last executing test programs: 29.745484374s ago: executing program 0 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001800090700000000000000000a00000000020000000000001400050000000000dacd09"], 0x30}}, 0x40080) 29.744384084s ago: executing program 0 (id=1058): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0xfffffff6}}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_bt_hci(r0, 0x400448de, 0x0) 29.741914488s ago: executing program 0 (id=1061): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x400005, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200000002"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x20}, 0x1, 0xf00, 0x0, 0x40}, 0x10) 29.741505742s ago: executing program 0 (id=1063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 23.028117881s ago: executing program 0 (id=1065): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x6, 0x30}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="0400"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000000200000005000000000009000000000000000000000000007b6569ffefc19e3d3fb282e43c3374a306476306fa1477387854071055258c3f347119d8f0cfe000"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0132014010ff"}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000580)={0x0, 0x8000, 0xffffffffffff91bb}) 10.773409437s ago: executing program 0 (id=1065): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x6, 0x30}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r5, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r6, @ANYBLOB="0400"/20, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000000200000005000000000009000000000000000000000000007b6569ffefc19e3d3fb282e43c3374a306476306fa1477387854071055258c3f347119d8f0cfe000"], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0132014010ff"}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, 0x0) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000000580)={0x0, 0x8000, 0xffffffffffff91bb}) 2.179111718s ago: executing program 4 (id=1379): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'gretap0\x00'}}, 0x1e) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x7a}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'team_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) (async) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, 0xfffffffffffffffe, &(0x7f0000000040)=0x43) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x1, 0x803, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_buf(r6, 0x0, 0x23, 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket(0x2, 0x80805, 0x0) (async) pipe(&(0x7f0000000100)) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adffa5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) 2.073638271s ago: executing program 4 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000059010000000900010073797a30000000602c000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000d0058000000060a010400000000000000000100000008000b4000000000300004802c000180090001007866726d000000001c000280080001400000000008000240000000050500030002000000090001"], 0xcc}}, 0x0) 1.884386841s ago: executing program 4 (id=1383): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @NL80211_ATTR_SSID={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}]]}, 0x50}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800020001000000080001000000000034000480050003000000000005000300000000000500030000000000050003000000000005000700070000000500030000000000040008"], 0x5c}}, 0x0) 1.599303965s ago: executing program 4 (id=1389): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x24, &(0x7f00000001c0)=""/36, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x5, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x10, 0xdd, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000340)=[{0x2, 0x1, 0xa, 0x1}], 0x10, 0x1ff, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000440)={r1, 0x6, 0x9, 0xf}) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f0000000480)="2f3366b765bb59b7cde11bc1ca9829e21f887cdbea2744b17e65db655adf56a07e3799866d2bf5cfb16b0d4181e2a37f3e239c439a8ddd33ed320f6ebfe8") recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000047733757000000000000000085000000ba00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x17fe, @void, @value}, 0x94) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000600)=0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)={0x70, r7, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r11}]}, 0x70}, 0x1, 0x0, 0x0, 0x2400c004}, 0x41) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000140)=0xb2, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r5, 0x941c, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @empty, 0xfffffffd}, 0x1c) 1.416713546s ago: executing program 1 (id=1392): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000000000000000000000000000c9000000000000000000000000000000000000000000000000000000020000000200", @ANYRES32=0x0], 0xb8}}, 0x0) 1.311877396s ago: executing program 2 (id=1394): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async, rerun: 64) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x4e4, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}], @NL80211_ATTR_CSA_IES={0x4c0, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0xae, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_b, @initial, {0x8, 0xff7}}, 0x80000001, @random=0x508, 0x800, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0xad}, @val={0x4, 0x6, {0x2, 0xf5, 0x64, 0x6}}, @void, @val={0x5, 0x49, {0x6, 0x2c, 0x1b, "fe553432a531733fbe2007b1ab63745f26b7b3966a70c0d59baaa902b09548f866d74d2b8caf9da7cdd404a0603f8dd033164d78641afc44baf980a26c6c9a096834500a5bd5"}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x8, 0x3, 0x1, 0x0, {0xffff, 0x0, 0x0, 0x80, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x300, 0x66}}, @void, @val={0x71, 0x7, {0x0, 0x1, 0x1, 0x1, 0x1, 0x5, 0x28}}, @void}}, @NL80211_ATTR_IE={0x82, 0x2a, [@peer_mgmt={0x75, 0x16, {0x0, 0x81, @void, @val=0x401, @val="2dc4b5ad5381087e31924b0daa41d351"}}, @dsss={0x3, 0x1, 0xb5}, @rann={0x7e, 0x15, {{0x1, 0x4d}, 0xf5, 0xff, @broadcast, 0x5, 0x9, 0xc6e}}, @prep={0x83, 0x1f, {{}, 0x40, 0x10, @broadcast, 0x3ff, @void, 0x312a, 0x9, @device_b, 0xe}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x5, 0x4, 0x9}}, @prep={0x83, 0x1f, {{}, 0x0, 0x5, @broadcast, 0x0, @void, 0x7fffffff, 0x30000000, @broadcast}}, @ibss={0x6, 0x2, 0x7}]}, @NL80211_ATTR_BEACON_TAIL={0xd, 0xf, [@mesh_config={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x7, 0x21}}]}, @NL80211_ATTR_IE={0x13d, 0x2a, [@fast_bss_trans={0x37, 0xe7, {0x3, 0x8, "baf3cfa11b450f9440b994d43d2c3844", "6ce5fe2d9c798d731c35b72f10bbb2558c8f19531096a2c0355ad93b0f35eecc", "8fbc7602a5315da6b1e55be0a7d27903e3d56d917a96101d72da141194badc37", [{0x9, 0x2, "46c5"}, {0x3, 0x19, "bffecd8f8888b06d4b22c4ae8f5bc62973bf6ed3d5a1f663d9"}, {0x4, 0x8, "a09f639617b0698f"}, {0x1, 0x1c, "ab0272debfe60d2b1c18616e90b8afce7a0595b1231c256ed3c0ef1e"}, {0x4, 0x5, "8c41696d19"}, {0x2, 0x1f, "520e7aaacebadf161c3fc87c94c49f9db5386afe74b4c2dda2e78ebbca8a14"}, {0x8, 0xa, "d5e6ec6f2aa394feffad"}, {0x4, 0x18, "2891c18d37e49c6fa48cee6107ac665198a5552aaa29a5b1"}]}}, @tim={0x5, 0x32, {0x2, 0x7, 0x7, "de07388a06e5e70094228495674febed25982b2d190bb5bbca623747fcc757150aacfbd652ef2d9c13b243ecdbc69d"}}, @ht={0x2d, 0x1a, {0x803c, 0x2, 0x1, 0x0, {0x4, 0x10, 0x0, 0x9, 0x0, 0x1, 0x1}, 0x1, 0x8, 0x9}}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x6, 0x1, 0x9, 0x6]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x0, 0x0, 0x9, 0xb6f]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x0, 0x1, 0x2, 0x5, 0x7, 0x7ba2, 0x9e3e, 0x0]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x8]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x3c, 0xf, [@ssid, @dsss={0x3, 0x1, 0xac}, @mesh_id={0x72, 0x6}, @gcr_ga={0xbd, 0x6}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x0, 0x38, 0x80}}, @chsw_timing={0x68, 0x4, {0x6, 0x9}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @mesh_id={0x72, 0x6}, @supported_rates={0x1, 0x7, [{0x16, 0x1}, {0x60}, {0x24}, {0x2}, {0xc, 0x1}, {0x2}, {0x1, 0x1}]}]}, @NL80211_ATTR_FTM_RESPONDER={0x1c0, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd0, 0x2, "ad6d1297c11d868384651ae1a33a830d9ece0e2d246b6064c294a9fdb4802d146e67e58cfee84a44f310972ff7561474ace927b3584d4daa4521ae33b45b9afec9f20bab06838d40bc233b9f0b0ed37e26d439cc44260c32adddd3cb428fa8b5728a008d74dc002ea87b6f322bb1530b94eb2b0dc969f24f21c797f4048a2f458a4213d1582fdf59db6646268c165c6be096a2ab536e117404255beb1735a1dfb1b677fe2bda2c32f586f1a8e7af6acc3c4fc7eb23bb1dcae5b9559136473415656065052569b8fc6904da0d"}, @NL80211_FTM_RESP_ATTR_LCI={0xe0, 0x2, "11aa19e633302e8042eca35337b9d4ee9617c8f0e66f0dca33d3ccd61e02f8e2e741fbc9b311535c257d1219027f05b057d8953364febb592f0f8fe2e8186c7472995e07f031a3ccedce8685c4bd77c407e2dbf4fe17a7be8fd00c882e8ae15c1d598d642aeba0510312dc96e5df73a60dac612f86b206e033c78bf88057a315926482faac2c312b07074f430cab297bb4548aa139003def80b259f267f8eb94f95077a160d5f228cdc39c9deb5e7361374d3f5b4da66c9bcc2414fdbf702c1923288ad8fce4f332e5187f1ec66112aa263c771caed52c1b2a028ea3"}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "f1"}]}], @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0x8]}]}]}, 0x4e4}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f6080000000118000008"], 0x44}}, 0x0) (async, rerun: 64) r7 = socket(0x10, 0x803, 0x0) (rerun: 64) getsockname$packet(r7, 0x0, &(0x7f0000000200)) (async) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xce0, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e14f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async, rerun: 64) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params]}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x40080) (async, rerun: 64) r11 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) unshare(0x400) (async, rerun: 64) openat$cgroup_ro(r12, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async, rerun: 64) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r11, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) (async) sendmsg$inet_sctp(r11, &(0x7f0000000400)={&(0x7f0000000180)=@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="6c16", 0x2}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="200000002a0130ced7c9b20000000084000000020000008105000000", @ANYRES32=0x0, @ANYBLOB="18000000000000008400000000000000030004000080ae01"], 0x38, 0x2000}, 0x6) 1.311567935s ago: executing program 1 (id=1395): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f40), r0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x20000002) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x40047452, 0x0) 1.221256346s ago: executing program 3 (id=1396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x101}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='syzkaller\x00', 0xa, 0x0, 0x0, 0x40fd0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.195898577s ago: executing program 2 (id=1397): r0 = socket$inet(0xa, 0x801, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000540)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000480, 0x0, 0x0, 0x200004b0, 0x200004e0], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00fffff9000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000080000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a042240100000000"]}, 0x108) 1.104430039s ago: executing program 1 (id=1398): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xaf, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000001000000000ff0200000000000000000000000000010004c9"], 0x0) 1.103466167s ago: executing program 3 (id=1399): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000003000000", @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="24005080110001004abee339084eeef16f162471f4000000050002000400000004000600"], 0x40}}, 0x0) 1.082066181s ago: executing program 2 (id=1400): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.048502744s ago: executing program 3 (id=1401): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210103", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 988.235125ms ago: executing program 1 (id=1402): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r1], 0x0, 0x37, 0x0, 0x0, 0xffffffff, 0x0, @void, @value}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008015}, 0x4000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014ef02800800010008000000060002000100000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) 985.439096ms ago: executing program 3 (id=1403): socket$kcm(0x2, 0xa, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f0000000040)={0x11, 0x9, r3}, 0x14) writev(r0, &(0x7f0000000780)=[{0x0}], 0x1) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) 963.421972ms ago: executing program 2 (id=1404): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e0014ef02800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) (fail_nth: 1) 875.595753ms ago: executing program 1 (id=1405): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x3, 0x0, 0x10, 0x37, 0x1}, 0x20) syz_emit_ethernet(0x7e, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x4, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev}]}]}}}}}}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e23, @rand_addr=0x64010101}, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @private=0xa010101}, 0x34c, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000040)='veth1_to_batadv\x00', 0x10001, 0x1, 0x1}) 845.324884ms ago: executing program 3 (id=1406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x76, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x2, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x15, 0x2, 0x0, 0x0, 0x0, {[@eol, @md5sig={0x13, 0x12, "10ddab7f602b3a32871e4847992daaf6"}, @exp_fastopen={0xfe, 0xc, 0xf989, "920c7921d106a2fa"}, @sack={0x5, 0x1e, [0x7, 0x3, 0x4, 0xc, 0x23, 0x0, 0x8]}]}}}}}}}, 0x0) (fail_nth: 4) 208.045259ms ago: executing program 3 (id=1407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @local}}, 0x1e) close(0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'smc_ib\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)="2b5a8b2051f62c7b535d0d20789b3fcfdf74c0e2941ac3515f440c53d2aa6eb8e14a5162f00701baec880399", 0x2c}, 0x1, 0x0, 0x0, 0x2040000}, 0x200400c0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}, @TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xff, 0xffffffff, 0xffffff00, 0xff000000]}]}}]}, 0x5c}}, 0x0) close(r3) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, r9, 0x1, 0xfffffffc}, 0x14}}, 0x20000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) socket$kcm(0x10, 0x3, 0x10) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r10}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x1, 0x33ea30d1, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r11}, 0x0, &(0x7f0000000b00)=r10}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x8, 0x800, 0x800, 0x5, 0x6, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r12 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_REVISION_TARGET(r12, 0x0, 0x43, 0x0, &(0x7f00000007c0)=0x1e) 207.510298ms ago: executing program 4 (id=1408): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) (async) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async, rerun: 64) syz_emit_ethernet(0x2e, &(0x7f0000001000)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async, rerun: 64) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) (async) setsockopt$inet6_buf(r4, 0x29, 0xcb, 0x0, 0x17) (async) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x40308}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 186.844013ms ago: executing program 2 (id=1409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000d40)=ANY=[@ANYBLOB="1808000000400000000000000000000085100000050000008500000031000000a70000000000000018000000000002000000000000000000950000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 126.519386ms ago: executing program 2 (id=1410): unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x21, &(0x7f0000000380)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX], 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @short}, 0x14) r2 = socket$netlink(0x10, 0x3, 0x8000000004) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlinkprop={0x90, 0x10, 0x800, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x4, 0x9}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x4, 0x1}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0x7}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xea, 0xd8}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xcbc79970d74f5f5d, 0x6}}]}}}, @IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x90}}, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.empty_time\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@gettfilter={0x4c, 0x2e, 0x8, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x10, 0xffe0}, {0x0, 0x7}, {0x1, 0xffff}}, [{0x8, 0xb, 0xf4}, {0x8, 0xb, 0xe}, {0x8, 0xb, 0xff}, {0x8, 0xb, 0x10000}, {0x8, 0xb, 0xfffffff7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x693dd0b06c1fdf81}, 0x4040054) unshare(0x24020400) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0) unshare(0x400) read$alg(r6, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c8, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r8 = socket$pptp(0x18, 0x1, 0x2) writev(r8, &(0x7f0000000000)=[{&(0x7f0000001280)="580000001400192240834b80040d8c560a0677bc4514820500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00005a9700010002081000418e000000", 0x55}, {0x0}, {&(0x7f00000001c0)="abd875d7047d7cfeb48df0da0655b81ea870e346d5213b0400728ceff385f4470f32a66d6a991e33ee09c726f70f00fb770daa126a5d0f01815b480fdd6736ff4db42a47c795ef4038b1536e5ed8e4c0f18c207338ae538cb4de9feb32503ae663aca8e14296ce18ebaee3c6d7a63841ea8e854e358e89eed9a10aff7f1010", 0x7f}], 0x3) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)}], 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x230, 0x0, 0x25, 0x148, 0x108, 0x60, 0x228, 0x2a8, 0x2a8, 0x228, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xe0, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x7}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00', {0xfffffffffffffffd}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x20c49a, 'syz0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x290) syz_emit_ethernet(0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0xa4}, 0x1, 0x0, 0x0, 0x400c4}, 0xc081) 699.7µs ago: executing program 1 (id=1411): unshare(0x22000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x1}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001800010029bd7000fddbdf251c800009fd00000800010000060001"], 0x54}}, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000002100390d000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000ac1414aa000000000000000000000000ac141400000000000000000000000000000000000000000011000a00ff010000000000000000000000000001ffffffff"], 0xec}}, 0x0) bind$802154_raw(r2, 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0xfff8, 0x90, 0x81, 0x5}, {0x9, 0x2, 0x2, 0xfffffffa}, {0x6, 0x2, 0x2, 0x6}, {0xedf6, 0xd7, 0x1, 0x1}, {0x7, 0x91, 0xc, 0xfffffff9}, {0x1, 0x40, 0x4}, {0x5d1, 0x1, 0xd, 0x6}, {0x8001, 0xa, 0x3, 0x4}]}) 0s ago: executing program 4 (id=1412): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68000000100003051000fbff0200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d"], 0x68}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000120001000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @mcast1, 0x9}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x24}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r3 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x1c, 0x0, 0x10, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @info_reply={0x10, 0x0, 0x0, 0x7, 0x9}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x1f4, 0xd50, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x6, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x69) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f00000001c0)={r7, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x97, "8a5dc3ddeea7bb7c98a8b6a912572aa7f9c8a2390bf82fbef717db45593417b5c5ec837eb1319fb066989c876e2a1e156c301d4f478663466895919d0c7fdb338602210bdd94491d3b5632e944ad079485a63400db6a3d8088a042d3da1d75383dfbca0659d999a2b45511db8f05cb3b818a6a65ca072fd4afff684b7204fcdba2c7142b5f263eb3f35ddbee90669c3e6ffd5ded8efc83"}, &(0x7f0000000080)=0x9f) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000200)={r8, 0xfff9, 0xfff7}, 0x8) kernel console output (not intermixed with test programs): 4472][ T6169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.619767][ T6169] __sys_sendmsg+0x292/0x380 [ 72.624367][ T6169] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.629490][ T6169] ? __pfx_vfs_write+0x10/0x10 [ 72.634270][ T6169] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.640600][ T6169] ? do_syscall_64+0x100/0x230 [ 72.645360][ T6169] ? do_syscall_64+0xb6/0x230 [ 72.650031][ T6169] do_syscall_64+0xf3/0x230 [ 72.654534][ T6169] ? clear_bhb_loop+0x35/0x90 [ 72.659206][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.665090][ T6169] RIP: 0033:0x7fed0417e719 [ 72.669496][ T6169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.689097][ T6169] RSP: 002b:00007fed0503d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.697507][ T6169] RAX: ffffffffffffffda RBX: 00007fed04335f80 RCX: 00007fed0417e719 [ 72.705479][ T6169] RDX: 0000000000008004 RSI: 0000000020000700 RDI: 0000000000000003 [ 72.713449][ T6169] RBP: 00007fed0503d090 R08: 0000000000000000 R09: 0000000000000000 [ 72.721415][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.729384][ T6169] R13: 0000000000000000 R14: 00007fed04335f80 R15: 00007ffe3725aa28 [ 72.737361][ T6169] [ 72.844398][ T6169] __nla_validate_parse: 10 callbacks suppressed [ 72.844414][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 72.921258][ T6182] FAULT_INJECTION: forcing a failure. [ 72.921258][ T6182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.969351][ T6182] CPU: 1 UID: 0 PID: 6182 Comm: syz.4.84 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 72.979893][ T6182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 72.989966][ T6182] Call Trace: [ 72.993262][ T6182] [ 72.996220][ T6182] dump_stack_lvl+0x241/0x360 [ 73.000927][ T6182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.006151][ T6182] ? __pfx__printk+0x10/0x10 [ 73.010779][ T6182] should_fail_ex+0x3b0/0x4e0 [ 73.015482][ T6182] _copy_from_user+0x2f/0xc0 [ 73.020110][ T6182] move_addr_to_kernel+0x82/0x150 [ 73.025162][ T6182] copy_msghdr_from_user+0x43e/0x680 [ 73.030477][ T6182] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 73.036308][ T6182] __sys_sendmmsg+0x36d/0x730 [ 73.040990][ T6182] ? __pfx___sys_sendmmsg+0x10/0x10 [ 73.046193][ T6182] ? __pfx_lock_release+0x10/0x10 [ 73.051215][ T6182] ? kstrtouint_from_user+0x128/0x190 [ 73.056596][ T6182] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 73.062486][ T6182] ? ksys_write+0x229/0x2b0 [ 73.066980][ T6182] ? __pfx_lock_release+0x10/0x10 [ 73.072005][ T6182] ? vfs_write+0x730/0xd30 [ 73.076416][ T6182] ? __mutex_unlock_slowpath+0x21d/0x750 [ 73.082052][ T6182] ? __fget_files+0x3f3/0x470 [ 73.086745][ T6182] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 73.092729][ T6182] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.099051][ T6182] ? do_syscall_64+0x100/0x230 [ 73.103810][ T6182] __x64_sys_sendmmsg+0xa0/0xb0 [ 73.108661][ T6182] do_syscall_64+0xf3/0x230 [ 73.113156][ T6182] ? clear_bhb_loop+0x35/0x90 [ 73.117832][ T6182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.123727][ T6182] RIP: 0033:0x7ffb3ef7e719 [ 73.128149][ T6182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.147749][ T6182] RSP: 002b:00007ffb3fe40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 73.156160][ T6182] RAX: ffffffffffffffda RBX: 00007ffb3f135f80 RCX: 00007ffb3ef7e719 [ 73.164125][ T6182] RDX: 0000000000000001 RSI: 0000000020003a00 RDI: 0000000000000003 [ 73.172090][ T6182] RBP: 00007ffb3fe40090 R08: 0000000000000000 R09: 0000000000000000 [ 73.180074][ T6182] R10: 000000000000c0c0 R11: 0000000000000246 R12: 0000000000000001 [ 73.188047][ T6182] R13: 0000000000000000 R14: 00007ffb3f135f80 R15: 00007ffd3f60d238 [ 73.196022][ T6182] [ 73.251466][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'. [ 73.334103][ T6193] netlink: 'syz.3.88': attribute type 10 has an invalid length. [ 73.341773][ T6193] netlink: 55 bytes leftover after parsing attributes in process `syz.3.88'. [ 73.389819][ T6193] team0: Port device virt_wifi0 added [ 73.880228][ T6218] Â: renamed from pim6reg1 [ 73.955803][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 73.967845][ T6226] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 74.261147][ T6243] netlink: 40 bytes leftover after parsing attributes in process `syz.1.106'. [ 74.320197][ T6248] FAULT_INJECTION: forcing a failure. [ 74.320197][ T6248] name failslab, interval 1, probability 0, space 0, times 0 [ 74.345090][ T6248] CPU: 0 UID: 0 PID: 6248 Comm: syz.3.109 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 74.355727][ T6248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 74.365804][ T6248] Call Trace: [ 74.369102][ T6248] [ 74.372059][ T6248] dump_stack_lvl+0x241/0x360 [ 74.376769][ T6248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.381993][ T6248] ? __pfx__printk+0x10/0x10 [ 74.386657][ T6248] ? __kmalloc_noprof+0xb0/0x400 [ 74.391622][ T6248] ? __pfx___might_resched+0x10/0x10 [ 74.396945][ T6248] should_fail_ex+0x3b0/0x4e0 [ 74.401646][ T6248] ? alloc_port_data+0x10a/0x3c0 [ 74.406614][ T6248] should_failslab+0xac/0x100 [ 74.411337][ T6248] ? alloc_port_data+0x10a/0x3c0 [ 74.416305][ T6248] __kmalloc_noprof+0xd8/0x400 [ 74.421093][ T6248] ? lockdep_init_map_type+0xa1/0x910 [ 74.426505][ T6248] alloc_port_data+0x10a/0x3c0 [ 74.431309][ T6248] ib_device_set_netdev+0xd1/0x6b0 [ 74.436451][ T6248] ? rxe_register_device+0x1ae/0x380 [ 74.441765][ T6248] ? ib_set_device_ops+0x3b0b/0x3c40 [ 74.447085][ T6248] rxe_register_device+0x21e/0x380 [ 74.452241][ T6248] rxe_net_add+0x98/0x110 [ 74.456595][ T6248] rxe_newlink+0xde/0x1a0 [ 74.460964][ T6248] nldev_newlink+0x5c0/0x640 [ 74.465585][ T6248] ? __pfx_nldev_newlink+0x10/0x10 [ 74.470806][ T6248] ? __pfx_aa_get_newest_label+0x10/0x10 [ 74.476474][ T6248] ? __pfx_aa_get_newest_label+0x10/0x10 [ 74.482161][ T6248] ? bpf_lsm_capable+0x9/0x10 [ 74.486861][ T6248] ? security_capable+0x7e/0x2d0 [ 74.491827][ T6248] ? __pfx_nldev_newlink+0x10/0x10 [ 74.496967][ T6248] rdma_nl_rcv+0x6dd/0x9e0 [ 74.501421][ T6248] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 74.506411][ T6248] ? netlink_deliver_tap+0x2e/0x1b0 [ 74.511634][ T6248] netlink_unicast+0x7f6/0x990 [ 74.516421][ T6248] ? __pfx_netlink_unicast+0x10/0x10 [ 74.521728][ T6248] ? __virt_addr_valid+0x183/0x530 [ 74.526864][ T6248] ? __check_object_size+0x48e/0x900 [ 74.532179][ T6248] netlink_sendmsg+0x8e4/0xcb0 [ 74.536987][ T6248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.542306][ T6248] ? aa_sock_msg_perm+0x91/0x160 [ 74.547276][ T6248] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.552587][ T6248] __sock_sendmsg+0x221/0x270 [ 74.557295][ T6248] ____sys_sendmsg+0x52a/0x7e0 [ 74.562095][ T6248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.567432][ T6248] __sys_sendmsg+0x292/0x380 [ 74.572055][ T6248] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.577219][ T6248] ? __pfx_vfs_write+0x10/0x10 [ 74.582032][ T6248] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.588392][ T6248] ? do_syscall_64+0x100/0x230 [ 74.593183][ T6248] ? do_syscall_64+0xb6/0x230 [ 74.597891][ T6248] do_syscall_64+0xf3/0x230 [ 74.602421][ T6248] ? clear_bhb_loop+0x35/0x90 [ 74.607134][ T6248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.613049][ T6248] RIP: 0033:0x7ff988f7e719 [ 74.617488][ T6248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.637130][ T6248] RSP: 002b:00007ff989d9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.645572][ T6248] RAX: ffffffffffffffda RBX: 00007ff989135f80 RCX: 00007ff988f7e719 [ 74.653564][ T6248] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000006 [ 74.661554][ T6248] RBP: 00007ff989d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 74.669543][ T6248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.677533][ T6248] R13: 0000000000000000 R14: 00007ff989135f80 R15: 00007fff3d570e78 [ 74.685541][ T6248] [ 74.694564][ T6248] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 75.064352][ T6277] netlink: 'syz.3.116': attribute type 2 has an invalid length. [ 75.079804][ T6277] netlink: 'syz.3.116': attribute type 8 has an invalid length. [ 75.341441][ T6291] netlink: 64 bytes leftover after parsing attributes in process `syz.1.122'. [ 75.455820][ T6301] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 75.548730][ T6303] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 75.587364][ T6303] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 75.611347][ T6303] team0: Failed to send options change via netlink (err -105) [ 75.617912][ T6305] netlink: 'syz.2.128': attribute type 10 has an invalid length. [ 75.619005][ T6303] team0: Port device netdevsim0 added [ 75.657592][ T6305] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 75.670356][ T6305] team0: Failed to send options change via netlink (err -105) [ 75.687272][ T6305] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 75.698614][ T6305] team0: Port device netdevsim0 removed [ 75.709309][ T6305] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 75.730957][ T6312] macvtap1: entered promiscuous mode [ 75.745565][ T6312] vlan0: entered promiscuous mode [ 75.794939][ T6312] vlan0: left promiscuous mode [ 76.281041][ T6342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 76.310048][ T6343] netlink: 'syz.2.139': attribute type 4 has an invalid length. [ 76.363619][ T6345] netlink: 'syz.2.139': attribute type 4 has an invalid length. [ 76.583310][ T6362] Bluetooth: MGMT ver 1.23 [ 76.639196][ T8] cfg80211: failed to load regulatory.db [ 76.745231][ T6370] netlink: 64 bytes leftover after parsing attributes in process `syz.2.150'. [ 76.759449][ T6346] pimreg3: entered allmulticast mode [ 76.856708][ T6377] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 76.878554][ T6379] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 76.979717][ T6386] netlink: 560 bytes leftover after parsing attributes in process `syz.4.156'. [ 77.021848][ T6386] IPVS: Scheduler module ip_vs_sip not found [ 77.108650][ T6389] IPVS: Scheduler module ip_vs_sip not found [ 77.110886][ T6392] netlink: 560 bytes leftover after parsing attributes in process `syz.4.158'. [ 77.176012][ T6392] IPVS: Scheduler module ip_vs_sip not found [ 77.245229][ T6395] ebtables: ebtables: counters copy to user failed while replacing table [ 78.109019][ T6430] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.166941][ T6437] netlink: 'syz.3.177': attribute type 4 has an invalid length. [ 78.218183][ T6430] xt_CT: No such helper "snmp" [ 78.351993][ T6441] __nla_validate_parse: 4 callbacks suppressed [ 78.352005][ T6441] netlink: 260 bytes leftover after parsing attributes in process `syz.0.178'. [ 79.158446][ T6425] vlan2: entered promiscuous mode [ 79.164822][ T6425] team0: Device vlan2 is already an upper device of the team interface [ 79.195243][ T6440] netlink: 351 bytes leftover after parsing attributes in process `syz.0.178'. [ 79.362306][ T6448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'. [ 79.381528][ T6452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 79.403123][ T6452] FAULT_INJECTION: forcing a failure. [ 79.403123][ T6452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.431240][ T6452] CPU: 1 UID: 0 PID: 6452 Comm: syz.0.183 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 79.441866][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 79.451938][ T6452] Call Trace: [ 79.455236][ T6452] [ 79.458190][ T6452] dump_stack_lvl+0x241/0x360 [ 79.462895][ T6452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.468120][ T6452] ? __pfx__printk+0x10/0x10 [ 79.472743][ T6452] ? __pfx_lock_release+0x10/0x10 [ 79.477794][ T6452] ? __lock_acquire+0x1384/0x2050 [ 79.482854][ T6452] should_fail_ex+0x3b0/0x4e0 [ 79.487558][ T6452] _copy_from_user+0x2f/0xc0 [ 79.492153][ T6452] kstrtouint_from_user+0xc6/0x190 [ 79.497273][ T6452] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 79.502990][ T6452] ? __pfx_lock_acquire+0x10/0x10 [ 79.508024][ T6452] proc_fail_nth_write+0xaa/0x2d0 [ 79.513047][ T6452] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 79.518939][ T6452] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 79.524570][ T6452] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 79.530193][ T6452] vfs_write+0x2a3/0xd30 [ 79.534442][ T6452] ? fdget_pos+0x24e/0x320 [ 79.538857][ T6452] ? __pfx_vfs_write+0x10/0x10 [ 79.543619][ T6452] ? __fget_files+0x3f3/0x470 [ 79.548299][ T6452] ? fdget_pos+0x24e/0x320 [ 79.552717][ T6452] ksys_write+0x183/0x2b0 [ 79.557044][ T6452] ? __pfx_ksys_write+0x10/0x10 [ 79.561900][ T6452] ? do_syscall_64+0x100/0x230 [ 79.566682][ T6452] ? do_syscall_64+0xb6/0x230 [ 79.571366][ T6452] do_syscall_64+0xf3/0x230 [ 79.575871][ T6452] ? clear_bhb_loop+0x35/0x90 [ 79.580547][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.586436][ T6452] RIP: 0033:0x7fed0417d1ff [ 79.590850][ T6452] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 79.610448][ T6452] RSP: 002b:00007fed0503d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 79.618859][ T6452] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fed0417d1ff [ 79.626826][ T6452] RDX: 0000000000000001 RSI: 00007fed0503d0a0 RDI: 0000000000000004 [ 79.634790][ T6452] RBP: 00007fed0503d090 R08: 0000000000000000 R09: 0000000000000000 [ 79.642753][ T6452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 79.650718][ T6452] R13: 0000000000000000 R14: 00007fed04335f80 R15: 00007ffe3725aa28 [ 79.658699][ T6452] [ 79.763444][ T6465] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 80.888150][ T6546] netlink: 72 bytes leftover after parsing attributes in process `syz.0.219'. [ 80.910123][ T6540] vxcan1: tx address claim with dlc 14 [ 81.024175][ T6552] ieee802154 phy0 wpan0: encryption failed: -90 [ 81.098662][ T6560] netlink: 64 bytes leftover after parsing attributes in process `syz.3.226'. [ 81.109986][ T6562] netlink: 5 bytes leftover after parsing attributes in process `syz.0.227'. [ 81.123517][ T6563] netlink: 5 bytes leftover after parsing attributes in process `syz.0.227'. [ 81.152506][ T6562] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.213264][ T6563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 81.229938][ T6560] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 81.249031][ T6568] netlink: 'syz.4.228': attribute type 1 has an invalid length. [ 81.388333][ T6576] netlink: 256 bytes leftover after parsing attributes in process `syz.0.232'. [ 81.437396][ T6578] warning: `syz.4.233' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.501302][ T6581] netlink: 'syz.2.235': attribute type 21 has an invalid length. [ 81.624884][ T6589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.233'. [ 81.737052][ T6594] No such timeout policy "syz0" [ 81.832277][ T5857] Bluetooth: hci0: command 0x0401 tx timeout [ 81.946877][ T6598] vlan2: entered promiscuous mode [ 81.970205][ T6598] team0: Device vlan2 is already an upper device of the team interface [ 82.049390][ T6606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.056868][ T6606] IPv6: NLM_F_CREATE should be set when creating new route [ 82.064172][ T6606] IPv6: NLM_F_CREATE should be set when creating new route [ 82.310956][ T6596] infiniband syz1: set active [ 82.318941][ T6596] infiniband syz1: added team_slave_0 [ 82.364612][ T6596] RDS/IB: syz1: added [ 82.369137][ T6596] smc: adding ib device syz1 with port count 1 [ 82.375644][ T6596] smc: ib device syz1 port 1 has pnetid [ 82.479405][ T6636] netlink: 'syz.1.259': attribute type 8 has an invalid length. [ 82.522919][ T6645] netlink: 'syz.1.259': attribute type 8 has an invalid length. [ 82.594811][ T6641] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 83.024829][ T6671] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 83.055702][ T6668] Â: renamed from pim6reg1 [ 83.057607][ T6671] netlink: 'syz.1.268': attribute type 4 has an invalid length. [ 83.368869][ T6686] __nla_validate_parse: 9 callbacks suppressed [ 83.368886][ T6686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 83.470341][ T6692] batadv0: entered promiscuous mode [ 83.479649][ T6692] macvtap1: entered promiscuous mode [ 83.511701][ T6692] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 83.523292][ T6692] batadv0: left promiscuous mode [ 83.802264][ T6713] netlink: 52 bytes leftover after parsing attributes in process `syz.4.286'. [ 83.941528][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.292'. [ 84.168117][ T6740] batadv0: entered promiscuous mode [ 84.196986][ T6740] macvtap1: entered promiscuous mode [ 84.220441][ T6740] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 84.269254][ T6740] batadv0: left promiscuous mode [ 84.280453][ T6746] netlink: 'syz.0.300': attribute type 10 has an invalid length. [ 84.368581][ T6746] team0: Port device team_slave_0 removed [ 84.496674][ T6760] FAULT_INJECTION: forcing a failure. [ 84.496674][ T6760] name failslab, interval 1, probability 0, space 0, times 0 [ 84.515326][ T6760] CPU: 0 UID: 0 PID: 6760 Comm: syz.4.304 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 84.525944][ T6760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 84.536008][ T6760] Call Trace: [ 84.539286][ T6760] [ 84.542213][ T6760] dump_stack_lvl+0x241/0x360 [ 84.546892][ T6760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.552090][ T6760] ? __pfx__printk+0x10/0x10 [ 84.556693][ T6760] should_fail_ex+0x3b0/0x4e0 [ 84.561364][ T6760] should_failslab+0xac/0x100 [ 84.566037][ T6760] ? sctp_add_bind_addr+0x89/0x3a0 [ 84.571143][ T6760] __kmalloc_cache_noprof+0x6c/0x2c0 [ 84.576428][ T6760] sctp_add_bind_addr+0x89/0x3a0 [ 84.581360][ T6760] sctp_copy_local_addr_list+0x311/0x500 [ 84.586989][ T6760] ? sctp_copy_local_addr_list+0xab/0x500 [ 84.592707][ T6760] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 84.598855][ T6760] ? sctp_v6_is_any+0x60/0x70 [ 84.603533][ T6760] sctp_bind_addr_copy+0xad/0x3b0 [ 84.608550][ T6760] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 84.614877][ T6760] sctp_connect_new_asoc+0x2f3/0x6c0 [ 84.620161][ T6760] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 84.625960][ T6760] ? sctp_sendmsg+0xbb9/0x3520 [ 84.630722][ T6760] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 84.636522][ T6760] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 84.642063][ T6760] sctp_sendmsg+0x219a/0x3520 [ 84.646756][ T6760] ? __pfx_sctp_sendmsg+0x10/0x10 [ 84.651779][ T6760] ? __pfx_aa_sk_perm+0x10/0x10 [ 84.656629][ T6760] ? inet_sendmsg+0x330/0x390 [ 84.661305][ T6760] __sock_sendmsg+0x1a6/0x270 [ 84.665983][ T6760] ____sys_sendmsg+0x52a/0x7e0 [ 84.670751][ T6760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.676045][ T6760] __sys_sendmmsg+0x3ab/0x730 [ 84.680723][ T6760] ? __pfx___sys_sendmmsg+0x10/0x10 [ 84.685929][ T6760] ? __pfx_lock_release+0x10/0x10 [ 84.690951][ T6760] ? kstrtouint_from_user+0x128/0x190 [ 84.696340][ T6760] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 84.702236][ T6760] ? ksys_write+0x229/0x2b0 [ 84.706732][ T6760] ? __pfx_lock_release+0x10/0x10 [ 84.711757][ T6760] ? vfs_write+0x730/0xd30 [ 84.716167][ T6760] ? __mutex_unlock_slowpath+0x21d/0x750 [ 84.721802][ T6760] ? __fget_files+0x3f3/0x470 [ 84.726481][ T6760] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 84.732461][ T6760] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.738788][ T6760] ? do_syscall_64+0x100/0x230 [ 84.743551][ T6760] __x64_sys_sendmmsg+0xa0/0xb0 [ 84.748406][ T6760] do_syscall_64+0xf3/0x230 [ 84.752902][ T6760] ? clear_bhb_loop+0x35/0x90 [ 84.757576][ T6760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.763461][ T6760] RIP: 0033:0x7ffb3ef7e719 [ 84.767871][ T6760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.787467][ T6760] RSP: 002b:00007ffb3fe40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 84.795883][ T6760] RAX: ffffffffffffffda RBX: 00007ffb3f135f80 RCX: 00007ffb3ef7e719 [ 84.803852][ T6760] RDX: 0000000000000001 RSI: 0000000020003a00 RDI: 0000000000000003 [ 84.811817][ T6760] RBP: 00007ffb3fe40090 R08: 0000000000000000 R09: 0000000000000000 [ 84.819780][ T6760] R10: 000000000000c0c0 R11: 0000000000000246 R12: 0000000000000002 [ 84.827743][ T6760] R13: 0000000000000000 R14: 00007ffb3f135f80 R15: 00007ffd3f60d238 [ 84.835723][ T6760] [ 85.316639][ T6777] trusted_key: syz.2.311 sent an empty control message without MSG_MORE. [ 85.687895][ T6796] vlan2: entered promiscuous mode [ 85.728184][ T6796] team0: Device vlan2 is already an upper device of the team interface [ 85.744719][ T6764] Cannot find del_set index 3 as target [ 85.862826][ T6802] netlink: 72 bytes leftover after parsing attributes in process `syz.3.322'. [ 85.912866][ T6806] Unsupported ieee802154 address type: 0 [ 86.832799][ T6860] netlink: 112 bytes leftover after parsing attributes in process `syz.1.342'. [ 86.840420][ T6861] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 86.947134][ T6866] syzkaller0: entered allmulticast mode [ 87.067087][ T6874] netlink: 64 bytes leftover after parsing attributes in process `syz.4.348'. [ 87.239889][ T6882] netlink: 'syz.0.352': attribute type 21 has an invalid length. [ 87.250600][ T6882] netlink: 168 bytes leftover after parsing attributes in process `syz.0.352'. [ 87.260558][ T6883] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 87.297634][ T6885] netlink: 72 bytes leftover after parsing attributes in process `syz.2.353'. [ 87.421198][ T6890] netlink: 56 bytes leftover after parsing attributes in process `syz.0.355'. [ 87.457802][ T6890] : renamed from ipvlan1 [ 87.498124][ T6888] netlink: 40 bytes leftover after parsing attributes in process `syz.3.354'. [ 87.572039][ T6896] FAULT_INJECTION: forcing a failure. [ 87.572039][ T6896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.600079][ T6896] CPU: 0 UID: 0 PID: 6896 Comm: syz.0.357 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 87.610702][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 87.620776][ T6896] Call Trace: [ 87.624063][ T6896] [ 87.626993][ T6896] dump_stack_lvl+0x241/0x360 [ 87.631672][ T6896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.636868][ T6896] ? __pfx__printk+0x10/0x10 [ 87.641454][ T6896] ? snprintf+0xda/0x120 [ 87.645696][ T6896] should_fail_ex+0x3b0/0x4e0 [ 87.650369][ T6896] _copy_to_user+0x31/0xb0 [ 87.654778][ T6896] simple_read_from_buffer+0xca/0x150 [ 87.660154][ T6896] proc_fail_nth_read+0x1e9/0x250 [ 87.665183][ T6896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.670730][ T6896] ? rw_verify_area+0x55e/0x6f0 [ 87.675577][ T6896] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 87.681120][ T6896] vfs_read+0x1fc/0xb70 [ 87.685273][ T6896] ? fdget_pos+0x24e/0x320 [ 87.689681][ T6896] ? __pfx_vfs_read+0x10/0x10 [ 87.694359][ T6896] ? __fget_files+0x3f3/0x470 [ 87.699037][ T6896] ? fdget_pos+0x24e/0x320 [ 87.703447][ T6896] ksys_read+0x183/0x2b0 [ 87.707681][ T6896] ? __pfx_ksys_read+0x10/0x10 [ 87.712437][ T6896] ? do_syscall_64+0x100/0x230 [ 87.717194][ T6896] ? do_syscall_64+0xb6/0x230 [ 87.721866][ T6896] do_syscall_64+0xf3/0x230 [ 87.726363][ T6896] ? clear_bhb_loop+0x35/0x90 [ 87.731062][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.736965][ T6896] RIP: 0033:0x7fed0417d15c [ 87.741376][ T6896] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 87.760983][ T6896] RSP: 002b:00007fed0503d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 87.769422][ T6896] RAX: ffffffffffffffda RBX: 00007fed04335f80 RCX: 00007fed0417d15c [ 87.777390][ T6896] RDX: 000000000000000f RSI: 00007fed0503d0a0 RDI: 0000000000000004 [ 87.785354][ T6896] RBP: 00007fed0503d090 R08: 0000000000000000 R09: 0000000000000000 [ 87.793319][ T6896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 87.801283][ T6896] R13: 0000000000000000 R14: 00007fed04335f80 R15: 00007ffe3725aa28 [ 87.809260][ T6896] [ 88.319261][ T6925] batadv0: entered promiscuous mode [ 88.319363][ T6920] ebtables: ebtables: counters copy to user failed while replacing table [ 88.330732][ T6925] macvtap1: entered promiscuous mode [ 88.348593][ T6925] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 88.383124][ T6925] batadv0: left promiscuous mode [ 88.460267][ T6929] batadv0: entered promiscuous mode [ 88.479475][ T6929] macvtap1: entered promiscuous mode [ 88.491401][ T6929] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 88.515696][ T6929] batadv0: left promiscuous mode [ 88.556036][ T6939] netlink: 72 bytes leftover after parsing attributes in process `syz.3.376'. [ 88.702937][ T6931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.373'. [ 88.806649][ T6953] netlink: 'syz.2.382': attribute type 4 has an invalid length. [ 88.835562][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.380'. [ 88.836899][ T6953] netlink: 'syz.2.382': attribute type 4 has an invalid length. [ 88.860077][ T6950] netlink: 32 bytes leftover after parsing attributes in process `syz.4.380'. [ 89.048996][ T6965] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.098318][ T6970] netlink: 72 bytes leftover after parsing attributes in process `syz.1.389'. [ 89.121677][ T6972] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 89.216316][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.391'. [ 89.232798][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.240529][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.256396][ T6976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.267962][ T6976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.776722][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.404'. [ 89.853251][ T7020] netlink: 'syz.4.408': attribute type 4 has an invalid length. [ 89.919499][ T7031] netlink: 'syz.4.408': attribute type 4 has an invalid length. [ 89.938437][ T7011] infiniband syz1: set down [ 89.944284][ T7011] team0 (unregistering): Port device team_slave_0 removed [ 89.957663][ T7011] team0 (unregistering): Port device team_slave_1 removed [ 90.137392][ T7034] vlan2: entered promiscuous mode [ 90.144732][ T7034] team0: Device vlan2 is already an upper device of the team interface [ 90.323467][ T7050] syz1: rxe_newlink: already configured on team_slave_0 [ 90.323778][ T7052] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.420'. [ 90.345420][ T7052] netlink: 'syz.4.420': attribute type 4 has an invalid length. [ 90.364085][ T7048] netlink: 'syz.0.419': attribute type 11 has an invalid length. [ 90.380895][ T7048] netlink: 224 bytes leftover after parsing attributes in process `syz.0.419'. [ 90.592230][ T7062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.424'. [ 90.820468][ T7067] team_slave_0: entered promiscuous mode [ 90.826424][ T7067] team_slave_1: entered promiscuous mode [ 90.832325][ T7067] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 90.865206][ T7067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.946666][ T7076] lo speed is unknown, defaulting to 1000 [ 90.962381][ T7076] lo speed is unknown, defaulting to 1000 [ 90.969079][ T7059] delete_channel: no stack [ 90.989430][ T7076] lo speed is unknown, defaulting to 1000 [ 91.017601][ T7076] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.067476][ T7076] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 91.136143][ T7076] lo speed is unknown, defaulting to 1000 [ 91.160572][ T7076] lo speed is unknown, defaulting to 1000 [ 91.177652][ T7076] lo speed is unknown, defaulting to 1000 [ 91.197270][ T7076] lo speed is unknown, defaulting to 1000 [ 91.216949][ T7076] lo speed is unknown, defaulting to 1000 [ 91.540435][ T7108] dvmrp8: entered allmulticast mode [ 91.759943][ T7132] FAULT_INJECTION: forcing a failure. [ 91.759943][ T7132] name failslab, interval 1, probability 0, space 0, times 0 [ 91.804599][ T7132] CPU: 0 UID: 0 PID: 7132 Comm: syz.4.446 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 91.815225][ T7132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 91.816895][ T7125] Cannot find set identified by id 0 to match [ 91.825275][ T7132] Call Trace: [ 91.825312][ T7132] [ 91.825321][ T7132] dump_stack_lvl+0x241/0x360 [ 91.825350][ T7132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.825371][ T7132] ? __pfx__printk+0x10/0x10 [ 91.825393][ T7132] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 91.825417][ T7132] ? __pfx___might_resched+0x10/0x10 [ 91.825444][ T7132] should_fail_ex+0x3b0/0x4e0 [ 91.867544][ T7132] should_failslab+0xac/0x100 [ 91.870711][ T7125] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 91.872222][ T7132] ? sctp_stream_init_ext+0x56/0x180 [ 91.872247][ T7132] __kmalloc_cache_noprof+0x6c/0x2c0 [ 91.872277][ T7132] sctp_stream_init_ext+0x56/0x180 [ 91.872298][ T7132] sctp_sendmsg_to_asoc+0x12fd/0x1800 [ 91.872321][ T7132] ? sctp_v6_to_sk_saddr+0x101/0x1c0 [ 91.872349][ T7132] ? __asan_memcpy+0x40/0x70 [ 91.872368][ T7132] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 91.872402][ T7132] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 91.923176][ T7132] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 91.928636][ T7132] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 91.934443][ T7132] ? sctp_sendmsg+0xbb9/0x3520 [ 91.939203][ T7132] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 91.945001][ T7132] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 91.950541][ T7132] sctp_sendmsg+0x1bc3/0x3520 [ 91.955225][ T7132] ? __pfx_sctp_sendmsg+0x10/0x10 [ 91.960250][ T7132] ? __pfx_aa_sk_perm+0x10/0x10 [ 91.965102][ T7132] ? inet_sendmsg+0x330/0x390 [ 91.969777][ T7132] __sock_sendmsg+0x1a6/0x270 [ 91.974451][ T7132] ____sys_sendmsg+0x52a/0x7e0 [ 91.979221][ T7132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 91.984520][ T7132] __sys_sendmmsg+0x3ab/0x730 [ 91.989204][ T7132] ? __pfx___sys_sendmmsg+0x10/0x10 [ 91.994409][ T7132] ? __pfx_lock_release+0x10/0x10 [ 91.999447][ T7132] ? kstrtouint_from_user+0x128/0x190 [ 92.004839][ T7132] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 92.010728][ T7132] ? ksys_write+0x229/0x2b0 [ 92.015226][ T7132] ? __pfx_lock_release+0x10/0x10 [ 92.020250][ T7132] ? vfs_write+0x730/0xd30 [ 92.024667][ T7132] ? __mutex_unlock_slowpath+0x21d/0x750 [ 92.030299][ T7132] ? __fget_files+0x3f3/0x470 [ 92.034981][ T7132] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 92.040957][ T7132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 92.047282][ T7132] ? do_syscall_64+0x100/0x230 [ 92.052042][ T7132] __x64_sys_sendmmsg+0xa0/0xb0 [ 92.056902][ T7132] do_syscall_64+0xf3/0x230 [ 92.061406][ T7132] ? clear_bhb_loop+0x35/0x90 [ 92.066085][ T7132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.071973][ T7132] RIP: 0033:0x7ffb3ef7e719 [ 92.076383][ T7132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.095981][ T7132] RSP: 002b:00007ffb3fe40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 92.104391][ T7132] RAX: ffffffffffffffda RBX: 00007ffb3f135f80 RCX: 00007ffb3ef7e719 [ 92.112354][ T7132] RDX: 0000000000000001 RSI: 0000000020003a00 RDI: 0000000000000003 [ 92.120319][ T7132] RBP: 00007ffb3fe40090 R08: 0000000000000000 R09: 0000000000000000 [ 92.128279][ T7132] R10: 000000000000c0c0 R11: 0000000000000246 R12: 0000000000000002 [ 92.136242][ T7132] R13: 0000000000000000 R14: 00007ffb3f135f80 R15: 00007ffd3f60d238 [ 92.144217][ T7132] [ 92.176780][ T7125] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 92.241291][ T7135] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 92.251396][ T7135] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 92.302158][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 92.508265][ T7151] batadv0: entered promiscuous mode [ 92.528752][ T7151] macvtap1: entered promiscuous mode [ 92.545677][ T7151] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 92.564376][ T7151] batadv0: left promiscuous mode [ 92.573538][ T7150] ebtables: ebtables: counters copy to user failed while replacing table [ 93.044240][ T7196] SET target dimension over the limit! [ 93.165833][ T7208] smc: removing ib device syz1 [ 93.228314][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.306463][ T7211] tipc: Started in network mode [ 93.331581][ T7211] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 93.358391][ T7211] tipc: Enabled bearer , priority 9 [ 93.407859][ T7217] veth0_to_bridge: entered promiscuous mode [ 93.419223][ T7220] Â: renamed from pim6reg1 [ 93.554240][ T7230] netlink: 'syz.3.480': attribute type 2 has an invalid length. [ 93.615254][ T7216] veth0_to_bridge: left promiscuous mode [ 93.848892][ T7238] batadv0: entered promiscuous mode [ 93.854962][ T7238] macvtap1: entered promiscuous mode [ 93.861160][ T7238] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 94.042818][ T7238] batadv0: left promiscuous mode [ 94.131413][ T7259] __nla_validate_parse: 7 callbacks suppressed [ 94.131430][ T7259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.495'. [ 94.200209][ T7259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.495'. [ 94.419145][ T7266] Â: renamed from pim6reg1 [ 94.473237][ T6442] tipc: Node number set to 9480874 [ 94.642281][ T7281] netlink: 64 bytes leftover after parsing attributes in process `syz.1.504'. [ 94.729616][ T7287] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 94.789582][ T7292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.508'. [ 94.906092][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.511'. [ 94.915717][ T7298] netlink: 20 bytes leftover after parsing attributes in process `syz.0.511'. [ 94.930362][ T7298] team_slave_1: entered promiscuous mode [ 94.937832][ T7298] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.995835][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.513'. [ 95.379913][ T7318] ebtables: ebtables: counters copy to user failed while replacing table [ 95.459926][ T7333] netlink: 452 bytes leftover after parsing attributes in process `syz.0.521'. [ 95.704135][ T7345] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 95.743727][ T7342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 95.800328][ T7338] infiniband syz1: set active [ 95.812354][ T7338] infiniband syz1: added team_slave_0 [ 95.921040][ T7338] RDS/IB: syz1: added [ 95.932326][ T7338] smc: adding ib device syz1 with port count 1 [ 95.938697][ T7338] smc: ib device syz1 port 1 has pnetid [ 95.976933][ T7356] netlink: 88 bytes leftover after parsing attributes in process `syz.3.529'. [ 96.229490][ T7370] xt_l2tp: v2 doesn't support IP mode [ 96.249992][ T7373] xt_l2tp: v2 doesn't support IP mode [ 96.275897][ T7367] ebtables: ebtables: counters copy to user failed while replacing table [ 96.341606][ T7377] dccp_invalid_packet: pskb_may_pull failed [ 96.382263][ T7379] dccp_invalid_packet: pskb_may_pull failed [ 96.652689][ T7395] netlink: 'syz.2.541': attribute type 4 has an invalid length. [ 96.688228][ T5848] lo speed is unknown, defaulting to 1000 [ 96.696963][ T7395] netlink: 'syz.2.541': attribute type 4 has an invalid length. [ 96.724493][ T7399] netlink: 'syz.1.544': attribute type 58 has an invalid length. [ 96.803324][ T6442] lo speed is unknown, defaulting to 1000 [ 97.287755][ T7419] netlink: 'syz.2.549': attribute type 4 has an invalid length. [ 97.338144][ T7420] netlink: 'syz.2.549': attribute type 4 has an invalid length. [ 98.376586][ T5893] lo speed is unknown, defaulting to 1000 [ 98.462843][ T5848] lo speed is unknown, defaulting to 1000 [ 98.648841][ T7447] vlan2: entered promiscuous mode [ 98.668848][ T7447] team0: Device vlan2 is already an upper device of the team interface [ 98.963707][ T7471] xt_l2tp: v2 doesn't support IP mode [ 98.979418][ T7459] xt_l2tp: v2 doesn't support IP mode [ 99.321067][ T7493] netlink: 'syz.0.577': attribute type 10 has an invalid length. [ 99.353098][ T7493] team0: Device 1 failed to register rx_handler [ 99.471410][ T7502] __nla_validate_parse: 7 callbacks suppressed [ 99.471428][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 99.604117][ T7506] batadv0: entered promiscuous mode [ 99.609464][ T7506] macvtap1: entered promiscuous mode [ 99.637813][ T7506] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 99.693089][ T7506] batadv0: left promiscuous mode [ 99.716199][ T7518] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 99.837331][ T7525] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.846823][ T7525] bond1: (slave batadv1): making interface the new active one [ 99.856091][ T7525] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 100.027137][ T7541] FAULT_INJECTION: forcing a failure. [ 100.027137][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.055036][ T7540] netlink: 'syz.1.596': attribute type 4 has an invalid length. [ 100.060756][ T7541] CPU: 0 UID: 0 PID: 7541 Comm: syz.3.597 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 100.073268][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 100.083335][ T7541] Call Trace: [ 100.086630][ T7541] [ 100.089572][ T7541] dump_stack_lvl+0x241/0x360 [ 100.094295][ T7541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.099506][ T7541] ? __pfx__printk+0x10/0x10 [ 100.104107][ T7541] ? __pfx_lock_release+0x10/0x10 [ 100.109168][ T7541] should_fail_ex+0x3b0/0x4e0 [ 100.113877][ T7541] _copy_from_user+0x2f/0xc0 [ 100.118493][ T7541] copy_msghdr_from_user+0xae/0x680 [ 100.123713][ T7541] ? __lock_acquire+0x1384/0x2050 [ 100.128772][ T7541] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 100.134653][ T7541] do_recvmmsg+0x3f9/0xad0 [ 100.139100][ T7541] ? __pfx_do_recvmmsg+0x10/0x10 [ 100.144080][ T7541] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 100.149994][ T7541] ? ksys_write+0x229/0x2b0 [ 100.154518][ T7541] ? __pfx_lock_release+0x10/0x10 [ 100.159922][ T7541] ? vfs_write+0x730/0xd30 [ 100.164374][ T7541] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 100.170394][ T7541] __x64_sys_recvmmsg+0x199/0x250 [ 100.175441][ T7541] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 100.181007][ T7541] ? do_syscall_64+0x100/0x230 [ 100.185794][ T7541] ? do_syscall_64+0xb6/0x230 [ 100.190497][ T7541] do_syscall_64+0xf3/0x230 [ 100.195023][ T7541] ? clear_bhb_loop+0x35/0x90 [ 100.199722][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.205635][ T7541] RIP: 0033:0x7ff988f7e719 [ 100.210067][ T7541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.229688][ T7541] RSP: 002b:00007ff989d9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 100.238124][ T7541] RAX: ffffffffffffffda RBX: 00007ff989135f80 RCX: 00007ff988f7e719 [ 100.246114][ T7541] RDX: 0000000000000493 RSI: 0000000020004d80 RDI: 0000000000000004 [ 100.254101][ T7541] RBP: 00007ff989d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 100.262090][ T7541] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 100.270080][ T7541] R13: 0000000000000000 R14: 00007ff989135f80 R15: 00007fff3d570e78 [ 100.278084][ T7541] [ 100.288132][ T7546] netlink: 'syz.1.596': attribute type 4 has an invalid length. [ 100.403195][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.603'. [ 100.433242][ T7555] bridge_slave_1: left allmulticast mode [ 100.438916][ T7555] bridge_slave_1: left promiscuous mode [ 100.455798][ T7563] netlink: 72 bytes leftover after parsing attributes in process `syz.3.607'. [ 100.466495][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.489197][ T7555] bridge_slave_0: left allmulticast mode [ 100.495146][ T7555] bridge_slave_0: left promiscuous mode [ 100.500961][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.706557][ T7570] ebtables: ebtables: counters copy to user failed while replacing table [ 100.880836][ T7588] netlink: 'syz.1.612': attribute type 2 has an invalid length. [ 100.892562][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.618'. [ 100.905903][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.617'. [ 100.919152][ T7590] netlink: 64 bytes leftover after parsing attributes in process `syz.3.618'. [ 101.303770][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.628'. [ 101.324471][ T7616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.628'. [ 101.335885][ T7618] lo speed is unknown, defaulting to 1000 [ 101.347286][ T7612] ebtables: ebtables: counters copy to user failed while replacing table [ 101.359136][ T7616] team_slave_0: entered promiscuous mode [ 101.364910][ T7616] team_slave_1: entered promiscuous mode [ 101.395674][ T7616] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 102.411596][ T7618] Cannot find del_set index 3 as target [ 102.445596][ T7686] vlan2: entered allmulticast mode [ 102.471335][ T7684] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.919346][ T7710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.666'. [ 102.954456][ T7712] netlink: 36 bytes leftover after parsing attributes in process `syz.0.667'. [ 102.986338][ T7712] x_tables: duplicate underflow at hook 1 [ 103.101637][ T7716] batadv0: entered promiscuous mode [ 103.129385][ T7716] macvtap1: entered promiscuous mode [ 103.146767][ T7716] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 103.180127][ T7716] batadv0: left promiscuous mode [ 103.517601][ T7734] ebtables: ebtables: counters copy to user failed while replacing table [ 104.239161][ T7781] ebtables: ebtables: counters copy to user failed while replacing table [ 104.355720][ T7797] netlink: 'syz.3.699': attribute type 4 has an invalid length. [ 104.395384][ T7797] netlink: 'syz.3.699': attribute type 4 has an invalid length. [ 104.677523][ T7818] __nla_validate_parse: 6 callbacks suppressed [ 104.677542][ T7818] netlink: 88 bytes leftover after parsing attributes in process `syz.4.709'. [ 104.820990][ T7830] vlan2: entered promiscuous mode [ 104.831975][ T7830] team0: Device vlan2 is already an upper device of the team interface [ 104.888073][ T7833] netlink: 28 bytes leftover after parsing attributes in process `syz.0.713'. [ 105.091526][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.717'. [ 105.174041][ T7841] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 105.185812][ T7841] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 105.199339][ T7848] netlink: 72 bytes leftover after parsing attributes in process `syz.0.720'. [ 105.250962][ T7852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.723'. [ 105.368504][ T7852] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 105.456267][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 105.555242][ T7868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.727'. [ 105.722691][ T7877] Â: renamed from pim6reg1 [ 105.833781][ T7890] FAULT_INJECTION: forcing a failure. [ 105.833781][ T7890] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.834669][ T7882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.737'. [ 105.855615][ T7890] CPU: 0 UID: 0 PID: 7890 Comm: syz.0.738 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 105.856943][ T7884] netlink: 28 bytes leftover after parsing attributes in process `syz.2.735'. [ 105.866300][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 105.866316][ T7890] Call Trace: [ 105.866324][ T7890] [ 105.866332][ T7890] dump_stack_lvl+0x241/0x360 [ 105.866361][ T7890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.866383][ T7890] ? __pfx__printk+0x10/0x10 [ 105.880960][ T7882] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 105.885252][ T7890] ? snprintf+0xda/0x120 [ 105.885290][ T7890] should_fail_ex+0x3b0/0x4e0 [ 105.885316][ T7890] _copy_to_user+0x31/0xb0 [ 105.885337][ T7890] simple_read_from_buffer+0xca/0x150 [ 105.885368][ T7890] proc_fail_nth_read+0x1e9/0x250 [ 105.885389][ T7890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.885420][ T7890] ? rw_verify_area+0x55e/0x6f0 [ 105.885446][ T7890] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 105.885473][ T7890] vfs_read+0x1fc/0xb70 [ 105.885495][ T7890] ? fdget_pos+0x24e/0x320 [ 105.885517][ T7890] ? __pfx_vfs_read+0x10/0x10 [ 105.885547][ T7890] ? __fget_files+0x3f3/0x470 [ 105.885575][ T7890] ? fdget_pos+0x24e/0x320 [ 105.885598][ T7890] ksys_read+0x183/0x2b0 [ 105.979376][ T7890] ? __pfx_ksys_read+0x10/0x10 [ 105.984166][ T7890] ? do_syscall_64+0x100/0x230 [ 105.988960][ T7890] ? do_syscall_64+0xb6/0x230 [ 105.993664][ T7890] do_syscall_64+0xf3/0x230 [ 105.998192][ T7890] ? clear_bhb_loop+0x35/0x90 [ 106.002905][ T7890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.008820][ T7890] RIP: 0033:0x7fed0417d15c [ 106.013260][ T7890] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 106.032888][ T7890] RSP: 002b:00007fed0503d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 106.041333][ T7890] RAX: ffffffffffffffda RBX: 00007fed04335f80 RCX: 00007fed0417d15c [ 106.046087][ T7896] netlink: 'syz.2.739': attribute type 9 has an invalid length. [ 106.049310][ T7890] RDX: 000000000000000f RSI: 00007fed0503d0a0 RDI: 0000000000000003 [ 106.049328][ T7890] RBP: 00007fed0503d090 R08: 0000000000000000 R09: 0000000000000000 [ 106.049341][ T7890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.049353][ T7890] R13: 0000000000000001 R14: 00007fed04335f80 R15: 00007ffe3725aa28 [ 106.049380][ T7890] [ 106.058473][ T7896] netlink: 'syz.2.739': attribute type 7 has an invalid length. [ 106.102491][ T7896] netlink: 'syz.2.739': attribute type 8 has an invalid length. [ 106.187346][ T7901] netlink: 56 bytes leftover after parsing attributes in process `syz.2.742'. [ 106.888538][ T7954] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 106.919869][ T7954] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 107.041687][ T7962] lo speed is unknown, defaulting to 1000 [ 107.085742][ T7964] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.158570][ T7967] lo speed is unknown, defaulting to 1000 [ 107.613428][ T7969] Cannot find del_set index 3 as target [ 107.952553][ T7962] Cannot find del_set index 3 as target [ 108.103972][ T8009] netlink: zone id is out of range [ 108.179223][ T8009] netlink: get zone limit has 4 unknown bytes [ 108.628566][ T8042] netlink: 'syz.4.793': attribute type 6 has an invalid length. [ 108.918644][ T8051] lo speed is unknown, defaulting to 1000 [ 109.214497][ T8070] lo speed is unknown, defaulting to 1000 [ 109.521675][ T8082] netlink: zone id is out of range [ 109.659899][ T8051] Cannot find del_set index 3 as target [ 109.705219][ T8092] sctp: [Deprecated]: syz.4.812 (pid 8092) Use of struct sctp_assoc_value in delayed_ack socket option. [ 109.705219][ T8092] Use struct sctp_sack_info instead [ 109.709150][ T8072] __nla_validate_parse: 14 callbacks suppressed [ 109.709165][ T8072] netlink: 88 bytes leftover after parsing attributes in process `syz.0.804'. [ 109.878101][ T8094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.813'. [ 110.095024][ T8105] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 110.449604][ T8118] netlink: 32 bytes leftover after parsing attributes in process `syz.1.824'. [ 110.598843][ T8130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.829'. [ 110.645798][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.3.829'. [ 110.672350][ T8130] netlink: 92 bytes leftover after parsing attributes in process `syz.3.829'. [ 110.707813][ T8128] ebtables: ebtables: counters copy to user failed while replacing table [ 110.827306][ T8139] netlink: 72 bytes leftover after parsing attributes in process `syz.3.832'. [ 111.125785][ T8163] FAULT_INJECTION: forcing a failure. [ 111.125785][ T8163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.146765][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 111.148635][ T8163] CPU: 1 UID: 0 PID: 8163 Comm: syz.0.842 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 111.166136][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 111.176207][ T8163] Call Trace: [ 111.179512][ T8163] [ 111.182459][ T8163] dump_stack_lvl+0x241/0x360 [ 111.187168][ T8163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.192394][ T8163] ? __pfx__printk+0x10/0x10 [ 111.197016][ T8163] ? snprintf+0xda/0x120 [ 111.201286][ T8163] should_fail_ex+0x3b0/0x4e0 [ 111.206002][ T8163] _copy_to_user+0x31/0xb0 [ 111.210439][ T8163] simple_read_from_buffer+0xca/0x150 [ 111.215843][ T8163] proc_fail_nth_read+0x1e9/0x250 [ 111.220891][ T8163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.226472][ T8163] ? rw_verify_area+0x55e/0x6f0 [ 111.231348][ T8163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.236922][ T8163] vfs_read+0x1fc/0xb70 [ 111.241102][ T8163] ? fdget_pos+0x24e/0x320 [ 111.245546][ T8163] ? __pfx_vfs_read+0x10/0x10 [ 111.250257][ T8163] ? __fget_files+0x3f3/0x470 [ 111.254962][ T8163] ? fdget_pos+0x24e/0x320 [ 111.259405][ T8163] ksys_read+0x183/0x2b0 [ 111.263669][ T8163] ? __pfx_ksys_read+0x10/0x10 [ 111.268458][ T8163] ? do_syscall_64+0x100/0x230 [ 111.273250][ T8163] ? do_syscall_64+0xb6/0x230 [ 111.277947][ T8163] do_syscall_64+0xf3/0x230 [ 111.282469][ T8163] ? clear_bhb_loop+0x35/0x90 [ 111.287178][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.293094][ T8163] RIP: 0033:0x7fed0417d15c [ 111.297527][ T8163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 111.317146][ T8163] RSP: 002b:00007fed0503d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.317695][ T8174] Â: renamed from pim6reg1 [ 111.325567][ T8163] RAX: ffffffffffffffda RBX: 00007fed04335f80 RCX: 00007fed0417d15c [ 111.325586][ T8163] RDX: 000000000000000f RSI: 00007fed0503d0a0 RDI: 0000000000000004 [ 111.325599][ T8163] RBP: 00007fed0503d090 R08: 0000000000000000 R09: 0000000000000000 [ 111.325612][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.325624][ T8163] R13: 0000000000000000 R14: 00007fed04335f80 R15: 00007ffe3725aa28 [ 111.325651][ T8163] [ 111.433579][ T8175] batadv0: entered promiscuous mode [ 111.439307][ T8175] macvtap1: entered promiscuous mode [ 111.450512][ T8175] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 111.473799][ T8175] batadv0: left promiscuous mode [ 111.686658][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.851'. [ 111.867672][ T8204] netlink: 'syz.1.858': attribute type 3 has an invalid length. [ 111.886414][ T8204] netlink: 'syz.1.858': attribute type 3 has an invalid length. [ 112.261894][ T8231] netlink: 288 bytes leftover after parsing attributes in process `syz.3.867'. [ 112.435463][ T8243] batadv0: entered promiscuous mode [ 112.441035][ T8243] macvtap1: entered promiscuous mode [ 112.453169][ T8243] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 112.468089][ T8243] batadv0: left promiscuous mode [ 112.579716][ T8251] ax25_connect(): syz.2.878 uses autobind, please contact jreuter@yaina.de [ 112.730422][ T8263] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 113.116971][ T8289] Â: renamed from pim6reg1 [ 113.595409][ T8321] lo speed is unknown, defaulting to 1000 [ 113.820399][ T8338] batadv0: entered promiscuous mode [ 113.826139][ T8338] macvtap1: entered promiscuous mode [ 113.854622][ T8338] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 113.889425][ T8338] batadv0: left promiscuous mode [ 114.110083][ T8352] netlink: 'syz.0.916': attribute type 21 has an invalid length. [ 114.121251][ T8352] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.146627][ T8352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 114.153949][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 114.161196][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 114.168453][ T8352] IPv6: NLM_F_CREATE should be set when creating new route [ 114.261305][ T8358] lo speed is unknown, defaulting to 1000 [ 114.854146][ T8385] __nla_validate_parse: 6 callbacks suppressed [ 114.854165][ T8385] netlink: 16 bytes leftover after parsing attributes in process `syz.2.928'. [ 114.888801][ T8385] netlink: 'syz.2.928': attribute type 10 has an invalid length. [ 115.026464][ T3435] wlan1: Trigger new scan to find an IBSS to join [ 115.148886][ T8410] netlink: 32 bytes leftover after parsing attributes in process `syz.1.934'. [ 115.305787][ T8417] netlink: 72 bytes leftover after parsing attributes in process `syz.2.938'. [ 115.829131][ T8451] netdevsim netdevsim1: Direct firmware load for  failed with error -2 [ 115.891747][ T8451] netdevsim netdevsim1: Falling back to sysfs fallback for:  [ 115.896987][ T8457] netlink: 36 bytes leftover after parsing attributes in process `syz.1.953'. [ 116.100025][ T8466] netlink: 'syz.4.957': attribute type 6 has an invalid length. [ 116.112418][ T8466] netlink: 'syz.4.957': attribute type 7 has an invalid length. [ 116.129469][ T8466] netlink: 'syz.4.957': attribute type 8 has an invalid length. [ 116.144832][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.957'. [ 116.519501][ T8475] netlink: 'syz.4.960': attribute type 10 has an invalid length. [ 116.551284][ T8475] team0: Port device wlan1 added [ 116.735525][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.964'. [ 116.755887][ T8479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 117.115537][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.970'. [ 117.176386][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 117.255689][ T8514] vlan2: entered allmulticast mode [ 117.279581][ T8514] hsr0: entered allmulticast mode [ 117.296083][ T8514] hsr_slave_0: entered allmulticast mode [ 117.313887][ T8514] hsr_slave_1: entered allmulticast mode [ 117.344465][ T8514] hsr0: left allmulticast mode [ 117.349269][ T8514] hsr_slave_0: left allmulticast mode [ 117.372539][ T8514] hsr_slave_1: left allmulticast mode [ 117.445032][ T8505] netlink: 'syz.1.968': attribute type 1 has an invalid length. [ 117.606499][ T8538] FAULT_INJECTION: forcing a failure. [ 117.606499][ T8538] name failslab, interval 1, probability 0, space 0, times 0 [ 117.622566][ T8538] CPU: 1 UID: 0 PID: 8538 Comm: syz.0.976 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 117.627575][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 117.633169][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 117.633194][ T8538] Call Trace: [ 117.633203][ T8538] [ 117.633212][ T8538] dump_stack_lvl+0x241/0x360 [ 117.633240][ T8538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.633261][ T8538] ? __pfx__printk+0x10/0x10 [ 117.633283][ T8538] ? fs_reclaim_acquire+0x93/0x130 [ 117.633302][ T8538] ? __pfx___might_resched+0x10/0x10 [ 117.633324][ T8538] ? dynamic_dname+0x141/0x1b0 [ 117.687947][ T8538] should_fail_ex+0x3b0/0x4e0 [ 117.692652][ T8538] ? tomoyo_encode+0x26f/0x540 [ 117.697439][ T8538] should_failslab+0xac/0x100 [ 117.702136][ T8538] ? tomoyo_encode+0x26f/0x540 [ 117.706897][ T8538] __kmalloc_noprof+0xd8/0x400 [ 117.711653][ T8538] tomoyo_encode+0x26f/0x540 [ 117.716245][ T8538] ? __pfx_sockfs_dname+0x10/0x10 [ 117.721288][ T8538] tomoyo_realpath_from_path+0x59e/0x5e0 [ 117.726953][ T8538] tomoyo_path_number_perm+0x23a/0x880 [ 117.732437][ T8538] ? tomoyo_path_number_perm+0x208/0x880 [ 117.738092][ T8538] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.744145][ T8538] ? __fget_files+0x29/0x470 [ 117.748761][ T8538] ? __fget_files+0x3f3/0x470 [ 117.753472][ T8538] security_file_ioctl+0xc6/0x2a0 [ 117.758523][ T8538] __se_sys_ioctl+0x47/0x170 [ 117.763142][ T8538] do_syscall_64+0xf3/0x230 [ 117.767670][ T8538] ? clear_bhb_loop+0x35/0x90 [ 117.772378][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.778294][ T8538] RIP: 0033:0x7fed0417e719 [ 117.782730][ T8538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.802352][ T8538] RSP: 002b:00007fed0503d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.810801][ T8538] RAX: ffffffffffffffda RBX: 00007fed04335f80 RCX: 00007fed0417e719 [ 117.818790][ T8538] RDX: 0000000020000580 RSI: 000000000000541b RDI: 0000000000000003 [ 117.826781][ T8538] RBP: 00007fed0503d090 R08: 0000000000000000 R09: 0000000000000000 [ 117.834769][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.839331][ T8545] netlink: 'syz.4.977': attribute type 9 has an invalid length. [ 117.842739][ T8538] R13: 0000000000000000 R14: 00007fed04335f80 R15: 00007ffe3725aa28 [ 117.842774][ T8538] [ 117.879365][ T8538] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.982810][ T12] wlan1: Trigger new scan to find an IBSS to join [ 117.991908][ T8551] netlink: 'syz.4.978': attribute type 10 has an invalid length. [ 118.001345][ T8551] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 118.030521][ T8554] FAULT_INJECTION: forcing a failure. [ 118.030521][ T8554] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.054994][ T8554] CPU: 0 UID: 0 PID: 8554 Comm: syz.0.980 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 118.065616][ T8554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 118.075685][ T8554] Call Trace: [ 118.078980][ T8554] [ 118.081927][ T8554] dump_stack_lvl+0x241/0x360 [ 118.086625][ T8554] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.091815][ T8554] ? __pfx__printk+0x10/0x10 [ 118.096412][ T8554] ? __pfx_lock_release+0x10/0x10 [ 118.101464][ T8554] should_fail_ex+0x3b0/0x4e0 [ 118.106147][ T8554] _copy_from_user+0x2f/0xc0 [ 118.110743][ T8554] copy_msghdr_from_user+0xae/0x680 [ 118.115943][ T8554] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 118.121755][ T8554] __sys_sendmsg+0x22d/0x380 [ 118.126348][ T8554] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.131463][ T8554] ? __pfx_vfs_write+0x10/0x10 [ 118.136238][ T8554] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.142570][ T8554] ? do_syscall_64+0x100/0x230 [ 118.147334][ T8554] ? do_syscall_64+0xb6/0x230 [ 118.152006][ T8554] do_syscall_64+0xf3/0x230 [ 118.156506][ T8554] ? clear_bhb_loop+0x35/0x90 [ 118.161180][ T8554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.167067][ T8554] RIP: 0033:0x7fed0417e719 [ 118.171495][ T8554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.191106][ T8554] RSP: 002b:00007fed0503d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.199528][ T8554] RAX: ffffffffffffffda RBX: 00007fed04335f80 RCX: 00007fed0417e719 [ 118.207500][ T8554] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 118.215464][ T8554] RBP: 00007fed0503d090 R08: 0000000000000000 R09: 0000000000000000 [ 118.223431][ T8554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.231394][ T8554] R13: 0000000000000000 R14: 00007fed04335f80 R15: 00007ffe3725aa28 [ 118.239370][ T8554] [ 118.858810][ T8598] sctp: [Deprecated]: syz.4.994 (pid 8598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.858810][ T8598] Use struct sctp_sack_info instead [ 118.859670][ T8600] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 118.896761][ T8598] sctp: [Deprecated]: syz.4.994 (pid 8598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 118.896761][ T8598] Use struct sctp_sack_info instead [ 118.900597][ T8596] hsr0: entered promiscuous mode [ 118.958757][ T8596] bond0: (slave macsec1): Enslaving as an active interface with an up link [ 119.067991][ T29] audit: type=1107 audit(1731702480.140:2): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 119.477873][ T8637] erspan0: entered promiscuous mode [ 119.592920][ T8637] macsec1: entered promiscuous mode [ 119.598259][ T8637] macsec1: entered allmulticast mode [ 119.616944][ T8637] erspan0: entered allmulticast mode [ 119.658501][ T8637] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 120.304975][ T8704] FAULT_INJECTION: forcing a failure. [ 120.304975][ T8704] name failslab, interval 1, probability 0, space 0, times 0 [ 120.320645][ T8704] CPU: 1 UID: 0 PID: 8704 Comm: syz.0.1035 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 120.331412][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 120.341470][ T8704] Call Trace: [ 120.344752][ T8704] [ 120.347680][ T8704] dump_stack_lvl+0x241/0x360 [ 120.352351][ T8704] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.357547][ T8704] ? __pfx__printk+0x10/0x10 [ 120.362129][ T8704] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 120.367675][ T8704] ? __pfx___might_resched+0x10/0x10 [ 120.372969][ T8704] should_fail_ex+0x3b0/0x4e0 [ 120.377660][ T8704] ? __pmd_alloc+0x10b/0x670 [ 120.382258][ T8704] should_failslab+0xac/0x100 [ 120.386933][ T8704] ? __pmd_alloc+0x10b/0x670 [ 120.391518][ T8704] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 120.396891][ T8704] __pmd_alloc+0x10b/0x670 [ 120.401306][ T8704] ? __pfx___pmd_alloc+0x10/0x10 [ 120.406254][ T8704] handle_mm_fault+0xf76/0x1bb0 [ 120.411101][ T8704] ? mt_find+0x2a9/0x920 [ 120.415353][ T8704] ? __pfx_handle_mm_fault+0x10/0x10 [ 120.420651][ T8704] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.426983][ T8704] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 120.432269][ T8704] exc_page_fault+0x2b9/0x8c0 [ 120.436946][ T8704] asm_exc_page_fault+0x26/0x30 [ 120.441790][ T8704] RIP: 0010:__put_user_4+0x11/0x20 [ 120.446894][ T8704] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 120.466492][ T8704] RSP: 0018:ffffc900037cf418 EFLAGS: 00050202 [ 120.472555][ T8704] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000020000580 [ 120.480532][ T8704] RDX: 0000000000000000 RSI: ffffffff8c0adc40 RDI: ffffffff8c610de0 [ 120.488500][ T8704] RBP: ffffc900037cf590 R08: ffffffff901d69af R09: 1ffffffff203ad35 [ 120.496465][ T8704] R10: dffffc0000000000 R11: fffffbfff203ad36 R12: ffffc900037cf460 [ 120.504428][ T8704] R13: 1ffff920006f9e8c R14: dffffc0000000000 R15: 1ffff920006f9e88 [ 120.512434][ T8704] sk_ioctl+0x369/0x680 [ 120.516592][ T8704] ? __pfx_sk_ioctl+0x10/0x10 [ 120.521274][ T8704] ? __lock_acquire+0x1384/0x2050 [ 120.526313][ T8704] inet_ioctl+0x42f/0x4f0 [ 120.530647][ T8704] ? __pfx_inet_ioctl+0x10/0x10 [ 120.535500][ T8704] ? is_bpf_text_address+0x26/0x2a0 [ 120.540707][ T8704] ? preempt_count_add+0x93/0x190 [ 120.545732][ T8704] ? 0xffffffffa0003b40 [ 120.549877][ T8704] ? 0xffffffffa0003b40 [ 120.554027][ T8704] sock_do_ioctl+0x158/0x460 [ 120.558616][ T8704] ? kernel_text_address+0xa7/0xe0 [ 120.563726][ T8704] ? __pfx_sock_do_ioctl+0x10/0x10 [ 120.568829][ T8704] ? arch_stack_walk+0xfd/0x150 [ 120.573687][ T8704] ? stack_trace_save+0x118/0x1d0 [ 120.578710][ T8704] sock_ioctl+0x626/0x8e0 [ 120.583034][ T8704] ? __pfx_sock_ioctl+0x10/0x10 [ 120.587873][ T8704] ? stack_depot_save_flags+0x29/0x830 [ 120.593332][ T8704] ? kasan_save_track+0x51/0x80 [ 120.598177][ T8704] ? kasan_save_track+0x3f/0x80 [ 120.603107][ T8704] ? kasan_save_free_info+0x40/0x50 [ 120.608300][ T8704] ? __kasan_slab_free+0x59/0x70 [ 120.613228][ T8704] ? kfree+0x1a0/0x440 [ 120.617291][ T8704] ? security_file_ioctl+0xc6/0x2a0 [ 120.622482][ T8704] ? __se_sys_ioctl+0x47/0x170 [ 120.627238][ T8704] ? do_syscall_64+0xf3/0x230 [ 120.631910][ T8704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.637971][ T8704] ? __pfx_sock_ioctl+0x10/0x10 [ 120.642818][ T8704] do_vfs_ioctl+0xec8/0x2e40 [ 120.647406][ T8704] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 120.652425][ T8704] ? mark_lock+0x9a/0x360 [ 120.656763][ T8704] ? tomoyo_path_number_perm+0x208/0x880 [ 120.662390][ T8704] ? __pfx_lock_release+0x10/0x10 [ 120.667433][ T8704] ? lockdep_hardirqs_on+0x99/0x150 [ 120.672647][ T8704] ? kfree+0x1a0/0x440 [ 120.676715][ T8704] ? tomoyo_path_number_perm+0x68d/0x880 [ 120.682348][ T8704] ? tomoyo_path_number_perm+0x71a/0x880 [ 120.687985][ T8704] ? tomoyo_path_number_perm+0x208/0x880 [ 120.693616][ T8704] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 120.699626][ T8704] ? __fget_files+0x29/0x470 [ 120.704214][ T8704] ? __fget_files+0x3f3/0x470 [ 120.708898][ T8704] __se_sys_ioctl+0x81/0x170 [ 120.713487][ T8704] do_syscall_64+0xf3/0x230 [ 120.717989][ T8704] ? clear_bhb_loop+0x35/0x90 [ 120.722666][ T8704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.728558][ T8704] RIP: 0033:0x7fed0417e719 [ 120.733035][ T8704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.752638][ T8704] RSP: 002b:00007fed0503d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 120.761048][ T8704] RAX: ffffffffffffffda RBX: 00007fed04335f80 RCX: 00007fed0417e719 [ 120.769015][ T8704] RDX: 0000000020000580 RSI: 000000000000541b RDI: 0000000000000003 [ 120.776983][ T8704] RBP: 00007fed0503d090 R08: 0000000000000000 R09: 0000000000000000 [ 120.784949][ T8704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.792914][ T8704] R13: 0000000000000000 R14: 00007fed04335f80 R15: 00007ffe3725aa28 [ 120.800916][ T8704] [ 120.942535][ T12] wlan1: Creating new IBSS network, BSSID 8a:61:01:dd:74:ce [ 120.981086][ T8707] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.037808][ T8711] __nla_validate_parse: 6 callbacks suppressed [ 121.037825][ T8711] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1038'. [ 121.056842][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1042'. [ 121.069304][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1042'. [ 121.149016][ T8724] FAULT_INJECTION: forcing a failure. [ 121.149016][ T8724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.166251][ T8707] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.185895][ T8724] CPU: 0 UID: 0 PID: 8724 Comm: syz.0.1044 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 121.196605][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 121.206679][ T8724] Call Trace: [ 121.209967][ T8724] [ 121.212905][ T8724] dump_stack_lvl+0x241/0x360 [ 121.217601][ T8724] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.222793][ T8724] ? __pfx__printk+0x10/0x10 [ 121.227377][ T8724] ? __pfx_lock_release+0x10/0x10 [ 121.232399][ T8724] should_fail_ex+0x3b0/0x4e0 [ 121.237085][ T8724] _copy_from_user+0x2f/0xc0 [ 121.241670][ T8724] copy_msghdr_from_user+0xae/0x680 [ 121.246868][ T8724] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 121.252697][ T8724] __sys_sendmmsg+0x36d/0x730 [ 121.257394][ T8724] ? __pfx___sys_sendmmsg+0x10/0x10 [ 121.262607][ T8724] ? __pfx_lock_release+0x10/0x10 [ 121.267637][ T8724] ? kstrtouint_from_user+0x128/0x190 [ 121.273012][ T8724] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 121.278893][ T8724] ? ksys_write+0x229/0x2b0 [ 121.283387][ T8724] ? __pfx_lock_release+0x10/0x10 [ 121.288418][ T8724] ? vfs_write+0x730/0xd30 [ 121.292841][ T8724] ? __mutex_unlock_slowpath+0x21d/0x750 [ 121.298509][ T8724] ? __fget_files+0x3f3/0x470 [ 121.303188][ T8724] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.309160][ T8724] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.315483][ T8724] ? do_syscall_64+0x100/0x230 [ 121.320247][ T8724] __x64_sys_sendmmsg+0xa0/0xb0 [ 121.325096][ T8724] do_syscall_64+0xf3/0x230 [ 121.329619][ T8724] ? clear_bhb_loop+0x35/0x90 [ 121.334291][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.340181][ T8724] RIP: 0033:0x7fed0417e719 [ 121.344600][ T8724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.364228][ T8724] RSP: 002b:00007fed0503d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.372650][ T8724] RAX: ffffffffffffffda RBX: 00007fed04335f80 RCX: 00007fed0417e719 [ 121.380614][ T8724] RDX: 0000000000000001 RSI: 0000000020000f00 RDI: 0000000000000003 [ 121.388600][ T8724] RBP: 00007fed0503d090 R08: 0000000000000000 R09: 0000000000000000 [ 121.396569][ T8724] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 121.404534][ T8724] R13: 0000000000000000 R14: 00007fed04335f80 R15: 00007ffe3725aa28 [ 121.412519][ T8724] [ 121.508021][ T8707] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.577839][ T8737] xt_hashlimit: invalid interval [ 121.596463][ T8707] bond0: (slave netdevsim0): Releasing backup interface [ 121.625442][ T8707] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.650470][ T8737] netlink: 'syz.1.1048': attribute type 23 has an invalid length. [ 121.677102][ T8737] netlink: 'syz.1.1048': attribute type 11 has an invalid length. [ 121.711416][ T8737] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1048'. [ 121.829263][ T8707] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.857816][ T8707] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.870466][ T8746] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1050'. [ 121.878258][ T8707] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.890887][ T8746] netlink: 'syz.1.1050': attribute type 3 has an invalid length. [ 121.901311][ T8707] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.010717][ T8755] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1053'. [ 122.022026][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1052'. [ 122.114554][ T8764] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 122.153175][ T8767] raw_sendmsg: syz.1.1054 forgot to set AF_INET. Fix it! [ 122.280059][ T8776] netlink: set zone limit has 4 unknown bytes [ 122.408754][ T8779] ebtables: ebtables: counters copy to user failed while replacing table [ 122.987790][ T8787] netlink: 'syz.1.1066': attribute type 10 has an invalid length. [ 123.002413][ T8787] openvswitch: netlink: Flow key attr not present in new flow. [ 123.052251][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1069'. [ 123.205470][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.214015][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.221830][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.229845][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.237529][ T5847] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.249804][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 123.277874][ T8797] lo speed is unknown, defaulting to 1000 [ 123.290541][ T8801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 123.455837][ T8807] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1076'. [ 123.556346][ T8820] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 123.570663][ T8810] ebtables: ebtables: counters copy to user failed while replacing table [ 123.586701][ T8808] ip6gretap0: entered promiscuous mode [ 123.596181][ T8808] batadv_slave_0: entered promiscuous mode [ 123.618316][ T8797] chnl_net:caif_netlink_parms(): no params data found [ 123.771030][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.785276][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.793391][ T8797] bridge_slave_0: entered allmulticast mode [ 123.800862][ T8797] bridge_slave_0: entered promiscuous mode [ 123.813812][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.821776][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.830930][ T8797] bridge_slave_1: entered allmulticast mode [ 123.838175][ T8797] bridge_slave_1: entered promiscuous mode [ 123.873928][ T8797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.896811][ T8797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.948796][ T8843] rdma_op ffff8880359841f0 conn xmit_rdma 0000000000000000 [ 123.962468][ T8797] team0: Port device team_slave_0 added [ 123.974530][ T8797] team0: Port device team_slave_1 added [ 123.995286][ T8841] Â: renamed from pim6reg1 [ 124.020047][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.027861][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.054593][ T8797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.067935][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.075687][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.104968][ T8797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.192014][ T8797] hsr_slave_0: entered promiscuous mode [ 124.198952][ T8797] hsr_slave_1: entered promiscuous mode [ 124.205169][ T8797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.213346][ T8797] Cannot create hsr debugfs directory [ 124.255597][ T8848] tipc: Started in network mode [ 124.260631][ T8848] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 124.274386][ T8848] tipc: Enabled bearer , priority 9 [ 124.527046][ T8858] atomic_op ffff888079d01198 conn xmit_atomic 0000000000000000 [ 124.543662][ T8797] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.571740][ T8862] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 124.628064][ T8862] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 124.680188][ T8797] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.711922][ T8868] FAULT_INJECTION: forcing a failure. [ 124.711922][ T8868] name failslab, interval 1, probability 0, space 0, times 0 [ 124.725181][ T8868] CPU: 1 UID: 0 PID: 8868 Comm: syz.1.1095 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 124.735905][ T8868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 124.745993][ T8868] Call Trace: [ 124.749305][ T8868] [ 124.752269][ T8868] dump_stack_lvl+0x241/0x360 [ 124.756985][ T8868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.762235][ T8868] ? __pfx__printk+0x10/0x10 [ 124.766857][ T8868] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 124.772874][ T8868] ? __pfx___might_resched+0x10/0x10 [ 124.778193][ T8868] ? kfree+0x1a0/0x440 [ 124.782294][ T8868] should_fail_ex+0x3b0/0x4e0 [ 124.787000][ T8868] should_failslab+0xac/0x100 [ 124.791707][ T8868] ? __alloc_skb+0x1c3/0x440 [ 124.796319][ T8868] kmem_cache_alloc_node_noprof+0x71/0x320 [ 124.802131][ T8868] __alloc_skb+0x1c3/0x440 [ 124.806640][ T8868] ? __pfx___alloc_skb+0x10/0x10 [ 124.811610][ T8868] ? netlink_ack_tlv_len+0x6e/0x200 [ 124.816827][ T8868] netlink_ack+0x13f/0xa30 [ 124.821240][ T8868] ? __pfx_lock_acquire+0x10/0x10 [ 124.826264][ T8868] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 124.831822][ T8868] netlink_rcv_skb+0x262/0x430 [ 124.836606][ T8868] ? __pfx_genl_rcv_msg+0x10/0x10 [ 124.841659][ T8868] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 124.846980][ T8868] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 124.852471][ T8868] genl_rcv+0x28/0x40 [ 124.856457][ T8868] netlink_unicast+0x7f6/0x990 [ 124.861229][ T8868] ? __pfx_netlink_unicast+0x10/0x10 [ 124.866511][ T8868] ? __virt_addr_valid+0x183/0x530 [ 124.871638][ T8868] ? __check_object_size+0x48e/0x900 [ 124.876932][ T8868] netlink_sendmsg+0x8e4/0xcb0 [ 124.881708][ T8868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.887004][ T8868] ? aa_sock_msg_perm+0x91/0x160 [ 124.891967][ T8868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 124.897250][ T8868] __sock_sendmsg+0x221/0x270 [ 124.901937][ T8868] ____sys_sendmsg+0x52a/0x7e0 [ 124.906746][ T8868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.912080][ T8868] __sys_sendmsg+0x292/0x380 [ 124.916676][ T8868] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.921801][ T8868] ? __pfx_vfs_write+0x10/0x10 [ 124.926570][ T8868] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.932901][ T8868] ? do_syscall_64+0x100/0x230 [ 124.937684][ T8868] ? do_syscall_64+0xb6/0x230 [ 124.942372][ T8868] do_syscall_64+0xf3/0x230 [ 124.946871][ T8868] ? clear_bhb_loop+0x35/0x90 [ 124.951540][ T8868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.957436][ T8868] RIP: 0033:0x7f30d197e719 [ 124.961842][ T8868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.981455][ T8868] RSP: 002b:00007f30d26f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.989919][ T8868] RAX: ffffffffffffffda RBX: 00007f30d1b35f80 RCX: 00007f30d197e719 [ 124.997884][ T8868] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 125.005848][ T8868] RBP: 00007f30d26f3090 R08: 0000000000000000 R09: 0000000000000000 [ 125.013809][ T8868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.021778][ T8868] R13: 0000000000000000 R14: 00007f30d1b35f80 R15: 00007ffecfd792d8 [ 125.029755][ T8868] [ 125.109153][ T8797] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.193737][ T8797] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.246347][ T8883] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 125.277351][ T5846] tipc: Node number set to 9480874 [ 125.342375][ T5847] Bluetooth: hci2: command tx timeout [ 125.421753][ T8797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 125.468718][ T8797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 125.509814][ T8797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 125.545298][ T8797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 125.880489][ T8906] lo speed is unknown, defaulting to 1000 [ 125.918384][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.986141][ T8797] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.030330][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.037527][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.071931][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.079177][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.156960][ T8925] __nla_validate_parse: 8 callbacks suppressed [ 126.156979][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 126.185720][ T8925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1113'. [ 126.267106][ T8929] netlink: 'syz.1.1114': attribute type 17 has an invalid length. [ 126.300063][ T8929] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1114'. [ 126.337821][ T8929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 126.682420][ T8943] FAULT_INJECTION: forcing a failure. [ 126.682420][ T8943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.695793][ T8943] CPU: 0 UID: 0 PID: 8943 Comm: syz.1.1118 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 126.706514][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 126.716603][ T8943] Call Trace: [ 126.719909][ T8943] [ 126.722845][ T8943] dump_stack_lvl+0x241/0x360 [ 126.727528][ T8943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.732734][ T8943] ? __pfx__printk+0x10/0x10 [ 126.737324][ T8943] ? snprintf+0xda/0x120 [ 126.741567][ T8943] should_fail_ex+0x3b0/0x4e0 [ 126.746246][ T8943] _copy_to_user+0x31/0xb0 [ 126.750656][ T8943] simple_read_from_buffer+0xca/0x150 [ 126.756033][ T8943] proc_fail_nth_read+0x1e9/0x250 [ 126.761052][ T8943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.766603][ T8943] ? rw_verify_area+0x55e/0x6f0 [ 126.771476][ T8943] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.777031][ T8943] vfs_read+0x1fc/0xb70 [ 126.781187][ T8943] ? fdget_pos+0x24e/0x320 [ 126.785608][ T8943] ? __pfx_vfs_read+0x10/0x10 [ 126.790289][ T8943] ? __fget_files+0x3f3/0x470 [ 126.794970][ T8943] ? fdget_pos+0x24e/0x320 [ 126.799386][ T8943] ksys_read+0x183/0x2b0 [ 126.803626][ T8943] ? __pfx_ksys_read+0x10/0x10 [ 126.808385][ T8943] ? do_syscall_64+0x100/0x230 [ 126.813147][ T8943] ? do_syscall_64+0xb6/0x230 [ 126.817844][ T8943] do_syscall_64+0xf3/0x230 [ 126.822342][ T8943] ? clear_bhb_loop+0x35/0x90 [ 126.827019][ T8943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.832906][ T8943] RIP: 0033:0x7f30d197d15c [ 126.837316][ T8943] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 126.856922][ T8943] RSP: 002b:00007f30d26f3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.865333][ T8943] RAX: ffffffffffffffda RBX: 00007f30d1b35f80 RCX: 00007f30d197d15c [ 126.873300][ T8943] RDX: 000000000000000f RSI: 00007f30d26f30a0 RDI: 0000000000000004 [ 126.881264][ T8943] RBP: 00007f30d26f3090 R08: 0000000000000000 R09: 0000000000000000 [ 126.889241][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 126.897206][ T8943] R13: 0000000000000000 R14: 00007f30d1b35f80 R15: 00007ffecfd792d8 [ 126.905190][ T8943] [ 126.914624][ T8797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.005124][ T8797] veth0_vlan: entered promiscuous mode [ 127.015599][ T8797] veth1_vlan: entered promiscuous mode [ 127.119624][ T8797] veth0_macvtap: entered promiscuous mode [ 127.130272][ T8797] veth1_macvtap: entered promiscuous mode [ 127.145739][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.156263][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.166399][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.176939][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.189125][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.201182][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.211373][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.222149][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.235063][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.244651][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.255161][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.265375][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.275978][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.285864][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.296762][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.306625][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.317124][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.328239][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.338021][ T8797] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.346995][ T8797] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.356004][ T8797] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.364797][ T8797] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.423069][ T5847] Bluetooth: hci2: command tx timeout [ 127.432364][ T8959] netlink: 'syz.3.1124': attribute type 4 has an invalid length. [ 127.440119][ T8959] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1124'. [ 127.464897][ T8959] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 127.495222][ T8962] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1125'. [ 127.957054][ T3539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.980972][ T3539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.045387][ T8974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 128.081038][ T8979] netlink: 'syz.3.1132': attribute type 12 has an invalid length. [ 128.135764][ T3539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.140868][ T8979] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1132'. [ 128.153277][ T3539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.407795][ T8991] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1136'. [ 128.473537][ T8995] tipc: Enabling of bearer rejected, already enabled [ 128.676550][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1144'. [ 128.763920][ T9015] xt_connbytes: Forcing CT accounting to be enabled [ 128.770584][ T9015] Cannot find set identified by id 0 to match [ 128.933984][ T9027] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1150'. [ 129.096177][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.114263][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.181769][ T9039] Cannot find add_set index 832 as target [ 129.221246][ T9049] netlink: 'syz.2.1157': attribute type 4 has an invalid length. [ 129.505105][ T9066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.526586][ T9066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.534014][ T9066] bond1: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 129.546556][ T9066] bond1: (slave ip6tnl2): Error -95 calling set_mac_address [ 129.705211][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.926733][ T9082] netlink: 'syz.1.1168': attribute type 4 has an invalid length. [ 130.053876][ T9087] vlan2: entered promiscuous mode [ 130.059080][ T9087] team0: Device vlan2 is already an upper device of the team interface [ 130.107458][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.112678][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 130.129155][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 130.137542][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 130.153756][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 130.182182][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 130.189885][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 130.276323][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.487548][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.547378][ T9088] lo speed is unknown, defaulting to 1000 [ 130.714071][ T12] bridge_slave_1: left allmulticast mode [ 130.720186][ T12] bridge_slave_1: left promiscuous mode [ 130.745575][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.791893][ T12] bridge_slave_0: left allmulticast mode [ 130.812846][ T12] bridge_slave_0: left promiscuous mode [ 130.818620][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.203017][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.217527][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.228924][ T12] bond0 (unregistering): Released all slaves [ 131.432759][ T9145] __nla_validate_parse: 6 callbacks suppressed [ 131.432786][ T9145] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1190'. [ 131.733017][ T9161] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1195'. [ 131.783905][ T9148] infiniband syz1: set down [ 131.789048][ T9148] team0 (unregistering): Port device team_slave_0 removed [ 131.833914][ T9148] team0 (unregistering): Port device team_slave_1 removed [ 131.854259][ T9148] team0 (unregistering): Port device wlan1 removed [ 132.059046][ T9170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1199'. [ 132.104149][ T9170] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.113972][ T9170] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.123148][ T9170] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.131879][ T9170] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.155558][ T9170] vxlan0: entered promiscuous mode [ 132.233857][ T5847] Bluetooth: hci2: command tx timeout [ 132.441559][ T12] hsr_slave_0: left promiscuous mode [ 132.607980][ T12] hsr_slave_1: left promiscuous mode [ 132.616946][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.635787][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.637615][ T9194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1208'. [ 132.653494][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.662233][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.680417][ T12] veth1_macvtap: left promiscuous mode [ 132.686567][ T12] veth0_macvtap: left promiscuous mode [ 132.692713][ T12] veth1_vlan: left promiscuous mode [ 132.698273][ T12] veth0_vlan: left promiscuous mode [ 132.773492][ T9198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1206'. [ 132.972536][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.978887][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.389829][ T12] team0 (unregistering): Port device team_slave_1 removed [ 133.447081][ T12] team0 (unregistering): Port device team_slave_0 removed [ 133.999063][ T9088] chnl_net:caif_netlink_parms(): no params data found [ 134.067437][ T9204] lo speed is unknown, defaulting to 1000 [ 134.199007][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 134.228725][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1212'. [ 134.302162][ T5847] Bluetooth: hci2: command tx timeout [ 134.428052][ T9088] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.442367][ T9088] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.449745][ T9088] bridge_slave_0: entered allmulticast mode [ 134.466632][ T9088] bridge_slave_0: entered promiscuous mode [ 134.485916][ T9088] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.502619][ T9088] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.509985][ T9088] bridge_slave_1: entered allmulticast mode [ 134.526755][ T9088] bridge_slave_1: entered promiscuous mode [ 134.576120][ T9228] vlan2: entered promiscuous mode [ 134.595462][ T9228] team0: Device vlan2 is already an upper device of the team interface [ 134.678141][ T9232] lo speed is unknown, defaulting to 1000 [ 134.897088][ T9088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.950140][ T9088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.070308][ T9088] team0: Port device team_slave_0 added [ 135.091460][ T9088] team0: Port device team_slave_1 added [ 135.150815][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.161955][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.194665][ T9088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.218155][ T9088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.231945][ T9088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.260780][ T9088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.343846][ T9088] hsr_slave_0: entered promiscuous mode [ 135.364419][ T9088] hsr_slave_1: entered promiscuous mode [ 135.385208][ T9088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.408384][ T9088] Cannot create hsr debugfs directory [ 135.468287][ T9225] netlink: 'syz.4.1216': attribute type 4 has an invalid length. [ 135.488304][ T9225] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1216'. [ 136.015826][ T9259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1228'. [ 136.162562][ T9257] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1227'. [ 136.382543][ T5847] Bluetooth: hci2: command tx timeout [ 137.881477][ T9271] __nla_validate_parse: 1 callbacks suppressed [ 137.881495][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1232'. [ 137.913231][ T9271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1232'. [ 137.937589][ T9271] FAULT_INJECTION: forcing a failure. [ 137.937589][ T9271] name failslab, interval 1, probability 0, space 0, times 0 [ 137.958460][ T9271] CPU: 1 UID: 0 PID: 9271 Comm: syz.3.1232 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 137.969182][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 137.979257][ T9271] Call Trace: [ 137.982556][ T9271] [ 137.985507][ T9271] dump_stack_lvl+0x241/0x360 [ 137.990214][ T9271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.995441][ T9271] ? __pfx__printk+0x10/0x10 [ 138.000064][ T9271] ? ref_tracker_alloc+0x332/0x490 [ 138.005202][ T9271] should_fail_ex+0x3b0/0x4e0 [ 138.009913][ T9271] ? skb_clone+0x20c/0x390 [ 138.014358][ T9271] should_failslab+0xac/0x100 [ 138.019071][ T9271] ? skb_clone+0x20c/0x390 [ 138.023516][ T9271] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 138.028923][ T9271] skb_clone+0x20c/0x390 [ 138.029968][ T9278] lo speed is unknown, defaulting to 1000 [ 138.033174][ T9271] __netlink_deliver_tap+0x3cc/0x7f0 [ 138.033218][ T9271] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.033241][ T9271] netlink_deliver_tap+0x19d/0x1b0 [ 138.033266][ T9271] netlink_sendskb+0x68/0x140 [ 138.059236][ T9271] netlink_unicast+0x39d/0x990 [ 138.064119][ T9271] ? __asan_memcpy+0x40/0x70 [ 138.068739][ T9271] ? __pfx_netlink_unicast+0x10/0x10 [ 138.074066][ T9271] netlink_rcv_skb+0x262/0x430 [ 138.078866][ T9271] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 138.084356][ T9271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 138.089699][ T9271] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.094933][ T9271] netlink_unicast+0x7f6/0x990 [ 138.099731][ T9271] ? __pfx_netlink_unicast+0x10/0x10 [ 138.105037][ T9271] ? __virt_addr_valid+0x183/0x530 [ 138.110172][ T9271] ? __check_object_size+0x48e/0x900 [ 138.115487][ T9271] netlink_sendmsg+0x8e4/0xcb0 [ 138.120326][ T9271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.125643][ T9271] ? aa_sock_msg_perm+0x91/0x160 [ 138.130607][ T9271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.135914][ T9271] __sock_sendmsg+0x221/0x270 [ 138.140720][ T9271] ____sys_sendmsg+0x52a/0x7e0 [ 138.145525][ T9271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.150872][ T9271] __sys_sendmsg+0x292/0x380 [ 138.155493][ T9271] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.160649][ T9271] ? __pfx_vfs_write+0x10/0x10 [ 138.165466][ T9271] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.171830][ T9271] ? do_syscall_64+0x100/0x230 [ 138.176635][ T9271] ? do_syscall_64+0xb6/0x230 [ 138.181348][ T9271] do_syscall_64+0xf3/0x230 [ 138.185892][ T9271] ? clear_bhb_loop+0x35/0x90 [ 138.190609][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.196536][ T9271] RIP: 0033:0x7ff988f7e719 [ 138.200986][ T9271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.220621][ T9271] RSP: 002b:00007ff989d9d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.229073][ T9271] RAX: ffffffffffffffda RBX: 00007ff989135f80 RCX: 00007ff988f7e719 [ 138.237071][ T9271] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 138.245071][ T9271] RBP: 00007ff989d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 138.253068][ T9271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 138.261068][ T9271] R13: 0000000000000000 R14: 00007ff989135f80 R15: 00007fff3d570e78 [ 138.269083][ T9271] [ 138.406849][ T9290] can: request_module (can-proto-0) failed. [ 138.464237][ T5847] Bluetooth: hci2: command tx timeout [ 138.559063][ T9303] Â: renamed from pim6reg1 [ 138.593671][ T9290] lo speed is unknown, defaulting to 1000 [ 138.822399][ T9088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 139.001991][ T9088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 139.042786][ T9088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 139.063354][ T9088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 139.238532][ T9088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.264520][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1254'. [ 139.354304][ T9088] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.422218][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.429392][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.480524][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.487683][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.677474][ T9342] lo speed is unknown, defaulting to 1000 [ 139.919474][ T9088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.996115][ T9088] veth0_vlan: entered promiscuous mode [ 140.022359][ T9088] veth1_vlan: entered promiscuous mode [ 140.077742][ T9088] veth0_macvtap: entered promiscuous mode [ 140.088338][ T9088] veth1_macvtap: entered promiscuous mode [ 140.110143][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.121634][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.146081][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.159741][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.172334][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.191418][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.201742][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.219902][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.239323][ T9088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.255411][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.267823][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.278350][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.314731][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.325268][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.336463][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.346744][ T9088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.357396][ T9088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.368873][ T9088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.383291][ T9088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.393445][ T9088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.402934][ T9088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.411767][ T9088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.676984][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.700913][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.763486][ T9368] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 140.839505][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.871439][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.987457][ T9379] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 140.997530][ T9379] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 141.055654][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 141.070623][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1271'. [ 141.440886][ T9402] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1277'. [ 141.513095][ T9405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1280'. [ 141.824546][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'. [ 142.032009][ T62] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.440033][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 142.472470][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 142.481620][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 142.491092][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 142.499213][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 142.508130][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 142.597463][ T9438] lo speed is unknown, defaulting to 1000 [ 142.760124][ T9457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1300'. [ 142.790301][ T62] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.847408][ T9463] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1300'. [ 142.887655][ T9463] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 142.965207][ T62] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.967180][ T9466] xt_bpf: check failed: parse error [ 143.014438][ T9468] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1304'. [ 143.044557][ T9468] netlink: 'syz.1.1304': attribute type 1 has an invalid length. [ 143.135261][ T62] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.249646][ T9472] Â: renamed from pim6reg1 [ 143.313978][ T9476] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1307'. [ 143.395916][ T9475] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1307'. [ 143.484074][ T62] bridge_slave_1: left allmulticast mode [ 143.489927][ T62] bridge_slave_1: left promiscuous mode [ 143.499256][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.516313][ T62] bridge_slave_0: left allmulticast mode [ 143.522404][ T62] bridge_slave_0: left promiscuous mode [ 143.528111][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.013403][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.033015][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.048371][ T62] bond0 (unregistering): Released all slaves [ 144.134460][ T9438] chnl_net:caif_netlink_parms(): no params data found [ 144.401210][ T9515] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1320'. [ 144.414494][ T9523] netlink: 2227 bytes leftover after parsing attributes in process `syz.2.1321'. [ 144.543404][ T5857] Bluetooth: hci2: command tx timeout [ 144.716361][ T9543] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1327'. [ 144.735396][ T9548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1330'. [ 145.061705][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 145.079116][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1335'. [ 145.114755][ T9565] tipc: Started in network mode [ 145.119715][ T9565] tipc: Node identity de2160f8e691, cluster identity 4711 [ 145.139704][ T9565] tipc: Enabled bearer , priority 0 [ 145.284074][ T9558] tipc: Resetting bearer [ 145.347929][ T62] hsr_slave_0: left promiscuous mode [ 145.369259][ T62] hsr_slave_1: left promiscuous mode [ 145.402566][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.426577][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.455637][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.463341][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.508265][ T62] veth1_macvtap: left promiscuous mode [ 145.525670][ T62] veth0_macvtap: left promiscuous mode [ 145.531284][ T62] veth1_vlan: left promiscuous mode [ 145.546902][ T62] veth0_vlan: left promiscuous mode [ 145.646630][ T9585] netlink: 'syz.2.1340': attribute type 1 has an invalid length. [ 145.971433][ T62] team0 (unregistering): Port device team_slave_1 removed [ 146.010445][ T62] team0 (unregistering): Port device team_slave_0 removed [ 146.152382][ T5846] tipc: Node number set to 951083256 [ 146.388262][ T9438] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.397882][ T9438] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.407983][ T9438] bridge_slave_0: entered allmulticast mode [ 146.415326][ T9438] bridge_slave_0: entered promiscuous mode [ 146.425074][ T9438] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.432466][ T9438] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.440110][ T9438] bridge_slave_1: entered allmulticast mode [ 146.447206][ T9438] bridge_slave_1: entered promiscuous mode [ 146.460105][ T9559] lo speed is unknown, defaulting to 1000 [ 146.467285][ T9556] tipc: Resetting bearer [ 146.626798][ T5857] Bluetooth: hci2: command tx timeout [ 147.852939][ T9556] tipc: Disabling bearer [ 147.866543][ T9585] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 147.874224][ T9586] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 148.025507][ T9438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.076198][ T9597] xt_l2tp: v2 sid > 0xffff: 262144 [ 148.084608][ T9438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.237151][ T9438] team0: Port device team_slave_0 added [ 148.273604][ T9438] team0: Port device team_slave_1 added [ 148.378837][ T9608] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1348'. [ 148.407439][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.438305][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.463556][ T9613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1351'. [ 148.475046][ T9438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.529245][ T9615] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1352'. [ 148.559639][ T9608] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0 [ 148.562530][ T9438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.597161][ T9438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.635763][ T9438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.702534][ T5857] Bluetooth: hci2: command tx timeout [ 148.846123][ T9628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1356'. [ 148.920274][ T9438] hsr_slave_0: entered promiscuous mode [ 148.945487][ T9438] hsr_slave_1: entered promiscuous mode [ 148.951897][ T9438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.966289][ T9438] Cannot create hsr debugfs directory [ 149.099034][ T52] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 149.552913][ T9647] tun0: tun_chr_ioctl cmd 1074025675 [ 149.558306][ T9647] tun0: persist enabled [ 149.565657][ T9647] tun0: tun_chr_ioctl cmd 1074025675 [ 149.570974][ T9647] tun0: persist enabled [ 149.805052][ T9438] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 149.824303][ T9438] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 149.848215][ T9438] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.868597][ T9438] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.936255][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1368'. [ 149.946703][ T9660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1368'. [ 149.987120][ T9438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.029722][ T9438] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.056011][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.061612][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 150.063184][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.095094][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.103326][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.329812][ T9673] ip6tnl1: entered allmulticast mode [ 150.403895][ T9438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.507658][ T9682] lo speed is unknown, defaulting to 1000 [ 150.523578][ T9438] veth0_vlan: entered promiscuous mode [ 150.529418][ T9682] lo speed is unknown, defaulting to 1000 [ 150.547529][ T9682] lo speed is unknown, defaulting to 1000 [ 150.549597][ T9438] veth1_vlan: entered promiscuous mode [ 150.591789][ T9691] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1378'. [ 150.605334][ T9682] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 150.621203][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1378'. [ 150.623376][ T9438] veth0_macvtap: entered promiscuous mode [ 150.657541][ T9682] lo speed is unknown, defaulting to 1000 [ 150.661558][ T9438] veth1_macvtap: entered promiscuous mode [ 150.674468][ T9695] netlink: 'syz.3.1378': attribute type 4 has an invalid length. [ 150.694604][ T9682] lo speed is unknown, defaulting to 1000 [ 150.724276][ T9682] lo speed is unknown, defaulting to 1000 [ 150.733842][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.760872][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.781091][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.792902][ T5857] Bluetooth: hci2: command tx timeout [ 150.799387][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.810164][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.820924][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.831113][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.842347][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.853719][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.867636][ T9682] lo speed is unknown, defaulting to 1000 [ 150.869210][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.886380][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.900507][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.911528][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.921555][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.932616][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.943797][ T9438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.954681][ T9438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.966411][ T9438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.001861][ T9682] lo speed is unknown, defaulting to 1000 [ 151.003516][ T9438] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.072362][ T9438] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.090588][ T9438] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.104247][ T9438] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.130255][ T9682] lo speed is unknown, defaulting to 1000 [ 151.306047][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.327377][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.359481][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.369100][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.660171][ T9744] nftables ruleset with unbound chain [ 151.719473][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1402'. [ 151.723869][ T9751] FAULT_INJECTION: forcing a failure. [ 151.723869][ T9751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.758040][ T9751] CPU: 0 UID: 0 PID: 9751 Comm: syz.2.1404 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 151.768772][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 151.778854][ T9751] Call Trace: [ 151.782148][ T9751] [ 151.785098][ T9751] dump_stack_lvl+0x241/0x360 [ 151.789806][ T9751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.795029][ T9751] ? __pfx__printk+0x10/0x10 [ 151.799648][ T9751] ? __pfx_lock_release+0x10/0x10 [ 151.804714][ T9751] should_fail_ex+0x3b0/0x4e0 [ 151.809426][ T9751] _copy_from_user+0x2f/0xc0 [ 151.814049][ T9751] copy_msghdr_from_user+0xae/0x680 [ 151.815473][ T9754] FAULT_INJECTION: forcing a failure. [ 151.815473][ T9754] name failslab, interval 1, probability 0, space 0, times 0 [ 151.819256][ T9751] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 151.837653][ T9751] __sys_sendmsg+0x22d/0x380 [ 151.842261][ T9751] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.847389][ T9751] ? __pfx_vfs_write+0x10/0x10 [ 151.852175][ T9751] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.858509][ T9751] ? do_syscall_64+0x100/0x230 [ 151.863285][ T9751] ? do_syscall_64+0xb6/0x230 [ 151.867970][ T9751] do_syscall_64+0xf3/0x230 [ 151.872477][ T9751] ? clear_bhb_loop+0x35/0x90 [ 151.877160][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.883056][ T9751] RIP: 0033:0x7fca43b7e719 [ 151.887473][ T9751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.907081][ T9751] RSP: 002b:00007fca44985038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.915501][ T9751] RAX: ffffffffffffffda RBX: 00007fca43d35f80 RCX: 00007fca43b7e719 [ 151.923479][ T9751] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000e [ 151.931455][ T9751] RBP: 00007fca44985090 R08: 0000000000000000 R09: 0000000000000000 [ 151.939427][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.947401][ T9751] R13: 0000000000000000 R14: 00007fca43d35f80 R15: 00007fffb15e32d8 [ 151.955388][ T9751] [ 151.958410][ T9754] CPU: 1 UID: 0 PID: 9754 Comm: syz.3.1406 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 151.969110][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 151.979169][ T9754] Call Trace: [ 151.982449][ T9754] [ 151.985373][ T9754] dump_stack_lvl+0x241/0x360 [ 151.990054][ T9754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.995248][ T9754] ? __pfx__printk+0x10/0x10 [ 151.999846][ T9754] should_fail_ex+0x3b0/0x4e0 [ 152.004522][ T9754] ? dst_alloc+0x12b/0x190 [ 152.008934][ T9754] should_failslab+0xac/0x100 [ 152.013608][ T9754] ? dst_alloc+0x12b/0x190 [ 152.018020][ T9754] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 152.023392][ T9754] dst_alloc+0x12b/0x190 [ 152.027637][ T9754] ip_route_input_rcu+0x22fc/0x3830 [ 152.032840][ T9754] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 152.038390][ T9754] ? __pfx_lock_acquire+0x10/0x10 [ 152.043418][ T9754] ? ipt_do_table+0x157a/0x1860 [ 152.048273][ T9754] ? ip_route_input_noref+0xad/0x250 [ 152.053556][ T9754] ip_route_input_noref+0x167/0x250 [ 152.058755][ T9754] ? __pfx_ip_route_input_noref+0x10/0x10 [ 152.064485][ T9754] ? tcp_v4_early_demux+0x445/0x930 [ 152.069682][ T9754] ? tcp_v4_early_demux+0x56c/0x930 [ 152.074883][ T9754] ip_rcv_finish_core+0x5b1/0x1b50 [ 152.079997][ T9754] ip_rcv_finish+0x14a/0x560 [ 152.084579][ T9754] ? NF_HOOK+0x392/0x450 [ 152.088823][ T9754] ? __pfx_ip_rcv_finish+0x10/0x10 [ 152.093929][ T9754] NF_HOOK+0x3a4/0x450 [ 152.097993][ T9754] ? NF_HOOK+0x9a/0x450 [ 152.102148][ T9754] ? __pfx_NF_HOOK+0x10/0x10 [ 152.106741][ T9754] ? ip_rcv_core+0x801/0xd10 [ 152.111333][ T9754] ? __pfx_ip_rcv_finish+0x10/0x10 [ 152.116445][ T9754] ? __pfx_ip_rcv+0x10/0x10 [ 152.120943][ T9754] __netif_receive_skb+0x2bf/0x650 [ 152.126052][ T9754] ? __pfx_lock_acquire+0x10/0x10 [ 152.131076][ T9754] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 152.137312][ T9754] ? __pfx___netif_receive_skb+0x10/0x10 [ 152.142938][ T9754] ? __kasan_slab_alloc+0x66/0x80 [ 152.147958][ T9754] ? read_tsc+0x9/0x20 [ 152.152049][ T9754] ? timekeeping_get_ns+0x2c0/0x420 [ 152.157285][ T9754] ? netif_receive_skb+0x131/0x890 [ 152.162435][ T9754] ? netif_receive_skb+0x131/0x890 [ 152.167545][ T9754] netif_receive_skb+0x1e8/0x890 [ 152.172485][ T9754] ? tun_rx_batched+0x160/0x8f0 [ 152.177341][ T9754] ? __pfx_netif_receive_skb+0x10/0x10 [ 152.182809][ T9754] ? tun_rx_batched+0x160/0x8f0 [ 152.187661][ T9754] tun_rx_batched+0x1b7/0x8f0 [ 152.192340][ T9754] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 152.198669][ T9754] ? __pfx_lock_acquire+0x10/0x10 [ 152.203695][ T9754] ? __pfx_tun_rx_batched+0x10/0x10 [ 152.208903][ T9754] tun_get_user+0x30d6/0x4890 [ 152.213582][ T9754] ? tun_get_user+0x2bbe/0x4890 [ 152.218441][ T9754] ? tun_get_user+0x86e/0x4890 [ 152.223207][ T9754] ? __lock_acquire+0x1384/0x2050 [ 152.228238][ T9754] ? __pfx_tun_get_user+0x10/0x10 [ 152.233272][ T9754] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 152.238725][ T9754] ? tun_get+0x1e/0x2f0 [ 152.242890][ T9754] ? __pfx_lock_release+0x10/0x10 [ 152.247924][ T9754] ? tun_get+0x1e/0x2f0 [ 152.252338][ T9754] ? tun_get+0x27d/0x2f0 [ 152.256578][ T9754] tun_chr_write_iter+0x10d/0x1f0 [ 152.261602][ T9754] vfs_write+0xaeb/0xd30 [ 152.265846][ T9754] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 152.271395][ T9754] ? __pfx_vfs_write+0x10/0x10 [ 152.276165][ T9754] ? fdget_pos+0x19a/0x320 [ 152.280586][ T9754] ksys_write+0x183/0x2b0 [ 152.284914][ T9754] ? __pfx_ksys_write+0x10/0x10 [ 152.289768][ T9754] ? do_syscall_64+0x100/0x230 [ 152.294533][ T9754] ? do_syscall_64+0xb6/0x230 [ 152.299207][ T9754] do_syscall_64+0xf3/0x230 [ 152.303710][ T9754] ? clear_bhb_loop+0x35/0x90 [ 152.308388][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.314276][ T9754] RIP: 0033:0x7ff988f7d1ff [ 152.318686][ T9754] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 152.338285][ T9754] RSP: 002b:00007ff989d9d000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 152.346695][ T9754] RAX: ffffffffffffffda RBX: 00007ff989135f80 RCX: 00007ff988f7d1ff [ 152.354675][ T9754] RDX: 0000000000000076 RSI: 0000000020000140 RDI: 00000000000000c8 [ 152.362641][ T9754] RBP: 00007ff989d9d090 R08: 0000000000000000 R09: 0000000000000000 [ 152.370602][ T9754] R10: 0000000000000076 R11: 0000000000000293 R12: 0000000000000001 [ 152.378569][ T9754] R13: 0000000000000000 R14: 00007ff989135f80 R15: 00007fff3d570e78 [ 152.386551][ T9754] [ 152.452767][ T9755] netlink: 'syz.1.1405': attribute type 13 has an invalid length. [ 152.460672][ T9755] macvtap0: entered promiscuous mode [ 152.521123][ T9755] macvtap0: refused to change device tx_queue_len [ 152.575116][ T9767] lo speed is unknown, defaulting to 1000 [ 152.657485][ T9773] ieee802154 phy0 wpan0: encryption failed: -22 [ 152.666627][ T9770] netlink: 'syz.4.1412': attribute type 4 has an invalid length. [ 152.717682][ T9774] netlink: 'syz.1.1411': attribute type 1 has an invalid length. [ 152.740415][ T9770] ------------[ cut here ]------------ [ 152.746251][ T9770] WARNING: CPU: 1 PID: 9770 at net/core/skbuff.c:1219 sk_skb_reason_drop+0x87/0x380 [ 152.755730][ T9770] Modules linked in: [ 152.759652][ T9770] CPU: 1 UID: 0 PID: 9770 Comm: syz.4.1412 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 152.770414][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 152.780557][ T9770] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 152.786365][ T9770] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 0a 3f 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 ba 3a 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 e8 3e 08 f8 85 ed 0f 8e 49 [ 152.806053][ T9770] RSP: 0018:ffffc90002e5f078 EFLAGS: 00010287 [ 152.812194][ T9770] RAX: ffffffff898caf56 RBX: 00000000fffbffea RCX: 0000000000040000 [ 152.820188][ T9770] RDX: ffffc9000b662000 RSI: 0000000000000ae0 RDI: 0000000000000ae1 [ 152.828235][ T9770] RBP: dffffc0000000000 R08: ffffffff898caf46 R09: 1ffff11005ee6b84 [ 152.836312][ T9770] R10: dffffc0000000000 R11: ffffed1005ee6b85 R12: dffffc0000000000 [ 152.844344][ T9770] R13: ffff88802f735b40 R14: 00000000ffffffea R15: 0000000000000000 [ 152.852381][ T9770] FS: 00007ffb3fe406c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 152.861336][ T9770] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.868004][ T9770] CR2: 00007ffb3fe1fd58 CR3: 0000000060778000 CR4: 00000000003526f0 [ 152.876044][ T9770] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 152.884076][ T9770] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 152.892134][ T9770] Call Trace: [ 152.895438][ T9770] [ 152.898383][ T9770] ? __warn+0x168/0x4e0 [ 152.902614][ T9770] ? sk_skb_reason_drop+0x87/0x380 [ 152.907765][ T9770] ? report_bug+0x2b3/0x500 [ 152.912354][ T9770] ? sk_skb_reason_drop+0x87/0x380 [ 152.917512][ T9770] ? handle_bug+0x60/0x90 [ 152.921881][ T9770] ? exc_invalid_op+0x1a/0x50 [ 152.926683][ T9770] ? asm_exc_invalid_op+0x1a/0x20 [ 152.931762][ T9770] ? sk_skb_reason_drop+0x76/0x380 [ 152.936977][ T9770] ? sk_skb_reason_drop+0x86/0x380 [ 152.942185][ T9770] ? sk_skb_reason_drop+0x87/0x380 [ 152.943982][ T9767] lo speed is unknown, defaulting to 1000 [ 152.947318][ T9770] ? sk_skb_reason_drop+0x86/0x380 [ 152.947361][ T9770] ? ip_rcv_finish_core+0x129f/0x1b50 [ 152.963762][ T9770] ip_rcv_finish_core+0xfde/0x1b50 [ 152.968928][ T9770] ip_sublist_rcv+0x3b1/0xab0 [ 152.973735][ T9770] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 152.978973][ T9770] ? skb_orphan+0xae/0xd0 [ 152.983689][ T9770] ? __pfx_ip_rcv_finish+0x10/0x10 [ 152.988854][ T9770] ip_list_rcv+0x42b/0x480 [ 152.993466][ T9770] ? __pfx_ip_list_rcv+0x10/0x10 [ 152.998444][ T9770] ? __pfx_ip_list_rcv+0x10/0x10 [ 153.003518][ T9770] __netif_receive_skb_list_core+0x94e/0x980 [ 153.008741][ T9775] dummy0: entered promiscuous mode [ 153.009519][ T9770] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 153.021330][ T9770] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 153.027938][ T9770] ? read_tsc+0x9/0x20 [ 153.032112][ T9770] ? timekeeping_get_ns+0x2c0/0x420 [ 153.037361][ T9770] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 153.043819][ T9770] netif_receive_skb_list_internal+0xa51/0xe30 [ 153.050024][ T9770] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 153.056485][ T9770] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 153.063273][ T9770] ? __pfx_eth_type_trans+0x10/0x10 [ 153.068513][ T9770] ? __phys_addr+0xba/0x170 [ 153.073163][ T9770] ? build_skb_around+0x111/0x260 [ 153.078229][ T9770] ? __xdp_build_skb_from_frame+0x313/0x650 [ 153.084262][ T9770] netif_receive_skb_list+0x55/0x4b0 [ 153.089587][ T9770] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 153.095194][ T9770] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 153.101140][ T9770] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 153.106774][ T9770] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 153.112674][ T9770] ? synchronize_rcu+0x11b/0x360 [ 153.117650][ T9770] ? __pfx_synchronize_rcu+0x10/0x10 [ 153.123086][ T9770] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 153.129399][ T9770] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 153.135444][ T9770] ? _copy_from_user+0x99/0xc0 [ 153.140254][ T9770] ? bpf_test_init+0x15a/0x180 [ 153.145119][ T9770] ? xdp_convert_md_to_buff+0x5b/0x330 [ 153.150604][ T9770] bpf_prog_test_run_xdp+0x805/0x11e0 [ 153.156051][ T9770] ? __pfx_lock_release+0x10/0x10 [ 153.161107][ T9770] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 153.167003][ T9770] ? __fget_files+0x29/0x470 [ 153.171645][ T9770] ? fput+0x1a8/0x230 [ 153.175747][ T9770] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 153.181587][ T9770] bpf_prog_test_run+0x2e4/0x360 [ 153.186660][ T9770] __sys_bpf+0x48d/0x810 [ 153.190945][ T9770] ? __pfx___sys_bpf+0x10/0x10 [ 153.195854][ T9770] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.201875][ T9770] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.208358][ T9770] ? do_syscall_64+0x100/0x230 [ 153.213260][ T9770] __x64_sys_bpf+0x7c/0x90 [ 153.217702][ T9770] do_syscall_64+0xf3/0x230 [ 153.222317][ T9770] ? clear_bhb_loop+0x35/0x90 [ 153.227025][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.233040][ T9770] RIP: 0033:0x7ffb3ef7e719 [ 153.237472][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.257174][ T9770] RSP: 002b:00007ffb3fe40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.265712][ T9770] RAX: ffffffffffffffda RBX: 00007ffb3f135f80 RCX: 00007ffb3ef7e719 [ 153.273828][ T9770] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 153.281833][ T9770] RBP: 00007ffb3eff175e R08: 0000000000000000 R09: 0000000000000000 [ 153.289949][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.298034][ T9770] R13: 0000000000000000 R14: 00007ffb3f135f80 R15: 00007ffd3f60d238 [ 153.306140][ T9770] [ 153.309184][ T9770] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.316458][ T9770] CPU: 1 UID: 0 PID: 9770 Comm: syz.4.1412 Not tainted 6.12.0-rc7-syzkaller-01557-gdfc14664794a #0 [ 153.327140][ T9770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 153.337220][ T9770] Call Trace: [ 153.340509][ T9770] [ 153.343441][ T9770] dump_stack_lvl+0x241/0x360 [ 153.348124][ T9770] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.353329][ T9770] ? __pfx__printk+0x10/0x10 [ 153.357919][ T9770] ? _printk+0xd5/0x120 [ 153.362078][ T9770] ? __init_begin+0x41000/0x41000 [ 153.367118][ T9770] ? vscnprintf+0x5d/0x90 [ 153.371449][ T9770] panic+0x349/0x880 [ 153.375355][ T9770] ? __warn+0x177/0x4e0 [ 153.379504][ T9770] ? __pfx_panic+0x10/0x10 [ 153.383929][ T9770] ? show_trace_log_lvl+0x3b2/0x410 [ 153.389135][ T9770] __warn+0x34b/0x4e0 [ 153.393113][ T9770] ? sk_skb_reason_drop+0x87/0x380 [ 153.398250][ T9770] report_bug+0x2b3/0x500 [ 153.402586][ T9770] ? sk_skb_reason_drop+0x87/0x380 [ 153.407706][ T9770] handle_bug+0x60/0x90 [ 153.411857][ T9770] exc_invalid_op+0x1a/0x50 [ 153.416367][ T9770] asm_exc_invalid_op+0x1a/0x20 [ 153.421216][ T9770] RIP: 0010:sk_skb_reason_drop+0x87/0x380 [ 153.426956][ T9770] Code: 00 00 00 fc ff df 41 8d 9e 00 00 fc ff bf 01 00 fc ff 89 de e8 0a 3f 08 f8 81 fb 00 00 fc ff 77 3a 4c 89 e5 e8 ba 3a 08 f8 90 <0f> 0b 90 eb 5e bf 01 00 00 00 89 ee e8 e8 3e 08 f8 85 ed 0f 8e 49 [ 153.446582][ T9770] RSP: 0018:ffffc90002e5f078 EFLAGS: 00010287 [ 153.452662][ T9770] RAX: ffffffff898caf56 RBX: 00000000fffbffea RCX: 0000000000040000 [ 153.460632][ T9770] RDX: ffffc9000b662000 RSI: 0000000000000ae0 RDI: 0000000000000ae1 [ 153.468608][ T9770] RBP: dffffc0000000000 R08: ffffffff898caf46 R09: 1ffff11005ee6b84 [ 153.476580][ T9770] R10: dffffc0000000000 R11: ffffed1005ee6b85 R12: dffffc0000000000 [ 153.484637][ T9770] R13: ffff88802f735b40 R14: 00000000ffffffea R15: 0000000000000000 [ 153.492614][ T9770] ? sk_skb_reason_drop+0x76/0x380 [ 153.497728][ T9770] ? sk_skb_reason_drop+0x86/0x380 [ 153.502852][ T9770] ? sk_skb_reason_drop+0x86/0x380 [ 153.507965][ T9770] ? ip_rcv_finish_core+0x129f/0x1b50 [ 153.513338][ T9770] ip_rcv_finish_core+0xfde/0x1b50 [ 153.518461][ T9770] ip_sublist_rcv+0x3b1/0xab0 [ 153.523141][ T9770] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 153.528335][ T9770] ? skb_orphan+0xae/0xd0 [ 153.532667][ T9770] ? __pfx_ip_rcv_finish+0x10/0x10 [ 153.537786][ T9770] ip_list_rcv+0x42b/0x480 [ 153.542209][ T9770] ? __pfx_ip_list_rcv+0x10/0x10 [ 153.547147][ T9770] ? __pfx_ip_list_rcv+0x10/0x10 [ 153.552083][ T9770] __netif_receive_skb_list_core+0x94e/0x980 [ 153.558070][ T9770] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 153.564659][ T9770] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 153.571157][ T9770] ? read_tsc+0x9/0x20 [ 153.575230][ T9770] ? timekeeping_get_ns+0x2c0/0x420 [ 153.580458][ T9770] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 153.586808][ T9770] netif_receive_skb_list_internal+0xa51/0xe30 [ 153.592984][ T9770] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 153.599314][ T9770] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 153.605996][ T9770] ? __pfx_eth_type_trans+0x10/0x10 [ 153.611195][ T9770] ? __phys_addr+0xba/0x170 [ 153.615701][ T9770] ? build_skb_around+0x111/0x260 [ 153.620730][ T9770] ? __xdp_build_skb_from_frame+0x313/0x650 [ 153.626625][ T9770] netif_receive_skb_list+0x55/0x4b0 [ 153.631911][ T9770] bpf_test_run_xdp_live+0x1b5e/0x21b0 [ 153.637371][ T9770] ? bpf_dispatcher_change_prog+0xd8b/0xf10 [ 153.643274][ T9770] ? bpf_test_run_xdp_live+0x5d6/0x21b0 [ 153.648824][ T9770] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 153.654627][ T9770] ? synchronize_rcu+0x11b/0x360 [ 153.659564][ T9770] ? __pfx_synchronize_rcu+0x10/0x10 [ 153.664866][ T9770] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 153.671122][ T9770] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 153.677026][ T9770] ? _copy_from_user+0x99/0xc0 [ 153.681792][ T9770] ? bpf_test_init+0x15a/0x180 [ 153.686555][ T9770] ? xdp_convert_md_to_buff+0x5b/0x330 [ 153.692016][ T9770] bpf_prog_test_run_xdp+0x805/0x11e0 [ 153.697401][ T9770] ? __pfx_lock_release+0x10/0x10 [ 153.702434][ T9770] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 153.708241][ T9770] ? __fget_files+0x29/0x470 [ 153.712841][ T9770] ? fput+0x1a8/0x230 [ 153.716821][ T9770] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 153.722629][ T9770] bpf_prog_test_run+0x2e4/0x360 [ 153.727568][ T9770] __sys_bpf+0x48d/0x810 [ 153.731815][ T9770] ? __pfx___sys_bpf+0x10/0x10 [ 153.736585][ T9770] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 153.742571][ T9770] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.748897][ T9770] ? do_syscall_64+0x100/0x230 [ 153.753659][ T9770] __x64_sys_bpf+0x7c/0x90 [ 153.758073][ T9770] do_syscall_64+0xf3/0x230 [ 153.762578][ T9770] ? clear_bhb_loop+0x35/0x90 [ 153.767253][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.773140][ T9770] RIP: 0033:0x7ffb3ef7e719 [ 153.777549][ T9770] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.797149][ T9770] RSP: 002b:00007ffb3fe40038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 153.805561][ T9770] RAX: ffffffffffffffda RBX: 00007ffb3f135f80 RCX: 00007ffb3ef7e719 [ 153.813534][ T9770] RDX: 0000000000000069 RSI: 0000000020000600 RDI: 000000000000000a [ 153.821506][ T9770] RBP: 00007ffb3eff175e R08: 0000000000000000 R09: 0000000000000000 [ 153.829476][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.837444][ T9770] R13: 0000000000000000 R14: 00007ffb3f135f80 R15: 00007ffd3f60d238 [ 153.845423][ T9770] [ 153.848712][ T9770] Kernel Offset: disabled [ 153.853028][ T9770] Rebooting in 86400 seconds..