last executing test programs: 1m11.335480969s ago: executing program 3 (id=815): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) close(r1) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0x11, &(0x7f0000001640), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0xffffffa1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x401, 0x70bd28, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9, 0x20002}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 47.563389257s ago: executing program 3 (id=815): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) close(r1) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0x11, &(0x7f0000001640), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0xffffffa1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x401, 0x70bd28, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9, 0x20002}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 38.512244866s ago: executing program 3 (id=815): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) close(r1) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0x11, &(0x7f0000001640), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0xffffffa1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x401, 0x70bd28, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9, 0x20002}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 26.616308181s ago: executing program 3 (id=815): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) close(r1) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0x11, &(0x7f0000001640), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0xffffffa1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x401, 0x70bd28, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9, 0x20002}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 12.695432669s ago: executing program 3 (id=815): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) close(r1) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0x11, &(0x7f0000001640), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0xffffffa1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x401, 0x70bd28, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9, 0x20002}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) 2.836792658s ago: executing program 2 (id=1376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020400) r1 = socket(0x2, 0x5, 0x0) setsockopt$inet6_tcp_TLS_RX(r1, 0x6, 0x2, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x3, 0x4, 0x4, 0x10001, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1700}, 0x48) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x20, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x46, 0xd}}}}}, 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x10) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netdev_private(r6, 0x89fd, &(0x7f0000000000)="e4df0c7c6df46eecb91fe931acb57de8a02319e5fc0f7c1c266d760d0bffc93665ef49278d6255551d22af4c4a5294d9a80f7c33a20423db0dbe6a75172b3c6120c3f8ad0c234ef45b6e2e02b5dc127ce22abca0d8cef54984977e845ac0e773f408ab7395bb09c4c7583ed7e3245e95925acc8645d1821860193ee03dad1f8272f31a70eb020ab21cb58b922bf33b3ae2d9ac15801a6d448b747b572123f10311a4da9d2b05e85b3306f5d820fa") 2.590444978s ago: executing program 1 (id=1379): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x1f}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b03feffe2ff020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x51001}, 0x20040011) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r2, 0x300, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x51001}, 0x20040011) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.392597398s ago: executing program 1 (id=1380): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x3, [{0x0, 0x3}]}, @enum]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x3e}, 0x20) pipe(&(0x7f0000000080)={0xffffffffffffffff}) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) vmsplice(r3, &(0x7f0000000940)=[{&(0x7f0000000400)="a273c40a2d57595c990b7a2c3ce45a2d94f8b6dfe4e886fa132ccfcef29eb6d3581aafe553b24795f6459958835bfee3b37f1606761babb38fceedbdc83c55d311ab425e261b815657f0237179d3ab838c6644a3585ade04d9d34a01dcb4bd4ac5597d14de31205b6523d728d626c91a78decedf2156a6a92aa30590495011a829", 0x81}, {&(0x7f00000004c0)="19c76ec42ed85dd6fab659e3d9ec6c377e422eb37c5a9954eb05a2476e9081c4975c864564e4104b28c45193a7515b93ac362af29377adc124e778da87caf7bec09cbab63dfca37158493122f4a0911e626866dbd8fdc3fcb70cfd36223854bb56d1ad600bbbed67bf", 0x69}, {&(0x7f00000005c0)="a29d47bb2eeb78f7542e3142421dda056914b8311c5e419c88ae7d10f11f8c8669", 0x21}, {&(0x7f0000000600)="994180db5d97bea074fcc5393e115845334922f261d1fe83e0f0ee78a29d7954d2458bb627064e18c6052163822c83fc804eae356f23752cba39dbb3813c46761b980f64fafe17d499bce37df0cf812fc4de7862dfe7ef6400481eef9e3c4d874492bd44333ac90efdfded58ff1b1d9a63cb1cafb1dec8e7a3fa09284e6f323ead6a2b3f2a848d41544e8865dd3e2bd43cadd3db2a276f463ecd2081f419d6446051a91935e89d8069de62d637c5", 0xae}, {&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000880)="56ef25cdf9470130aa47786c4c0c9ca8a3bd20ac72459992a361326ecf8ee080172974e8a233ee8961ed6f5d0ad0b6bfd5006671150865c69c361491c398b64bb877c04eae5c07336fe391d31265230fbe7f065beb536c38cfe0b1901ea4096f2e17bcdf59eb1cdce77afe2fbe381425837a164e2acabd5486e7a84b6ed5c9766cdb4e531c4ac18a86c32b9658", 0x8d}], 0x6, 0x8) write$binfmt_misc(r3, 0x0, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0xac, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24044810}, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f00000007c0)) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r5, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) r7 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r7, 0x10d, 0x2, &(0x7f0000000040), 0xff47) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r8) socket(0xa, 0x3, 0x102) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB="14010000280001000000000000000000090100800c0001000000000000000000040002"], 0x114}], 0x1}, 0x0) unshare(0x20000400) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0x2, &(0x7f0000000140)=0x7, 0x4) 2.392057435s ago: executing program 2 (id=1381): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000080)=0xf1b, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) epoll_create1(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) socket$kcm(0x21, 0x2, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000380)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x84}, {}]}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x0) connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x20000000000028, 0x0, 0x1}, 0x0, 0x0) ioctl$int_in(r3, 0x5452, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 1.486272355s ago: executing program 0 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f0000000040)=0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x9, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_emit_ethernet(0xa6, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x70, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x6, '\x00', [@calipso={0x7, 0x30, {0x22ebffff, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0]}}]}]}}}}}}}, 0x0) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000004c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f00000003c0)=0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xc3ff}}, 0x0) 1.464277842s ago: executing program 1 (id=1387): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r5, 0x29, 0xce, &(0x7f0000000300), &(0x7f0000000340)=0x4) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000009c0)={0x116c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1008, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MEDIA={0xf0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff4389}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x116c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socket(0x10, 0x803, 0x0) r7 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x701, 0x3, 0x258, 0x0, 0xba02004b, 0x108, 0x0, 0x0, 0x1c0, 0x1c8, 0x1c8, 0x1c0, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, 'caif0\x00', 'veth0\x00', {}, {}, 0x32}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@esp={{0x30}, {[], 0x2}}]}, @common=@SET={0x60}}, {{@ip={@remote, @loopback, 0x0, 0x0, 'veth0_to_hsr\x00', 'wg2\x00', {0xff}}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) socket$inet6(0xa, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r3) sendmsg$BATADV_CMD_GET_HARDIF(r9, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r10, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) r11 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000028000a00", @ANYRES32=r11, @ANYBLOB], 0x24}}, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r0, 0x100, 0x0, 0x2000, {0xf}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4) 1.463661808s ago: executing program 2 (id=1388): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed3871be52930316f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002500000095000000000000001a7806c538c229c9b05f19e2ec9622a93e1e07eea201fc24917a3133f68cd7a30610d3d1ab287b09eb4433505f332e327ec196e83fe353024107ca943e3e307da98bcdf9cc75bfeece02427068be1b9a8b9f46a3371cd342113bd5aa7f689d9708b4ada6b68a14a522737d8359d325"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{}, {&(0x7f0000000040)="1162965f002e6fb7146feac815cae7b2449123ea0b57fe6318b014042db5307a578147e0e886b7fd93abcfeeced030bb6af5bfbb4e37a4bc8c7b44edc532b46929f37b07685fa996d1d15b195f5b7d106cf51d84b6f656c514a8a2730749f86e852c5240a313662127242e03e9677d697a21a74f66d1ce49e5510667414e594ba7ffb1131e067637f1652eac018d3d79e7686d0d13fa51fcbef840da4195045be045104b2ad3af5fe1f9a6e5f92fd2c9009cc9680518425a53c0e81423bd300ae4b1fc5d466aa59460def7d82d0e103538afd210fb3c063cdeb0061afe52d90f8502a6a156c1f590797352cbff56c4f4a4ce7c", 0xf3}, {&(0x7f00000001c0)="cbce489de962138523e1f3172afc4204a719653d64a825ee9b754eaa30875a3edfae8d3d87a5f928b8ba5da4ec8912c0a4ac23180fdafa6b9d7558025115d2effc7c913194ea8d74d727f63421fc37eac87f", 0x52}, {&(0x7f0000000140)="82ff1c252d5342e3da0a625ceda3a23d927b47e3b0fb40f2795262efef063822d10138357754aa0cc2318dad86fc68989af57286be21c777ee5383d27b252f72", 0x40}], 0x4}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x33fe0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000001080000000096930000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.231381927s ago: executing program 2 (id=1389): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@allocspi={0x128, 0x16, 0x1, 0x0, 0x0, {{{@in=@broadcast, @in6=@mcast2}, {@in=@dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x6c}, @in=@local, {0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfff}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0x1032}, [@XFRMA_SET_MARK_MASK={0x8}, @address_filter={0x28, 0x1a, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x8, 0x0}, 0x2, 0xf9, 0xf8}}]}, 0x128}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 1.202657894s ago: executing program 0 (id=1390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x10) (fail_nth: 23) 1.140936474s ago: executing program 4 (id=1391): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000040)={0x64, 0x12, 0x203, 0x0, 0x0, {}, [@INET_DIAG_REQ_BYTECODE={0x18, 0x1, "0008c872e1d55d8a0d2e8c0b1a4013b07be15811"}]}, 0x64}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="7c010000190001000000000000000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c400050000000000000000000000000000000000000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000003c00000000000000200100000000000000000000000000020000000000000000000000000000000000000000e0000002000000000000000000000000000000003300000000000000000000000000000000000000000000000000000000000000000000000000000000000000b900c591db1e227f787c09154cfb7c2747e67d41e0d40e41f6d7a7c353c79e4dc73548abff04a03ee55beda0801431437759c4c4dd6fea8d36a89254b4c7f681a0cd1d1cc79df5d9ae61e2dc51e2cd60702784c98fc8d5173bda1525801866cc17e4cc", @ANYRES32=r0, @ANYRES8=r0], 0x17c}}, 0x0) 1.133478796s ago: executing program 2 (id=1392): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000080)=0xf1b, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) epoll_create1(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) socket$kcm(0x21, 0x2, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000380)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x0, 0x0, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, 0x0}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x20000000000028, 0x0, 0x1}, 0x0, 0x0) ioctl$int_in(r3, 0x5452, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 1.124797789s ago: executing program 1 (id=1393): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x10, 0x80, 0x80, 0xffff1e07, {{0x35, 0x4, 0x2, 0x3a, 0xd4, 0x68, 0x0, 0xb3, 0x4, 0x0, @private=0xa010102, @private=0xa010101, {[@timestamp_addr={0x44, 0x1c, 0xa6, 0x1, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20}, {@rand_addr=0x64010101, 0x63}, {@broadcast, 0x7}]}, @timestamp_prespec={0x44, 0xc, 0xe2, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x3d}, 0x8}]}, @timestamp_addr={0x44, 0x14, 0x9a, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0xa9}, {@local, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x66, 0x3, 0x2, [{@multicast2, 0x5}, {@broadcast, 0xd7f}, {@broadcast, 0xfffffc00}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x9}, {@broadcast, 0x8000}, {@remote}]}, @ssrr={0x89, 0x23, 0x89, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @loopback, @rand_addr=0x64010100, @broadcast, @remote, @loopback, @multicast2]}, @end, @lsrr={0x83, 0x27, 0x96, [@multicast2, @multicast1, @remote, @broadcast, @multicast1, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000540)={'gre0\x00', r5, 0x20, 0x80, 0x2, 0x100, {{0x2e, 0x4, 0x3, 0xf, 0xb8, 0x64, 0x0, 0x2, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@noop, @timestamp_prespec={0x44, 0x24, 0xdc, 0x3, 0x0, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0xfffffffc}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8ceb}]}, @timestamp={0x44, 0x14, 0x7e, 0x0, 0x6, [0x81, 0x0, 0x5, 0x800]}, @timestamp_prespec={0x44, 0x34, 0x63, 0x3, 0x1, [{@local, 0x5}, {@local, 0x7}, {@broadcast, 0x80000000}, {@private=0xa010101, 0x8c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@broadcast, 0x7f}]}, @ssrr={0x89, 0x1b, 0x58, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0xc}, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x30}]}, @cipso={0x86, 0x1a, 0x3, [{0x2, 0x11, "c58a425d240b449411f27b4e152036"}, {0x6, 0x3, "d4"}]}]}}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) socket$inet6(0xa, 0x80803, 0x87) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000038500000023000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x60000002, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bond_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r9, &(0x7f0000000000)={0x23, 0x20}, 0x10) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r10, &(0x7f0000000000)={0x23, 0x20}, 0x10) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) 788.927627ms ago: executing program 4 (id=1394): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000caaffb), 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond_slave_0\x00', &(0x7f0000000000)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000040)) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, 0x0, 0x0) (async) write$binfmt_script(r1, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x34}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r0, 0x4000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) unshare(0x28000600) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) clock_gettime(0x0, 0x0) 745.93882ms ago: executing program 0 (id=1395): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="74000000100003050000000000000a1a90e300", @ANYRES32=0x0, @ANYBLOB="00000000010000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928a2ced1fe60008000300030000000a000400aaaaccaaaabb000008000500", @ANYRES32=r1], 0x74}}, 0x0) 669.572244ms ago: executing program 0 (id=1396): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x2000, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 625.050742ms ago: executing program 4 (id=1397): syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a0000fec00000002c00001200ffffe0000012fe8000000000000000000000000300aa8400000000000000223427d5c9a46b9f2e505b0c0a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386c020000000000000017fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b653d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b5295e93496a6fdf5af8122257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087aec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d44dee62c4fc1007bc5b0ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7"], 0x0) 570.182522ms ago: executing program 0 (id=1398): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010200000000ffff0000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000253c0011800a0001006c696d69740000002c0002800c00f3400000000000000003080003400000002008000440000000010c000140"], 0xc0}, 0x1, 0x0, 0x0, 0x810}, 0xc4) 564.861267ms ago: executing program 4 (id=1399): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r2, 0xfffffffffffffffc, {}, 0xfe}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000740)={&(0x7f0000000500)={0x1d, r2, 0x0, {0x2, 0x0, 0x2}}, 0x18, &(0x7f0000000700)={0x0}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r3) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newlink={0x30, 0x10, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, 0x2c120}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x30}}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e40)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e40)={0x24, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000085000000d000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000085000000d000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) socketpair(0x5, 0x80000, 0x76f, &(0x7f0000000040)) (async) socketpair(0x5, 0x80000, 0x76f, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TLS_TX(r10, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "31f83a6ea50111fe", "06f400264ac9094b0f92ff76da52c2ed", "987eb0ec", "d49f0ca3f17b9595"}, 0x28) connect$unix(r9, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 420.889787ms ago: executing program 0 (id=1400): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) close(0x3) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x406f413, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000800)="39000000140081ae00003c000500218311001fa2660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb301000000dbb7d553b4", 0x36}], 0x1}, 0x20000050) 277.889845ms ago: executing program 4 (id=1401): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20028850}, 0x4810) (async) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20028850}, 0x4810) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000180)={'ip6gre0\x00'}) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000200)={'ip6_vti0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000240)) (async) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000240)) sendfile(r1, r1, 0x0, 0xc) (async) sendfile(r1, r1, 0x0, 0xc) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000011) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000380)={0x2, "db71"}, 0x3) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0x40, 0xe, 0x5}, 0xc) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000003c0)={0x40, 0xe, 0x5}, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x70, r2, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20040801}, 0x4040891) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000580)) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000580)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r5, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x58, r6, 0x4, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x810) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e21, 0x3, @local, 0x4}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x4e21, 0x3, @local, 0x4}, 0x1c) openat$cgroup_ro(r1, &(0x7f0000000840)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x8, [@func_proto={0x0, 0xa, 0x0, 0xd, 0x0, [{0xd, 0x1}, {0xf, 0x5}, {0xf, 0x2}, {0x6, 0x3}, {0x10, 0x1}, {0xc, 0x2}, {0x5, 0x2}, {0x10, 0x3}, {0xa, 0x1}, {0x1, 0x3}]}]}, {0x0, [0x30, 0x61, 0x2e, 0x30, 0x5f, 0x30]}}, &(0x7f0000000900)=""/225, 0x7c, 0xe1, 0x0, 0x4}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd8, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x24}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x404c040}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd8, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x73}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2, 0x24}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}]]}, 0xd8}, 0x1, 0x0, 0x0, 0x404c040}, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000c00)={@remote, @random="a3872f2321e4", @void, {@generic={0x88fb, "a3dd340d2767e0d4d3859e2a534e607d3875d1ee886aaa9652a9b2d7d9d5eac144f89c4ac6b4dbe7e58c509068fcc3eb338d57fc0f486f2a5265d74eed34e307999f9e33fa0efe976078788ddbce2579c63f226c1996b802c02279500664ce80fba7370bb902957005e072e76699bee377e8446aec83e578fa8f7ab67f91787eaa02fe6b20f3f004ace4ddc392bc21c612e31a69"}}}, &(0x7f0000000cc0)={0x1, 0x2, [0xf14, 0x97f, 0x34, 0xfed]}) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000d00)={0x2, 0x2, 0x30}) (async) ioctl$BTRFS_IOC_SET_FEATURES(r1, 0x40309439, &(0x7f0000000d00)={0x2, 0x2, 0x30}) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000d80), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r10, 0x10, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x80) unshare(0x8000000) (async) unshare(0x8000000) 196.887056ms ago: executing program 1 (id=1402): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed3871be52930316f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000800)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002500000095000000000000001a7806c538c229c9b05f19e2ec9622a93e1e07eea201fc24917a3133f68cd7a30610d3d1ab287b09eb4433505f332e327ec196e83fe353024107ca943e3e307da98bcdf9cc75bfeece02427068be1b9a8b9f46a3371cd342113bd5aa7f689d9708b4ada6b68a14a522737d8359d325"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{}, {&(0x7f0000000040)="1162965f002e6fb7146feac815cae7b2449123ea0b57fe6318b014042db5307a578147e0e886b7fd93abcfeeced030bb6af5bfbb4e37a4bc8c7b44edc532b46929f37b07685fa996d1d15b195f5b7d106cf51d84b6f656c514a8a2730749f86e852c5240a313662127242e03e9677d697a21a74f66d1ce49e5510667414e594ba7ffb1131e067637f1652eac018d3d79e7686d0d13fa51fcbef840da4195045be045104b2ad3af5fe1f9a6e5f92fd2c9009cc9680518425a53c0e81423bd300ae4b1fc5d466aa59460def7d82d0e103538afd210fb3c063cdeb0061afe52d90f8502a6a156c1f590797352cbff56c4f4a4ce7c", 0xf3}, {&(0x7f00000001c0)="cbce489de962138523e1f3172afc4204a719653d64a825ee9b754eaa30875a3edfae8d3d87a5f928b8ba5da4ec8912c0a4ac23180fdafa6b9d7558025115d2effc7c913194ea8d74d727f63421fc37eac87f", 0x52}, {&(0x7f0000000140)="82ff1c252d5342e3da0a625ceda3a23d927b47e3b0fb40f2795262efef063822d10138357754aa0cc2318dad86fc68989af57286be21c777ee5383d27b252f72", 0x40}], 0x4}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x33fe0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000001080000000096930000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 130.854708ms ago: executing program 2 (id=1403): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000080)=0xf1b, 0x4) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) epoll_create1(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2a020400) socket$kcm(0x21, 0x2, 0x2) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d80)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000380)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x0, 0x84}, {}]}, 0x108) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x2}, {&(0x7f0000000300)}], 0x3}], 0x1, 0x0) connect$rxrpc(r9, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x20000000000028, 0x0, 0x1}, 0x0, 0x0) ioctl$int_in(r3, 0x5452, 0x0) sendto$inet6(r3, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) 76.718203ms ago: executing program 4 (id=1404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000011c0)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000000)={0x7, 0x7, 0x4}, &(0x7f0000000040)=0x28) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x9, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_emit_ethernet(0xa6, &(0x7f0000000200)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "1200b0", 0x70, 0x3a, 0x0, @empty, @mcast2, {[], @dest_unreach={0x3, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "277382", 0x0, 0x2c, 0x0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [@hopopts={0x2f, 0x6, '\x00', [@calipso={0x7, 0x30, {0x22ebffff, 0xa, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0]}}]}]}}}}}}}, 0x0) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x62) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000004c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f00000003c0)=0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xc3ff}}, 0x0) 75.062598ms ago: executing program 1 (id=1405): syz_extract_tcp_res$synack(&(0x7f0000000540), 0x1, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000e, 0x4000}, 0x10}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="20008000000000fc"], 0x20}}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRESHEX=0x0], 0x40}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffc, 0x30}, 0xc) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)=""/125, 0x11f, 0x7d, 0x0, 0x4}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x7, 0x7, 0x3ff, 0x1880, 0xffffffffffffffff, 0x3f3, '\x00', 0x0, r3, 0x5, 0x2, 0x3, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300003b000000b704000000000000850000003300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvfrom$l2tp(r0, 0x0, 0xc00, 0x122, 0x0, 0x0) 0s ago: executing program 3 (id=815): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) close(r1) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0x11, &(0x7f0000001640), 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a}, 0x90) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000006a00000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0xffffffa1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x30, 0x10, 0x401, 0x70bd28, 0x101, {0x0, 0x0, 0x0, 0x0, 0x9, 0x20002}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x7}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$netrom(r8, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r10}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): X: 000000000000002c [ 172.579458][ T7670] RAX: ffffffffffffffda RBX: 00007f554d515f80 RCX: 00007f554d379e79 [ 172.587437][ T7670] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000003 [ 172.595418][ T7670] RBP: 00007f554e093090 R08: 00000000200004c0 R09: 000000000000001c [ 172.603396][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.611372][ T7670] R13: 0000000000000000 R14: 00007f554d515f80 R15: 00007fff4dab80c8 [ 172.619365][ T7670] [ 172.745889][ T7639] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.753992][ T7639] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.761725][ T7639] bridge_slave_0: entered allmulticast mode [ 172.769653][ T7639] bridge_slave_0: entered promiscuous mode [ 172.794959][ T7639] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.809494][ T7639] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.816911][ T7639] bridge_slave_1: entered allmulticast mode [ 172.825156][ T7639] bridge_slave_1: entered promiscuous mode [ 172.906724][ T7639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.948984][ T7639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.053665][ T7639] team0: Port device team_slave_0 added [ 173.077506][ T7639] team0: Port device team_slave_1 added [ 173.098119][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.838'. [ 173.179675][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.834'. [ 173.253053][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.340786][ T7639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.348567][ T7639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.384634][ T7639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.438675][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.445935][ T7693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.510896][ T7698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.842'. [ 173.548968][ T7698] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.576287][ T7639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.589350][ T7639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.645217][ T7639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.731617][ T55] Bluetooth: hci2: command tx timeout [ 173.746674][ T7639] hsr_slave_0: entered promiscuous mode [ 173.826268][ T7639] hsr_slave_1: entered promiscuous mode [ 173.856061][ T7713] FAULT_INJECTION: forcing a failure. [ 173.856061][ T7713] name failslab, interval 1, probability 0, space 0, times 0 [ 173.901423][ T7713] CPU: 1 UID: 0 PID: 7713 Comm: syz.1.845 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 173.912115][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 173.922208][ T7713] Call Trace: [ 173.925517][ T7713] [ 173.928486][ T7713] dump_stack_lvl+0x241/0x360 [ 173.933212][ T7713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.938454][ T7713] ? __pfx__printk+0x10/0x10 [ 173.943098][ T7713] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 173.948600][ T7713] ? __pfx___might_resched+0x10/0x10 [ 173.953942][ T7713] should_fail_ex+0x3b0/0x4e0 [ 173.958755][ T7713] should_failslab+0xac/0x100 [ 173.963486][ T7713] ? alloc_pipe_info+0xeb/0x4d0 [ 173.968389][ T7713] __kmalloc_cache_noprof+0x6c/0x2c0 [ 173.973722][ T7713] alloc_pipe_info+0xeb/0x4d0 [ 173.978445][ T7713] splice_direct_to_actor+0xaac/0xc90 [ 173.983856][ T7713] ? aa_file_perm+0x3ef/0xf60 [ 173.988675][ T7713] ? __pfx_aa_file_perm+0x10/0x10 [ 173.993752][ T7713] ? __pfx_direct_splice_actor+0x10/0x10 [ 173.999449][ T7713] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 174.005387][ T7713] ? __fget_files+0x29/0x470 [ 174.010019][ T7713] ? __pfx_lock_release+0x10/0x10 [ 174.015095][ T7713] do_splice_direct+0x28c/0x3e0 [ 174.019994][ T7713] ? __pfx_do_splice_direct+0x10/0x10 [ 174.025404][ T7713] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 174.031341][ T7713] ? security_file_permission+0x7f/0xa0 [ 174.036946][ T7713] ? rw_verify_area+0x1d2/0x6b0 [ 174.041843][ T7713] do_sendfile+0x56d/0xe20 [ 174.046400][ T7713] ? __pfx_do_sendfile+0x10/0x10 [ 174.051396][ T7713] __se_sys_sendfile64+0x17c/0x1e0 [ 174.056571][ T7713] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 174.062251][ T7713] ? do_syscall_64+0x100/0x230 [ 174.067057][ T7713] ? do_syscall_64+0xb6/0x230 [ 174.071783][ T7713] do_syscall_64+0xf3/0x230 [ 174.076326][ T7713] ? clear_bhb_loop+0x35/0x90 [ 174.081046][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.086981][ T7713] RIP: 0033:0x7f04ec579e79 [ 174.091434][ T7713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.111084][ T7713] RSP: 002b:00007f04ed3e6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 174.119550][ T7713] RAX: ffffffffffffffda RBX: 00007f04ec716130 RCX: 00007f04ec579e79 [ 174.127553][ T7713] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 174.135558][ T7713] RBP: 00007f04ed3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 174.143569][ T7713] R10: 000000008000002b R11: 0000000000000246 R12: 0000000000000001 [ 174.151587][ T7713] R13: 0000000000000001 R14: 00007f04ec716130 R15: 00007ffd87e7b148 [ 174.159608][ T7713] [ 174.165750][ T7639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.178646][ T7639] Cannot create hsr debugfs directory [ 174.622456][ T7707] syz.2.844 (7707) used greatest stack depth: 16208 bytes left [ 174.814037][ T7639] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.886807][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 174.892695][ T7729] netlink: 16 bytes leftover after parsing attributes in process `syz.2.853'. [ 175.012224][ T7639] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.029843][ T7735] netlink: 'syz.2.855': attribute type 1 has an invalid length. [ 175.124781][ T7639] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.231899][ T7639] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.320929][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 175.493644][ T7750] xfrm1: entered promiscuous mode [ 175.498829][ T7750] xfrm1: entered allmulticast mode [ 175.529866][ T7639] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.547932][ T7639] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.562243][ T7639] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.591070][ T7639] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.799755][ T55] Bluetooth: hci2: command tx timeout [ 175.842348][ T7639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.881219][ T7639] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.906624][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.913885][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.953979][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.961327][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.044892][ T7639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.182634][ T7771] __nla_validate_parse: 3 callbacks suppressed [ 176.182655][ T7771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.868'. [ 176.342626][ T7639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.436304][ T7639] veth0_vlan: entered promiscuous mode [ 176.458608][ T7639] veth1_vlan: entered promiscuous mode [ 176.533201][ T7639] veth0_macvtap: entered promiscuous mode [ 176.555483][ T7639] veth1_macvtap: entered promiscuous mode [ 176.593779][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.617186][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.632954][ T7639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.659871][ T7639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.672110][ T7639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.694026][ T7639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.723127][ T7639] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.749026][ T7639] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.770416][ T7639] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.779358][ T7639] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.865067][ T7791] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 176.889446][ T7791] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 176.897547][ T7791] gretap5: entered promiscuous mode [ 176.918409][ T7791] gretap5: entered allmulticast mode [ 177.052029][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.089249][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.133571][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.152712][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.200372][ T7800] netlink: 216 bytes leftover after parsing attributes in process `syz.2.877'. [ 178.484625][ T7829] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6 [ 178.496491][ T7829] gretap6: default qdisc (pfifo_fast) fail, fallback to noqueue [ 178.506274][ T7829] gretap6: entered promiscuous mode [ 178.512005][ T7829] gretap6: entered allmulticast mode [ 178.883659][ T7835] batadv_slave_0: entered promiscuous mode [ 178.913668][ T7838] netlink: 'syz.2.890': attribute type 10 has an invalid length. [ 178.928374][ T7838] syz_tun: entered promiscuous mode [ 178.962025][ T7838] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 179.110836][ T7844] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.131437][ T7844] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.162684][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.894'. [ 179.173674][ T7844] tipc: Resetting bearer [ 179.183450][ T7844] tipc: Resetting bearer [ 179.240654][ T59] tipc: Resetting bearer [ 179.291202][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.298486][ T7852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.314170][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.321470][ T7852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.508242][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 179.579526][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.1.898'. [ 179.615377][ T5938] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.627059][ T55] block nbd4: Receive control failed (result -107) [ 179.659340][ T7861] nbd4: detected capacity change from 0 to 256 [ 179.713585][ T7863] netdevsim0 speed is unknown, defaulting to 1000 [ 179.973855][ T7868] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 180.010315][ T7868] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 180.011985][ T7871] xt_connbytes: Forcing CT accounting to be enabled [ 180.028824][ T7868] gretap3: entered promiscuous mode [ 180.038519][ T7868] gretap3: entered allmulticast mode [ 180.048958][ T7871] Cannot find del_set index 768 as target [ 180.281199][ T7879] netlink: 20 bytes leftover after parsing attributes in process `syz.4.902'. [ 180.484649][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 180.500908][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 180.530682][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 180.540207][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 180.548392][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 180.556231][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 180.616012][ T7887] ɶƣ0GC¦: entered promiscuous mode [ 180.736637][ T7886] netdevsim0 speed is unknown, defaulting to 1000 [ 180.968673][ T7904] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap7 [ 181.029805][ T5235] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.042740][ T5235] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.051908][ T7904] gretap7: default qdisc (pfifo_fast) fail, fallback to noqueue [ 181.060171][ T5235] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.070710][ T5235] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.080209][ T2488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.093166][ T7904] gretap7: entered promiscuous mode [ 181.098431][ T7904] gretap7: entered allmulticast mode [ 181.104670][ T5235] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 181.112846][ T5235] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.183328][ T7914] bond0: (slave syz_tun): Releasing backup interface [ 181.210364][ T7914] bridge_slave_0: left allmulticast mode [ 181.216234][ T7914] bridge_slave_0: left promiscuous mode [ 181.225512][ T7914] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.239801][ T7914] bridge_slave_1: left allmulticast mode [ 181.245653][ T7914] bridge_slave_1: left promiscuous mode [ 181.255458][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.276513][ T7914] bond0: (slave bond_slave_0): Releasing backup interface [ 181.315566][ T7914] team0: Port device team_slave_0 removed [ 181.356712][ T7914] team0: Port device team_slave_1 removed [ 181.394503][ T7908] netdevsim0 speed is unknown, defaulting to 1000 [ 181.446517][ T7917] team0: Port device wg2 added [ 181.467939][ T7921] bridge: RTM_NEWNEIGH with invalid ether address [ 181.586639][ T5938] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.609871][ T7926] openvswitch: netlink: Key type 12592 is out of range max 32 [ 181.754176][ T5938] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.931866][ T5938] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.214269][ T7886] chnl_net:caif_netlink_parms(): no params data found [ 182.599755][ T5235] Bluetooth: hci2: command tx timeout [ 182.617402][ T7945] netlink: 'syz.4.927': attribute type 1 has an invalid length. [ 182.628620][ T7945] netlink: 224 bytes leftover after parsing attributes in process `syz.4.927'. [ 182.699863][ T5938] bridge_slave_1: left allmulticast mode [ 182.706574][ T5938] bridge_slave_1: left promiscuous mode [ 182.714214][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.740400][ T5938] bridge_slave_0: left allmulticast mode [ 182.746157][ T5938] bridge_slave_0: left promiscuous mode [ 182.759727][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.159704][ T5235] Bluetooth: hci5: command tx timeout [ 183.364839][ T5938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.376998][ T5938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.397125][ T5938] bond0 (unregistering): Released all slaves [ 183.449971][ T7953] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 183.475558][ T7953] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 183.484417][ T7953] gretap4: entered promiscuous mode [ 183.489881][ T7953] gretap4: entered allmulticast mode [ 183.713737][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.739671][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.759486][ T7886] bridge_slave_0: entered allmulticast mode [ 183.767172][ T7886] bridge_slave_0: entered promiscuous mode [ 183.800980][ T7908] chnl_net:caif_netlink_parms(): no params data found [ 183.947379][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.959992][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.967548][ T7886] bridge_slave_1: entered allmulticast mode [ 183.977135][ T7886] bridge_slave_1: entered promiscuous mode [ 184.013244][ T7971] vlan3: entered promiscuous mode [ 184.196302][ T7886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.255925][ T5938] hsr_slave_0: left promiscuous mode [ 184.281450][ T5938] hsr_slave_1: left promiscuous mode [ 184.288261][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.306682][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.316461][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.324931][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.356384][ T5938] veth1_macvtap: left promiscuous mode [ 184.364995][ T5938] veth0_macvtap: left promiscuous mode [ 184.371252][ T5938] veth1_vlan: left promiscuous mode [ 184.377158][ T5938] veth0_vlan: left promiscuous mode [ 184.679609][ T5235] Bluetooth: hci2: command tx timeout [ 185.239311][ T5235] Bluetooth: hci5: command tx timeout [ 185.420567][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 185.514010][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 186.131632][ T2488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.434190][ T7886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.689514][ T7886] team0: Port device team_slave_0 added [ 186.728449][ T7886] team0: Port device team_slave_1 added [ 186.759510][ T5235] Bluetooth: hci2: command tx timeout [ 186.842181][ T7908] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.860740][ T7908] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.868058][ T7908] bridge_slave_0: entered allmulticast mode [ 186.896728][ T7908] bridge_slave_0: entered promiscuous mode [ 186.932192][ T7908] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.949355][ T7908] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.956656][ T7908] bridge_slave_1: entered allmulticast mode [ 186.974730][ T7908] bridge_slave_1: entered promiscuous mode [ 187.010579][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.037068][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.081435][ T7886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.146699][ T8013] netlink: 'syz.1.946': attribute type 11 has an invalid length. [ 187.161227][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.173387][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.205960][ T7886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.256579][ T7908] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.302750][ T7908] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.319535][ T5235] Bluetooth: hci5: command tx timeout [ 187.499621][ T7886] hsr_slave_0: entered promiscuous mode [ 187.521340][ T7886] hsr_slave_1: entered promiscuous mode [ 187.528028][ T7886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.544860][ T7886] Cannot create hsr debugfs directory [ 187.595285][ T7908] team0: Port device team_slave_0 added [ 187.627301][ T7908] team0: Port device team_slave_1 added [ 187.860909][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.867999][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.908135][ T7908] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.097501][ T7908] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.105181][ T7908] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.138335][ T7908] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.193474][ T8041] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 188.215590][ T8041] gretap5: default qdisc (pfifo_fast) fail, fallback to noqueue [ 188.235443][ T8041] gretap5: entered promiscuous mode [ 188.240953][ T8041] gretap5: entered allmulticast mode [ 188.357051][ T8043] FAULT_INJECTION: forcing a failure. [ 188.357051][ T8043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.370991][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.4.956 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 188.381625][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 188.391716][ T8043] Call Trace: [ 188.395003][ T8043] [ 188.397938][ T8043] dump_stack_lvl+0x241/0x360 [ 188.402656][ T8043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.407868][ T8043] ? __pfx__printk+0x10/0x10 [ 188.412475][ T8043] ? __pfx_lock_release+0x10/0x10 [ 188.417534][ T8043] should_fail_ex+0x3b0/0x4e0 [ 188.422235][ T8043] _copy_from_iter+0x1f6/0x1960 [ 188.427117][ T8043] ? __virt_addr_valid+0x183/0x530 [ 188.432262][ T8043] ? __pfx_lock_release+0x10/0x10 [ 188.437326][ T8043] ? __alloc_skb+0x28f/0x440 [ 188.441922][ T8043] ? __pfx__copy_from_iter+0x10/0x10 [ 188.447571][ T8043] ? __virt_addr_valid+0x183/0x530 [ 188.452692][ T8043] ? __virt_addr_valid+0x183/0x530 [ 188.457810][ T8043] ? __virt_addr_valid+0x45f/0x530 [ 188.462929][ T8043] ? __check_object_size+0x49c/0x900 [ 188.468254][ T8043] netlink_sendmsg+0x73d/0xcb0 [ 188.473039][ T8043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.478331][ T8043] ? __import_iovec+0x536/0x820 [ 188.483208][ T8043] ? aa_sock_msg_perm+0x91/0x160 [ 188.488176][ T8043] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 188.493528][ T8043] ? security_socket_sendmsg+0x87/0xb0 [ 188.499045][ T8043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.504368][ T8043] __sock_sendmsg+0x221/0x270 [ 188.509066][ T8043] ____sys_sendmsg+0x525/0x7d0 [ 188.513856][ T8043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.519186][ T8043] __sys_sendmsg+0x2b0/0x3a0 [ 188.523806][ T8043] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.528933][ T8043] ? vfs_write+0x7c4/0xc90 [ 188.533428][ T8043] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 188.539809][ T8043] ? do_syscall_64+0x100/0x230 [ 188.544587][ T8043] ? do_syscall_64+0xb6/0x230 [ 188.549287][ T8043] do_syscall_64+0xf3/0x230 [ 188.553834][ T8043] ? clear_bhb_loop+0x35/0x90 [ 188.558535][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.564443][ T8043] RIP: 0033:0x7f554d379e79 [ 188.568868][ T8043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.588492][ T8043] RSP: 002b:00007f554e093038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.596927][ T8043] RAX: ffffffffffffffda RBX: 00007f554d515f80 RCX: 00007f554d379e79 [ 188.604908][ T8043] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 188.612898][ T8043] RBP: 00007f554e093090 R08: 0000000000000000 R09: 0000000000000000 [ 188.620886][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.628867][ T8043] R13: 0000000000000000 R14: 00007f554d515f80 R15: 00007fff4dab80c8 [ 188.636866][ T8043] [ 188.657061][ T7908] hsr_slave_0: entered promiscuous mode [ 188.666439][ T7908] hsr_slave_1: entered promiscuous mode [ 188.677561][ T7908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.699563][ T7908] Cannot create hsr debugfs directory [ 188.816925][ T8051] netlink: 'syz.1.958': attribute type 10 has an invalid length. [ 188.839461][ T5235] Bluetooth: hci2: command tx timeout [ 189.163294][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 189.200817][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.963'. [ 189.220601][ T7886] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.324334][ T7908] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.370630][ T7886] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.383107][ T7886] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.394939][ T7886] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.408897][ T5235] Bluetooth: hci5: command tx timeout [ 189.471064][ T7908] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.566769][ T7908] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.728175][ T7908] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.853169][ T8076] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap8 [ 189.882372][ T8076] gretap8: default qdisc (pfifo_fast) fail, fallback to noqueue [ 189.919668][ T8076] gretap8: entered promiscuous mode [ 189.924942][ T8076] gretap8: entered allmulticast mode [ 189.999935][ T7886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.114374][ T7886] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.182515][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.189739][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.298840][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.306043][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.352375][ T7908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 190.374494][ T7908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 190.388919][ T8082] FAULT_INJECTION: forcing a failure. [ 190.388919][ T8082] name failslab, interval 1, probability 0, space 0, times 0 [ 190.404449][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.1.970 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 190.415099][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 190.425198][ T8082] Call Trace: [ 190.428510][ T8082] [ 190.431476][ T8082] dump_stack_lvl+0x241/0x360 [ 190.436202][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.441439][ T8082] ? __pfx__printk+0x10/0x10 [ 190.446451][ T8082] should_fail_ex+0x3b0/0x4e0 [ 190.451626][ T8082] should_failslab+0xac/0x100 [ 190.456359][ T8082] ? sctp_add_bind_addr+0x89/0x3a0 [ 190.461521][ T8082] __kmalloc_cache_noprof+0x6c/0x2c0 [ 190.466865][ T8082] sctp_add_bind_addr+0x89/0x3a0 [ 190.471940][ T8082] sctp_copy_local_addr_list+0x311/0x500 [ 190.477625][ T8082] ? sctp_copy_local_addr_list+0xab/0x500 [ 190.483397][ T8082] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 190.489609][ T8082] ? sctp_v6_is_any+0x60/0x70 [ 190.494351][ T8082] sctp_bind_addr_copy+0xad/0x3b0 [ 190.499421][ T8082] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 190.505888][ T8082] sctp_connect_new_asoc+0x2f3/0x6c0 [ 190.511229][ T8082] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 190.517092][ T8082] ? sctp_sendmsg+0xbb9/0x3520 [ 190.521914][ T8082] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 190.527511][ T8082] ? security_sctp_bind_connect+0x90/0xb0 [ 190.533281][ T8082] sctp_sendmsg+0x219a/0x3520 [ 190.538036][ T8082] ? __pfx_sctp_sendmsg+0x10/0x10 [ 190.543127][ T8082] ? __pfx_aa_sk_perm+0x10/0x10 [ 190.548038][ T8082] ? inet_sendmsg+0x330/0x390 [ 190.552766][ T8082] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 190.558135][ T8082] ? security_socket_sendmsg+0x87/0xb0 [ 190.563657][ T8082] __sock_sendmsg+0x1a6/0x270 [ 190.568396][ T8082] __sys_sendto+0x3a4/0x4f0 [ 190.572955][ T8082] ? __pfx___sys_sendto+0x10/0x10 [ 190.578063][ T8082] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 190.584111][ T8082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.590512][ T8082] __x64_sys_sendto+0xde/0x100 [ 190.595335][ T8082] do_syscall_64+0xf3/0x230 [ 190.599893][ T8082] ? clear_bhb_loop+0x35/0x90 [ 190.604629][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.610571][ T8082] RIP: 0033:0x7f04ec579e79 [ 190.615035][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.634698][ T8082] RSP: 002b:00007f04ed428038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 190.643166][ T8082] RAX: ffffffffffffffda RBX: 00007f04ec715f80 RCX: 00007f04ec579e79 [ 190.651181][ T8082] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000003 [ 190.659192][ T8082] RBP: 00007f04ed428090 R08: 00000000200004c0 R09: 000000000000001c [ 190.667209][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 190.675222][ T8082] R13: 0000000000000000 R14: 00007f04ec715f80 R15: 00007ffd87e7b148 [ 190.683266][ T8082] [ 190.719264][ T7908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 190.738342][ T7908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 190.974211][ T8097] netlink: 332 bytes leftover after parsing attributes in process `syz.1.976'. [ 191.172202][ T7908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.272754][ T7908] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.322866][ T1114] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.330143][ T1114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.362023][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.369273][ T5938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.487575][ T7886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 191.661484][ T7886] veth0_vlan: entered promiscuous mode [ 191.681162][ T7886] veth1_vlan: entered promiscuous mode [ 191.768540][ T7886] veth0_macvtap: entered promiscuous mode [ 191.798772][ T7886] veth1_macvtap: entered promiscuous mode [ 191.859089][ T7886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.894578][ T7886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.912976][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.943737][ T7886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.961789][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 191.980997][ T7886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.000686][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.035096][ T7886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.046940][ T7886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.057185][ T7886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.066482][ T7886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.136843][ T7908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.326894][ T8131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.982'. [ 192.408363][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.424255][ T7908] veth0_vlan: entered promiscuous mode [ 192.425508][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.531905][ T7908] veth1_vlan: entered promiscuous mode [ 192.542644][ T8135] netlink: 36 bytes leftover after parsing attributes in process `syz.1.983'. [ 192.555372][ T5936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.571794][ T5936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.712005][ T7908] veth0_macvtap: entered promiscuous mode [ 192.825609][ T7908] veth1_macvtap: entered promiscuous mode [ 192.878520][ T8138] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.981054][ T8142] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.988253][ T8142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.115933][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.137546][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.183555][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.194127][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.210379][ T7908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.241974][ T8150] openvswitch: netlink: Key type 12592 is out of range max 32 [ 193.252635][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.272870][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.286442][ T7908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.297341][ T7908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.314549][ T7908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.343321][ T7908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.352941][ T7908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.361969][ T7908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.372811][ T7908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.536441][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.556113][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.621062][ T5936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 193.634104][ T5936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 193.785087][ T8159] tipc: Started in network mode [ 193.793952][ T8159] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 193.805246][ T8159] tipc: Enabled bearer , priority 10 [ 194.068099][ T8167] Cannot find add_set index 0 as target [ 194.085849][ T8165] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 194.101546][ T8165] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 194.541069][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.547471][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.784946][ T5938] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.920518][ T47] tipc: Node number set to 4269801488 [ 196.181931][ T5938] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.373220][ T5938] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.562113][ T5938] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.605501][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 196.607217][ T5235] Bluetooth: hci1: command 0x0406 tx timeout [ 196.930304][ T5938] bridge_slave_1: left allmulticast mode [ 196.936047][ T5938] bridge_slave_1: left promiscuous mode [ 196.989622][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.030260][ T5938] bridge_slave_0: left allmulticast mode [ 197.035975][ T5938] bridge_slave_0: left promiscuous mode [ 197.109682][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.732340][ T5936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 198.989907][ T5938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.160544][ T5938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.223607][ T5938] bond0 (unregistering): Released all slaves [ 199.656060][ T5286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 200.129573][ T5938] hsr_slave_0: left promiscuous mode [ 200.179471][ T5938] hsr_slave_1: left promiscuous mode [ 200.213180][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.231996][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.282061][ T5938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.352986][ T5938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.527878][ T5938] veth1_macvtap: left promiscuous mode [ 200.579434][ T5938] veth0_macvtap: left promiscuous mode [ 200.585174][ T5938] veth1_vlan: left promiscuous mode [ 200.631706][ T5938] veth0_vlan: left promiscuous mode [ 202.607607][ T5938] team0 (unregistering): Port device team_slave_1 removed [ 202.663541][ T5938] team0 (unregistering): Port device team_slave_0 removed [ 203.217227][ T8177] ip6tnl1: entered promiscuous mode [ 203.226408][ T8177] ip6tnl1: entered allmulticast mode [ 203.356366][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1004'. [ 203.426451][ T8195] openvswitch: netlink: Key type 12592 is out of range max 32 [ 203.480677][ T2521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 203.723680][ T8207] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1012'. [ 203.971115][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.986395][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 203.999987][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.010059][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.019281][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 204.030357][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.068252][ T8213] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.143790][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.151042][ T8221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.274518][ T8217] netdevsim0 speed is unknown, defaulting to 1000 [ 204.577126][ T8217] chnl_net:caif_netlink_parms(): no params data found [ 204.856566][ T8217] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.871938][ T8217] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.903809][ T8217] bridge_slave_0: entered allmulticast mode [ 204.913714][ T8217] bridge_slave_0: entered promiscuous mode [ 204.945748][ T8217] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.961539][ T8217] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.979217][ T8217] bridge_slave_1: entered allmulticast mode [ 204.993249][ T8217] bridge_slave_1: entered promiscuous mode [ 205.002093][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 205.023100][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1025'. [ 205.136101][ T8217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.162292][ T8260] openvswitch: netlink: Key type 12592 is out of range max 32 [ 205.196556][ T8217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.232317][ T8262] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 205.250390][ T8262] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 205.260011][ T8262] gretap1: entered promiscuous mode [ 205.265275][ T8262] gretap1: entered allmulticast mode [ 205.326154][ T8266] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 205.396748][ T8217] team0: Port device team_slave_0 added [ 205.465369][ T8217] team0: Port device team_slave_1 added [ 205.562941][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.580820][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.614521][ T8217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.629898][ T8217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.637089][ T8217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.667821][ T8217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.719658][ T8275] netlink: 'syz.0.1033': attribute type 3 has an invalid length. [ 205.744033][ T8275] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1033'. [ 205.823592][ T8217] hsr_slave_0: entered promiscuous mode [ 205.840471][ T8217] hsr_slave_1: entered promiscuous mode [ 205.847173][ T8217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.857382][ T8217] Cannot create hsr debugfs directory [ 206.136410][ T5235] Bluetooth: hci2: command tx timeout [ 206.268305][ T8284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1034'. [ 206.339638][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 206.381989][ T5235] block nbd5: Receive control failed (result -107) [ 206.430044][ T8284] nbd5: detected capacity change from 0 to 256 [ 206.740373][ T8217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 206.751839][ T8217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 206.767214][ T8217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 206.782016][ T8217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 206.937422][ T8217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.970171][ T8217] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.997643][ T2488] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.004951][ T2488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.046698][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.054018][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.330718][ T8313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 207.475517][ T8318] openvswitch: netlink: Key type 12592 is out of range max 32 [ 207.512620][ T8217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.542277][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1044'. [ 207.627979][ T8217] veth0_vlan: entered promiscuous mode [ 207.673544][ T8217] veth1_vlan: entered promiscuous mode [ 207.782195][ T8323] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.792966][ T8323] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.874350][ T8329] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.881638][ T8329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.894960][ T8329] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.902221][ T8329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.007792][ T8217] veth0_macvtap: entered promiscuous mode [ 208.035956][ T8217] veth1_macvtap: entered promiscuous mode [ 208.072636][ T8335] batadv_slave_0: left promiscuous mode [ 208.078272][ T8335] batadv_slave_0: entered allmulticast mode [ 208.108576][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.155150][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.179482][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.193219][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.203459][ T5235] Bluetooth: hci2: command tx timeout [ 208.221516][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.268211][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.298022][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.312012][ T8217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.324505][ T8217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.340963][ T8217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.355607][ T8217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.367188][ T8217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.377738][ T8217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.386717][ T8217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.651836][ T8359] openvswitch: netlink: Key type 12592 is out of range max 32 [ 208.661740][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.673482][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.734491][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.750577][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.947287][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.042730][ T8375] FAULT_INJECTION: forcing a failure. [ 209.042730][ T8375] name failslab, interval 1, probability 0, space 0, times 0 [ 209.058515][ T8375] CPU: 1 UID: 0 PID: 8375 Comm: syz.2.1063 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 209.069250][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 209.079322][ T8375] Call Trace: [ 209.082699][ T8375] [ 209.085645][ T8375] dump_stack_lvl+0x241/0x360 [ 209.090348][ T8375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.095557][ T8375] ? __pfx__printk+0x10/0x10 [ 209.100168][ T8375] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 209.106157][ T8375] ? __pfx___might_resched+0x10/0x10 [ 209.111466][ T8375] should_fail_ex+0x3b0/0x4e0 [ 209.116250][ T8375] should_failslab+0xac/0x100 [ 209.120944][ T8375] ? __alloc_skb+0x1c3/0x440 [ 209.125544][ T8375] kmem_cache_alloc_node_noprof+0x71/0x320 [ 209.131366][ T8375] __alloc_skb+0x1c3/0x440 [ 209.135821][ T8375] ? __pfx___alloc_skb+0x10/0x10 [ 209.140789][ T8375] ? netlink_ack_tlv_len+0x6e/0x200 [ 209.146013][ T8375] netlink_ack+0x13f/0xa30 [ 209.150469][ T8375] ? __pfx_lock_acquire+0x10/0x10 [ 209.155530][ T8375] ? __pfx_netlbl_calipso_remove+0x10/0x10 [ 209.161406][ T8375] netlink_rcv_skb+0x262/0x430 [ 209.166182][ T8375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 209.171221][ T8375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 209.176539][ T8375] genl_rcv+0x28/0x40 [ 209.180529][ T8375] netlink_unicast+0x7f6/0x990 [ 209.185320][ T8375] ? __pfx_netlink_unicast+0x10/0x10 [ 209.190617][ T8375] ? __virt_addr_valid+0x183/0x530 [ 209.195739][ T8375] ? __check_object_size+0x49c/0x900 [ 209.201028][ T8375] ? bpf_lsm_netlink_send+0x9/0x10 [ 209.206154][ T8375] netlink_sendmsg+0x8e4/0xcb0 [ 209.210948][ T8375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.216246][ T8375] ? __import_iovec+0x536/0x820 [ 209.221109][ T8375] ? aa_sock_msg_perm+0x91/0x160 [ 209.226060][ T8375] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 209.231357][ T8375] ? security_socket_sendmsg+0x87/0xb0 [ 209.236836][ T8375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.242147][ T8375] __sock_sendmsg+0x221/0x270 [ 209.246863][ T8375] ____sys_sendmsg+0x525/0x7d0 [ 209.251658][ T8375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.256975][ T8375] __sys_sendmsg+0x2b0/0x3a0 [ 209.261586][ T8375] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.266714][ T8375] ? vfs_write+0x7c4/0xc90 [ 209.271183][ T8375] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.277528][ T8375] ? do_syscall_64+0x100/0x230 [ 209.282301][ T8375] ? do_syscall_64+0xb6/0x230 [ 209.286986][ T8375] do_syscall_64+0xf3/0x230 [ 209.291497][ T8375] ? clear_bhb_loop+0x35/0x90 [ 209.296190][ T8375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.302091][ T8375] RIP: 0033:0x7fd436979e79 [ 209.306513][ T8375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.326129][ T8375] RSP: 002b:00007fd4376fe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.334559][ T8375] RAX: ffffffffffffffda RBX: 00007fd436b15f80 RCX: 00007fd436979e79 [ 209.342538][ T8375] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000004 [ 209.350518][ T8375] RBP: 00007fd4376fe090 R08: 0000000000000000 R09: 0000000000000000 [ 209.358495][ T8375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.366471][ T8375] R13: 0000000000000000 R14: 00007fd436b15f80 R15: 00007ffc0ece6698 [ 209.374466][ T8375] [ 209.388679][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.530542][ T8380] netlink: 'syz.2.1064': attribute type 11 has an invalid length. [ 209.547657][ T8380] __nla_validate_parse: 2 callbacks suppressed [ 209.547689][ T8380] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1064'. [ 209.678548][ T8388] netlink: 'syz.2.1067': attribute type 10 has an invalid length. [ 209.705142][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1065'. [ 209.875600][ T8389] sctp: [Deprecated]: syz.0.1066 (pid 8389) Use of int in max_burst socket option deprecated. [ 209.875600][ T8389] Use struct sctp_assoc_value instead [ 209.936529][ T8386] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1066'. [ 209.999395][ T8395] openvswitch: netlink: Key type 12592 is out of range max 32 [ 210.154534][ T8386] infiniband syz1: set active [ 210.161465][ T8386] infiniband syz1: added bridge_slave_0 [ 210.204635][ T8386] RDS/IB: syz1: added [ 210.209597][ T8386] smc: adding ib device syz1 with port count 1 [ 210.215908][ T8386] smc: ib device syz1 port 1 has pnetid [ 210.547265][ T8400] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 210.644849][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 210.655424][ T8402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1072'. [ 210.724225][ T8404] FAULT_INJECTION: forcing a failure. [ 210.724225][ T8404] name failslab, interval 1, probability 0, space 0, times 0 [ 210.737241][ T8404] CPU: 0 UID: 0 PID: 8404 Comm: syz.1.1073 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 210.747972][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 210.758048][ T8404] Call Trace: [ 210.761341][ T8404] [ 210.764278][ T8404] dump_stack_lvl+0x241/0x360 [ 210.768974][ T8404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.774180][ T8404] ? __pfx__printk+0x10/0x10 [ 210.778795][ T8404] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 210.784790][ T8404] ? __pfx___might_resched+0x10/0x10 [ 210.790118][ T8404] ? kasan_save_track+0x51/0x80 [ 210.795005][ T8404] should_fail_ex+0x3b0/0x4e0 [ 210.799709][ T8404] should_failslab+0xac/0x100 [ 210.804414][ T8404] ? __alloc_skb+0x1c3/0x440 [ 210.809021][ T8404] kmem_cache_alloc_node_noprof+0x71/0x320 [ 210.814895][ T8404] __alloc_skb+0x1c3/0x440 [ 210.819326][ T8404] ? __pfx___alloc_skb+0x10/0x10 [ 210.824301][ T8404] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 210.831031][ T8404] ? netlink_ack_tlv_len+0x6e/0x200 [ 210.837125][ T8404] netlink_ack+0x13f/0xa30 [ 210.841565][ T8404] ? lockdep_hardirqs_on+0x99/0x150 [ 210.846798][ T8404] ? nfnetlink_rcv+0x27b4/0x2ad0 [ 210.851788][ T8404] ? kfree+0x149/0x360 [ 210.855872][ T8404] nfnetlink_rcv+0x26c4/0x2ad0 [ 210.860678][ T8404] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 210.865844][ T8404] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.871049][ T8404] ? skb_clone+0x240/0x390 [ 210.875478][ T8404] ? __pfx_lock_release+0x10/0x10 [ 210.880537][ T8404] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.885779][ T8404] netlink_unicast+0x7f6/0x990 [ 210.890573][ T8404] ? __pfx_netlink_unicast+0x10/0x10 [ 210.895869][ T8404] ? __virt_addr_valid+0x183/0x530 [ 210.901012][ T8404] ? __check_object_size+0x49c/0x900 [ 210.906304][ T8404] ? bpf_lsm_netlink_send+0x9/0x10 [ 210.911433][ T8404] netlink_sendmsg+0x8e4/0xcb0 [ 210.916220][ T8404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.921518][ T8404] ? __import_iovec+0x536/0x820 [ 210.926385][ T8404] ? aa_sock_msg_perm+0x91/0x160 [ 210.931339][ T8404] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 210.936641][ T8404] ? security_socket_sendmsg+0x87/0xb0 [ 210.942121][ T8404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.947415][ T8404] __sock_sendmsg+0x221/0x270 [ 210.952117][ T8404] ____sys_sendmsg+0x525/0x7d0 [ 210.956900][ T8404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.962221][ T8404] __sys_sendmsg+0x2b0/0x3a0 [ 210.966826][ T8404] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.971948][ T8404] ? vfs_write+0x7c4/0xc90 [ 210.976413][ T8404] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.982864][ T8404] ? do_syscall_64+0x100/0x230 [ 210.987659][ T8404] ? do_syscall_64+0xb6/0x230 [ 210.992368][ T8404] do_syscall_64+0xf3/0x230 [ 210.996893][ T8404] ? clear_bhb_loop+0x35/0x90 [ 211.001594][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.007530][ T8404] RIP: 0033:0x7f04ec579e79 [ 211.011960][ T8404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.031676][ T8404] RSP: 002b:00007f04ed428038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.040123][ T8404] RAX: ffffffffffffffda RBX: 00007f04ec715f80 RCX: 00007f04ec579e79 [ 211.048185][ T8404] RDX: 0000000000000010 RSI: 0000000020000380 RDI: 0000000000000003 [ 211.056244][ T8404] RBP: 00007f04ed428090 R08: 0000000000000000 R09: 0000000000000000 [ 211.064225][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 211.072205][ T8404] R13: 0000000000000000 R14: 00007f04ec715f80 R15: 00007ffd87e7b148 [ 211.080211][ T8404] [ 211.318830][ T8411] netlink: 'syz.1.1076': attribute type 2 has an invalid length. [ 212.427987][ T5914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.109550][ T8453] openvswitch: netlink: Key type 12592 is out of range max 32 [ 213.137325][ T8454] vlan2: entered promiscuous mode [ 213.375635][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.386504][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.397764][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.423013][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.436843][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 213.446180][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.527066][ T8462] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.535440][ T8462] infiniband syz1: set active [ 213.548708][ T8462] infiniband syz1: set active [ 213.557928][ T8462] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.570240][ T8467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1088'. [ 213.654931][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.662157][ T8465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.670486][ T8465] infiniband syz1: set active [ 213.675858][ T8465] infiniband syz1: set active [ 213.683873][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.691183][ T8465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.773099][ T8458] netdevsim0 speed is unknown, defaulting to 1000 [ 214.130404][ T8479] x_tables: duplicate underflow at hook 1 [ 214.148260][ T5914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.247362][ T5914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.361498][ T5914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.481597][ T8496] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1099'. [ 214.641798][ T8458] chnl_net:caif_netlink_parms(): no params data found [ 214.708604][ T8505] openvswitch: netlink: Key type 12592 is out of range max 32 [ 214.736087][ T5914] bridge_slave_1: left allmulticast mode [ 214.742574][ T5914] bridge_slave_1: left promiscuous mode [ 214.748449][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.765081][ T5914] bridge_slave_0: left allmulticast mode [ 214.773550][ T5914] bridge_slave_0: left promiscuous mode [ 214.779503][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.808454][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 214.817710][ T8507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 215.015551][ T2488] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.191350][ T5914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.219256][ T5914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.233777][ T5914] bond0 (unregistering): Released all slaves [ 215.365199][ T8512] vlan3: entered allmulticast mode [ 215.393579][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1105'. [ 215.487307][ T5235] Bluetooth: hci2: command tx timeout [ 215.554114][ T8458] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.604113][ T8458] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.625728][ T8458] bridge_slave_0: entered allmulticast mode [ 215.651064][ T8458] bridge_slave_0: entered promiscuous mode [ 215.683935][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'. [ 215.716294][ T8458] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.741755][ T8458] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.755002][ T8458] bridge_slave_1: entered allmulticast mode [ 215.771091][ T8458] bridge_slave_1: entered promiscuous mode [ 215.920382][ T8533] netlink: 'syz.2.1112': attribute type 1 has an invalid length. [ 215.944208][ T8533] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1112'. [ 216.048589][ T8458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.147719][ T8458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.303509][ T2521] tipc: Subscription rejected, illegal request [ 216.304252][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 216.331580][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 216.342655][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 216.373361][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 216.385811][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 216.393727][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 216.437346][ T8458] team0: Port device team_slave_0 added [ 216.532752][ T5914] hsr_slave_0: left promiscuous mode [ 216.542469][ T5914] hsr_slave_1: left promiscuous mode [ 216.552470][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.560348][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.569219][ T8556] openvswitch: netlink: Key type 12592 is out of range max 32 [ 216.578002][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.585932][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.608730][ T5914] veth1_macvtap: left promiscuous mode [ 216.614590][ T5914] veth0_macvtap: left promiscuous mode [ 216.621401][ T5914] veth1_vlan: left promiscuous mode [ 216.626744][ T5914] veth0_vlan: left promiscuous mode [ 217.115406][ T5914] team0 (unregistering): Port device team_slave_1 removed [ 217.163816][ T5914] team0 (unregistering): Port device team_slave_0 removed [ 217.559733][ T5235] Bluetooth: hci2: command tx timeout [ 217.627023][ T8458] team0: Port device team_slave_1 added [ 217.634072][ T8554] netlink: 'syz.0.1119': attribute type 21 has an invalid length. [ 217.644645][ T8554] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1119'. [ 217.653952][ T8554] netlink: 'syz.0.1119': attribute type 5 has an invalid length. [ 217.661955][ T8554] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1119'. [ 217.776361][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.789307][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.825635][ T8458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.851000][ T8544] netdevsim0 speed is unknown, defaulting to 1000 [ 217.861491][ T8458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.868799][ T8458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.948800][ T8458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.950662][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1125'. [ 218.098411][ T8458] hsr_slave_0: entered promiscuous mode [ 218.121421][ T8458] hsr_slave_1: entered promiscuous mode [ 218.137179][ T8458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.153923][ T8458] Cannot create hsr debugfs directory [ 218.308198][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.316318][ T8578] infiniband syz1: set active [ 218.322648][ T8578] infiniband syz1: set active [ 218.328661][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.441807][ T8582] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.449147][ T8582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.461170][ T8582] infiniband syz1: set active [ 218.466952][ T8582] infiniband syz1: set active [ 218.473441][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.480680][ T8582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.519949][ T55] Bluetooth: hci6: command tx timeout [ 218.702513][ T8594] openvswitch: netlink: Key type 12592 is out of range max 32 [ 218.791931][ T8597] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6 [ 218.806411][ T8597] gretap6: default qdisc (pfifo_fast) fail, fallback to noqueue [ 218.815993][ T8597] gretap6: entered promiscuous mode [ 218.823588][ T8597] gretap6: entered allmulticast mode [ 218.964523][ T8544] chnl_net:caif_netlink_parms(): no params data found [ 219.132349][ T8544] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.139830][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.147212][ T8544] bridge_slave_0: entered allmulticast mode [ 219.158289][ T8544] bridge_slave_0: entered promiscuous mode [ 219.171293][ T8544] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.180759][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.188128][ T8544] bridge_slave_1: entered allmulticast mode [ 219.195698][ T8544] bridge_slave_1: entered promiscuous mode [ 219.261695][ T8544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.282559][ T8458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.296074][ T8544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.316002][ T8458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.345497][ T8544] team0: Port device team_slave_0 added [ 219.352133][ T8458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.366328][ T8544] team0: Port device team_slave_1 added [ 219.387367][ T8458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 219.419681][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.426721][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.453332][ T8544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.470007][ T8544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.476987][ T8544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.508206][ T8544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.597292][ T8544] hsr_slave_0: entered promiscuous mode [ 219.607784][ T8544] hsr_slave_1: entered promiscuous mode [ 219.615895][ T8544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.625135][ T8544] Cannot create hsr debugfs directory [ 219.638669][ T8610] vlan2: entered promiscuous mode [ 219.643970][ T55] Bluetooth: hci2: command tx timeout [ 219.903095][ T8614] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1136'. [ 219.917818][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1136'. [ 219.951640][ T8544] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.079005][ T8544] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.113343][ T8458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.212080][ T8544] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.232858][ T8458] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.264635][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.271876][ T2521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.314680][ T8624] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.393756][ T8544] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.427440][ T8628] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.434646][ T8628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.511781][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.519083][ T2521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.546881][ T8631] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 220.563533][ T8631] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 220.573354][ T8631] gretap2: entered promiscuous mode [ 220.578614][ T8631] gretap2: entered allmulticast mode [ 220.602062][ T55] Bluetooth: hci6: command tx timeout [ 220.753852][ T8544] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.770826][ T5914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.794540][ T8544] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.827052][ T8544] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.835744][ T8640] openvswitch: netlink: Key type 12592 is out of range max 32 [ 220.859839][ T8544] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.035859][ T8544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.072541][ T8544] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.098395][ T5914] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.106547][ T5914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.132991][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.140307][ T2521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.168355][ T8458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.314596][ T8458] veth0_vlan: entered promiscuous mode [ 221.336911][ T8458] veth1_vlan: entered promiscuous mode [ 221.395175][ T8458] veth0_macvtap: entered promiscuous mode [ 221.416299][ T8458] veth1_macvtap: entered promiscuous mode [ 221.477964][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.495934][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.507089][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.517890][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.542736][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.569076][ T8544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.577498][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.597463][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.620351][ T8458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.643336][ T8458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.663475][ T8458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.678068][ T8458] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.694696][ T8458] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.721872][ T8458] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.729196][ T55] Bluetooth: hci2: command tx timeout [ 221.739275][ T8458] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.992900][ T5914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.019965][ T5914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.121698][ T2488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.133451][ T2488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.212816][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 222.219951][ T8668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1149'. [ 222.234781][ T8670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'. [ 222.243196][ T8544] veth0_vlan: entered promiscuous mode [ 222.244260][ T8672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.298140][ T8544] veth1_vlan: entered promiscuous mode [ 222.427984][ T8675] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.436691][ T8675] infiniband syz1: set active [ 222.442716][ T8675] infiniband syz1: set active [ 222.448326][ T8675] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.523592][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.530892][ T8679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.541162][ T8679] infiniband syz1: set active [ 222.546905][ T8679] infiniband syz1: set active [ 222.553506][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.560763][ T8679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.614896][ T8680] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap7 [ 222.643951][ T8680] gretap7: default qdisc (pfifo_fast) fail, fallback to noqueue [ 222.652284][ T8680] gretap7: entered promiscuous mode [ 222.667782][ T8680] gretap7: entered allmulticast mode [ 222.680824][ T55] Bluetooth: hci6: command tx timeout [ 222.746394][ T8544] veth0_macvtap: entered promiscuous mode [ 222.765628][ T8544] veth1_macvtap: entered promiscuous mode [ 222.811164][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.828871][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.851089][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.879990][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.890843][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.901791][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.902350][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1155'. [ 222.914150][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.994351][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.013255][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.026397][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.037706][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.048909][ T8544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.060217][ T8544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.075509][ T8544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.094507][ T8692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1156'. [ 223.113563][ T8544] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.139219][ T8544] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.147990][ T8544] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.165120][ T8544] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.308548][ T5936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.339590][ T5936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.378096][ T2521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.387901][ T2521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.624767][ T8709] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.634847][ T8709] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.721725][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.729002][ T8713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.743197][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.750493][ T8713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.818689][ T8715] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 223.844670][ T8715] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 223.857091][ T8715] gretap3: entered promiscuous mode [ 223.866222][ T8715] gretap3: entered allmulticast mode [ 223.953513][ T8720] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.143741][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1170'. [ 224.156021][ T8726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1170'. [ 224.165529][ T8726] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1170'. [ 224.175601][ T8725] batadv_slave_0: entered promiscuous mode [ 224.191526][ T8725] batadv_slave_0: left allmulticast mode [ 224.334771][ T59] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.374306][ T8730] ɶƣ0GC¦: entered promiscuous mode [ 224.759884][ T55] Bluetooth: hci6: command tx timeout [ 225.385957][ T8744] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.396864][ T8744] infiniband syz1: set active [ 225.407421][ T8744] infiniband syz1: set active [ 225.431847][ T8744] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.566788][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.574101][ T8748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.585237][ T8748] infiniband syz1: set active [ 225.593610][ T8748] infiniband syz1: set active [ 225.599994][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.607192][ T8748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.620271][ T5235] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.633551][ T5235] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.643238][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.652558][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.662835][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.676284][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.771938][ T59] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.847895][ T8753] netdevsim0 speed is unknown, defaulting to 1000 [ 225.922838][ T59] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.980355][ T8759] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap8 [ 225.997019][ T8759] gretap8: default qdisc (pfifo_fast) fail, fallback to noqueue [ 226.026527][ T8759] gretap8: entered promiscuous mode [ 226.032130][ T8759] gretap8: entered allmulticast mode [ 226.091394][ T59] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.317681][ T8768] sctp: [Deprecated]: syz.0.1183 (pid 8768) Use of int in max_burst socket option deprecated. [ 226.317681][ T8768] Use struct sctp_assoc_value instead [ 226.431047][ T59] bridge_slave_1: left allmulticast mode [ 226.436766][ T59] bridge_slave_1: left promiscuous mode [ 226.449054][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.479526][ T59] bridge_slave_0: left allmulticast mode [ 226.485240][ T59] bridge_slave_0: left promiscuous mode [ 226.491608][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.521344][ T2521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.874090][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.886579][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.898054][ T59] bond0 (unregistering): Released all slaves [ 227.144582][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 227.156644][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'. [ 227.347738][ T8787] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 227.358723][ T8787] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1189'. [ 227.387717][ T8790] IPVS: set_ctl: invalid protocol: 43 172.20.20.52:20001 [ 227.425544][ T8753] chnl_net:caif_netlink_parms(): no params data found [ 227.435019][ T8789] openvswitch: netlink: Flow actions attr not present in new flow. [ 227.721460][ T5235] Bluetooth: hci2: command tx timeout [ 227.756783][ T8793] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1192'. [ 227.786342][ T8793] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.827240][ T8793] infiniband syz1: set down [ 227.897891][ T59] hsr_slave_0: left promiscuous mode [ 227.911924][ T59] hsr_slave_1: left promiscuous mode [ 227.920783][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.928258][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 227.940751][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.948504][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 227.978468][ T59] veth1_macvtap: left promiscuous mode [ 227.991654][ T59] veth0_macvtap: left promiscuous mode [ 227.997369][ T59] veth1_vlan: left promiscuous mode [ 228.003670][ T59] veth0_vlan: left promiscuous mode [ 228.612694][ T59] team0 (unregistering): Port device team_slave_1 removed [ 228.655921][ T59] team0 (unregistering): Port device team_slave_0 removed [ 229.114336][ T8802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1195'. [ 229.188065][ T8805] vlan2: entered promiscuous mode [ 229.281831][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.317248][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.363675][ T8753] bridge_slave_0: entered allmulticast mode [ 229.371471][ T8753] bridge_slave_0: entered promiscuous mode [ 229.388198][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.395623][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.429813][ T8753] bridge_slave_1: entered allmulticast mode [ 229.448193][ T8753] bridge_slave_1: entered promiscuous mode [ 229.457176][ T8817] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 229.603668][ T8753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.656554][ T55] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 229.666106][ T8824] tipc: Enabling of bearer rejected, already enabled [ 229.675236][ T55] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 229.694850][ T55] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 229.712093][ T55] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 229.721683][ T8753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.752530][ T55] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 229.761580][ T55] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 229.786500][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1205'. [ 229.799744][ T5235] Bluetooth: hci2: command tx timeout [ 229.924725][ T8753] team0: Port device team_slave_0 added [ 229.968355][ T8753] team0: Port device team_slave_1 added [ 230.104960][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.116406][ T8843] openvswitch: netlink: Key type 12592 is out of range max 32 [ 230.117763][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.153060][ T8753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.166692][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.180400][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.235892][ T8753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.260285][ T8821] netdevsim0 speed is unknown, defaulting to 1000 [ 230.271853][ T8842] netlink: 'syz.0.1209': attribute type 7 has an invalid length. [ 230.275235][ T8848] FAULT_INJECTION: forcing a failure. [ 230.275235][ T8848] name failslab, interval 1, probability 0, space 0, times 0 [ 230.297179][ T8848] CPU: 0 UID: 0 PID: 8848 Comm: syz.4.1213 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 230.307909][ T8848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 230.318001][ T8848] Call Trace: [ 230.321322][ T8848] [ 230.324284][ T8848] dump_stack_lvl+0x241/0x360 [ 230.329001][ T8848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.334233][ T8848] ? __pfx__printk+0x10/0x10 [ 230.338899][ T8848] should_fail_ex+0x3b0/0x4e0 [ 230.343627][ T8848] should_failslab+0xac/0x100 [ 230.348352][ T8848] ? sctp_add_bind_addr+0x89/0x3a0 [ 230.353510][ T8848] __kmalloc_cache_noprof+0x6c/0x2c0 [ 230.358836][ T8848] sctp_add_bind_addr+0x89/0x3a0 [ 230.363822][ T8848] sctp_copy_local_addr_list+0x311/0x500 [ 230.369502][ T8848] ? sctp_copy_local_addr_list+0xab/0x500 [ 230.375269][ T8848] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 230.381472][ T8848] ? sctp_v6_is_any+0x60/0x70 [ 230.386202][ T8848] sctp_bind_addr_copy+0xad/0x3b0 [ 230.391269][ T8848] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 230.397636][ T8848] sctp_connect_new_asoc+0x2f3/0x6c0 [ 230.402972][ T8848] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 230.408827][ T8848] ? sctp_sendmsg+0xbb9/0x3520 [ 230.413643][ T8848] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 230.419235][ T8848] ? security_sctp_bind_connect+0x90/0xb0 [ 230.424999][ T8848] sctp_sendmsg+0x219a/0x3520 [ 230.429753][ T8848] ? __pfx_sctp_sendmsg+0x10/0x10 [ 230.434849][ T8848] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.439747][ T8848] ? inet_sendmsg+0x330/0x390 [ 230.444474][ T8848] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 230.449808][ T8848] ? security_socket_sendmsg+0x87/0xb0 [ 230.455317][ T8848] __sock_sendmsg+0x1a6/0x270 [ 230.460040][ T8848] __sys_sendto+0x3a4/0x4f0 [ 230.464589][ T8848] ? __pfx___sys_sendto+0x10/0x10 [ 230.469687][ T8848] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 230.475721][ T8848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.482108][ T8848] __x64_sys_sendto+0xde/0x100 [ 230.486917][ T8848] do_syscall_64+0xf3/0x230 [ 230.491451][ T8848] ? clear_bhb_loop+0x35/0x90 [ 230.496176][ T8848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.502108][ T8848] RIP: 0033:0x7fd109f79e79 [ 230.506559][ T8848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.526289][ T8848] RSP: 002b:00007fd10ad72038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 230.534754][ T8848] RAX: ffffffffffffffda RBX: 00007fd10a115f80 RCX: 00007fd109f79e79 [ 230.542794][ T8848] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000003 [ 230.550811][ T8848] RBP: 00007fd10ad72090 R08: 00000000200004c0 R09: 000000000000001c [ 230.558906][ T8848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.567006][ T8848] R13: 0000000000000000 R14: 00007fd10a115f80 R15: 00007ffe8447a658 [ 230.575041][ T8848] [ 230.738812][ T8863] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1217'. [ 230.750002][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1217'. [ 230.787761][ T8753] hsr_slave_0: entered promiscuous mode [ 230.806920][ T8753] hsr_slave_1: entered promiscuous mode [ 230.824091][ T8753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.836150][ T8753] Cannot create hsr debugfs directory [ 230.941625][ T8869] FAULT_INJECTION: forcing a failure. [ 230.941625][ T8869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.963256][ T8869] CPU: 0 UID: 0 PID: 8869 Comm: syz.4.1220 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 230.974000][ T8869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 230.984091][ T8869] Call Trace: [ 230.987401][ T8869] [ 230.990361][ T8869] dump_stack_lvl+0x241/0x360 [ 230.995083][ T8869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.000323][ T8869] ? __pfx__printk+0x10/0x10 [ 231.004980][ T8869] ? snprintf+0xda/0x120 [ 231.009273][ T8869] should_fail_ex+0x3b0/0x4e0 [ 231.014007][ T8869] _copy_to_user+0x2f/0xb0 [ 231.018473][ T8869] simple_read_from_buffer+0xca/0x150 [ 231.023892][ T8869] proc_fail_nth_read+0x1ec/0x260 [ 231.028957][ T8869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.034554][ T8869] ? rw_verify_area+0x520/0x6b0 [ 231.039448][ T8869] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 231.045035][ T8869] vfs_read+0x204/0xbc0 [ 231.049241][ T8869] ? __pfx_lock_release+0x10/0x10 [ 231.054324][ T8869] ? __pfx_vfs_read+0x10/0x10 [ 231.059056][ T8869] ? __fget_files+0x29/0x470 [ 231.063697][ T8869] ? __fget_files+0x3f6/0x470 [ 231.068445][ T8869] ksys_read+0x1a0/0x2c0 [ 231.072738][ T8869] ? __pfx_ksys_read+0x10/0x10 [ 231.077551][ T8869] ? do_syscall_64+0x100/0x230 [ 231.082369][ T8869] ? do_syscall_64+0xb6/0x230 [ 231.087088][ T8869] do_syscall_64+0xf3/0x230 [ 231.091628][ T8869] ? clear_bhb_loop+0x35/0x90 [ 231.096345][ T8869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.102279][ T8869] RIP: 0033:0x7fd109f788bc [ 231.106725][ T8869] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 231.126547][ T8869] RSP: 002b:00007fd10ad72030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 231.135024][ T8869] RAX: ffffffffffffffda RBX: 00007fd10a115f80 RCX: 00007fd109f788bc [ 231.143031][ T8869] RDX: 000000000000000f RSI: 00007fd10ad720a0 RDI: 0000000000000003 [ 231.151035][ T8869] RBP: 00007fd10ad72090 R08: 0000000000000000 R09: 0000000000000000 [ 231.159054][ T8869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.167070][ T8869] R13: 0000000000000000 R14: 00007fd10a115f80 R15: 00007ffe8447a658 [ 231.175109][ T8869] [ 231.203943][ T8873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1221'. [ 231.218576][ T8873] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1221'. [ 231.262284][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.307487][ T8878] openvswitch: netlink: Key type 12592 is out of range max 32 [ 231.352863][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.360170][ T8875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.560419][ T5914] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.672634][ T8881] netlink: 'syz.0.1223': attribute type 10 has an invalid length. [ 231.681792][ T8881] syz_tun: entered promiscuous mode [ 231.721548][ T8881] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 231.799717][ T5235] Bluetooth: hci7: command tx timeout [ 231.856274][ T8891] netlink: 'syz.0.1227': attribute type 7 has an invalid length. [ 231.881207][ T5235] Bluetooth: hci2: command tx timeout [ 231.895438][ T8821] chnl_net:caif_netlink_parms(): no params data found [ 232.205866][ T8821] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.225454][ T8906] __nla_validate_parse: 1 callbacks suppressed [ 232.225474][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1232'. [ 232.241991][ T8821] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.255532][ T8821] bridge_slave_0: entered allmulticast mode [ 232.263397][ T8821] bridge_slave_0: entered promiscuous mode [ 232.271995][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 232.291470][ T8910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'. [ 232.308875][ T8907] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1232'. [ 232.345915][ T8821] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.356500][ T8821] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.365388][ T8821] bridge_slave_1: entered allmulticast mode [ 232.382049][ T8821] bridge_slave_1: entered promiscuous mode [ 232.498359][ T8753] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 232.547522][ T8821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.565598][ T8753] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 232.586081][ T8821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.602394][ T8925] FAULT_INJECTION: forcing a failure. [ 232.602394][ T8925] name failslab, interval 1, probability 0, space 0, times 0 [ 232.622837][ T8925] CPU: 0 UID: 0 PID: 8925 Comm: syz.0.1238 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 232.633579][ T8925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 232.643666][ T8925] Call Trace: [ 232.646959][ T8925] [ 232.649901][ T8925] dump_stack_lvl+0x241/0x360 [ 232.654594][ T8925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.659804][ T8925] ? __pfx__printk+0x10/0x10 [ 232.664416][ T8925] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 232.670409][ T8925] ? __pfx___might_resched+0x10/0x10 [ 232.675713][ T8925] ? kasan_save_track+0x51/0x80 [ 232.680584][ T8925] should_fail_ex+0x3b0/0x4e0 [ 232.685276][ T8925] should_failslab+0xac/0x100 [ 232.689972][ T8925] ? __alloc_skb+0x1c3/0x440 [ 232.694578][ T8925] kmem_cache_alloc_node_noprof+0x71/0x320 [ 232.700404][ T8925] __alloc_skb+0x1c3/0x440 [ 232.704840][ T8925] ? __pfx___alloc_skb+0x10/0x10 [ 232.709791][ T8925] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 232.715788][ T8925] ? netlink_ack_tlv_len+0x6e/0x200 [ 232.721010][ T8925] netlink_ack+0x13f/0xa30 [ 232.725445][ T8925] ? lockdep_hardirqs_on+0x99/0x150 [ 232.730674][ T8925] ? nfnetlink_rcv+0x27b4/0x2ad0 [ 232.735617][ T8925] ? kfree+0x149/0x360 [ 232.739845][ T8925] nfnetlink_rcv+0x26c4/0x2ad0 [ 232.744686][ T8925] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 232.749869][ T8925] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.755085][ T8925] ? skb_clone+0x240/0x390 [ 232.759517][ T8925] ? __pfx_lock_release+0x10/0x10 [ 232.764568][ T8925] ? netlink_deliver_tap+0x2e/0x1b0 [ 232.769777][ T8925] netlink_unicast+0x7f6/0x990 [ 232.774565][ T8925] ? __pfx_netlink_unicast+0x10/0x10 [ 232.779867][ T8925] ? __virt_addr_valid+0x183/0x530 [ 232.784997][ T8925] ? __check_object_size+0x49c/0x900 [ 232.790291][ T8925] ? bpf_lsm_netlink_send+0x9/0x10 [ 232.795420][ T8925] netlink_sendmsg+0x8e4/0xcb0 [ 232.800208][ T8925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.805504][ T8925] ? __import_iovec+0x536/0x820 [ 232.810373][ T8925] ? aa_sock_msg_perm+0x91/0x160 [ 232.815324][ T8925] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 232.820620][ T8925] ? security_socket_sendmsg+0x87/0xb0 [ 232.826108][ T8925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 232.831490][ T8925] __sock_sendmsg+0x221/0x270 [ 232.836192][ T8925] ____sys_sendmsg+0x525/0x7d0 [ 232.840983][ T8925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.846297][ T8925] __sys_sendmsg+0x2b0/0x3a0 [ 232.850906][ T8925] ? __pfx___sys_sendmsg+0x10/0x10 [ 232.856027][ T8925] ? vfs_write+0x7c4/0xc90 [ 232.860516][ T8925] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 232.866870][ T8925] ? do_syscall_64+0x100/0x230 [ 232.871777][ T8925] ? do_syscall_64+0xb6/0x230 [ 232.876480][ T8925] do_syscall_64+0xf3/0x230 [ 232.880994][ T8925] ? clear_bhb_loop+0x35/0x90 [ 232.885691][ T8925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.891600][ T8925] RIP: 0033:0x7f8f7fd79e79 [ 232.896022][ T8925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.915645][ T8925] RSP: 002b:00007f8f80bc2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.924078][ T8925] RAX: ffffffffffffffda RBX: 00007f8f7ff15f80 RCX: 00007f8f7fd79e79 [ 232.932099][ T8925] RDX: 0000000000000010 RSI: 0000000020000380 RDI: 0000000000000003 [ 232.940174][ T8925] RBP: 00007f8f80bc2090 R08: 0000000000000000 R09: 0000000000000000 [ 232.948166][ T8925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 232.956149][ T8925] R13: 0000000000000000 R14: 00007f8f7ff15f80 R15: 00007fff7315c4a8 [ 232.964167][ T8925] [ 232.994028][ T8753] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 233.036710][ T8753] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.065928][ T8821] team0: Port device team_slave_0 added [ 233.085739][ T8821] team0: Port device team_slave_1 added [ 233.097277][ T8931] netlink: 'syz.4.1239': attribute type 11 has an invalid length. [ 233.152982][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.164192][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.192119][ T8821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.207039][ T8933] netlink: 'syz.0.1241': attribute type 7 has an invalid length. [ 233.218886][ T8821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.231474][ T8821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.266090][ T8821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.326940][ T8936] openvswitch: netlink: Key type 12592 is out of range max 32 [ 233.433059][ T8821] hsr_slave_0: entered promiscuous mode [ 233.441362][ T8821] hsr_slave_1: entered promiscuous mode [ 233.455362][ T8821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.469434][ T8821] Cannot create hsr debugfs directory [ 233.879583][ T5235] Bluetooth: hci7: command tx timeout [ 233.920002][ T8821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.959345][ T5235] Bluetooth: hci2: command tx timeout [ 234.011782][ T8958] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1249'. [ 234.066702][ T8821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.267876][ T8821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.322555][ T8753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.453985][ T8821] team0: Port device netdevsim0 removed [ 234.463003][ T8821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.495363][ T8753] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.517000][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.524255][ T2521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.570696][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.578034][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.592677][ T8974] netlink: 'syz.1.1254': attribute type 7 has an invalid length. [ 234.760633][ T8821] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 234.784795][ T8821] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 234.819905][ T8821] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 234.841798][ T8821] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.096667][ T8821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.143381][ T8753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.166737][ T8821] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.228635][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.235911][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.259032][ T8986] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 235.271881][ T8986] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 235.283889][ T8984] netlink: 'syz.1.1257': attribute type 1 has an invalid length. [ 235.332379][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.339672][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.506818][ T8753] veth0_vlan: entered promiscuous mode [ 235.539278][ T8993] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 235.562344][ T8993] pim6reg0: ignored: set checksum disabled [ 235.573532][ T8999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 235.641892][ T8753] veth1_vlan: entered promiscuous mode [ 235.888566][ T8753] veth0_macvtap: entered promiscuous mode [ 235.914989][ T8753] veth1_macvtap: entered promiscuous mode [ 235.955182][ T9015] netlink: 'syz.0.1265': attribute type 7 has an invalid length. [ 235.963062][ T5235] Bluetooth: hci7: command tx timeout [ 236.060970][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.074154][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.092613][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.108353][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.123396][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.150902][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.164202][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.246577][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.261000][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.273093][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.286536][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.296764][ T8753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.309318][ T8753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.341600][ T8753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.387107][ T8821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.402659][ T8753] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.412862][ T8753] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.421752][ T8753] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.430623][ T8753] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.639570][ T8821] veth0_vlan: entered promiscuous mode [ 236.672205][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.706905][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.744057][ T8821] veth1_vlan: entered promiscuous mode [ 236.814251][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.831698][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.861909][ T8821] veth0_macvtap: entered promiscuous mode [ 236.884875][ T8821] veth1_macvtap: entered promiscuous mode [ 236.935867][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.958143][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.969491][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.980234][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.990617][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.003269][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.013159][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.023813][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.036251][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.117794][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.134587][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.144665][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.156108][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.189172][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.203790][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.214430][ T8821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 237.226346][ T8821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.243372][ T8821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 237.282886][ T8821] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.296314][ T8821] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.319989][ T8821] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.328759][ T8821] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.408777][ T5938] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.459627][ T941] IPVS: starting estimator thread 0... [ 237.496661][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.534886][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.569664][ T9048] IPVS: using max 16 ests per chain, 38400 per kthread [ 237.597089][ T9051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.625088][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.635321][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.704832][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1274'. [ 237.764192][ T9059] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 237.802048][ T9063] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1278'. [ 237.910918][ T9067] netlink: 'syz.0.1279': attribute type 7 has an invalid length. [ 237.911519][ T9065] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1198'. [ 238.040724][ T5235] Bluetooth: hci7: command tx timeout [ 238.357059][ T5914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.700483][ T5914] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.958574][ T5914] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.035940][ T5914] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.318595][ T5914] bridge_slave_1: left allmulticast mode [ 239.351583][ T5914] bridge_slave_1: left promiscuous mode [ 239.358964][ T5914] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.425054][ T5914] bridge_slave_0: left allmulticast mode [ 239.439795][ T5914] bridge_slave_0: left promiscuous mode [ 239.446822][ T5914] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.495540][ T9100] vcan0: tx drop: invalid da for name 0x0002000000000000 [ 239.918577][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 239.933827][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 239.945552][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 239.954703][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 239.973417][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 239.984380][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 240.196340][ T5914] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.209463][ T5914] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.221683][ T5914] bond0 (unregistering): Released all slaves [ 240.242861][ T9109] netlink: 'syz.2.1292': attribute type 7 has an invalid length. [ 240.280711][ T9118] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1294'. [ 240.412042][ T9123] netdevsim0 speed is unknown, defaulting to 1000 [ 240.799975][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 241.334997][ T5914] hsr_slave_0: left promiscuous mode [ 241.366219][ T5914] hsr_slave_1: left promiscuous mode [ 241.377420][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.386870][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.408537][ T5914] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.419257][ T5914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.445111][ T5914] veth1_macvtap: left promiscuous mode [ 241.450950][ T5914] veth0_macvtap: left promiscuous mode [ 241.456587][ T5914] veth1_vlan: left promiscuous mode [ 241.462136][ T5914] veth0_vlan: left promiscuous mode [ 242.007488][ T5914] team0 (unregistering): Port device team_slave_1 removed [ 242.039562][ T55] Bluetooth: hci2: command tx timeout [ 242.057149][ T5914] team0 (unregistering): Port device team_slave_0 removed [ 242.476437][ T9157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1308'. [ 242.492220][ T9160] netlink: 'syz.2.1309': attribute type 7 has an invalid length. [ 242.525903][ T5936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.921765][ T9123] chnl_net:caif_netlink_parms(): no params data found [ 242.997325][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 243.030060][ T9184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1317'. [ 243.173208][ T5936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.231949][ T9123] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.265074][ T9123] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.288924][ T9123] bridge_slave_0: entered allmulticast mode [ 243.306731][ T9123] bridge_slave_0: entered promiscuous mode [ 243.325563][ T9123] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.342582][ T9123] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.358038][ T9123] bridge_slave_1: entered allmulticast mode [ 243.382644][ T9123] bridge_slave_1: entered promiscuous mode [ 243.442870][ T9205] netlink: 'syz.2.1322': attribute type 1 has an invalid length. [ 243.454796][ T9205] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1322'. [ 243.494488][ T9123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.527215][ T9123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.612651][ T9123] team0: Port device team_slave_0 added [ 243.642303][ T9123] team0: Port device team_slave_1 added [ 243.778511][ T9214] netlink: 'syz.2.1327': attribute type 7 has an invalid length. [ 243.799872][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.838896][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.848534][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.885572][ T9123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.904784][ T9220] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1329'. [ 243.916319][ T9123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.940680][ T9123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.976546][ T9123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.120207][ T55] Bluetooth: hci2: command tx timeout [ 244.165484][ T9123] hsr_slave_0: entered promiscuous mode [ 244.178813][ T9123] hsr_slave_1: entered promiscuous mode [ 244.217660][ T9123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.242530][ T9123] Cannot create hsr debugfs directory [ 244.243365][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1333'. [ 244.250900][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1331'. [ 244.314553][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1333'. [ 244.362401][ T55] block nbd6: Receive control failed (result -107) [ 244.422358][ T9233] nbd6: detected capacity change from 0 to 256 [ 244.943355][ T9123] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 244.963691][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1340'. [ 244.986502][ T9123] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.006331][ T9123] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.023485][ T9123] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.078002][ T9257] syz.0.1342[9257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.078298][ T9257] syz.0.1342[9257] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.197667][ T9260] netlink: 'syz.0.1343': attribute type 7 has an invalid length. [ 245.227551][ T9123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.273528][ T9123] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.322951][ T5936] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.330233][ T5936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.358595][ T5936] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.365895][ T5936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.486312][ T9265] vlan2: entered promiscuous mode [ 245.654009][ T9270] netlink: 'syz.4.1347': attribute type 1 has an invalid length. [ 245.680373][ T9270] netlink: 9344 bytes leftover after parsing attributes in process `syz.4.1347'. [ 245.694219][ T9272] Cannot find add_set index 0 as target [ 245.703867][ T9270] netlink: 'syz.4.1347': attribute type 1 has an invalid length. [ 245.781470][ T9276] tipc: Enabling of bearer rejected, already enabled [ 245.981516][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'. [ 246.017097][ T9123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.146092][ T9123] veth0_vlan: entered promiscuous mode [ 246.177203][ T9123] veth1_vlan: entered promiscuous mode [ 246.190867][ T9289] netlink: 'syz.4.1356': attribute type 7 has an invalid length. [ 246.199668][ T55] Bluetooth: hci2: command tx timeout [ 246.275897][ T9123] veth0_macvtap: entered promiscuous mode [ 246.324041][ T9123] veth1_macvtap: entered promiscuous mode [ 246.358667][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.399609][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.429508][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.447407][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.468430][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.482412][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.494005][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.505911][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.527756][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.552371][ T9297] mac80211_hwsim hwsim16 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 246.592267][ T9304] batadv_slave_0: left promiscuous mode [ 246.597981][ T9304] batadv_slave_0: entered allmulticast mode [ 246.614455][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.635209][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.646595][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.657562][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.669141][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.680069][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.694587][ T9123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.705247][ T9123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.718481][ T9123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.730506][ T9309] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 246.741935][ T9123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.751581][ T9123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.763429][ T9123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.772403][ T9123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.784978][ T9297] netlink: 'syz.0.1359': attribute type 4 has an invalid length. [ 247.078819][ T5938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.099970][ T5938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.186184][ T9320] FAULT_INJECTION: forcing a failure. [ 247.186184][ T9320] name failslab, interval 1, probability 0, space 0, times 0 [ 247.187569][ T5914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.201109][ T9320] CPU: 1 UID: 0 PID: 9320 Comm: syz.1.1368 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 247.216340][ T5914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.217501][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 247.217528][ T9320] Call Trace: [ 247.217539][ T9320] [ 247.217550][ T9320] dump_stack_lvl+0x241/0x360 [ 247.245856][ T9320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.251084][ T9320] ? __pfx__printk+0x10/0x10 [ 247.255715][ T9320] should_fail_ex+0x3b0/0x4e0 [ 247.260421][ T9320] should_failslab+0xac/0x100 [ 247.265130][ T9320] ? sctp_add_bind_addr+0x89/0x3a0 [ 247.270256][ T9320] __kmalloc_cache_noprof+0x6c/0x2c0 [ 247.275569][ T9320] sctp_add_bind_addr+0x89/0x3a0 [ 247.280527][ T9320] sctp_copy_local_addr_list+0x311/0x500 [ 247.286178][ T9320] ? sctp_copy_local_addr_list+0xab/0x500 [ 247.291929][ T9320] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 247.298109][ T9320] ? sctp_v6_is_any+0x60/0x70 [ 247.302991][ T9320] sctp_bind_addr_copy+0xad/0x3b0 [ 247.308056][ T9320] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 247.314427][ T9320] sctp_connect_new_asoc+0x2f3/0x6c0 [ 247.319746][ T9320] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 247.325571][ T9320] ? sctp_sendmsg+0xbb9/0x3520 [ 247.330358][ T9320] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 247.335935][ T9320] ? security_sctp_bind_connect+0x90/0xb0 [ 247.341689][ T9320] sctp_sendmsg+0x219a/0x3520 [ 247.346404][ T9320] ? __pfx_sctp_sendmsg+0x10/0x10 [ 247.351451][ T9320] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.356331][ T9320] ? inet_sendmsg+0x330/0x390 [ 247.361027][ T9320] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 247.366328][ T9320] ? security_socket_sendmsg+0x87/0xb0 [ 247.371814][ T9320] __sock_sendmsg+0x1a6/0x270 [ 247.376515][ T9320] __sys_sendto+0x3a4/0x4f0 [ 247.381040][ T9320] ? __pfx___sys_sendto+0x10/0x10 [ 247.386106][ T9320] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 247.392111][ T9320] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.398456][ T9320] __x64_sys_sendto+0xde/0x100 [ 247.403251][ T9320] do_syscall_64+0xf3/0x230 [ 247.407769][ T9320] ? clear_bhb_loop+0x35/0x90 [ 247.412479][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.418395][ T9320] RIP: 0033:0x7f04ec579e79 [ 247.422828][ T9320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.442454][ T9320] RSP: 002b:00007f04ed428038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 247.450887][ T9320] RAX: ffffffffffffffda RBX: 00007f04ec715f80 RCX: 00007f04ec579e79 [ 247.458865][ T9320] RDX: 0000000000000001 RSI: 0000000020000a80 RDI: 0000000000000003 [ 247.466845][ T9320] RBP: 00007f04ed428090 R08: 00000000200004c0 R09: 000000000000001c [ 247.474827][ T9320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.482804][ T9320] R13: 0000000000000000 R14: 00007f04ec715f80 R15: 00007ffd87e7b148 [ 247.490805][ T9320] [ 247.502513][ T9321] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 247.518438][ T9321] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 247.788942][ T9328] netlink: 'syz.1.1371': attribute type 7 has an invalid length. [ 248.099037][ T9339] netdevsim0 speed is unknown, defaulting to 1000 [ 248.191753][ T9349] netlink: 'syz.1.1378': attribute type 10 has an invalid length. [ 248.280951][ T5936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.600900][ T9362] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 248.615184][ T9362] __nla_validate_parse: 7 callbacks suppressed [ 248.615209][ T9362] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1380'. [ 248.925282][ T5936] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 248.939492][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.084353][ T1114] wlan0: Trigger new scan to find an IBSS to join [ 249.295892][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 249.307760][ T9373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1385'. [ 249.378296][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 249.456431][ T9376] netlink: 'syz.0.1386': attribute type 7 has an invalid length. [ 249.547620][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 249.565405][ T1114] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.578705][ T9378] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1387'. [ 249.656603][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1387'. [ 249.773039][ T9385] FAULT_INJECTION: forcing a failure. [ 249.773039][ T9385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.791301][ T9385] CPU: 1 UID: 0 PID: 9385 Comm: syz.0.1390 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 249.802060][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 249.812156][ T9385] Call Trace: [ 249.815561][ T9385] [ 249.818521][ T9385] dump_stack_lvl+0x241/0x360 [ 249.823245][ T9385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.828485][ T9385] ? __pfx__printk+0x10/0x10 [ 249.833131][ T9385] ? snprintf+0xda/0x120 [ 249.837396][ T9385] should_fail_ex+0x3b0/0x4e0 [ 249.842095][ T9385] _copy_to_user+0x2f/0xb0 [ 249.846536][ T9385] simple_read_from_buffer+0xca/0x150 [ 249.851937][ T9385] proc_fail_nth_read+0x1ec/0x260 [ 249.856989][ T9385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.862556][ T9385] ? rw_verify_area+0x520/0x6b0 [ 249.867420][ T9385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.873068][ T9385] vfs_read+0x204/0xbc0 [ 249.877241][ T9385] ? __pfx_lock_release+0x10/0x10 [ 249.882289][ T9385] ? __pfx_vfs_read+0x10/0x10 [ 249.886985][ T9385] ? __fget_files+0x29/0x470 [ 249.891597][ T9385] ? __fget_files+0x3f6/0x470 [ 249.896307][ T9385] ksys_read+0x1a0/0x2c0 [ 249.900579][ T9385] ? __pfx_ksys_read+0x10/0x10 [ 249.905377][ T9385] ? do_syscall_64+0x100/0x230 [ 249.910152][ T9385] ? do_syscall_64+0xb6/0x230 [ 249.914840][ T9385] do_syscall_64+0xf3/0x230 [ 249.919354][ T9385] ? clear_bhb_loop+0x35/0x90 [ 249.924046][ T9385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.929954][ T9385] RIP: 0033:0x7f8f7fd788bc [ 249.934383][ T9385] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 249.954013][ T9385] RSP: 002b:00007f8f80bc2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.962460][ T9385] RAX: ffffffffffffffda RBX: 00007f8f7ff15f80 RCX: 00007f8f7fd788bc [ 249.970454][ T9385] RDX: 000000000000000f RSI: 00007f8f80bc20a0 RDI: 0000000000000004 [ 249.978442][ T9385] RBP: 00007f8f80bc2090 R08: 0000000000000000 R09: 0000000000000000 [ 249.986429][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 249.994420][ T9385] R13: 0000000000000000 R14: 00007f8f7ff15f80 R15: 00007fff7315c4a8 [ 250.002431][ T9385] [ 250.156173][ T9400] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1395'. [ 250.370953][ T9407] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 250.402812][ T9407] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 250.931737][ T5914] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.960396][ T9424] netlink: 'syz.4.1404': attribute type 7 has an invalid length. [ 251.489853][ T30] INFO: task udevd:5240 blocked for more than 143 seconds. [ 251.491936][ T8] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.497111][ T30] Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 251.497131][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 251.497142][ T30] task:udevd state:D stack:21400 pid:5240 tgid:5240 ppid:1 flags:0x00000002 [ 251.536320][ T30] Call Trace: [ 251.539804][ T30] [ 251.542971][ T30] __schedule+0x1800/0x4a60 [ 251.547541][ T30] ? __pfx___schedule+0x10/0x10 [ 251.553390][ T30] ? __blk_flush_plug+0x449/0x500 [ 251.558470][ T30] ? __pfx_lock_release+0x10/0x10 [ 251.565534][ T30] ? __asan_memset+0x23/0x50 [ 251.571479][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 251.577432][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.584346][ T30] ? schedule+0x90/0x320 [ 251.588676][ T30] schedule+0x14b/0x320 [ 251.593265][ T30] schedule_timeout+0x1be/0x310 [ 251.598254][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 251.603765][ T30] ? __pfx_process_timeout+0x10/0x10 [ 251.609137][ T30] ? prepare_to_wait_event+0x3ba/0x400 [ 251.614666][ T30] nbd_queue_rq+0x7cd/0x2f70 [ 251.619815][ T30] ? mark_lock+0x9a/0x350 [ 251.624197][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.630331][ T30] ? __pfx_nbd_queue_rq+0x10/0x10 [ 251.635394][ T30] ? irqentry_exit+0x63/0x90 [ 251.641734][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 251.647023][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 251.653271][ T30] blk_mq_dispatch_rq_list+0xb89/0x1b30 [ 251.658862][ T30] ? sbitmap_find_bit+0x435/0x4c0 [ 251.664122][ T30] ? sbitmap_get+0x289/0x3f0 [ 251.668744][ T30] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 251.674832][ T30] ? __blk_mq_alloc_driver_tag+0x32d/0x730 [ 251.680800][ T30] __blk_mq_sched_dispatch_requests+0xb8a/0x1840 [ 251.687197][ T30] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 251.694242][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 251.699729][ T30] ? __pfx___might_resched+0x10/0x10 [ 251.705083][ T30] blk_mq_sched_dispatch_requests+0xcb/0x140 [ 251.719134][ T30] ? blk_mq_run_hw_queue+0x54d/0xae0 [ 251.724518][ T30] blk_mq_run_hw_queue+0x576/0xae0 [ 251.734764][ T30] ? blk_mq_run_hw_queue+0x1d3/0xae0 [ 251.741763][ T30] blk_mq_flush_plug_list+0x1115/0x1880 [ 251.747406][ T30] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 251.753570][ T30] ? blk_mq_submit_bio+0x1288/0x22d0 [ 251.758922][ T30] __blk_flush_plug+0x420/0x500 [ 251.763837][ T30] ? __pfx___blk_flush_plug+0x10/0x10 [ 251.769377][ T30] ? timekeeping_get_ns+0x5c/0x420 [ 251.774556][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 251.779897][ T30] __submit_bio+0x422/0x560 [ 251.784436][ T30] ? __pfx___submit_bio+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 251.789670][ T30] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 251.795965][ T30] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 251.803157][ T30] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 251.815521][ T30] ? bio_associate_blkg_from_css+0x182/0xc70 [ 251.825695][ T30] ? __pfx___might_resched+0x10/0x10 [ 251.854675][ T30] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 251.900138][ T30] block_read_full_folio+0x93b/0xcd0 [ 251.919238][ T30] ? __pfx_blkdev_get_block+0x10/0x10 [ 251.924704][ T30] ? __pfx_block_read_full_folio+0x10/0x10 [ 251.985907][ T30] ? __pfx_lru_add_fn+0x10/0x10 [ 251.994297][ T30] ? folio_add_lru+0x357/0xd70 [ 252.010437][ T30] ? folio_add_lru+0x58f/0xd70 [ 252.015305][ T30] filemap_read_folio+0x1a0/0x790 [ 252.029224][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 252.034772][ T30] ? __pfx_filemap_read_folio+0x10/0x10 [ 252.048707][ T30] ? __filemap_get_folio+0x984/0xc10 [ 252.055128][ T30] do_read_cache_folio+0x134/0x820 [ 252.060373][ T30] ? __pfx_blkdev_read_folio+0x10/0x10 [ 252.065905][ T30] read_part_sector+0xb3/0x330 [ 252.070904][ T30] adfspart_check_ICS+0xd9/0x9a0 [ 252.075904][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 252.080793][ T30] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 252.086407][ T30] ? snprintf+0xda/0x120 [ 252.090872][ T30] ? alloc_pages_mpol_noprof+0x417/0x680 [ 252.096645][ T30] ? vsnprintf+0x1cc3/0x1da0 [ 252.101313][ T30] ? vsnprintf+0x184/0x1da0 [ 252.105849][ T30] ? __pfx_snprintf+0x10/0x10 [ 252.110763][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 252.115596][ T30] bdev_disk_changed+0x72c/0x13d0 [ 252.125981][ T30] ? __pfx_bdev_disk_changed+0x10/0x10 [ 252.131736][ T30] blkdev_get_whole+0x2d2/0x450 [ 252.136654][ T30] bdev_open+0x2d4/0xc60 [ 252.141121][ T30] blkdev_open+0x3e8/0x570 [ 252.145582][ T30] ? __pfx_blkdev_open+0x10/0x10 [ 252.151829][ T30] do_dentry_open+0x970/0x1440 [ 252.156743][ T30] vfs_open+0x3e/0x330 [ 252.161087][ T30] path_openat+0x2b3e/0x3470 [ 252.165718][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 252.171265][ T30] ? __lock_acquire+0x137a/0x2040 [ 252.176329][ T30] ? __pfx_path_openat+0x10/0x10 [ 252.181510][ T30] do_filp_open+0x235/0x490 [ 252.186045][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 252.191220][ T30] ? _raw_spin_unlock+0x28/0x50 [ 252.196112][ T30] ? alloc_fd+0x5a1/0x640 [ 252.202058][ T30] do_sys_openat2+0x13e/0x1d0 [ 252.206790][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 252.212807][ T30] ? bpf_trace_run2+0x1fc/0x540 [ 252.217695][ T30] ? bpf_trace_run2+0x36e/0x540 [ 252.222679][ T30] __x64_sys_openat+0x247/0x2a0 [ 252.227591][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 252.234492][ T30] ? rcu_is_watching+0x15/0xb0 [ 252.239419][ T30] ? trace_sys_enter+0x1f/0xd0 [ 252.244213][ T30] do_syscall_64+0xf3/0x230 [ 252.248719][ T30] ? clear_bhb_loop+0x35/0x90 [ 252.254679][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.260724][ T30] RIP: 0033:0x7fa6801169a4 [ 252.265164][ T30] RSP: 002b:00007fff19467ea0 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 252.273659][ T30] RAX: ffffffffffffffda RBX: 00005559fd15c550 RCX: 00007fa6801169a4 [ 252.282378][ T30] RDX: 00000000000a0800 RSI: 00005559fd138700 RDI: 00000000ffffff9c [ 252.290466][ T30] RBP: 00005559fd138700 R08: 00000000ffffffff R09: 7fffffffffffffff [ 252.298460][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000a0800 [ 252.306502][ T30] R13: 00005559fd1496f0 R14: 0000000000000001 R15: 00005559fd137910 [ 252.314555][ T30] [ 252.317664][ T30] [ 252.317664][ T30] Showing all locks held in the system: [ 252.325976][ T30] 1 lock held by khungtaskd/30: [ 252.342941][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 252.366901][ T30] 4 locks held by kworker/u8:4/59: [ 252.379998][ T30] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 252.399258][ T30] #1: ffffc9000150fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 252.429209][ T30] #2: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 252.438378][ T30] #3: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 252.469213][ T30] 2 locks held by getty/4987: [ 252.473962][ T30] #0: ffff88802f4f90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 252.499156][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 252.519281][ T30] 3 locks held by udevd/5240: [ 252.524016][ T30] #0: ffff888020e3e4c8 (&disk->open_mutex){+.+.}-{3:3}, at: bdev_open+0xf0/0xc60 [ 252.573374][ T30] #1: ffff88801f264210 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x54d/0xae0 [ 252.599448][ T30] #2: ffff888020f20180 (&cmd->lock){+.+.}-{3:3}, at: nbd_queue_rq+0xfc/0x2f70 [ 252.608537][ T30] 2 locks held by kworker/0:4/5286: [ 252.626731][ T30] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 252.644103][ T30] #1: ffffc900041afd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 252.654601][ T30] 6 locks held by kworker/u8:14/5914: [ 252.669182][ T30] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 252.691412][ T30] #1: ffffc900162ffd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 252.702097][ T30] #2: ffffffff8fc77a10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 252.711876][ T30] #3: ffff88801cee20e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 252.722113][ T30] #4: ffff88801cee3250 (&devlink->lock_key#14){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 252.733169][ T30] #5: ffffffff8e93d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 252.743331][ T30] 2 locks held by syz.0.803/7597: [ 252.748572][ T30] #0: ffffffff8fce9d30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 252.757066][ T30] #1: ffffffff8ec07228 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 252.770732][ T30] 2 locks held by syz.4.1032/8277: [ 252.776008][ T30] #0: ffffffff8fce9d30 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 252.784637][ T30] #1: ffffffff8ec07228 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 252.797795][ T30] 3 locks held by syz.0.1400/9414: [ 252.803016][ T30] #0: ffff88807a6a8d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 252.813086][ T30] #1: ffff88807a6a8078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 252.822917][ T30] #2: ffffffff8fdf00a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 252.833051][ T30] 1 lock held by syz.2.1403/9421: [ 252.838164][ T30] #0: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 252.847594][ T30] 2 locks held by syz.2.1403/9428: [ 252.853330][ T30] #0: ffff888079fc2c08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 252.863821][ T30] #1: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 252.875776][ T30] 3 locks held by syz.4.1407/9431: [ 252.881035][ T30] #0: ffff88802e2a4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 252.891108][ T30] #1: ffff88802e2a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 252.903731][ T30] #2: ffffffff8fdf00a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 252.913863][ T30] 1 lock held by syz.1.1406/9433: [ 252.918893][ T30] #0: ffffffff8fc845c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 252.928924][ T30] [ 252.931373][ T30] ============================================= [ 252.931373][ T30] [ 252.939895][ T30] NMI backtrace for cpu 1 [ 252.944249][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 252.954769][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 252.964832][ T30] Call Trace: [ 252.968128][ T30] [ 252.971074][ T30] dump_stack_lvl+0x241/0x360 [ 252.975785][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.981014][ T30] ? __pfx__printk+0x10/0x10 [ 252.985623][ T30] ? vprintk_emit+0x667/0x7c0 [ 252.990338][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 252.995379][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 253.000441][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 253.005940][ T30] ? _printk+0xd5/0x120 [ 253.010129][ T30] ? __pfx__printk+0x10/0x10 [ 253.014737][ T30] ? __wake_up_klogd+0xcc/0x110 [ 253.019711][ T30] ? __pfx__printk+0x10/0x10 [ 253.024322][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 253.029532][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 253.035625][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 253.041649][ T30] watchdog+0xff4/0x1040 [ 253.045996][ T30] ? watchdog+0x1ea/0x1040 [ 253.050450][ T30] ? __pfx_watchdog+0x10/0x10 [ 253.055144][ T30] kthread+0x2f0/0x390 [ 253.059233][ T30] ? __pfx_watchdog+0x10/0x10 [ 253.063926][ T30] ? __pfx_kthread+0x10/0x10 [ 253.068534][ T30] ret_from_fork+0x4b/0x80 [ 253.072973][ T30] ? __pfx_kthread+0x10/0x10 [ 253.077583][ T30] ret_from_fork_asm+0x1a/0x30 [ 253.082379][ T30] [ 253.087032][ T30] Sending NMI from CPU 1 to CPUs 0: [ 253.093083][ C0] NMI backtrace for cpu 0 [ 253.093097][ C0] CPU: 0 UID: 0 PID: 5936 Comm: kworker/u8:21 Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 253.093118][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 253.093129][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 253.093158][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x8/0x90 [ 253.093185][ C0] Code: 44 0a 20 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 <65> 48 8b 14 25 00 d7 03 00 65 8b 05 f0 49 70 7e 25 00 01 ff 00 74 [ 253.093200][ C0] RSP: 0018:ffffc900163cf080 EFLAGS: 00000202 [ 253.093213][ C0] RAX: ffffffff9144b480 RBX: 00000000000b0000 RCX: 00000000000b0001 [ 253.093226][ C0] RDX: ffffc900163cf195 RSI: 000000000000fa99 RDI: 00000000000b0000 [ 253.093238][ C0] RBP: 000000000000fa99 R08: ffffffff81412994 R09: ffffc900163cf250 [ 253.093251][ C0] R10: 0000000000000003 R11: ffffffff817f3110 R12: ffffc900163cf160 [ 253.093264][ C0] R13: 00000000000b0001 R14: ffffffff8c000000 R15: ffffffff81fa9998 [ 253.093277][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 253.093291][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.093304][ C0] CR2: 00007fd10ad70fb8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 253.093320][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.093330][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.093342][ C0] Call Trace: [ 253.093348][ C0] [ 253.093357][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 253.093379][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 253.093406][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 253.093427][ C0] ? nmi_handle+0x2a/0x5a0 [ 253.093455][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 253.093477][ C0] ? nmi_handle+0x14f/0x5a0 [ 253.093494][ C0] ? nmi_handle+0x2a/0x5a0 [ 253.093512][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x90 [ 253.093535][ C0] ? default_do_nmi+0x63/0x160 [ 253.093558][ C0] ? exc_nmi+0x123/0x1f0 [ 253.093579][ C0] ? end_repeat_nmi+0xf/0x53 [ 253.093604][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 253.093630][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 253.093653][ C0] ? unwind_next_frame+0x244/0x2a00 [ 253.093681][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x90 [ 253.093705][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x90 [ 253.093731][ C0] ? __sanitizer_cov_trace_cmp4+0x8/0x90 [ 253.093755][ C0] [ 253.093761][ C0] [ 253.093766][ C0] unwind_next_frame+0x244/0x2a00 [ 253.093795][ C0] ? __kasan_kmalloc+0x97/0xb0 [ 253.093821][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 253.093845][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 253.093869][ C0] ? __kernel_text_address+0xd/0x40 [ 253.093887][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 253.093910][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 253.093933][ C0] arch_stack_walk+0x151/0x1b0 [ 253.093954][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 253.093981][ C0] stack_trace_save+0x118/0x1d0 [ 253.094004][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 253.094024][ C0] ? validate_chain+0x11e/0x5900 [ 253.094044][ C0] ? validate_chain+0x11e/0x5900 [ 253.094060][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 253.094096][ C0] kasan_save_track+0x3f/0x80 [ 253.094118][ C0] ? kasan_save_track+0x3f/0x80 [ 253.094140][ C0] ? __kasan_kmalloc+0x98/0xb0 [ 253.094196][ C0] ? __kmalloc_noprof+0x355/0x400 [ 253.094215][ C0] __kasan_kmalloc+0x98/0xb0 [ 253.094239][ C0] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 253.094266][ C0] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 253.094292][ C0] __kmalloc_noprof+0x1fc/0x400 [ 253.094314][ C0] ieee802_11_parse_elems_full+0xdb/0x2880 [ 253.094341][ C0] ? __pfx_validate_chain+0x10/0x10 [ 253.094364][ C0] ? __pfx_validate_chain+0x10/0x10 [ 253.094382][ C0] ? __pfx_validate_chain+0x10/0x10 [ 253.094397][ C0] ? validate_chain+0x11e/0x5900 [ 253.094414][ C0] ? __pfx_validate_chain+0x10/0x10 [ 253.094433][ C0] ? debug_object_activate+0x3e4/0x510 [ 253.094456][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 253.094485][ C0] ? __lock_acquire+0x137a/0x2040 [ 253.094514][ C0] ? mark_lock+0x9a/0x350 [ 253.094549][ C0] ieee80211_ibss_rx_queued_mgmt+0x4c8/0x2d70 [ 253.094588][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 253.094620][ C0] ? mark_lock+0x9a/0x350 [ 253.094648][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.094674][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.094699][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 253.094731][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 253.094764][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 253.094790][ C0] ? process_scheduled_works+0x945/0x1830 [ 253.094813][ C0] process_scheduled_works+0xa2c/0x1830 [ 253.094856][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 253.094885][ C0] ? assign_work+0x364/0x3d0 [ 253.094911][ C0] worker_thread+0x86d/0xd40 [ 253.094945][ C0] ? __kthread_parkme+0x169/0x1d0 [ 253.094971][ C0] ? __pfx_worker_thread+0x10/0x10 [ 253.094995][ C0] kthread+0x2f0/0x390 [ 253.095021][ C0] ? __pfx_worker_thread+0x10/0x10 [ 253.095058][ C0] ? __pfx_kthread+0x10/0x10 [ 253.095089][ C0] ret_from_fork+0x4b/0x80 [ 253.095113][ C0] ? __pfx_kthread+0x10/0x10 [ 253.095139][ C0] ret_from_fork_asm+0x1a/0x30 [ 253.095175][ C0] [ 253.648284][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 253.655198][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc4-syzkaller-00139-g4186c8d9e6af #0 [ 253.665740][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 253.675823][ T30] Call Trace: [ 253.679115][ T30] [ 253.682059][ T30] dump_stack_lvl+0x241/0x360 [ 253.686755][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.691974][ T30] ? __pfx__printk+0x10/0x10 [ 253.696578][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 253.702620][ T30] ? vscnprintf+0x5d/0x90 [ 253.706967][ T30] panic+0x349/0x860 [ 253.710880][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 253.717048][ T30] ? __pfx_panic+0x10/0x10 [ 253.721478][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 253.726863][ T30] ? __irq_work_queue_local+0x137/0x410 [ 253.732444][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 253.737851][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 253.744033][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 253.750207][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 253.756375][ T30] watchdog+0x1033/0x1040 [ 253.760738][ T30] ? watchdog+0x1ea/0x1040 [ 253.765195][ T30] ? __pfx_watchdog+0x10/0x10 [ 253.769888][ T30] kthread+0x2f0/0x390 [ 253.773976][ T30] ? __pfx_watchdog+0x10/0x10 [ 253.778670][ T30] ? __pfx_kthread+0x10/0x10 [ 253.783278][ T30] ret_from_fork+0x4b/0x80 [ 253.787721][ T30] ? __pfx_kthread+0x10/0x10 [ 253.792378][ T30] ret_from_fork_asm+0x1a/0x30 [ 253.797175][ T30] [ 253.800514][ T30] Kernel Offset: disabled [ 253.804847][ T30] Rebooting in 86400 seconds..