last executing test programs: 3.532700306s ago: executing program 0 (id=1200): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x628, 0x30, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{0x614, 0x1, [@m_police={0x564, 0xd, 0x0, 0x0, {{0xb}, {0x460, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0x8, 0x8000, 0x8, 0x6, 0x3, 0x7, 0x9, 0x5, 0x9, 0x8, 0xe, 0x2, 0x8, 0x1, 0x0, 0x80, 0x4, 0x7f, 0x5000, 0x5, 0x4, 0x6, 0x4, 0x10, 0xc9e, 0x6, 0x4, 0x8, 0x7b3dd35b, 0x9, 0x8, 0x4, 0x8, 0xb9b, 0x2d9c000, 0x7, 0x1000, 0x3, 0xb, 0x1, 0x0, 0x7, 0x81, 0xaff, 0xfff, 0x400, 0x9, 0x2, 0x280000, 0x3, 0x80000000, 0x4, 0xd0b, 0x6, 0x7, 0x8, 0x8, 0x0, 0x6, 0x7, 0x7, 0x3, 0x6, 0x40000005, 0x1, 0x0, 0x0, 0x1, 0xfffffffc, 0x401, 0x7f, 0xce9, 0x0, 0xa95, 0x9, 0x5, 0x7f, 0x76, 0x5, 0x8, 0xffff8000, 0x5, 0x2, 0xea0, 0x5, 0x9, 0x4, 0x58603ef2, 0x8, 0x4, 0x10, 0x8, 0x5, 0x2, 0xab7, 0x80000000, 0xdc, 0xa, 0x3, 0x0, 0x1a, 0xf, 0x200, 0x10, 0xa1, 0x7f, 0xffffffff, 0x0, 0x5, 0x9, 0x3, 0xffff62af, 0x2, 0x8, 0x9, 0x5, 0x80000001, 0x2, 0x80000000, 0x40, 0xb314, 0x4d, 0x4, 0x8000, 0x0, 0x80, 0x2, 0x4, 0x6, 0x5, 0x7, 0x0, 0x4, 0x40, 0x0, 0x2c, 0x13, 0x6, 0x6, 0x3, 0x0, 0x3, 0x8, 0x6, 0x3dde, 0x1, 0x248, 0x5, 0x0, 0x401, 0x2, 0xd, 0x7f, 0x2c04, 0x4, 0x9, 0x2, 0x1, 0xf, 0xfffffffb, 0x8, 0x418, 0x200, 0x0, 0x3, 0x8, 0x2, 0x41f, 0x9, 0x91, 0x8, 0x3ff, 0xf, 0x7f, 0x4, 0x3, 0x5, 0x747b0a57, 0x3, 0x6c84, 0x10001, 0x1, 0xcf5c, 0x40d, 0x8, 0x448, 0x0, 0x7, 0x7, 0x0, 0x9, 0x1, 0xa, 0x8000, 0x10f3, 0x3, 0x8, 0x7fff, 0x1, 0x3, 0x7ff, 0x38000000, 0x1, 0x6, 0x7, 0x10, 0x2, 0x2, 0x7fff, 0xffffffff, 0x0, 0x5, 0x2, 0x9, 0xb948, 0x0, 0x676, 0x6, 0xffff8000, 0x0, 0xb9, 0x7, 0x1, 0x80, 0x5d, 0x0, 0xffffffff, 0xf3, 0xa, 0x5, 0x80, 0xffffff68, 0x80000000, 0x10001, 0x959a, 0x1, 0x4, 0xb6, 0xfff, 0x8, 0x7fffffff, 0x5, 0x2, 0x18a48b8b, 0xad, 0x9, 0x80, 0x9, 0x2, 0x200, 0xd, 0x35da, 0x8, 0x4, 0x8]}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6c0f, 0xffffffffffffffff, 0x2, 0x8, 0x2, {0xe1, 0x1, 0x9, 0xc, 0x7, 0x61}, {0x5, 0x1, 0x1ff, 0x2, 0xf800, 0x8}, 0x10, 0xf, 0x1}}]]}, {0xd9, 0x6, "68c07aba6ad618551b548713b672beb627d70ad2d3f62e0a8cb3cdc8d813efe1acbcc44cb590c1e70867144f66b9f3d0c5a4665d215e6fa199fe89b5f04662c4d831a02d6dd42f127ecf6c07da6c0d4cec15e69ecd5496e7bced7fbc4e77d3d7b8b8c9e0442b80b638dd4a019657a81d293861d37d2c641b3a78f2636c93a8b94caab8e9bd87923c3db915eff62a3cfa9ac4a32be42b0722c84f7dc7b3536dff34b6b9476df85ebb3d7dfe0b316b108840e3a18c3283ee5ff31284afb4275629214e6ad02c63c63f5bfceee59e1ebb88e187424587"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xac, 0x16, 0x0, 0x0, {{0xf}, {0x4}, {0x79, 0x6, "7aea8acdba5ba519ab94d146413ccce4c57af8369623fbe5abfd3d84adfce2cea54d630fd39c278fc32862b720ebe11ec62d3b35433032fae9a1825b9ce45d04085d163aa11006b35787f3f6b62dc079ffac848ec7767e5f70b4bc94c7624966ea8af7154e690e8f95b72e0a3078616860bc103ba2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x628}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e1e, 0x86c5, @mcast2, 0x8}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2, 0x10001}, &(0x7f0000000140)=0x8) 3.270077743s ago: executing program 0 (id=1205): r0 = socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000000)=0x4, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000040)="902efb31373ac83b8cd8678ca8e17cea88f8945e510f574eac0e01a60c8b1802954adbfea35623c4b5280a3438a686c50da14cbc343e4eb5c483f0deb9d0e5bdfb393ac96651edb8ab51ca6c916aa3fe5ea8b52a69b049de8051464d0753351657628483841287f7e5097a64b043393f9d31b2374b0415566509086f756274d41efa60662706f4bfcbad66a3aeb1bfdf894a0a27b4fbed8d77476b2abae46905680b5da922aa51ca", 0xa8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x9, @private2, 0x7fff}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)={r3, 0xf5, "56fe91e82936cd6f1f5b7a3a512b31704297aff69514e31f0084fbeb74d12a3005c14ffebcc45e132bff88da74817a1098f6ac2fb1649f9c7d67811211f12ef28a9b86f8883f37698bf4d6ac5bfbd37ce5f589ba44020d71c890b2138dffca300c8fdcfe4c0ef66df102824b0fe371d8b37c6e8586ae78410c5a53d4eb9f903872e140273da902b786b6835986d4e449cb479072b838deedf2cca59b1929c8651bfc98896a3c9f2a28b535c58c9af7b4accbcb9b273d7c19200a377356ca4f07e5758dabe61c2299c927b37733438ab0dcb49c9d6a37a64a07659f48d2effcf27f6ac43d1a9f5f85587aee3a90d81c2c613af5c285"}, &(0x7f0000000300)=0xfd) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)=0x0) syz_open_procfs$namespace(r4, &(0x7f0000000380)='ns/cgroup\x00') getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000003c0), &(0x7f0000000400)=0xe) r5 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r5, &(0x7f0000000580)={&(0x7f0000000440)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/47, 0x2f}], 0x1, &(0x7f0000000540)=""/28, 0x1c}, 0x20) r6 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f00000005c0), 0x0) getsockname$netrom(r6, &(0x7f0000000600)={{0x3, @bcast}, [@rose, @bcast, @bcast, @bcast, @null, @default, @rose, @default]}, &(0x7f0000000680)=0x48) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'syztnl2\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x8040, 0x0, 0x5, 0x4, {{0x1a, 0x4, 0x1, 0xc, 0x68, 0x67, 0x0, 0x7, 0x2f, 0x0, @loopback, @broadcast, {[@generic={0x7, 0xf, "87af5ffd96382c91e17a77c9c0"}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x17, 0x1, [{0x7, 0xe, "e83917d793d6055258887233"}, {0x0, 0x3, 'T'}]}, @timestamp_prespec={0x44, 0x1c, 0xf4, 0x3, 0x8, [{@multicast2, 0x80000001}, {@loopback, 0xcd5}, {@dev={0xac, 0x14, 0x14, 0x38}, 0xfffffffc}]}, @ssrr={0x89, 0x7, 0xff, [@multicast2]}]}}}}}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r8, 0x6, 0x15, &(0x7f00000007c0)=0x8, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000800)=0x7, 0x4) recvmmsg(r9, &(0x7f0000003480)=[{{&(0x7f0000000840)=@alg, 0x80, &(0x7f0000001b00)=[{&(0x7f00000008c0)=""/4, 0x4}, {&(0x7f0000000900)=""/40, 0x28}, {&(0x7f0000000940)=""/157, 0x9d}, {&(0x7f0000000a00)=""/222, 0xde}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x5, &(0x7f0000001b80)=""/53, 0x35}, 0x800}, {{&(0x7f0000001bc0)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001c40)=""/84, 0x54}, {&(0x7f0000001cc0)=""/123, 0x7b}, {&(0x7f0000001d40)=""/108, 0x6c}, {&(0x7f0000001dc0)=""/50, 0x32}, {&(0x7f0000001e00)=""/35, 0x23}, {&(0x7f0000001e40)=""/125, 0x7d}], 0x6, &(0x7f0000001f40)=""/158, 0x9e}, 0x7}, {{&(0x7f0000002000)=@xdp, 0x80, &(0x7f0000002400)=[{&(0x7f0000002080)=""/96, 0x60}, {&(0x7f0000002100)=""/131, 0x83}, {&(0x7f00000021c0)=""/158, 0x9e}, {&(0x7f0000002280)=""/57, 0x39}, {&(0x7f00000022c0)}, {&(0x7f0000002300)}, {&(0x7f0000002340)=""/182, 0xb6}], 0x7, &(0x7f0000002480)=""/131, 0x83}}, {{&(0x7f0000002540)=@caif=@dbg, 0x80, &(0x7f0000002680)=[{&(0x7f00000025c0)=""/133, 0x85}], 0x1, &(0x7f00000026c0)=""/249, 0xf9}, 0x126}, {{&(0x7f00000027c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002840)=""/56, 0x38}, {&(0x7f0000002880)=""/100, 0x64}, {&(0x7f0000002900)=""/213, 0xd5}, {&(0x7f0000002a00)=""/92, 0x5c}, {&(0x7f0000002a80)=""/79, 0x4f}, {&(0x7f0000002b00)=""/220, 0xdc}, {&(0x7f0000002c00)=""/168, 0xa8}, {&(0x7f0000002cc0)=""/217, 0xd9}], 0x8, &(0x7f0000002e40)=""/88, 0x58}, 0x3}, {{&(0x7f0000002ec0)=@generic, 0x80, &(0x7f0000003380)=[{&(0x7f0000002f40)=""/20, 0x14}, {&(0x7f0000002f80)=""/90, 0x5a}, {&(0x7f0000003000)=""/230, 0xe6}, {&(0x7f0000003100)=""/136, 0x88}, {&(0x7f00000031c0)=""/127, 0x7f}, {&(0x7f0000003240)}, {&(0x7f0000003280)=""/201, 0xc9}], 0x7, &(0x7f0000003400)=""/85, 0x55}, 0x3de}], 0x6, 0x2000, &(0x7f0000003600)={0x77359400}) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f00000037c0)={&(0x7f0000003640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003780)={&(0x7f0000003680)={0xe0, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NET={0x64, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x55}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7f}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8004010}, 0x1) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, &(0x7f0000003800)) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000003840)={0x2}, 0x8) r10 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r10, 0x84, 0x7, &(0x7f0000003880)={0xf370}, 0x4) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000003900), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f00000039c0)={&(0x7f00000038c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x24, r12, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x44044) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000003a00)={'macvlan1\x00', 0x200}) 3.047404243s ago: executing program 0 (id=1207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private0}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000006c0)='M', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, 0x0, 0x0) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x0) 2.097399723s ago: executing program 0 (id=1216): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x44800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000), 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 1.692268967s ago: executing program 0 (id=1222): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @loopback={0xfec0ffff00000000}, 0x51d17f9f}, 0x1c) setsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14007eb0", @ANYRES16=0x0, @ANYBLOB="200025bd7000fedbdf254a0000000000010048d27464657673696d000000000002006e657464657673696d3000000000a8007365636f6e646e616d650000000003000200d9768ae865529a4a6c2db934bc1df47bbd578f953fba49caead4ae52493ab0f96861fbe7061e6b23338d568e0edcc6fa7d411b94215a3e61ca0100000000000000f7c99c92ee17efc04e1cb34f48ad0b6abf8c2be70272c32c377672dd5273490175442d21bb8e2b6b1792b07e318106371a0da9c23e55af105774f51aad9402304dc840c4b5c5294be3262077458da8b9b2fbd0e559c56eab563a205628855c3b464a37e1599d07fe73e3b1a8c02d27abcc081451f238712f7ebdd3c8e4c5cd7a326238c2a3453ce4dd0d9b0ce5"], 0xfffffe52}, 0x1, 0x0, 0x0, 0x44850}, 0x0) recvmmsg$unix(r2, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000001100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2060, 0x0) getsockname$packet(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@struct={0x1, 0x55, 0x0, 0xc, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) 1.567194437s ago: executing program 2 (id=1223): sendmsg$key(0xffffffffffffffff, 0x0, 0x4814) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="0815000000050104000000000000000001000005540201"], 0x1508}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000000007000008080008400000000208000340000070040c001980080002000002000008001640000000010c000e800600034000010000000000010000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=@newtaction={0x6c, 0x30, 0x1, 0x3, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x2, 0x20000000, 0xfffffff3, 0x5}, 0xb}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x6c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001280)={0x4ef, 0x1, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) 1.55712137s ago: executing program 4 (id=1224): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x54}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0xf1000000}, 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.442465326s ago: executing program 4 (id=1225): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='f2fs_sync_file_exit\x00', r0, 0x0, 0x8000000000000001}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f0000000780)="04447ce9118e7161d3", 0x9}], 0x1) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000080)={0x1, 0x3b, "139f5698c609a79847d8868562f5efd50a26f9fa56682701ec02bb08e94bff0a6429d773fa342c8eb472b4f03069cb95d6f1dedde0ea794c7abb5e"}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000000)=ANY=[], 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 1.329755713s ago: executing program 4 (id=1226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private0}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000006c0)='M', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, 0x0, 0x0) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x0) 1.328945405s ago: executing program 2 (id=1227): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4, 0x100000}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x530) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @volatile={0x0, 0x0, 0x0, 0xa, 0x5}, @const={0x0, 0x0, 0x0, 0xa, 0x2}, @restrict, @union]}}, 0x0, 0x5e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000000)=0x5, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4e0, 0x3a8, 0x3a8, 0x0, 0x98, 0x98, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x1}}}, {{@ip={@remote, @private=0xa010100, 0x0, 0xff, 'nr0\x00', 'macvtap0\x00', {0xff}, {0xff}, 0x6, 0x0, 0x4}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xf8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1000, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x540) 1.139410296s ago: executing program 2 (id=1228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32-generic)\x00'}, 0x58) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000a0026006c09000047179ec38ce5cbc94568b59c6b94b7d09ad03a7defb46019081e81dae5505a76a8ab7f50699eb32efc52944a1651b8cb01000000caf7be6e552e4b55a56c5447f2be8a2389e003af03bbfb"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000800)=ANY=[], 0x195) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x8, 0x0, @default, @val={0x1, 0x6, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x26) 814.799811ms ago: executing program 3 (id=1233): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc, 0x2, 0xfffffffc, 0x0, @void, @value, @void, @value}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e00010069703667726574617000000018000280140007001c"], 0x54}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 757.323995ms ago: executing program 3 (id=1234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000580)=ANY=[@ANYBLOB="800100001a0001000000000000c40000ac1414aa000000000000000000000000ac14140000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="00000000000000000000000000000000000000206c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006c7a730000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480002"], 0x180}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@gettaction={0x70, 0x32, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x27}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}]}, 0x70}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000001c0000000000000000000054244aca5a"], 0x50) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r3}, &(0x7f00000004c0), &(0x7f0000000500)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x2000000000000304, &(0x7f0000000180)=ANY=[@ANYRESHEX, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRESDEC=r4, @ANYRES8], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414"], 0x24}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f00000001c0)=0x5) ioctl$TUNSETNOCSUM(r8, 0xc0189436, 0x1ffffffe) (async) r9 = socket(0x40000000015, 0x5, 0x0) r10 = socket(0x200000100000011, 0x803, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r10, &(0x7f0000000100)="4dcdc7d96a760000000100050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) (async) r15 = socket$kcm(0xa, 0x6, 0x0) (async) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r15, 0x10d, 0xa, &(0x7f0000000000)=r16, 0x4) (async) sendmsg$nl_route(r14, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r14, @ANYBLOB=' '], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r1, @ANYRES32=r17, @ANYRESHEX=r16, @ANYBLOB="5efd", @ANYRESHEX, @ANYBLOB="67e6321f7528b2eba1f29e7c1206b40f24e0b66af9f97d916c429d40c2695f38d589d2693dbe99ce52483c49fd2728b9311d6be7ae7c6314a5a3e896dd2bdd56121ced1aef888846a0b016b33827d1bd33bdeb4d34b3607b8e1bffc871a4096d007c047a2c78d58351b738488e7d255d0776d9af5852cc6a6c2cb8159160e58511592c658c1689b30e3072ed0cd6616d21bfd48c25010b0674993a56ea51a36fa3be35c3cad9954e6cb1554dac581737e5c289cf2a341c23759b668a02ca3fcc2bf57481687bd46e8158215fd72f888399615dced67b037eb763386c6c7164b0676eda9dfd2279ac8c370039", @ANYRESHEX], 0x24}}, 0x40) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 32) 695.335137ms ago: executing program 0 (id=1235): syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000500)="0f55f8ae94f9a40a0000dfab0300000000a253735c56f3f655e35ec385764a00008000"/47, 0x2f) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee, 0x1}, 0xfd}, 0x18, &(0x7f0000000440)={&(0x7f0000001880)="00f0c300400500b2fb93ac5f05eb71633c83649114107f5725c0bbd0bb975beb256736bb3a3036e7b7f736952fe565e372462b1570743d5793f180d9fb714f4cee0b9bef9b95e87713890c4dd2b484a1c965e9462575bccf86ecafdf703072aa6a", 0x61}, 0x1, 0x0, 0x0, 0x6}, 0x800) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f00000019c0)=0x1001, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000740)={r5, &(0x7f00000007c0)="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", &(0x7f00000017c0)=""/109}, 0x20) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10810000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0c66f66f7281187b8f012400", @ANYRES16=r6, @ANYBLOB="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"], 0x10c}, 0x1, 0x0, 0x0, 0x815}, 0x801) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240000500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e6574000000000500050002000000050004"], 0x60}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2001}, 0xc, &(0x7f0000000540)={&(0x7f0000001a00)=ANY=[@ANYBLOB="d29322f290726d91b83497862aee65cd936511be6ad1c8ee45d33fefd5dd67ef280e290a713abef94448bdd61b25e8f838246c0f4a025379dec296cf2a8b5b380be19ef71a728a9a88fce22c171adfcfabee03f3581b9b59e03cce6025fa9361091c32fc3b9d605db51b76cd3455bfa3a6dbf5607fdadbef840aa5aec1c310ef00eb7d5961da8a35588c489a8666964b4b6a9df95317bcd37947a7e05793fa7030f9a90daf7cd5331b090b3f9f820463869f9cd74da44223d91b272566dc1b90adcdcba116c70be39795eb40533e"], 0x28}}, 0x40054) r9 = openat$cgroup_devices(r7, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) r10 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000240)={0x30000008}) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) accept$inet6(r11, &(0x7f0000000440)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000480)=0x1c) sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX=r12, @ANYBLOB="010000000000000000001b0000000600210080", @ANYRESDEC=r12, @ANYRES64=r2], 0x24}}, 0x0) 631.946918ms ago: executing program 3 (id=1236): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth1_to_hsr\x00'}) (async) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) getsockopt$bt_hci(r6, 0x84, 0x11, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) (async) ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000080)=0xa) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x18}], 0x1}, 0x0) (async) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 508.005038ms ago: executing program 1 (id=1238): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendmmsg$sock(r0, 0x0, 0x0, 0x8081) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000100000009000000ae00000000000000", @ANYRES32, @ANYBLOB="000000000000ab7f77249280e5c2ffffffff0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x18, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_netfilter(r2, 0x0, 0x80) close(r0) 507.238005ms ago: executing program 3 (id=1239): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x2, 0x2}, 0x6) (async) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000000c0)=0x6, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) sendto$inet(r0, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000004000000000011000000140009"], 0x28}}, 0x4000800) 431.389494ms ago: executing program 1 (id=1240): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xbb}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000001a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x84) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffeb, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1d3c}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x2, 0x0, 0x2, 0x8}, 0x10, 0x0, r1, 0x5, &(0x7f0000000240)=[r0, r0, r0, r0, r0], &(0x7f0000000280)=[{0x5, 0x2, 0x6}, {0x1, 0x4, 0xc, 0x8}, {0x5, 0x1, 0xb, 0x4}, {0x3, 0x4, 0x7, 0x5}, {0x3, 0x3, 0xc, 0x5}], 0x10, 0xea, @void, @value}, 0x94) accept$netrom(0xffffffffffffffff, &(0x7f00000004c0)={{}, [@default, @null, @null, @remote, @null, @rose, @rose, @null]}, &(0x7f0000000540)=0x48) (async) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000480)=r3, 0x4) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004800010000000000000000000a00806e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) 421.674011ms ago: executing program 2 (id=1241): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r3 = accept$ax25(0xffffffffffffffff, &(0x7f0000000bc0)={{0x3, @bcast}, [@remote, @remote, @bcast, @netrom, @rose, @default, @remote, @rose]}, &(0x7f0000000c40)=0x48) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000c80)=@rose={'rose', 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c0005"], 0x30}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'team_slave_0\x00', 0x0}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a00)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18a, 0x18a, 0x4, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x3}, @datasec={0xa, 0x2, 0x0, 0xf, 0x1, [{0x2, 0x6, 0xa}, {0x2, 0x80, 0x9}], "95"}, @struct={0x1, 0x9, 0x0, 0x4, 0x1, 0x6, [{0x8, 0x5, 0x2}, {0x3, 0x1, 0x8001}, {0x2, 0x2, 0x7ff}, {0x9, 0x0, 0x8}, {0xe, 0x3, 0x65a6}, {0xb, 0x3, 0xbabc}, {0xc, 0x5, 0x3b8}, {0x4, 0x4, 0x3ff}, {0xb, 0x3, 0x9}]}, @datasec={0x6, 0x7, 0x0, 0xf, 0x1, [{0x4, 0x7, 0x3}, {0x4, 0x4c, 0x8}, {0x397, 0xc6c6}, {0x2, 0x80, 0x7fff}, {0x1, 0x79e, 0x5}, {0x2, 0x7fffffff, 0x4}, {0x2, 0x80, 0xab}], '>'}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @union={0x10, 0x4, 0x0, 0x5, 0x0, 0xffffffff, [{0xb, 0x3, 0x1}, {0x4, 0x0, 0x9}, {0x9, 0x3, 0x1}, {0xa, 0x1, 0x9}]}, @enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x4, 0x3}, {0x5, 0x1}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x5b, 0x0, 0x76, 0x7}, @ptr={0xa, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000900)=""/253, 0x1a8, 0xfd, 0x0, 0x1f2, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x21, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18130000", @ANYRES32=r2, @ANYBLOB="000000000000040018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e20b0000850000000600000018110000dff38b7f22614a57ca39d20e2653fd4a7f4aba48093eb75ca5b0f94405ba31040b7a6b8f4bac3a46ddab937a09a41a140625bc5a81fb5afb0aeb05d0fc2028465868b38ea6c56bbc2f610dad9e96fca2c6232221ea5cc877241200e8dd04b7767f45dc8ffc4682a20f934cd593c86aa172cd6cb37c1bedd8defd63598ba7ca7f80fb3d586562effc8aa13379051b649fb8818e6fb77129304c1ef57ce17e2c07450e4df44258301ae6653aa17b93b4b578502170b69866981b21bf52226d83af5c4f75", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000b7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000600)='syzkaller\x00', 0x9, 0x85, &(0x7f0000000640)=""/133, 0x41000, 0x8, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000a40)={0x8, 0x10000}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x1, 0x3, 0x80}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000ac0)=[{0x0, 0x3, 0x3, 0xc}, {0x0, 0x5, 0x8, 0xa}, {0x0, 0x4, 0x4, 0xc}], 0x10, 0x2, @void, @value}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b7000000000000009500000000000000455781a5feee5e1ce784909b849d5550adf200000000000000b61d69f2ffdaa10350e11cb97c8ad51bcda0c4ee6d9674c77404ceb9971e43405d621ffbc9a4fd39b0631f6dde53a9a53608c10556e5734eb84049761471ce540c772e2d9f8004e26f7fcc059c062234d5595f6dba87b81d0806fb0289ce67a66afd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8048a967d9b912ef9f1dcc4ff8546fee53f5b2e7b91c61ced1ebad000000000000e8122a793c080a882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3ad198e3f3a532efa04137d452ff47d2638da3261c8362bb7c7824be6195a66d2e17e122040e11e3bd4a69fc6e8d9f7043e09b9e10dc7777bfae5884e4ba1e9cc4a2bbe99e30816127f46a1aae33d4d63d716c0975e1ce4a655362e7062ff6ab3934555c0184021b829472adefa06d3482c7b2711b98eabdca89b77efd13e6dba4a431ce47910000118093b6cabaa17a57727474e1785ee234835088445aa4a9b677d3d342640e328504aea02a2d727e62b7f097a02dbf8fe1d704765de7482040b2fc3000000000000000008947baeaaf954aff687deaa2f80492461d273ee26d8115cbca081a14cba24788779291745083fccdddc90d7af35c528df8000000d8d79c79ddca066da478c197d4a550470557bc99cca336bd88cd28a5ee651627e3a6fbf6ea53b95ddb64c69c7d8d2f4baddc239828760459564124bad68209d2a1d16ad085886c017679cfcda8b1e152ac1e2bcc5ede5b5687aa418abfa29acd7339e73b2cd185c9eb5fb34fccd20ffa155b16c0c309ed6f6663677df37de0ec0d0f548b273940be5d1fe0bae14d1a76bf741330dacd9cc19c0163bcc93059e8d2d1bfa928e2ba458ecd989cb3581a3f270ad48255ac0dad4923e3e36629589ff6b0ceb3438e4b432dd454c04be2d538aaf60c9f7a7281d32142f2fdbc3d37e5a072b5d7f0a349f1a75f01b5c203d4bdde6ff12de9a37f7fb9a16059ad97e2edefb5e0b0326bd25f6fd1d108efa9d30a9883815654486fe42cf2f676cdbb91f7582ab314be"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000300)=r10, 0x4) sendmsg$nl_xfrm(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000160001000000000000000000e000000100000000000000000000000000000000000000000000ffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x002'], 0xf8}}, 0x0) r11 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'veth1_to_hsr\x00', 'macvlan1\x00', {}, {}, 0x6, 0x0, 0x61}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0x2}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'team0\x00', 'gretap0\x00', {}, {}, 0x6}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@helper={{0x48}, {0x0, 'irc-20000\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x6, 0x1, 0x0, 0x1], 0x3, 0x1}, {0x1, [0x6, 0x3, 0x6697e4e8f2a2b31b, 0x5, 0x5, 0x1], 0x4, 0xa}}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xe}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000010007910480000000000d70400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 378.360995ms ago: executing program 4 (id=1242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000540)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="40a2c4bc54329867ac66a2b0c16139d7c5dc30a464ed18624da017ec9400a8393ba881f84c86e316f947cee5cf0ce344991328a81ec2a598699d7adb02415d55dd7cdf2f2f4f269e7396de614d8a04b5cbf4b29697a40cd07b9b1da4132ca3c2e93c70fdcd697c7c9c4673f7a40a27079a6fde42894023d20f1dcbc48380bfbe", @ANYRES16=r1, @ANYBLOB="01002dbd7000fcdbdf252e00000006000400feff000006000600010000000c0005000201aaaaaaaaaaaa05002b000000000008000200", @ANYRESHEX=r2, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4801}, 0x24000040) 315.33802ms ago: executing program 1 (id=1243): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002280)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x40}}, 0x44800) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000), 0xc) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) 314.600548ms ago: executing program 3 (id=1244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x4c, r9, 0x1, 0x700, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @deauth={{{}, {}, @broadcast, @device_b}, 0x0, @val={0x8c, 0x10, {0x0, "031686e62c78", @short="0bde38a4ffd026f1"}}}}]}, 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r11, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x19, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000580), 0x8, 0xc7, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020784400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) close(r4) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r13, 0x2000000, 0x32, 0x0, &(0x7f0000000a40)="ffff1fffd7f2866a914e19b989bdba3afdf49815c0012afd8407194a72592a62898234aca670051317729aff67258fa4f7be", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket(0x23, 0x5, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @link_local}) 268.972949ms ago: executing program 2 (id=1245): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)}, 0x0) 244.564547ms ago: executing program 1 (id=1246): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="5c00000013006bcd9e3fe3dc6e48aa31086b870430000000ff000000160af365040014000d0002008bc3a0e640e51753cd60bc24eab556a705251e6182940800000000001282bb2352d1f006baa45e3bbd225a8941b1436e000a84c9", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) writev(r0, &(0x7f0000001b40)=[{&(0x7f0000000680)="988047f2c5d4be5a5b575b322c9eb0f81f8844712fc74576f9f30db487fbb8747a8ea8102574b5ffb1858f40db53e20fe4440cf0e9eaca25f25b1e15f8e63ef64ff469de5d37994b76634993b32bed832334fda6fe0b2a17d7ead8bc6bb3b5dbb2c4ec387429d40f2fea0036e7b8c4009492f7c57a723bdce291aa90d9e8d37e87bae8e624094b50c301b2fdea64442f8006327f0d1afa15f7e08ad405a988797f249e09dcb635610ecb09aed78e435cf6befbe355f5a380305b61d3ccf114ce35b7332bf35587fccf6360d728b5d896fc0d9fe5948686843cad69f4a478342d4225ba132d085ecd", 0xe8}, {&(0x7f0000000a80)="ad9f7b5606f97e15618503e6271677c859889034091f04fd6eb855d7c373e9293d2ca8c6511c1fd278f0f0963767a8a5ac6b50f064f5074bd5257f7be81a9e8a7018c85300d5084c4c5ee3d82c4009addb3d347c2264e6e51760e2e4ecfe18e9e9e9bf46cfc2169d71ab7133862441fab20937372b6a28256da81fecfdb6a886aae554d8c0081332b1f97894275186c7d6b0f75dfaecf51fb0073372dd8954992a47082829b0d93e696433589fe52c97fdf3683aea4c50349c536ca196604b59123a5200fd0e663c2857e6ba62d6d95132b7c39a7fbc7616359d2eb9aecf47c4d3824a4a70356b3c7841475dd82815d77348a50cb1f85ea0be14e0e8e4fa57db07d93e7c6cef92e23a424b3d25ff93de4eb0f436889267bc2280e1123a42afe90031d7a1f1274d9dba6062df4df184c4f5b1be19f8825acd5027a002fe900762b8101e23813a2a7cf1011b8d2184bdcbe5720b2413df0b53f703ce8f8bcdf995303c8d478639c297889b48be267c7f52ec07f9a8de500a08624669cb8fde7f732651b92f56b3af995534ee95e5f0c35d0ea59ec8524fb1245825af7845ace1c6a22a9207423ef8e6089bd1586539a76a921186ff771e19b89ba1fd7ece032ebf4a29e0eb5d1f49f733a87e8378813808c4c5ef2eb2c1fb9fb1512cf5e94cd61039eb7bc32e11b33b90a7d90a9b407ad79dbb56c9d22a1d5261828d9821d9da12c1d78dd48cb82bddadd80ff5dfc4842ce0b061b8fb918d9bbef077ad4bf00841b6dcf4502c478d4b121723614395a382b6f145a6d6a85b789110e85fafb1525cecab89551605213f61d7ad253facf9fc0631454c65a6f53eaaf960e8f9b57d6b6a60c8111d92f56dd9faeaf6a60296521ec07197668a363050de730c310fa5bc7e95cd4bc4fe2382f953dda03337832cdf76411e255eff84bed5b0d7b0847a3376d7f99e9e5a9cfd833cfedbb94f5abc04d7a7b56b28230f47ea7fbe577d229053515756c28ebb8a630dd584a20ffde1c982600c558645b7a053947c392108e2ed199eb037c6f4ac982ae654467013acc1304876b024306443c319b793efdaa41fa6e47f79ac6987b794da2d7d4d70d80629127721ddedc7311a79a5552b1d966633b05fc762cdb6f3a4abd98324423bf97976730da35dc3e940d1d2308a5a7705013cb5db42e5d4bad96dc087c488c5a592b73b4d75a6e05442c0911f968701d545adb13cf8893081f53685e88d94cb1c5e9751a4854f17edba0d243955ec9684f56162bfb428f191b3bec1fdb6d39b6d3cafc6cd1ecb73a99a56db303a9a3c3dfe9ac25950daf086d962d15b6e4f5fa581fc0d7eaaae930152cb8aa9b2e58af8921e2dee2ec0acab8fa9a53ad6cf0f984df936a6cc971ed1cdd964622283243282b2b7c005209aeb8ee87a6cfd7e16888ce2f0ffe9eb4dd247a22c012837b6d754378ab5a80a39ff141c7ff03a5a6cb6a6a55b9d92640528b413a930ab0dbb01e71570966ad52170b09ef2278e34e25b56626321c2017e08209a952659357c27743da585c0dfee6bc24b6c12aa62f7335bca0ee0f895475647718f9a62d74a9c326644f3785354b96338a056a3c267b236fda942ca934720f8a28176f1ce4aa810afc49831d1622f111b50baddd8a388c99c380b1a2dba017a126d724f13c046f792c5ccef5e2d4a56c095872a36a06d824a00694e8e85e9e6c25c86d9d9bac06e9319a07318878deb48718c3f05034b692985b8255f108a1f9cdbb5e0924ea46698be34c94e9171ae6e0c9ce64e629b74a1d715bf8ade709c6599fee731f5ee812a814b9be76f89d0235b7b5be43b8d7e09a3b3d8b851247fd373fc13cbadbe0dfc68ea591dc813fd39b5b92e8dd63d61f36af6db227574052cd7142f7022fbfa07992a156e9aa8ee74e1063a06f6ac6febeecab52522b18479de5cec4f819d17db43ba4a7f4cdb3174efdc0a3bdd74afaa8721e040856e32098dcb7339289b6395c50b108086ecccd225a6b82cc7c41e84bc67f5f5bba300e34cdb1454dda4c47f777bf1eee7936e3a9a31fb15b852fd32df3b72cfb26f0be8df2b0f2b0ce51b3386f8f37e0f7a1f6caae91ba4f51957bf379fef8a05429a1081c679d689f9adcce839e116f1c348e09991887b008b532d65dd003df82cc78a9f4736228b603537fa27f0af10b8d26dc1074e47d777ea8ea92bf92fe8c1545acd0e61e6ddceacacf8d1738564e1cd250d4acc2264fab844a3348177ee95ec629cd73c53bf59f019b47016760e035c7f99d59346f9aeddea0682166340e14b1b75093df0dd4ae4faa096d4ef2537ce046a19b6580528437379d51f4fa800efdaa59aeac63cc4891f41f2f601b0350c25301c0055957ffdc6b7870d8e88a78761f87fdb34533c02c4097d47e4607eee6cf6f73d0c87396ed35f701038442f05fed4fd0846b1ebb84126588ec78816a7ab3e83ee77dd43e3c576508b3b9f081da1e29cb7654c06c81c57697152b9175eebca5e9e1c5e5395e6d703669b176bd6b653e9a548c1f81d19f9553b2d884fec5c11ca7ed7900eab35a148b67598f77b2ef49ae00807450a042f1d4381bcd309c5e70c13643147f731641d30830f837da8dbeedd1bc7cb9377796d8313e89d04f8ff82269fee33fac72f73faf5e6aa69f67d800688347bd95e35a26985ec1105a697d1ee797e5c5387ad794f2613a50a41007de563171324ab5dd2f3e762a53aa493d427c1049eb8f4151d146c76b562e439608d22518f8696f1ccf6a737761b69683385d1e1c327f08ebfa26995e5f7ccc8e247bfa99f14b18da9f05c1475a4f4dbdf38e6ba6196406306981335bb1f3576b2bc171240d8a8d086d012276cda43479bc87f296b8a84834d5e2cf5b9faaac6deb37cc023d30d61c8f14e2f86a570e74ffe5e9abf2afd546c24ee9c9337cb8821f68abdac42312d94c7c6f0b86326180f3fd6225f0441a31ea749c357e38b8c60e39d5edf13e06b453421475864173a6369dda61bf8f95479aa7c3fb027a34036a5b200246af5ef1f220baeb9182afdccc8ddff1e0a828a2fd15147406bd2b5f8b8cb472b084c5821feb308e0ca188ccda0495ecf58c8e0df4ae27d4f07d67cd028e71bf4b76c642c93226fd235fbb9cca686d12f7a8d190830378983919172a524621cc5bec88762aec7a163e962e57e3b4de7ed128e87adf9985d03504a8fc5a574ab4480d7325a08494842e150517708529610079030de1558b9afcdd3c223d01cbc2b2f9301cb31beaae326f1a204ea3bb52ff6327d7200367e35847a6df095b04a53015055e233ad04443e764e7698d4cda171b881b9cf67ce0d5946c2d0748cdcea7b5caa147161602142aeea2a7d42f1f3c5ebe4d1e14b8c1d0eb801e0ac2bd5c435f24e90a633cb2b0d396ebe0d36c0ac5a0c3da695bb0229e80cc4ded5cf220a2339a0ceb08e25500653dfc95de9133f5d6d6989a40d368589a50669e86714f146d13564f3337f81480659a370171a16bce6e05f217acdd8c9b37cbf55db01aa8eb02f828e1c498e2a2963611ea2bf704d6c41d689c26caba5eadfcbe253600c9970617b945c3d98a8e41fb787aa13643896f547c67effab261ab1de9a59e21ca7f95d27854dcfd518360747f4b1e0e31bbd53a435c7a4a2afeed4e9c394dacae084dc6dcf15ac22295f5aa5d74f11e0936457eef669682379b5280b8dab15a649423e52cbf7d3a950a1e18b4f9ef7666fffaa0941661b5bcc088d9da73d65c40127b4d52010d2328df607003e47ea00c1895e727f43c603f7955a6448cbe203dd88a0056c8674664f001c04b5f72e274bc658471773e509dc92b3c267bbc9261fc8b39eabeb669b9dc30970478f830deb9b4be0e132e3a625883dfe56713b850bab06036acf34e503c77f459d55fa0b2d18df01d4d55cb461df211b2c66cec7bca68d3f8991a237c431b77f144122b8d47a50ab5d11ab456e24b5479ea29ecbd09dc28869365134a7e0e757656b895ca9c0028d5e0fd061668adb2baa11779faca220016cd62b8d04956d0f36ab82ec586831d6052d18fd6db925001a829492b8c5be60373eab4974cb2c305d23bb1c367a2054aa85a6a17c12c4b2a80bca27fa71cadbc8eb49414c6e0c78d95c6c5cf77e99b50c9e4657adfae69cb1889aeb51166c92208388057a450cf238156c53bb5f426f6d3a93ceac11d0919091e1a984f6dbc9a9789527b7c6bd300458af8e12049a94ea380974539fa3b69b1d53b8ff392bf113ad5ef1df94464a35171d969149519cbf6cf91cf2c8a55414bf5f1d44cde78f90fa26630740a87e053fa52b35262f324dc0172cddca9ba0e72933698a0adf43dedc93f44cc7c8255eb9b95ab2b0fde403360e1be724a03c336616170cd94390a9a79dfa8ac9ebfacd6981c40bed79aac4d982d177e460506397b71c5db9e3c53343c5c0e18d70acaa2ee6cd28ad0c84df36ead16425aac78a3f40621693a1a6a17a5abed7845ab96488efe6e54e15ffa36c8df92f2057d00db3274de0d4ec69cab8c16fb707a0bdecc3692d50a80462fb88a702baa2519a9d4dbcb596fab10d6640e3e3708e9d202f87f850a82e001d2fc4d361304564646e6a1db0b5c6d9baa5bc6a966b5a9fe2fd851d14425eacab35dab0558739f88f15171afb1f324fbe2233d3481d0ecc5a4b43e7abe39d15fe03760302f5bb020f39ce66c5f3e8c4db1eb35bb4efe73ae22f6a361e04d5ebc075c282b97c89c61e979a3fc406b9b367b4381c12e266693d912d724330ecdb1765065cfed9abe518609c313d6a992c023b661046032f637591854f8c96ad6541d7df8834e596d40f4f48f9b76aeb3676bb316a91b24b7d0f32139ce922192000b571dbc049b3af05cadb279b89055082d5cef9928f9d308e7b8fa07fb612abf296e2b52e29dc07bb40805521f30e083ca1a7d21bcde7d3aebe596af230b64e5c920de260f63440452cfaaef3c2730ac80879051fcf3dbd3dc1dbc6142f4f7be558eb14189151f7506b97716e2baef0cc2ebddf2a9b942c31a5826bd55a61a2bcf8b6027f5aeea05cec2ded6ba2bf66bf76989ebbc9b3ec0768e95c78c98d7cae132728ae54939dd6ff8222365830c7ff6dd4b4624dc3d3fb35b431d10e575672d4ad540eda87bb7dfdf04ab711177c6b128b69643e822aea5805c766639acb7ac25292ee109ecf4a9fc4eeda9776f0441d6bd3d4fbadbb33c809a2ac6867d039adca4c51b55288b076482ba9c265a9c9a8536b668a35ad7d6f4ba0338902af145b579f7176f0ed932533abfd399ad8de355ca297bb9989b1e9274d7ece0093e8728b79364178ae5eeefebb8185d15cefd6eccbb9e451eea4cd1be09441d872ad3496733540270dcaf1e829a6e91bb8459e195bcb1f320fe314d4c5c1173011ec55d5bf9acdec2eca7e613801cf0b6f09fddc9a720ef70ed0e4e47e969aa2dc96834aface002d185b718599113ea247226b7ebe9309f3759a5b1c97649404dbfcd91e293b9c4653e9134faf50035d1578a6a7f6721da7e206c1e49c2e54271680e1158e5f20419264b8bfcaba4f2775ea2e1e0782d54b80ffb4d6e3f2af82376606a025505dc2cc53ce08cea8651ccf8471c9dc2eb81e8f19dde98c5c959d7d0fcf045145116f4d0d19a1890bccb605eb7b6b9da2a0da667e1974c042aa9edbafbdbd90882d90a9d8f9e3dfb86a05764e19dd1d2b82be88e1728be7de9aa5d21261b2ad146c9456b980f5b76999915a487c2e2902d270b5895a9168dfb8940d4f27544784a726ed506469f6", 0x1000}, {&(0x7f0000000880)="6db39427f18d81a19bec23e95368b81e680216df3d91a74e3c3bca93d84009a4", 0x20}, {&(0x7f0000001a80)="896aca0cbe6bd936379ac961b9889f0e", 0x10}, {&(0x7f0000001ac0)="e50044e031cd8bc31385d009bab949c4cfc877f86b7e2509b2a6190e2fa8275061bd04ce33ae503eedbbe68c187fd157120d48fa4d14379448ccd6881156cd5b1672217f82d70c3b237681a53abb02", 0x4f}], 0x5) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000780)={{{@in=@private, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f00000004c0)=0xe8) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@delpolicy={0x138, 0x14, 0x8, 0x70bd26, 0x25dfdbfc, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@private=0xa010102, 0x4e20, 0x2, 0x4e21, 0x56, 0xa, 0x0, 0x40, 0x84, r2, r4}, 0x6e6bba}, [@policy_type={0xa}, @replay_esn_val={0x24, 0x17, {0x2, 0x70bd25, 0x70bd25, 0x70bd27, 0x70bd2d, 0x1, [0x25, 0x5]}}, @algo_auth={0x83, 0x1, {{'blake2b-384\x00'}, 0x1d8, "6080573abad8c30b4f166872ae7d595c66368545165408512b467312707c56d96161931e2f4b615d751a2d9de49a0437c250bc7f2e1d35c632274a"}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2a, 0xeb1}}, @lifetime_val={0x24, 0x9, {0x3, 0x5, 0xfff, 0x80000000}}]}, 0x138}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000001bc0)={'wlan0\x00'}) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000140)='./file0\x00'}, 0x18) bpf$LINK_DETACH(0x22, 0x0, 0x0) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) setsockopt$rose(r7, 0x104, 0x0, &(0x7f0000001c00)=0x8, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@bloom_filter={0x1e, 0x2, 0x9, 0x2, 0x8020, r5, 0x2, '\x00', r2, 0xffffffffffffffff, 0x0, 0x1, 0x4, 0x8, @value=r6, @void, @void, @value}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@getchain={0x34, 0x11, 0x839, 0xdffffffd, 0x2, {0x0, 0x0, 0x0, r2, {0xffe0, 0x8}, {0x0, 0xfff3}, {0xe}}, [{0x8, 0xb, 0x28d69026}, {0x8, 0xb, 0x9}]}, 0xffffffffffffff09}, 0x1, 0x0, 0x0, 0x845}, 0x0) 120.89537ms ago: executing program 4 (id=1247): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x2d) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) write(r3, &(0x7f0000000000)="ea", 0x1) sendmmsg$alg(r3, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x1e) close(r3) socket$inet(0xa, 0x801, 0x84) (async) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) (async) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x2d) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) write(r3, &(0x7f0000000000)="ea", 0x1) (async) sendmmsg$alg(r3, &(0x7f0000000340)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="95", 0x1}], 0x1, 0x0, 0x0, 0x400401c}], 0x1, 0x8000) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) (async) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1}, 0x20}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x1e) (async) close(r3) (async) 120.033248ms ago: executing program 3 (id=1248): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) connect$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa3, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x10000, @dev={0xfe, 0x80, '\x00', 0x11}, 0x1, 0x4}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2f}, r3}, 0x14) close(0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) getsockopt$kcm_KCM_RECV_DISABLE(r5, 0x6, 0x1a, 0x0, 0x20003f00) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r6, 0x0, 0x4, 0x0, &(0x7f0000000240)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r8 = socket(0x10, 0x80002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_genetlink_get_family_id$nl80211(0x0, r8) sendmsg$tipc(r10, 0x0, 0x0) sendmmsg$sock(r10, &(0x7f0000003bc0), 0x4000000000002ca, 0x4040014) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r11, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x80, 0x5, 0x10001, 0x1000, 0x20, 0x1, 0xb}, &(0x7f0000000100)=0x9c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x400, @empty}, 0x1c) 119.669267ms ago: executing program 1 (id=1249): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x54}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0xffffff80}, 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 55.57925ms ago: executing program 2 (id=1250): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000010000000000f0ffffffffffff60105200000000009500000700000000"], 0x0, 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007110000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0xa8100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'macvlan1\x00', 0x2}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000200)) 18.975077ms ago: executing program 1 (id=1251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crc32-generic)\x00'}, 0x58) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='hybla\x00', 0x6) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a00340002020202020200000a0026006c09000047179ec38ce5cbc94568b59c6b94b7d09ad03a7defb46019081e81dae5505a76a8ab7f50699eb32efc52944a1651b8cb01000000caf7be6e552e4b55a56c5447f2be8a2389e003af03bbfb"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@broadcast, &(0x7f0000000800)=ANY=[], 0x195) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x8, 0x0, @default, @val={0x1, 0x6, [{0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x18}, {0x24}]}, @void}, 0x26) 0s ago: executing program 4 (id=1252): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @private0}, 0x1c, &(0x7f0000000a40)=[{&(0x7f00000006c0)='M', 0x1}], 0x1}}], 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000040)="b9", 0x1, 0x0, 0x0, 0x0) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.797456][ T7685] FAULT_INJECTION: forcing a failure. [ 118.797456][ T7685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.820312][ T7685] CPU: 0 UID: 0 PID: 7685 Comm: syz.3.577 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 118.830698][ T7685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 118.840784][ T7685] Call Trace: [ 118.844101][ T7685] [ 118.847055][ T7685] dump_stack_lvl+0x241/0x360 [ 118.851775][ T7685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.857100][ T7685] ? __pfx__printk+0x10/0x10 [ 118.861734][ T7685] ? __pfx_lock_release+0x10/0x10 [ 118.866810][ T7685] should_fail_ex+0x3b0/0x4e0 [ 118.871532][ T7685] _copy_from_user+0x2f/0xc0 [ 118.876159][ T7685] sctp_getsockopt_peer_addrs+0xf7/0x6a0 [ 118.881827][ T7685] ? lockdep_hardirqs_on+0x99/0x150 [ 118.887068][ T7685] ? __pfx_sctp_getsockopt_peer_addrs+0x10/0x10 [ 118.893434][ T7685] ? __local_bh_enable_ip+0x168/0x200 [ 118.898941][ T7685] ? sctp_getsockopt+0x13a/0xbb0 [ 118.903924][ T7685] sctp_getsockopt+0xadc/0xbb0 [ 118.908728][ T7685] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 118.914657][ T7685] do_sock_getsockopt+0x3c4/0x7e0 [ 118.919718][ T7685] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 118.925292][ T7685] ? __fget_files+0x2a/0x410 [ 118.929924][ T7685] ? __fget_files+0x395/0x410 [ 118.934714][ T7685] ? __fget_files+0x2a/0x410 [ 118.939344][ T7685] __x64_sys_getsockopt+0x2a1/0x370 [ 118.944577][ T7685] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 118.950348][ T7685] ? do_syscall_64+0x100/0x230 [ 118.955133][ T7685] ? do_syscall_64+0xb6/0x230 [ 118.959838][ T7685] do_syscall_64+0xf3/0x230 [ 118.964378][ T7685] ? clear_bhb_loop+0x35/0x90 [ 118.969095][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.975131][ T7685] RIP: 0033:0x7f69b037ff19 [ 118.979579][ T7685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.999393][ T7685] RSP: 002b:00007f69b10a2058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 119.007857][ T7685] RAX: ffffffffffffffda RBX: 00007f69b0545fa0 RCX: 00007f69b037ff19 [ 119.015876][ T7685] RDX: 000000000000006c RSI: 0000000000000084 RDI: 0000000000000003 [ 119.023890][ T7685] RBP: 00007f69b10a20a0 R08: 0000000020000140 R09: 0000000000000000 [ 119.031909][ T7685] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 119.039916][ T7685] R13: 0000000000000000 R14: 00007f69b0545fa0 R15: 00007ffd1a85ca28 [ 119.048036][ T7685] [ 119.249293][ T7703] team0: Port device macvlan1 added [ 119.535089][ T7718] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (64) [ 119.885780][ T7722] __nla_validate_parse: 7 callbacks suppressed [ 119.885830][ T7722] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.589'. [ 120.254593][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.273211][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.285001][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.296163][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.317341][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.335010][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.385230][ T7735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.427749][ T7735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.448605][ T5868] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 120.491401][ T7744] FAULT_INJECTION: forcing a failure. [ 120.491401][ T7744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.491484][ T7735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'. [ 120.505018][ T7744] CPU: 0 UID: 0 PID: 7744 Comm: syz.4.594 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 120.523597][ T7744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 120.533698][ T7744] Call Trace: [ 120.536998][ T7744] [ 120.539949][ T7744] dump_stack_lvl+0x241/0x360 [ 120.544692][ T7744] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.549919][ T7744] ? __pfx__printk+0x10/0x10 [ 120.554556][ T7744] ? snprintf+0xda/0x120 [ 120.558844][ T7744] should_fail_ex+0x3b0/0x4e0 [ 120.563548][ T7744] _copy_to_user+0x31/0xb0 [ 120.567971][ T7744] simple_read_from_buffer+0xca/0x150 [ 120.573351][ T7744] proc_fail_nth_read+0x1e9/0x250 [ 120.578579][ T7744] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.584162][ T7744] ? rw_verify_area+0x55e/0x6f0 [ 120.589012][ T7744] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 120.594559][ T7744] vfs_read+0x1fc/0xb70 [ 120.598720][ T7744] ? __pfx___mutex_lock+0x10/0x10 [ 120.603747][ T7744] ? __pfx_vfs_read+0x10/0x10 [ 120.608445][ T7744] ? __fget_files+0x2a/0x410 [ 120.613057][ T7744] ? __fget_files+0x395/0x410 [ 120.617734][ T7744] ? __fget_files+0x2a/0x410 [ 120.622335][ T7744] ksys_read+0x18f/0x2b0 [ 120.626580][ T7744] ? __pfx_ksys_read+0x10/0x10 [ 120.631341][ T7744] ? do_syscall_64+0x100/0x230 [ 120.636104][ T7744] ? do_syscall_64+0xb6/0x230 [ 120.640961][ T7744] do_syscall_64+0xf3/0x230 [ 120.645468][ T7744] ? clear_bhb_loop+0x35/0x90 [ 120.650165][ T7744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.656079][ T7744] RIP: 0033:0x7fbbaf57e92c [ 120.660502][ T7744] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 120.680207][ T7744] RSP: 002b:00007fbbb0395050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 120.688636][ T7744] RAX: ffffffffffffffda RBX: 00007fbbaf745fa0 RCX: 00007fbbaf57e92c [ 120.696605][ T7744] RDX: 000000000000000f RSI: 00007fbbb03950b0 RDI: 0000000000000004 [ 120.704576][ T7744] RBP: 00007fbbb03950a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.712550][ T7744] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 120.720539][ T7744] R13: 0000000000000000 R14: 00007fbbaf745fa0 R15: 00007ffd0c02cae8 [ 120.728660][ T7744] [ 120.903719][ T7753] netlink: 'syz.4.597': attribute type 39 has an invalid length. [ 121.072661][ T7758] ip6tnl0: Master is either lo or non-ether device [ 121.248533][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 121.305483][ T7767] netlink: 'syz.4.603': attribute type 1 has an invalid length. [ 121.325033][ T7770] netlink: 64 bytes leftover after parsing attributes in process `syz.0.604'. [ 121.345459][ T7764] tipc: Enabling of bearer rejected, failed to enable media [ 121.531563][ T7778] dccp_invalid_packet: P.Data Offset(172) too large [ 121.573381][ T7783] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.752093][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.773011][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.795244][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.819797][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.841255][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.874189][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.908749][ T7789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.978015][ T7789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.011066][ T7801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 122.021410][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 122.146001][ T7793] xt_nfacct: accounting object `sy' does not exists [ 122.367729][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.614'. [ 122.948592][ T5868] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 123.116142][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.149096][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.184785][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.237409][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.287916][ T7846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 123.293983][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.309751][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.348613][ T7839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 123.391925][ T7839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.437339][ T7840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.982857][ T7859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 124.125436][ T7863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.629'. [ 124.215787][ T7866] bridge_slave_0: left allmulticast mode [ 124.246162][ T7866] bridge_slave_0: left promiscuous mode [ 124.290333][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.363738][ T7866] bridge_slave_1: left allmulticast mode [ 124.371935][ T7866] bridge_slave_1: left promiscuous mode [ 124.381639][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.409523][ T7866] bond0: (slave bond_slave_0): Releasing backup interface [ 124.438329][ T7866] bond0: (slave bond_slave_1): Releasing backup interface [ 124.514230][ T7866] team0: Port device team_slave_0 removed [ 124.712085][ T7866] team0: Port device team_slave_1 removed [ 124.718956][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.728148][ T7866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.754570][ T7866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.778109][ T7866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.835147][ T7866] team0: Port device macvlan1 removed [ 125.242503][ T7891] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 125.257050][ T7891] netlink: 'syz.4.635': attribute type 10 has an invalid length. [ 125.266306][ T7891] netlink: 2 bytes leftover after parsing attributes in process `syz.4.635'. [ 125.281771][ T7891] team0: entered promiscuous mode [ 125.287153][ T7891] bridge0: port 1(team0) entered blocking state [ 125.297748][ T7891] bridge0: port 1(team0) entered disabled state [ 125.313685][ T7891] team0: entered allmulticast mode [ 125.327554][ T7891] bridge0: port 1(team0) entered blocking state [ 125.334106][ T7891] bridge0: port 1(team0) entered forwarding state [ 125.399124][ T7870] netlink: 'syz.1.630': attribute type 1 has an invalid length. [ 125.415793][ T7893] netlink: 'syz.4.635': attribute type 1 has an invalid length. [ 125.423962][ T7870] netlink: 224 bytes leftover after parsing attributes in process `syz.1.630'. [ 125.456653][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.635'. [ 125.627384][ T11] bridge0: port 1(team0) entered disabled state [ 125.820085][ T7908] FAULT_INJECTION: forcing a failure. [ 125.820085][ T7908] name failslab, interval 1, probability 0, space 0, times 0 [ 125.863764][ T7908] CPU: 0 UID: 0 PID: 7908 Comm: syz.0.641 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 125.874167][ T7908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 125.884339][ T7908] Call Trace: [ 125.887661][ T7908] [ 125.890622][ T7908] dump_stack_lvl+0x241/0x360 [ 125.895337][ T7908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.900568][ T7908] ? __pfx__printk+0x10/0x10 [ 125.905195][ T7908] ? kmem_cache_alloc_noprof+0x48/0x380 [ 125.910785][ T7908] ? __pfx___might_resched+0x10/0x10 [ 125.916078][ T7908] should_fail_ex+0x3b0/0x4e0 [ 125.920768][ T7908] should_failslab+0xac/0x100 [ 125.925448][ T7908] ? __kernfs_new_node+0xd8/0x870 [ 125.930492][ T7908] kmem_cache_alloc_noprof+0x70/0x380 [ 125.935868][ T7908] __kernfs_new_node+0xd8/0x870 [ 125.940724][ T7908] ? up_write+0x1a9/0x590 [ 125.945153][ T7908] ? __pfx___kernfs_new_node+0x10/0x10 [ 125.950624][ T7908] ? __pfx_up_write+0x10/0x10 [ 125.955313][ T7908] kernfs_new_node+0x137/0x240 [ 125.960084][ T7908] __kernfs_create_file+0x49/0x2e0 [ 125.965211][ T7908] sysfs_add_file_mode_ns+0x24a/0x310 [ 125.970590][ T7908] internal_create_group+0x7a7/0x11d0 [ 125.975998][ T7908] ? __pfx_internal_create_group+0x10/0x10 [ 125.981814][ T7908] sysfs_create_groups+0x56/0x120 [ 125.986931][ T7908] device_add_attrs+0x199/0x600 [ 125.991790][ T7908] ? __pfx_device_add_attrs+0x10/0x10 [ 125.997158][ T7908] ? kobject_put+0x446/0x480 [ 126.001760][ T7908] device_add+0x576/0xbf0 [ 126.006095][ T7908] ? device_initialize+0x266/0x460 [ 126.011388][ T7908] wakeup_source_sysfs_add+0x1aa/0x270 [ 126.016982][ T7908] wakeup_source_register+0x171/0x250 [ 126.022369][ T7908] ep_insert+0xd99/0x1ab0 [ 126.026711][ T7908] ? __pfx_ep_insert+0x10/0x10 [ 126.031505][ T7908] ? bpf_lsm_capable+0x9/0x10 [ 126.036211][ T7908] do_epoll_ctl+0x8bc/0xf80 [ 126.040756][ T7908] __x64_sys_epoll_ctl+0x161/0x1a0 [ 126.045969][ T7908] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 126.051792][ T7908] ? do_syscall_64+0x100/0x230 [ 126.056664][ T7908] ? do_syscall_64+0xb6/0x230 [ 126.061365][ T7908] do_syscall_64+0xf3/0x230 [ 126.065894][ T7908] ? clear_bhb_loop+0x35/0x90 [ 126.070602][ T7908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.076530][ T7908] RIP: 0033:0x7f697157ff19 [ 126.080948][ T7908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.101361][ T7908] RSP: 002b:00007f69722f9058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 126.109873][ T7908] RAX: ffffffffffffffda RBX: 00007f6971745fa0 RCX: 00007f697157ff19 [ 126.118132][ T7908] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 126.126199][ T7908] RBP: 00007f69722f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.134517][ T7908] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 126.142609][ T7908] R13: 0000000000000000 R14: 00007f6971745fa0 R15: 00007ffc50beac98 [ 126.151052][ T7908] [ 126.167532][ T5868] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 126.235198][ T7917] netlink: 36 bytes leftover after parsing attributes in process `syz.3.644'. [ 126.280957][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'. [ 126.589442][ T7941] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.621838][ T7941] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 126.713550][ T7941] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.736508][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.653'. [ 126.755845][ T7941] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 126.778623][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.655'. [ 126.799745][ T7950] netlink: 'syz.1.653': attribute type 10 has an invalid length. [ 126.809235][ T7949] netlink: 'syz.2.655': attribute type 10 has an invalid length. [ 126.817011][ T7949] netlink: 2 bytes leftover after parsing attributes in process `syz.2.655'. [ 126.832305][ T7950] netlink: 2 bytes leftover after parsing attributes in process `syz.1.653'. [ 126.867750][ T7941] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.881406][ T7946] netlink: 'syz.1.653': attribute type 1 has an invalid length. [ 126.890493][ T7952] FAULT_INJECTION: forcing a failure. [ 126.890493][ T7952] name failslab, interval 1, probability 0, space 0, times 0 [ 126.892521][ T7941] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 126.918222][ T7952] CPU: 1 UID: 0 PID: 7952 Comm: syz.0.657 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 126.928521][ T7952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.938593][ T7952] Call Trace: [ 126.941877][ T7952] [ 126.944805][ T7952] dump_stack_lvl+0x241/0x360 [ 126.949488][ T7952] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.954678][ T7952] ? __pfx__printk+0x10/0x10 [ 126.959276][ T7952] ? kmem_cache_alloc_noprof+0x48/0x380 [ 126.964825][ T7952] ? __pfx___might_resched+0x10/0x10 [ 126.970151][ T7952] should_fail_ex+0x3b0/0x4e0 [ 126.974842][ T7952] should_failslab+0xac/0x100 [ 126.979522][ T7952] ? __kernfs_new_node+0xd8/0x870 [ 126.984543][ T7952] kmem_cache_alloc_noprof+0x70/0x380 [ 126.989915][ T7952] __kernfs_new_node+0xd8/0x870 [ 126.994789][ T7952] ? up_write+0x1a9/0x590 [ 126.999162][ T7952] ? __pfx___kernfs_new_node+0x10/0x10 [ 127.004640][ T7952] ? __pfx_up_write+0x10/0x10 [ 127.009335][ T7952] kernfs_new_node+0x137/0x240 [ 127.014107][ T7952] __kernfs_create_file+0x49/0x2e0 [ 127.019308][ T7952] sysfs_add_file_mode_ns+0x24a/0x310 [ 127.024686][ T7952] internal_create_group+0x7a7/0x11d0 [ 127.030065][ T7952] ? __pfx_internal_create_group+0x10/0x10 [ 127.035875][ T7952] sysfs_create_groups+0x56/0x120 [ 127.040899][ T7952] device_add_attrs+0x199/0x600 [ 127.045750][ T7952] ? __pfx_device_add_attrs+0x10/0x10 [ 127.051116][ T7952] ? kobject_put+0x446/0x480 [ 127.055718][ T7952] device_add+0x576/0xbf0 [ 127.060254][ T7952] ? device_initialize+0x266/0x460 [ 127.065398][ T7952] wakeup_source_sysfs_add+0x1aa/0x270 [ 127.070876][ T7952] wakeup_source_register+0x171/0x250 [ 127.076350][ T7952] ep_insert+0xd99/0x1ab0 [ 127.080694][ T7952] ? __pfx_ep_insert+0x10/0x10 [ 127.085467][ T7952] ? bpf_lsm_capable+0x9/0x10 [ 127.090234][ T7952] do_epoll_ctl+0x8bc/0xf80 [ 127.094752][ T7952] __x64_sys_epoll_ctl+0x161/0x1a0 [ 127.099863][ T7952] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 127.105498][ T7952] ? do_syscall_64+0x100/0x230 [ 127.110264][ T7952] ? do_syscall_64+0xb6/0x230 [ 127.114935][ T7952] do_syscall_64+0xf3/0x230 [ 127.119440][ T7952] ? clear_bhb_loop+0x35/0x90 [ 127.124133][ T7952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.130032][ T7952] RIP: 0033:0x7f697157ff19 [ 127.134452][ T7952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.154059][ T7952] RSP: 002b:00007f69722f9058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 127.162482][ T7952] RAX: ffffffffffffffda RBX: 00007f6971745fa0 RCX: 00007f697157ff19 [ 127.170452][ T7952] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 127.178507][ T7952] RBP: 00007f69722f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.186574][ T7952] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 127.194545][ T7952] R13: 0000000000000000 R14: 00007f6971745fa0 R15: 00007ffc50beac98 [ 127.202529][ T7952] [ 127.213445][ T7950] team0: entered promiscuous mode [ 127.220677][ T7950] team_slave_0: entered promiscuous mode [ 127.227040][ T7950] team_slave_1: entered promiscuous mode [ 127.229880][ T7949] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 127.237630][ T7950] macvlan1: entered promiscuous mode [ 127.247989][ T7950] bridge0: port 3(team0) entered blocking state [ 127.263108][ T7950] bridge0: port 3(team0) entered disabled state [ 127.271205][ T7950] team0: entered allmulticast mode [ 127.276550][ T7950] team_slave_0: entered allmulticast mode [ 127.286460][ T7950] team_slave_1: entered allmulticast mode [ 127.294783][ T7950] macvlan1: entered allmulticast mode [ 127.300581][ T7950] veth1_vlan: entered allmulticast mode [ 127.314354][ T7950] bridge0: port 3(team0) entered blocking state [ 127.320903][ T7950] bridge0: port 3(team0) entered forwarding state [ 127.333166][ T7955] netlink: 'syz.3.656': attribute type 15 has an invalid length. [ 127.391081][ T7941] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.407808][ T7941] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.538240][ T7941] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.556518][ T7941] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.579634][ T7961] bond0: (slave syz_tun): Releasing backup interface [ 127.629095][ T7961] bridge_slave_0: left allmulticast mode [ 127.634817][ T7961] bridge_slave_0: left promiscuous mode [ 127.666824][ T7961] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.690198][ T7961] bridge_slave_1: left allmulticast mode [ 127.696214][ T7961] bridge_slave_1: left promiscuous mode [ 127.702316][ T7961] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.719390][ T7961] bond0: (slave bond_slave_0): Releasing backup interface [ 127.732955][ T7961] bond_slave_0: left promiscuous mode [ 127.743401][ T7961] bond0: (slave bond_slave_1): Releasing backup interface [ 127.754389][ T7961] bond_slave_1: left promiscuous mode [ 127.779425][ T7961] team0: Port device team_slave_0 removed [ 127.795043][ T7961] team0: Port device team_slave_1 removed [ 127.805317][ T7961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.820220][ T7961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.841090][ T7961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.848749][ T7961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.862075][ T7961] team0: Port device macvlan1 removed [ 127.875134][ T7941] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 127.887634][ T7941] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 127.912064][ T7964] team0: Port device wg2 added [ 128.002910][ T7941] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 128.012405][ T7941] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.033941][ T7941] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 128.052281][ T7941] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 128.123443][ T7990] netlink: zone id is out of range [ 128.154896][ T7990] netlink: zone id is out of range [ 128.211001][ T7990] netlink: zone id is out of range [ 128.252887][ T8001] netlink: 'syz.4.671': attribute type 10 has an invalid length. [ 128.292962][ T5868] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 128.333047][ T8004] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 128.403338][ T8009] netlink: 'syz.0.674': attribute type 10 has an invalid length. [ 128.416039][ T8009] team0: Device ipvlan1 is of different type [ 128.455814][ T8011] bridge0: port 3(team0) entered disabled state [ 128.482644][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.499317][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.727201][ T8029] netlink: 'syz.2.683': attribute type 10 has an invalid length. [ 128.754093][ T8029] team0: left promiscuous mode [ 128.765097][ T8029] team_slave_0: left promiscuous mode [ 128.774465][ T8029] team_slave_1: left promiscuous mode [ 128.780759][ T8030] netlink: 'syz.2.683': attribute type 10 has an invalid length. [ 128.789093][ T8029] macvlan1: left promiscuous mode [ 128.810374][ T8029] batman_adv: batadv0: Adding interface: team0 [ 128.824447][ T8029] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.853372][ T8029] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 128.874798][ T8030] team0: entered promiscuous mode [ 128.880774][ T8030] team_slave_0: entered promiscuous mode [ 128.886887][ T8030] team_slave_1: entered promiscuous mode [ 128.893586][ T8030] macvlan1: entered promiscuous mode [ 128.917896][ T8030] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.932398][ T8030] batman_adv: batadv0: Interface activated: team0 [ 128.940068][ T8030] batman_adv: batadv0: Interface deactivated: team0 [ 128.947091][ T8030] batman_adv: batadv0: Removing interface: team0 [ 128.958929][ T8036] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.017309][ T8036] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.077361][ T8036] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.164382][ T8036] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.314245][ T8036] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.382189][ T8036] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.427734][ T8036] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.466693][ T8036] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.557432][ T8066] ax25_connect(): syz.4.693 uses autobind, please contact jreuter@yaina.de [ 129.649114][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.661317][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.671551][ T8075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.682230][ T8075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.057271][ T8100] FAULT_INJECTION: forcing a failure. [ 130.057271][ T8100] name failslab, interval 1, probability 0, space 0, times 0 [ 130.086640][ T8100] CPU: 1 UID: 0 PID: 8100 Comm: syz.3.701 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 130.096952][ T8100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 130.107054][ T8100] Call Trace: [ 130.110365][ T8100] [ 130.113319][ T8100] dump_stack_lvl+0x241/0x360 [ 130.118041][ T8100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.123277][ T8100] ? __pfx__printk+0x10/0x10 [ 130.127917][ T8100] ? kmem_cache_alloc_noprof+0x48/0x380 [ 130.133510][ T8100] ? __pfx___might_resched+0x10/0x10 [ 130.138840][ T8100] should_fail_ex+0x3b0/0x4e0 [ 130.143564][ T8100] should_failslab+0xac/0x100 [ 130.148463][ T8100] ? __kernfs_new_node+0xd8/0x870 [ 130.153670][ T8100] kmem_cache_alloc_noprof+0x70/0x380 [ 130.159078][ T8100] __kernfs_new_node+0xd8/0x870 [ 130.163944][ T8100] ? up_write+0x1a9/0x590 [ 130.168311][ T8100] ? __pfx___kernfs_new_node+0x10/0x10 [ 130.173810][ T8100] ? __pfx_up_write+0x10/0x10 [ 130.178504][ T8100] kernfs_new_node+0x137/0x240 [ 130.183309][ T8100] __kernfs_create_file+0x49/0x2e0 [ 130.188444][ T8100] sysfs_add_file_mode_ns+0x24a/0x310 [ 130.193942][ T8100] internal_create_group+0x7a7/0x11d0 [ 130.199347][ T8100] ? __pfx_internal_create_group+0x10/0x10 [ 130.205215][ T8100] sysfs_create_groups+0x56/0x120 [ 130.210368][ T8100] device_add_attrs+0x199/0x600 [ 130.215236][ T8100] ? __pfx_device_add_attrs+0x10/0x10 [ 130.220613][ T8100] ? kobject_put+0x446/0x480 [ 130.225216][ T8100] device_add+0x576/0xbf0 [ 130.229553][ T8100] ? device_initialize+0x266/0x460 [ 130.234671][ T8100] wakeup_source_sysfs_add+0x1aa/0x270 [ 130.240140][ T8100] wakeup_source_register+0x171/0x250 [ 130.245517][ T8100] ep_insert+0xd99/0x1ab0 [ 130.249857][ T8100] ? __pfx_ep_insert+0x10/0x10 [ 130.254630][ T8100] ? bpf_lsm_capable+0x9/0x10 [ 130.259333][ T8100] do_epoll_ctl+0x8bc/0xf80 [ 130.263860][ T8100] __x64_sys_epoll_ctl+0x161/0x1a0 [ 130.268989][ T8100] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 130.274625][ T8100] ? do_syscall_64+0x100/0x230 [ 130.279401][ T8100] ? do_syscall_64+0xb6/0x230 [ 130.284112][ T8100] do_syscall_64+0xf3/0x230 [ 130.288648][ T8100] ? clear_bhb_loop+0x35/0x90 [ 130.293345][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.299277][ T8100] RIP: 0033:0x7f69b037ff19 [ 130.303688][ T8100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.323398][ T8100] RSP: 002b:00007f69b10a2058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 130.331814][ T8100] RAX: ffffffffffffffda RBX: 00007f69b0545fa0 RCX: 00007f69b037ff19 [ 130.339784][ T8100] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 130.347756][ T8100] RBP: 00007f69b10a20a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.355727][ T8100] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 130.363698][ T8100] R13: 0000000000000000 R14: 00007f69b0545fa0 R15: 00007ffd1a85ca28 [ 130.371687][ T8100] [ 130.547699][ T8118] __nla_validate_parse: 104 callbacks suppressed [ 130.547721][ T8118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.707'. [ 130.735402][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.709'. [ 130.831602][ T8137] netlink: 20 bytes leftover after parsing attributes in process `syz.2.710'. [ 131.116105][ T8149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.713'. [ 131.178290][ T8155] FAULT_INJECTION: forcing a failure. [ 131.178290][ T8155] name failslab, interval 1, probability 0, space 0, times 0 [ 131.192002][ T8155] CPU: 0 UID: 0 PID: 8155 Comm: syz.3.715 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 131.202916][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 131.213119][ T8155] Call Trace: [ 131.216979][ T8155] [ 131.219978][ T8155] dump_stack_lvl+0x241/0x360 [ 131.224697][ T8155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.229931][ T8155] ? __pfx__printk+0x10/0x10 [ 131.234563][ T8155] ? kmem_cache_alloc_noprof+0x48/0x380 [ 131.240251][ T8155] ? __pfx___might_resched+0x10/0x10 [ 131.245693][ T8155] should_fail_ex+0x3b0/0x4e0 [ 131.250501][ T8155] should_failslab+0xac/0x100 [ 131.255210][ T8155] ? __kernfs_new_node+0xd8/0x870 [ 131.260535][ T8155] kmem_cache_alloc_noprof+0x70/0x380 [ 131.265948][ T8155] __kernfs_new_node+0xd8/0x870 [ 131.267002][ T5868] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 131.271031][ T8155] ? up_write+0x1a9/0x590 [ 131.271057][ T8155] ? __pfx___kernfs_new_node+0x10/0x10 [ 131.271083][ T8155] ? __pfx_up_write+0x10/0x10 [ 131.271114][ T8155] kernfs_new_node+0x137/0x240 [ 131.271141][ T8155] __kernfs_create_file+0x49/0x2e0 [ 131.301910][ T8155] sysfs_add_file_mode_ns+0x24a/0x310 [ 131.307305][ T8155] internal_create_group+0x7a7/0x11d0 [ 131.312692][ T8155] ? __pfx_internal_create_group+0x10/0x10 [ 131.318538][ T8155] sysfs_create_groups+0x56/0x120 [ 131.323597][ T8155] device_add_attrs+0x199/0x600 [ 131.328551][ T8155] ? __pfx_device_add_attrs+0x10/0x10 [ 131.334097][ T8155] ? kobject_put+0x446/0x480 [ 131.338701][ T8155] device_add+0x576/0xbf0 [ 131.343126][ T8155] ? device_initialize+0x266/0x460 [ 131.348425][ T8155] wakeup_source_sysfs_add+0x1aa/0x270 [ 131.353901][ T8155] wakeup_source_register+0x171/0x250 [ 131.359600][ T8155] ep_insert+0xd99/0x1ab0 [ 131.363964][ T8155] ? __pfx_ep_insert+0x10/0x10 [ 131.368822][ T8155] ? bpf_lsm_capable+0x9/0x10 [ 131.373807][ T8155] do_epoll_ctl+0x8bc/0xf80 [ 131.378320][ T8155] __x64_sys_epoll_ctl+0x161/0x1a0 [ 131.383689][ T8155] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 131.389337][ T8155] ? do_syscall_64+0x100/0x230 [ 131.394101][ T8155] ? do_syscall_64+0xb6/0x230 [ 131.398890][ T8155] do_syscall_64+0xf3/0x230 [ 131.403389][ T8155] ? clear_bhb_loop+0x35/0x90 [ 131.408698][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.414592][ T8155] RIP: 0033:0x7f69b037ff19 [ 131.419093][ T8155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.439500][ T8155] RSP: 002b:00007f69b10a2058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 131.448242][ T8155] RAX: ffffffffffffffda RBX: 00007f69b0545fa0 RCX: 00007f69b037ff19 [ 131.457370][ T8155] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 131.465548][ T8155] RBP: 00007f69b10a20a0 R08: 0000000000000000 R09: 0000000000000000 [ 131.473724][ T8155] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 131.482035][ T8155] R13: 0000000000000000 R14: 00007f69b0545fa0 R15: 00007ffd1a85ca28 [ 131.490138][ T8155] [ 131.762808][ T8176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.894811][ T8181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.723'. [ 132.069700][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 132.301195][ T8193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 132.468092][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 132.489297][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.731'. [ 132.505109][ T8203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.731'. [ 132.649240][ T8207] lo speed is unknown, defaulting to 1000 [ 133.298811][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.328850][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.344286][ T8230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.385442][ T8230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.016800][ T8270] GUP no longer grows the stack in syz.2.748 (8270): 20004000-20005000 (20002000) [ 134.027966][ T8270] CPU: 1 UID: 0 PID: 8270 Comm: syz.2.748 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 134.038516][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 134.049068][ T8270] Call Trace: [ 134.052858][ T8270] [ 134.055832][ T8270] dump_stack_lvl+0x241/0x360 [ 134.060650][ T8270] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.065989][ T8270] ? __pfx__printk+0x10/0x10 [ 134.070716][ T8270] ? find_vma+0xf9/0x170 [ 134.075072][ T8270] __get_user_pages+0x4385/0x49e0 [ 134.080239][ T8270] ? __pfx_lock_acquire+0x10/0x10 [ 134.085892][ T8270] ? mark_lock+0x9a/0x360 [ 134.090456][ T8270] ? __lock_acquire+0x1397/0x2100 [ 134.095527][ T8270] ? __pfx___get_user_pages+0x10/0x10 [ 134.101199][ T8270] ? __gup_longterm_locked+0xd2f/0x17f0 [ 134.106867][ T8270] ? __pfx_down_read_killable+0x10/0x10 [ 134.112522][ T8270] ? __pfx_lock_acquire+0x10/0x10 [ 134.117565][ T8270] ? try_get_folio+0xf1/0x6f0 [ 134.122270][ T8270] ? __pfx_lock_release+0x10/0x10 [ 134.127329][ T8270] __gup_longterm_locked+0xe64/0x17f0 [ 134.132728][ T8270] ? mark_lock+0x9a/0x360 [ 134.137095][ T8270] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 134.143101][ T8270] ? __pfx___gup_longterm_locked+0x10/0x10 [ 134.149010][ T8270] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.155346][ T8270] ? gup_fast_fallback+0x2247/0x2b80 [ 134.160641][ T8270] gup_fast_fallback+0x276c/0x2b80 [ 134.165869][ T8270] ? __pfx_gup_fast_fallback+0x10/0x10 [ 134.171433][ T8270] ? __mutex_trylock_common+0x183/0x2e0 [ 134.176977][ T8270] ? __pfx___might_resched+0x10/0x10 [ 134.182270][ T8270] ? is_valid_gup_args+0x124/0x200 [ 134.187487][ T8270] get_user_pages_fast+0xcc/0x160 [ 134.192540][ T8270] ? __pfx_get_user_pages_fast+0x10/0x10 [ 134.198182][ T8270] ? rcu_is_watching+0x15/0xb0 [ 134.203040][ T8270] ? trace_contention_end+0x3c/0x120 [ 134.208474][ T8270] ? __mutex_lock+0x37f/0xee0 [ 134.213156][ T8270] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 134.218897][ T8270] iov_iter_get_pages2+0xcf/0x130 [ 134.224014][ T8270] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 134.229689][ T8270] __se_sys_vmsplice+0x740/0x1490 [ 134.234722][ T8270] ? plist_del+0x3f1/0x410 [ 134.239228][ T8270] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 134.244727][ T8270] ? __pfx_futex_wake+0x10/0x10 [ 134.249629][ T8270] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 134.255627][ T8270] ? do_syscall_64+0x100/0x230 [ 134.260436][ T8270] ? do_syscall_64+0xb6/0x230 [ 134.265140][ T8270] do_syscall_64+0xf3/0x230 [ 134.269710][ T8270] ? clear_bhb_loop+0x35/0x90 [ 134.274412][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.280490][ T8270] RIP: 0033:0x7fe923b7ff19 [ 134.285255][ T8270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.305512][ T8270] RSP: 002b:00007fe92493b058 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 134.314058][ T8270] RAX: ffffffffffffffda RBX: 00007fe923d46080 RCX: 00007fe923b7ff19 [ 134.322130][ T8270] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000007 [ 134.330122][ T8270] RBP: 00007fe923bf3986 R08: 0000000000000000 R09: 0000000000000000 [ 134.338188][ T8270] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 134.346173][ T8270] R13: 0000000000000000 R14: 00007fe923d46080 R15: 00007fffdba49f68 [ 134.354249][ T8270] [ 134.379550][ T5868] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 134.751692][ T8286] validate_nla: 2 callbacks suppressed [ 134.751712][ T8286] netlink: 'syz.0.754': attribute type 10 has an invalid length. [ 134.765952][ T8286] team0: entered promiscuous mode [ 134.771831][ T8286] wg2: entered promiscuous mode [ 134.810084][ T8286] netlink: 'syz.0.754': attribute type 1 has an invalid length. [ 134.919248][ T8290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.935459][ T8290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.965049][ T8290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.977884][ T8290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.998342][ T8294] batadv0: entered promiscuous mode [ 135.171169][ T8308] syz.0.761[8308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.171274][ T8308] syz.0.761[8308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.198932][ T8308] syz.0.761[8308] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.586376][ T8333] __nla_validate_parse: 9 callbacks suppressed [ 135.586397][ T8333] netlink: 24 bytes leftover after parsing attributes in process `syz.3.767'. [ 135.653123][ T8337] netlink: 4 bytes leftover after parsing attributes in process `syz.2.768'. [ 135.669216][ T8337] netlink: 'syz.2.768': attribute type 10 has an invalid length. [ 135.677251][ T8337] netlink: 2 bytes leftover after parsing attributes in process `syz.2.768'. [ 135.716460][ T8337] netlink: 'syz.2.768': attribute type 1 has an invalid length. [ 135.739798][ T8337] netlink: 28 bytes leftover after parsing attributes in process `syz.2.768'. [ 135.777384][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'. [ 135.964935][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.774'. [ 136.043771][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 136.144682][ T8362] atomic_op ffff88805f187998 conn xmit_atomic 0000000000000000 [ 136.165203][ T8362] atomic_op ffff88805f187198 conn xmit_atomic 0000000000000000 [ 136.690233][ T5868] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 136.879992][ T8393] netlink: 428 bytes leftover after parsing attributes in process `syz.1.787'. [ 137.482976][ T8409] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'. [ 138.555463][ T8393] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'. [ 138.594609][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.607980][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.629351][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.648549][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.729497][ T8417] FAULT_INJECTION: forcing a failure. [ 138.729497][ T8417] name failslab, interval 1, probability 0, space 0, times 0 [ 138.758502][ T8417] CPU: 0 UID: 0 PID: 8417 Comm: syz.0.793 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 138.768825][ T8417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 138.778916][ T8417] Call Trace: [ 138.782217][ T8417] [ 138.785174][ T8417] dump_stack_lvl+0x241/0x360 [ 138.789881][ T8417] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.795115][ T8417] ? __pfx__printk+0x10/0x10 [ 138.799751][ T8417] ? __kmalloc_noprof+0xb5/0x4c0 [ 138.804723][ T8417] ? __pfx___might_resched+0x10/0x10 [ 138.810053][ T8417] should_fail_ex+0x3b0/0x4e0 [ 138.814790][ T8417] should_failslab+0xac/0x100 [ 138.819589][ T8417] __kmalloc_noprof+0xdd/0x4c0 [ 138.824388][ T8417] ? kobject_get_path+0xb8/0x230 [ 138.829360][ T8417] kobject_get_path+0xb8/0x230 [ 138.834168][ T8417] kobject_uevent_env+0x2a5/0x8e0 [ 138.839233][ T8417] ? bus_add_device+0xde/0x460 [ 138.844058][ T8417] device_add+0x63b/0xbf0 [ 138.848432][ T8417] wakeup_source_sysfs_add+0x1aa/0x270 [ 138.853939][ T8417] wakeup_source_register+0x171/0x250 [ 138.859358][ T8417] ep_insert+0xd99/0x1ab0 [ 138.863735][ T8417] ? __pfx_ep_insert+0x10/0x10 [ 138.868538][ T8417] ? bpf_lsm_capable+0x9/0x10 [ 138.873255][ T8417] do_epoll_ctl+0x8bc/0xf80 [ 138.877798][ T8417] __x64_sys_epoll_ctl+0x161/0x1a0 [ 138.882950][ T8417] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 138.888623][ T8417] ? do_syscall_64+0x100/0x230 [ 138.893439][ T8417] ? do_syscall_64+0xb6/0x230 [ 138.898151][ T8417] do_syscall_64+0xf3/0x230 [ 138.902675][ T8417] ? clear_bhb_loop+0x35/0x90 [ 138.907372][ T8417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.913280][ T8417] RIP: 0033:0x7f697157ff19 [ 138.917697][ T8417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.937314][ T8417] RSP: 002b:00007f69722f9058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 138.945762][ T8417] RAX: ffffffffffffffda RBX: 00007f6971745fa0 RCX: 00007f697157ff19 [ 138.953733][ T8417] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 138.961731][ T8417] RBP: 00007f69722f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 138.969915][ T8417] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 138.977894][ T8417] R13: 0000000000000000 R14: 00007f6971745fa0 R15: 00007ffc50beac98 [ 138.985885][ T8417] [ 139.370103][ T8449] netlink: 'syz.2.802': attribute type 4 has an invalid length. [ 139.391085][ T8447] xt_CT: You must specify a L4 protocol and not use inversions on it [ 139.766699][ T8475] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 139.792081][ T8475] bridge0: port 3(syz_tun) entered disabled state [ 139.814238][ T8479] netlink: 'syz.2.811': attribute type 1 has an invalid length. [ 139.830293][ T8475] syz_tun: left allmulticast mode [ 139.837763][ T8475] bridge0: port 3(syz_tun) entered disabled state [ 139.879557][ T8475] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 139.920787][ T8479] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.937980][ T8485] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 140.772600][ T5868] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 140.961417][ T8543] __nla_validate_parse: 6 callbacks suppressed [ 140.961439][ T8543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.833'. [ 141.257438][ T8553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.836'. [ 141.349473][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.836'. [ 141.380312][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.836'. [ 141.887273][ T8578] netlink: 'syz.0.845': attribute type 38 has an invalid length. [ 141.908821][ T8578] netlink: 16 bytes leftover after parsing attributes in process `syz.0.845'. [ 141.935380][ T8578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.055167][ T8577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.077612][ T8586] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.150288][ T8586] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.205642][ T8586] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.284116][ T8586] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.388540][ T8586] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.416731][ T8586] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.434084][ T8586] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.454772][ T8586] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.740798][ T8592] Unsupported ieee802154 address type: 0 [ 142.959323][ T8602] macvlan1: entered promiscuous mode [ 142.964894][ T8602] macvlan1: entered allmulticast mode [ 142.970573][ T8602] veth1_vlan: entered allmulticast mode [ 142.976803][ T8602] team0: Port device macvlan1 added [ 143.061035][ T53] bridge0: port 1(team0) entered blocking state [ 143.067400][ T53] bridge0: port 1(team0) entered forwarding state [ 143.119823][ T8610] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.857'. [ 143.284950][ T8616] netlink: 'syz.4.859': attribute type 29 has an invalid length. [ 143.470841][ T8622] netlink: 'syz.1.861': attribute type 38 has an invalid length. [ 143.479462][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'. [ 143.491412][ T8622] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.606876][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.737165][ T8635] netlink: 'syz.3.867': attribute type 7 has an invalid length. [ 144.119219][ T8645] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 144.201799][ T8646] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 144.338247][ T8656] veth1_vlan: left allmulticast mode [ 144.476577][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.1.876'. [ 144.668090][ T8678] netlink: 172 bytes leftover after parsing attributes in process `syz.3.880'. [ 144.734810][ T8678] tap0: tun_chr_ioctl cmd 1074025677 [ 144.749103][ T8678] tap0: linktype set to 270 [ 144.761267][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.880'. [ 144.938367][ T8689] FAULT_INJECTION: forcing a failure. [ 144.938367][ T8689] name failslab, interval 1, probability 0, space 0, times 0 [ 144.954677][ T8689] CPU: 1 UID: 0 PID: 8689 Comm: syz.4.883 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 144.965143][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.975229][ T8689] Call Trace: [ 144.978544][ T8689] [ 144.981501][ T8689] dump_stack_lvl+0x241/0x360 [ 144.986201][ T8689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.991411][ T8689] ? __pfx__printk+0x10/0x10 [ 144.996009][ T8689] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 145.002528][ T8689] ? __pfx___might_resched+0x10/0x10 [ 145.007820][ T8689] should_fail_ex+0x3b0/0x4e0 [ 145.012514][ T8689] should_failslab+0xac/0x100 [ 145.017211][ T8689] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 145.023551][ T8689] ? kobject_set_name_vargs+0x61/0x120 [ 145.029019][ T8689] kvasprintf+0xdf/0x190 [ 145.033300][ T8689] ? __pfx_kvasprintf+0x10/0x10 [ 145.038245][ T8689] ? kvasprintf_const+0x51/0x170 [ 145.043209][ T8689] kobject_set_name_vargs+0x61/0x120 [ 145.048516][ T8689] dev_set_name+0xd5/0x120 [ 145.052951][ T8689] ? __pfx_dev_set_name+0x10/0x10 [ 145.057998][ T8689] ? __init_waitqueue_head+0xae/0x150 [ 145.063377][ T8689] ? device_initialize+0x266/0x460 [ 145.068502][ T8689] wakeup_source_sysfs_add+0x180/0x270 [ 145.073964][ T8689] wakeup_source_register+0x171/0x250 [ 145.079341][ T8689] ep_insert+0xe94/0x1ab0 [ 145.083677][ T8689] ? __pfx_ep_insert+0x10/0x10 [ 145.088452][ T8689] ? bpf_lsm_capable+0x9/0x10 [ 145.093126][ T8689] do_epoll_ctl+0x8bc/0xf80 [ 145.097634][ T8689] __x64_sys_epoll_ctl+0x161/0x1a0 [ 145.102836][ T8689] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 145.108477][ T8689] ? do_syscall_64+0x100/0x230 [ 145.113244][ T8689] ? do_syscall_64+0xb6/0x230 [ 145.117923][ T8689] do_syscall_64+0xf3/0x230 [ 145.122426][ T8689] ? clear_bhb_loop+0x35/0x90 [ 145.127103][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.132997][ T8689] RIP: 0033:0x7fbbaf57ff19 [ 145.137416][ T8689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.157024][ T8689] RSP: 002b:00007fbbb0395058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 145.165440][ T8689] RAX: ffffffffffffffda RBX: 00007fbbaf745fa0 RCX: 00007fbbaf57ff19 [ 145.173749][ T8689] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 145.181742][ T8689] RBP: 00007fbbb03950a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.189720][ T8689] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 145.197698][ T8689] R13: 0000000000000000 R14: 00007fbbaf745fa0 R15: 00007ffd0c02cae8 [ 145.205859][ T8689] [ 145.448782][ T8700] veth1_vlan: left allmulticast mode [ 145.462134][ T12] bridge0: port 1(team0) entered disabled state [ 146.384424][ T8737] FAULT_INJECTION: forcing a failure. [ 146.384424][ T8737] name failslab, interval 1, probability 0, space 0, times 0 [ 146.398029][ T8737] CPU: 0 UID: 0 PID: 8737 Comm: syz.2.897 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 146.408319][ T8737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.418500][ T8737] Call Trace: [ 146.421818][ T8737] [ 146.424774][ T8737] dump_stack_lvl+0x241/0x360 [ 146.429665][ T8737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.435086][ T8737] ? __pfx__printk+0x10/0x10 [ 146.439720][ T8737] ? __kmalloc_cache_noprof+0x48/0x390 [ 146.445221][ T8737] ? __pfx___might_resched+0x10/0x10 [ 146.450660][ T8737] should_fail_ex+0x3b0/0x4e0 [ 146.455499][ T8737] should_failslab+0xac/0x100 [ 146.460488][ T8737] __kmalloc_cache_noprof+0x70/0x390 [ 146.465973][ T8737] ? device_add+0xc1/0xbf0 [ 146.470399][ T8737] device_add+0xc1/0xbf0 [ 146.474646][ T8737] ? device_initialize+0x266/0x460 [ 146.479761][ T8737] wakeup_source_sysfs_add+0x1aa/0x270 [ 146.485229][ T8737] wakeup_source_register+0x171/0x250 [ 146.490629][ T8737] ep_insert+0xe94/0x1ab0 [ 146.494983][ T8737] ? __pfx_ep_insert+0x10/0x10 [ 146.499767][ T8737] ? bpf_lsm_capable+0x9/0x10 [ 146.504468][ T8737] do_epoll_ctl+0x8bc/0xf80 [ 146.508980][ T8737] __x64_sys_epoll_ctl+0x161/0x1a0 [ 146.514264][ T8737] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 146.519896][ T8737] ? do_syscall_64+0x100/0x230 [ 146.524661][ T8737] ? do_syscall_64+0xb6/0x230 [ 146.529338][ T8737] do_syscall_64+0xf3/0x230 [ 146.533840][ T8737] ? clear_bhb_loop+0x35/0x90 [ 146.538520][ T8737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.544410][ T8737] RIP: 0033:0x7fe923b7ff19 [ 146.548832][ T8737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.568529][ T8737] RSP: 002b:00007fe92495c058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 146.576967][ T8737] RAX: ffffffffffffffda RBX: 00007fe923d45fa0 RCX: 00007fe923b7ff19 [ 146.584968][ T8737] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 146.592963][ T8737] RBP: 00007fe92495c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.600943][ T8737] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 146.609030][ T8737] R13: 0000000000000000 R14: 00007fe923d45fa0 R15: 00007fffdba49f68 [ 146.617051][ T8737] [ 147.428388][ T8755] vlan2: entered promiscuous mode [ 147.447677][ T8755] vlan2: entered allmulticast mode [ 147.464117][ T8755] vlan0: entered allmulticast mode [ 147.478714][ T8755] vlan0: entered promiscuous mode [ 147.509696][ T8755] team0: Port device vlan2 added [ 147.776345][ T8763] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 147.797653][ T8763] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 147.904265][ T8763] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 147.949183][ T8763] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 148.016045][ T8763] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 148.028552][ T8763] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 148.113453][ T8763] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 148.149960][ T8763] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 148.202840][ T8775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.255002][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.271838][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.284549][ T8777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.301744][ T8777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.322372][ T8763] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 148.348992][ T8763] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.364469][ T8763] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 148.382451][ T8763] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.413612][ T8763] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 148.424437][ T8763] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.445306][ T8783] __nla_validate_parse: 1 callbacks suppressed [ 148.445325][ T8783] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 148.470609][ T8763] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 148.487423][ T8763] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 148.799683][ T8770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.921661][ T8797] netlink: 'syz.4.914': attribute type 4 has an invalid length. [ 148.934141][ T8797] netlink: 17 bytes leftover after parsing attributes in process `syz.4.914'. [ 148.953885][ T8797] netlink: 8 bytes leftover after parsing attributes in process `syz.4.914'. [ 148.986741][ T8799] dccp_v6_rcv: dropped packet with invalid checksum [ 149.515614][ T8814] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.533256][ T8814] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 149.750154][ T8814] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 149.774950][ T8814] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 149.991238][ T8814] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 150.010277][ T8814] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 150.030909][ T8830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 150.048295][ T8830] netlink: 'syz.3.924': attribute type 10 has an invalid length. [ 150.056542][ T8830] netlink: 2 bytes leftover after parsing attributes in process `syz.3.924'. [ 150.065857][ T8830] team0: entered promiscuous mode [ 150.071449][ T8830] team_slave_0: entered promiscuous mode [ 150.077425][ T8830] team_slave_1: entered promiscuous mode [ 150.100511][ T8830] bridge0: port 3(team0) entered blocking state [ 150.108000][ T8830] bridge0: port 3(team0) entered disabled state [ 150.122834][ T8833] netlink: 'syz.3.924': attribute type 1 has an invalid length. [ 150.129152][ T8830] team0: entered allmulticast mode [ 150.136464][ T8830] team_slave_0: entered allmulticast mode [ 150.146246][ T8833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.924'. [ 150.168798][ T8830] team_slave_1: entered allmulticast mode [ 150.182887][ T8830] team0: left allmulticast mode [ 150.192103][ T8830] team_slave_0: left allmulticast mode [ 150.203023][ T8830] team_slave_1: left allmulticast mode [ 150.216231][ T8814] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 150.248686][ T8814] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 150.253155][ T8839] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.926'. [ 150.495399][ T8850] lo speed is unknown, defaulting to 1000 [ 150.731310][ T8861] netlink: 256 bytes leftover after parsing attributes in process `syz.0.933'. [ 150.752374][ T8861] unsupported nlmsg_type 40 [ 150.997442][ T8876] netlink: 'syz.2.940': attribute type 32 has an invalid length. [ 151.037953][ T8883] FAULT_INJECTION: forcing a failure. [ 151.037953][ T8883] name failslab, interval 1, probability 0, space 0, times 0 [ 151.059653][ T8883] CPU: 1 UID: 0 PID: 8883 Comm: syz.0.939 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 151.070014][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 151.080713][ T8883] Call Trace: [ 151.084197][ T8883] [ 151.087175][ T8883] dump_stack_lvl+0x241/0x360 [ 151.091992][ T8883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.097217][ T8883] ? __pfx__printk+0x10/0x10 [ 151.101934][ T8883] ? kmem_cache_alloc_noprof+0x48/0x380 [ 151.107530][ T8883] ? __pfx___might_resched+0x10/0x10 [ 151.113046][ T8883] should_fail_ex+0x3b0/0x4e0 [ 151.117770][ T8883] should_failslab+0xac/0x100 [ 151.122492][ T8883] ? __kernfs_new_node+0xd8/0x870 [ 151.127549][ T8883] kmem_cache_alloc_noprof+0x70/0x380 [ 151.132970][ T8883] __kernfs_new_node+0xd8/0x870 [ 151.137948][ T8883] ? __pfx___kernfs_new_node+0x10/0x10 [ 151.143433][ T8883] ? __pfx_lock_acquire+0x10/0x10 [ 151.148517][ T8883] ? __pfx___might_resched+0x10/0x10 [ 151.153823][ T8883] ? sysfs_create_dir_ns+0x189/0x3a0 [ 151.159138][ T8883] ? sysfs_create_dir_ns+0x1cf/0x3a0 [ 151.164536][ T8883] kernfs_new_node+0x137/0x240 [ 151.169608][ T8883] __kernfs_create_file+0x49/0x2e0 [ 151.174750][ T8883] sysfs_add_file_mode_ns+0x24a/0x310 [ 151.180179][ T8883] sysfs_create_file_ns+0x197/0x2a0 [ 151.185401][ T8883] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 151.191157][ T8883] ? __dev_fwnode+0x50/0x80 [ 151.195798][ T8883] ? device_create_file+0xf2/0x1c0 [ 151.201218][ T8883] device_add+0x522/0xbf0 [ 151.207216][ T8883] ? device_initialize+0x266/0x460 [ 151.212354][ T8883] wakeup_source_sysfs_add+0x1aa/0x270 [ 151.217996][ T8883] wakeup_source_register+0x171/0x250 [ 151.223725][ T8883] ep_insert+0xe94/0x1ab0 [ 151.228070][ T8883] ? __pfx_ep_insert+0x10/0x10 [ 151.232928][ T8883] ? bpf_lsm_capable+0x9/0x10 [ 151.237604][ T8883] do_epoll_ctl+0x8bc/0xf80 [ 151.242221][ T8883] __x64_sys_epoll_ctl+0x161/0x1a0 [ 151.247442][ T8883] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 151.253144][ T8883] ? do_syscall_64+0x100/0x230 [ 151.257922][ T8883] ? do_syscall_64+0xb6/0x230 [ 151.262725][ T8883] do_syscall_64+0xf3/0x230 [ 151.267375][ T8883] ? clear_bhb_loop+0x35/0x90 [ 151.272059][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.278051][ T8883] RIP: 0033:0x7f697157ff19 [ 151.282664][ T8883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.302865][ T8883] RSP: 002b:00007f69722f9058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 151.311728][ T8883] RAX: ffffffffffffffda RBX: 00007f6971745fa0 RCX: 00007f697157ff19 [ 151.319864][ T8883] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 151.327856][ T8883] RBP: 00007f69722f90a0 R08: 0000000000000000 R09: 0000000000000000 [ 151.335855][ T8883] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 151.344295][ T8883] R13: 0000000000000000 R14: 00007f6971745fa0 R15: 00007ffc50beac98 [ 151.352549][ T8883] [ 151.626696][ T8907] netlink: 'syz.2.947': attribute type 1 has an invalid length. [ 152.424785][ T8814] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 152.447851][ T8814] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 152.472958][ T8919] IPv6: addrconf: prefix option has invalid lifetime [ 152.492688][ T8814] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 152.513041][ T8814] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 152.561816][ T8814] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 152.579539][ T8814] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 152.605939][ T8814] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 152.631878][ T8814] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 152.714209][ T8928] FAULT_INJECTION: forcing a failure. [ 152.714209][ T8928] name failslab, interval 1, probability 0, space 0, times 0 [ 152.775304][ T8928] CPU: 1 UID: 0 PID: 8928 Comm: syz.3.953 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 152.785745][ T8928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 152.795931][ T8928] Call Trace: [ 152.799325][ T8928] [ 152.802273][ T8928] dump_stack_lvl+0x241/0x360 [ 152.806977][ T8928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.812200][ T8928] ? __pfx__printk+0x10/0x10 [ 152.816839][ T8928] ? kmem_cache_alloc_noprof+0x48/0x380 [ 152.822420][ T8928] ? __pfx___might_resched+0x10/0x10 [ 152.827741][ T8928] should_fail_ex+0x3b0/0x4e0 [ 152.832458][ T8928] should_failslab+0xac/0x100 [ 152.837172][ T8928] ? __kernfs_new_node+0xd8/0x870 [ 152.842228][ T8928] kmem_cache_alloc_noprof+0x70/0x380 [ 152.847643][ T8928] __kernfs_new_node+0xd8/0x870 [ 152.852613][ T8928] ? __pfx___kernfs_new_node+0x10/0x10 [ 152.858194][ T8928] ? sysfs_do_create_link_sd+0x77/0x110 [ 152.863760][ T8928] ? do_raw_spin_lock+0x14f/0x370 [ 152.868807][ T8928] ? __pfx_lock_release+0x10/0x10 [ 152.873857][ T8928] kernfs_new_node+0x137/0x240 [ 152.878739][ T8928] kernfs_create_link+0xa5/0x1f0 [ 152.883697][ T8928] sysfs_do_create_link_sd+0x85/0x110 [ 152.889104][ T8928] device_add_class_symlinks+0xc2/0x250 [ 152.894691][ T8928] device_add+0x553/0xbf0 [ 152.899053][ T8928] ? device_initialize+0x266/0x460 [ 152.904203][ T8928] wakeup_source_sysfs_add+0x1aa/0x270 [ 152.909699][ T8928] wakeup_source_register+0x171/0x250 [ 152.915113][ T8928] ep_insert+0xe94/0x1ab0 [ 152.919488][ T8928] ? __pfx_ep_insert+0x10/0x10 [ 152.924269][ T8928] ? bpf_lsm_capable+0x9/0x10 [ 152.929138][ T8928] do_epoll_ctl+0x8bc/0xf80 [ 152.933651][ T8928] __x64_sys_epoll_ctl+0x161/0x1a0 [ 152.938773][ T8928] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 152.944424][ T8928] ? do_syscall_64+0x100/0x230 [ 152.949189][ T8928] ? do_syscall_64+0xb6/0x230 [ 152.953895][ T8928] do_syscall_64+0xf3/0x230 [ 152.958432][ T8928] ? clear_bhb_loop+0x35/0x90 [ 152.963143][ T8928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.969047][ T8928] RIP: 0033:0x7f69b037ff19 [ 152.973482][ T8928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.993481][ T8928] RSP: 002b:00007f69b10a2058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 153.001924][ T8928] RAX: ffffffffffffffda RBX: 00007f69b0545fa0 RCX: 00007f69b037ff19 [ 153.010000][ T8928] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 153.018139][ T8928] RBP: 00007f69b10a20a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.026103][ T8928] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 153.034160][ T8928] R13: 0000000000000000 R14: 00007f69b0545fa0 R15: 00007ffd1a85ca28 [ 153.042233][ T8928] [ 153.244592][ T8941] dvmrp0: entered allmulticast mode [ 153.414600][ T8955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 153.431422][ T8944] syzkaller0: entered promiscuous mode [ 153.468273][ T8944] syzkaller0: entered allmulticast mode [ 153.495229][ T8959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.963'. [ 154.298281][ T8967] trusted_key: syz.2.965 sent an empty control message without MSG_MORE. [ 155.256444][ T8970] FAULT_INJECTION: forcing a failure. [ 155.256444][ T8970] name failslab, interval 1, probability 0, space 0, times 0 [ 155.276392][ T8970] CPU: 0 UID: 0 PID: 8970 Comm: syz.2.966 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 155.286691][ T8970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.296760][ T8970] Call Trace: [ 155.300036][ T8970] [ 155.302973][ T8970] dump_stack_lvl+0x241/0x360 [ 155.307697][ T8970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.312903][ T8970] ? __pfx__printk+0x10/0x10 [ 155.317500][ T8970] ? kmem_cache_alloc_noprof+0x48/0x380 [ 155.323050][ T8970] ? __pfx___might_resched+0x10/0x10 [ 155.328340][ T8970] should_fail_ex+0x3b0/0x4e0 [ 155.333043][ T8970] should_failslab+0xac/0x100 [ 155.337741][ T8970] ? __kernfs_new_node+0xd8/0x870 [ 155.342763][ T8970] kmem_cache_alloc_noprof+0x70/0x380 [ 155.348136][ T8970] __kernfs_new_node+0xd8/0x870 [ 155.352997][ T8970] ? mark_lock+0x9a/0x360 [ 155.357351][ T8970] ? __pfx___kernfs_new_node+0x10/0x10 [ 155.362822][ T8970] ? __lock_acquire+0x1397/0x2100 [ 155.367858][ T8970] kernfs_new_node+0x137/0x240 [ 155.372641][ T8970] __kernfs_create_file+0x49/0x2e0 [ 155.377767][ T8970] sysfs_add_file_mode_ns+0x24a/0x310 [ 155.383139][ T8970] internal_create_group+0x7a7/0x11d0 [ 155.388525][ T8970] ? __pfx_internal_create_group+0x10/0x10 [ 155.394361][ T8970] sysfs_create_groups+0x56/0x120 [ 155.399481][ T8970] device_add_attrs+0x199/0x600 [ 155.404377][ T8970] ? __pfx_device_add_attrs+0x10/0x10 [ 155.409784][ T8970] ? kobject_put+0x446/0x480 [ 155.414400][ T8970] device_add+0x576/0xbf0 [ 155.418835][ T8970] ? device_initialize+0x266/0x460 [ 155.423984][ T8970] wakeup_source_sysfs_add+0x1aa/0x270 [ 155.429470][ T8970] wakeup_source_register+0x171/0x250 [ 155.434876][ T8970] ep_insert+0xe94/0x1ab0 [ 155.439245][ T8970] ? __pfx_ep_insert+0x10/0x10 [ 155.444033][ T8970] ? bpf_lsm_capable+0x9/0x10 [ 155.448986][ T8970] do_epoll_ctl+0x8bc/0xf80 [ 155.453531][ T8970] __x64_sys_epoll_ctl+0x161/0x1a0 [ 155.458653][ T8970] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 155.464299][ T8970] ? do_syscall_64+0x100/0x230 [ 155.469073][ T8970] ? do_syscall_64+0xb6/0x230 [ 155.473772][ T8970] do_syscall_64+0xf3/0x230 [ 155.478272][ T8970] ? clear_bhb_loop+0x35/0x90 [ 155.482967][ T8970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.488880][ T8970] RIP: 0033:0x7fe923b7ff19 [ 155.493311][ T8970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.512919][ T8970] RSP: 002b:00007fe92495c058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 155.521348][ T8970] RAX: ffffffffffffffda RBX: 00007fe923d45fa0 RCX: 00007fe923b7ff19 [ 155.529336][ T8970] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 155.537325][ T8970] RBP: 00007fe92495c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.545386][ T8970] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 155.553355][ T8970] R13: 0000000000000000 R14: 00007fe923d45fa0 R15: 00007fffdba49f68 [ 155.561332][ T8970] [ 155.879316][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.969'. [ 155.888958][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.969'. [ 155.907986][ T8979] nbd: socks must be embedded in a SOCK_ITEM attr [ 156.119651][ T8993] netlink: 'syz.4.973': attribute type 4 has an invalid length. [ 156.140269][ T8999] netlink: 332 bytes leftover after parsing attributes in process `syz.0.974'. [ 156.159208][ T8999] netlink: 104 bytes leftover after parsing attributes in process `syz.0.974'. [ 156.182696][ T8999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.974'. [ 156.277478][ T9000] netlink: 'syz.0.974': attribute type 1 has an invalid length. [ 156.301883][ T9010] FAULT_INJECTION: forcing a failure. [ 156.301883][ T9010] name failslab, interval 1, probability 0, space 0, times 0 [ 156.364753][ T9010] CPU: 0 UID: 0 PID: 9010 Comm: syz.2.977 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 156.375063][ T9010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 156.385134][ T9010] Call Trace: [ 156.388414][ T9010] [ 156.391363][ T9010] dump_stack_lvl+0x241/0x360 [ 156.396073][ T9010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.401301][ T9010] ? __pfx__printk+0x10/0x10 [ 156.405928][ T9010] ? kmem_cache_alloc_noprof+0x48/0x380 [ 156.411539][ T9010] ? __pfx___might_resched+0x10/0x10 [ 156.416859][ T9010] should_fail_ex+0x3b0/0x4e0 [ 156.421585][ T9010] should_failslab+0xac/0x100 [ 156.426297][ T9010] ? __kernfs_new_node+0xd8/0x870 [ 156.431356][ T9010] kmem_cache_alloc_noprof+0x70/0x380 [ 156.436771][ T9010] __kernfs_new_node+0xd8/0x870 [ 156.441657][ T9010] ? up_write+0x1a9/0x590 [ 156.446030][ T9010] ? __pfx___kernfs_new_node+0x10/0x10 [ 156.451528][ T9010] ? __pfx_up_write+0x10/0x10 [ 156.456254][ T9010] kernfs_new_node+0x137/0x240 [ 156.461059][ T9010] __kernfs_create_file+0x49/0x2e0 [ 156.466206][ T9010] sysfs_add_file_mode_ns+0x24a/0x310 [ 156.471606][ T9010] internal_create_group+0x7a7/0x11d0 [ 156.476996][ T9010] ? __pfx_internal_create_group+0x10/0x10 [ 156.483343][ T9010] sysfs_create_groups+0x56/0x120 [ 156.488369][ T9010] device_add_attrs+0x199/0x600 [ 156.493218][ T9010] ? __pfx_device_add_attrs+0x10/0x10 [ 156.498591][ T9010] ? kobject_put+0x446/0x480 [ 156.503192][ T9010] device_add+0x576/0xbf0 [ 156.507526][ T9010] ? device_initialize+0x266/0x460 [ 156.512639][ T9010] wakeup_source_sysfs_add+0x1aa/0x270 [ 156.518101][ T9010] wakeup_source_register+0x171/0x250 [ 156.523486][ T9010] ep_insert+0xe94/0x1ab0 [ 156.527839][ T9010] ? __pfx_ep_insert+0x10/0x10 [ 156.532612][ T9010] ? bpf_lsm_capable+0x9/0x10 [ 156.537292][ T9010] do_epoll_ctl+0x8bc/0xf80 [ 156.541801][ T9010] __x64_sys_epoll_ctl+0x161/0x1a0 [ 156.546910][ T9010] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 156.552538][ T9010] ? do_syscall_64+0x100/0x230 [ 156.557305][ T9010] ? do_syscall_64+0xb6/0x230 [ 156.561982][ T9010] do_syscall_64+0xf3/0x230 [ 156.566502][ T9010] ? clear_bhb_loop+0x35/0x90 [ 156.571177][ T9010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.577114][ T9010] RIP: 0033:0x7fe923b7ff19 [ 156.581526][ T9010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.601151][ T9010] RSP: 002b:00007fe92495c058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 156.609569][ T9010] RAX: ffffffffffffffda RBX: 00007fe923d45fa0 RCX: 00007fe923b7ff19 [ 156.617533][ T9010] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 156.625501][ T9010] RBP: 00007fe92495c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 156.633721][ T9010] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 156.641691][ T9010] R13: 0000000000000000 R14: 00007fe923d45fa0 R15: 00007fffdba49f68 [ 156.649676][ T9010] [ 156.798279][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz.0.982'. [ 156.828177][ T9033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 156.933282][ T9037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.987'. [ 156.975334][ T9038] netlink: 68 bytes leftover after parsing attributes in process `syz.0.986'. [ 157.237102][ T9050] macvlan0: entered allmulticast mode [ 157.267256][ T9050] veth1_vlan: entered allmulticast mode [ 157.291304][ T9050] veth1_vlan: left allmulticast mode [ 157.298080][ T9050] veth1_vlan: left promiscuous mode [ 157.327689][ T9050] macvlan0 (unregistering): left allmulticast mode [ 157.357878][ T9059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.536228][ T9067] FAULT_INJECTION: forcing a failure. [ 157.536228][ T9067] name failslab, interval 1, probability 0, space 0, times 0 [ 157.562936][ T9067] CPU: 1 UID: 0 PID: 9067 Comm: syz.3.995 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 157.573280][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 157.583386][ T9067] Call Trace: [ 157.586696][ T9067] [ 157.589653][ T9067] dump_stack_lvl+0x241/0x360 [ 157.594469][ T9067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.599694][ T9067] ? __pfx__printk+0x10/0x10 [ 157.604419][ T9067] ? kmem_cache_alloc_noprof+0x48/0x380 [ 157.610127][ T9067] ? __pfx___might_resched+0x10/0x10 [ 157.615557][ T9067] should_fail_ex+0x3b0/0x4e0 [ 157.620293][ T9067] should_failslab+0xac/0x100 [ 157.625023][ T9067] ? __kernfs_new_node+0xd8/0x870 [ 157.628204][ T9072] bridge1: entered allmulticast mode [ 157.630060][ T9067] kmem_cache_alloc_noprof+0x70/0x380 [ 157.630098][ T9067] __kernfs_new_node+0xd8/0x870 [ 157.645660][ T9067] ? __pfx___kernfs_new_node+0x10/0x10 [ 157.651356][ T9067] ? sysfs_do_create_link_sd+0x77/0x110 [ 157.656941][ T9067] ? do_raw_spin_lock+0x14f/0x370 [ 157.662009][ T9067] ? __pfx_lock_release+0x10/0x10 [ 157.667172][ T9067] kernfs_new_node+0x137/0x240 [ 157.672070][ T9067] kernfs_create_link+0xa5/0x1f0 [ 157.677055][ T9067] sysfs_do_create_link_sd+0x85/0x110 [ 157.682467][ T9067] device_add_class_symlinks+0x1c5/0x250 [ 157.688163][ T9067] device_add+0x553/0xbf0 [ 157.692543][ T9067] ? device_initialize+0x266/0x460 [ 157.697705][ T9067] wakeup_source_sysfs_add+0x1aa/0x270 [ 157.703210][ T9067] wakeup_source_register+0x171/0x250 [ 157.708641][ T9067] ep_insert+0xe94/0x1ab0 [ 157.713021][ T9067] ? __pfx_ep_insert+0x10/0x10 [ 157.717806][ T9067] ? bpf_lsm_capable+0x9/0x10 [ 157.722517][ T9067] do_epoll_ctl+0x8bc/0xf80 [ 157.727052][ T9067] __x64_sys_epoll_ctl+0x161/0x1a0 [ 157.732398][ T9067] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 157.738043][ T9067] ? do_syscall_64+0x100/0x230 [ 157.742815][ T9067] ? do_syscall_64+0xb6/0x230 [ 157.747491][ T9067] do_syscall_64+0xf3/0x230 [ 157.752022][ T9067] ? clear_bhb_loop+0x35/0x90 [ 157.756704][ T9067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.762603][ T9067] RIP: 0033:0x7f69b037ff19 [ 157.767022][ T9067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.786766][ T9067] RSP: 002b:00007f69b10a2058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 157.795207][ T9067] RAX: ffffffffffffffda RBX: 00007f69b0545fa0 RCX: 00007f69b037ff19 [ 157.803224][ T9067] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 157.811291][ T9067] RBP: 00007f69b10a20a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.819278][ T9067] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 157.827280][ T9067] R13: 0000000000000000 R14: 00007f69b0545fa0 R15: 00007ffd1a85ca28 [ 157.835663][ T9067] [ 157.872229][ T5868] Bluetooth: hci4: link tx timeout [ 157.877923][ T5868] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.002585][ T9081] syzkaller1: entered promiscuous mode [ 158.008113][ T9081] syzkaller1: entered allmulticast mode [ 158.134364][ T9090] ax25_connect(): syz.4.1001 uses autobind, please contact jreuter@yaina.de [ 158.319375][ T9100] team0: left allmulticast mode [ 158.324303][ T9100] team_slave_0: left allmulticast mode [ 158.329991][ T9100] team_slave_1: left allmulticast mode [ 158.335497][ T9100] macvlan1: left allmulticast mode [ 158.341030][ T9100] bridge0: port 3(team0) entered disabled state [ 158.359838][ T9100] bridge_slave_0: left allmulticast mode [ 158.365928][ T9100] bridge_slave_0: left promiscuous mode [ 158.374790][ T9100] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.403747][ T9100] bridge_slave_1: left allmulticast mode [ 158.410343][ T9100] bridge_slave_1: left promiscuous mode [ 158.418829][ T9100] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.445726][ T9100] bond0: (slave bond_slave_0): Releasing backup interface [ 158.478112][ T9100] bond0: (slave bond_slave_1): Releasing backup interface [ 158.525196][ T9100] team_slave_0: left promiscuous mode [ 158.546984][ T9100] team0: Port device team_slave_0 removed [ 158.553873][ T9100] team_slave_1: left promiscuous mode [ 158.566469][ T9100] team0: Port device team_slave_1 removed [ 158.572959][ T9100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.580820][ T9100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.591973][ T9100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.599522][ T9100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.611574][ T9100] macvlan1: left promiscuous mode [ 158.620437][ T9100] team0: Port device macvlan1 removed [ 158.692287][ T9121] netlink: 'syz.3.1009': attribute type 1 has an invalid length. [ 158.766572][ T9125] FAULT_INJECTION: forcing a failure. [ 158.766572][ T9125] name failslab, interval 1, probability 0, space 0, times 0 [ 158.779866][ T9125] CPU: 1 UID: 0 PID: 9125 Comm: syz.4.1010 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 158.790238][ T9125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.800330][ T9125] Call Trace: [ 158.803637][ T9125] [ 158.806596][ T9125] dump_stack_lvl+0x241/0x360 [ 158.811309][ T9125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.816539][ T9125] ? __pfx__printk+0x10/0x10 [ 158.821164][ T9125] ? kmem_cache_alloc_noprof+0x48/0x380 [ 158.826742][ T9125] ? __pfx___might_resched+0x10/0x10 [ 158.832076][ T9125] should_fail_ex+0x3b0/0x4e0 [ 158.836795][ T9125] should_failslab+0xac/0x100 [ 158.841506][ T9125] ? __kernfs_new_node+0xd8/0x870 [ 158.846561][ T9125] kmem_cache_alloc_noprof+0x70/0x380 [ 158.851970][ T9125] __kernfs_new_node+0xd8/0x870 [ 158.856952][ T9125] ? up_write+0x1a9/0x590 [ 158.861317][ T9125] ? __pfx___kernfs_new_node+0x10/0x10 [ 158.866901][ T9125] ? __pfx_up_write+0x10/0x10 [ 158.871631][ T9125] kernfs_new_node+0x137/0x240 [ 158.876438][ T9125] __kernfs_create_file+0x49/0x2e0 [ 158.881579][ T9125] sysfs_add_file_mode_ns+0x24a/0x310 [ 158.886990][ T9125] internal_create_group+0x7a7/0x11d0 [ 158.892400][ T9125] ? __pfx_internal_create_group+0x10/0x10 [ 158.898250][ T9125] sysfs_create_groups+0x56/0x120 [ 158.903297][ T9125] device_add_attrs+0x199/0x600 [ 158.908158][ T9125] ? __pfx_device_add_attrs+0x10/0x10 [ 158.913535][ T9125] ? kobject_put+0x446/0x480 [ 158.918139][ T9125] device_add+0x576/0xbf0 [ 158.922475][ T9125] ? device_initialize+0x266/0x460 [ 158.927615][ T9125] wakeup_source_sysfs_add+0x1aa/0x270 [ 158.933106][ T9125] wakeup_source_register+0x171/0x250 [ 158.938498][ T9125] ep_insert+0xe94/0x1ab0 [ 158.942847][ T9125] ? __pfx_ep_insert+0x10/0x10 [ 158.947643][ T9125] ? bpf_lsm_capable+0x9/0x10 [ 158.952336][ T9125] do_epoll_ctl+0x8bc/0xf80 [ 158.956857][ T9125] __x64_sys_epoll_ctl+0x161/0x1a0 [ 158.961972][ T9125] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 158.967605][ T9125] ? do_syscall_64+0x100/0x230 [ 158.972385][ T9125] ? do_syscall_64+0xb6/0x230 [ 158.977086][ T9125] do_syscall_64+0xf3/0x230 [ 158.981589][ T9125] ? clear_bhb_loop+0x35/0x90 [ 158.986277][ T9125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.992275][ T9125] RIP: 0033:0x7fbbaf57ff19 [ 158.996696][ T9125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.016308][ T9125] RSP: 002b:00007fbbb0395058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 159.024724][ T9125] RAX: ffffffffffffffda RBX: 00007fbbaf745fa0 RCX: 00007fbbaf57ff19 [ 159.032694][ T9125] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 159.040666][ T9125] RBP: 00007fbbb03950a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.048639][ T9125] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 159.056694][ T9125] R13: 0000000000000000 R14: 00007fbbaf745fa0 R15: 00007ffd0c02cae8 [ 159.064680][ T9125] [ 159.683555][ T9154] __nla_validate_parse: 1 callbacks suppressed [ 159.683575][ T9154] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1019'. [ 159.707347][ T9156] netlink: 'syz.0.1020': attribute type 4 has an invalid length. [ 159.751007][ T9156] netlink: 'syz.0.1020': attribute type 4 has an invalid length. [ 159.961500][ T9169] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1026'. [ 159.971492][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 160.226387][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1033'. [ 160.242789][ T9191] netlink: 'syz.0.1028': attribute type 38 has an invalid length. [ 160.259356][ T9191] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1028'. [ 160.273294][ T9190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1033'. [ 160.293408][ T9191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.762478][ T9231] FAULT_INJECTION: forcing a failure. [ 160.762478][ T9231] name failslab, interval 1, probability 0, space 0, times 0 [ 160.793861][ T9231] CPU: 0 UID: 0 PID: 9231 Comm: syz.4.1044 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 160.804435][ T9231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.809619][ T9234] Cannot find del_set index 4 as target [ 160.814504][ T9231] Call Trace: [ 160.814524][ T9231] [ 160.814534][ T9231] dump_stack_lvl+0x241/0x360 [ 160.814576][ T9231] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.814595][ T9231] ? __pfx__printk+0x10/0x10 [ 160.814621][ T9231] ? kmem_cache_alloc_noprof+0x48/0x380 [ 160.829385][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 160.831063][ T9231] ? __pfx___might_resched+0x10/0x10 [ 160.831105][ T9231] should_fail_ex+0x3b0/0x4e0 [ 160.831136][ T9231] should_failslab+0xac/0x100 [ 160.870400][ T9231] ? __kernfs_new_node+0xd8/0x870 [ 160.875583][ T9231] kmem_cache_alloc_noprof+0x70/0x380 [ 160.881008][ T9231] __kernfs_new_node+0xd8/0x870 [ 160.885883][ T9231] ? up_write+0x1a9/0x590 [ 160.890221][ T9231] ? __pfx___kernfs_new_node+0x10/0x10 [ 160.895687][ T9231] ? __pfx_up_write+0x10/0x10 [ 160.900393][ T9231] kernfs_new_node+0x137/0x240 [ 160.905211][ T9231] __kernfs_create_file+0x49/0x2e0 [ 160.910357][ T9231] sysfs_add_file_mode_ns+0x24a/0x310 [ 160.915770][ T9231] internal_create_group+0x7a7/0x11d0 [ 160.921177][ T9231] ? __pfx_internal_create_group+0x10/0x10 [ 160.927003][ T9231] sysfs_create_groups+0x56/0x120 [ 160.932045][ T9231] device_add_attrs+0x199/0x600 [ 160.936923][ T9231] ? __pfx_device_add_attrs+0x10/0x10 [ 160.942310][ T9231] ? kobject_put+0x446/0x480 [ 160.946921][ T9231] device_add+0x576/0xbf0 [ 160.951259][ T9231] ? device_initialize+0x266/0x460 [ 160.956385][ T9231] wakeup_source_sysfs_add+0x1aa/0x270 [ 160.961856][ T9231] wakeup_source_register+0x171/0x250 [ 160.967231][ T9231] ep_insert+0xe94/0x1ab0 [ 160.971567][ T9231] ? __pfx_ep_insert+0x10/0x10 [ 160.976339][ T9231] ? bpf_lsm_capable+0x9/0x10 [ 160.981039][ T9231] do_epoll_ctl+0x8bc/0xf80 [ 160.985689][ T9231] __x64_sys_epoll_ctl+0x161/0x1a0 [ 160.990824][ T9231] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 160.996480][ T9231] ? do_syscall_64+0x100/0x230 [ 161.001250][ T9231] ? do_syscall_64+0xb6/0x230 [ 161.005927][ T9231] do_syscall_64+0xf3/0x230 [ 161.010427][ T9231] ? clear_bhb_loop+0x35/0x90 [ 161.015112][ T9231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.021108][ T9231] RIP: 0033:0x7fbbaf57ff19 [ 161.025545][ T9231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.045261][ T9231] RSP: 002b:00007fbbb0395058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 161.053951][ T9231] RAX: ffffffffffffffda RBX: 00007fbbaf745fa0 RCX: 00007fbbaf57ff19 [ 161.062009][ T9231] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 161.069975][ T9231] RBP: 00007fbbb03950a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.077947][ T9231] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 161.085915][ T9231] R13: 0000000000000000 R14: 00007fbbaf745fa0 R15: 00007ffd0c02cae8 [ 161.093989][ T9231] [ 161.107085][ T9170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.192009][ T9236] netlink: 'syz.4.1046': attribute type 10 has an invalid length. [ 161.219697][ T9236] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 161.408920][ T5864] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 161.561575][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1051'. [ 161.607662][ T9250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1048'. [ 161.824809][ T9262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1055'. [ 161.971917][ T9268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.993758][ T9268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.660029][ T9304] macvlan1: entered promiscuous mode [ 162.667539][ T9304] team0: Port device macvlan1 added [ 162.679993][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 162.765494][ T9313] netlink: 'syz.3.1066': attribute type 38 has an invalid length. [ 162.776157][ T9313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.932606][ T9322] FAULT_INJECTION: forcing a failure. [ 162.932606][ T9322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.958851][ T9322] CPU: 0 UID: 0 PID: 9322 Comm: syz.1.1073 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 162.969435][ T9322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.979965][ T9322] Call Trace: [ 162.983279][ T9322] [ 162.986227][ T9322] dump_stack_lvl+0x241/0x360 [ 162.990939][ T9322] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.996249][ T9322] ? __pfx__printk+0x10/0x10 [ 163.000872][ T9322] ? __pfx_lock_release+0x10/0x10 [ 163.005939][ T9322] should_fail_ex+0x3b0/0x4e0 [ 163.010645][ T9322] _copy_from_iter+0x21f/0x1e70 [ 163.016035][ T9322] ? __virt_addr_valid+0x183/0x530 [ 163.021152][ T9322] ? __pfx_lock_release+0x10/0x10 [ 163.026179][ T9322] ? __pfx__copy_from_iter+0x10/0x10 [ 163.031564][ T9322] ? __virt_addr_valid+0x183/0x530 [ 163.036679][ T9322] ? __virt_addr_valid+0x183/0x530 [ 163.041816][ T9322] ? __virt_addr_valid+0x45f/0x530 [ 163.046931][ T9322] ? __check_object_size+0x48e/0x900 [ 163.052229][ T9322] hci_sock_sendmsg+0x4f1/0x11c0 [ 163.057171][ T9322] ? __pfx_aa_sk_perm+0x10/0x10 [ 163.062023][ T9322] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 163.067397][ T9322] ? __pfx_aa_file_perm+0x10/0x10 [ 163.072423][ T9322] ? aa_sock_msg_perm+0x91/0x160 [ 163.077371][ T9322] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 163.082738][ T9322] __sock_sendmsg+0x221/0x270 [ 163.087417][ T9322] sock_write_iter+0x2d7/0x3f0 [ 163.092182][ T9322] ? __pfx_sock_write_iter+0x10/0x10 [ 163.097475][ T9322] ? bpf_lsm_file_permission+0x9/0x10 [ 163.102850][ T9322] ? security_file_permission+0x74/0x280 [ 163.108494][ T9322] vfs_write+0xaeb/0xd30 [ 163.112750][ T9322] ? __pfx_sock_write_iter+0x10/0x10 [ 163.118032][ T9322] ? __pfx_vfs_write+0x10/0x10 [ 163.122795][ T9322] ? __fget_files+0x2a/0x410 [ 163.127387][ T9322] ? __fget_files+0x2a/0x410 [ 163.131992][ T9322] ksys_write+0x18f/0x2b0 [ 163.136320][ T9322] ? __pfx_ksys_write+0x10/0x10 [ 163.141168][ T9322] ? do_syscall_64+0x100/0x230 [ 163.145932][ T9322] ? do_syscall_64+0xb6/0x230 [ 163.150622][ T9322] do_syscall_64+0xf3/0x230 [ 163.155121][ T9322] ? clear_bhb_loop+0x35/0x90 [ 163.159801][ T9322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.165695][ T9322] RIP: 0033:0x7f6097d7ff19 [ 163.170108][ T9322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.189718][ T9322] RSP: 002b:00007f6098b06058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 163.198132][ T9322] RAX: ffffffffffffffda RBX: 00007f6097f45fa0 RCX: 00007f6097d7ff19 [ 163.206119][ T9322] RDX: 0000000000000007 RSI: 0000000020000040 RDI: 0000000000000004 [ 163.214136][ T9322] RBP: 00007f6098b060a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.222131][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.230106][ T9322] R13: 0000000000000000 R14: 00007f6097f45fa0 R15: 00007fff955be2f8 [ 163.238090][ T9322] [ 163.416898][ T9297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.428156][ T9334] Cannot find set identified by id 0 to match [ 163.610373][ T9341] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.698212][ T9341] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.808564][ T5864] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 163.825198][ T9341] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.859837][ T9365] team0: Device macvlan1 is of different type [ 163.886465][ T9341] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.005513][ T9341] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.054572][ T9341] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.066567][ T9377] FAULT_INJECTION: forcing a failure. [ 164.066567][ T9377] name failslab, interval 1, probability 0, space 0, times 0 [ 164.085287][ T9377] CPU: 0 UID: 0 PID: 9377 Comm: syz.3.1090 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 164.095776][ T9377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.105860][ T9377] Call Trace: [ 164.109168][ T9377] [ 164.112123][ T9377] dump_stack_lvl+0x241/0x360 [ 164.112982][ T9341] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.116812][ T9377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.130554][ T9377] ? __pfx__printk+0x10/0x10 [ 164.135220][ T9377] should_fail_ex+0x3b0/0x4e0 [ 164.139967][ T9377] should_failslab+0xac/0x100 [ 164.144863][ T9377] kmem_cache_alloc_node_noprof+0x77/0x380 [ 164.146198][ T9341] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.150716][ T9377] ? __alloc_skb+0x1c3/0x440 [ 164.150743][ T9377] ? rcu_is_watching+0x15/0xb0 [ 164.150767][ T9377] __alloc_skb+0x1c3/0x440 [ 164.150786][ T9377] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 164.150809][ T9377] ? __pfx___alloc_skb+0x10/0x10 [ 164.150828][ T9377] ? hci_sock_sendmsg+0x617/0x11c0 [ 164.150850][ T9377] ? __pfx___mutex_lock+0x10/0x10 [ 164.150874][ T9377] hci_mgmt_cmd+0x1c1/0x11d0 [ 164.150910][ T9377] hci_sock_sendmsg+0x7b8/0x11c0 [ 164.150936][ T9377] ? __pfx_aa_sk_perm+0x10/0x10 [ 164.208449][ T9377] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 164.213838][ T9377] ? __pfx_aa_file_perm+0x10/0x10 [ 164.218862][ T9377] ? aa_sock_msg_perm+0x91/0x160 [ 164.223807][ T9377] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 164.229175][ T9377] __sock_sendmsg+0x221/0x270 [ 164.233858][ T9377] sock_write_iter+0x2d7/0x3f0 [ 164.238626][ T9377] ? __pfx_sock_write_iter+0x10/0x10 [ 164.243940][ T9377] ? bpf_lsm_file_permission+0x9/0x10 [ 164.249328][ T9377] ? security_file_permission+0x74/0x280 [ 164.254969][ T9377] vfs_write+0xaeb/0xd30 [ 164.259216][ T9377] ? __pfx_sock_write_iter+0x10/0x10 [ 164.264502][ T9377] ? __pfx_vfs_write+0x10/0x10 [ 164.269444][ T9377] ? __fget_files+0x2a/0x410 [ 164.274036][ T9377] ? __fget_files+0x2a/0x410 [ 164.278645][ T9377] ksys_write+0x18f/0x2b0 [ 164.283060][ T9377] ? __pfx_ksys_write+0x10/0x10 [ 164.288090][ T9377] ? do_syscall_64+0x100/0x230 [ 164.292867][ T9377] ? do_syscall_64+0xb6/0x230 [ 164.297547][ T9377] do_syscall_64+0xf3/0x230 [ 164.302228][ T9377] ? clear_bhb_loop+0x35/0x90 [ 164.307083][ T9377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.313249][ T9377] RIP: 0033:0x7f69b037ff19 [ 164.317752][ T9377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.337459][ T9377] RSP: 002b:00007f69b10a2058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.345876][ T9377] RAX: ffffffffffffffda RBX: 00007f69b0545fa0 RCX: 00007f69b037ff19 [ 164.353862][ T9377] RDX: 0000000000000007 RSI: 0000000020000040 RDI: 0000000000000004 [ 164.361836][ T9377] RBP: 00007f69b10a20a0 R08: 0000000000000000 R09: 0000000000000000 [ 164.369805][ T9377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.377771][ T9377] R13: 0000000000000000 R14: 00007f69b0545fa0 R15: 00007ffd1a85ca28 [ 164.385763][ T9377] [ 164.792189][ T9399] FAULT_INJECTION: forcing a failure. [ 164.792189][ T9399] name failslab, interval 1, probability 0, space 0, times 0 [ 164.826397][ T9399] CPU: 1 UID: 0 PID: 9399 Comm: syz.1.1098 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 164.836803][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.847095][ T9399] Call Trace: [ 164.850400][ T9399] [ 164.853416][ T9399] dump_stack_lvl+0x241/0x360 [ 164.858483][ T9399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.863825][ T9399] ? __pfx__printk+0x10/0x10 [ 164.868455][ T9399] ? kmem_cache_alloc_noprof+0x48/0x380 [ 164.874234][ T9399] ? __pfx___might_resched+0x10/0x10 [ 164.879656][ T9399] should_fail_ex+0x3b0/0x4e0 [ 164.884371][ T9399] should_failslab+0xac/0x100 [ 164.889093][ T9399] ? __kernfs_new_node+0xd8/0x870 [ 164.894139][ T9399] kmem_cache_alloc_noprof+0x70/0x380 [ 164.899557][ T9399] __kernfs_new_node+0xd8/0x870 [ 164.904441][ T9399] ? up_write+0x1a9/0x590 [ 164.908797][ T9399] ? __pfx___kernfs_new_node+0x10/0x10 [ 164.914299][ T9399] ? __pfx_up_write+0x10/0x10 [ 164.919036][ T9399] kernfs_new_node+0x137/0x240 [ 164.924105][ T9399] __kernfs_create_file+0x49/0x2e0 [ 164.929264][ T9399] sysfs_add_file_mode_ns+0x24a/0x310 [ 164.932037][ T9407] __nla_validate_parse: 4 callbacks suppressed [ 164.932055][ T9407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1101'. [ 164.934841][ T9399] internal_create_group+0x7a7/0x11d0 [ 164.934888][ T9399] ? __pfx_internal_create_group+0x10/0x10 [ 164.961805][ T9399] sysfs_create_groups+0x56/0x120 [ 164.967045][ T9399] device_add_attrs+0x199/0x600 [ 164.972016][ T9399] ? __pfx_device_add_attrs+0x10/0x10 [ 164.977440][ T9399] ? kobject_put+0x446/0x480 [ 164.982090][ T9399] device_add+0x576/0xbf0 [ 164.986464][ T9399] ? device_initialize+0x266/0x460 [ 164.987960][ T9409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1103'. [ 164.991770][ T9399] wakeup_source_sysfs_add+0x1aa/0x270 [ 164.991809][ T9399] wakeup_source_register+0x171/0x250 [ 165.011674][ T9399] ep_insert+0xe94/0x1ab0 [ 165.016151][ T9399] ? __pfx_ep_insert+0x10/0x10 [ 165.020977][ T9399] ? bpf_lsm_capable+0x9/0x10 [ 165.025691][ T9399] do_epoll_ctl+0x8bc/0xf80 [ 165.030332][ T9399] __x64_sys_epoll_ctl+0x161/0x1a0 [ 165.035496][ T9399] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 165.041175][ T9399] ? trace_sys_enter+0xae/0x160 [ 165.046065][ T9399] ? rcu_is_watching+0x15/0xb0 [ 165.050867][ T9399] ? trace_sys_enter+0x3d/0x160 [ 165.055751][ T9399] do_syscall_64+0xf3/0x230 [ 165.060288][ T9399] ? clear_bhb_loop+0x35/0x90 [ 165.063701][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1104'. [ 165.064997][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.079762][ T9399] RIP: 0033:0x7f6097d7ff19 [ 165.084209][ T9399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.104023][ T9399] RSP: 002b:00007f6098b06058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 165.112573][ T9399] RAX: ffffffffffffffda RBX: 00007f6097f45fa0 RCX: 00007f6097d7ff19 [ 165.120579][ T9399] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 165.128577][ T9399] RBP: 00007f6098b060a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.136581][ T9399] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 165.144583][ T9399] R13: 0000000000000000 R14: 00007f6097f45fa0 R15: 00007fff955be2f8 [ 165.152602][ T9399] [ 165.177353][ T9401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1100'. [ 165.248051][ T9401] syz.4.1100 uses old SIOCAX25GETINFO [ 165.362759][ T9421] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 165.385902][ T9425] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.489748][ T9425] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.511139][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 165.540606][ T9433] netlink: 'syz.0.1111': attribute type 10 has an invalid length. [ 165.558661][ T9433] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1111'. [ 165.613632][ T9433] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 165.614032][ T9425] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.634737][ T9433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1111'. [ 165.656779][ T9435] bond0: option lp_interval: invalid value (18446744071562067969) [ 165.665017][ T9435] bond0: option lp_interval: allowed values 1 - 2147483647 [ 165.710804][ T9425] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.861033][ T9425] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.913350][ T9425] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.922967][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1114'. [ 165.960115][ T9425] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.980076][ T9425] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.050641][ T5864] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 166.057938][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 166.127307][ T9458] FAULT_INJECTION: forcing a failure. [ 166.127307][ T9458] name failslab, interval 1, probability 0, space 0, times 0 [ 166.142375][ T9458] CPU: 1 UID: 0 PID: 9458 Comm: syz.3.1119 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 166.152838][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.163003][ T9458] Call Trace: [ 166.166316][ T9458] [ 166.169259][ T9458] dump_stack_lvl+0x241/0x360 [ 166.173971][ T9458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.179196][ T9458] ? __pfx__printk+0x10/0x10 [ 166.183914][ T9458] ? kmem_cache_alloc_noprof+0x48/0x380 [ 166.189482][ T9458] ? __pfx___might_resched+0x10/0x10 [ 166.194797][ T9458] should_fail_ex+0x3b0/0x4e0 [ 166.199506][ T9458] should_failslab+0xac/0x100 [ 166.204221][ T9458] ? __kernfs_new_node+0xd8/0x870 [ 166.209790][ T9458] kmem_cache_alloc_noprof+0x70/0x380 [ 166.215266][ T9458] __kernfs_new_node+0xd8/0x870 [ 166.220131][ T9458] ? up_write+0x1a9/0x590 [ 166.224463][ T9458] ? __pfx___kernfs_new_node+0x10/0x10 [ 166.229946][ T9458] ? __pfx_up_write+0x10/0x10 [ 166.234655][ T9458] kernfs_new_node+0x137/0x240 [ 166.239451][ T9458] __kernfs_create_file+0x49/0x2e0 [ 166.244588][ T9458] sysfs_add_file_mode_ns+0x24a/0x310 [ 166.249981][ T9458] internal_create_group+0x7a7/0x11d0 [ 166.255365][ T9458] ? __pfx_internal_create_group+0x10/0x10 [ 166.261180][ T9458] sysfs_create_groups+0x56/0x120 [ 166.266208][ T9458] device_add_attrs+0x199/0x600 [ 166.271070][ T9458] ? __pfx_device_add_attrs+0x10/0x10 [ 166.276494][ T9458] ? kobject_put+0x446/0x480 [ 166.281229][ T9458] device_add+0x576/0xbf0 [ 166.285592][ T9458] ? device_initialize+0x266/0x460 [ 166.290742][ T9458] wakeup_source_sysfs_add+0x1aa/0x270 [ 166.296485][ T9458] wakeup_source_register+0x171/0x250 [ 166.301968][ T9458] ep_insert+0xe94/0x1ab0 [ 166.306322][ T9458] ? __pfx_ep_insert+0x10/0x10 [ 166.311123][ T9458] ? bpf_lsm_capable+0x9/0x10 [ 166.315927][ T9458] do_epoll_ctl+0x8bc/0xf80 [ 166.320457][ T9458] __x64_sys_epoll_ctl+0x161/0x1a0 [ 166.325588][ T9458] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 166.331226][ T9458] ? do_syscall_64+0x100/0x230 [ 166.336018][ T9458] ? do_syscall_64+0xb6/0x230 [ 166.340733][ T9458] do_syscall_64+0xf3/0x230 [ 166.345254][ T9458] ? clear_bhb_loop+0x35/0x90 [ 166.350155][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.356175][ T9458] RIP: 0033:0x7f69b037ff19 [ 166.360610][ T9458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.380309][ T9458] RSP: 002b:00007f69b10a2058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 166.388847][ T9458] RAX: ffffffffffffffda RBX: 00007f69b0545fa0 RCX: 00007f69b037ff19 [ 166.396934][ T9458] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 166.404939][ T9458] RBP: 00007f69b10a20a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.413280][ T9458] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 166.421427][ T9458] R13: 0000000000000000 R14: 00007f69b0545fa0 R15: 00007ffd1a85ca28 [ 166.429422][ T9458] [ 166.519655][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1121'. [ 166.567275][ T9463] netlink: 'syz.4.1121': attribute type 10 has an invalid length. [ 166.617931][ T9463] netlink: 'syz.4.1121': attribute type 1 has an invalid length. [ 166.861835][ T9487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.895718][ T9487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.107122][ T9508] FAULT_INJECTION: forcing a failure. [ 167.107122][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 167.140111][ T9511] lo speed is unknown, defaulting to 1000 [ 167.158982][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.4.1136 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 167.160342][ T9511] lo speed is unknown, defaulting to 1000 [ 167.169356][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 167.169375][ T9508] Call Trace: [ 167.169385][ T9508] [ 167.169394][ T9508] dump_stack_lvl+0x241/0x360 [ 167.169421][ T9508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.169439][ T9508] ? __pfx__printk+0x10/0x10 [ 167.169466][ T9508] ? kmem_cache_alloc_noprof+0x48/0x380 [ 167.169489][ T9508] ? __pfx___might_resched+0x10/0x10 [ 167.176000][ T9511] lo speed is unknown, defaulting to 1000 [ 167.185346][ T9508] should_fail_ex+0x3b0/0x4e0 [ 167.185389][ T9508] should_failslab+0xac/0x100 [ 167.185413][ T9508] ? __kernfs_new_node+0xd8/0x870 [ 167.237192][ T9508] kmem_cache_alloc_noprof+0x70/0x380 [ 167.242692][ T9508] __kernfs_new_node+0xd8/0x870 [ 167.247591][ T9508] ? up_write+0x1a9/0x590 [ 167.251956][ T9508] ? __pfx___kernfs_new_node+0x10/0x10 [ 167.257463][ T9508] ? __pfx_up_write+0x10/0x10 [ 167.262203][ T9508] kernfs_new_node+0x137/0x240 [ 167.267016][ T9508] __kernfs_create_file+0x49/0x2e0 [ 167.272198][ T9508] sysfs_add_file_mode_ns+0x24a/0x310 [ 167.277733][ T9508] internal_create_group+0x7a7/0x11d0 [ 167.283165][ T9508] ? __pfx_internal_create_group+0x10/0x10 [ 167.289118][ T9508] sysfs_create_groups+0x56/0x120 [ 167.294212][ T9508] device_add_attrs+0x199/0x600 [ 167.299090][ T9508] ? __pfx_device_add_attrs+0x10/0x10 [ 167.304567][ T9508] ? kobject_put+0x446/0x480 [ 167.309629][ T9508] device_add+0x576/0xbf0 [ 167.314264][ T9508] ? device_initialize+0x266/0x460 [ 167.315799][ T9511] infiniband syz2: set active [ 167.319382][ T9508] wakeup_source_sysfs_add+0x1aa/0x270 [ 167.319418][ T9508] wakeup_source_register+0x171/0x250 [ 167.319444][ T9508] ep_insert+0xe94/0x1ab0 [ 167.319477][ T9508] ? __pfx_ep_insert+0x10/0x10 [ 167.319509][ T9508] ? bpf_lsm_capable+0x9/0x10 [ 167.319534][ T9508] do_epoll_ctl+0x8bc/0xf80 [ 167.319562][ T9508] __x64_sys_epoll_ctl+0x161/0x1a0 [ 167.319583][ T9508] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 167.319603][ T9508] ? do_syscall_64+0x100/0x230 [ 167.319624][ T9508] ? do_syscall_64+0xb6/0x230 [ 167.319644][ T9508] do_syscall_64+0xf3/0x230 [ 167.319661][ T9508] ? clear_bhb_loop+0x35/0x90 [ 167.319683][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.326047][ T9] lo speed is unknown, defaulting to 1000 [ 167.330033][ T9508] RIP: 0033:0x7fbbaf57ff19 [ 167.330056][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.330071][ T9508] RSP: 002b:00007fbbb0395058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 167.330094][ T9508] RAX: ffffffffffffffda RBX: 00007fbbaf745fa0 RCX: 00007fbbaf57ff19 [ 167.337396][ T9511] infiniband syz2: added lo [ 167.339921][ T9508] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 167.339938][ T9508] RBP: 00007fbbb03950a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.339951][ T9508] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 167.339963][ T9508] R13: 0000000000000000 R14: 00007fbbaf745fa0 R15: 00007ffd0c02cae8 [ 167.340031][ T9508] [ 167.517709][ T9511] RDS/IB: syz2: added [ 167.527661][ T9511] smc: adding ib device syz2 with port count 1 [ 167.558653][ T9511] smc: ib device syz2 port 1 has pnetid [ 167.587455][ T9] lo speed is unknown, defaulting to 1000 [ 167.602138][ T9511] lo speed is unknown, defaulting to 1000 [ 167.864179][ T9511] lo speed is unknown, defaulting to 1000 [ 167.926896][ T9538] atomic_op ffff888029da8998 conn xmit_atomic 0000000000000000 [ 167.974521][ T9535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.144206][ T9511] lo speed is unknown, defaulting to 1000 [ 168.439839][ T9562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.468678][ T9562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.482206][ T9511] lo speed is unknown, defaulting to 1000 [ 168.726183][ T9577] netlink: 'syz.4.1151': attribute type 38 has an invalid length. [ 168.757850][ T9577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.859858][ T9511] lo speed is unknown, defaulting to 1000 [ 168.955537][ T9587] team0: Device macvlan1 is of different type [ 169.008693][ T5864] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 169.289083][ T9563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.372793][ T9612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.384437][ T9612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.826473][ T9639] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.867580][ T9645] lo speed is unknown, defaulting to 1000 [ 169.899316][ T9639] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.926811][ T9645] lo speed is unknown, defaulting to 1000 [ 169.974327][ T9639] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.044049][ T9639] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.106054][ T9655] FAULT_INJECTION: forcing a failure. [ 170.106054][ T9655] name failslab, interval 1, probability 0, space 0, times 0 [ 170.158610][ T9655] CPU: 0 UID: 0 PID: 9655 Comm: syz.2.1176 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 170.169037][ T9655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 170.171951][ T9639] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.179147][ T9655] Call Trace: [ 170.179164][ T9655] [ 170.179175][ T9655] dump_stack_lvl+0x241/0x360 [ 170.179202][ T9655] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.179219][ T9655] ? __pfx__printk+0x10/0x10 [ 170.179245][ T9655] ? kmem_cache_alloc_noprof+0x48/0x380 [ 170.179267][ T9655] ? __pfx___might_resched+0x10/0x10 [ 170.179295][ T9655] should_fail_ex+0x3b0/0x4e0 [ 170.179324][ T9655] should_failslab+0xac/0x100 [ 170.179346][ T9655] ? __kernfs_new_node+0xd8/0x870 [ 170.179367][ T9655] kmem_cache_alloc_noprof+0x70/0x380 [ 170.179410][ T9655] __kernfs_new_node+0xd8/0x870 [ 170.179437][ T9655] ? up_write+0x1a9/0x590 [ 170.179459][ T9655] ? __pfx___kernfs_new_node+0x10/0x10 [ 170.179485][ T9655] ? __pfx_up_write+0x10/0x10 [ 170.179523][ T9655] kernfs_new_node+0x137/0x240 [ 170.179552][ T9655] __kernfs_create_file+0x49/0x2e0 [ 170.179575][ T9655] sysfs_add_file_mode_ns+0x24a/0x310 [ 170.179603][ T9655] internal_create_group+0x7a7/0x11d0 [ 170.179639][ T9655] ? __pfx_internal_create_group+0x10/0x10 [ 170.179672][ T9655] sysfs_create_groups+0x56/0x120 [ 170.198379][ T9639] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.198907][ T9655] device_add_attrs+0x199/0x600 [ 170.211024][ T9639] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.214342][ T9655] ? __pfx_device_add_attrs+0x10/0x10 [ 170.214369][ T9655] ? kobject_put+0x446/0x480 [ 170.226092][ T9639] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.229269][ T9655] device_add+0x576/0xbf0 [ 170.229304][ T9655] ? device_initialize+0x266/0x460 [ 170.229331][ T9655] wakeup_source_sysfs_add+0x1aa/0x270 [ 170.229360][ T9655] wakeup_source_register+0x171/0x250 [ 170.351378][ T9655] ep_insert+0xe94/0x1ab0 [ 170.356075][ T9655] ? __pfx_ep_insert+0x10/0x10 [ 170.360862][ T9655] ? bpf_lsm_capable+0x9/0x10 [ 170.365556][ T9655] do_epoll_ctl+0x8bc/0xf80 [ 170.370088][ T9655] __x64_sys_epoll_ctl+0x161/0x1a0 [ 170.375381][ T9655] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 170.381128][ T9655] ? do_syscall_64+0x100/0x230 [ 170.385923][ T9655] ? do_syscall_64+0xb6/0x230 [ 170.390626][ T9655] do_syscall_64+0xf3/0x230 [ 170.395157][ T9655] ? clear_bhb_loop+0x35/0x90 [ 170.399942][ T9655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.405963][ T9655] RIP: 0033:0x7fe923b7ff19 [ 170.410477][ T9655] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.430787][ T9655] RSP: 002b:00007fe92495c058 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 170.439256][ T9655] RAX: ffffffffffffffda RBX: 00007fe923d45fa0 RCX: 00007fe923b7ff19 [ 170.447278][ T9655] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 170.455285][ T9655] RBP: 00007fe92495c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.463455][ T9655] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000002 [ 170.471615][ T9655] R13: 0000000000000000 R14: 00007fe923d45fa0 R15: 00007fffdba49f68 [ 170.479625][ T9655] [ 170.665441][ T9664] __nla_validate_parse: 13 callbacks suppressed [ 170.665464][ T9664] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1180'. [ 170.710864][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'. [ 170.782581][ T9674] team0: Device macvlan1 is of different type [ 170.910651][ T9676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1184'. [ 171.243891][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1193'. [ 171.255772][ T9696] netlink: 'syz.1.1193': attribute type 10 has an invalid length. [ 171.270062][ T9696] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1193'. [ 171.275715][ T9702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1191'. [ 171.283179][ T9696] bridge0: port 1(team0) entered blocking state [ 171.310767][ T9696] bridge0: port 1(team0) entered disabled state [ 171.326809][ T9696] team0: entered allmulticast mode [ 171.346337][ T9703] netlink: 'syz.1.1193': attribute type 1 has an invalid length. [ 171.356489][ T9696] macvlan1: entered allmulticast mode [ 171.371504][ T9696] veth1_vlan: entered allmulticast mode [ 171.396958][ T9698] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.409821][ T9698] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 171.426667][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1194'. [ 171.541308][ T9698] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.568556][ T9698] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 171.613643][ T9711] veth1_vlan: left allmulticast mode [ 171.651159][ T9714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1197'. [ 171.671699][ T9698] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.688466][ T9698] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 171.768639][ T9698] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 171.788885][ T9698] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 171.825995][ T9727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 171.982369][ T9698] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.001568][ T9698] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 172.028250][ T9698] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.052265][ T9698] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 172.091268][ T9698] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.102105][ T9698] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 172.120889][ T9746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1206'. [ 172.143300][ T9698] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 172.154758][ T9698] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 172.173889][ T9746] netlink: 'syz.3.1206': attribute type 10 has an invalid length. [ 172.197242][ T9746] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1206'. [ 172.212373][ T9746] bridge0: port 3(team0) entered blocking state [ 172.230389][ T9749] netlink: 'syz.3.1206': attribute type 1 has an invalid length. [ 172.239739][ T9746] bridge0: port 3(team0) entered disabled state [ 172.261775][ T9746] team0: entered allmulticast mode [ 172.267048][ T9746] team_slave_0: entered allmulticast mode [ 172.273098][ T9746] team_slave_1: entered allmulticast mode [ 172.284189][ T9752] FAULT_INJECTION: forcing a failure. [ 172.284189][ T9752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.284988][ T9746] team0: left allmulticast mode [ 172.304653][ T9746] team_slave_0: left allmulticast mode [ 172.310575][ T9746] team_slave_1: left allmulticast mode [ 172.316922][ T9752] CPU: 0 UID: 0 PID: 9752 Comm: syz.4.1208 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 172.328089][ T9752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.338488][ T9752] Call Trace: [ 172.341919][ T9752] [ 172.344864][ T9752] dump_stack_lvl+0x241/0x360 [ 172.349579][ T9752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.355698][ T9752] ? __pfx__printk+0x10/0x10 [ 172.360403][ T9752] ? snprintf+0xda/0x120 [ 172.364693][ T9752] should_fail_ex+0x3b0/0x4e0 [ 172.369420][ T9752] _copy_to_user+0x31/0xb0 [ 172.374415][ T9752] simple_read_from_buffer+0xca/0x150 [ 172.379928][ T9752] proc_fail_nth_read+0x1e9/0x250 [ 172.384973][ T9752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.391152][ T9752] ? rw_verify_area+0x55e/0x6f0 [ 172.396439][ T9752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 172.402009][ T9752] vfs_read+0x1fc/0xb70 [ 172.406181][ T9752] ? __pfx___mutex_lock+0x10/0x10 [ 172.411211][ T9752] ? __pfx_vfs_read+0x10/0x10 [ 172.415908][ T9752] ? __fget_files+0x2a/0x410 [ 172.420617][ T9752] ? __fget_files+0x395/0x410 [ 172.425297][ T9752] ? __fget_files+0x2a/0x410 [ 172.429899][ T9752] ksys_read+0x18f/0x2b0 [ 172.434269][ T9752] ? __pfx_ksys_read+0x10/0x10 [ 172.439086][ T9752] ? do_syscall_64+0x100/0x230 [ 172.443900][ T9752] ? do_syscall_64+0xb6/0x230 [ 172.449123][ T9752] do_syscall_64+0xf3/0x230 [ 172.453640][ T9752] ? clear_bhb_loop+0x35/0x90 [ 172.458413][ T9752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.464308][ T9752] RIP: 0033:0x7fbbaf57e92c [ 172.468921][ T9752] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 172.488817][ T9752] RSP: 002b:00007fbbb0395050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 172.497262][ T9752] RAX: ffffffffffffffda RBX: 00007fbbaf745fa0 RCX: 00007fbbaf57e92c [ 172.505785][ T9752] RDX: 000000000000000f RSI: 00007fbbb03950b0 RDI: 0000000000000003 [ 172.514408][ T9752] RBP: 00007fbbb03950a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.522445][ T9752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 172.530629][ T9752] R13: 0000000000000000 R14: 00007fbbaf745fa0 R15: 00007ffd0c02cae8 [ 172.538825][ T9752] [ 172.685181][ T9759] FAULT_INJECTION: forcing a failure. [ 172.685181][ T9759] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 172.735739][ T9759] CPU: 1 UID: 0 PID: 9759 Comm: syz.1.1211 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 172.746224][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 172.756314][ T9759] Call Trace: [ 172.759620][ T9759] [ 172.763107][ T9759] dump_stack_lvl+0x241/0x360 [ 172.767826][ T9759] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.773057][ T9759] ? __pfx__printk+0x10/0x10 [ 172.777790][ T9759] should_fail_ex+0x3b0/0x4e0 [ 172.782516][ T9759] prepare_alloc_pages+0x1da/0x5b0 [ 172.787677][ T9759] __alloc_pages_noprof+0x16f/0x710 [ 172.792929][ T9759] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 172.798713][ T9759] ? mark_lock+0x9a/0x360 [ 172.803069][ T9759] alloc_pages_mpol_noprof+0x3e8/0x680 [ 172.808552][ T9759] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 172.814750][ T9759] ? alloc_pages_noprof+0xef/0x170 [ 172.819892][ T9759] get_free_pages_noprof+0xc/0x30 [ 172.825050][ T9759] kasan_populate_vmalloc_pte+0x38/0xe0 [ 172.830718][ T9759] __apply_to_page_range+0x806/0xde0 [ 172.836140][ T9759] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 172.842496][ T9759] ? __pfx___apply_to_page_range+0x10/0x10 [ 172.848333][ T9759] ? do_raw_spin_unlock+0x13c/0x8b0 [ 172.853596][ T9759] alloc_vmap_area+0x1d52/0x2400 [ 172.858582][ T9759] ? __pfx_alloc_vmap_area+0x10/0x10 [ 172.863983][ T9759] ? __kasan_kmalloc+0x98/0xb0 [ 172.868781][ T9759] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 172.874766][ T9759] ? __get_vm_area_node+0x132/0x2d0 [ 172.879983][ T9759] ? htab_map_alloc+0x3f0/0xe70 [ 172.884844][ T9759] __get_vm_area_node+0x1c8/0x2d0 [ 172.889881][ T9759] __vmalloc_node_range_noprof+0x344/0x1380 [ 172.896080][ T9759] ? htab_map_alloc+0x3f0/0xe70 [ 172.900948][ T9759] ? pcpu_memcg_post_alloc_hook+0x12a/0x720 [ 172.906858][ T9759] ? __pfx_pcpu_memcg_post_alloc_hook+0x10/0x10 [ 172.913141][ T9759] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 172.920304][ T9759] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.926666][ T9759] bpf_map_area_alloc+0xfc/0x120 [ 172.931619][ T9759] ? htab_map_alloc+0x3f0/0xe70 [ 172.936475][ T9759] htab_map_alloc+0x3f0/0xe70 [ 172.941189][ T9759] htab_of_map_alloc+0x55/0xc0 [ 172.946004][ T9759] map_create+0x946/0x11c0 [ 172.950459][ T9759] __sys_bpf+0x6d1/0x810 [ 172.954728][ T9759] ? __pfx___sys_bpf+0x10/0x10 [ 172.959525][ T9759] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 172.965549][ T9759] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 172.972075][ T9759] ? do_syscall_64+0x100/0x230 [ 172.977044][ T9759] __x64_sys_bpf+0x7c/0x90 [ 172.981483][ T9759] do_syscall_64+0xf3/0x230 [ 172.985997][ T9759] ? clear_bhb_loop+0x35/0x90 [ 172.990712][ T9759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.996607][ T9759] RIP: 0033:0x7f6097d7ff19 [ 173.001048][ T9759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.020675][ T9759] RSP: 002b:00007f6098b06058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.029196][ T9759] RAX: ffffffffffffffda RBX: 00007f6097f45fa0 RCX: 00007f6097d7ff19 [ 173.037172][ T9759] RDX: 0000000000000048 RSI: 00000000200008c0 RDI: 0c00000000000000 [ 173.045597][ T9759] RBP: 00007f6098b060a0 R08: 0000000000000000 R09: 0000000000000000 [ 173.053672][ T9759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.061846][ T9759] R13: 0000000000000000 R14: 00007f6097f45fa0 R15: 00007fff955be2f8 [ 173.069956][ T9759] [ 173.087388][ T5864] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 173.276310][ T9777] team_slave_0: left promiscuous mode [ 173.341532][ T9777] team0 (unregistering): Port device team_slave_0 removed [ 173.366328][ T9777] team_slave_1: left promiscuous mode [ 173.399370][ T9777] team0 (unregistering): Port device team_slave_1 removed [ 173.416455][ T9777] macvlan1: left promiscuous mode [ 173.434954][ T9777] team0 (unregistering): Port device macvlan1 removed [ 173.496461][ T9797] netlink: 'syz.4.1221': attribute type 10 has an invalid length. [ 173.532686][ T9795] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.595215][ T9801] netlink: 'syz.4.1221': attribute type 1 has an invalid length. [ 173.685811][ T9800] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.716700][ T9795] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.764387][ T9800] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.799961][ T9795] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.842016][ T9800] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.875685][ T9795] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.936467][ T9800] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.998676][ T9795] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.000584][ T9816] x_tables: duplicate underflow at hook 1 [ 174.017300][ T9795] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.041492][ T9795] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.063790][ T9795] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.102887][ T9820] netlink: 'syz.2.1228': attribute type 38 has an invalid length. [ 174.114751][ T9820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.234625][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.471591][ T9800] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.489927][ T9800] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.514844][ T9800] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.550820][ T9800] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.667697][ T5904] hid-generic 0005:15C2:7FFF.0001: item fetching failed at offset 0/1 [ 174.677660][ T5904] hid-generic 0005:15C2:7FFF.0001: probe with driver hid-generic failed with error -22 [ 174.881937][ T9863] netlink: 'syz.2.1241': attribute type 5 has an invalid length. [ 175.283468][ T9889] netlink: 'syz.1.1251': attribute type 38 has an invalid length. [ 175.297740][ T9889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.412718][ T9888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.826121][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88807d2bd800: rx timeout, send abort [ 175.837081][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807d2bd800: 0x1ee00: (3) A timeout occurred and this is the connection abort to close the session. [ 175.851821][ C1] ------------[ cut here ]------------ [ 175.857473][ C1] refcount_t: underflow; use-after-free. [ 175.863693][ C1] WARNING: CPU: 1 PID: 24 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 175.872990][ C1] Modules linked in: [ 175.876899][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 175.887302][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 175.897525][ C1] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 175.903827][ C1] Code: a0 13 61 8c e8 a7 85 95 fc 90 0f 0b 90 90 eb 99 e8 8b e0 d4 fc c6 05 8c 6c 47 0b 01 90 48 c7 c7 00 14 61 8c e8 87 85 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 68 e0 d4 fc c6 05 66 6c 47 0b 01 90 [ 175.923681][ C1] RSP: 0018:ffffc900001e74e0 EFLAGS: 00010246 [ 175.929833][ C1] RAX: 980f0e33af215100 RBX: ffff8880325bf364 RCX: ffff88801d2e8000 [ 175.937922][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 175.946317][ C1] RBP: 0000000000000003 R08: ffffffff81568c22 R09: fffffbfff1cfa8a8 [ 175.954338][ C1] R10: dffffc0000000000 R11: fffffbfff1cfa8a8 R12: ffff88807d2bd868 [ 175.962373][ C1] R13: ffff8880325bf364 R14: 1ffff1100fa57b18 R15: ffff88807d2bd800 [ 175.970415][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 175.979410][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.986043][ C1] CR2: 0000000000000000 CR3: 0000000051ff2000 CR4: 00000000003526f0 [ 175.994111][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 176.002372][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 176.010443][ C1] Call Trace: [ 176.013769][ C1] [ 176.016738][ C1] ? __warn+0x168/0x4e0 [ 176.020994][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 176.026605][ C1] ? report_bug+0x2b3/0x500 [ 176.031243][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 176.036848][ C1] ? handle_bug+0x60/0x90 [ 176.041278][ C1] ? exc_invalid_op+0x1a/0x50 [ 176.046000][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 176.051122][ C1] ? __warn_printk+0x292/0x360 [ 176.055972][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 176.061607][ C1] j1939_session_put+0x1ed/0x440 [ 176.066599][ C1] j1939_tp_recv+0x92a/0x1050 [ 176.071383][ C1] j1939_can_recv+0x732/0xb20 [ 176.076136][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 176.081441][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 176.086680][ C1] can_rcv_filter+0x359/0x7f0 [ 176.091466][ C1] can_receive+0x327/0x480 [ 176.096040][ C1] ? can_receive+0x1c9/0x480 [ 176.100725][ C1] can_rcv+0x144/0x260 [ 176.105014][ C1] ? __pfx_can_rcv+0x10/0x10 [ 176.109707][ C1] __netif_receive_skb+0x2e0/0x650 [ 176.114874][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 176.119994][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 176.125667][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 176.131730][ C1] ? __pfx_lock_release+0x10/0x10 [ 176.136791][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 176.142016][ C1] process_backlog+0x662/0x15b0 [ 176.146932][ C1] ? process_backlog+0x33b/0x15b0 [ 176.152051][ C1] ? __pfx_process_backlog+0x10/0x10 [ 176.157462][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 176.163534][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.170116][ C1] __napi_poll+0xcb/0x490 [ 176.174493][ C1] net_rx_action+0x89b/0x1240 [ 176.179285][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 176.184449][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 176.190223][ C1] handle_softirqs+0x2c5/0x980 [ 176.195136][ C1] ? run_ksoftirqd+0xca/0x130 [ 176.199915][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 176.205363][ C1] run_ksoftirqd+0xca/0x130 [ 176.210130][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 176.215281][ C1] ? kasan_check_range+0x86/0x290 [ 176.220411][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 176.225561][ C1] smpboot_thread_fn+0x544/0xa30 [ 176.230693][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 176.235773][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 176.241325][ C1] kthread+0x2f0/0x390 [ 176.245439][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 176.250980][ C1] ? __pfx_kthread+0x10/0x10 [ 176.255576][ C1] ret_from_fork+0x4b/0x80 [ 176.260049][ C1] ? __pfx_kthread+0x10/0x10 [ 176.264661][ C1] ret_from_fork_asm+0x1a/0x30 [ 176.269485][ C1] [ 176.272505][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.279779][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.12.0-syzkaller-10686-gbb18265c3aba #0 [ 176.290016][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 176.300079][ C1] Call Trace: [ 176.303412][ C1] [ 176.306343][ C1] dump_stack_lvl+0x241/0x360 [ 176.311034][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.316234][ C1] ? __pfx__printk+0x10/0x10 [ 176.320901][ C1] ? vscnprintf+0x5d/0x90 [ 176.325242][ C1] panic+0x349/0x880 [ 176.329245][ C1] ? __warn+0x177/0x4e0 [ 176.333446][ C1] ? __pfx_panic+0x10/0x10 [ 176.337956][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 176.342924][ C1] __warn+0x34b/0x4e0 [ 176.346931][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 176.352672][ C1] report_bug+0x2b3/0x500 [ 176.357457][ C1] ? refcount_warn_saturate+0x15a/0x1d0 [ 176.363182][ C1] handle_bug+0x60/0x90 [ 176.367362][ C1] exc_invalid_op+0x1a/0x50 [ 176.372144][ C1] asm_exc_invalid_op+0x1a/0x20 [ 176.376996][ C1] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 176.383435][ C1] Code: a0 13 61 8c e8 a7 85 95 fc 90 0f 0b 90 90 eb 99 e8 8b e0 d4 fc c6 05 8c 6c 47 0b 01 90 48 c7 c7 00 14 61 8c e8 87 85 95 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 68 e0 d4 fc c6 05 66 6c 47 0b 01 90 [ 176.403083][ C1] RSP: 0018:ffffc900001e74e0 EFLAGS: 00010246 [ 176.409244][ C1] RAX: 980f0e33af215100 RBX: ffff8880325bf364 RCX: ffff88801d2e8000 [ 176.417259][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.425242][ C1] RBP: 0000000000000003 R08: ffffffff81568c22 R09: fffffbfff1cfa8a8 [ 176.433246][ C1] R10: dffffc0000000000 R11: fffffbfff1cfa8a8 R12: ffff88807d2bd868 [ 176.441248][ C1] R13: ffff8880325bf364 R14: 1ffff1100fa57b18 R15: ffff88807d2bd800 [ 176.449321][ C1] ? __warn_printk+0x292/0x360 [ 176.454103][ C1] j1939_session_put+0x1ed/0x440 [ 176.459043][ C1] j1939_tp_recv+0x92a/0x1050 [ 176.463819][ C1] j1939_can_recv+0x732/0xb20 [ 176.468521][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 176.473742][ C1] ? __pfx_j1939_can_recv+0x10/0x10 [ 176.478957][ C1] can_rcv_filter+0x359/0x7f0 [ 176.483668][ C1] can_receive+0x327/0x480 [ 176.488109][ C1] ? can_receive+0x1c9/0x480 [ 176.492705][ C1] can_rcv+0x144/0x260 [ 176.496841][ C1] ? __pfx_can_rcv+0x10/0x10 [ 176.501454][ C1] __netif_receive_skb+0x2e0/0x650 [ 176.506574][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 176.511611][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 176.517256][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 176.523240][ C1] ? __pfx_lock_release+0x10/0x10 [ 176.528805][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 176.533977][ C1] process_backlog+0x662/0x15b0 [ 176.538851][ C1] ? process_backlog+0x33b/0x15b0 [ 176.543880][ C1] ? __pfx_process_backlog+0x10/0x10 [ 176.549171][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 176.555596][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 176.561928][ C1] __napi_poll+0xcb/0x490 [ 176.566395][ C1] net_rx_action+0x89b/0x1240 [ 176.571126][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 176.576260][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 176.582136][ C1] handle_softirqs+0x2c5/0x980 [ 176.586941][ C1] ? run_ksoftirqd+0xca/0x130 [ 176.591631][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 176.597081][ C1] run_ksoftirqd+0xca/0x130 [ 176.602383][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 176.607534][ C1] ? kasan_check_range+0x86/0x290 [ 176.612594][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 176.617726][ C1] smpboot_thread_fn+0x544/0xa30 [ 176.622725][ C1] ? smpboot_thread_fn+0x4e/0xa30 [ 176.627824][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 176.633323][ C1] kthread+0x2f0/0x390 [ 176.637517][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 176.642978][ C1] ? __pfx_kthread+0x10/0x10 [ 176.647588][ C1] ret_from_fork+0x4b/0x80 [ 176.652015][ C1] ? __pfx_kthread+0x10/0x10 [ 176.656631][ C1] ret_from_fork_asm+0x1a/0x30 [ 176.661413][ C1] [ 176.664579][ C1] Kernel Offset: disabled [ 176.668989][ C1] Rebooting in 86400 seconds..