comm: syz.2.9065 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 [ 822.121332][ T1254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 822.131534][ T1254] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 822.137783][ T1254] Code: e0 e5 1f 8c e8 c7 b1 a8 fc 90 0f 0b 90 90 eb 99 e8 9b 83 e6 fc c6 05 95 eb e8 0a 01 90 48 c7 c7 40 e6 1f 8c e8 a7 b1 a8 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 78 83 e6 fc c6 05 6f eb e8 0a 01 90 [ 822.158679][ T1254] RSP: 0018:ffffc9000d88fd30 EFLAGS: 00010246 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 822.164792][ T1254] RAX: c0b52f04f981a400 RBX: ffff88805ba13780 RCX: ffff88801c369e00 [ 822.173796][ T1254] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 822.181949][ T1254] RBP: 0000000000000003 R08: ffffffff815857b2 R09: fffffbfff1c39994 [ 822.190432][ T1254] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 00000000ffffffe9 [ 822.198543][ T1254] R13: 1ffff1100b7426e5 R14: ffff88805ba13728 R15: ffff88805ba13700 [ 822.206538][ T1254] FS: 00007f277c34a6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 822.215610][ T1254] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.223176][ T1254] CR2: 0000001b2e916ff8 CR3: 00000000533be000 CR4: 00000000003506f0 [ 822.231471][ T1254] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 822.239525][ T1254] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 822.247873][ T1254] Call Trace: [ 822.251176][ T1254] [ 822.255301][ T1254] ? __warn+0x163/0x4e0 [ 822.260246][ T1254] ? refcount_warn_saturate+0x15a/0x1d0 [ 822.266261][ T1254] ? report_bug+0x2b3/0x500 [ 822.270922][ T1254] ? refcount_warn_saturate+0x15a/0x1d0 [ 822.276498][ T1254] ? handle_bug+0x3e/0x70 [ 822.280918][ T1254] ? exc_invalid_op+0x1a/0x50 [ 822.285617][ T1254] ? asm_exc_invalid_op+0x1a/0x20 [ 822.290717][ T1254] ? __warn_printk+0x292/0x360 [ 822.295481][ T1254] ? refcount_warn_saturate+0x15a/0x1d0 [ 822.301117][ T1254] inet_create+0xbaf/0xe70 [ 822.305546][ T1254] ? inet_create+0x9c/0xe70 [ 822.310153][ T1254] ? __sock_create+0x337/0x920 [ 822.314932][ T1254] __sock_create+0x490/0x920 [ 822.319643][ T1254] __sys_socket+0x150/0x3c0 [ 822.324178][ T1254] ? __pfx___sys_socket+0x10/0x10 [ 822.329858][ T1254] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 822.336217][ T1254] ? do_syscall_64+0x100/0x230 [ 822.341129][ T1254] __x64_sys_socket+0x7a/0x90 [ 822.345831][ T1254] do_syscall_64+0xf3/0x230 [ 822.350441][ T1254] ? clear_bhb_loop+0x35/0x90 [ 822.356096][ T1254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.362869][ T1254] RIP: 0033:0x7f277b575bd9 [ 822.367303][ T1254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.387114][ T1254] RSP: 002b:00007f277c34a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 822.395634][ T1254] RAX: ffffffffffffffda RBX: 00007f277b703f60 RCX: 00007f277b575bd9 [ 822.403666][ T1254] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 822.411901][ T1254] RBP: 00007f277c34a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 822.420015][ T1254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.428097][ T1254] R13: 000000000000000b R14: 00007f277b703f60 R15: 00007ffe7cf85798 [ 822.436087][ T1254] [ 822.439166][ T1254] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 822.446428][ T1254] CPU: 1 PID: 1254 Comm: syz.2.9065 Not tainted 6.10.0-rc7-syzkaller-01816-g852e42cc2dd4 #0 [ 822.456481][ T1254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 822.466536][ T1254] Call Trace: [ 822.469823][ T1254] [ 822.472751][ T1254] dump_stack_lvl+0x241/0x360 [ 822.477431][ T1254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 822.482622][ T1254] ? __pfx__printk+0x10/0x10 [ 822.487201][ T1254] ? _printk+0xd5/0x120 [ 822.491373][ T1254] ? vscnprintf+0x5d/0x90 [ 822.495692][ T1254] panic+0x349/0x860 [ 822.499592][ T1254] ? __warn+0x172/0x4e0 [ 822.503759][ T1254] ? __pfx_panic+0x10/0x10 [ 822.508173][ T1254] ? show_trace_log_lvl+0x4e6/0x520 [ 822.513384][ T1254] __warn+0x346/0x4e0 [ 822.517361][ T1254] ? refcount_warn_saturate+0x15a/0x1d0 [ 822.522901][ T1254] report_bug+0x2b3/0x500 [ 822.527221][ T1254] ? refcount_warn_saturate+0x15a/0x1d0 [ 822.532765][ T1254] handle_bug+0x3e/0x70 [ 822.536913][ T1254] exc_invalid_op+0x1a/0x50 [ 822.541414][ T1254] asm_exc_invalid_op+0x1a/0x20 [ 822.546257][ T1254] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 822.552408][ T1254] Code: e0 e5 1f 8c e8 c7 b1 a8 fc 90 0f 0b 90 90 eb 99 e8 9b 83 e6 fc c6 05 95 eb e8 0a 01 90 48 c7 c7 40 e6 1f 8c e8 a7 b1 a8 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 78 83 e6 fc c6 05 6f eb e8 0a 01 90 [ 822.572016][ T1254] RSP: 0018:ffffc9000d88fd30 EFLAGS: 00010246 [ 822.578083][ T1254] RAX: c0b52f04f981a400 RBX: ffff88805ba13780 RCX: ffff88801c369e00 [ 822.586045][ T1254] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 822.594008][ T1254] RBP: 0000000000000003 R08: ffffffff815857b2 R09: fffffbfff1c39994 [ 822.601977][ T1254] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 00000000ffffffe9 [ 822.609943][ T1254] R13: 1ffff1100b7426e5 R14: ffff88805ba13728 R15: ffff88805ba13700 [ 822.617921][ T1254] ? __warn_printk+0x292/0x360 [ 822.622706][ T1254] inet_create+0xbaf/0xe70 [ 822.627116][ T1254] ? inet_create+0x9c/0xe70 [ 822.631614][ T1254] ? __sock_create+0x337/0x920 [ 822.636373][ T1254] __sock_create+0x490/0x920 [ 822.640964][ T1254] __sys_socket+0x150/0x3c0 [ 822.645462][ T1254] ? __pfx___sys_socket+0x10/0x10 [ 822.650485][ T1254] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 822.656811][ T1254] ? do_syscall_64+0x100/0x230 [ 822.661580][ T1254] __x64_sys_socket+0x7a/0x90 [ 822.666263][ T1254] do_syscall_64+0xf3/0x230 [ 822.670767][ T1254] ? clear_bhb_loop+0x35/0x90 [ 822.675444][ T1254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.681335][ T1254] RIP: 0033:0x7f277b575bd9 [ 822.685745][ T1254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.705345][ T1254] RSP: 002b:00007f277c34a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 822.713754][ T1254] RAX: ffffffffffffffda RBX: 00007f277b703f60 RCX: 00007f277b575bd9 [ 822.721718][ T1254] RDX: 0000000000000100 RSI: 0000000000000801 RDI: 0000000000000002 [ 822.729680][ T1254] RBP: 00007f277c34a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 822.737641][ T1254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.745604][ T1254] R13: 000000000000000b R14: 00007f277b703f60 R15: 00007ffe7cf85798 [ 822.753583][ T1254] [ 822.756927][ T1254] Kernel Offset: disabled [ 822.761244][ T1254] Rebooting in 86400 seconds..