last executing test programs: 2m11.674099394s ago: executing program 4 (id=1361): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x100000, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) 1m52.870595471s ago: executing program 0 (id=1413): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000100)='GPL\x00'}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x66, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x2, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r0, r1, 0x12, 0xa, r1, @prog_fd=r2, r4}, 0x20) 1m49.037922122s ago: executing program 4 (id=1361): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x100000, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) 1m29.761206711s ago: executing program 0 (id=1413): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000100)='GPL\x00'}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x66, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x2, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r0, r1, 0x12, 0xa, r1, @prog_fd=r2, r4}, 0x20) 1m25.785565891s ago: executing program 4 (id=1361): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x100000, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) 1m6.927956772s ago: executing program 0 (id=1413): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000100)='GPL\x00'}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x66, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x2, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r0, r1, 0x12, 0xa, r1, @prog_fd=r2, r4}, 0x20) 1m4.170510339s ago: executing program 4 (id=1361): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x100000, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) 45.438766074s ago: executing program 0 (id=1413): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000100)='GPL\x00'}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x66, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x2, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r0, r1, 0x12, 0xa, r1, @prog_fd=r2, r4}, 0x20) 44.850002073s ago: executing program 4 (id=1361): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x100000, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) 33.730378325s ago: executing program 2 (id=2868): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x60, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x12000000, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x0) 32.050186718s ago: executing program 2 (id=2873): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x5) setsockopt(r1, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r1, &(0x7f0000002980), 0x4000000000001c1, 0xc3ff) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x0, 0x0, @local}}}}}, 0x0) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c", 0xb}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) socket(0x10, 0x3, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b60000b6d7855f705a5e3a000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) 31.846705509s ago: executing program 2 (id=2876): r0 = socket$alg(0x26, 0x5, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x2, &(0x7f0000000300)=@raw=[@generic={0xfd, 0x6, 0x5, 0xca68, 0x6}, @alu={0x4, 0x1, 0x6, 0x7, 0x1, 0xffffffffffffff70, 0x4}], &(0x7f0000000440)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x1, 0x4, 0xc}, {0x0, 0x5, 0x3, 0x2}], 0x10, 0xffff}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r6, 0x0, 0x6a) splice(r1, 0x0, r6, 0x0, 0x8ec3, 0x0) readv(r5, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f00000003c0)) write$binfmt_elf64(r2, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket(0x10, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@ipv6_delrule={0x7c, 0x21, 0x20, 0x70bd28, 0x25dfdbfc, {0xa, 0x10, 0x20, 0x6, 0x8, 0x0, 0x0, 0x8, 0x11}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x47}, @FRA_SRC={0x14, 0x2, @mcast1}, @FRA_DST={0x14, 0x1, @local}]}, 0x7c}}, 0x80) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000340)="4778f7b56587a37b54f2acfffdc6cb671d451c763d1f079505fa124e8ab7fd6107b8eaaeda04c474da963cf74c80ca68b02af6fa38fed4248b9271412ce978532ef03307dd795aaafe33a7d62760c440f8c126c631eb0bb0e58744adedefa0a57f7eb69fd9e1012cdada3947094242a7e4efa23ceeb7860ad986e93d2aad11a6b7caa128e4ca3fd5ed83012cde6310d84067e07084f647dd26b4a8eae7433d00"/169, 0xa9, 0x4004000, 0x0, 0xfffffffffffffee6) sendmsg$alg(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) 30.84042394s ago: executing program 2 (id=2882): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, @long}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x6000}, 0x0) 30.443040356s ago: executing program 2 (id=2887): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, 0x0, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000400)={'syz0', "010f17e9cadcb4cbac3553c74046de4459fc57fe90360fd8b17222f8c54d71183d0562f084b2b6184764a0bf2daf20ecf4986ee40086ac93ff1765872619be8f21cd0933e85a57e13ac6f07136bb120930f29c78e819bdc75aa997d4e7656966e8b1d4810c724da68f7af45288db3d109b857164c45848e08ea893fb420673adefdf496882ba9fd8a64d8c3c7b15d685dd06e6d09aa3f87ac302db051d6bdf122cc5b3a2571bc412"}, 0xac) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0xd8}}, 0x0) (async) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) (async) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)={@cgroup=r6, r4, 0x3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1080}], 0x1}, 0x0) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce0251}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x48000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}}, 0x0) 23.880789475s ago: executing program 0 (id=1413): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000100)='GPL\x00'}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x66, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x2, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r0, r1, 0x12, 0xa, r1, @prog_fd=r2, r4}, 0x20) 22.316853216s ago: executing program 4 (id=1361): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x90) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x100000, @mcast1}, 0xcd, &(0x7f0000000040), 0x1}, 0x0) 10.195501391s ago: executing program 2 (id=2887): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, 0x0, 0x0) (async) write$binfmt_misc(r0, &(0x7f0000000400)={'syz0', "010f17e9cadcb4cbac3553c74046de4459fc57fe90360fd8b17222f8c54d71183d0562f084b2b6184764a0bf2daf20ecf4986ee40086ac93ff1765872619be8f21cd0933e85a57e13ac6f07136bb120930f29c78e819bdc75aa997d4e7656966e8b1d4810c724da68f7af45288db3d109b857164c45848e08ea893fb420673adefdf496882ba9fd8a64d8c3c7b15d685dd06e6d09aa3f87ac302db051d6bdf122cc5b3a2571bc412"}, 0xac) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0xd8}}, 0x0) (async) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) (async) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)={@cgroup=r6, r4, 0x3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1080}], 0x1}, 0x0) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce0251}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = gettid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x48000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r9}}]}, 0x3c}}, 0x0) 3.274658433s ago: executing program 3 (id=3024): socket$kcm(0x21, 0x0, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x5, 0x0, 0x600}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8}]}, 0x34}}, 0x0) 3.148103167s ago: executing program 3 (id=3025): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x75}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1, 0x24, 0xb) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001"], 0x30}}, 0x0) 2.918319971s ago: executing program 3 (id=3027): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r2, &(0x7f0000000280)={0x0, 0xb00, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380000000b06010100600000000a000f00000000100007800c00018008000140e000000205000100070000000900020073797a31"], 0x38}}, 0x0) 2.918131199s ago: executing program 1 (id=3028): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) (fail_nth: 72) 2.82858337s ago: executing program 3 (id=3029): r0 = socket$inet6(0xa, 0x2, 0x3a) (async) unshare(0x8040480) (async) socket$rds(0x15, 0x5, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, &(0x7f0000000580)="af4da7eef46ae41e1384e95ee625b975b94ca15a5f24d7ee0000751603e5fc0b56c0fa53c1314c07b7927f598c74b03bb90d1bdb75889c5724d73f163c152e6c511e0d83f6c027d807f88416764abdc6b0fb02fc56320af97703ca61ba308cc176454936d8258ed5924f0fbb64a2bccf7ca1d20ff5d7edb807702650a2e1fd3971dae62265bb11d72af1d5573f04fc0000000000000000008753716bfee3d21e088c034a00f547c8c70c3c3d2388b6439192f5ff045e69", 0xb7, 0x2000c880, 0x0, 0x0) unshare(0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) (async) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000002900000005"], 0x30}}], 0x1, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000600000020000180140002007665744d272722b50ab387e77f75e90f1e683100000000000000000000000880030004000000"], 0x34}}, 0x0) (async) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, 0x0, &(0x7f0000000100)) (async) socket$kcm(0x21, 0x2, 0x2) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async, rerun: 32) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x82c3}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r7}, 0x10) pipe(&(0x7f0000000440)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100), 0x1001) (async) socket$netlink(0x10, 0x3, 0x6) (async) ioctl$SIOCSIFHWADDR(r8, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) 2.55541467s ago: executing program 1 (id=3030): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000006c4fffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0xe050000000000000}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) r4 = socket(0x3a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r5, 0x0, 0xffffffffffffff15, 0x95, &(0x7f0000e68000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$packet(r4, &(0x7f0000000000)="1412e0c84935a9738e0ff2", 0xb, 0x0, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000c00), &(0x7f0000002000)=0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="80000fdc", 0x4, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.422317178s ago: executing program 3 (id=3031): r0 = socket$kcm(0x10, 0x2, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90624fc600d00030005000100033582c137153e370248018010000048d1bd", 0x33fe0}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90624fc600d00030005000100033582c137153e370248018010000048d1bd", 0x33fe0}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000019240)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000019240)={'wg2\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000002c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r3}, 0x38) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) (async) recvmmsg(r4, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x3}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="48000000100003050000000000005cb099b6ec4fbe17000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14140008000700e000030a08000a00", @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f00000003c0)=0x10, 0x4) 2.416444055s ago: executing program 0 (id=1413): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000002c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000100)='GPL\x00'}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r2, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000000240)=[{}, {}, {}], 0x18, 0x0, 0x0, 0x0, 0x0, 0x66, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@ifindex, 0x2, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r0, r1, 0x12, 0xa, r1, @prog_fd=r2, r4}, 0x20) 676.014507ms ago: executing program 1 (id=3032): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x54000000, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_ID={0x8}]}], {0x14}}, 0x54}}, 0x0) 674.573907ms ago: executing program 3 (id=3033): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) r4 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r4, &(0x7f0000000300)=""/197, 0xc5, 0x406, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0xe28, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000180)={@private1, 0x14, r7}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.time\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r8}, 0x10) ioctl$TUNSETQUEUE(r8, 0x400454d9, &(0x7f0000000200)={'veth0_to_team\x00', 0x600}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x1) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x8}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00', 0x0, 0x8}, 0x18) pipe(&(0x7f00000005c0)) 583.476992ms ago: executing program 1 (id=3034): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r2, @ANYBLOB="000000000000f5ffb6050000080000004608f0ff760000005e9200000000003e56080000000000008500000007000000b700"/64], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180), &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x91, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x63, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r5 = socket$inet6(0xa, 0x3, 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r4, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) socket$rds(0x15, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x32}, 0x0, @in6=@empty}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000200)=ANY=[@ANYRES8, @ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000013c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x35280000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="86fe766c67e2570500000000000000711121000000000085100000020000008500000008000000950000070000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x6}, 0x70) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000002d00)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)='y', 0xfdc0}, {&(0x7f0000000340)="9801c6a99d4b1f4f801d18f21a969d", 0xf}], 0x2}], 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x8) 392.745576ms ago: executing program 1 (id=3035): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000280)="aa", 0x1, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) (fail_nth: 26) 0s ago: executing program 1 (id=3036): r0 = socket$kcm(0x10, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x24, 0x65, 0x0, 0x70bd29}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) socket(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x9, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876c1d0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r4, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x200000000000000) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}], @key_params=[@NL80211_ATTR_KEY_DEFAULT={0x4}]]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000000010000000000000000000000000000180001801400018008000100ac1414bb08000200ac0314bb240002801400018008b2a6eb93c60a14bd000100ac1414aa080002"], 0x50}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000001"], 0x24d8}], 0x1}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x6) recvmmsg(r6, 0x0, 0x0, 0x12142, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 2.607335][T14666] netlink: 'syz.1.2612': attribute type 3 has an invalid length. [ 412.764161][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.964238][ T35] infiniband A: set down [ 413.326783][ T5106] Bluetooth: hci2: command 0x040f tx timeout [ 413.420019][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.429097][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.631554][ T35] team0 (unregistering): Port device team_slave_1 removed [ 413.688500][ T35] team0 (unregistering): Port device team_slave_0 removed [ 414.051647][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.698314][ T35] team0 (unregistering): Port device team_slave_1 removed [ 414.752559][ T35] team0 (unregistering): Port device team_slave_0 removed [ 414.956991][ T1052] smc: removing ib device A [ 415.372191][T14668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2612'. [ 415.405524][T14685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2618'. [ 415.419677][ T5106] Bluetooth: hci2: command 0x040f tx timeout [ 415.966457][ T1060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.209928][T14703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2625'. [ 416.647372][T14713] netlink: 'syz.3.2627': attribute type 1 has an invalid length. [ 416.668218][T14713] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.2627'. [ 416.712443][T14401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.929727][T14401] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.097600][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.104942][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.244559][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.630527][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.637931][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.442254][T14459] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 418.495473][T14459] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 418.528686][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.538277][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.688007][T14459] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 418.787339][T14459] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 418.948291][T14401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.165586][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.173828][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.284397][T14459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.317124][T14401] veth0_vlan: entered promiscuous mode [ 419.376827][T14459] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.403028][T14401] veth1_vlan: entered promiscuous mode [ 419.425851][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.433350][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.461615][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.468925][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.578362][T14401] veth0_macvtap: entered promiscuous mode [ 419.610281][T14401] veth1_macvtap: entered promiscuous mode [ 419.643093][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.661310][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.679730][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.690556][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.712179][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.724388][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.735529][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.746972][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.762186][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.776534][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.786747][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.797580][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.812738][T14401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.880214][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.923578][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.955131][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.977727][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.008445][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.034449][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.060004][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.082904][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.103458][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.127743][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.145203][T14401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 420.160758][T14401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 420.182059][T14401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 420.243924][T14401] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.252789][T14401] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.278121][T14401] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.302200][T14401] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.331442][T14459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.561216][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.593000][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.627448][T14779] lo speed is unknown, defaulting to 1000 [ 420.691762][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.719688][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.207788][T14459] veth0_vlan: entered promiscuous mode [ 421.257748][T14459] veth1_vlan: entered promiscuous mode [ 421.376190][T14459] veth0_macvtap: entered promiscuous mode [ 421.412488][T14459] veth1_macvtap: entered promiscuous mode [ 421.470746][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.494258][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.520169][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.542473][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.565672][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.583337][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.611861][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.633346][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.650256][T14811] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2654'. [ 421.653383][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.676805][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.690065][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.712309][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.722481][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.738586][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.739381][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.765140][T14459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.838404][T14805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2652'. [ 421.891307][T14815] mac80211_hwsim hwsim44 wlan0 (unregistering): left allmulticast mode [ 421.967884][T14815] team0: Port device macvlan2 removed [ 422.094574][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.132073][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.143086][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.154236][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.164887][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.178360][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.189193][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.199335][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.210684][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.221864][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.232513][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.242760][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.253928][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.263889][T14459] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.274532][T14459] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.287306][T14459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.332753][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.357779][T14459] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.368776][T14459] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.378533][T14459] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.387794][T14459] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.441561][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.553064][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.695897][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.713357][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.873774][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.882020][ T35] bridge_slave_1: left allmulticast mode [ 422.888396][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.898325][ T35] bridge_slave_1: left promiscuous mode [ 422.906559][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.917404][ T35] bridge_slave_0: left allmulticast mode [ 422.923458][ T35] bridge_slave_0: left promiscuous mode [ 422.929228][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.005496][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.538428][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 423.567744][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 423.578070][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 423.604436][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 423.624605][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 423.632384][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 423.687893][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.700187][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.712988][ T35] bond0 (unregistering): Released all slaves [ 423.882971][T14828] lo speed is unknown, defaulting to 1000 [ 423.924182][T14831] ip6gretap0: entered promiscuous mode [ 423.960894][T14831] batadv_slave_0: entered promiscuous mode [ 423.995436][T14831] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 424.003069][T14831] Cannot create hsr debugfs directory [ 424.204347][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.264391][T14835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.290463][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.326226][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.334689][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.628292][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2665'. [ 424.865777][T14855] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 424.884973][T14855] bond2: (slave gre1): Error -95 calling set_mac_address [ 425.041511][T14868] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2666'. [ 425.085362][ T35] hsr_slave_0: left promiscuous mode [ 425.124970][ T35] hsr_slave_1: left promiscuous mode [ 425.136441][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.145931][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.156182][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.163938][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.198187][ T35] veth1_macvtap: left promiscuous mode [ 425.206164][ T35] veth0_macvtap: left promiscuous mode [ 425.211830][ T35] veth1_vlan: left promiscuous mode [ 425.217552][ T35] veth0_vlan: left promiscuous mode [ 425.738422][ T5106] Bluetooth: hci3: command tx timeout [ 425.914204][ T35] team0 (unregistering): Port device team_slave_1 removed [ 425.969382][ T35] team0 (unregistering): Port device team_slave_0 removed [ 426.727127][ T4493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 426.748829][ T4493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 426.759748][ T4493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 426.769842][ T4493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 426.779325][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.810098][ T4493] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 426.830153][ T4493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.006849][ T5106] Bluetooth: hci7: command 0x0406 tx timeout [ 427.059628][T14884] lo speed is unknown, defaulting to 1000 [ 427.753423][T14909] macvlan1: entered promiscuous mode [ 427.760522][T14909] team0: Port device macvlan1 added [ 427.781427][T14909] vlan2: entered promiscuous mode [ 427.788048][T14909] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 427.813600][ T55] Bluetooth: hci3: command tx timeout [ 427.833471][T14828] chnl_net:caif_netlink_parms(): no params data found [ 427.998028][T14923] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2680'. [ 428.271457][T14884] chnl_net:caif_netlink_parms(): no params data found [ 428.365285][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.396907][T14828] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.414909][T14828] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.428314][T14828] bridge_slave_0: entered allmulticast mode [ 428.455494][T14828] bridge_slave_0: entered promiscuous mode [ 428.599290][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.621040][T14942] sctp: [Deprecated]: syz.1.2683 (pid 14942) Use of int in maxseg socket option. [ 428.621040][T14942] Use struct sctp_assoc_value instead [ 428.653907][T14828] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.694589][T14828] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.701974][T14828] bridge_slave_1: entered allmulticast mode [ 428.725933][T14828] bridge_slave_1: entered promiscuous mode [ 428.764226][ T1060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.905842][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.923736][ T55] Bluetooth: hci2: command tx timeout [ 428.979355][T14828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.005610][T14828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.090328][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.176559][T14884] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.189878][T14884] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.203020][T14884] bridge_slave_0: entered allmulticast mode [ 429.211455][T14884] bridge_slave_0: entered promiscuous mode [ 429.325528][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.417021][T14828] team0: Port device team_slave_0 added [ 429.426486][T14884] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.436766][T14884] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.452437][T14884] bridge_slave_1: entered allmulticast mode [ 429.464482][T14884] bridge_slave_1: entered promiscuous mode [ 429.508196][T14828] team0: Port device team_slave_1 added [ 429.550352][T14979] tipc: Enabling of bearer rejected, failed to enable media [ 429.758608][T14884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.825839][T14828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.854323][T14828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.883458][ T55] Bluetooth: hci3: command tx timeout [ 429.908405][T14828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.940214][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2692'. [ 429.950258][T14982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2692'. [ 430.003847][T14884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.044172][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.052546][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.061073][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.077674][T15001] Cannot find del_set index 0 as target [ 430.107746][T14828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.117034][T14828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.165300][T14828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 430.257631][ T35] bridge_slave_1: left allmulticast mode [ 430.258261][T15007] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2699'. [ 430.272638][ T35] bridge_slave_1: left promiscuous mode [ 430.279773][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.285581][T15007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2699'. [ 430.312090][ T35] bridge_slave_0: left allmulticast mode [ 430.331164][ T35] bridge_slave_0: left promiscuous mode [ 430.350643][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.998974][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.011996][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.013461][ T55] Bluetooth: hci2: command tx timeout [ 431.040757][ T35] bond0 (unregistering): Released all slaves [ 431.160275][T15024] FAULT_INJECTION: forcing a failure. [ 431.160275][T15024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 431.175682][T15024] CPU: 0 PID: 15024 Comm: syz.2.2703 Not tainted 6.10.0-syzkaller-04473-g0e03c643dc93 #0 [ 431.185657][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 431.195775][T15024] Call Trace: [ 431.199182][T15024] [ 431.202430][T15024] dump_stack_lvl+0x241/0x360 [ 431.207272][T15024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 431.212531][T15024] ? __pfx__printk+0x10/0x10 [ 431.217154][T15024] ? __pfx_lock_release+0x10/0x10 [ 431.222252][T15024] should_fail_ex+0x3b0/0x4e0 [ 431.226977][T15024] _copy_from_user+0x2f/0xe0 [ 431.231778][T15024] copy_msghdr_from_user+0xae/0x680 [ 431.237024][T15024] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 431.242890][T15024] __sys_sendmsg+0x23d/0x3a0 [ 431.247525][T15024] ? __pfx___sys_sendmsg+0x10/0x10 [ 431.252696][T15024] ? vfs_write+0x7c4/0xc90 [ 431.257206][T15024] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 431.263593][T15024] ? do_syscall_64+0x100/0x230 [ 431.268384][T15024] ? do_syscall_64+0xb6/0x230 [ 431.273346][T15024] do_syscall_64+0xf3/0x230 [ 431.277911][T15024] ? clear_bhb_loop+0x35/0x90 [ 431.282625][T15024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.288545][T15024] RIP: 0033:0x7f8de2775a99 [ 431.293331][T15024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 431.313257][T15024] RSP: 002b:00007f8de3582048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 431.321701][T15024] RAX: ffffffffffffffda RBX: 00007f8de2903f60 RCX: 00007f8de2775a99 [ 431.329788][T15024] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005 [ 431.337791][T15024] RBP: 00007f8de35820a0 R08: 0000000000000000 R09: 0000000000000000 [ 431.345787][T15024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 431.353776][T15024] R13: 000000000000000b R14: 00007f8de2903f60 R15: 00007ffd8034c558 [ 431.361786][T15024] [ 431.415712][T14884] team0: Port device team_slave_0 added [ 431.529401][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2704'. [ 431.647858][T15033] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2704'. [ 431.690315][T14884] team0: Port device team_slave_1 added [ 431.763661][T14828] hsr_slave_0: entered promiscuous mode [ 431.777733][T14828] hsr_slave_1: entered promiscuous mode [ 431.790491][T14828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.798372][T14828] Cannot create hsr debugfs directory [ 431.965190][ T55] Bluetooth: hci3: command tx timeout [ 431.976101][ T1060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.009191][T14884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.049524][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.116403][T14884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 432.212197][T14884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 432.219939][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.266565][T14884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.594702][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2717'. [ 432.788483][T14884] hsr_slave_0: entered promiscuous mode [ 432.810817][T14884] hsr_slave_1: entered promiscuous mode [ 432.834340][T14884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 432.853557][T14884] Cannot create hsr debugfs directory [ 432.881851][ T35] hsr_slave_0: left promiscuous mode [ 432.916061][ T35] hsr_slave_1: left promiscuous mode [ 432.927285][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.935271][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.944498][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.952849][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.029922][ T35] veth1_macvtap: left promiscuous mode [ 433.052141][ T35] veth0_macvtap: left promiscuous mode [ 433.058258][ T35] veth1_vlan: left promiscuous mode [ 433.069344][ T35] veth0_vlan: left promiscuous mode [ 433.083341][ T55] Bluetooth: hci2: command tx timeout [ 433.220161][T15096] netlink: 'syz.1.2723': attribute type 1 has an invalid length. [ 433.229420][T15096] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2723'. [ 434.036076][ T35] team0 (unregistering): Port device team_slave_1 removed [ 434.101489][ T35] team0 (unregistering): Port device team_slave_0 removed [ 434.443749][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.530469][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.572233][T15112] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2729'. [ 434.648863][T15114] --map-set only usable from mangle table [ 435.167467][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.177734][ T1060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.201354][ T55] Bluetooth: hci2: command tx timeout [ 435.455599][T15116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2731'. [ 435.500306][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 435.507249][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 435.517423][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 435.525132][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 435.533887][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 435.542191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 435.550330][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 435.559198][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 435.806793][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.728472][T15128] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 436.735718][T15128] syzkaller0: linktype set to 0 [ 436.827450][T15141] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2740'. [ 436.859878][T15141] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2740'. [ 437.299356][T15156] netlink: 'syz.3.2744': attribute type 1 has an invalid length. [ 437.309115][T15156] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2744'. [ 437.727851][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.885155][T14828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 437.957629][T14828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 438.002903][T14828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 438.040666][T14828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 438.120836][T14884] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 438.164303][T14884] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 438.204600][T14884] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 438.246604][T14884] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 438.389344][T15185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2754'. [ 438.594166][T14828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.688519][T14828] 8021q: adding VLAN 0 to HW filter on device team0 [ 438.691324][T15191] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(270923527670547) <= P.seqno(0) <= S.SWH(270923527670621)) and (P.ackno exists or LAWL(242467714358054) <= P.ackno(242467714358057) <= S.AWH(242467714358057), sending SYNC... [ 438.751513][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.759446][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 438.787352][T14884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 438.813170][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.821331][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.940038][T14884] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.035279][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.042954][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.086300][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.094431][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 439.310326][T14884] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 439.393452][T15212] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2760'. [ 439.454873][T15217] FAULT_INJECTION: forcing a failure. [ 439.454873][T15217] name failslab, interval 1, probability 0, space 0, times 0 [ 439.468722][T15217] CPU: 1 PID: 15217 Comm: syz.1.2761 Not tainted 6.10.0-syzkaller-04473-g0e03c643dc93 #0 [ 439.478777][T15217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 439.488891][T15217] Call Trace: [ 439.492217][T15217] [ 439.495397][T15217] dump_stack_lvl+0x241/0x360 [ 439.500848][T15217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.506281][T15217] ? __pfx__printk+0x10/0x10 [ 439.510940][T15217] ? bpf_test_run_xdp_live+0x5bf/0x2110 [ 439.516732][T15217] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 439.523344][T15217] should_fail_ex+0x3b0/0x4e0 [ 439.528147][T15217] should_failslab+0x9/0x20 [ 439.533728][T15217] kmem_cache_alloc_bulk_noprof+0x7a/0x770 [ 439.540330][T15217] bpf_test_run_xdp_live+0x1927/0x2110 [ 439.546082][T15217] ? bpf_dispatcher_change_prog+0xd88/0xf10 [ 439.552476][T15217] ? bpf_test_run_xdp_live+0x5bf/0x2110 [ 439.558181][T15217] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 439.564234][T15217] ? synchronize_rcu+0x11b/0x360 [ 439.569332][T15217] ? __pfx_synchronize_rcu+0x10/0x10 [ 439.577303][T15217] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 439.586033][T15217] ? 0xffffffffa0001bd4 [ 439.590624][T15217] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 439.597211][T15217] ? _copy_from_user+0xa6/0xe0 [ 439.602409][T15217] ? bpf_test_init+0x15a/0x180 [ 439.610898][T15217] ? xdp_convert_md_to_buff+0x5b/0x330 [ 439.617501][T15217] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 439.623073][T15217] ? __pfx_lock_release+0x10/0x10 [ 439.629010][T15217] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 439.635308][T15217] ? __fget_files+0x29/0x470 [ 439.640440][T15217] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 439.647121][T15217] bpf_prog_test_run+0x33a/0x3b0 [ 439.654387][T15217] __sys_bpf+0x48d/0x810 [ 439.658976][T15217] ? __pfx___sys_bpf+0x10/0x10 [ 439.664659][T15217] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 439.671362][T15217] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 439.678138][T15217] ? do_syscall_64+0x100/0x230 [ 439.683354][T15217] __x64_sys_bpf+0x7c/0x90 [ 439.688466][T15217] do_syscall_64+0xf3/0x230 [ 439.693345][T15217] ? clear_bhb_loop+0x35/0x90 [ 439.698526][T15217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.705275][T15217] RIP: 0033:0x7f0949975a99 [ 439.710397][T15217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.730714][T15217] RSP: 002b:00007f094a762048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 439.740178][T15217] RAX: ffffffffffffffda RBX: 00007f0949b03f60 RCX: 00007f0949975a99 [ 439.749169][T15217] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 439.758396][T15217] RBP: 00007f094a7620a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.767492][T15217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 439.776109][T15217] R13: 000000000000000b R14: 00007f0949b03f60 R15: 00007ffe6a7602d8 [ 439.785312][T15217] [ 439.787087][T14828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.799813][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.048557][T15230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2763'. [ 440.082048][T15230] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2763'. [ 440.097206][T14828] veth0_vlan: entered promiscuous mode [ 440.151847][T14828] veth1_vlan: entered promiscuous mode [ 440.261744][T14884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.288252][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.290478][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.315183][T15238] hsr0: entered promiscuous mode [ 440.329834][T15237] hsr0: left promiscuous mode [ 440.415931][T14828] veth0_macvtap: entered promiscuous mode [ 440.494787][T14828] veth1_macvtap: entered promiscuous mode [ 440.576188][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.623653][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.673234][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.707079][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.737685][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.776766][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.791963][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.813260][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.827193][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.838819][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.853466][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 440.864816][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 440.878187][T14828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.924359][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.934826][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.945291][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 440.949630][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.981886][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.015404][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.053398][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.073589][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.080632][T15269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2772'. [ 441.105623][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.116949][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.130164][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.143554][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.154630][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.166358][T14828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 441.177203][T14828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.189346][T14828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 441.239832][T14828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.259318][T14828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.269706][T14828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.278829][T14828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.442835][T15274] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2773'. [ 441.511242][T14884] veth0_vlan: entered promiscuous mode [ 441.624602][T14884] veth1_vlan: entered promiscuous mode [ 441.632619][ T2454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.643210][ T2454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.750719][ T1060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 441.774333][T14884] veth0_macvtap: entered promiscuous mode [ 441.778993][ T1060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 441.809871][T14884] veth1_macvtap: entered promiscuous mode [ 441.908214][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.935657][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.955177][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.970016][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 441.981396][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 441.992365][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.008781][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.021674][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.043757][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.066733][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.090142][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.112673][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.139153][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.152049][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.178905][T14884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.298045][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.314747][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.333328][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.353194][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.377430][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.403471][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.423945][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.448196][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.466197][T15304] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 442.471186][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.500583][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.512816][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.524972][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.535614][T14884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.547618][T14884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.561149][T14884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.591007][T14884] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.625065][T14884] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.635430][T14884] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.651412][T14884] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.875080][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.885908][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.901760][T15315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2785'. [ 442.986511][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.002942][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.486012][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.510934][ T990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.108067][ T990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.163778][T15343] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2790'. [ 444.280217][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 444.294847][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 444.298388][ T990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.304947][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 444.329901][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 444.342543][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 444.350559][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 444.438532][ T990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.487412][T15345] lo speed is unknown, defaulting to 1000 [ 444.628986][ T990] bridge_slave_1: left allmulticast mode [ 444.650543][ T990] bridge_slave_1: left promiscuous mode [ 444.662009][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.681940][ T990] bridge_slave_0: left allmulticast mode [ 444.692401][ T990] bridge_slave_0: left promiscuous mode [ 444.701426][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.191129][T15353] FAULT_INJECTION: forcing a failure. [ 445.191129][T15353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.234905][T15353] CPU: 1 PID: 15353 Comm: syz.2.2794 Not tainted 6.10.0-syzkaller-04473-g0e03c643dc93 #0 [ 445.245106][T15353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 445.255309][T15353] Call Trace: [ 445.258821][T15353] [ 445.261954][T15353] dump_stack_lvl+0x241/0x360 [ 445.267407][T15353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 445.272945][T15353] ? __pfx__printk+0x10/0x10 [ 445.277611][T15353] ? __pfx_lock_release+0x10/0x10 [ 445.282993][T15353] should_fail_ex+0x3b0/0x4e0 [ 445.288287][T15353] _copy_from_user+0x2f/0xe0 [ 445.293038][T15353] copy_msghdr_from_user+0xae/0x680 [ 445.298522][T15353] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 445.304484][T15353] __sys_sendmsg+0x23d/0x3a0 [ 445.309259][T15353] ? __pfx___sys_sendmsg+0x10/0x10 [ 445.314880][T15353] ? vfs_write+0x7c4/0xc90 [ 445.319421][T15353] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 445.326154][T15353] ? do_syscall_64+0x100/0x230 [ 445.330986][T15353] ? do_syscall_64+0xb6/0x230 [ 445.336094][T15353] do_syscall_64+0xf3/0x230 [ 445.340776][T15353] ? clear_bhb_loop+0x35/0x90 [ 445.346077][T15353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.352340][T15353] RIP: 0033:0x7f8de2775a99 [ 445.356858][T15353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.377402][T15353] RSP: 002b:00007f8de3582048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.386730][T15353] RAX: ffffffffffffffda RBX: 00007f8de2903f60 RCX: 00007f8de2775a99 [ 445.394786][T15353] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 445.403184][T15353] RBP: 00007f8de35820a0 R08: 0000000000000000 R09: 0000000000000000 [ 445.411530][T15353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.420997][T15353] R13: 000000000000000b R14: 00007f8de2903f60 R15: 00007ffd8034c558 [ 445.429286][T15353] [ 445.461552][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.529939][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.557703][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.598126][ T990] bond0 (unregistering): Released all slaves [ 445.619898][ T5106] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 445.634052][ T5106] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 445.648992][ T5106] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 445.661504][ T5106] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 445.684869][ T5106] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 445.693622][ T5106] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 445.737797][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2795'. [ 445.753908][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2795'. [ 446.044486][ T1060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.102858][T15358] lo speed is unknown, defaulting to 1000 [ 446.303573][T15375] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2799'. [ 446.451443][ T5106] Bluetooth: hci2: command tx timeout [ 446.619463][T15394] Bluetooth: MGMT ver 1.23 [ 446.684971][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.693302][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.701750][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.766628][T15345] chnl_net:caif_netlink_parms(): no params data found [ 446.959071][ T990] hsr_slave_0: left promiscuous mode [ 446.979795][ T990] hsr_slave_1: left promiscuous mode [ 446.999253][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.023457][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.043603][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.051488][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.130039][T15410] netlink: 'syz.2.2810': attribute type 8 has an invalid length. [ 447.135290][ T990] veth1_macvtap: left promiscuous mode [ 447.142112][T15410] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.2810'. [ 447.146290][ T990] veth0_macvtap: left promiscuous mode [ 447.173530][ T990] veth1_vlan: left promiscuous mode [ 447.179671][ T990] veth0_vlan: left promiscuous mode [ 447.331035][T15419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2813'. [ 447.723835][ T5106] Bluetooth: hci3: command tx timeout [ 448.252242][ T990] team0 (unregistering): Port device team_slave_1 removed [ 448.316861][ T990] team0 (unregistering): Port device team_slave_0 removed [ 448.528397][ T5106] Bluetooth: hci2: command tx timeout [ 449.050461][T15436] netlink: 'syz.3.2817': attribute type 4 has an invalid length. [ 449.245050][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.343428][T15345] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.351970][T15345] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.370226][T15345] bridge_slave_0: entered allmulticast mode [ 449.395883][T15345] bridge_slave_0: entered promiscuous mode [ 449.424946][T15345] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.447042][T15345] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.475088][T15345] bridge_slave_1: entered allmulticast mode [ 449.492825][T15345] bridge_slave_1: entered promiscuous mode [ 449.498246][T15453] netlink: 212872 bytes leftover after parsing attributes in process `syz.2.2822'. [ 449.710240][T15345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.804650][ T5106] Bluetooth: hci3: command tx timeout [ 449.826732][T15345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.857134][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2825'. [ 450.042854][T15345] team0: Port device team_slave_0 added [ 450.071224][T15345] team0: Port device team_slave_1 added [ 450.157215][T15345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.173289][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.220663][T15345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.254930][T15358] chnl_net:caif_netlink_parms(): no params data found [ 450.268626][T15345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.293317][T15345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.337321][T15345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.452764][T15345] hsr_slave_0: entered promiscuous mode [ 450.485713][T15345] hsr_slave_1: entered promiscuous mode [ 450.503627][T15345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.511276][T15345] Cannot create hsr debugfs directory [ 450.604236][ T5106] Bluetooth: hci2: command tx timeout [ 451.015312][ T990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.065422][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2838'. [ 451.148350][T15508] netlink: 'syz.2.2837': attribute type 6 has an invalid length. [ 451.164903][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.175286][ T1068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.261823][ T990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.275074][T15519] xt_socket: unknown flags 0x8 [ 451.594464][ T990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.651002][T15524] netlink: 'syz.2.2841': attribute type 4 has an invalid length. [ 451.731942][T15525] netlink: 'syz.1.2842': attribute type 7 has an invalid length. [ 451.804225][ T1060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.884115][ T5106] Bluetooth: hci3: command tx timeout [ 451.929888][ T990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.041422][T15535] syzkaller1: entered promiscuous mode [ 452.048836][T15535] syzkaller1: entered allmulticast mode [ 452.088160][T15543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2846'. [ 452.197443][T15358] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.218485][T15358] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.226953][T15548] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 452.243725][T15358] bridge_slave_0: entered allmulticast mode [ 452.264391][T15358] bridge_slave_0: entered promiscuous mode [ 452.340240][T15358] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.348096][T15358] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.356141][T15358] bridge_slave_1: entered allmulticast mode [ 452.364955][T15358] bridge_slave_1: entered promiscuous mode [ 452.444443][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.454870][ T1068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.565446][T15358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.636344][T15358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.684120][ T5106] Bluetooth: hci2: command tx timeout [ 452.711371][ T990] bridge_slave_1: left allmulticast mode [ 452.731105][ T990] bridge_slave_1: left promiscuous mode [ 452.751238][ T990] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.775850][ T990] bridge_slave_0: left allmulticast mode [ 452.781699][ T990] bridge_slave_0: left promiscuous mode [ 452.803598][ T990] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.411006][ T990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.423783][ T990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.437306][ T990] bond0 (unregistering): Released all slaves [ 453.553763][T15568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 453.725087][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 453.840704][T15358] team0: Port device team_slave_0 added [ 453.919228][T15578] macvlan1: Device is already in use. [ 453.964161][ T5106] Bluetooth: hci3: command tx timeout [ 453.981433][T15358] team0: Port device team_slave_1 added [ 454.143847][T15598] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2858'. [ 454.336816][T15599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'. [ 454.368767][T15601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2863'. [ 454.382940][T15605] dccp_invalid_packet: P.Data Offset(4) too small [ 454.535616][T15358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.542812][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.602417][T15358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.661964][ T990] hsr_slave_0: left promiscuous mode [ 454.676816][ T990] hsr_slave_1: left promiscuous mode [ 454.694407][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.704317][ T990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.726625][ T990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.743236][ T990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.780079][ T990] veth1_macvtap: left promiscuous mode [ 454.786564][ T990] veth0_macvtap: left promiscuous mode [ 454.792665][ T990] veth1_vlan: left promiscuous mode [ 454.798272][ T990] veth0_vlan: left promiscuous mode [ 455.008408][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.233677][T15628] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2870'. [ 455.794688][ T990] team0 (unregistering): Port device team_slave_1 removed [ 455.865354][ T990] team0 (unregistering): Port device team_slave_0 removed [ 456.498022][T15358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.507603][T15358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.535887][T15358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.569315][T15612] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 456.671966][T15358] hsr_slave_0: entered promiscuous mode [ 456.705550][T15358] hsr_slave_1: entered promiscuous mode [ 456.734721][T15358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.742796][T15358] Cannot create hsr debugfs directory [ 456.925896][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.935110][ T1068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.943495][ T1068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.184432][T15345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 457.310639][T15656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2879'. [ 457.335435][T15653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2878'. [ 457.348849][T15656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2879'. [ 457.408285][T15653] bond4: entered promiscuous mode [ 457.415535][T15345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 457.429212][T15653] Unknown options in mask a620 [ 457.498245][T15659] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 457.520511][T15659] bond4: (slave ip6gre2): Error -95 calling set_mac_address [ 457.541463][T15345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 457.553077][T15345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 457.928597][T15345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.010492][T10552] bridge0: port 3(syz_tun) entered disabled state [ 458.066483][T10552] syz_tun (unregistering): left allmulticast mode [ 458.079080][T10552] syz_tun (unregistering): left promiscuous mode [ 458.086850][T10552] bridge0: port 3(syz_tun) entered disabled state [ 458.122707][T15345] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.185530][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.193055][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.205848][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.214266][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.275424][ T6032] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.282625][ T6032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.405158][T15358] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 458.429209][T15358] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 458.458929][T15358] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 458.508294][T15358] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 458.721760][T15682] FAULT_INJECTION: forcing a failure. [ 458.721760][T15682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.754473][T15682] CPU: 0 PID: 15682 Comm: syz.3.2888 Not tainted 6.10.0-syzkaller-04473-g0e03c643dc93 #0 [ 458.765762][T15682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 458.776316][T15682] Call Trace: [ 458.779741][T15682] [ 458.782992][T15682] dump_stack_lvl+0x241/0x360 [ 458.787954][T15682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.793324][T15682] ? __pfx__printk+0x10/0x10 [ 458.797975][T15682] ? __pfx_lock_release+0x10/0x10 [ 458.803067][T15682] should_fail_ex+0x3b0/0x4e0 [ 458.808914][T15682] _copy_from_iter+0x1f6/0x1960 [ 458.814147][T15682] ? __virt_addr_valid+0x183/0x530 [ 458.819336][T15682] ? __pfx_lock_release+0x10/0x10 [ 458.824443][T15682] ? __alloc_skb+0x28f/0x440 [ 458.829491][T15682] ? __pfx__copy_from_iter+0x10/0x10 [ 458.835033][T15682] ? __virt_addr_valid+0x183/0x530 [ 458.840319][T15682] ? __virt_addr_valid+0x183/0x530 [ 458.845506][T15682] ? __virt_addr_valid+0x45f/0x530 [ 458.850746][T15682] ? __check_object_size+0x49c/0x900 [ 458.856085][T15682] netlink_sendmsg+0x73d/0xcb0 [ 458.860992][T15682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.866683][T15682] ? __import_iovec+0x536/0x820 [ 458.871733][T15682] ? aa_sock_msg_perm+0x91/0x160 [ 458.876802][T15682] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 458.882733][T15682] ? security_socket_sendmsg+0x87/0xb0 [ 458.888336][T15682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 458.893855][T15682] __sock_sendmsg+0x221/0x270 [ 458.898886][T15682] ____sys_sendmsg+0x525/0x7d0 [ 458.903902][T15682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 458.909903][T15682] __sys_sendmsg+0x2b0/0x3a0 [ 458.915263][T15682] ? __pfx___sys_sendmsg+0x10/0x10 [ 458.920696][T15682] ? vfs_write+0x7c4/0xc90 [ 458.925677][T15682] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 458.932139][T15682] ? do_syscall_64+0x100/0x230 [ 458.936954][T15682] ? do_syscall_64+0xb6/0x230 [ 458.941653][T15682] do_syscall_64+0xf3/0x230 [ 458.946179][T15682] ? clear_bhb_loop+0x35/0x90 [ 458.950902][T15682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.956822][T15682] RIP: 0033:0x7fb318775a99 [ 458.961344][T15682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.981817][T15682] RSP: 002b:00007fb3194ef048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 458.990637][T15682] RAX: ffffffffffffffda RBX: 00007fb318903f60 RCX: 00007fb318775a99 [ 458.998718][T15682] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 459.007022][T15682] RBP: 00007fb3194ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 459.016509][T15682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.025059][T15682] R13: 000000000000000b R14: 00007fb318903f60 R15: 00007ffd74bbb7d8 [ 459.033281][T15682] [ 459.216775][T15345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.258427][T15358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.333949][T15358] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.364702][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.371899][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.441341][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.448754][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.487064][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 459.529407][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 459.547160][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 459.560168][T15345] veth0_vlan: entered promiscuous mode [ 459.581487][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 459.599363][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 459.608536][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 459.633809][T15345] veth1_vlan: entered promiscuous mode [ 459.668882][T15693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2890'. [ 459.832482][T15693] bond5: entered promiscuous mode [ 459.861606][T15358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.905183][T15693] Unknown options in mask a620 [ 459.912693][T15701] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 459.938759][T15701] bond5: (slave ip6gre2): Error -95 calling set_mac_address [ 460.101607][T15690] lo speed is unknown, defaulting to 1000 [ 460.104783][T15705] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2894'. [ 460.148069][T15345] veth0_macvtap: entered promiscuous mode [ 460.188999][T15345] veth1_macvtap: entered promiscuous mode [ 460.290977][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.323306][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.343682][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.383267][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.405888][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.453398][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.484875][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.523007][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.546811][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.585565][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.614677][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 460.634522][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.659043][T15345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.710997][T15719] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2898'. [ 460.725995][T15722] FAULT_INJECTION: forcing a failure. [ 460.725995][T15722] name failslab, interval 1, probability 0, space 0, times 0 [ 460.740136][T15722] CPU: 0 PID: 15722 Comm: syz.3.2899 Not tainted 6.10.0-syzkaller-04473-g0e03c643dc93 #0 [ 460.750015][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 460.760208][T15722] Call Trace: [ 460.763626][T15722] [ 460.766618][T15722] dump_stack_lvl+0x241/0x360 [ 460.771362][T15722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.776705][T15722] ? __pfx__printk+0x10/0x10 [ 460.781562][T15722] should_fail_ex+0x3b0/0x4e0 [ 460.786402][T15722] ? radix_tree_node_alloc+0x8b/0x3c0 [ 460.786651][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.791832][T15722] should_failslab+0x9/0x20 [ 460.806821][T15722] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 460.812340][T15722] radix_tree_node_alloc+0x8b/0x3c0 [ 460.817620][T15722] idr_get_free+0x296/0xab0 [ 460.820309][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.822454][T15722] idr_alloc_u32+0x195/0x330 [ 460.837209][T15722] ? __pfx_idr_alloc_u32+0x10/0x10 [ 460.842884][T15722] ? __pfx_lock_acquire+0x10/0x10 [ 460.843718][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.847959][T15722] idr_alloc_cyclic+0x106/0x300 [ 460.863849][T15722] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 460.869287][T15722] ? __radix_tree_preload+0x71c/0x860 [ 460.872540][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.874691][T15722] ? __radix_tree_preload+0x80/0x860 [ 460.874728][T15722] ? btf_new_fd+0x654/0xd30 [ 460.874762][T15722] btf_new_fd+0x673/0xd30 [ 460.874801][T15722] ? __pfx_btf_new_fd+0x10/0x10 [ 460.874832][T15722] ? bpf_btf_load+0xcf/0x1a0 [ 460.874862][T15722] __sys_bpf+0x6ef/0x810 [ 460.874892][T15722] ? __pfx___sys_bpf+0x10/0x10 [ 460.874933][T15722] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 460.874967][T15722] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 460.874998][T15722] ? do_syscall_64+0x100/0x230 [ 460.875029][T15722] __x64_sys_bpf+0x7c/0x90 [ 460.893283][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.894753][T15722] do_syscall_64+0xf3/0x230 [ 460.899183][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.904032][T15722] ? clear_bhb_loop+0x35/0x90 [ 460.904074][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.904104][T15722] RIP: 0033:0x7fb318775a99 [ 460.904127][T15722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.904147][T15722] RSP: 002b:00007fb3194ef048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.904176][T15722] RAX: ffffffffffffffda RBX: 00007fb318903f60 RCX: 00007fb318775a99 [ 460.904196][T15722] RDX: 0000000000000020 RSI: 0000000020000440 RDI: 0000000000000012 [ 460.904213][T15722] RBP: 00007fb3194ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 460.904231][T15722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.904247][T15722] R13: 000000000000000b R14: 00007fb318903f60 R15: 00007ffd74bbb7d8 [ 460.904288][T15722] [ 460.925428][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.038498][T15719] netlink: 'syz.1.2898': attribute type 1 has an invalid length. [ 461.048817][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.069797][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2898'. [ 461.107077][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.117706][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.132380][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.143052][T15345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.156214][T15345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.185607][T15345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.247309][T15345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.256779][T15345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.266715][T15345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.277044][T15345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.420315][T15358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.643345][ T5106] Bluetooth: hci4: command tx timeout [ 461.757643][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.773472][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.859542][T15690] chnl_net:caif_netlink_parms(): no params data found [ 461.902350][ T2454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.926053][ T2454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.055819][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.147500][T15690] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.158890][T15690] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.169031][T15690] bridge_slave_0: entered allmulticast mode [ 462.177857][T15690] bridge_slave_0: entered promiscuous mode [ 462.261405][T15690] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.269848][T15690] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.281106][T15690] bridge_slave_1: entered allmulticast mode [ 462.289916][T15690] bridge_slave_1: entered promiscuous mode [ 462.387506][T15690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.409707][T15690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.566241][T15690] team0: Port device team_slave_0 added [ 462.619248][T15358] veth0_vlan: entered promiscuous mode [ 462.656054][T15690] team0: Port device team_slave_1 added [ 462.687344][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.705073][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.865458][T15766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2910'. [ 462.909280][T15690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.931505][T15690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.960090][T15690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.983779][T15358] veth1_vlan: entered promiscuous mode [ 463.000440][T15690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.008632][T15690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.038804][T15690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.201838][T15690] hsr_slave_0: entered promiscuous mode [ 463.224544][T15690] hsr_slave_1: entered promiscuous mode [ 463.233420][T15690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 463.249787][T15690] Cannot create hsr debugfs directory [ 463.387357][T15358] veth0_macvtap: entered promiscuous mode [ 463.425833][T15358] veth1_macvtap: entered promiscuous mode [ 463.479428][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.508444][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.527474][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.538359][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.548763][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.559974][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.570899][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.587631][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.600254][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.614514][T15784] Unknown options in mask a620 [ 463.619570][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.632082][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.645986][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.656627][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 463.668093][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.697531][T15358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.728277][T15780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2914'. [ 463.738794][ T5106] Bluetooth: hci4: command tx timeout [ 463.784671][T15780] bond6: entered promiscuous mode [ 463.838456][T15783] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 463.856153][T15789] netlink: 264 bytes leftover after parsing attributes in process `syz.3.2918'. [ 463.874588][T15783] bond6: (slave ip6gre2): Error -95 calling set_mac_address [ 463.919366][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 463.950578][T15791] FAULT_INJECTION: forcing a failure. [ 463.950578][T15791] name failslab, interval 1, probability 0, space 0, times 0 [ 463.953410][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.967088][T15791] CPU: 1 PID: 15791 Comm: syz.3.2919 Not tainted 6.10.0-syzkaller-04473-g0e03c643dc93 #0 [ 463.986073][T15791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 463.996708][T15791] Call Trace: [ 464.000033][T15791] [ 464.003059][T15791] dump_stack_lvl+0x241/0x360 [ 464.007981][T15791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.013308][T15791] ? __pfx__printk+0x10/0x10 [ 464.017926][T15791] should_fail_ex+0x3b0/0x4e0 [ 464.023170][T15791] ? __alloc_skb+0x1c3/0x440 [ 464.027822][T15791] should_failslab+0x9/0x20 [ 464.032383][T15791] kmem_cache_alloc_node_noprof+0x71/0x320 [ 464.038247][T15791] __alloc_skb+0x1c3/0x440 [ 464.042799][T15791] ? trace_contention_end+0x3c/0x120 [ 464.048128][T15791] ? __pfx___alloc_skb+0x10/0x10 [ 464.053106][T15791] ? __local_bh_enable_ip+0x168/0x200 [ 464.058751][T15791] ? hci_sock_sendmsg+0x617/0x11c0 [ 464.063978][T15791] ? lockdep_hardirqs_on+0x99/0x150 [ 464.069200][T15791] hci_mgmt_cmd+0x1c1/0x11d0 [ 464.073838][T15791] hci_sock_sendmsg+0x7b8/0x11c0 [ 464.078889][T15791] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 464.085349][T15791] ? aa_sock_msg_perm+0x91/0x160 [ 464.090433][T15791] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 464.095776][T15791] ? security_socket_sendmsg+0x87/0xb0 [ 464.101469][T15791] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 464.107218][T15791] __sock_sendmsg+0x221/0x270 [ 464.111937][T15791] sock_write_iter+0x2dd/0x400 [ 464.116824][T15791] ? __pfx_sock_write_iter+0x10/0x10 [ 464.122752][T15791] ? bpf_lsm_file_permission+0x9/0x10 [ 464.128239][T15791] ? security_file_permission+0x7f/0xa0 [ 464.133818][T15791] vfs_write+0xa72/0xc90 [ 464.138091][T15791] ? __pfx_sock_write_iter+0x10/0x10 [ 464.143394][T15791] ? __pfx_vfs_write+0x10/0x10 [ 464.148479][T15791] ksys_write+0x1a0/0x2c0 [ 464.153362][T15791] ? __pfx_ksys_write+0x10/0x10 [ 464.158452][T15791] ? do_syscall_64+0x100/0x230 [ 464.163339][T15791] ? do_syscall_64+0xb6/0x230 [ 464.168236][T15791] do_syscall_64+0xf3/0x230 [ 464.172987][T15791] ? clear_bhb_loop+0x35/0x90 [ 464.177821][T15791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.183748][T15791] RIP: 0033:0x7fb318775a99 [ 464.188203][T15791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.209429][T15791] RSP: 002b:00007fb3194ef048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 464.218570][T15791] RAX: ffffffffffffffda RBX: 00007fb318903f60 RCX: 00007fb318775a99 [ 464.226915][T15791] RDX: 0000000000000007 RSI: 0000000020000340 RDI: 0000000000000005 [ 464.234908][T15791] RBP: 00007fb3194ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 464.242893][T15791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.250878][T15791] R13: 000000000000000b R14: 00007fb318903f60 R15: 00007ffd74bbb7d8 [ 464.258984][T15791] [ 464.273526][ T1060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.276932][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.299859][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.312106][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.334631][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.364146][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.378544][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.392429][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.413751][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.440624][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.453449][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.475650][T15358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 464.513946][T15358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 464.529477][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2921'. [ 464.535619][T15358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 464.598376][T15358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.611954][T15358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.622786][T15358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.632590][T15358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.880465][T15690] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.140919][ T1060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.231999][T15690] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.281284][ T1060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.375969][T15690] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.429829][ T1060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.496004][T15690] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.550923][ T1060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.586007][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.603560][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.644455][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.653840][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.806382][ T55] Bluetooth: hci4: command tx timeout [ 465.905644][ T1060] bridge_slave_1: left allmulticast mode [ 465.911841][ T1060] bridge_slave_1: left promiscuous mode [ 465.919690][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.929919][ T1060] bridge_slave_0: left allmulticast mode [ 465.936468][ T1060] bridge_slave_0: left promiscuous mode [ 465.944320][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.964055][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.364071][ T5106] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 466.372522][ T5106] Bluetooth: hci0: command 0x0406 tx timeout [ 466.733919][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 466.754380][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 466.765874][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 466.775473][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.791950][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 466.800440][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 466.810933][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 466.811235][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.846112][ T1060] bond0 (unregistering): Released all slaves [ 466.880260][T15813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2925'. [ 466.937843][T15690] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 467.005304][T15690] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.060433][T15816] lo speed is unknown, defaulting to 1000 [ 467.069554][T15690] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.081533][T15690] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.184560][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.545990][T15690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.591810][ T1060] hsr_slave_0: left promiscuous mode [ 467.620277][ T1060] hsr_slave_1: left promiscuous mode [ 467.634145][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.642747][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.651996][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.660355][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.696111][ T1060] veth1_macvtap: left promiscuous mode [ 467.701727][ T1060] veth0_macvtap: left promiscuous mode [ 467.708198][ T1060] veth1_vlan: left promiscuous mode [ 467.714140][ T1060] veth0_vlan: left promiscuous mode [ 467.883955][ T55] Bluetooth: hci4: command tx timeout [ 468.055291][T15828] IPVS: set_ctl: invalid protocol: 137 172.20.20.52:20000 [ 468.298722][ T4493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 468.333283][ T4493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 468.342567][ T4493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 468.365720][ T4493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 468.377509][ T4493] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 468.386022][ T4493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 468.460586][ T1068] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.789933][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 468.848673][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 468.924005][ T5106] Bluetooth: hci2: command tx timeout [ 469.601907][T15690] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.737500][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.745760][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.808299][T15843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2933'. [ 469.826345][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.833685][ T6029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.885306][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.893409][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.919371][T15831] lo speed is unknown, defaulting to 1000 [ 469.925102][T15816] chnl_net:caif_netlink_parms(): no params data found [ 470.313576][T15816] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.326731][T15816] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.353429][T15816] bridge_slave_0: entered allmulticast mode [ 470.362108][T15816] bridge_slave_0: entered promiscuous mode [ 470.414452][T15816] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.433478][T15816] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.452176][T15816] bridge_slave_1: entered allmulticast mode [ 470.468942][T15816] bridge_slave_1: entered promiscuous mode [ 470.525056][ T5106] Bluetooth: hci3: command tx timeout [ 470.616224][T15816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.731451][ T1060] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.796569][T15816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.000448][ T1060] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.016294][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.018371][ T5106] Bluetooth: hci2: command 0x041b tx timeout [ 471.070351][T15869] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 471.118976][T15816] team0: Port device team_slave_0 added [ 471.151794][T15816] team0: Port device team_slave_1 added [ 471.225140][T15690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.278414][ T1060] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.452096][ T1060] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.487694][T15816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.497809][T15816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.525868][T15816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.581770][T15816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.589539][T15816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.618044][T15816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.787287][T15816] hsr_slave_0: entered promiscuous mode [ 471.804477][T15816] hsr_slave_1: entered promiscuous mode [ 471.811501][T15816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 471.828638][T15816] Cannot create hsr debugfs directory [ 472.089874][T15831] chnl_net:caif_netlink_parms(): no params data found [ 472.192792][T15895] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2945'. [ 472.285811][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.309469][ T1060] bridge_slave_1: left allmulticast mode [ 472.328147][ T1060] bridge_slave_1: left promiscuous mode [ 472.346882][ T1060] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.366558][ T1060] bridge_slave_0: left allmulticast mode [ 472.372288][ T1060] bridge_slave_0: left promiscuous mode [ 472.392200][ T1060] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.605396][ T55] Bluetooth: hci3: command tx timeout [ 472.925118][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.996275][ T1060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.014447][ T1060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 473.027988][ T1060] bond0 (unregistering): Released all slaves [ 473.061477][T15905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2948'. [ 473.079852][T15907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2950'. [ 473.099624][ T55] Bluetooth: hci2: command 0x041b tx timeout [ 473.422389][T15919] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 473.493034][T15831] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.503464][T15831] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.510836][T15831] bridge_slave_0: entered allmulticast mode [ 473.521628][T15831] bridge_slave_0: entered promiscuous mode [ 473.646692][T15690] veth0_vlan: entered promiscuous mode [ 473.663069][T15831] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.674654][T15831] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.694243][T15831] bridge_slave_1: entered allmulticast mode [ 473.712722][T15831] bridge_slave_1: entered promiscuous mode [ 473.780406][T15831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.990212][T15831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.157474][T15690] veth1_vlan: entered promiscuous mode [ 474.199180][T15937] Cannot find add_set index 0 as target [ 474.205143][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.222451][ T1060] hsr_slave_0: left promiscuous mode [ 474.231352][ T1060] hsr_slave_1: left promiscuous mode [ 474.263681][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.271177][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.292807][ T1060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.301847][ T1060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.358426][ T1060] veth1_macvtap: left promiscuous mode [ 474.372189][ T1060] veth0_macvtap: left promiscuous mode [ 474.378203][ T1060] veth1_vlan: left promiscuous mode [ 474.393404][ T1060] veth0_vlan: left promiscuous mode [ 474.684399][ T55] Bluetooth: hci3: command tx timeout [ 474.844997][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.121978][ T1060] team0 (unregistering): Port device team_slave_1 removed [ 475.170589][ T55] Bluetooth: hci2: command 0x041b tx timeout [ 475.192076][ T1060] team0 (unregistering): Port device team_slave_0 removed [ 475.489295][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.856712][T15831] team0: Port device team_slave_0 added [ 475.940018][T15831] team0: Port device team_slave_1 added [ 476.102462][T15831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.135111][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.166145][T15831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.211107][T15831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.228943][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.255627][T15831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.282383][T15956] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2966'. [ 476.390233][T15831] hsr_slave_0: entered promiscuous mode [ 476.398542][T15831] hsr_slave_1: entered promiscuous mode [ 476.412311][T15831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.421996][T15831] Cannot create hsr debugfs directory [ 476.512878][T15690] veth0_macvtap: entered promiscuous mode [ 476.582399][T15690] veth1_macvtap: entered promiscuous mode [ 476.738798][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.754572][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.770721][ T1060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.771290][ T55] Bluetooth: hci3: command tx timeout [ 476.781875][T15960] netlink: 'syz.3.2967': attribute type 3 has an invalid length. [ 476.800181][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.806720][T15960] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2967'. [ 476.810922][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.830683][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.841425][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.853147][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.863944][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.874733][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.885336][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.896913][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.907794][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.920081][T15690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.930463][T15816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.978644][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 476.996724][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.023177][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.039742][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.050858][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.062831][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.087190][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.098681][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.110648][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.121561][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.132254][T15690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.149707][T15690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.164671][T15690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.172086][T15816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 477.188227][T15816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 477.230222][T15690] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.240247][T15690] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.249908][ T55] Bluetooth: hci2: command 0x041b tx timeout [ 477.258422][T15690] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.267941][T15690] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.279710][T15816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 477.557397][T15969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2971'. [ 477.617634][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.646745][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.700867][T15816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.783353][T15816] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.838585][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.846040][ T6033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.934067][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.941388][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.024668][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.044668][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.074762][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.189815][T15831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 478.221453][T15987] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 478.238941][T15831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 478.413874][T15831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 478.437906][T15831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 478.695012][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.952886][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.117536][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.178263][T16016] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 479.239761][T15816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.315664][ T5106] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 479.334900][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.337229][ T5106] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 479.357296][ T5106] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 479.367449][ T5106] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 479.379313][ T5106] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 479.394567][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.407081][ T5106] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 479.555136][T15831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.662077][T16017] lo speed is unknown, defaulting to 1000 [ 479.728542][T15816] veth0_vlan: entered promiscuous mode [ 479.821530][T15816] veth1_vlan: entered promiscuous mode [ 479.857618][T15831] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.985304][ T6029] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.992871][ T6029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.035767][ T6029] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.044118][ T6029] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.077810][ T12] bridge_slave_1: left allmulticast mode [ 480.084035][ T12] bridge_slave_1: left promiscuous mode [ 480.090766][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.107248][ T12] bridge_slave_0: left allmulticast mode [ 480.113559][ T12] bridge_slave_0: left promiscuous mode [ 480.126216][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.691647][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.714553][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.728408][ T12] bond0 (unregistering): Released all slaves [ 480.742581][T16037] tipc: Enabling of bearer rejected, failed to enable media [ 480.889004][T15816] veth0_macvtap: entered promiscuous mode [ 480.966880][T15816] veth1_macvtap: entered promiscuous mode [ 481.254063][ T1060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.279366][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.300371][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.312359][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.324127][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.342642][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.360928][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.371044][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.382775][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.393427][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.412237][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.422717][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.433924][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.444619][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.455901][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.469073][T15816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.484763][ T55] Bluetooth: hci4: command tx timeout [ 481.591473][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.616675][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.650623][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.663542][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.674429][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.686215][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.697156][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.709736][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.721777][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.737967][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.783215][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.794202][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.812961][T15816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.824000][T15816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.855231][T15816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.002454][ T12] hsr_slave_0: left promiscuous mode [ 482.020247][T16077] FAULT_INJECTION: forcing a failure. [ 482.020247][T16077] name failslab, interval 1, probability 0, space 0, times 0 [ 482.038573][ T12] hsr_slave_1: left promiscuous mode [ 482.048925][T16077] CPU: 1 PID: 16077 Comm: syz.3.3010 Not tainted 6.10.0-syzkaller-04473-g0e03c643dc93 #0 [ 482.058911][T16077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 482.069130][T16077] Call Trace: [ 482.072449][T16077] [ 482.075689][T16077] dump_stack_lvl+0x241/0x360 [ 482.080518][T16077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.085854][T16077] ? __pfx__printk+0x10/0x10 [ 482.090515][T16077] ? netlink_insert+0x10b7/0x14b0 [ 482.095989][T16077] should_fail_ex+0x3b0/0x4e0 [ 482.100731][T16077] ? __alloc_skb+0x1c3/0x440 [ 482.105415][T16077] should_failslab+0x9/0x20 [ 482.110093][T16077] kmem_cache_alloc_node_noprof+0x71/0x320 [ 482.116545][T16077] __alloc_skb+0x1c3/0x440 [ 482.121016][T16077] ? __pfx___alloc_skb+0x10/0x10 [ 482.125999][T16077] ? netlink_autobind+0xd6/0x2f0 [ 482.131066][T16077] ? netlink_autobind+0x2b0/0x2f0 [ 482.136655][T16077] netlink_sendmsg+0x638/0xcb0 [ 482.141717][T16077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.147024][T16077] ? __import_iovec+0x536/0x820 [ 482.151900][T16077] ? aa_sock_msg_perm+0x91/0x160 [ 482.156874][T16077] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 482.162184][T16077] ? security_socket_sendmsg+0x87/0xb0 [ 482.167682][T16077] ? __pfx_netlink_sendmsg+0x10/0x10 [ 482.173094][T16077] __sock_sendmsg+0x221/0x270 [ 482.177989][T16077] ____sys_sendmsg+0x525/0x7d0 [ 482.182781][T16077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 482.188474][T16077] __sys_sendmsg+0x2b0/0x3a0 [ 482.193200][T16077] ? __pfx___sys_sendmsg+0x10/0x10 [ 482.198421][T16077] ? vfs_write+0x7c4/0xc90 [ 482.202898][T16077] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 482.209424][T16077] ? do_syscall_64+0x100/0x230 [ 482.214240][T16077] ? do_syscall_64+0xb6/0x230 [ 482.218945][T16077] do_syscall_64+0xf3/0x230 [ 482.223596][T16077] ? clear_bhb_loop+0x35/0x90 [ 482.228312][T16077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.234228][T16077] RIP: 0033:0x7fb318775a99 [ 482.238689][T16077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.258402][T16077] RSP: 002b:00007fb3194ef048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 482.267008][T16077] RAX: ffffffffffffffda RBX: 00007fb318903f60 RCX: 00007fb318775a99 [ 482.275607][T16077] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 482.283695][T16077] RBP: 00007fb3194ef0a0 R08: 0000000000000000 R09: 0000000000000000 [ 482.292049][T16077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.300684][T16077] R13: 000000000000000b R14: 00007fb318903f60 R15: 00007ffd74bbb7d8 [ 482.308807][T16077] [ 482.325977][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.342509][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.357584][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.373978][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.437003][ T12] veth1_macvtap: left promiscuous mode [ 482.452947][ T12] veth0_macvtap: left promiscuous mode [ 482.473414][ T12] veth1_vlan: left promiscuous mode [ 482.478949][ T12] veth0_vlan: left promiscuous mode [ 482.524005][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.750561][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3013'. [ 482.898487][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3013'. [ 483.356817][ T12] team0 (unregistering): Port device team_slave_1 removed [ 483.407645][ T12] team0 (unregistering): Port device team_slave_0 removed [ 483.574429][ T55] Bluetooth: hci4: command tx timeout [ 483.810567][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.006589][T16097] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3014'. [ 484.067073][T15816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.093057][T15816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.102762][T15816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.112097][T15816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.445215][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.448796][T15831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.468683][ T53] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.485351][T16117] netlink: 'syz.3.3017': attribute type 10 has an invalid length. [ 484.535832][T16117] team0: Device ipvlan1 failed to register rx_handler [ 484.604469][T16017] chnl_net:caif_netlink_parms(): no params data found [ 484.733485][T16118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3017'. [ 484.742532][T16118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3017'. [ 484.803386][T16118] netlink: 'syz.3.3017': attribute type 2 has an invalid length. [ 484.809766][ T2454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.853343][ T2454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.068060][T16017] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.119320][T16017] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.155948][T16017] bridge_slave_0: entered allmulticast mode [ 485.169492][T16017] bridge_slave_0: entered promiscuous mode [ 485.192444][T16148] netlink: 'syz.1.3021': attribute type 10 has an invalid length. [ 485.264877][T16148] mac80211_hwsim hwsim22 wlan1: entered promiscuous mode [ 485.281191][T16148] team0: Port device wlan1 added [ 485.291165][T16017] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.313426][T16017] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.320930][T16017] bridge_slave_1: entered allmulticast mode [ 485.331656][T16017] bridge_slave_1: entered promiscuous mode [ 485.381017][ T1052] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.402597][ T1052] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.491430][T16017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.535555][T16156] netlink: 'syz.1.3023': attribute type 4 has an invalid length. [ 485.578568][T16017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.654085][ T55] Bluetooth: hci4: command tx timeout [ 485.790048][T16017] team0: Port device team_slave_0 added [ 485.826906][T16017] team0: Port device team_slave_1 added [ 485.874215][T16170] FAULT_INJECTION: forcing a failure. [ 485.874215][T16170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.913878][T16170] CPU: 1 PID: 16170 Comm: syz.1.3028 Not tainted 6.10.0-syzkaller-04473-g0e03c643dc93 #0 [ 485.923767][T16170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 485.933868][T16170] Call Trace: [ 485.937250][T16170] [ 485.940219][T16170] dump_stack_lvl+0x241/0x360 [ 485.945415][T16170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 485.951101][T16170] ? __pfx__printk+0x10/0x10 [ 485.955754][T16170] ? __pfx_lock_release+0x10/0x10 [ 485.960993][T16170] should_fail_ex+0x3b0/0x4e0 [ 485.965712][T16170] _copy_from_user+0x2f/0xe0 [ 485.970423][T16170] copy_msghdr_from_user+0xae/0x680 [ 485.975839][T16170] ? __pfx___might_resched+0x10/0x10 [ 485.981241][T16170] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 485.987282][T16170] ? __might_fault+0xaa/0x120 [ 485.992041][T16170] do_recvmmsg+0x40f/0xae0 [ 485.996501][T16170] ? __pfx_lock_release+0x10/0x10 [ 486.001552][T16170] ? __pfx_do_recvmmsg+0x10/0x10 [ 486.006531][T16170] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 486.012449][T16170] ? ksys_write+0x23e/0x2c0 [ 486.017108][T16170] ? __pfx_lock_release+0x10/0x10 [ 486.022225][T16170] ? vfs_write+0x7c4/0xc90 [ 486.026774][T16170] ? __mutex_unlock_slowpath+0x21d/0x750 [ 486.032480][T16170] ? __fget_files+0x3f6/0x470 [ 486.037365][T16170] __x64_sys_recvmmsg+0x199/0x250 [ 486.042677][T16170] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 486.048332][T16170] ? do_syscall_64+0x100/0x230 [ 486.053201][T16170] ? do_syscall_64+0xb6/0x230 [ 486.057898][T16170] do_syscall_64+0xf3/0x230 [ 486.062415][T16170] ? clear_bhb_loop+0x35/0x90 [ 486.067293][T16170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.073731][T16170] RIP: 0033:0x7f0949975a99 [ 486.078197][T16170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.097918][T16170] RSP: 002b:00007f094a762048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 486.106442][T16170] RAX: ffffffffffffffda RBX: 00007f0949b03f60 RCX: 00007f0949975a99 [ 486.114436][T16170] RDX: 000000000000072a RSI: 0000000020000080 RDI: 0000000000000004 [ 486.122923][T16170] RBP: 00007f094a7620a0 R08: 0000000000000000 R09: 0000000000000000 [ 486.130928][T16170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 486.139008][T16170] R13: 000000000000000b R14: 00007f0949b03f60 R15: 00007ffe6a7602d8 [ 486.147111][T16170] [ 486.178804][T16017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.203861][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.251043][T16017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.284257][ T1052] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.288741][T16017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.325004][T16182] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 486.332948][T16017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.359704][T16182] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3031'. [ 486.380279][T16182] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3031'. [ 486.393422][T16017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.526843][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.570851][T16183] netlink: 'syz.3.3031': attribute type 1 has an invalid length. [ 486.608039][T16183] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.3031'. [ 486.638296][T16183] netlink: 1 bytes leftover after parsing attributes in process `syz.3.3031'. [ 486.669266][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.789479][T16017] hsr_slave_0: entered promiscuous mode [ 486.798937][T16017] hsr_slave_1: entered promiscuous mode [ 486.806219][T16017] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.815343][T16017] Cannot create hsr debugfs directory [ 486.822200][T15831] veth0_vlan: entered promiscuous mode [ 486.896509][T15831] veth1_vlan: entered promiscuous mode [ 486.942334][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.071855][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.206377][T15831] veth0_macvtap: entered promiscuous mode [ 487.229193][T15831] veth1_macvtap: entered promiscuous mode [ 487.298513][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.311159][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.321316][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.334270][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.346040][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.357156][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.368083][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.378942][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.388894][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.399706][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.410186][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.421096][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.431335][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 487.442128][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.456601][T15831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.500561][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.511630][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.522007][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.532834][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.543043][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.555773][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.566389][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.577112][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.588086][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.599082][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.609031][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.619875][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.629840][T15831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.640554][T15831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.658805][T15831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.684691][ T35] bridge_slave_1: left allmulticast mode [ 487.690396][ T35] bridge_slave_1: left promiscuous mode [ 487.705828][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.721979][ T35] bridge_slave_0: left allmulticast mode [ 487.729004][ T35] bridge_slave_0: left promiscuous mode [ 487.736373][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.738287][ T55] Bluetooth: hci4: command tx timeout [ 488.306033][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.338622][T16196] FAULT_INJECTION: forcing a failure. [ 488.338622][T16196] name failslab, interval 1, probability 0, space 0, times 0 [ 488.357315][T16196] CPU: 0 PID: 16196 Comm: syz.1.3035 Not tainted 6.10.0-syzkaller-04473-g0e03c643dc93 #0 [ 488.367194][T16196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 488.377296][T16196] Call Trace: [ 488.380614][T16196] [ 488.383579][T16196] dump_stack_lvl+0x241/0x360 [ 488.388311][T16196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.393555][T16196] ? __pfx__printk+0x10/0x10 [ 488.398213][T16196] should_fail_ex+0x3b0/0x4e0 [ 488.402941][T16196] ? sctp_add_bind_addr+0x89/0x3a0 [ 488.408096][T16196] should_failslab+0x9/0x20 [ 488.412642][T16196] kmalloc_trace_noprof+0x6c/0x2c0 [ 488.417813][T16196] sctp_add_bind_addr+0x89/0x3a0 [ 488.418839][ T5106] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 488.422810][T16196] sctp_copy_local_addr_list+0x311/0x500 [ 488.435758][ T5106] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 488.435756][T16196] ? sctp_copy_local_addr_list+0xab/0x500 [ 488.435797][T16196] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 488.445730][ T5106] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 488.448435][T16196] ? sctp_v4_is_any+0x35/0x60 [ 488.465598][ T5106] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 488.466201][T16196] sctp_bind_addr_copy+0xad/0x3b0 [ 488.476488][ T5106] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 488.478242][T16196] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 488.486105][ T5106] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 488.491693][T16196] sctp_connect_new_asoc+0x2f3/0x6c0 [ 488.504041][T16196] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 488.509904][T16196] ? sctp_sendmsg+0xbb9/0x3520 [ 488.514842][T16196] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 488.520454][T16196] ? security_sctp_bind_connect+0x90/0xb0 [ 488.526291][T16196] sctp_sendmsg+0x219a/0x3520 [ 488.531054][T16196] ? __pfx_sctp_sendmsg+0x10/0x10 [ 488.536182][T16196] ? __pfx_aa_sk_perm+0x10/0x10 [ 488.541257][T16196] ? inet_sendmsg+0x330/0x390 [ 488.545958][T16196] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 488.551276][T16196] ? security_socket_sendmsg+0x87/0xb0 [ 488.556783][T16196] __sock_sendmsg+0x1a6/0x270 [ 488.561479][T16196] __sys_sendto+0x3a4/0x4f0 [ 488.566026][T16196] ? __pfx___sys_sendto+0x10/0x10 [ 488.571313][T16196] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 488.577522][T16196] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 488.583896][T16196] __x64_sys_sendto+0xde/0x100 [ 488.588738][T16196] do_syscall_64+0xf3/0x230 [ 488.593281][T16196] ? clear_bhb_loop+0x35/0x90 [ 488.597995][T16196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.604524][T16196] RIP: 0033:0x7f0949975a99 [ 488.608978][T16196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.628633][T16196] RSP: 002b:00007f094a762048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 488.637092][T16196] RAX: ffffffffffffffda RBX: 00007f0949b03f60 RCX: 00007f0949975a99 [ 488.645102][T16196] RDX: 0000000000000001 RSI: 0000000020000280 RDI: 0000000000000003 [ 488.654165][T16196] RBP: 00007f094a7620a0 R08: 0000000020000180 R09: 0000000000000010 [ 488.662168][T16196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 488.670178][T16196] R13: 000000000000000b R14: 00007f0949b03f60 R15: 00007ffe6a7602d8 [ 488.678207][T16196] [ 488.782213][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.810002][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.836935][ T35] bond0 (unregistering): Released all slaves [ 488.869508][T16190] netlink: 'syz.3.3033': attribute type 10 has an invalid length. [ 488.924309][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.961787][T16190] [ 488.964205][T16190] ====================================================== [ 488.971260][T16190] WARNING: possible circular locking dependency detected [ 488.978302][T16190] 6.10.0-syzkaller-04473-g0e03c643dc93 #0 Not tainted [ 488.985162][T16190] ------------------------------------------------------ [ 488.992218][T16190] syz.3.3033/16190 is trying to acquire lock: [ 488.998295][T16190] ffff888029468768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_open+0xe7/0x200 [ 489.007491][T16190] [ 489.007491][T16190] but task is already holding lock: [ 489.014888][T16190] ffff8880576b4d40 (team->team_lock_key#21){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 489.024887][T16190] [ 489.024887][T16190] which lock already depends on the new lock. [ 489.024887][T16190] [ 489.035532][T16190] [ 489.035532][T16190] the existing dependency chain (in reverse order) is: [ 489.044802][T16190] [ 489.044802][T16190] -> #1 (team->team_lock_key#21){+.+.}-{3:3}: [ 489.053152][T16190] lock_acquire+0x1ed/0x550 [ 489.058223][T16190] __mutex_lock+0x136/0xd70 [ 489.063306][T16190] team_port_change_check+0x51/0x1e0 [ 489.069178][T16190] team_device_event+0x161/0x5b0 [ 489.074697][T16190] notifier_call_chain+0x19f/0x3e0 [ 489.080378][T16190] dev_close_many+0x33c/0x4c0 [ 489.085627][T16190] unregister_netdevice_many_notify+0x50b/0x1c40 [ 489.092756][T16190] macvlan_device_event+0x7e0/0x870 [ 489.098526][T16190] notifier_call_chain+0x19f/0x3e0 [ 489.104212][T16190] unregister_netdevice_many_notify+0xd81/0x1c40 [ 489.111130][T16190] unregister_netdevice_queue+0x303/0x370 [ 489.117444][T16190] _cfg80211_unregister_wdev+0x162/0x560 [ 489.123967][T16190] ieee80211_if_remove+0x25d/0x3a0 [ 489.129774][T16190] ieee80211_del_iface+0x19/0x30 [ 489.135291][T16190] cfg80211_remove_virtual_intf+0x23f/0x410 [ 489.141812][T16190] genl_rcv_msg+0xb14/0xec0 [ 489.146984][T16190] netlink_rcv_skb+0x1e3/0x430 [ 489.152327][T16190] genl_rcv+0x28/0x40 [ 489.156895][T16190] netlink_unicast+0x7f0/0x990 [ 489.162197][T16190] netlink_sendmsg+0x8e4/0xcb0 [ 489.167509][T16190] __sock_sendmsg+0x221/0x270 [ 489.172794][T16190] ____sys_sendmsg+0x525/0x7d0 [ 489.178108][T16190] __sys_sendmsg+0x2b0/0x3a0 [ 489.183260][T16190] do_syscall_64+0xf3/0x230 [ 489.188344][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.194798][T16190] [ 489.194798][T16190] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 489.202590][T16190] validate_chain+0x18e0/0x5900 [ 489.208079][T16190] __lock_acquire+0x1346/0x1fd0 [ 489.213572][T16190] lock_acquire+0x1ed/0x550 [ 489.218781][T16190] __mutex_lock+0x136/0xd70 [ 489.223842][T16190] ieee80211_open+0xe7/0x200 [ 489.228994][T16190] __dev_open+0x2d3/0x450 [ 489.233856][T16190] dev_open+0xae/0x1b0 [ 489.238469][T16190] team_add_slave+0x9c8/0x2760 [ 489.243865][T16190] do_setlink+0xe70/0x41f0 [ 489.248832][T16190] rtnl_newlink+0x180d/0x20a0 [ 489.254095][T16190] rtnetlink_rcv_msg+0x73f/0xcf0 [ 489.259583][T16190] netlink_rcv_skb+0x1e3/0x430 [ 489.264931][T16190] netlink_unicast+0x7f0/0x990 [ 489.270246][T16190] netlink_sendmsg+0x8e4/0xcb0 [ 489.275555][T16190] __sock_sendmsg+0x221/0x270 [ 489.280763][T16190] ____sys_sendmsg+0x525/0x7d0 [ 489.286079][T16190] __sys_sendmsg+0x2b0/0x3a0 [ 489.291231][T16190] do_syscall_64+0xf3/0x230 [ 489.296284][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.303168][T16190] [ 489.303168][T16190] other info that might help us debug this: [ 489.303168][T16190] [ 489.313552][T16190] Possible unsafe locking scenario: [ 489.313552][T16190] [ 489.321076][T16190] CPU0 CPU1 [ 489.326553][T16190] ---- ---- [ 489.331956][T16190] lock(team->team_lock_key#21); [ 489.337001][T16190] lock(&rdev->wiphy.mtx); [ 489.344181][T16190] lock(team->team_lock_key#21); [ 489.351799][T16190] lock(&rdev->wiphy.mtx); [ 489.356341][T16190] [ 489.356341][T16190] *** DEADLOCK *** [ 489.356341][T16190] [ 489.364503][T16190] 2 locks held by syz.3.3033/16190: [ 489.369726][T16190] #0: ffffffff8f5f1788 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 489.379159][T16190] #1: ffff8880576b4d40 (team->team_lock_key#21){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 489.389487][T16190] [ 489.389487][T16190] stack backtrace: [ 489.395484][T16190] CPU: 0 PID: 16190 Comm: syz.3.3033 Not tainted 6.10.0-syzkaller-04473-g0e03c643dc93 #0 [ 489.405315][T16190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 489.415437][T16190] Call Trace: [ 489.418824][T16190] [ 489.421790][T16190] dump_stack_lvl+0x241/0x360 [ 489.426647][T16190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.431914][T16190] ? print_circular_bug+0x130/0x1a0 [ 489.437589][T16190] check_noncircular+0x36a/0x4a0 [ 489.442675][T16190] ? __pfx_check_noncircular+0x10/0x10 [ 489.448274][T16190] ? lockdep_lock+0x123/0x2b0 [ 489.453079][T16190] ? validate_chain+0x11e/0x5900 [ 489.458067][T16190] ? mark_lock+0x9a/0x350 [ 489.462460][T16190] ? _find_first_zero_bit+0xd3/0x100 [ 489.467873][T16190] validate_chain+0x18e0/0x5900 [ 489.472764][T16190] ? __pfx_validate_chain+0x10/0x10 [ 489.478050][T16190] ? mark_lock+0x9a/0x350 [ 489.482435][T16190] ? __pfx_validate_chain+0x10/0x10 [ 489.487772][T16190] ? __pfx_validate_chain+0x10/0x10 [ 489.493126][T16190] ? mark_lock+0x9a/0x350 [ 489.497673][T16190] ? __lock_acquire+0x1346/0x1fd0 [ 489.502831][T16190] ? mark_lock+0x9a/0x350 [ 489.507188][T16190] __lock_acquire+0x1346/0x1fd0 [ 489.512093][T16190] lock_acquire+0x1ed/0x550 [ 489.516696][T16190] ? ieee80211_open+0xe7/0x200 [ 489.521597][T16190] ? __pfx_lock_acquire+0x10/0x10 [ 489.526710][T16190] ? __pfx___might_resched+0x10/0x10 [ 489.532029][T16190] ? ib_device_get_by_netdev+0x595/0x5e0 [ 489.537803][T16190] ? ib_device_get_by_netdev+0x85/0x5e0 [ 489.543730][T16190] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 489.549935][T16190] ? net_generic+0x1f/0x240 [ 489.554469][T16190] ? net_generic+0x1f0/0x240 [ 489.559100][T16190] __mutex_lock+0x136/0xd70 [ 489.563651][T16190] ? ieee80211_open+0xe7/0x200 [ 489.568469][T16190] ? rxe_notify+0xef/0x4c0 [ 489.569680][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.572915][T16190] ? __pfx_vxlan_netdevice_event+0x10/0x10 [ 489.586831][T16190] ? __pfx_rxe_notify+0x10/0x10 [ 489.591817][T16190] ? is_hsr_master+0x19/0x70 [ 489.596483][T16190] ? ieee80211_open+0xe7/0x200 [ 489.601304][T16190] ? __pfx___mutex_lock+0x10/0x10 [ 489.607160][T16190] ? ip6_route_dev_notify+0x99/0x600 [ 489.612591][T16190] ieee80211_open+0xe7/0x200 [ 489.617222][T16190] __dev_open+0x2d3/0x450 [ 489.621589][T16190] ? __pfx___dev_open+0x10/0x10 [ 489.626582][T16190] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 489.632094][T16190] dev_open+0xae/0x1b0 [ 489.636298][T16190] ? __pfx_dev_open+0x10/0x10 [ 489.641044][T16190] ? rcu_is_watching+0x15/0xb0 [ 489.646110][T16190] ? team_add_slave+0x69e/0x2760 [ 489.651086][T16190] ? team_add_slave+0x8b5/0x2760 [ 489.656041][T16190] team_add_slave+0x9c8/0x2760 [ 489.660823][T16190] ? __dev_change_flags+0x515/0x6f0 [ 489.666070][T16190] ? __pfx_team_add_slave+0x10/0x10 [ 489.671298][T16190] ? __pfx___dev_change_flags+0x10/0x10 [ 489.676978][T16190] ? vprintk_emit+0x631/0x770 [ 489.681717][T16190] ? mutex_is_locked+0x12/0x50 [ 489.686607][T16190] do_setlink+0xe70/0x41f0 [ 489.691040][T16190] ? _printk+0xd5/0x120 [ 489.695202][T16190] ? irqentry_exit+0x63/0x90 [ 489.699865][T16190] ? __nla_validate_parse+0x4f4/0x3090 [ 489.705535][T16190] ? __pfx__printk+0x10/0x10 [ 489.710181][T16190] ? __pfx_do_setlink+0x10/0x10 [ 489.715044][T16190] ? __nla_validate_parse+0x1ada/0x3090 [ 489.720613][T16190] ? __nla_validate_parse+0x26ce/0x3090 [ 489.726182][T16190] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 489.731585][T16190] ? rtnl_newlink+0xf2/0x20a0 [ 489.736316][T16190] ? __pfx___nla_validate_parse+0x10/0x10 [ 489.742064][T16190] ? validate_linkmsg+0x71e/0x900 [ 489.747110][T16190] rtnl_newlink+0x180d/0x20a0 [ 489.751818][T16190] ? rtnl_newlink+0x531/0x20a0 [ 489.756615][T16190] ? __pfx_rtnl_newlink+0x10/0x10 [ 489.761678][T16190] ? do_raw_spin_unlock+0x13c/0x8b0 [ 489.766904][T16190] ? __mutex_lock+0x9a5/0xd70 [ 489.771611][T16190] ? __mutex_lock+0x527/0xd70 [ 489.776449][T16190] ? __pfx_rtnl_newlink+0x10/0x10 [ 489.781600][T16190] rtnetlink_rcv_msg+0x73f/0xcf0 [ 489.786570][T16190] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 489.791742][T16190] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 489.797245][T16190] ? ref_tracker_free+0x643/0x7e0 [ 489.802306][T16190] netlink_rcv_skb+0x1e3/0x430 [ 489.807101][T16190] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 489.812587][T16190] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 489.817903][T16190] ? netlink_deliver_tap+0x2e/0x1b0 [ 489.823127][T16190] netlink_unicast+0x7f0/0x990 [ 489.827924][T16190] ? __pfx_netlink_unicast+0x10/0x10 [ 489.833327][T16190] ? __virt_addr_valid+0x183/0x530 [ 489.838483][T16190] ? __check_object_size+0x49c/0x900 [ 489.843802][T16190] ? bpf_lsm_netlink_send+0x9/0x10 [ 489.848999][T16190] netlink_sendmsg+0x8e4/0xcb0 [ 489.853801][T16190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.859292][T16190] ? __import_iovec+0x536/0x820 [ 489.864202][T16190] ? aa_sock_msg_perm+0x91/0x160 [ 489.869285][T16190] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 489.874678][T16190] ? security_socket_sendmsg+0x87/0xb0 [ 489.880233][T16190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 489.885554][T16190] __sock_sendmsg+0x221/0x270 [ 489.890280][T16190] ____sys_sendmsg+0x525/0x7d0 [ 489.895088][T16190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 489.900462][T16190] __sys_sendmsg+0x2b0/0x3a0 [ 489.905238][T16190] ? __pfx___sys_sendmsg+0x10/0x10 [ 489.910423][T16190] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 489.916868][T16190] ? do_syscall_64+0x100/0x230 [ 489.921642][T16190] ? do_syscall_64+0xb6/0x230 [ 489.926406][T16190] do_syscall_64+0xf3/0x230 [ 489.930955][T16190] ? clear_bhb_loop+0x35/0x90 [ 489.935657][T16190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.941643][T16190] RIP: 0033:0x7fb318775a99 [ 489.946179][T16190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.965905][T16190] RSP: 002b:00007fb3194ef048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 489.974379][T16190] RAX: ffffffffffffffda RBX: 00007fb318903f60 RCX: 00007fb318775a99 [ 489.982420][T16190] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 489.990411][T16190] RBP: 00007fb3187e4e5d R08: 0000000000000000 R09: 0000000000000000 [ 489.998405][T16190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 490.006408][T16190] R13: 000000000000000b R14: 00007fb318903f60 R15: 00007ffd74bbb7d8 [ 490.014457][T16190] [ 490.041100][T16190] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 490.054054][T16190] team0: Port device wlan1 added [ 490.114829][T15831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.132127][T15831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.142269][T15831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.155577][T15831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.204753][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.524908][ T5106] Bluetooth: hci2: command tx timeout [ 490.812099][ T35] hsr_slave_0: left promiscuous mode [ 490.822457][ T35] hsr_slave_1: left promiscuous mode [ 490.828831][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 490.838103][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 490.849124][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.860742][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.871071][ T35] veth1_macvtap: left promiscuous mode [ 490.877498][ T35] veth0_macvtap: left promiscuous mode [ 490.883358][ T35] veth1_vlan: left promiscuous mode [ 490.888686][ T35] veth0_vlan: left promiscuous mode [ 491.146977][ T35] team0 (unregistering): Port device team_slave_1 removed [ 491.181601][ T35] team0 (unregistering): Port device team_slave_0 removed [ 491.659482][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.809799][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.850960][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.910551][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.976655][ T35] bridge_slave_1: left allmulticast mode [ 491.982378][ T35] bridge_slave_1: left promiscuous mode [ 491.990176][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.999386][ T35] bridge_slave_0: left allmulticast mode [ 492.006697][ T35] bridge_slave_0: left promiscuous mode [ 492.013351][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.023447][ T35] bridge_slave_1: left allmulticast mode [ 492.029128][ T35] bridge_slave_1: left promiscuous mode [ 492.035383][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.044093][ T35] bridge_slave_0: left allmulticast mode [ 492.049755][ T35] bridge_slave_0: left promiscuous mode [ 492.059166][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.129425][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.138615][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.292584][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.304583][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.315755][ T35] bond0 (unregistering): Released all slaves [ 492.328720][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 492.340399][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 492.352783][ T35] bond0 (unregistering): Released all slaves [ 492.678517][ T35] hsr_slave_0: left promiscuous mode [ 492.684735][ T35] hsr_slave_1: left promiscuous mode [ 492.690734][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 492.699857][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.708019][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 492.716155][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.727905][ T35] hsr_slave_0: left promiscuous mode [ 492.734111][ T35] hsr_slave_1: left promiscuous mode [ 492.740049][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 492.748253][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.758810][ T35] veth1_macvtap: left promiscuous mode [ 492.764910][ T35] veth0_macvtap: left promiscuous mode [ 492.770961][ T35] veth1_vlan: left promiscuous mode [ 492.776443][ T35] veth0_vlan: left promiscuous mode [ 492.996039][ T35] team0 (unregistering): Port device team_slave_1 removed [ 493.027122][ T35] team0 (unregistering): Port device team_slave_0 removed [ 493.343820][ T35] team0 (unregistering): Port device team_slave_1 removed [ 493.378677][ T35] team0 (unregistering): Port device team_slave_0 removed [ 494.044196][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.683839][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.692007][ T2454] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.244641][ T7811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.883764][ T990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.891962][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog