last executing test programs: 3m15.828766407s ago: executing program 2 (id=3047): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000340)=0xfffff001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYBLOB="ac4bc66a190d5aa361ac2aff655f29adb91621aa2ddf9f02e7a69f74e6884f4177423e95fc9c6f2b9c214b3e3a0d7c45bddd18a49042f8a13bdeac6c8e64d1b18b83830e972779b7fe4dcefceb0ad5e42359b1519afebd5e54ac6c5c8904bf8df3d5022d89f7ac2b3fbb6d6047badac6b9a9c29a5fd4a29f01beddd871481cb1eb32a93d3edfc2fcddc0214e528cb69a422b0fa03d3d76d34268d38e0041882cd6e74ffce85bda87bcfc04a809862feb70ed2185714d6f14d4e96ab89fa95c7812d4104168c79f724a4f369efb271d540e3272580a808f1b97cb2086ed2f5375d8d9930569c316fe4a5376c69d4f9b2ad5bd756fdbf9fae6aa", @ANYRES64=0x0], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r6, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3m14.869946379s ago: executing program 2 (id=3058): socket$alg(0x26, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x8}, 0x18) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3m12.824963845s ago: executing program 2 (id=3063): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1}) 3m1.097068085s ago: executing program 2 (id=3063): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1}) 2m49.769485305s ago: executing program 2 (id=3063): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1}) 2m38.110867765s ago: executing program 3 (id=3303): socket(0x1d, 0x2, 0x6) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m36.975866654s ago: executing program 3 (id=3305): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x4a301, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d11}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'\x00', 0x400}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x600}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket(0x15, 0xeecb3e5670276b25, 0xa) setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f00000002c0)={0xfffffff8, {{0x2, 0x4e24, @broadcast}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m23.174254779s ago: executing program 3 (id=3317): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x4a}], 0x1}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x1010, r0, 0xed83c000) 2m23.173488973s ago: executing program 4 (id=3318): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[], 0x44}}, 0x0) 2m22.898713388s ago: executing program 4 (id=3320): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 2m22.355816364s ago: executing program 3 (id=3321): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) tee(r0, r4, 0x8f5, 0x0) socket$kcm(0x21, 0x2, 0x2) write(r2, 0x0, 0x0) unshare(0x22020600) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e24, @private=0xa010101}}) 2m22.062961478s ago: executing program 0 (id=3322): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 2m21.807492731s ago: executing program 2 (id=3063): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x3f}, 0x78, r1}) 2m21.750848702s ago: executing program 4 (id=3323): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x10}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3e}, @NFTA_SET_EXPRESSIONS={0x4}]}, @NFT_MSG_DELRULE={0xb0, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x64, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LAST_SET={0x8}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0x138}}, 0x58c4d6f78d5e83d2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 2m20.66356707s ago: executing program 0 (id=3324): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x1000, 0x9f, &(0x7f0000000580)="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", &(0x7f0000001580)=""/159, 0x2, 0x0, 0xd2, 0xe3, &(0x7f0000001640)="5952d6d63e9019ed801699d28af67bf79faa3999b6515cb2b0bbe65aab1201a9c4a1277502ab45b15fb310a3d206bf27c94b796f9bd9076c0c9ca9bf003329fe97e56eec31d355727d8b4e437a290bc5fb3987355271673744a389946290792ec2a1c3be72d5f1fbf577ba4fe43cdfc59e704741a1232ef1e9ba9b7f0af170ec104c552b367039f8a738cdf97e26f45fff8b43db5605d76f4085eee150faa8c7ed356eae8d4d93d7e249bd3e25d98273a7eaa878305d9c7698d281d71a06575165d99606605392ce1a2ab6044c79815842c5", &(0x7f0000001740)="46882507bc41fe65304bfc4d45fae573da3cc001a661a9ccb6838bf31bc9f8382374a82f49c1e37bc0d2623b93710e558cc3fff46d516a391067916f86d55e80b969f67bd82982a0e896cd097c30f2b1629426b7b341433a8dae641a3603367b6882c80ad61bd2d319e9ec522bb4e6d347576c08a0399d9f56fd94421dcb6e3716bf55123683666608812930c612370ae8141221d9931086fa49c9176373b633df6971863e010e383796ca173b09760acbab54279d0f0aab86f9fc010c121320447005023a7888b612ab1a324818a63bd97b0b870dfbf382b3f816053b878e9eeca15a", 0x2, 0x0, 0x80}, 0x50) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000140)="39c9d95cfc5af0bd546c108f4fc1d0112af41fbc13871110b80807dafc310bb7b3fdcd5921c2d2b90c85988684e9ab1ca6", 0x31}], 0x1, 0xb) splice(0xffffffffffffffff, &(0x7f0000000040), 0xffffffffffffffff, 0x0, 0x800000000ff, 0x0) 2m20.659548655s ago: executing program 1 (id=3325): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 2m20.654074123s ago: executing program 4 (id=3326): unshare(0x4c030680) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x13, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6}]}]}, 0x44}}, 0x0) unshare(0x22020600) sendmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r3, 0x890c, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00'}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) write$ppp(0xffffffffffffffff, &(0x7f00000010c0)="1e", 0x1) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000040)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r5 = socket(0x15, 0x5, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r5, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000003580)={@val={0x0, 0x86dd}, @val={0x0, 0x3, 0x9, 0xca9, 0x1, 0x9}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x2042, 0x2c, 0x1, @local, @mcast2, {[@fragment={0x32}], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x5, 0xd, 0x5, 0x7, [{0x4, 0x180, "52622c84a59ad3c2f9164889210dc8df695bb1063e5f946c2dedd57e686bcd5feb19678f1edc7ffe74e1480ffe5658871d1578afe35e813e01f26e6e25adeecb7295daea9879a37eb8d4efb20333855bbc74c1e8ba79a2ac3fe1cacc06e9c625f451a4e55015d6549b557cbf2f125991cdf63e25c3ac6038e19f8f8dc96bb8158230be02440134f268f3db86df2ae269282e16ca762e14799e350cf58f12e9af898e0e45088113764069b429b8cfbea36f1ef600363d12f8e7d42809ccca46bd9fd231813f658032626897405db399641e4a814b549793435f306de7e990baaceaa0978287b57dbf2262595ad7aa2ab7fde9d974fb1bdd1ee18466efce4305f0a08c356810f11d7b03d29db70760960234c88bff9a3ec7f37c7b4217adc33899d54c59c202db92e223d4efdcd7b315427ffc756998453b1e18f66731d35ea1010943e91b20040735d56649ace0cbf1d007a2e34a7569cf0009927ca1ffea0753fe1267960beb5256db2a2863b8efa4c723122818f215d1bb54e2c5833514d3edf2a8c18b8808957a4355d5beaa6207ce0a8993835c67c2b7d430fdff065bbbfd819c06ba1be6c3211290ca599878777415fc3280df83ef83a023cd8e948b3ece68bfbd3f35054d8c4cf9684bace28e063bd6915a9223c8ee28c15282eefee74dfd36554f3d1f4cddf5ba73408eb7d4760359037c2a492cfa4352c44a21a11814ebc0df5b973d7af5a9d82077ec14b2dd66de0754fd6afa90e8f1e3ef9910b6034a162d0cafe6e3895722d108cbb17cf0e6610dfbb98343976f9045e9aeaf9c3a46622ee7c54e559db00ba2cc516627a5ae4fe82cbf758ee488dd19ddbbbac54432342788e5492bc916521b9daec7ca70aeaf19a5f69f578043b1a991cf864e90e18ba246f47213469d9df2c4d98d9bf0036b58a4ea0a47976db1c3fb6b982d7964e4742cfdffe57a8bc3e300338cb777724384c134be930203dc5cd1425e9e6cc6bae28396b6d78bd91ce3fda1ee1d0cc5a6e481eb953d2f2bdc8732b664f81137fad8d65cc71531e2044831add1670f7b1400cb7e5199eb1301af035278665d04129f0cfe3dc06d64f87b7c1adf448732e1c01599aa3562cad2e2ed4233d151af986046ba7e9c5df8803141a33375d44dcc6281a4432942bac409ba99865d66907ee495b1364266fac8ea1d93d8679a2420d72902a26d362116fa70105656c832e3b8f91ddcf191b62595203e51bdf90cbd33c1c7ac3ca8445969c961e761a0bc08721c8188827b54338e8144e5c9ce8c57f43b8c2f902c3d05cec6227a8ea534ec8678a9f13f1cfeb75da4c65d69351c472fea95cc00ef0c0864e2eb3adfb58adad990ac87146e2d2c4015c0e626c17fefd3d49967722b6e9e9f181174db10b486326d8980108084019a3194bd32029acb7d353d1e7eea62df034e8d68cee9ab82cf1cb24173ab7bdd5a477ccaed7b5a37927e8feec160903186100858aead47ef20f61ae736825c321d8ed0d0390d2841f2f269826dc51f4a03203f8a80720aa21b9fa1f0211efd2d0498726dfd61c094fb0edfde3186b8be130bbeacec525b037b6e667d98170f428ee784c233bda63938b663186cd9839a142e31f454080f39cae3a8ab3593ca1562357addd74701ca042c9fc41ff20b9a1c3c31e1201031ba3eba89e1cd4037dfd21f2c4a203df41c1846ee38d6c7f91794185f8ba19b6943d01433c195174128a613aab6ab8d65a480d03003075820d6be0f9c0f76084d2136c747adae0fc8606379a5ac64de7b0c2a1c77d0187e3248fc05cac23797e60ef77a3423980aad45e037da44e0402c304303db45447688d8ae9da61a36b3353cbb293566799a7d742e27fe266573542b700c8b5816625ee364d4f2c8e1700701174eba7fb450c9677cb0f1a69afb860b6e99f13adb3420ad315710d8cb01735fa0f94ba04b967f343b2eeb03341f331c1915189cdf62e9f12fd01a5614e255067ff334ff76655ab5dbb762a6c9a2d471bb6e27d2edf058d4d0fbbcd74468c6e560b563e22b1abbf5b7b014987c443008e4415df618ef56324fe27583135221ac163623dfca8dec8f38d36a1d85ae599d0597c06f69d970abf107fa0b566896d8c00158b27f5c8cae5703f565de035f415cc2f7d7d9eb15972685f3345199cb0284d40eb6ed16358fecc36333f753df16f98c473512a5121227cb72b9fa6a1b06c1ef8bf0b471a3c8ed6f83ccdcb5a208115591a792e8391d8c409bda3619f98699fa8d9cd99b63f915f99225cb7c3b8536556c3869162fccb50a18c090467e562820db64e657117bf4ad22fd54253905de30e70d01dcc80545438799b07b0f541234fd4f1e3b95077fffa154633c2348f9e976a2c495af5dd51b41e219d444f0115c5f48f0eb1e5d6c4269b93804fcc1f440939569e4d9ce01755d01ead748ac774bbef50e2731e519d4a4a840b98c5962794f8fb94d2701be6ac7bf2594e82481ad42f60334efd2e06be5d25358339a0460c678a48af6a8eb88e415750fbe9efce6a3c51711cbe7b753d0147146b6e348730ce57ee72ecaa84c4e05cf6197af2a2c4edc4c54cdb826d1821d47600e9bd6f1f39248d54861d88a7ffad429d7d8d058023fb75b489c9632ec00b9b22624a310cba51a0be360ffdfbbcabcb18b32ff6b790542175b10048f4ef801bc77c15903661fdb6e2fc0189bc859b18a62f42e139761a77e50f72d4369ec0c04a680609e8c14b17d1ff9db72c883c56b3e3b96b3682af28efd2c0dc7c2dcdea0dfb28a02963b7c11984fb47d1b34bbab649dbb3fe0df2be91814fcec7991211ef361c190e89e58f71861b6342ab98b96c00c4d9778c5f5130203b820119161fa06a393a87f30e65b08bfce9d43293a193d93506843f1925f80ad59ff216159a518a3df59ddbbb46e431ac92dd7e36792f3cc1a6b52d7726a76679d1369d4b328fe9c47ea9cb8b6bcffbfc020ddd886dd38cf9c2ea372eed484a064ceef5dfe346b339ac82fdc2bccf36f228a673e9a84b4abf9b2c7b8bc509ad0236213b31e9bc784bf47a08caa552a83dc764949631cc238b1e4f31a917e371d309b68a40f53937449c0ba2a49e19bdd37c91e9f06068b407bed3a65af157634f26e97930000f0749003ecd241225bb336258752225cf607d365667d928e8c8dfdd77b6f5af4b142cea34de1bbf3ef5d578385290c30720595bfdf06daedff986157888df6afdeb9f5c3393d5ba470d81efa032a65a6ea1800f2f1701c04b8750237577c2e37db31d3e4fdadd56b2e8122b6000b38a25190ef9e4febe3e6535dee6ed6179df3ec554569fb0b249a6b34d265d28e699b4d7f4a8ae19feda58fe02ba6f33030b9783d2f62a748fde57d6f2949e3656dbcd2681a3e8e47eef6b3aac3f29ed8855068fd1e0597459fea1a431c7267e214b54bf2b00e23ece0780e50555e9490a972b79929a5773cefd9df10a7af963ccee62c64cc4cff7185927d311024cad7522c2b2f514693557093757514ae3854458b33f0df0a082fe99c325f43841e880e991e500b398442ebc24fa428c5302cfabde9e0556504f5600cea1ca1c070922eb3b1d3a321d39184f9e7db0a29db4df834ea756d5eee2bcb59d17e9fe0d6e1cb4459741a962e6d81b4546df21d6c122792d59671b4c32896ee802a6d9c48212a2b031320d73ca8e3fb480991192861ae5eff3aedbe2ef01f279d2455e3f633896f3fe028cabac8fbf5655d7d6fd02e496e4cc8a572543aa77d92d76e4aaa3d0b8560b1c1f7fa43b531117dd89ad6056b781c826970dd0ab01652b85686461a0a135292dd4cc7daa8df38cf7132371a6ee14153c8cd186611737943de970c94713a1ac72dfc292b3e79029fbb7762645c06d724e218ff4fa50b6399d7276156f00d10f3378096b38413200ed68ccd81a4d1d2cf35fe5415c023df7f40906a3f808d3133a0108f4ed6fbe922e6bf607699baf32dc1de8783a6fa2eda49a2bddb4ee9a97b795a302f4d270c07a42633f93ec24c2cda8114c0fc0e4151446d8dc607d9d4a339bf967f1c854bd7aef3c554529c3198d200de1695e294a96119a71e108d18f5fd26fc8a9590ffbc1e580e5cd973883fd3193ad6cdb36b6895d4ebff6624a020ada21f29a6d5ffb58e6f55e2df5c164f5010e2dd2a098e00ecaeb274f958ce61eb657c02a41c4a241d2815afb657939c1cbeecb48038bf6376646268d3e61e70b66f15154b8fe3a28cc1fc7a5143a23405bb431722f224c5925a50e8b5c404f52a795e9e3ac04e800c3f09750c3bffc0025b6c762b9364756d6b1d77f35c6afb74ac3b43efa033872fd7cd3925ac"}, {0x19, 0x200, "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"}, {0x18, 0x1c, "4f4846f03c2eebc8d9e176857f9edf1e87cd5647f0c7d61e907b821eba9508b77314c2e49cb4290a2e2de2225d4e719e1b005853f5dde55d7dc28baa0b52af2e5b012bd01bda8415c0324086876acd1f11a2ab546c87da2c4f62afa1ac0f645c17756cf5591a323182f0296dbdb2e7b201ef211a82722179c90151dcb268f0d2b55179aef654871e5fd8c3529603d64f105f0709ac06299c578bce8bd088c3409159470f5a565990706c2f26aac03fbda7d1e8c0d58bc5a77e17e8611f64dcdb8790e66fe643797c29b3d9f151a96994f495e8f27f3c26a2bdee567c5ca28fae19"}, {0x1f, 0x6, "75e39aefb91f213cd43b1455d387c2f8702467d1fb49de62a8d1f9646af0d97f2c1da6efb546dff4188cc773d4e6289a"}, {0x1, 0x16, "7d96db111beeeee1f1cb63b2378cd9009587b176030f4320a43c3b55a62c17545090878b31c42c4951c67cf37b1527a4d2537863f77064c8b7a0080485f8b8998ce819495c5dfb7d213282fe64b4d1e618380fbf28a2d298d04267b0da54ef05268bac577a850bb0dd29d58107be58b2058c5a9291945912be67ea8ddeb4aee2bcdc9f83cde75d5a36b12ab2d7069d4c544fe97fad69b84e6077d9a905e2e6a4243865e2856120843ef58b587d833dc6dcbc59"}, {0x0, 0x12, "425fbc988a12d61216b8c58b685a1be6f90fb42965c75151b5a07fdbdd9f6481c309296467e54fc9b869e5af02aa8d7c066851113bacb940db76850e7ab03963a2fb860164627f51b198e0612a2ca2eda41fc0a4e86820071247061c7cf124fade2ccfc93b73d52de8f8fd5be03632382b56435afa30d90ec535b9077cec6ebfc4544578586666835f05b3a2c1a9e8"}, {0x22, 0x1e, "7a0b785779ab70e79fa44ec2533fc2fe81836e67efd0ab24810c3e87c1da719493fcb23d77c5a7acafcd7ae8963ba7970cb2c9aa6233e75bbe61af3496d3271dcd653b19afdbee422f22c75c720a97b3f4e55f53e4350200000000000000b0665eeba2c2d28191fac9d272a0998cd73a5503a0e493a6b8bf8caa5a35a6b7ae71ab62ce4ce3c97d1c704e656d16ed07d6ea6f64c8ed23ac0bb5375321da78e0103424afbed71c9a9a740000000000000081eb6a6208cb10d028240dd8a5b7510c9f611f20a71b77afb53d53d0fb1a2cd4f6131f222acbc27e933fe47caaa1f52089a635bd330ea2b2642a2df54e25cd3970350a"}, {0x2, 0x18, "cb2b23ec27dd8b01e0575f984480631e481bad62541e3f69347eced42c4e9870660dbef5ed54bd8bd58d853f8eb7f2f98a5b8304eea146af34c52de3c3fd3017c0aa5002cdff50d971db16ccaf122e22ac33569bfddb97decb222a66d49fd8ad1586ffc802c8a02a9f7517b7606541335fcbe4c0708f00bd3a9215e842d41ec178c724392eb4da0e51c2bd7b39c64a020c3b321141023fbbe00b4ab40afb25fd4729f28d8aa4d1cdbffe9e4e5ee3bbd19f7629625fbd9ddcfe1f4ff6439fb37e"}, {0xe, 0x2, "e30befa1fd56694dab62d4b461113a2df5f1"}]}}}}}, 0x2078) socket$netlink(0x10, 0x3, 0x0) 2m20.17676223s ago: executing program 3 (id=3327): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x508, 0x0, 0x310, 0x310, 0x1b0, 0x310, 0x518, 0xd0, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @inet=@DSCP={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'syzkaller0\x00', 'team_slave_1\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc90}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3, 0x4}}, 0x26) getsockopt$bt_BT_SECURITY(r2, 0x111, 0x2, 0x0, 0x20001f00) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000013020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000005ec0)={'syztnl2\x00', &(0x7f0000005e00)={'tunl0\x00', r7, 0x8000, 0x7800, 0xa, 0x2, {{0x1d, 0x4, 0x2, 0x1d, 0x74, 0x67, 0x0, 0xf8, 0x4, 0x0, @loopback, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xa8, [@rand_addr=0x64010102, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x99, 0x3, 0x3, [{@broadcast, 0x1}, {@remote, 0x6}, {@local, 0x5}, {@multicast2, 0xfffffff7}, {@local, 0x2}]}, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0x6, [{@rand_addr=0x64010102, 0x8}]}, @timestamp_addr={0x44, 0x1c, 0x64, 0x1, 0x5, [{@remote, 0xfffff35a}, {@private=0xa010100, 0x5}, {@local, 0x6}]}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x6558, r7, 0x1, 0x7}, 0x14) 2m20.089343963s ago: executing program 1 (id=3328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) (fail_nth: 6) 2m19.060991s ago: executing program 1 (id=3329): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x16) 2m18.981108838s ago: executing program 1 (id=3330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd014100000000140000006000000001002f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001000088be", @ANYRESHEX=r1], 0xfdef) 2m18.760387082s ago: executing program 0 (id=3331): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2m18.151891376s ago: executing program 0 (id=3332): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ec0), r3) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000300)={0x2c, r4, 0xc01, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98a}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080), 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)={0x68, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x7c}}}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @from_mac, {0x6, 0x6b}, @value=@ver_80211n={0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, 0x1700, 0x6, {0x0, 0x6, @default_ibss_ssid}, @void, @void}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x435}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x8804) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x74}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000240), 0x10, &(0x7f00000002c0)={&(0x7f0000000400)={0x1, 0x688, 0xf, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "03840be9b81be3a3"}}, 0x48}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0800000053150000040000005a12000010010000008f85cb661797163ca0ad517e3991aae8fca4677f2e65c3591943d79c3d242d1a90b9cd4cf2bef7bbb04b4d", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32, @ANYRES32=r0, @ANYBLOB="04000000030000000100"/28], 0x50) 2m17.376256524s ago: executing program 3 (id=3333): unshare(0x42000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRES8, @ANYRESOCT=r0], 0xfffffdaf, 0xe000}, 0x5}], 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4084010) recvmsg$unix(r3, 0x0, 0x2042) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="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", @ANYBLOB="d48fad918961c425bd29d0750b32c3a842d7bbe61018145e1a134509988ae8ab55bf67a1a1dadbc3e678020c519aca64831ef11ef55e738712c1ca2a91cc564ad51f4eeda2fcdaebf8de9500ba65b48f28244361c213fc4d5305f5c10f46cf731f9ee1307cacbabcf4cbbcac249d46fecfd449fceb6251c51dbab290fad99e9eb8b1e16125a8597e6ff346b392e5df7910e8f055e72cc5f5efde06aa61c4eb49f81eb35fdfbe96f336d116904b95d04aef2a659a7acbd1504ceaa9e01a62421a00cb91aa5e66a61d7df4c5", @ANYRESDEC=r0], 0x128}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000100)) 2m17.313645052s ago: executing program 0 (id=3334): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf251200000008000300", @ANYRES32=0x0, @ANYBLOB="5309b92e6f1f1c3df55d96a0b12d6222910e6784d1b3fbc39a81137e3f07883b91fa6d98e7f282d3f33d4c11734cb78ff1ada330ca45789588fa4a5264630778e9338116c3b1c50ebba840d480d273d49c44f75510"], 0x1c}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240), 0x0) getsockopt$inet_tcp_buf(r1, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={0x1, 0x58, &(0x7f0000000440)}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x14, r7, 0x20, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2000c083}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, 0x0, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r10) sendmsg$NLBL_MGMT_C_REMOVE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="01002bbd7000fcdbdf2502000000050001000000000058a838fa11ba9702add79aa0430480925d2ba26b90a2a13b"], 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x10000000) bind$tipc(r4, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @local, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[@ANYBLOB="2f5b02cb75dbaaaaaaaaaaaa86dd6001810000481100fe80e5000000000002000000000000bbfe8000000200000000000008000000aa60200e2200489078030000000200000088c73b21f267636d01dbe571411c941e1cdafbbb43f09c70e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b4800c9b4"], 0x0) 2m17.262337091s ago: executing program 1 (id=3335): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="900000001000030500000000000000", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 2m17.015602249s ago: executing program 0 (id=3336): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x80047441, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, &(0x7f0000000280), 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000280)={0x8, 'netpci0\x00', {'wlan0\x00'}, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000004c00", @ANYRES32=0x0, @ANYBLOB="210800000000000008001b0000"], 0x44}, 0x1, 0xffffa888, 0x0, 0x48000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) 2m16.901921063s ago: executing program 4 (id=3337): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1400, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) 2m15.006100128s ago: executing program 1 (id=3338): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_linger(r3, 0x1, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5, 0x0, 0xfffffffffffffffd}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 1m35.388670997s ago: executing program 32 (id=3333): unshare(0x42000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRES8, @ANYRESOCT=r0], 0xfffffdaf, 0xe000}, 0x5}], 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4084010) recvmsg$unix(r3, 0x0, 0x2042) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000028c0)=ANY=[@ANYRESOCT=r2, @ANYBLOB="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", @ANYBLOB="d48fad918961c425bd29d0750b32c3a842d7bbe61018145e1a134509988ae8ab55bf67a1a1dadbc3e678020c519aca64831ef11ef55e738712c1ca2a91cc564ad51f4eeda2fcdaebf8de9500ba65b48f28244361c213fc4d5305f5c10f46cf731f9ee1307cacbabcf4cbbcac249d46fecfd449fceb6251c51dbab290fad99e9eb8b1e16125a8597e6ff346b392e5df7910e8f055e72cc5f5efde06aa61c4eb49f81eb35fdfbe96f336d116904b95d04aef2a659a7acbd1504ceaa9e01a62421a00cb91aa5e66a61d7df4c5", @ANYRESDEC=r0], 0x128}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, &(0x7f0000000100)) 14.941447541s ago: executing program 4 (id=3340): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140), 0x16) 0s ago: executing program 33 (id=3336): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x80047441, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) socket(0x10, 0x3, 0x0) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2f, &(0x7f0000000280), 0x4) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000280)={0x8, 'netpci0\x00', {'wlan0\x00'}, 0x3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000010828bd70000000000000004c00", @ANYRES32=0x0, @ANYBLOB="210800000000000008001b0000"], 0x44}, 0x1, 0xffffa888, 0x0, 0x48000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): repare+0x10/0x10 [ 325.456955][T15322] ? do_syscall_64+0x100/0x230 [ 325.456979][T15322] ? do_syscall_64+0xb6/0x230 [ 325.457006][T15322] do_syscall_64+0xf3/0x230 [ 325.457027][T15322] ? clear_bhb_loop+0x35/0x90 [ 325.457051][T15322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.457071][T15322] RIP: 0033:0x7f111698cda9 [ 325.457087][T15322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.457101][T15322] RSP: 002b:00007f11147f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.457119][T15322] RAX: ffffffffffffffda RBX: 00007f1116ba5fa0 RCX: 00007f111698cda9 [ 325.457130][T15322] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 325.457140][T15322] RBP: 00007f11147f6090 R08: 0000000000000000 R09: 0000000000000000 [ 325.457149][T15322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.457158][T15322] R13: 0000000000000000 R14: 00007f1116ba5fa0 R15: 00007ffe363e0768 [ 325.457182][T15322] [ 325.472018][T15288] team0: Port device team_slave_1 added [ 325.627446][T15323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2878'. [ 325.640219][T15326] lo speed is unknown, defaulting to 1000 [ 325.676897][T15323] netlink: 'syz.3.2878': attribute type 3 has an invalid length. [ 325.817720][T15323] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2878'. [ 325.865354][T15326] lo speed is unknown, defaulting to 1000 [ 325.867018][T15288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.882930][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.924701][T15288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.936992][T15328] lo speed is unknown, defaulting to 1000 [ 325.962864][T15288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.970105][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.003490][T15288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.022446][T15328] lo speed is unknown, defaulting to 1000 [ 326.128338][T15288] hsr_slave_0: entered promiscuous mode [ 326.134515][T15288] hsr_slave_1: entered promiscuous mode [ 326.141813][T15288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.150011][T15288] Cannot create hsr debugfs directory [ 326.201138][T15341] netlink: 'syz.3.2883': attribute type 75 has an invalid length. [ 326.570748][ T5844] Bluetooth: hci5: command tx timeout [ 326.931884][T15288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.951532][T15288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.987815][T15288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 327.062635][T15288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 327.263143][T15288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.334938][T15288] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.361807][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.368958][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.427219][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.434358][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.467782][T15366] lo speed is unknown, defaulting to 1000 [ 327.479921][T15288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.496572][T15288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.510447][T15366] lo speed is unknown, defaulting to 1000 [ 328.116439][T15288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.209183][T15394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2903'. [ 328.308203][T15288] veth0_vlan: entered promiscuous mode [ 328.364579][T15288] veth1_vlan: entered promiscuous mode [ 328.382866][T15404] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 328.397190][T15404] netlink: 'syz.4.2905': attribute type 1 has an invalid length. [ 328.405075][T15404] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2905'. [ 328.461249][T15288] veth0_macvtap: entered promiscuous mode [ 328.489841][T15288] veth1_macvtap: entered promiscuous mode [ 328.523341][T15288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.549947][T15288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.589264][T15288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.620138][T15288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.642378][T15288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.645453][ T5844] Bluetooth: hci5: command tx timeout [ 328.675351][T15288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.813367][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.828857][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.877919][T15416] lo speed is unknown, defaulting to 1000 [ 328.906330][T15416] lo speed is unknown, defaulting to 1000 [ 328.912333][ T3478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.921829][ T3478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.368883][T15428] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 329.376174][T15428] IPv6: NLM_F_CREATE should be set when creating new route [ 329.383425][T15428] IPv6: NLM_F_CREATE should be set when creating new route [ 330.157711][ T5840] syz_tun (unregistering): left promiscuous mode [ 330.360071][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 330.369479][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 330.396015][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 330.404789][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.414007][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 330.435504][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.452892][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2920'. [ 330.496485][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2920'. [ 330.510141][T15450] lo speed is unknown, defaulting to 1000 [ 330.521816][T15450] lo speed is unknown, defaulting to 1000 [ 330.733905][ T5852] Bluetooth: hci5: command tx timeout [ 330.776395][T15468] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2923'. [ 330.866044][T15450] chnl_net:caif_netlink_parms(): no params data found [ 330.958453][T15480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2927'. [ 331.001044][T15480] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2927'. [ 331.016028][T15450] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.031048][T15450] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.045629][T15450] bridge_slave_0: entered allmulticast mode [ 331.063128][T15450] bridge_slave_0: entered promiscuous mode [ 331.077111][T15450] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.085118][T15450] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.093280][T15450] bridge_slave_1: entered allmulticast mode [ 331.100414][T15450] bridge_slave_1: entered promiscuous mode [ 331.149053][T15450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.161609][T15450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.233837][T15450] team0: Port device team_slave_0 added [ 331.257245][T15450] team0: Port device team_slave_1 added [ 331.310050][T15450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.325529][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.385288][T15450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.408077][T15450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.415026][T15450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.475913][T15499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2935'. [ 331.485256][T15450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.517228][T15498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 331.661638][T15450] hsr_slave_0: entered promiscuous mode [ 331.689359][T15450] hsr_slave_1: entered promiscuous mode [ 331.696917][T15450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 331.714676][T15450] Cannot create hsr debugfs directory [ 331.866234][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2941'. [ 332.107307][T15521] netlink: 'syz.4.2942': attribute type 66 has an invalid length. [ 332.126202][T15526] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2943'. [ 332.485483][ T5852] Bluetooth: hci0: command tx timeout [ 332.651574][T15538] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.660591][T15538] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.669428][T15538] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.678275][T15538] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.701218][T15538] vxlan0: entered promiscuous mode [ 332.711609][T15538] vxlan0: entered allmulticast mode [ 332.738594][T15538] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.747684][T15538] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.756678][T15538] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.765605][T15538] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 332.800576][T15450] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 332.807415][ T5852] Bluetooth: hci5: command tx timeout [ 332.818483][T15450] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 332.834734][T15549] FAULT_INJECTION: forcing a failure. [ 332.834734][T15549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.849401][T15450] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 332.873171][T15549] CPU: 1 UID: 0 PID: 15549 Comm: syz.0.2951 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 332.873193][T15549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 332.873203][T15549] Call Trace: [ 332.873210][T15549] [ 332.873218][T15549] dump_stack_lvl+0x241/0x360 [ 332.873245][T15549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.873263][T15549] ? __pfx__printk+0x10/0x10 [ 332.873289][T15549] ? __pfx_lock_release+0x10/0x10 [ 332.873311][T15549] ? __lock_acquire+0x1397/0x2100 [ 332.873338][T15549] should_fail_ex+0x40a/0x550 [ 332.873363][T15549] _copy_from_user+0x2d/0xb0 [ 332.873380][T15549] kstrtouint_from_user+0xc6/0x190 [ 332.873405][T15549] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 332.873444][T15549] ? __pfx_lock_acquire+0x10/0x10 [ 332.873482][T15549] proc_fail_nth_write+0xaa/0x2d0 [ 332.873506][T15549] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 332.873526][T15549] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 332.873554][T15549] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 332.873580][T15549] vfs_write+0x29f/0xd10 [ 332.873603][T15549] ? fdget_pos+0x254/0x320 [ 332.873625][T15549] ? __pfx_vfs_write+0x10/0x10 [ 332.873650][T15549] ? __fget_files+0x2a/0x410 [ 332.873669][T15549] ? __fget_files+0x395/0x410 [ 332.873686][T15549] ? __fget_files+0x2a/0x410 [ 332.873713][T15549] ksys_write+0x18f/0x2b0 [ 332.873736][T15549] ? __pfx_ksys_write+0x10/0x10 [ 332.873755][T15549] ? trace_sys_enter+0x74/0x120 [ 332.873777][T15549] ? rcu_is_watching+0x15/0xb0 [ 332.873794][T15549] ? trace_sys_enter+0x25/0x120 [ 332.873822][T15549] do_syscall_64+0xf3/0x230 [ 332.873843][T15549] ? clear_bhb_loop+0x35/0x90 [ 332.873868][T15549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.873888][T15549] RIP: 0033:0x7f659fb8b85f [ 332.873904][T15549] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 332.873919][T15549] RSP: 002b:00007f65a0994030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 332.873938][T15549] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f659fb8b85f [ 332.873951][T15549] RDX: 0000000000000001 RSI: 00007f65a09940a0 RDI: 0000000000000004 [ 332.873961][T15549] RBP: 00007f65a0994090 R08: 0000000000000000 R09: 0000000000000000 [ 332.873972][T15549] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 332.873982][T15549] R13: 0000000000000001 R14: 00007f659fda6080 R15: 00007fff0fffaca8 [ 332.874009][T15549] [ 332.891560][T15450] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 333.139071][T15553] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2953'. [ 333.264738][T15557] FAULT_INJECTION: forcing a failure. [ 333.264738][T15557] name failslab, interval 1, probability 0, space 0, times 0 [ 333.300729][T15557] CPU: 1 UID: 0 PID: 15557 Comm: syz.2.2955 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 333.300752][T15557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 333.300763][T15557] Call Trace: [ 333.300770][T15557] [ 333.300778][T15557] dump_stack_lvl+0x241/0x360 [ 333.300804][T15557] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.300822][T15557] ? __pfx__printk+0x10/0x10 [ 333.300848][T15557] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 333.300868][T15557] ? __pfx___might_resched+0x10/0x10 [ 333.300894][T15557] should_fail_ex+0x40a/0x550 [ 333.300916][T15557] should_failslab+0xac/0x100 [ 333.300941][T15557] kmem_cache_alloc_node_noprof+0x77/0x380 [ 333.300958][T15557] ? __alloc_skb+0x1c3/0x440 [ 333.300984][T15557] __alloc_skb+0x1c3/0x440 [ 333.301011][T15557] ? __pfx___alloc_skb+0x10/0x10 [ 333.301036][T15557] ? netlink_ack_tlv_len+0x6e/0x200 [ 333.301062][T15557] netlink_ack+0x145/0xa50 [ 333.301083][T15557] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 333.301103][T15557] ? __pfx_nl80211_post_doit+0x10/0x10 [ 333.301123][T15557] ? __pfx___might_resched+0x10/0x10 [ 333.301150][T15557] netlink_rcv_skb+0x262/0x430 [ 333.301172][T15557] ? __pfx_genl_rcv_msg+0x10/0x10 [ 333.301193][T15557] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 333.301228][T15557] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 333.301265][T15557] genl_rcv+0x28/0x40 [ 333.301282][T15557] netlink_unicast+0x7f6/0x990 [ 333.301311][T15557] ? __pfx_netlink_unicast+0x10/0x10 [ 333.301330][T15557] ? __virt_addr_valid+0x45f/0x530 [ 333.301353][T15557] ? __phys_addr_symbol+0x2f/0x70 [ 333.301374][T15557] ? __check_object_size+0x47a/0x730 [ 333.301403][T15557] netlink_sendmsg+0x8e4/0xcb0 [ 333.301449][T15557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.301476][T15557] ? aa_sock_msg_perm+0x91/0x160 [ 333.301504][T15557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.301524][T15557] __sock_sendmsg+0x221/0x270 [ 333.301545][T15557] ____sys_sendmsg+0x52a/0x7e0 [ 333.301575][T15557] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.301596][T15557] ? __fget_files+0x2a/0x410 [ 333.301616][T15557] ? __fget_files+0x2a/0x410 [ 333.301642][T15557] __sys_sendmsg+0x269/0x350 [ 333.301670][T15557] ? __pfx___sys_sendmsg+0x10/0x10 [ 333.301715][T15557] ? trace_sys_enter+0x74/0x120 [ 333.301737][T15557] ? __pfx_lock_release+0x10/0x10 [ 333.301766][T15557] ? trace_sys_enter+0x74/0x120 [ 333.301784][T15557] ? rcu_is_watching+0x15/0xb0 [ 333.301800][T15557] ? trace_sys_enter+0x25/0x120 [ 333.301826][T15557] do_syscall_64+0xf3/0x230 [ 333.301846][T15557] ? clear_bhb_loop+0x35/0x90 [ 333.301870][T15557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.301890][T15557] RIP: 0033:0x7f8292f8cda9 [ 333.301906][T15557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.301919][T15557] RSP: 002b:00007f8293d52038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.301937][T15557] RAX: ffffffffffffffda RBX: 00007f82931a5fa0 RCX: 00007f8292f8cda9 [ 333.301949][T15557] RDX: 00000000000408c0 RSI: 0000000020001300 RDI: 0000000000000003 [ 333.301961][T15557] RBP: 00007f8293d52090 R08: 0000000000000000 R09: 0000000000000000 [ 333.301972][T15557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.301983][T15557] R13: 0000000000000000 R14: 00007f82931a5fa0 R15: 00007fff537eb2d8 [ 333.302011][T15557] [ 333.384524][T15450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 333.685653][T15450] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.700866][T15562] Cannot find set identified by id 0 to match [ 333.804788][ T7146] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.812009][ T7146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.866206][ T7146] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.873325][ T7146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.948719][T15562] bond3: entered promiscuous mode [ 333.953897][T15562] bond3: entered allmulticast mode [ 333.959788][T15562] 8021q: adding VLAN 0 to HW filter on device bond3 [ 334.375998][T15596] FAULT_INJECTION: forcing a failure. [ 334.375998][T15596] name failslab, interval 1, probability 0, space 0, times 0 [ 334.388684][T15596] CPU: 1 UID: 0 PID: 15596 Comm: syz.2.2965 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 334.388705][T15596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 334.388716][T15596] Call Trace: [ 334.388723][T15596] [ 334.388730][T15596] dump_stack_lvl+0x241/0x360 [ 334.388756][T15596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.388774][T15596] ? __pfx__printk+0x10/0x10 [ 334.388809][T15596] should_fail_ex+0x40a/0x550 [ 334.388832][T15596] should_failslab+0xac/0x100 [ 334.388857][T15596] ? skb_clone+0x20c/0x390 [ 334.388872][T15596] kmem_cache_alloc_noprof+0x70/0x380 [ 334.388895][T15596] skb_clone+0x20c/0x390 [ 334.388909][T15596] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 334.388932][T15596] dev_queue_xmit_nit+0x249/0xca0 [ 334.388955][T15596] ? dev_queue_xmit_nit+0x2b/0xca0 [ 334.388976][T15596] ? validate_xmit_skb+0x9b8/0xff0 [ 334.389003][T15596] dev_hard_start_xmit+0x15f/0x7d0 [ 334.389026][T15596] ? __pfx_validate_xmit_skb+0x10/0x10 [ 334.389060][T15596] __dev_queue_xmit+0x1b73/0x3f50 [ 334.389076][T15596] ? kasan_save_track+0x51/0x80 [ 334.389102][T15596] ? ____sys_sendmsg+0x52a/0x7e0 [ 334.389131][T15596] ? __dev_queue_xmit+0x2f4/0x3f50 [ 334.389152][T15596] ? __pfx___dev_queue_xmit+0x10/0x10 [ 334.389186][T15596] ? __copy_skb_header+0x437/0x5b0 [ 334.389204][T15596] ? __asan_memcpy+0x40/0x70 [ 334.389224][T15596] ? __copy_skb_header+0x437/0x5b0 [ 334.389245][T15596] ? __skb_clone+0x454/0x6c0 [ 334.389269][T15596] ? skb_clone+0x240/0x390 [ 334.389298][T15596] __netlink_deliver_tap+0x56b/0x7f0 [ 334.389331][T15596] ? netlink_deliver_tap+0x2e/0x1b0 [ 334.389352][T15596] netlink_deliver_tap+0x19d/0x1b0 [ 334.389374][T15596] netlink_unicast+0x7c4/0x990 [ 334.389403][T15596] ? __pfx_netlink_unicast+0x10/0x10 [ 334.389422][T15596] ? __virt_addr_valid+0x45f/0x530 [ 334.389446][T15596] ? __phys_addr_symbol+0x2f/0x70 [ 334.389467][T15596] ? __check_object_size+0x47a/0x730 [ 334.389496][T15596] netlink_sendmsg+0x8e4/0xcb0 [ 334.389532][T15596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.389560][T15596] ? aa_sock_msg_perm+0x91/0x160 [ 334.389586][T15596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.389607][T15596] __sock_sendmsg+0x221/0x270 [ 334.389628][T15596] ____sys_sendmsg+0x52a/0x7e0 [ 334.389667][T15596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 334.389688][T15596] ? __fget_files+0x2a/0x410 [ 334.389710][T15596] ? __fget_files+0x2a/0x410 [ 334.389732][T15596] __sys_sendmsg+0x269/0x350 [ 334.389761][T15596] ? __pfx___sys_sendmsg+0x10/0x10 [ 334.389796][T15596] ? do_sys_openat2+0x17a/0x1d0 [ 334.389843][T15596] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 334.389867][T15596] ? do_syscall_64+0x100/0x230 [ 334.389892][T15596] ? do_syscall_64+0xb6/0x230 [ 334.389915][T15596] do_syscall_64+0xf3/0x230 [ 334.389935][T15596] ? clear_bhb_loop+0x35/0x90 [ 334.389960][T15596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.389979][T15596] RIP: 0033:0x7f8292f8cda9 [ 334.389995][T15596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.390008][T15596] RSP: 002b:00007f8293d31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.390025][T15596] RAX: ffffffffffffffda RBX: 00007f82931a6080 RCX: 00007f8292f8cda9 [ 334.390037][T15596] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 334.390048][T15596] RBP: 00007f8293d31090 R08: 0000000000000000 R09: 0000000000000000 [ 334.390059][T15596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.390069][T15596] R13: 0000000000000001 R14: 00007f82931a6080 R15: 00007fff537eb2d8 [ 334.390099][T15596] [ 334.567236][ T5852] Bluetooth: hci0: command tx timeout [ 334.876041][T15450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.948925][T15606] lo speed is unknown, defaulting to 1000 [ 334.993732][T15606] lo speed is unknown, defaulting to 1000 [ 334.996084][T15450] veth0_vlan: entered promiscuous mode [ 335.130824][T15450] veth1_vlan: entered promiscuous mode [ 335.259897][T15450] veth0_macvtap: entered promiscuous mode [ 335.284028][T15450] veth1_macvtap: entered promiscuous mode [ 335.301648][T15450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.312148][T15450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.324538][T15450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.361450][T15450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.372965][T15450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.384342][T15450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.411507][T15450] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.429310][T15450] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.445681][T15450] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.466712][T15450] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.487297][T15623] __nla_validate_parse: 5 callbacks suppressed [ 335.487312][T15623] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2975'. [ 335.666719][ T7146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.674572][ T7146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.813203][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.845690][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.073738][T15646] FAULT_INJECTION: forcing a failure. [ 336.073738][T15646] name failslab, interval 1, probability 0, space 0, times 0 [ 336.095029][T15646] CPU: 1 UID: 0 PID: 15646 Comm: syz.3.2915 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 336.095054][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 336.095064][T15646] Call Trace: [ 336.095071][T15646] [ 336.095079][T15646] dump_stack_lvl+0x241/0x360 [ 336.095104][T15646] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.095121][T15646] ? __pfx__printk+0x10/0x10 [ 336.095147][T15646] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 336.095167][T15646] ? __pfx___might_resched+0x10/0x10 [ 336.095195][T15646] should_fail_ex+0x40a/0x550 [ 336.095217][T15646] should_failslab+0xac/0x100 [ 336.095241][T15646] kmem_cache_alloc_node_noprof+0x77/0x380 [ 336.095259][T15646] ? __alloc_skb+0x1c3/0x440 [ 336.095283][T15646] __alloc_skb+0x1c3/0x440 [ 336.095304][T15646] ? validate_chain+0x11e/0x5920 [ 336.095321][T15646] ? __pfx___alloc_skb+0x10/0x10 [ 336.095342][T15646] ? reacquire_held_locks+0x610/0x690 [ 336.095360][T15646] ? mark_lock+0x9a/0x360 [ 336.095389][T15646] alloc_skb_with_frags+0xc3/0x820 [ 336.095408][T15646] ? aa_label_sk_perm+0x4f3/0x6c0 [ 336.095435][T15646] sock_alloc_send_pskb+0x91a/0xa60 [ 336.095465][T15646] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 336.095496][T15646] hci_sock_sendmsg+0x22b/0x11c0 [ 336.095521][T15646] ? __pfx_aa_sk_perm+0x10/0x10 [ 336.095538][T15646] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 336.095557][T15646] ? __pfx_aa_file_perm+0x10/0x10 [ 336.095577][T15646] ? aa_sock_msg_perm+0x91/0x160 [ 336.095600][T15646] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 336.095618][T15646] __sock_sendmsg+0x221/0x270 [ 336.095641][T15646] sock_write_iter+0x2d7/0x3f0 [ 336.095662][T15646] ? __pfx_sock_write_iter+0x10/0x10 [ 336.095697][T15646] vfs_write+0xacf/0xd10 [ 336.095718][T15646] ? __pfx_sock_write_iter+0x10/0x10 [ 336.095736][T15646] ? __pfx_vfs_write+0x10/0x10 [ 336.095752][T15646] ? do_sys_openat2+0x17a/0x1d0 [ 336.095770][T15646] ? __fget_files+0x2a/0x410 [ 336.095790][T15646] ? __fget_files+0x2a/0x410 [ 336.095815][T15646] ksys_write+0x18f/0x2b0 [ 336.095837][T15646] ? __pfx_ksys_write+0x10/0x10 [ 336.095858][T15646] ? do_syscall_64+0x100/0x230 [ 336.095882][T15646] ? do_syscall_64+0xb6/0x230 [ 336.095904][T15646] do_syscall_64+0xf3/0x230 [ 336.095924][T15646] ? clear_bhb_loop+0x35/0x90 [ 336.095948][T15646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.095969][T15646] RIP: 0033:0x7fc04c58cda9 [ 336.095984][T15646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.095998][T15646] RSP: 002b:00007fc04d367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 336.096016][T15646] RAX: ffffffffffffffda RBX: 00007fc04c7a5fa0 RCX: 00007fc04c58cda9 [ 336.096029][T15646] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000004 [ 336.096040][T15646] RBP: 00007fc04d367090 R08: 0000000000000000 R09: 0000000000000000 [ 336.096051][T15646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.096061][T15646] R13: 0000000000000000 R14: 00007fc04c7a5fa0 R15: 00007ffd89d642f8 [ 336.096088][T15646] [ 336.815527][ T5852] Bluetooth: hci0: command tx timeout [ 336.835878][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 336.844945][T15663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2985'. [ 337.084827][T15668] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2987'. [ 337.572689][T15679] lo speed is unknown, defaulting to 1000 [ 337.609844][T15679] lo speed is unknown, defaulting to 1000 [ 337.713301][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 337.745712][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 337.753812][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 337.780661][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 337.792952][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 337.801701][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 338.004095][T15685] lo speed is unknown, defaulting to 1000 [ 338.057808][T15685] lo speed is unknown, defaulting to 1000 [ 338.066932][T15696] lo speed is unknown, defaulting to 1000 [ 338.159552][T15702] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2998'. [ 338.178714][T15696] lo speed is unknown, defaulting to 1000 [ 338.707421][T15722] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 338.747526][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3003'. [ 338.816550][T15685] chnl_net:caif_netlink_parms(): no params data found [ 338.848163][T15727] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3005'. [ 338.885611][ T5844] Bluetooth: hci0: command tx timeout [ 338.963542][T15696] lo speed is unknown, defaulting to 1000 [ 338.998080][T15685] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.021750][T15685] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.029224][T15685] bridge_slave_0: entered allmulticast mode [ 339.036987][T15685] bridge_slave_0: entered promiscuous mode [ 339.044277][T15733] netlink: 'syz.2.3006': attribute type 4 has an invalid length. [ 339.062992][T15733] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3006'. [ 339.074346][T15696] lo speed is unknown, defaulting to 1000 [ 339.116810][T15735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.141447][T15685] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.149117][T15685] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.156734][T15685] bridge_slave_1: entered allmulticast mode [ 339.163797][T15685] bridge_slave_1: entered promiscuous mode [ 339.217454][T15685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.261579][T15735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.308106][T15685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.376996][T15735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.428190][T15685] team0: Port device team_slave_0 added [ 339.454182][T15740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3008'. [ 339.512975][T15735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.592222][T15685] team0: Port device team_slave_1 added [ 339.666900][T15685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.673869][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.735411][T15685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.766583][T15685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.775275][T15685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.835704][T15685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.846582][ T5844] Bluetooth: hci3: command tx timeout [ 340.062600][T15735] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.098064][T15685] hsr_slave_0: entered promiscuous mode [ 340.105017][T15685] hsr_slave_1: entered promiscuous mode [ 340.131370][T15685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 340.150179][T15685] Cannot create hsr debugfs directory [ 340.171982][T15735] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.239718][T15735] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.286809][T15756] lo speed is unknown, defaulting to 1000 [ 340.311717][T15735] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.335505][T15756] lo speed is unknown, defaulting to 1000 [ 340.579421][T15760] lo speed is unknown, defaulting to 1000 [ 340.648887][T15685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.674687][T15685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 39641 - 0 [ 340.695527][T15685] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 45223 - 0 [ 340.743552][T15760] lo speed is unknown, defaulting to 1000 [ 340.822369][T15685] netdevsim netdevsim0 netdevsim2 (unregistering): left allmulticast mode [ 340.831553][T15685] netdevsim netdevsim0 netdevsim2 (unregistering): left promiscuous mode [ 340.842664][T15685] bridge0: port 1(netdevsim2) entered disabled state [ 340.867189][T15685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.877697][T15685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 39641 - 0 [ 340.893727][T15685] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 45223 - 0 [ 340.928296][T15765] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 341.089377][T15685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.106802][T15685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 39641 - 0 [ 341.125791][T15685] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 45223 - 0 [ 341.155722][T15768] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3016'. [ 341.182716][T15765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3015'. [ 341.276541][T15772] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3017'. [ 341.491932][T15685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.522272][T15685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 39641 - 0 [ 341.542509][T15685] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 45223 - 0 [ 341.850594][T15685] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 341.894120][T15685] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 341.913677][T15685] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 341.925694][ T5844] Bluetooth: hci3: command tx timeout [ 341.963555][T15685] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.046434][T15790] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3025'. [ 342.084725][T15790] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3025'. [ 342.137411][T15789] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3025'. [ 342.291707][T15685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.341523][T15685] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.369360][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.376546][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.459521][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.466671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.897468][T15685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.977442][T15685] veth0_vlan: entered promiscuous mode [ 343.001480][T15685] veth1_vlan: entered promiscuous mode [ 343.086884][T15685] veth0_macvtap: entered promiscuous mode [ 343.107260][T15685] veth1_macvtap: entered promiscuous mode [ 343.143185][T15820] lo speed is unknown, defaulting to 1000 [ 343.162965][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 343.177200][T15685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.215838][T15685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.236514][T15685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.240664][T15833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3038'. [ 343.254774][T15685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.276815][T15685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.302599][T15685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.330187][T15685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.351471][T15685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.371522][T15685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.391048][T15685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.403755][T15820] lo speed is unknown, defaulting to 1000 [ 343.459952][T15685] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.495502][T15685] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.518059][T15685] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.545382][T15685] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.620532][T15845] openvswitch: netlink: Message has 8 unknown bytes. [ 343.703209][T15845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 343.778973][T15845] netlink: 'syz.1.3043': attribute type 12 has an invalid length. [ 343.795039][ T7158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.803901][ T7158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.889423][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.912030][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.008695][ T5844] Bluetooth: hci3: command tx timeout [ 344.108241][T15858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3046'. [ 344.242255][T15864] nftables ruleset with unbound chain [ 344.471605][T15856] tipc: Started in network mode [ 344.476792][T15856] tipc: Node identity eaff4497fc09, cluster identity 4711 [ 344.484315][T15856] tipc: Enabled bearer , priority 0 [ 344.603617][T15877] netlink: 'syz.1.3052': attribute type 1 has an invalid length. [ 344.888310][T15855] tipc: Resetting bearer [ 345.066421][T15887] openvswitch: netlink: Message has 8 unknown bytes. [ 345.284972][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.296140][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.307830][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 345.319738][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 345.329410][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 345.337883][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 345.389590][T15892] netlink: 'syz.1.3057': attribute type 12 has an invalid length. [ 345.479510][ T974] tipc: Node number set to 385238167 [ 346.085844][ T5852] Bluetooth: hci3: command tx timeout [ 346.959761][T15855] tipc: Disabling bearer [ 346.990099][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3057'. [ 347.059479][T15890] lo speed is unknown, defaulting to 1000 [ 347.096359][T15901] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3060'. [ 347.116168][T15901] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3060'. [ 347.116921][T15890] lo speed is unknown, defaulting to 1000 [ 347.346114][T15906] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.447202][ T5852] Bluetooth: hci1: command tx timeout [ 347.529154][T15890] chnl_net:caif_netlink_parms(): no params data found [ 347.750058][T15890] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.792412][T15890] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.812775][T15890] bridge_slave_0: entered allmulticast mode [ 347.835573][T15890] bridge_slave_0: entered promiscuous mode [ 347.880436][T15890] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.899411][T15890] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.914816][T15890] bridge_slave_1: entered allmulticast mode [ 347.927265][T15931] netlink: zone id is out of range [ 347.930381][T15890] bridge_slave_1: entered promiscuous mode [ 347.932379][T15931] netlink: zone id is out of range [ 347.932393][T15931] netlink: zone id is out of range [ 347.932403][T15931] netlink: zone id is out of range [ 347.932413][T15931] netlink: zone id is out of range [ 347.985721][T15931] netlink: zone id is out of range [ 347.990910][T15931] netlink: zone id is out of range [ 348.009851][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.014484][T15890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.029443][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.044678][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.059744][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.069274][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.076740][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.101632][T15890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.359736][T15890] team0: Port device team_slave_0 added [ 348.368386][T15890] team0: Port device team_slave_1 added [ 348.416360][T15941] FAULT_INJECTION: forcing a failure. [ 348.416360][T15941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.432925][T15941] CPU: 0 UID: 0 PID: 15941 Comm: syz.1.3071 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 348.432947][T15941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 348.432957][T15941] Call Trace: [ 348.432964][T15941] [ 348.432972][T15941] dump_stack_lvl+0x241/0x360 [ 348.432998][T15941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.433015][T15941] ? __pfx__printk+0x10/0x10 [ 348.433044][T15941] ? snprintf+0xda/0x120 [ 348.433062][T15941] should_fail_ex+0x40a/0x550 [ 348.433086][T15941] _copy_to_user+0x31/0xb0 [ 348.433105][T15941] simple_read_from_buffer+0xca/0x150 [ 348.433140][T15941] proc_fail_nth_read+0x1e9/0x250 [ 348.433166][T15941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.433191][T15941] ? rw_verify_area+0x243/0x630 [ 348.433210][T15941] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.433234][T15941] vfs_read+0x1f8/0xb40 [ 348.433255][T15941] ? fdget_pos+0x254/0x320 [ 348.433274][T15941] ? __pfx___mutex_lock+0x10/0x10 [ 348.433295][T15941] ? __pfx_vfs_read+0x10/0x10 [ 348.433317][T15941] ? __fget_files+0x2a/0x410 [ 348.433336][T15941] ? __fget_files+0x395/0x410 [ 348.433353][T15941] ? __fget_files+0x2a/0x410 [ 348.433379][T15941] ksys_read+0x18f/0x2b0 [ 348.433401][T15941] ? __pfx_ksys_read+0x10/0x10 [ 348.433421][T15941] ? do_syscall_64+0x100/0x230 [ 348.433444][T15941] ? do_syscall_64+0xb6/0x230 [ 348.433467][T15941] do_syscall_64+0xf3/0x230 [ 348.433487][T15941] ? clear_bhb_loop+0x35/0x90 [ 348.433510][T15941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.433530][T15941] RIP: 0033:0x7f111698b7bc [ 348.433546][T15941] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 348.433561][T15941] RSP: 002b:00007f11147f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.433580][T15941] RAX: ffffffffffffffda RBX: 00007f1116ba5fa0 RCX: 00007f111698b7bc [ 348.433591][T15941] RDX: 000000000000000f RSI: 00007f11147f60a0 RDI: 0000000000000004 [ 348.433601][T15941] RBP: 00007f11147f6090 R08: 0000000000000000 R09: 0000000000000000 [ 348.433612][T15941] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 348.433623][T15941] R13: 0000000000000000 R14: 00007f1116ba5fa0 R15: 00007ffe363e0768 [ 348.433649][T15941] [ 348.697457][T15890] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.704510][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.776744][T15890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.816303][T15932] lo speed is unknown, defaulting to 1000 [ 348.816982][T15890] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.829138][T15890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 348.855158][T15890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.867438][T15932] lo speed is unknown, defaulting to 1000 [ 348.912832][T15890] hsr_slave_0: entered promiscuous mode [ 348.938726][T15950] FAULT_INJECTION: forcing a failure. [ 348.938726][T15950] name failslab, interval 1, probability 0, space 0, times 0 [ 348.944523][T15890] hsr_slave_1: entered promiscuous mode [ 348.951489][T15950] CPU: 0 UID: 0 PID: 15950 Comm: syz.0.3075 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 348.951511][T15950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 348.951521][T15950] Call Trace: [ 348.951528][T15950] [ 348.951536][T15950] dump_stack_lvl+0x241/0x360 [ 348.951560][T15950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.951578][T15950] ? __pfx__printk+0x10/0x10 [ 348.951604][T15950] ? __kmalloc_cache_noprof+0x48/0x390 [ 348.951623][T15950] ? __pfx___might_resched+0x10/0x10 [ 348.951646][T15950] should_fail_ex+0x40a/0x550 [ 348.951669][T15950] should_failslab+0xac/0x100 [ 348.951694][T15950] __kmalloc_cache_noprof+0x70/0x390 [ 348.951711][T15950] ? sctp_copy_one_addr+0x328/0x680 [ 348.951732][T15950] sctp_copy_one_addr+0x328/0x680 [ 348.951753][T15950] sctp_bind_addr_copy+0xad/0x3b0 [ 348.951770][T15950] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 348.951815][T15950] sctp_connect_new_asoc+0x2f3/0x6c0 [ 348.951839][T15950] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 348.951856][T15950] ? sctp_sendmsg+0xbb9/0x3520 [ 348.951880][T15950] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 348.951898][T15950] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 348.951917][T15950] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 348.951938][T15950] sctp_sendmsg+0x219a/0x3520 [ 348.951971][T15950] ? aa_sk_perm+0x96d/0xab0 [ 348.951989][T15950] ? __pfx_sctp_sendmsg+0x10/0x10 [ 348.952014][T15950] ? __pfx_aa_sk_perm+0x10/0x10 [ 348.952037][T15950] ? inet_sendmsg+0x330/0x390 [ 348.952057][T15950] __sock_sendmsg+0x1a6/0x270 [ 348.952080][T15950] __sys_sendto+0x363/0x4c0 [ 348.952106][T15950] ? __pfx___sys_sendto+0x10/0x10 [ 348.952139][T15950] ? __fget_files+0x2a/0x410 [ 348.952165][T15950] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 348.952189][T15950] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.952215][T15950] __x64_sys_sendto+0xde/0x100 [ 348.952239][T15950] do_syscall_64+0xf3/0x230 [ 348.952258][T15950] ? clear_bhb_loop+0x35/0x90 [ 348.952282][T15950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.952302][T15950] RIP: 0033:0x7f5e48d8cda9 [ 348.952317][T15950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.952330][T15950] RSP: 002b:00007f5e49c0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 348.952348][T15950] RAX: ffffffffffffffda RBX: 00007f5e48fa5fa0 RCX: 00007f5e48d8cda9 [ 348.952360][T15950] RDX: 000000000001a000 RSI: 0000000020000300 RDI: 0000000000000003 [ 348.952371][T15950] RBP: 00007f5e49c0b090 R08: 0000000020000380 R09: 0000000000000010 [ 348.952382][T15950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.952392][T15950] R13: 0000000000000000 R14: 00007f5e48fa5fa0 R15: 00007ffe9159dc08 [ 348.952418][T15950] [ 349.234728][T15890] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.242693][T15890] Cannot create hsr debugfs directory [ 349.526122][ T5852] Bluetooth: hci1: command tx timeout [ 349.696554][T15890] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.743690][T15977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3083'. [ 349.792488][T15980] FAULT_INJECTION: forcing a failure. [ 349.792488][T15980] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.812457][T15890] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.826488][T15980] CPU: 0 UID: 0 PID: 15980 Comm: syz.0.3084 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 349.826512][T15980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 349.826522][T15980] Call Trace: [ 349.826529][T15980] [ 349.826537][T15980] dump_stack_lvl+0x241/0x360 [ 349.826562][T15980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.826580][T15980] ? __pfx__printk+0x10/0x10 [ 349.826605][T15980] ? __pfx_lock_release+0x10/0x10 [ 349.826635][T15980] should_fail_ex+0x40a/0x550 [ 349.826659][T15980] _copy_from_iter+0x1e9/0x1c20 [ 349.826681][T15980] ? __virt_addr_valid+0x183/0x530 [ 349.826721][T15980] ? __alloc_skb+0x28f/0x440 [ 349.826742][T15980] ? __pfx__copy_from_iter+0x10/0x10 [ 349.826765][T15980] ? __virt_addr_valid+0x183/0x530 [ 349.826786][T15980] ? __virt_addr_valid+0x183/0x530 [ 349.826806][T15980] ? __virt_addr_valid+0x45f/0x530 [ 349.826828][T15980] ? __phys_addr_symbol+0x2f/0x70 [ 349.826849][T15980] ? __check_object_size+0x47a/0x730 [ 349.826877][T15980] netlink_sendmsg+0x73d/0xcb0 [ 349.826912][T15980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.826938][T15980] ? aa_sock_msg_perm+0x91/0x160 [ 349.826964][T15980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 349.826984][T15980] __sock_sendmsg+0x221/0x270 [ 349.827007][T15980] ____sys_sendmsg+0x52a/0x7e0 [ 349.827038][T15980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 349.827059][T15980] ? __fget_files+0x2a/0x410 [ 349.827080][T15980] ? __fget_files+0x2a/0x410 [ 349.827106][T15980] __sys_sendmsg+0x269/0x350 [ 349.827134][T15980] ? __pfx___sys_sendmsg+0x10/0x10 [ 349.827169][T15980] ? do_sys_openat2+0x17a/0x1d0 [ 349.827212][T15980] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 349.827235][T15980] ? do_syscall_64+0x100/0x230 [ 349.827259][T15980] ? do_syscall_64+0xb6/0x230 [ 349.827281][T15980] do_syscall_64+0xf3/0x230 [ 349.827301][T15980] ? clear_bhb_loop+0x35/0x90 [ 349.827325][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.827346][T15980] RIP: 0033:0x7f5e48d8cda9 [ 349.827361][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.827376][T15980] RSP: 002b:00007f5e49c0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.827395][T15980] RAX: ffffffffffffffda RBX: 00007f5e48fa5fa0 RCX: 00007f5e48d8cda9 [ 349.827408][T15980] RDX: 0000000004000000 RSI: 0000000020000400 RDI: 0000000000000005 [ 349.827419][T15980] RBP: 00007f5e49c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 349.827430][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.827440][T15980] R13: 0000000000000000 R14: 00007f5e48fa5fa0 R15: 00007ffe9159dc08 [ 349.827467][T15980] [ 350.165355][ T5852] Bluetooth: hci4: command tx timeout [ 350.226045][T15988] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 350.254017][T15890] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.280826][T15988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3088'. [ 350.293491][T15932] chnl_net:caif_netlink_parms(): no params data found [ 350.459445][T15890] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.627681][T15932] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.651494][T15932] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.654550][T16008] FAULT_INJECTION: forcing a failure. [ 350.654550][T16008] name failslab, interval 1, probability 0, space 0, times 0 [ 350.671384][T16008] CPU: 1 UID: 0 PID: 16008 Comm: syz.0.3093 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 350.671406][T16008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 350.671416][T16008] Call Trace: [ 350.671424][T16008] [ 350.671432][T16008] dump_stack_lvl+0x241/0x360 [ 350.671458][T16008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.671477][T16008] ? __pfx__printk+0x10/0x10 [ 350.671516][T16008] should_fail_ex+0x40a/0x550 [ 350.671542][T16008] should_failslab+0xac/0x100 [ 350.671567][T16008] ? dst_alloc+0x12b/0x190 [ 350.671587][T16008] kmem_cache_alloc_noprof+0x70/0x380 [ 350.671612][T16008] dst_alloc+0x12b/0x190 [ 350.671653][T16008] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 350.671696][T16008] ip_route_output_key_hash+0x193/0x2b0 [ 350.671720][T16008] ? ip_route_output_key_hash+0xdf/0x2b0 [ 350.671743][T16008] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 350.671781][T16008] ? dst_cache_per_cpu_get+0x257/0x2b0 [ 350.671807][T16008] ip_route_output_flow+0x29/0x140 [ 350.671833][T16008] udp_tunnel_dst_lookup+0x289/0x640 [ 350.671864][T16008] ? __pfx_udp_tunnel_dst_lookup+0x10/0x10 [ 350.671901][T16008] ? __pfx_geneve_get_dsfield+0x10/0x10 [ 350.671929][T16008] geneve_xmit+0x968/0x2cf0 [ 350.671955][T16008] ? mark_lock+0x9a/0x360 [ 350.671983][T16008] ? skb_network_protocol+0x5aa/0x7b0 [ 350.672007][T16008] ? validate_xmit_xfrm+0xc1/0x1270 [ 350.672029][T16008] ? geneve_xmit+0x13a/0x2cf0 [ 350.672053][T16008] ? __pfx_geneve_xmit+0x10/0x10 [ 350.672075][T16008] ? netif_skb_features+0x8b6/0xc90 [ 350.672105][T16008] ? validate_xmit_skb+0x9b8/0xff0 [ 350.672133][T16008] dev_hard_start_xmit+0x27a/0x7d0 [ 350.672171][T16008] __dev_queue_xmit+0x1b73/0x3f50 [ 350.672203][T16008] ? __dev_queue_xmit+0x2f4/0x3f50 [ 350.672224][T16008] ? __pfx___dev_queue_xmit+0x10/0x10 [ 350.672242][T16008] ? neigh_resolve_output+0x450/0x740 [ 350.672258][T16008] ? read_seqbegin+0x15a/0x2c0 [ 350.672274][T16008] ? lockdep_hardirqs_on+0x99/0x150 [ 350.672295][T16008] ? read_seqbegin+0x200/0x2c0 [ 350.672313][T16008] ? __pfx_read_seqbegin+0x10/0x10 [ 350.672326][T16008] ? neigh_resolve_output+0x2e5/0x740 [ 350.672341][T16008] ? eth_header+0x11c/0x1f0 [ 350.672353][T15932] bridge_slave_0: entered allmulticast mode [ 350.672358][T16008] ? __asan_memcpy+0x40/0x70 [ 350.672380][T16008] ? eth_header+0x11c/0x1f0 [ 350.672398][T16008] ? __pfx_eth_header+0x10/0x10 [ 350.672414][T16008] ? neigh_resolve_output+0x61f/0x740 [ 350.672445][T16008] ? ip_finish_output2+0x44c/0x12b0 [ 350.672463][T16008] ip_finish_output2+0xdc9/0x12b0 [ 350.672485][T16008] ? ip_finish_output2+0x44c/0x12b0 [ 350.672501][T16008] ? ip_frag_next+0x33c/0xb30 [ 350.672521][T16008] ? __pfx_ip_finish_output2+0x10/0x10 [ 350.672537][T16008] ? ip_frag_next+0x659/0xb30 [ 350.672567][T16008] ip_do_fragment+0x9ec/0x1b30 [ 350.672598][T16008] ? __pfx_ip_finish_output2+0x10/0x10 [ 350.672617][T16008] ? __pfx_ip_do_fragment+0x10/0x10 [ 350.672636][T16008] ? pskb_expand_head+0x30e/0x1380 [ 350.672652][T16008] ? ip_fast_csum+0x1f4/0x2b0 [ 350.672676][T16008] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 350.672695][T16008] ? __ip_finish_output+0x1fd/0x400 [ 350.672710][T16008] ? ip_fragment+0x9a/0x220 [ 350.672730][T16008] iptunnel_xmit+0x55d/0x9b0 [ 350.672764][T16008] ip_tunnel_xmit+0x1fad/0x26a0 [ 350.672816][T16008] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 350.672836][T16008] ? gre_build_header+0x380/0xba0 [ 350.672867][T16008] ? __pfx_gre_build_header+0x10/0x10 [ 350.672892][T16008] ? skb_network_protocol+0x5aa/0x7b0 [ 350.672913][T16008] ? iptunnel_handle_offloads+0x31b/0x650 [ 350.672941][T16008] ipgre_xmit+0x972/0xd20 [ 350.672972][T16008] ? __pfx_ipgre_xmit+0x10/0x10 [ 350.672997][T16008] ? validate_xmit_skb+0x9b8/0xff0 [ 350.673025][T16008] dev_hard_start_xmit+0x27a/0x7d0 [ 350.673064][T16008] __dev_queue_xmit+0x1b73/0x3f50 [ 350.673095][T16008] ? __dev_queue_xmit+0x2f4/0x3f50 [ 350.673116][T16008] ? __pfx___dev_queue_xmit+0x10/0x10 [ 350.673137][T16008] ? rcu_is_watching+0x15/0xb0 [ 350.673157][T16008] ? skb_release_data+0x2b5/0x8a0 [ 350.673191][T16008] ? pskb_expand_head+0xc52/0x1380 [ 350.673223][T16008] ? __bpf_redirect+0x54d/0xe10 [ 350.673245][T16008] __bpf_tx_skb+0x18e/0x260 [ 350.673270][T16008] bpf_clone_redirect+0x26f/0x3d0 [ 350.673296][T16008] bpf_prog_208b094576c80b22+0x5f/0x64 [ 350.673316][T16008] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.673341][T16008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.673363][T16008] ? bpf_test_run+0x370/0xa90 [ 350.673384][T16008] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 350.673403][T16008] ? ktime_get+0x3e/0x200 [ 350.673420][T16008] ? lockdep_hardirqs_on+0x99/0x150 [ 350.673441][T16008] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 350.673468][T16008] ? bpf_test_run+0x370/0xa90 [ 350.673488][T16008] ? __pfx___cant_migrate+0x10/0x10 [ 350.673512][T16008] ? read_tsc+0x9/0x20 [ 350.673538][T16008] bpf_test_run+0x4f0/0xa90 [ 350.673566][T16008] ? bpf_test_run+0x370/0xa90 [ 350.673600][T16008] ? __pfx_bpf_test_run+0x10/0x10 [ 350.673648][T16008] ? __pfx_eth_type_trans+0x10/0x10 [ 350.673670][T16008] ? convert___skb_to_skb+0x41/0x620 [ 350.673696][T16008] bpf_prog_test_run_skb+0xcaa/0x1830 [ 350.673741][T16008] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 350.673761][T16008] ? __fget_files+0x2a/0x410 [ 350.673783][T16008] ? fput+0x21b/0x290 [ 350.673799][T16008] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 350.673823][T16008] bpf_prog_test_run+0x2e4/0x360 [ 350.673848][T16008] __sys_bpf+0x48d/0x810 [ 350.673869][T16008] ? __pfx___sys_bpf+0x10/0x10 [ 350.673908][T16008] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.673932][T16008] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.673955][T16008] ? do_syscall_64+0x100/0x230 [ 350.673980][T16008] __x64_sys_bpf+0x7c/0x90 [ 350.673999][T16008] do_syscall_64+0xf3/0x230 [ 350.674019][T16008] ? clear_bhb_loop+0x35/0x90 [ 350.674043][T16008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.674062][T16008] RIP: 0033:0x7f5e48d8cda9 [ 350.674077][T16008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.674091][T16008] RSP: 002b:00007f5e49c0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.674109][T16008] RAX: ffffffffffffffda RBX: 00007f5e48fa5fa0 RCX: 00007f5e48d8cda9 [ 350.674122][T16008] RDX: 0000000000000048 RSI: 0000000020000080 RDI: 000000000000000a [ 350.674133][T16008] RBP: 00007f5e49c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 350.674143][T16008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.674152][T16008] R13: 0000000000000000 R14: 00007f5e48fa5fa0 R15: 00007ffe9159dc08 [ 350.674181][T16008] [ 351.325629][T15932] bridge_slave_0: entered promiscuous mode [ 351.338833][T15932] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.346071][T15932] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.353256][T15932] bridge_slave_1: entered allmulticast mode [ 351.360314][T15932] bridge_slave_1: entered promiscuous mode [ 351.442303][T16015] IPv6: Can't replace route, no match found [ 351.476334][T15932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.524252][T15932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.606123][ T5852] Bluetooth: hci1: command tx timeout [ 351.638174][ T3478] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.772282][T15932] team0: Port device team_slave_0 added [ 351.782619][T15932] team0: Port device team_slave_1 added [ 351.813749][T16036] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3099'. [ 351.893765][T15932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.905266][T15932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.945240][T15932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.978336][ T3478] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.015748][T15932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.022710][T15932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.083514][T15932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.138757][ T3478] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.153346][T15890] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.161514][T16044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3104'. [ 352.173357][T15890] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.185968][T15890] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.203005][T15890] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.246291][ T5852] Bluetooth: hci4: command tx timeout [ 352.266611][ T3478] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.306035][T15932] hsr_slave_0: entered promiscuous mode [ 352.312588][T15932] hsr_slave_1: entered promiscuous mode [ 352.320226][T15932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.328400][T15932] Cannot create hsr debugfs directory [ 352.595684][ T3478] bridge_slave_1: left allmulticast mode [ 352.607230][ T3478] bridge_slave_1: left promiscuous mode [ 352.617415][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.628761][ T3478] bridge_slave_0: left allmulticast mode [ 352.634423][ T3478] bridge_slave_0: left promiscuous mode [ 352.640851][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.799079][T16054] netlink: 'syz.0.3107': attribute type 3 has an invalid length. [ 352.809401][T16054] netlink: 'syz.0.3107': attribute type 7 has an invalid length. [ 352.819324][T16054] netlink: 'syz.0.3107': attribute type 3 has an invalid length. [ 352.828512][T16054] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3107'. [ 353.161701][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.190281][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.213931][ T3478] bond0 (unregistering): Released all slaves [ 353.307582][T16063] FAULT_INJECTION: forcing a failure. [ 353.307582][T16063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.334309][T16063] CPU: 0 UID: 0 PID: 16063 Comm: syz.3.3110 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 353.334332][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 353.334342][T16063] Call Trace: [ 353.334349][T16063] [ 353.334356][T16063] dump_stack_lvl+0x241/0x360 [ 353.334388][T16063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 353.334406][T16063] ? __pfx__printk+0x10/0x10 [ 353.334439][T16063] should_fail_ex+0x40a/0x550 [ 353.334463][T16063] _copy_to_user+0x31/0xb0 [ 353.334482][T16063] bpf_verifier_vlog+0x46d/0x860 [ 353.334514][T16063] __btf_verifier_log+0xd5/0x120 [ 353.334535][T16063] ? bpf_verifier_vlog+0x47a/0x860 [ 353.334559][T16063] ? __pfx___btf_verifier_log+0x10/0x10 [ 353.334588][T16063] __btf_verifier_log_type+0x4a8/0x640 [ 353.334614][T16063] ? btf_enum_check_meta+0x14f/0xdb0 [ 353.334631][T16063] ? sort_r+0x1d0f/0x2960 [ 353.334647][T16063] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 353.334677][T16063] btf_enum_check_meta+0x483/0xdb0 [ 353.334709][T16063] btf_parse_type_sec+0x4d5/0x2620 [ 353.334736][T16063] ? bpf_verifier_vlog+0x47a/0x860 [ 353.334764][T16063] ? btf_check_sec_info+0x379/0x4f0 [ 353.334788][T16063] ? __pfx_btf_parse_type_sec+0x10/0x10 [ 353.334813][T16063] ? btf_parse_str_sec+0x21f/0x2b0 [ 353.334836][T16063] btf_new_fd+0x43f/0xd30 [ 353.334866][T16063] ? __pfx_btf_new_fd+0x10/0x10 [ 353.334892][T16063] ? bpf_btf_load+0xcf/0x1a0 [ 353.334913][T16063] __sys_bpf+0x6ef/0x810 [ 353.334935][T16063] ? __pfx___sys_bpf+0x10/0x10 [ 353.334965][T16063] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 353.334989][T16063] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 353.335010][T16063] ? do_syscall_64+0x100/0x230 [ 353.335034][T16063] __x64_sys_bpf+0x7c/0x90 [ 353.335052][T16063] do_syscall_64+0xf3/0x230 [ 353.335071][T16063] ? clear_bhb_loop+0x35/0x90 [ 353.335095][T16063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.335114][T16063] RIP: 0033:0x7fc04c58cda9 [ 353.335129][T16063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.335142][T16063] RSP: 002b:00007fc04d367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 353.335160][T16063] RAX: ffffffffffffffda RBX: 00007fc04c7a5fa0 RCX: 00007fc04c58cda9 [ 353.335173][T16063] RDX: 0000000000000028 RSI: 0000000020000800 RDI: 0000000000000012 [ 353.335187][T16063] RBP: 00007fc04d367090 R08: 0000000000000000 R09: 0000000000000000 [ 353.335197][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 353.335206][T16063] R13: 0000000000000001 R14: 00007fc04c7a5fa0 R15: 00007ffd89d642f8 [ 353.335231][T16063] [ 353.685622][ T5852] Bluetooth: hci1: command tx timeout [ 353.819663][T16066] lo speed is unknown, defaulting to 1000 [ 353.896707][T15890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.903612][T16066] lo speed is unknown, defaulting to 1000 [ 353.954441][T16079] netlink: 'syz.3.3115': attribute type 12 has an invalid length. [ 354.019559][ T3478] hsr_slave_0: left promiscuous mode [ 354.033279][ T3478] hsr_slave_1: left promiscuous mode [ 354.041245][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.048852][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.071980][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.085668][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.122610][ T3478] veth1_macvtap: left promiscuous mode [ 354.133745][ T3478] veth0_macvtap: left promiscuous mode [ 354.142672][ T3478] veth1_vlan: left promiscuous mode [ 354.148357][ T3478] veth0_vlan: left promiscuous mode [ 354.325510][ T5852] Bluetooth: hci4: command tx timeout [ 354.660331][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 354.702076][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 355.243606][T15890] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.292101][T16097] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 355.332206][T16095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3119'. [ 355.400328][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.407484][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.408503][T16103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3121'. [ 355.449854][T16103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3121'. [ 355.482043][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.489200][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.530027][T15932] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 355.576524][T15932] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 355.630289][T15932] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 355.667070][T15932] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 355.899451][T15932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.960638][T15932] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.009332][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.016453][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.110180][T16119] hsr0: entered promiscuous mode [ 356.127057][T16119] vlan4: entered promiscuous mode [ 356.180006][T15890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.192146][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 356.226329][T16128] bridge_slave_0: left allmulticast mode [ 356.231989][T16128] bridge_slave_0: left promiscuous mode [ 356.237813][T16128] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.272898][T16128] bridge_slave_1: left allmulticast mode [ 356.296982][T16128] bridge_slave_1: left promiscuous mode [ 356.315663][T16128] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.346756][T16128] bond0: (slave bond_slave_0): Releasing backup interface [ 356.376775][T16128] bond0: (slave bond_slave_1): Releasing backup interface [ 356.406530][ T5852] Bluetooth: hci4: command tx timeout [ 356.410455][T16128] team0: Port device team_slave_0 removed [ 356.437210][T16128] team0: Port device team_slave_1 removed [ 356.443709][T16128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.466190][T16128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.485635][T16128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.493567][T16128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.537708][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.544821][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.639854][T15932] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.649252][T16135] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3130'. [ 356.685904][T16135] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3130'. [ 356.686406][T15932] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 357.038536][T15890] veth0_vlan: entered promiscuous mode [ 357.077099][T15932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.096250][T15890] veth1_vlan: entered promiscuous mode [ 357.144134][T16155] lo speed is unknown, defaulting to 1000 [ 357.185105][T15932] veth0_vlan: entered promiscuous mode [ 357.200313][T16155] lo speed is unknown, defaulting to 1000 [ 357.223195][T15890] veth0_macvtap: entered promiscuous mode [ 357.247537][T15890] veth1_macvtap: entered promiscuous mode [ 357.306865][T15932] veth1_vlan: entered promiscuous mode [ 357.357208][T15890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.375432][T15890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.396329][T15890] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.450992][T15890] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.472979][T15890] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.496388][T15890] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.512458][T15890] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.531845][T15890] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.547842][T15890] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.557173][T15890] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.673779][T15932] veth0_macvtap: entered promiscuous mode [ 357.745147][T15932] veth1_macvtap: entered promiscuous mode [ 357.866102][T16171] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3137'. [ 357.878456][T16171] net_ratelimit: 340 callbacks suppressed [ 357.878471][T16171] netlink: zone id is out of range [ 357.889615][T16171] netlink: zone id is out of range [ 357.894789][T16171] netlink: zone id is out of range [ 357.925509][T16171] netlink: zone id is out of range [ 357.930769][T16171] netlink: get zone limit has 8 unknown bytes [ 357.952933][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.963598][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.974232][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.985872][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.997256][T15932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.002865][T16170] netlink: 'syz.3.3139': attribute type 4 has an invalid length. [ 358.018195][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.037502][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.069322][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.080660][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.092153][T15932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.103267][T15932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.114276][T15932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.142894][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.144133][T15932] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.161011][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.165242][T15932] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.183515][T15932] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.196970][T15932] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.378125][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.399803][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.433539][ T3502] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.441833][ T3502] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.714280][T16188] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3142'. [ 358.727773][T16188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3142'. [ 359.189778][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.374620][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.507318][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.577347][T16212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3150'. [ 359.861545][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.871555][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.880239][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.888355][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.896885][ T5844] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.904387][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.969779][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.022350][T16218] vlan2: entered promiscuous mode [ 360.029722][T16218] mac80211_hwsim hwsim90 wlan1: entered promiscuous mode [ 360.039750][T16218] mac80211_hwsim hwsim90 wlan1: left promiscuous mode [ 360.258576][T16224] lo speed is unknown, defaulting to 1000 [ 360.265405][T16224] lo speed is unknown, defaulting to 1000 [ 360.519918][ T12] bridge_slave_1: left allmulticast mode [ 360.526364][ T12] bridge_slave_1: left promiscuous mode [ 360.532095][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.565140][ T12] bridge_slave_0: left allmulticast mode [ 360.573705][ T12] bridge_slave_0: left promiscuous mode [ 360.579570][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.738340][T16256] FAULT_INJECTION: forcing a failure. [ 360.738340][T16256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.753643][T16256] CPU: 0 UID: 0 PID: 16256 Comm: syz.0.3164 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 360.753667][T16256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 360.753678][T16256] Call Trace: [ 360.753684][T16256] [ 360.753692][T16256] dump_stack_lvl+0x241/0x360 [ 360.753718][T16256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.753736][T16256] ? __pfx__printk+0x10/0x10 [ 360.753761][T16256] ? __pfx_lock_release+0x10/0x10 [ 360.753791][T16256] should_fail_ex+0x40a/0x550 [ 360.753815][T16256] _copy_from_user+0x2d/0xb0 [ 360.753833][T16256] inet6_ioctl+0x192/0x280 [ 360.753857][T16256] ? __pfx_inet6_ioctl+0x10/0x10 [ 360.753888][T16256] ? tomoyo_path_number_perm+0x206/0x860 [ 360.753915][T16256] sock_do_ioctl+0x158/0x460 [ 360.753940][T16256] ? __pfx_sock_do_ioctl+0x10/0x10 [ 360.753977][T16256] sock_ioctl+0x626/0x8e0 [ 360.753998][T16256] ? __pfx_sock_ioctl+0x10/0x10 [ 360.754016][T16256] ? __fget_files+0x2a/0x410 [ 360.754038][T16256] ? __fget_files+0x2a/0x410 [ 360.754060][T16256] ? __pfx_sock_ioctl+0x10/0x10 [ 360.754080][T16256] __se_sys_ioctl+0xf5/0x170 [ 360.754103][T16256] do_syscall_64+0xf3/0x230 [ 360.754123][T16256] ? clear_bhb_loop+0x35/0x90 [ 360.754148][T16256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.754169][T16256] RIP: 0033:0x7f5e48d8cda9 [ 360.754183][T16256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.754198][T16256] RSP: 002b:00007f5e49c0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.754216][T16256] RAX: ffffffffffffffda RBX: 00007f5e48fa5fa0 RCX: 00007f5e48d8cda9 [ 360.754229][T16256] RDX: 0000000020000680 RSI: 000000000000890c RDI: 0000000000000003 [ 360.754241][T16256] RBP: 00007f5e49c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 360.754252][T16256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.754262][T16256] R13: 0000000000000000 R14: 00007f5e48fa5fa0 R15: 00007ffe9159dc08 [ 360.754290][T16256] [ 361.356396][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.369386][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.383849][ T12] bond0 (unregistering): Released all slaves [ 361.528223][T16224] chnl_net:caif_netlink_parms(): no params data found [ 361.576191][T16271] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 361.586435][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3170'. [ 361.669051][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3170'. [ 361.926297][ T5844] Bluetooth: hci4: command tx timeout [ 361.949660][ T12] hsr_slave_0: left promiscuous mode [ 361.975126][ T12] hsr_slave_1: left promiscuous mode [ 361.981229][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.989113][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.004188][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.012543][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.065404][ T12] veth1_macvtap: left promiscuous mode [ 362.070948][ T12] veth0_macvtap: left promiscuous mode [ 362.088151][ T12] veth1_vlan: left promiscuous mode [ 362.093499][ T12] veth0_vlan: left promiscuous mode [ 363.155686][ T12] team0 (unregistering): Port device team_slave_1 removed [ 363.229593][ T12] team0 (unregistering): Port device team_slave_0 removed [ 363.766305][T16224] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.783682][T16224] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.825489][T16224] bridge_slave_0: entered allmulticast mode [ 363.832453][T16224] bridge_slave_0: entered promiscuous mode [ 363.854416][T16224] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.862091][T16224] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.869533][T16224] bridge_slave_1: entered allmulticast mode [ 363.877008][T16224] bridge_slave_1: entered promiscuous mode [ 363.979859][T16224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.005872][ T5844] Bluetooth: hci4: command tx timeout [ 364.014032][T16224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.230153][T16224] team0: Port device team_slave_0 added [ 364.282132][T16312] lo speed is unknown, defaulting to 1000 [ 364.296884][T16224] team0: Port device team_slave_1 added [ 364.399684][T16312] lo speed is unknown, defaulting to 1000 [ 364.401313][T16224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.443404][T16224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.514835][T16224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.557217][T16224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.564182][T16224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.626623][T16334] netlink: 'syz.0.3189': attribute type 4 has an invalid length. [ 364.655312][T16224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.853265][T16338] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3191'. [ 364.935044][T16338] 0ªX¹¦À: renamed from caif0 [ 364.947516][T16338] FAULT_INJECTION: forcing a failure. [ 364.947516][T16338] name failslab, interval 1, probability 0, space 0, times 0 [ 364.964039][T16338] CPU: 1 UID: 0 PID: 16338 Comm: syz.4.3191 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 364.964061][T16338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 364.964071][T16338] Call Trace: [ 364.964078][T16338] [ 364.964086][T16338] dump_stack_lvl+0x241/0x360 [ 364.964112][T16338] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.964131][T16338] ? __pfx__printk+0x10/0x10 [ 364.964166][T16338] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 364.964188][T16338] ? __pfx___might_resched+0x10/0x10 [ 364.964214][T16338] should_fail_ex+0x40a/0x550 [ 364.964239][T16338] should_failslab+0xac/0x100 [ 364.964265][T16338] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 364.964284][T16338] ? kernfs_rename_ns+0x3e2/0xb50 [ 364.964309][T16338] kstrdup+0x39/0xb0 [ 364.964329][T16338] kernfs_rename_ns+0x3e2/0xb50 [ 364.964357][T16338] sysfs_rename_dir_ns+0x6d/0x90 [ 364.964382][T16338] kobject_rename+0x312/0x410 [ 364.964407][T16338] ? __pfx_kobject_rename+0x10/0x10 [ 364.964432][T16338] ? sysfs_rename_link_ns+0x182/0x1c0 [ 364.964460][T16338] device_rename+0x16a/0x200 [ 364.964482][T16338] dev_change_name+0x29c/0x980 [ 364.964499][T16338] ? mark_lock+0x9a/0x360 [ 364.964520][T16338] ? mark_lock+0x9a/0x360 [ 364.964547][T16338] ? do_setlink+0xa25/0x4210 [ 364.964566][T16338] ? validate_linkmsg+0x828/0xa40 [ 364.964592][T16338] ? __pfx_dev_change_name+0x10/0x10 [ 364.964611][T16338] ? nla_strscpy+0x100/0x180 [ 364.964632][T16338] ? __asan_memset+0x23/0x50 [ 364.964652][T16338] ? nla_strscpy+0x113/0x180 [ 364.964675][T16338] do_setlink+0xa25/0x4210 [ 364.964711][T16338] ? mark_lock+0x9a/0x360 [ 364.964736][T16338] ? __pfx_do_setlink+0x10/0x10 [ 364.964753][T16338] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 364.964778][T16338] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 364.964805][T16338] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 364.964824][T16338] ? lockdep_hardirqs_on+0x99/0x150 [ 364.964845][T16338] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 364.964864][T16338] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 364.964892][T16338] ? rcu_is_watching+0x15/0xb0 [ 364.964913][T16338] ? __mutex_lock+0xba3/0x1010 [ 364.964936][T16338] ? __mutex_lock+0x602/0x1010 [ 364.964963][T16338] ? rtnl_setlink+0x690/0xad0 [ 364.964982][T16338] ? __pfx___mutex_lock+0x10/0x10 [ 364.965013][T16338] ? ns_capable+0x8a/0xf0 [ 364.965042][T16338] rtnl_setlink+0x772/0xad0 [ 364.965063][T16338] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.965087][T16338] ? __pfx_rtnl_setlink+0x10/0x10 [ 364.965120][T16338] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 364.965197][T16338] ? rcu_read_unlock+0x87/0xa0 [ 364.965214][T16338] ? __pfx_lock_release+0x10/0x10 [ 364.965250][T16338] ? __pfx_rtnl_setlink+0x10/0x10 [ 364.965271][T16338] rtnetlink_rcv_msg+0x791/0xcf0 [ 364.965288][T16338] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 364.965310][T16338] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.965335][T16338] ? ref_tracker_free+0x643/0x7e0 [ 364.965360][T16338] netlink_rcv_skb+0x1e3/0x430 [ 364.965382][T16338] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 364.965403][T16338] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.965447][T16338] ? netlink_deliver_tap+0x2e/0x1b0 [ 364.965472][T16338] netlink_unicast+0x7f6/0x990 [ 364.965503][T16338] ? __pfx_netlink_unicast+0x10/0x10 [ 364.965521][T16338] ? __virt_addr_valid+0x45f/0x530 [ 364.965545][T16338] ? __phys_addr_symbol+0x2f/0x70 [ 364.965566][T16338] ? __check_object_size+0x47a/0x730 [ 364.965596][T16338] netlink_sendmsg+0x8e4/0xcb0 [ 364.965632][T16338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.965660][T16338] ? aa_sock_msg_perm+0x91/0x160 [ 364.965687][T16338] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.965709][T16338] __sock_sendmsg+0x221/0x270 [ 364.965733][T16338] sock_write_iter+0x2d7/0x3f0 [ 364.965754][T16338] ? __pfx_sock_write_iter+0x10/0x10 [ 364.965798][T16338] do_iter_readv_writev+0x71a/0x9d0 [ 364.965826][T16338] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 364.965859][T16338] ? rw_verify_area+0x239/0x630 [ 364.965884][T16338] vfs_writev+0x38b/0xbc0 [ 364.965918][T16338] ? __pfx_vfs_writev+0x10/0x10 [ 364.965950][T16338] ? do_sys_openat2+0x17a/0x1d0 [ 364.965968][T16338] ? __fget_files+0x2a/0x410 [ 364.965988][T16338] ? __fget_files+0x395/0x410 [ 364.966005][T16338] ? __fget_files+0x2a/0x410 [ 364.966032][T16338] do_writev+0x1b6/0x360 [ 364.966056][T16338] ? __pfx_do_writev+0x10/0x10 [ 364.966075][T16338] ? do_syscall_64+0x100/0x230 [ 364.966099][T16338] ? do_syscall_64+0xb6/0x230 [ 364.966122][T16338] do_syscall_64+0xf3/0x230 [ 364.966143][T16338] ? clear_bhb_loop+0x35/0x90 [ 364.966176][T16338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.966196][T16338] RIP: 0033:0x7f86c7b8cda9 [ 364.966212][T16338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.966225][T16338] RSP: 002b:00007f86c898a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 364.966244][T16338] RAX: ffffffffffffffda RBX: 00007f86c7da5fa0 RCX: 00007f86c7b8cda9 [ 364.966257][T16338] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000004 [ 364.966267][T16338] RBP: 00007f86c898a090 R08: 0000000000000000 R09: 0000000000000000 [ 364.966278][T16338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.966288][T16338] R13: 0000000000000000 R14: 00007f86c7da5fa0 R15: 00007fffc9332878 [ 364.966317][T16338] [ 365.550835][T16224] hsr_slave_0: entered promiscuous mode [ 365.560462][T16224] hsr_slave_1: entered promiscuous mode [ 365.567865][T16224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 365.576055][T16224] Cannot create hsr debugfs directory [ 365.976681][T16365] FAULT_INJECTION: forcing a failure. [ 365.976681][T16365] name failslab, interval 1, probability 0, space 0, times 0 [ 365.989553][T16365] CPU: 0 UID: 0 PID: 16365 Comm: syz.4.3197 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 365.989573][T16365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 365.989584][T16365] Call Trace: [ 365.989592][T16365] [ 365.989600][T16365] dump_stack_lvl+0x241/0x360 [ 365.989626][T16365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.989644][T16365] ? __pfx__printk+0x10/0x10 [ 365.989663][T16365] ? kasan_save_track+0x51/0x80 [ 365.989686][T16365] ? kmalloc_reserve+0x111/0x2a0 [ 365.989706][T16365] ? ip_frag_next+0xdd/0xb30 [ 365.989720][T16365] ? ip_do_fragment+0x8d3/0x1b30 [ 365.989734][T16365] ? iptunnel_xmit+0x55d/0x9b0 [ 365.989750][T16365] ? ipgre_xmit+0x972/0xd20 [ 365.989768][T16365] ? dev_hard_start_xmit+0x27a/0x7d0 [ 365.989789][T16365] ? __dev_queue_xmit+0x1b73/0x3f50 [ 365.989804][T16365] ? __bpf_tx_skb+0x18e/0x260 [ 365.989823][T16365] ? bpf_clone_redirect+0x26f/0x3d0 [ 365.989844][T16365] should_fail_ex+0x40a/0x550 [ 365.989868][T16365] should_failslab+0xac/0x100 [ 365.989894][T16365] __kmalloc_noprof+0xdd/0x4c0 [ 365.989912][T16365] ? ___neigh_create+0x72b/0x2320 [ 365.989934][T16365] ___neigh_create+0x72b/0x2320 [ 365.989975][T16365] ip_neigh_gw4+0x2a1/0x3e0 [ 365.989995][T16365] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 365.990023][T16365] ip_finish_output2+0xfd0/0x12b0 [ 365.990043][T16365] ? ip_finish_output2+0x44c/0x12b0 [ 365.990074][T16365] ? ip_frag_next+0x33c/0xb30 [ 365.990094][T16365] ? __pfx_ip_finish_output2+0x10/0x10 [ 365.990110][T16365] ? ip_frag_next+0x659/0xb30 [ 365.990138][T16365] ip_do_fragment+0x9ec/0x1b30 [ 365.990170][T16365] ? __pfx_ip_finish_output2+0x10/0x10 [ 365.990190][T16365] ? __pfx_ip_do_fragment+0x10/0x10 [ 365.990209][T16365] ? pskb_expand_head+0x30e/0x1380 [ 365.990225][T16365] ? ip_fast_csum+0x1f4/0x2b0 [ 365.990249][T16365] ? ip_skb_dst_mtu+0x6ba/0x9b0 [ 365.990268][T16365] ? __ip_finish_output+0x1fd/0x400 [ 365.990284][T16365] ? ip_fragment+0x9a/0x220 [ 365.990304][T16365] iptunnel_xmit+0x55d/0x9b0 [ 365.990344][T16365] ip_tunnel_xmit+0x1fad/0x26a0 [ 365.990396][T16365] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 365.990416][T16365] ? gre_build_header+0x380/0xba0 [ 365.990447][T16365] ? __pfx_gre_build_header+0x10/0x10 [ 365.990466][T16365] ? skb_network_protocol+0x5aa/0x7b0 [ 365.990488][T16365] ? iptunnel_handle_offloads+0x31b/0x650 [ 365.990516][T16365] ipgre_xmit+0x972/0xd20 [ 365.990546][T16365] ? __pfx_ipgre_xmit+0x10/0x10 [ 365.990572][T16365] ? validate_xmit_skb+0x9b8/0xff0 [ 365.990601][T16365] dev_hard_start_xmit+0x27a/0x7d0 [ 365.990640][T16365] __dev_queue_xmit+0x1b73/0x3f50 [ 365.990669][T16365] ? __dev_queue_xmit+0x2f4/0x3f50 [ 365.990690][T16365] ? __pfx___dev_queue_xmit+0x10/0x10 [ 365.990709][T16365] ? rcu_is_watching+0x15/0xb0 [ 365.990729][T16365] ? skb_release_data+0x2b5/0x8a0 [ 365.990764][T16365] ? pskb_expand_head+0xc52/0x1380 [ 365.990795][T16365] ? __bpf_redirect+0x54d/0xe10 [ 365.990819][T16365] __bpf_tx_skb+0x18e/0x260 [ 365.990843][T16365] bpf_clone_redirect+0x26f/0x3d0 [ 365.990870][T16365] bpf_prog_208b094576c80b22+0x5f/0x64 [ 365.990890][T16365] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 365.990916][T16365] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 365.990939][T16365] ? bpf_test_run+0x370/0xa90 [ 365.990960][T16365] ? __pfx_lockdep_softirqs_off+0x10/0x10 [ 365.990979][T16365] ? ktime_get+0x3e/0x200 [ 365.990997][T16365] ? lockdep_hardirqs_on+0x99/0x150 [ 365.991018][T16365] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 365.991045][T16365] ? bpf_test_run+0x370/0xa90 [ 365.991066][T16365] ? __pfx___cant_migrate+0x10/0x10 [ 365.991090][T16365] ? read_tsc+0x9/0x20 [ 365.991116][T16365] bpf_test_run+0x4f0/0xa90 [ 365.991144][T16365] ? bpf_test_run+0x370/0xa90 [ 365.991178][T16365] ? __pfx_bpf_test_run+0x10/0x10 [ 365.991227][T16365] ? __pfx_eth_type_trans+0x10/0x10 [ 365.991249][T16365] ? convert___skb_to_skb+0x41/0x620 [ 365.991275][T16365] bpf_prog_test_run_skb+0xcaa/0x1830 [ 365.991321][T16365] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 365.991347][T16365] ? __fget_files+0x2a/0x410 [ 365.991370][T16365] ? fput+0x21b/0x290 [ 365.991386][T16365] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 365.991410][T16365] bpf_prog_test_run+0x2e4/0x360 [ 365.991435][T16365] __sys_bpf+0x48d/0x810 [ 365.991454][T16365] ? __pfx___sys_bpf+0x10/0x10 [ 365.991496][T16365] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 365.991517][T16365] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 365.991536][T16365] ? do_syscall_64+0x100/0x230 [ 365.991556][T16365] __x64_sys_bpf+0x7c/0x90 [ 365.991572][T16365] do_syscall_64+0xf3/0x230 [ 365.991589][T16365] ? clear_bhb_loop+0x35/0x90 [ 365.991611][T16365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.991629][T16365] RIP: 0033:0x7f86c7b8cda9 [ 365.991642][T16365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.991655][T16365] RSP: 002b:00007f86c898a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 365.991672][T16365] RAX: ffffffffffffffda RBX: 00007f86c7da5fa0 RCX: 00007f86c7b8cda9 [ 365.991682][T16365] RDX: 0000000000000048 RSI: 0000000020000080 RDI: 000000000000000a [ 365.991692][T16365] RBP: 00007f86c898a090 R08: 0000000000000000 R09: 0000000000000000 [ 365.991701][T16365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.991710][T16365] R13: 0000000000000000 R14: 00007f86c7da5fa0 R15: 00007fffc9332878 [ 365.991734][T16365] [ 366.095897][ T5844] Bluetooth: hci4: command tx timeout [ 366.757657][T16379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3203'. [ 367.005517][T16224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 367.048398][T16224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 367.084881][T16224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 367.172329][T16224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 367.340911][T16389] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3205'. [ 367.367663][T16224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.404278][T16224] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.429488][ T3502] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.436646][ T3502] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.493731][ T7158] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.500887][ T7158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.565955][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3212'. [ 367.577474][T16409] nbd: nbd0 already in use [ 367.595674][T16409] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3212'. [ 367.714263][T16419] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3215'. [ 367.894439][T16428] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3217'. [ 367.962197][T16224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.068729][T16224] veth0_vlan: entered promiscuous mode [ 368.086290][T16224] veth1_vlan: entered promiscuous mode [ 368.159883][T16224] veth0_macvtap: entered promiscuous mode [ 368.181612][T16224] veth1_macvtap: entered promiscuous mode [ 368.213428][T16431] sctp: [Deprecated]: syz.0.3218 (pid 16431) Use of int in max_burst socket option. [ 368.213428][T16431] Use struct sctp_assoc_value instead [ 368.215457][T16224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.253602][T16224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.274480][T16224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.285951][T16224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.298235][T16224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.316723][T16224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.349250][T16224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.367915][T16224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 368.388869][T16224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.406885][T16224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.466751][T16224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.485845][T16224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.494563][T16224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.516130][T16224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.570496][ T5844] Bluetooth: hci4: command tx timeout [ 368.815969][T16436] sctp: [Deprecated]: syz.3.3220 (pid 16436) Use of int in max_burst socket option. [ 368.815969][T16436] Use struct sctp_assoc_value instead [ 368.817635][T16437] netlink: 'syz.4.3221': attribute type 2 has an invalid length. [ 368.865548][ T3478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.885340][ T3478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.929867][T16437] Tq€!7: entered promiscuous mode [ 368.996052][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.003896][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.141091][T16445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3224'. [ 369.280923][T16450] lo speed is unknown, defaulting to 1000 [ 369.355638][T16450] lo speed is unknown, defaulting to 1000 [ 369.364626][T16453] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3227'. [ 369.404818][T16455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3228'. [ 369.414518][T16453] unsupported nla_type 138 [ 370.113014][T16470] lo speed is unknown, defaulting to 1000 [ 370.121766][T16470] lo speed is unknown, defaulting to 1000 [ 370.218693][T16470] Bluetooth: MGMT ver 1.23 [ 370.610007][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.895527][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 370.904306][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 370.913716][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 370.923249][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 370.931246][ T5852] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 370.944083][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 370.981696][T16481] lo speed is unknown, defaulting to 1000 [ 370.989571][T16481] lo speed is unknown, defaulting to 1000 [ 371.239578][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.248449][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.257176][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.265011][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.275924][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 371.283199][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.339234][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.437810][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.548115][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.601401][T16491] lo speed is unknown, defaulting to 1000 [ 371.611320][T16481] chnl_net:caif_netlink_parms(): no params data found [ 371.664737][T16491] lo speed is unknown, defaulting to 1000 [ 372.045456][T16481] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.055992][T16481] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.069897][T16481] bridge_slave_0: entered allmulticast mode [ 372.080062][T16481] bridge_slave_0: entered promiscuous mode [ 372.091009][T16481] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.098828][T16481] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.106981][T16481] bridge_slave_1: entered allmulticast mode [ 372.116343][T16481] bridge_slave_1: entered promiscuous mode [ 372.129197][ T12] bridge_slave_1: left allmulticast mode [ 372.135056][ T12] bridge_slave_1: left promiscuous mode [ 372.152382][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.175643][ T12] bridge_slave_0: left allmulticast mode [ 372.181729][ T12] bridge_slave_0: left promiscuous mode [ 372.195399][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.883709][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.965605][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.966048][ T5844] Bluetooth: hci2: command tx timeout [ 372.990607][ T12] bond0 (unregistering): Released all slaves [ 373.066313][T16481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.103214][T16481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.366492][ T5844] Bluetooth: hci4: command tx timeout [ 373.385023][T16481] team0: Port device team_slave_0 added [ 373.447680][T16481] team0: Port device team_slave_1 added [ 373.570381][T16548] __nla_validate_parse: 4 callbacks suppressed [ 373.570399][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3255'. [ 373.610862][T16481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.635596][T16481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.674222][T16481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.711799][T16481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.736991][T16481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.777995][T16481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.985599][T16481] hsr_slave_0: entered promiscuous mode [ 374.015693][T16481] hsr_slave_1: entered promiscuous mode [ 374.046410][T16481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.053996][T16481] Cannot create hsr debugfs directory [ 374.084376][T16552] netlink: zone id is out of range [ 374.094325][T16491] chnl_net:caif_netlink_parms(): no params data found [ 374.098389][T16552] netlink: zone id is out of range [ 374.115457][T16552] netlink: zone id is out of range [ 374.125299][T16552] netlink: zone id is out of range [ 374.135384][T16552] netlink: zone id is out of range [ 374.143954][T16552] netlink: zone id is out of range [ 374.150884][ T12] hsr_slave_0: left promiscuous mode [ 374.166270][T16552] netlink: zone id is out of range [ 374.176727][T16552] netlink: zone id is out of range [ 374.180736][ T12] hsr_slave_1: left promiscuous mode [ 374.192463][T16552] netlink: zone id is out of range [ 374.198024][T16552] netlink: zone id is out of range [ 374.204032][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.221847][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.246776][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.254218][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.356479][ T12] veth1_macvtap: left promiscuous mode [ 374.366178][ T12] veth0_macvtap: left promiscuous mode [ 374.371802][ T12] veth1_vlan: left promiscuous mode [ 374.389289][ T12] veth0_vlan: left promiscuous mode [ 375.045329][ T5844] Bluetooth: hci2: command tx timeout [ 375.073663][ T12] team0 (unregistering): Port device team_slave_1 removed [ 375.137754][ T12] team0 (unregistering): Port device team_slave_0 removed [ 375.448645][ T5844] Bluetooth: hci4: command tx timeout [ 375.857381][T16491] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.864737][T16491] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.872656][T16491] bridge_slave_0: entered allmulticast mode [ 375.880804][T16491] bridge_slave_0: entered promiscuous mode [ 375.900797][T16491] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.915372][T16491] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.936391][T16491] bridge_slave_1: entered allmulticast mode [ 375.946653][T16491] bridge_slave_1: entered promiscuous mode [ 375.979961][T16481] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.003145][T16481] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.087365][T16491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.134052][T16491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.175719][T16481] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.187872][T16481] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.257794][T16592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3268'. [ 376.312049][T16587] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3268'. [ 376.321985][T16481] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.346528][T16481] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.456440][T16491] team0: Port device team_slave_0 added [ 376.469798][T16491] team0: Port device team_slave_1 added [ 376.489856][T16481] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.500107][T16481] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.592806][T16491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.615440][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.647121][T16491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.741439][T16491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.768762][T16491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.826677][T16491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.896346][T16605] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3275'. [ 376.905472][T16491] hsr_slave_0: entered promiscuous mode [ 376.913287][T16491] hsr_slave_1: entered promiscuous mode [ 376.923382][T16491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.940252][T16491] Cannot create hsr debugfs directory [ 377.005905][T16481] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 377.030047][T16481] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 377.070060][T16609] FAULT_INJECTION: forcing a failure. [ 377.070060][T16609] name failslab, interval 1, probability 0, space 0, times 0 [ 377.083026][T16481] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 377.092814][T16609] CPU: 0 UID: 0 PID: 16609 Comm: syz.0.3277 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 377.092836][T16609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 377.092847][T16609] Call Trace: [ 377.092854][T16609] [ 377.092862][T16609] dump_stack_lvl+0x241/0x360 [ 377.092887][T16609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.092906][T16609] ? __pfx__printk+0x10/0x10 [ 377.092932][T16609] ? fs_reclaim_acquire+0x93/0x130 [ 377.092954][T16609] ? __pfx___might_resched+0x10/0x10 [ 377.092978][T16609] should_fail_ex+0x40a/0x550 [ 377.093002][T16609] should_failslab+0xac/0x100 [ 377.093028][T16609] __kmalloc_noprof+0xdd/0x4c0 [ 377.093044][T16609] ? kstrtouint_from_user+0x128/0x190 [ 377.093064][T16609] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 377.093092][T16609] tomoyo_realpath_from_path+0xcf/0x5e0 [ 377.093125][T16609] tomoyo_path_number_perm+0x236/0x860 [ 377.093145][T16609] ? __lock_acquire+0x1397/0x2100 [ 377.093168][T16609] ? tomoyo_path_number_perm+0x206/0x860 [ 377.093197][T16609] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 377.093259][T16609] ? __fget_files+0x2a/0x410 [ 377.093281][T16609] ? __fget_files+0x2a/0x410 [ 377.093303][T16609] security_file_ioctl+0xc6/0x2a0 [ 377.093323][T16609] __se_sys_ioctl+0x46/0x170 [ 377.093347][T16609] do_syscall_64+0xf3/0x230 [ 377.093368][T16609] ? clear_bhb_loop+0x35/0x90 [ 377.093392][T16609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.093412][T16609] RIP: 0033:0x7f5e48d8cda9 [ 377.093427][T16609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.093440][T16609] RSP: 002b:00007f5e49c0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.093459][T16609] RAX: ffffffffffffffda RBX: 00007f5e48fa5fa0 RCX: 00007f5e48d8cda9 [ 377.093471][T16609] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 377.093482][T16609] RBP: 00007f5e49c0b090 R08: 0000000000000000 R09: 0000000000000000 [ 377.093492][T16609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.093503][T16609] R13: 0000000000000000 R14: 00007f5e48fa5fa0 R15: 00007ffe9159dc08 [ 377.093530][T16609] [ 377.093612][T16609] ERROR: Out of memory at tomoyo_realpath_from_path. [ 377.265445][ T5844] Bluetooth: hci2: command tx timeout [ 377.378133][T16481] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 377.525464][ T5844] Bluetooth: hci4: command tx timeout [ 377.604500][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3283'. [ 377.642936][T16624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3283'. [ 377.661179][T16624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3283'. [ 377.699285][T16481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.735717][T16481] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.807100][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.814217][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.966354][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.973483][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.019511][T16634] sctp: [Deprecated]: syz.4.3286 (pid 16634) Use of int in max_burst socket option. [ 378.019511][T16634] Use struct sctp_assoc_value instead [ 378.541177][T16491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 378.599389][T16491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 378.650176][T16491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 378.809456][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.876339][T16491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 379.230837][T16481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.308865][T16491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.365465][ T5844] Bluetooth: hci2: command tx timeout [ 379.558639][T16491] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.609515][ T5844] Bluetooth: hci4: command tx timeout [ 379.719002][T16481] veth0_vlan: entered promiscuous mode [ 379.727348][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.734467][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.787422][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.794541][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.023626][T16481] veth1_vlan: entered promiscuous mode [ 380.049138][T16659] lo speed is unknown, defaulting to 1000 [ 380.094529][T16659] lo speed is unknown, defaulting to 1000 [ 380.121258][T16481] veth0_macvtap: entered promiscuous mode [ 380.162705][T16481] veth1_macvtap: entered promiscuous mode [ 380.279086][T16481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.357079][T16481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.415495][T16481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.467224][T16481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.798565][T16481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.889782][T16481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.957643][T16481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.003372][T16481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.030831][T16481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.055482][T16481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.130859][T16481] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.205549][T16481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.250946][T16481] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.295419][T16481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.447534][T16491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.517850][T16680] sctp: [Deprecated]: syz.3.3300 (pid 16680) Use of int in max_burst socket option. [ 381.517850][T16680] Use struct sctp_assoc_value instead [ 381.731755][T16682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3301'. [ 381.759056][T16682] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3301'. [ 381.924358][T16491] veth0_vlan: entered promiscuous mode [ 382.028022][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.053115][T16491] veth1_vlan: entered promiscuous mode [ 382.067318][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.279706][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.318506][T16491] veth0_macvtap: entered promiscuous mode [ 382.329075][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.371005][T16491] veth1_macvtap: entered promiscuous mode [ 382.480287][T16491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.524839][T16491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.577133][T16491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.619524][T16491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.670883][T16491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.714027][T16491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.767459][T16491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.877672][T16491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.931942][T16491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.987329][T16491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.046470][T16491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.081170][T16491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.113549][T16491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.154290][T16491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.220136][T16491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.259740][T16491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.298326][T16491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.338314][T16491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.391030][T16695] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3306'. [ 383.504352][T16695] net_ratelimit: 684 callbacks suppressed [ 383.504364][T16695] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 385.641999][T16730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3313'. [ 385.675398][T16730] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3313'. [ 388.815197][ C1] sched: DL replenish lagged too much [ 396.595359][ T7146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.603223][ T7146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.987293][T16739] netlink: 'syz.3.3317': attribute type 10 has an invalid length. [ 397.016300][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.034858][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.344725][T16739] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 397.555930][T16746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3319'. [ 397.801878][T16746] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 398.123143][T16759] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3322'. [ 398.235499][T16756] lo speed is unknown, defaulting to 1000 [ 398.711188][ T3502] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.815401][T16756] lo speed is unknown, defaulting to 1000 [ 398.974711][ T3502] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.293798][ T3502] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.504301][T16772] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3325'. [ 399.572441][T16772] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3325'. [ 399.742620][ T3502] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.132131][T16777] FAULT_INJECTION: forcing a failure. [ 400.132131][T16777] name failslab, interval 1, probability 0, space 0, times 0 [ 400.222514][ T3502] bridge_slave_1: left allmulticast mode [ 400.228850][T16777] CPU: 0 UID: 0 PID: 16777 Comm: syz.1.3328 Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 400.228872][T16777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 400.228883][T16777] Call Trace: [ 400.228891][T16777] [ 400.228898][T16777] dump_stack_lvl+0x241/0x360 [ 400.228924][T16777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.228940][T16777] ? __pfx__printk+0x10/0x10 [ 400.228965][T16777] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 400.228985][T16777] ? __pfx___might_resched+0x10/0x10 [ 400.229010][T16777] should_fail_ex+0x40a/0x550 [ 400.229033][T16777] should_failslab+0xac/0x100 [ 400.229059][T16777] kmem_cache_alloc_node_noprof+0x77/0x380 [ 400.229077][T16777] ? __alloc_skb+0x1c3/0x440 [ 400.229103][T16777] __alloc_skb+0x1c3/0x440 [ 400.229129][T16777] ? __pfx___alloc_skb+0x10/0x10 [ 400.229154][T16777] ? netlink_ack_tlv_len+0x6e/0x200 [ 400.229180][T16777] netlink_ack+0x145/0xa50 [ 400.229200][T16777] ? __sock_sendmsg+0x221/0x270 [ 400.229218][T16777] ? ____sys_sendmsg+0x52a/0x7e0 [ 400.229254][T16777] netlink_rcv_skb+0x262/0x430 [ 400.229277][T16777] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 400.229299][T16777] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 400.229335][T16777] ? apparmor_capable+0x13b/0x1b0 [ 400.229355][T16777] ? bpf_lsm_capable+0x9/0x10 [ 400.229373][T16777] ? security_capable+0x7e/0x2d0 [ 400.229400][T16777] nfnetlink_rcv+0x297/0x2ab0 [ 400.229424][T16777] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 400.229447][T16777] ? __dev_queue_xmit+0x2f4/0x3f50 [ 400.229466][T16777] ? __dev_queue_xmit+0x1775/0x3f50 [ 400.229482][T16777] ? kasan_save_track+0x51/0x80 [ 400.229508][T16777] ? ____sys_sendmsg+0x52a/0x7e0 [ 400.229530][T16777] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 400.229547][T16777] ? __dev_queue_xmit+0x2f4/0x3f50 [ 400.229567][T16777] ? __pfx___dev_queue_xmit+0x10/0x10 [ 400.229607][T16777] ? ref_tracker_free+0x643/0x7e0 [ 400.229627][T16777] ? __asan_memcpy+0x40/0x70 [ 400.229647][T16777] ? __pfx_ref_tracker_free+0x10/0x10 [ 400.229680][T16777] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.229700][T16777] ? skb_clone+0x240/0x390 [ 400.229720][T16777] ? __pfx_lock_release+0x10/0x10 [ 400.229740][T16777] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 400.229772][T16777] ? netlink_deliver_tap+0x2e/0x1b0 [ 400.229798][T16777] netlink_unicast+0x7f6/0x990 [ 400.229827][T16777] ? __pfx_netlink_unicast+0x10/0x10 [ 400.229846][T16777] ? __virt_addr_valid+0x45f/0x530 [ 400.229869][T16777] ? __phys_addr_symbol+0x2f/0x70 [ 400.229890][T16777] ? __check_object_size+0x47a/0x730 [ 400.229920][T16777] netlink_sendmsg+0x8e4/0xcb0 [ 400.229954][T16777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.229981][T16777] ? aa_sock_msg_perm+0x91/0x160 [ 400.230006][T16777] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.230028][T16777] __sock_sendmsg+0x221/0x270 [ 400.230050][T16777] ____sys_sendmsg+0x52a/0x7e0 [ 400.230082][T16777] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.230103][T16777] ? __fget_files+0x2a/0x410 [ 400.230123][T16777] ? __fget_files+0x2a/0x410 [ 400.230149][T16777] __sys_sendmsg+0x269/0x350 [ 400.230177][T16777] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.230211][T16777] ? do_sys_openat2+0x17a/0x1d0 [ 400.230255][T16777] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.230278][T16777] ? do_syscall_64+0x100/0x230 [ 400.230301][T16777] ? do_syscall_64+0xb6/0x230 [ 400.230323][T16777] do_syscall_64+0xf3/0x230 [ 400.230343][T16777] ? clear_bhb_loop+0x35/0x90 [ 400.230367][T16777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.230388][T16777] RIP: 0033:0x7f8eeed8cda9 [ 400.230405][T16777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.230419][T16777] RSP: 002b:00007f8eefbb0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.230438][T16777] RAX: ffffffffffffffda RBX: 00007f8eeefa5fa0 RCX: 00007f8eeed8cda9 [ 400.230451][T16777] RDX: 0000000004000050 RSI: 0000000020000000 RDI: 0000000000000003 [ 400.230462][T16777] RBP: 00007f8eefbb0090 R08: 0000000000000000 R09: 0000000000000000 [ 400.230472][T16777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.230483][T16777] R13: 0000000000000000 R14: 00007f8eeefa5fa0 R15: 00007ffea42a2408 [ 400.230510][T16777] [ 401.026001][ T3502] bridge_slave_1: left promiscuous mode [ 401.060999][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.236094][ T3502] bridge_slave_0: left allmulticast mode [ 401.243867][ T3502] bridge_slave_0: left promiscuous mode [ 401.254082][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.554677][ T5852] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 401.581916][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 401.591513][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 401.610295][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 401.661881][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 401.670987][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.372135][ T3502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.403678][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.418232][ T3502] bond0 (unregistering): Released all slaves [ 402.965105][T16809] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3335'. [ 403.130743][T16804] lo speed is unknown, defaulting to 1000 [ 403.211651][T16804] lo speed is unknown, defaulting to 1000 [ 403.221748][T16795] lo speed is unknown, defaulting to 1000 [ 404.150424][ T5844] Bluetooth: hci4: command tx timeout [ 406.358116][ T5844] Bluetooth: hci4: command tx timeout [ 408.448523][ T5844] Bluetooth: hci4: command tx timeout [ 411.271043][ T5844] Bluetooth: hci4: command tx timeout [ 440.859143][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.298582][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 463.359966][ T5148] Bluetooth: hci3: command 0x0406 tx timeout [ 469.524052][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 494.251864][ T5148] Bluetooth: hci2: command 0x0406 tx timeout [ 501.827486][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 526.389307][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 548.423681][ T30] INFO: task kworker/u8:5:1101 blocked for more than 144 seconds. [ 548.439900][ T30] Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 551.457110][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 551.595189][ T30] task:kworker/u8:5 state:D stack:18872 pid:1101 tgid:1101 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 551.755305][ T30] Workqueue: cfg80211 cfg80211_dfs_channels_update_work [ 551.762337][ T30] Call Trace: [ 551.855179][ T30] [ 551.858175][ T30] __schedule+0x190e/0x4c90 [ 551.862723][ T30] ? __pfx___schedule+0x10/0x10 [ 551.955474][ T30] ? __pfx_lock_release+0x10/0x10 [ 551.960566][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 552.015629][ T30] ? kthread_data+0x52/0xd0 [ 552.020197][ T30] ? schedule+0x90/0x320 [ 552.024464][ T30] ? wq_worker_sleeping+0x66/0x240 [ 552.104694][ T30] ? schedule+0x90/0x320 [ 552.125276][ T30] schedule+0x14b/0x320 [ 552.129491][ T30] schedule_preempt_disabled+0x13/0x30 [ 552.158177][ T30] __mutex_lock+0x817/0x1010 [ 552.162824][ T30] ? __mutex_lock+0x602/0x1010 [ 552.215318][ T30] ? cfg80211_dfs_channels_update_work+0xbf/0x610 [ 552.221810][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 552.277665][ T30] cfg80211_dfs_channels_update_work+0xbf/0x610 [ 552.283984][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 552.336673][ T30] ? __pfx_cfg80211_dfs_channels_update_work+0x10/0x10 [ 552.343591][ T30] ? process_scheduled_works+0x976/0x1840 [ 552.415294][ T30] process_scheduled_works+0xa66/0x1840 [ 552.420939][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.485498][ T30] ? assign_work+0x364/0x3d0 [ 552.490170][ T30] worker_thread+0x870/0xd30 [ 552.494798][ T30] ? __kthread_parkme+0x169/0x1d0 [ 552.545257][ T30] ? __pfx_worker_thread+0x10/0x10 [ 552.550457][ T30] kthread+0x7a9/0x920 [ 552.554555][ T30] ? __pfx_kthread+0x10/0x10 [ 552.625267][ T30] ? __pfx_worker_thread+0x10/0x10 [ 552.630461][ T30] ? __pfx_kthread+0x10/0x10 [ 552.635073][ T30] ? __pfx_kthread+0x10/0x10 [ 552.690104][ T30] ? __pfx_kthread+0x10/0x10 [ 552.694721][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 552.764686][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 552.795172][ T30] ? __pfx_kthread+0x10/0x10 [ 552.799833][ T30] ret_from_fork+0x4b/0x80 [ 552.804280][ T30] ? __pfx_kthread+0x10/0x10 [ 552.889929][ T30] ret_from_fork_asm+0x1a/0x30 [ 552.894771][ T30] [ 552.949831][ T30] INFO: task kworker/u8:8:3478 blocked for more than 148 seconds. [ 553.025162][ T30] Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 553.032527][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.205333][ T30] task:kworker/u8:8 state:D stack:21560 pid:3478 tgid:3478 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 553.355261][ T30] Workqueue: events_unbound linkwatch_event [ 553.361335][ T30] Call Trace: [ 553.364629][ T30] [ 553.525381][ T30] __schedule+0x190e/0x4c90 [ 553.529974][ T30] ? __pfx___schedule+0x10/0x10 [ 553.534852][ T30] ? __pfx_lock_release+0x10/0x10 [ 553.675229][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 553.681190][ T30] ? kthread_data+0x52/0xd0 [ 553.815290][ T30] ? schedule+0x90/0x320 [ 553.819589][ T30] ? wq_worker_sleeping+0x66/0x240 [ 553.824720][ T30] ? schedule+0x90/0x320 [ 553.985262][ T30] schedule+0x14b/0x320 [ 553.989480][ T30] schedule_preempt_disabled+0x13/0x30 [ 553.994952][ T30] __mutex_lock+0x817/0x1010 [ 554.195460][ T30] ? __mutex_lock+0x602/0x1010 [ 554.200295][ T30] ? linkwatch_event+0xe/0x60 [ 554.204992][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 554.355139][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 554.361301][ T30] ? process_scheduled_works+0x976/0x1840 [ 554.505358][ T30] linkwatch_event+0xe/0x60 [ 554.509962][ T30] process_scheduled_works+0xa66/0x1840 [ 554.645175][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 554.651234][ T30] ? assign_work+0x364/0x3d0 [ 554.745255][ T30] worker_thread+0x870/0xd30 [ 554.749929][ T30] ? __kthread_parkme+0x169/0x1d0 [ 554.754987][ T30] ? __pfx_worker_thread+0x10/0x10 [ 554.855172][ T30] kthread+0x7a9/0x920 [ 554.859297][ T30] ? __pfx_kthread+0x10/0x10 [ 554.863922][ T30] ? __pfx_worker_thread+0x10/0x10 [ 554.958861][ T30] ? __pfx_kthread+0x10/0x10 [ 554.963512][ T30] ? __pfx_kthread+0x10/0x10 [ 555.015225][ T30] ? __pfx_kthread+0x10/0x10 [ 555.019879][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.095378][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 555.101418][ T30] ? __pfx_kthread+0x10/0x10 [ 555.155393][ T30] ret_from_fork+0x4b/0x80 [ 555.159963][ T30] ? __pfx_kthread+0x10/0x10 [ 555.164585][ T30] ret_from_fork_asm+0x1a/0x30 [ 555.229493][ T30] [ 555.235276][ T30] INFO: task syz-executor:16795 blocked for more than 151 seconds. [ 555.243223][ T30] Not tainted 6.13.0-syzkaller-09685-gc2933b2befe2 #0 [ 555.356089][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 555.364811][ T30] task:syz-executor state:D stack:24864 pid:16795 tgid:16795 ppid:16767 task_flags:0x400140 flags:0x00004002 [ 555.475442][ T30] Call Trace: [ 555.478798][ T30] [ 555.481752][ T30] __schedule+0x190e/0x4c90 [ 555.550395][ T30] ? __pfx___schedule+0x10/0x10 [ 555.585212][ T30] ? __pfx_lock_release+0x10/0x10 [ 555.590301][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 555.675643][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 555.681599][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 555.737186][ T30] ? schedule+0x90/0x320 [ 555.741501][ T30] schedule+0x14b/0x320 [ 555.795540][ T30] schedule_preempt_disabled+0x13/0x30 [ 555.801073][ T30] __mutex_lock+0x817/0x1010 [ 555.855364][ T30] ? __mutex_lock+0x602/0x1010 [ 555.860202][ T30] ? ib_get_eth_speed+0x153/0x800 [ 555.905491][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 555.910594][ T30] ? _raw_spin_unlock+0x28/0x50 [ 555.985261][ T30] ? ib_device_get_netdev+0x229/0x2f0 [ 555.990718][ T30] ib_get_eth_speed+0x153/0x800 [ 556.045332][ T30] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 556.050804][ T30] siw_query_port+0x3c/0x480 [ 556.105299][ T30] ib_setup_port_attrs+0x299/0x2440 [ 556.110585][ T30] ? __pfx_lock_release+0x10/0x10 [ 556.175518][ T30] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 556.181213][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 556.235688][ T30] ? device_add+0x460/0xbf0 [ 556.240301][ T30] add_one_compat_dev+0x51a/0x710 [ 556.285447][ T30] rdma_dev_init_net+0x1f1/0x280 [ 556.290446][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 556.358895][ T30] ops_init+0x31e/0x590 [ 556.363125][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 556.432227][ T30] setup_net+0x287/0x9e0 [ 556.448151][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 556.453767][ T30] ? __pfx_setup_net+0x10/0x10 [ 556.515320][ T30] copy_net_ns+0x33f/0x570 [ 556.519811][ T30] create_new_namespaces+0x425/0x7b0 [ 556.575218][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 556.595186][ T30] ksys_unshare+0x57d/0xa70 [ 556.599768][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 556.604828][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 556.705358][ T30] ? do_syscall_64+0x100/0x230 [ 556.710193][ T30] __x64_sys_unshare+0x38/0x40 [ 556.714986][ T30] do_syscall_64+0xf3/0x230 [ 556.825271][ T30] ? clear_bhb_loop+0x35/0x90 [ 556.830018][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.905249][ T30] RIP: 0033:0x7f6b3778e5a7 [ 556.909738][ T30] RSP: 002b:00007ffe41a203c8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 556.995319][ T30] RAX: ffffffffffffffda RBX: 00007f6b379a5f40 RCX: 00007f6b3778e5a7 [ 557.003440][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 557.125548][ T30] RBP: 00007f6b379a6738 R08: 0000000000000000 R09: 0000000000000000 [ 557.133576][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 557.225220][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 557.233279][ T30] [ 557.305228][ T30] [ 557.305228][ T30] Showing all locks held in the system: [ 557.313004][ T30] 1 lock held by khungtaskd/30: [ 557.415221][ T30] #0: ffffffff8e938760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 557.475519][ T30] 3 locks held by kworker/u8:5/1101: [ 557.480861][ T30] #0: ffff888145eec948 ((wq_completion)cfg80211){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 557.535397][T16795] lo speed is unknown, defaulting to 1000 [ 557.595233][ T30] #1: ffffc9000428fc60 ((work_completion)(&(&rdev->dfs_update_channels_wk)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 557.685414][ T30] #2: ffff888031926428 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xc2/0x1470 [ 557.694756][ T30] 4 locks held by kworker/u8:9/3502: [ 557.765317][ T30] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 557.815181][ T30] #1: ffffc9000cebfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 557.865246][ T30] #2: ffffffff8fcb2b10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 557.874733][ T30] #3: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x236/0xb00 [ 557.965235][ T30] 1 lock held by syslogd/5191: [ 557.970144][ T30] 2 locks held by getty/5590: [ 557.974829][ T30] #0: ffff88814de2d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 558.085351][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 558.125215][ T30] 3 locks held by kworker/1:5/5891: [ 558.130480][ T30] 3 locks held by syz-executor/15685: [ 558.196851][ T30] #0: ffff88805dfccd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 558.261220][ T30] #1: ffff88805dfcc078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 SYZFAIL: failed to send rpc fd=3 want=224 sent=0 n=-1 (errno 32: Broken pipe) [ 558.385275][ T30] #2: ffffffff8e93dc38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830