last executing test programs: 1m12.519756179s ago: executing program 4 (id=2037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNGETVNETHDRSZ(r0, 0x8933, &(0x7f0000000040)) 1m12.054805818s ago: executing program 4 (id=2045): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'veth1_macvtap\x00', @random="2b1c00004ec6"}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="030600fd9f935771b1c600000000"], 0x14}}, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$can_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20008000) read$alg(r3, &(0x7f0000000080)=""/16, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4, 0x0, @local, 0x4}, 0x1c) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x5) ppoll(&(0x7f0000000080), 0x0, &(0x7f0000000240), 0x0, 0x0) 51.971162103s ago: executing program 0 (id=2209): socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0xf0ff, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080603000000000000000008000000000500010006"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) pipe(0x0) 51.781844672s ago: executing program 0 (id=2211): socket$inet6(0xa, 0x80003, 0x20006b) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000980), 0xe) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000380)=0x1ffff7d, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) socketpair(0x21, 0xa, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_dccp(0x2, 0x6, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f00000000c0)=0xc) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000017000b"], 0xe0}], 0x1}, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f000050c000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000d000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="720000008a0000003500000000000000850000000000000095"], 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r7, 0x8b30, &(0x7f0000000000)={'wlan1\x00', @random="0011042000"}) socket$caif_stream(0x25, 0x1, 0x5) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000005140)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00'}) 51.586999831s ago: executing program 0 (id=2213): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000b00)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x20, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 51.43868869s ago: executing program 0 (id=2214): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800f7ff00000073114200000000008510000002000000b7d1ff00000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000340)={0x32017984, 0x1}) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800098b33dcf84fbeea038e9d450000240000000000219078ac1414bbe000000200000000040190780071cd8e00d332cb"], 0x0) 51.355683272s ago: executing program 0 (id=2215): socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0xf0ff, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080603000000000000000008000000000500010006"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x2b) 51.185432472s ago: executing program 0 (id=2218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x0) 44.330086434s ago: executing program 2 (id=2241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 42.260225515s ago: executing program 4 (id=2159): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002240)=@newtfilter={0x6bc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x68c, 0x2, [@TCA_BASIC_POLICE={0x430, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0x5, 0x10000, 0x8, 0x9, 0x4cec96ce, 0x800, 0x3, 0xf59, 0x8, 0x80, 0x101, 0x87, 0x0, 0x2f3, 0xfffffffb, 0xfffffffe, 0xf3900, 0x8, 0x5, 0x9b, 0xff80000, 0xb0d, 0x0, 0x8, 0x9, 0x1, 0x7, 0x1, 0xf6d, 0x6, 0x4, 0x7, 0x80000001, 0x1, 0x2, 0x358, 0x3, 0x9, 0x4, 0x97, 0x4, 0x4, 0x9, 0x54f, 0x0, 0x7, 0x6, 0x6, 0xc19, 0x48, 0x5, 0x3, 0x10000, 0x8, 0x4, 0x7f, 0xc66, 0x3, 0x8, 0xfffffe00, 0xffffffff, 0x101, 0xb6f, 0x8000, 0xd, 0x1, 0xb984, 0x3ff, 0xa, 0xfffffffb, 0x8001, 0x1, 0xe, 0x119, 0xc63, 0x9, 0x80000001, 0x0, 0xa, 0x2, 0x3, 0x8, 0xef69, 0x200, 0x3, 0x1, 0x7fff, 0xda, 0x89, 0x4, 0xffffffff, 0xb666, 0x0, 0x8, 0x401, 0x4, 0xffffffaa, 0x0, 0x1, 0x7, 0x900000, 0x6, 0x8, 0x0, 0xffffff16, 0xd6, 0x3, 0x80000000, 0x95d, 0x4e8f, 0x466, 0x9, 0x9, 0x9, 0x32, 0x0, 0x1fb, 0x9, 0x5, 0x0, 0x1, 0x6, 0xfffffff6, 0x66d, 0x71c3, 0x1, 0x3d5, 0x10, 0x2, 0x4, 0x2, 0x1, 0x401, 0xe8b6720d, 0x4, 0x101, 0xd, 0xe00000, 0x4, 0x4, 0x9, 0x8, 0x8001, 0xffffffc0, 0x1, 0x200, 0x7, 0x0, 0x8c7, 0x9, 0x8, 0x0, 0xc, 0x401, 0x2, 0x5, 0x6c7, 0x9, 0x1000, 0x8, 0x9, 0x7, 0xb41, 0x6, 0x2, 0x7, 0xfffffff8, 0x1, 0x9, 0x80000001, 0xfffffff4, 0xfffffffc, 0xd9e, 0x3, 0xfffffffd, 0x7ba, 0x1, 0x3, 0x401, 0x8, 0x1, 0xacc9, 0x4, 0x0, 0x11ac, 0x7, 0x1, 0x50c36daf, 0xf27a, 0xfffffffb, 0x1, 0x8, 0x2, 0xcee6, 0x0, 0xffff, 0x6, 0x5, 0x8, 0x2, 0x8, 0x3ff, 0x9, 0x7f, 0x4, 0x1, 0x5, 0x228, 0x200, 0x1b6c0, 0x8, 0x3, 0x4, 0x2, 0x64b, 0xa, 0x3, 0x3, 0x3ff, 0x5db, 0x0, 0x7, 0x2, 0x3ff, 0x2, 0x400, 0x2, 0x7cc, 0xc, 0x5, 0xfffffffc, 0x1, 0x2, 0x0, 0x0, 0x2, 0x8, 0x8, 0x5, 0x7, 0x7, 0x7f, 0x69, 0x1000, 0x0, 0x3, 0x1, 0x6, 0xbbc2, 0x6, 0x1ff, 0x7, 0x1c9111fb, 0x9]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xfff3}}, @TCA_BASIC_ACT={0x210, 0x3, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}, @m_mpls={0xb8, 0xe, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xa6a, 0x4, 0x8, 0x4, 0x962}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc6828}]}, {0x5d, 0x6, "b559012c80bc64904bf411ac6f4bd3e8104591a57ca1783fd92077ab30e3ee5522e1b33fb39ebe88e2c809cc26ac726270b198a85079610933ebe30fafafc4697623801b9ea73c93e61e880ec5114adc874d04b49373b70dab"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x60, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xffff, 0x3, 0x3ad, 0x4}}]}, {0x12, 0x6, "b7f3c645d3deb1c277b77feb6ff5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xc4, 0x9, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaef}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xb, 0x2, 0x10000000, 0x0, 0x3}, 0x1}}]}, {0x69, 0x6, "93d12c97439893e472763f97566393e1d63d7ec1e9f4e1658209ca8533bc7d3933a92d3b1acf05dc7f0480f7b3ee60e399e12761a8570be3ad5a9710427c1b1e18a0127f0bd18db0d0d1e11f911c2c2bc7ad9cd3f7341b9ad96263fe1b41eb2d8c49f59073"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x3, 0x4, 0x0, {0x0, 0x0, 0x3, 0x6, 0xd95, 0x8}, {0x7, 0x1, 0x0, 0x67b8, 0x4, 0x6}}}]}]}}]}, 0x6bc}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 42.186869022s ago: executing program 2 (id=2242): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001340)=ANY=[], 0xa89) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000640)="e2b3b827d365c51d71eadd2ceadda251607cf2ac834ad26f541d5e9aa46cff60ba3d1ba4e90b24a30075ff6423ae78237d68331d7e125b57ef23912b3f43376608d71bd2be176d4f54c54f91170500000000000000eb13cd46fd98df266872ff6a434958d025ff14ff6ad60af409f79a2f92031be9f0366aecf50585416ba9b23f402ad764509ff01a80adc5eb2a3c52f0cdb1b51671d7fb5f18abc02fcf7e85a4f322c74382b3365045bc1bd565048bd27d6b3e62dcbf897f49", 0xba, 0x8c1, 0x0, 0x0) 42.091136262s ago: executing program 2 (id=2243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x18, 0x1406, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x4}]}, 0x18}}, 0x40084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ldst={0x3, 0x3, 0x6, 0x9, 0x4, 0xc8}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @jmp={0x5, 0x0, 0x2, 0x2, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0xa, 0x8, 0x3, 0x8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x1}, 0x90) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x22}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$kcm(r3, 0x0, 0x48000) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6) r5 = epoll_create(0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000140)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000001180)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000001200)) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000001340)) write(r4, &(0x7f00000000c0)="510003000000", 0x6) r9 = socket(0x0, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89ff, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x6, 0x0, 0x20040001, 0x0, 0x3}}) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000000180)=0x8, 0x4) r10 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r10, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0xa8a183fffe41dd5c}}, 0x1c) ioctl$sock_inet6_SIOCDIFADDR(r10, 0x8936, &(0x7f0000000040)={@mcast1, 0x32}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r12 = openat$cgroup_devices(r11, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r12, &(0x7f0000000400)={'b', ' *:* ', 'rm\x00'}, 0x6) 40.016333823s ago: executing program 3 (id=2244): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800f7ff00000073114200000000008510000002000000b7d1ff00000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000000340)={0x32017984, 0x1}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) bind$packet(r2, &(0x7f0000000140)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800098b33dcf84fbeea038e9d450000240000000000219078ac1414bbe000000200000000040190780071cd8e00d332cb"], 0x0) 39.983054031s ago: executing program 2 (id=2245): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000a00)=[{&(0x7f0000000540)="19", 0x1}, {&(0x7f0000000700)="8f", 0xfffffffe}], 0x2}, 0x0) 37.635417493s ago: executing program 1 (id=2246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000005480)={0x0, 0x0}, &(0x7f00000054c0)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002000010000000000000000000200000000000000000000000c001400", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="2b45991447f990f67c3fc5251c8a0cf0b514f411433879ce97e0bb914656eb0d8d0cd15c7bba96c5038f91f8e768da945751c2bfa257f7e1be84ce78e656606e0692828f8076e57e499f96f4d0f6a9"], 0x28}}, 0x0) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f00000000c0)={0x3, @null, r5}) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x6, r0}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], 0x0, 0x52}, 0x20) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd0, r6, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x177dce89}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c3a721c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a66396a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x72305456}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x590c81d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x74f8dd66}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3afafb20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x88}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3616bd55}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x466}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x203f987}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x90}, 0x400e0) 37.635028822s ago: executing program 4 (id=2247): socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0xf0ff, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080603000000000000000008000000000500010006"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x2b) 37.63396232s ago: executing program 4 (id=2248): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14}, 0x14}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=@newtfilter={0x4c0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x5, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x494, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x8}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x478, 0x1, [@m_skbmod={0x84, 0x13, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3e8}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_SMAC={0xa}]}, {0x2f, 0x6, "8a633d86e44e8316948d91b77c20daa5bb9a144321ac06dfff650774029c5e82ff9c8bda5a364b899d5216"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_sample={0x84, 0x1f, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x200}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x14c8b1ca}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}]}, {0x35, 0x6, "8782c740239ef67c696f60a6edfa82e477c51fbc8ab056c9373461ee8b566e944d6f71deb531672164fba4dd2c4432588c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_skbedit={0x100, 0x15, 0x0, 0x0, {{0xc}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff2}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0xfffffa6f, 0x2, 0x10001, 0x4ed}}]}, {0x8c, 0x6, "e7bdcf24f93fcd183fdead3134e7899aa1a30a2335232342f3fa5302ba427cb26eb9664289433a86e7b813e6544b0c7ef14692504987948de61c7bb4eb7e719f1793e2c8a2add315db807a15a69ed6ed3e4518a8dc1bad5abde81931723091f38f9629dbb700e1eff8ea087f6491169c77bccc1c33b9a4860f32c587b59a1d902d319a769ddbb7fe"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_sample={0x54, 0x9, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x7, 0x9, 0x2}}]}, {0xf, 0x6, "59131556203b929f57c8ee"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x140, 0x0, 0x0, 0x0, {{0x9}, {0x6c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xad99b}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7f, 0x1, 0x10000000, 0x4, 0x2}, 0x4}}, @TCA_MPLS_TTL={0x5, 0x7, 0xa}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x9c}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PROTO={0x6, 0x4, 0x60}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x81, 0x20000000}, 0x2}}]}, {0xaa, 0x6, "8aef18828870896408760839b888b63f5a044184bf6eb3166ab1e66c2f9e174ff054187d2e49b438732f88ad58753674ff415b51f79265cb9ec04027eb3ddf1684bb758bbcd2c62c69a665fd8f994052ecd4e232640c4fe213093de0fd8862734d3edb5c2384ff8340161edb2076d359bc24aa9e9c706b3ffdf2e382857d98f090d488d54e1a2bd0271e4dc85a4cae8c9cdbdc5d18c85c144ba40f5a1dfa7b984454e0f3a87b"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0xd8, 0x18, 0x0, 0x0, {{0x8}, {0x4}, {0xb0, 0x6, "948c9d6c118e0f39f9d37c0f44e52cf53f4cbb67fdfc45a7c5c810ec152293fd3836de02a23c78bf72f576a442240acd81faf20ff1c8006117078afd28f30723dfe8e96512fb66fce084f0f643f9d56c68e3be5f5894fbb804291e047e5e867b0eb57a1ded2eebb599405129fd5cd64a08755c544d6c75b19871566456e3686d5eb9657a588c1bef0d437cc4d265b60457dca4c22525b34acae69c57f60018887ce8e51a0f069e5673677049"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x4c0}, 0x1, 0x0, 0x0, 0x20049010}, 0x81) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 37.602782492s ago: executing program 3 (id=2249): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480), 0xb) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000e8f9756985000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088}, 0x90) (async) syz_80211_inject_frame(&(0x7f0000000080)=@device_b, &(0x7f0000000040)=@data_frame={@a_msdu=@type11={{}, {}, @device_a, @device_a, @random="fec988780198", {}, @device_b}}, 0x1e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "1abe5b9ca92688a7373186bdf3022392603d7a067ce054e64a3606c34c7d2720184810d1a30d4a1a4111ae9a2233c4b47ff281010aea66e7c32751aa20d1dd77e9"}]}]}]}]}, @NFT_MSG_DELCHAIN={0x250, 0x5, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1002}, [@NFTA_CHAIN_USERDATA={0x6a, 0xc, "189affe83feab56ebc43d2fadd350083f1b09f77bef0fb12010cec9572486214aa14a6a4aa38ba625dfdd5232fbba9a3ca85bfe4c0fd3a4141aa6a55f885898f7900cb2a2bead60dd7fa0e41ccef7e15bd3b4191ed8c697ba33ce3b41289663c7892fcb4f3d0"}, @NFTA_CHAIN_USERDATA={0x1d, 0xc, "be791c6dd0e6eea6a44077f0bd33a94f029e7c4bc1f5a33b7f"}, @NFTA_CHAIN_USERDATA={0x11, 0xc, "dce39b771e8bce820018efd89f"}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3f}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5c63b78c}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x26e70b78}]}, @NFTA_CHAIN_USERDATA={0xcd, 0xc, "4a28b6d3d932a5ff8dcb9def27b3179d96075b168c27208c277c9ef7949db49a83768d9b24837eaddfe50249bd5310a1264ad69f21733a40cc8f470c3b7bf8256cd083877545caaa0246fe16bf597a7881bcc8cf258db7420dbd1c2f22c17c8cf84ea5288ced02c12d53912ebb0f560d57b238d2b551f5961a367acb5ecf087dd2fd2a034147419d164ddd5039448668bad538545de61636bd338ce90eb6d8a7acd2b282cf3d4a513acf079a8389cabc9f28aa5cff81a0af23298c1282f24996596d9da6a3128694c3"}, @NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x57291635}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x23515dbf}]}, @NFTA_CHAIN_HOOK={0x40, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7ac7f35c}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'ipvlan1\x00'}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x354}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000880)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x108, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x9c, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0xffffffffffffff44, 0x2, 0x1, 0x0, 0x3dca499a}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_virt_wifi\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_PRIORITY={0x0, 0x2, 0x1, 0x0, 0x5fab5230}, @NFTA_HOOK_DEV={0x0, 0x3, 'vlan0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x573a6df6}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c4898c3}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan1\x00'}, @NFTA_HOOK_DEV={0x0, 0x3, 'vlan0\x00'}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x130}}, 0x8000) (async) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r6) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@RTM_DELMDB={0x38, 0x55, 0x701, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x0, {@in6_addr=@loopback}}}]}, 0x38}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r8, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x14) (async) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000600)={@local, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6, 0x800, 0x8, 0x0, 0x1, 0x802202c2, r8}) sendmsg$netlink(r9, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000040)={0x10}, 0x10}, {&(0x7f0000000300)=ANY=[@ANYBLOB="1000000029100000000000000000f00a"], 0x10}], 0x2}, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f3100000a000100be"], 0x40}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2f}]}], {0x14}}, 0x7c}}, 0x0) 37.338708044s ago: executing program 1 (id=2250): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000000040), 0x4) r1 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r1, 0x114, 0x2718, 0x0, 0x20000008) r2 = socket(0x11, 0x800000003, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001], [0x0, 0x4]}}}}]}, 0x88}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000db6744d648d6c11000000000000eeffffff030000001800000000000000fe8800000000000001"], 0x30}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002880)) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x2}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) r10 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="0200ac7ffe03"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000000004000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 37.298514347s ago: executing program 3 (id=2251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='scalable\x00', 0x9) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 34.051970272s ago: executing program 3 (id=2252): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001340)=ANY=[], 0xa89) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000640)="e2b3b827d365c51d71eadd2ceadda251607cf2ac834ad26f541d5e9aa46cff60ba3d1ba4e90b24a30075ff6423ae78237d68331d7e125b57ef23912b3f43376608d71bd2be176d4f54c54f91170500000000000000eb13cd46fd98df266872ff6a434958d025ff14ff6ad60af409f79a2f92031be9f0366aecf50585416ba9b23f402ad764509ff01a80adc5eb2a3c52f0cdb1b51671d7fb5f18abc02fcf7e85a4f322c74382b3365045bc1bd565048bd27d6b3e62dcbf897f49", 0xba, 0x8c1, 0x0, 0x0) 33.974850039s ago: executing program 3 (id=2253): socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0xf0ff, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080603000000000000000008000000000500010006"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) pipe(0x0) 33.929382506s ago: executing program 2 (id=2254): socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0xf0ff, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080603000000000000000008000000000500010006"], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) pipe(0x0) 33.879128777s ago: executing program 2 (id=2255): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c0002"], 0x44}, 0x1, 0x2}, 0x0) 30.706700194s ago: executing program 3 (id=2256): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000004c0)={0x0, 0x8}, 0x8) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x84}}, 0x0) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/65, 0x41}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5400000011000100000000ff00000000f3aa47f0d8da4cee1606c7a7dae8a91c52f29dddb4a3d9efab1790e835eff689d1cd58bc001019108e2fc2f528fced180e8605fcf346bd8c97d164ff0eb1ce5392b4163eeb6e29", @ANYRES32=r2, @ANYBLOB="000000004000000034001a80300004802c00028008002100ffff000008002100e3000000080020000700000008000b00080000000800090009000000"], 0x54}}, 0x20008040) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000400)=0x4, 0x4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00042cbd7000ffdbdf25010000000c000f000a000000af1505000700030001f5cb8c0500"/48], 0x30}, 0x1, 0x0, 0x0, 0x20004084}, 0x400) 30.706256661s ago: executing program 1 (id=2257): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002240)=@newtfilter={0x6bc, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xe}}, [@filter_kind_options=@f_basic={{0xa}, {0x68c, 0x2, [@TCA_BASIC_POLICE={0x430, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x8, 0x5, 0x10000, 0x8, 0x9, 0x4cec96ce, 0x800, 0x3, 0xf59, 0x8, 0x80, 0x101, 0x87, 0x0, 0x2f3, 0xfffffffb, 0xfffffffe, 0xf3900, 0x8, 0x5, 0x9b, 0xff80000, 0xb0d, 0x0, 0x8, 0x9, 0x1, 0x7, 0x1, 0xf6d, 0x6, 0x4, 0x7, 0x80000001, 0x1, 0x2, 0x358, 0x3, 0x9, 0x4, 0x97, 0x4, 0x4, 0x9, 0x54f, 0x0, 0x7, 0x6, 0x6, 0xc19, 0x48, 0x5, 0x3, 0x10000, 0x8, 0x4, 0x7f, 0xc66, 0x3, 0x8, 0xfffffe00, 0xffffffff, 0x101, 0xb6f, 0x8000, 0xd, 0x1, 0xb984, 0x3ff, 0xa, 0xfffffffb, 0x8001, 0x1, 0xe, 0x119, 0xc63, 0x9, 0x80000001, 0x0, 0xa, 0x2, 0x3, 0x8, 0xef69, 0x200, 0x3, 0x1, 0x7fff, 0xda, 0x89, 0x4, 0xffffffff, 0xb666, 0x0, 0x8, 0x401, 0x4, 0xffffffaa, 0x0, 0x1, 0x7, 0x900000, 0x6, 0x8, 0x0, 0xffffff16, 0xd6, 0x3, 0x80000000, 0x95d, 0x4e8f, 0x466, 0x9, 0x9, 0x9, 0x32, 0x0, 0x1fb, 0x9, 0x5, 0x0, 0x1, 0x6, 0xfffffff6, 0x66d, 0x71c3, 0x1, 0x3d5, 0x10, 0x2, 0x4, 0x2, 0x1, 0x401, 0xe8b6720d, 0x4, 0x101, 0xd, 0xe00000, 0x4, 0x4, 0x9, 0x8, 0x8001, 0xffffffc0, 0x1, 0x200, 0x7, 0x0, 0x8c7, 0x9, 0x8, 0x0, 0xc, 0x401, 0x2, 0x5, 0x6c7, 0x9, 0x1000, 0x8, 0x9, 0x7, 0xb41, 0x6, 0x2, 0x7, 0xfffffff8, 0x1, 0x9, 0x80000001, 0xfffffff4, 0xfffffffc, 0xd9e, 0x3, 0xfffffffd, 0x7ba, 0x1, 0x3, 0x401, 0x8, 0x1, 0xacc9, 0x4, 0x0, 0x11ac, 0x7, 0x1, 0x50c36daf, 0xf27a, 0xfffffffb, 0x1, 0x8, 0x2, 0xcee6, 0x0, 0xffff, 0x6, 0x5, 0x8, 0x2, 0x8, 0x3ff, 0x9, 0x7f, 0x4, 0x1, 0x5, 0x228, 0x200, 0x1b6c0, 0x8, 0x3, 0x4, 0x2, 0x64b, 0xa, 0x3, 0x3, 0x3ff, 0x5db, 0x0, 0x7, 0x2, 0x3ff, 0x2, 0x400, 0x2, 0x7cc, 0xc, 0x5, 0xfffffffc, 0x1, 0x2, 0x0, 0x0, 0x2, 0x8, 0x8, 0x5, 0x7, 0x7, 0x7f, 0x69, 0x1000, 0x0, 0x3, 0x1, 0x6, 0xbbc2, 0x6, 0x1ff, 0x7, 0x1c9111fb, 0x9]}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xfff3}}, @TCA_BASIC_ACT={0x210, 0x3, [@m_skbmod={0x30, 0x0, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}, @m_mpls={0xb8, 0xe, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xa6a, 0x4, 0x8, 0x4, 0x962}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xc6828}]}, {0x5d, 0x6, "b559012c80bc64904bf411ac6f4bd3e8104591a57ca1783fd92077ab30e3ee5522e1b33fb39ebe88e2c809cc26ac726270b198a85079610933ebe30fafafc4697623801b9ea73c93e61e880ec5114adc874d04b49373b70dab"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x60, 0x3, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xffff, 0x3, 0x3ad, 0x4}}]}, {0x12, 0x6, "b7f3c645d3deb1c277b77feb6ff5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_vlan={0xc4, 0x9, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaef}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xb, 0x2, 0x10000000, 0x0, 0x3}, 0x1}}]}, {0x69, 0x6, "93d12c97439893e472763f97566393e1d63d7ec1e9f4e1658209ca8533bc7d3933a92d3b1acf05dc7f0480f7b3ee60e399e12761a8570be3ad5a9710427c1b1e18a0127f0bd18db0d0d1e11f911c2c2bc7ad9cd3f7341b9ad96263fe1b41eb2d8c49f59073"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}, @TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0x0, 0x3, 0x4, 0x0, {0x0, 0x0, 0x3, 0x6, 0xd95, 0x8}, {0x7, 0x1, 0x0, 0x67b8, 0x4, 0x6}}}]}]}}]}, 0x6bc}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 27.314127319s ago: executing program 1 (id=2259): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0x17, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x0, 0x1, 0x4, 0xb, 0x9, 0x50, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x3, 0x8, 0x4, 0xffffffffffffffff}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0xd7, &(0x7f0000000180)=""/215, 0x41100, 0x1c, '\x00', 0x0, 0x32, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x5, 0xb, 0x6, 0x607}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x5, 0x1, 0x3, 0xa}, {0x4, 0x1, 0xa}, {0x0, 0x4, 0x2, 0x7}], 0x10, 0x5b1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000200612e48000000000006000000feffffff9500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xa}, 0x10, 0x0, r0}, 0x90) 27.203414481s ago: executing program 1 (id=2260): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0xa}}, 0x26}}, 0x0) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x6558, &(0x7f00000000c0)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000440)=""/135, 0xbe}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/130}, {&(0x7f0000000300)=""/184}, {&(0x7f0000000500)=""/148}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0) 27.074585998s ago: executing program 1 (id=2261): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x0, 0x0, {0x15}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}}, 0x0) sendto$inet(r0, &(0x7f0000000280)="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", 0x15f, 0x28000081, &(0x7f0000004ff0)={0x2, 0x0, @broadcast}, 0x10) ioctl$int_in(r0, 0x0, &(0x7f0000000640)=0x7) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0xa, [@struct={0x0, 0x6, 0x0, 0x4, 0x1, 0x0, [{0xc, 0x1, 0x9d04}, {0x10, 0x3}, {0xc, 0x1, 0x1}, {0xa, 0x5, 0xffff}, {0x6, 0x1000005, 0x8}, {0x9, 0x4, 0xca9}]}, @enum={0x0, 0x6, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x4}, {0xd, 0x6}, {0x3, 0x1}]}, @fwd={0x8}, @restrict={0xc, 0x0, 0x0, 0xb, 0x2}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x4}}, @enum={0x9, 0x3, 0x0, 0x6, 0x4, [{0x5}, {0x0, 0x7}, {0xe, 0x9}]}, @var={0xe, 0x0, 0x0, 0xe, 0x4}, @typedef={0xa, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x4f, 0x30, 0x5f, 0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000540)=""/158, 0x12e, 0x9e, 0x0, 0x170}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000850000000e00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x8, 0x6, 0xd, 0x80, 0x0, 0xffffffffffffffff, 0x6, '\x00', r4, r5, 0x2, 0x4, 0x1}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3577], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) setsockopt$inet6_udp_encap(r8, 0x11, 0x64, &(0x7f0000000780)=0x2, 0x4) pipe(0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000480)={'nr0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f00000004c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x24, r9}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000800)=""/212, 0x1a, 0xd4, 0x8}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=2258): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800f7ff00000073114200000000008510000002000000b7d1ff00000000009500c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000140)={0x11, 0x4, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000800098b33dcf84fbeea038e9d450000240000000000219078ac1414bbe000000200000000040190780071cd8e00d332cb"], 0x0) kernel console output (not intermixed with test programs): not active [ 203.794845][T10007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.817179][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.931690][T10007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.206183][T10007] hsr_slave_0: entered promiscuous mode [ 204.235333][T10007] hsr_slave_1: entered promiscuous mode [ 204.261368][T10007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.295083][T10007] Cannot create hsr debugfs directory [ 204.987661][ T5113] Bluetooth: hci4: command tx timeout [ 205.400132][T10238] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1616'. [ 205.572567][T10252] FAULT_INJECTION: forcing a failure. [ 205.572567][T10252] name failslab, interval 1, probability 0, space 0, times 0 [ 205.597753][T10252] CPU: 1 PID: 10252 Comm: syz.2.1618 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 205.607950][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 205.618092][T10252] Call Trace: [ 205.621363][T10252] [ 205.624286][T10252] dump_stack_lvl+0x241/0x360 [ 205.628975][T10252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.634172][T10252] ? __pfx__printk+0x10/0x10 [ 205.638768][T10252] should_fail_ex+0x3b0/0x4e0 [ 205.643443][T10252] ? __alloc_skb+0x1c3/0x440 [ 205.648027][T10252] should_failslab+0x9/0x20 [ 205.652524][T10252] kmem_cache_alloc_node_noprof+0x71/0x320 [ 205.658331][T10252] __alloc_skb+0x1c3/0x440 [ 205.662748][T10252] ? __pfx___alloc_skb+0x10/0x10 [ 205.667689][T10252] ? netlink_ack_tlv_len+0x6e/0x200 [ 205.672886][T10252] netlink_ack+0x13f/0xa30 [ 205.677334][T10252] ? __pfx_lock_acquire+0x10/0x10 [ 205.682350][T10252] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 205.688517][T10252] netlink_rcv_skb+0x262/0x430 [ 205.693282][T10252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 205.698296][T10252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 205.703584][T10252] ? __netlink_deliver_tap+0x77e/0x7c0 [ 205.709048][T10252] genl_rcv+0x28/0x40 [ 205.713019][T10252] netlink_unicast+0x7ea/0x980 [ 205.717783][T10252] ? __pfx_netlink_unicast+0x10/0x10 [ 205.723057][T10252] ? __virt_addr_valid+0x183/0x520 [ 205.728168][T10252] ? __check_object_size+0x49c/0x900 [ 205.733449][T10252] ? bpf_lsm_netlink_send+0x9/0x10 [ 205.738561][T10252] netlink_sendmsg+0x8db/0xcb0 [ 205.743330][T10252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.748611][T10252] ? __import_iovec+0x536/0x820 [ 205.753452][T10252] ? aa_sock_msg_perm+0x91/0x160 [ 205.758497][T10252] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 205.763787][T10252] ? security_socket_sendmsg+0x87/0xb0 [ 205.769246][T10252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 205.774532][T10252] __sock_sendmsg+0x221/0x270 [ 205.779214][T10252] ____sys_sendmsg+0x525/0x7d0 [ 205.783979][T10252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 205.789289][T10252] __sys_sendmsg+0x2b0/0x3a0 [ 205.793884][T10252] ? __pfx___sys_sendmsg+0x10/0x10 [ 205.799074][T10252] ? vfs_write+0x7c4/0xc90 [ 205.803516][T10252] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 205.809836][T10252] ? do_syscall_64+0x100/0x230 [ 205.814599][T10252] ? do_syscall_64+0xb6/0x230 [ 205.819278][T10252] do_syscall_64+0xf3/0x230 [ 205.823777][T10252] ? clear_bhb_loop+0x35/0x90 [ 205.828445][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.834350][T10252] RIP: 0033:0x7f5d76f75bd9 [ 205.838757][T10252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.858355][T10252] RSP: 002b:00007f5d77d2f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 205.866759][T10252] RAX: ffffffffffffffda RBX: 00007f5d77103f60 RCX: 00007f5d76f75bd9 [ 205.874728][T10252] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 205.882719][T10252] RBP: 00007f5d77d2f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.890685][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 205.898651][T10252] R13: 000000000000000b R14: 00007f5d77103f60 R15: 00007ffd9a5aff88 [ 205.906643][T10252] [ 205.979440][T10007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.067875][T10007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.092459][T10007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.122353][T10007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.269759][T10267] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1624'. [ 206.491652][T10007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.552245][T10007] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.598178][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.605397][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.633777][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.641034][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.067270][ T5113] Bluetooth: hci4: command tx timeout [ 207.125711][T10299] team0: entered promiscuous mode [ 207.157748][T10299] team_slave_0: entered promiscuous mode [ 207.163667][T10299] team_slave_1: entered promiscuous mode [ 207.291573][T10007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.609654][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 207.619691][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 207.629596][ T5107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 207.647850][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 207.665392][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 207.673698][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 207.705531][T10007] veth0_vlan: entered promiscuous mode [ 207.739023][T10297] team0: left promiscuous mode [ 207.773421][T10297] team_slave_0: left promiscuous mode [ 207.797655][T10297] team_slave_1: left promiscuous mode [ 207.830109][T10007] veth1_vlan: entered promiscuous mode [ 207.923817][T10313] lo speed is unknown, defaulting to 1000 [ 208.062704][ T9056] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.196270][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'. [ 208.339924][T10347] FAULT_INJECTION: forcing a failure. [ 208.339924][T10347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.360427][ T9056] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.395956][T10347] CPU: 0 PID: 10347 Comm: syz.3.1643 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 208.406165][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 208.416245][T10347] Call Trace: [ 208.419578][T10347] [ 208.422521][T10347] dump_stack_lvl+0x241/0x360 [ 208.427228][T10347] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.432252][T10350] FAULT_INJECTION: forcing a failure. [ 208.432252][T10350] name failslab, interval 1, probability 0, space 0, times 0 [ 208.432437][T10347] ? __pfx__printk+0x10/0x10 [ 208.449750][T10347] ? vfs_write+0x7c4/0xc90 [ 208.454196][T10347] should_fail_ex+0x3b0/0x4e0 [ 208.458904][T10347] _copy_from_user+0x2f/0xe0 [ 208.463502][T10347] move_addr_to_kernel+0x82/0x150 [ 208.468538][T10347] __sys_bind+0x168/0x2f0 [ 208.472868][T10347] ? __pfx___sys_bind+0x10/0x10 [ 208.477729][T10347] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.484085][T10347] ? do_syscall_64+0x100/0x230 [ 208.488858][T10347] __x64_sys_bind+0x7a/0x90 [ 208.493373][T10347] do_syscall_64+0xf3/0x230 [ 208.497889][T10347] ? clear_bhb_loop+0x35/0x90 [ 208.502578][T10347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.508476][T10347] RIP: 0033:0x7fd0b9575bd9 [ 208.512893][T10347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.532520][T10347] RSP: 002b:00007fd0ba288048 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 208.541113][T10347] RAX: ffffffffffffffda RBX: 00007fd0b9703f60 RCX: 00007fd0b9575bd9 [ 208.549186][T10347] RDX: 0000000000000014 RSI: 0000000020000000 RDI: 0000000000000004 [ 208.557169][T10347] RBP: 00007fd0ba2880a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.565146][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.573130][T10347] R13: 000000000000000b R14: 00007fd0b9703f60 R15: 00007fff43df1388 [ 208.581127][T10347] [ 208.584191][T10350] CPU: 1 PID: 10350 Comm: syz.2.1644 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 208.594366][T10350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 208.604447][T10350] Call Trace: [ 208.607726][T10350] [ 208.610648][T10350] dump_stack_lvl+0x241/0x360 [ 208.615324][T10350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.620515][T10350] ? __pfx__printk+0x10/0x10 [ 208.625102][T10350] ? __pfx___might_resched+0x10/0x10 [ 208.630386][T10350] should_fail_ex+0x3b0/0x4e0 [ 208.635147][T10350] ? apparmor_sk_alloc_security+0x77/0x100 [ 208.640950][T10350] should_failslab+0x9/0x20 [ 208.645451][T10350] kmalloc_trace_noprof+0x6c/0x2c0 [ 208.650569][T10350] apparmor_sk_alloc_security+0x77/0x100 [ 208.656209][T10350] security_sk_alloc+0x75/0xb0 [ 208.661002][T10350] sk_prot_alloc+0xfa/0x210 [ 208.665545][T10350] sk_alloc+0x38/0x370 [ 208.669711][T10350] inet_create+0x652/0xe70 [ 208.674121][T10350] ? inet_create+0x9c/0xe70 [ 208.678730][T10350] ? __sock_create+0x337/0x920 [ 208.683482][T10350] __sock_create+0x490/0x920 [ 208.688069][T10350] udp_sock_create4+0xda/0x670 [ 208.692829][T10350] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 208.698628][T10350] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 208.704859][T10350] ? __pfx_udp_sock_create4+0x10/0x10 [ 208.710246][T10350] rxrpc_lookup_local+0xd9d/0x1890 [ 208.715360][T10350] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 208.720904][T10350] ? __local_bh_enable_ip+0x168/0x200 [ 208.726267][T10350] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 208.731973][T10350] ? do_raw_spin_unlock+0x13c/0x8b0 [ 208.737174][T10350] rxrpc_sendmsg+0x4d9/0x920 [ 208.741759][T10350] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 208.746857][T10350] __sock_sendmsg+0x221/0x270 [ 208.751545][T10350] ____sys_sendmsg+0x525/0x7d0 [ 208.756317][T10350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.761615][T10350] __sys_sendmsg+0x2b0/0x3a0 [ 208.766201][T10350] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.771303][T10350] ? vfs_write+0x7c4/0xc90 [ 208.775742][T10350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.782063][T10350] ? do_syscall_64+0x100/0x230 [ 208.786822][T10350] ? do_syscall_64+0xb6/0x230 [ 208.791492][T10350] do_syscall_64+0xf3/0x230 [ 208.796028][T10350] ? clear_bhb_loop+0x35/0x90 [ 208.800693][T10350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.806579][T10350] RIP: 0033:0x7f5d76f75bd9 [ 208.810982][T10350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.830577][T10350] RSP: 002b:00007f5d77d2f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.838997][T10350] RAX: ffffffffffffffda RBX: 00007f5d77103f60 RCX: 00007f5d76f75bd9 [ 208.846956][T10350] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 208.854919][T10350] RBP: 00007f5d77d2f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.862881][T10350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.870841][T10350] R13: 000000000000000b R14: 00007f5d77103f60 R15: 00007ffd9a5aff88 [ 208.879251][T10350] [ 209.018529][ T9056] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.116622][T10007] veth0_macvtap: entered promiscuous mode [ 209.183158][ T9056] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.263728][T10007] veth1_macvtap: entered promiscuous mode [ 209.486672][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.555845][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.593464][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.627477][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.648714][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.687967][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.707368][ T5107] Bluetooth: hci2: command tx timeout [ 209.728587][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.740954][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.759229][T10007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.783781][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.798278][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.808608][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.835808][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.846163][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.860830][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.883084][T10007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.929678][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1654'. [ 210.083302][T10007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.136733][T10007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.145749][T10007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.158042][T10007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.245887][ T9056] bridge_slave_1: left allmulticast mode [ 210.285976][T10424] FAULT_INJECTION: forcing a failure. [ 210.285976][T10424] name failslab, interval 1, probability 0, space 0, times 0 [ 210.287025][ T9056] bridge_slave_1: left promiscuous mode [ 210.334951][T10424] CPU: 0 PID: 10424 Comm: syz.3.1660 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 210.343808][ T9056] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.345133][T10424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 210.362213][T10424] Call Trace: [ 210.365517][T10424] [ 210.368471][T10424] dump_stack_lvl+0x241/0x360 [ 210.373188][T10424] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.378418][T10424] ? __pfx__printk+0x10/0x10 [ 210.383044][T10424] ? netlink_insert+0x10b7/0x14b0 [ 210.388099][T10424] should_fail_ex+0x3b0/0x4e0 [ 210.392801][T10424] ? __alloc_skb+0x1c3/0x440 [ 210.397408][T10424] should_failslab+0x9/0x20 [ 210.401939][T10424] kmem_cache_alloc_node_noprof+0x71/0x320 [ 210.407779][T10424] __alloc_skb+0x1c3/0x440 [ 210.412228][T10424] ? __pfx___alloc_skb+0x10/0x10 [ 210.417187][T10424] ? netlink_autobind+0xd6/0x2f0 [ 210.422325][T10424] ? netlink_autobind+0x2b0/0x2f0 [ 210.427383][T10424] netlink_sendmsg+0x631/0xcb0 [ 210.432169][T10424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.437466][T10424] ? __import_iovec+0x536/0x820 [ 210.442329][T10424] ? aa_sock_msg_perm+0x91/0x160 [ 210.447268][T10424] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 210.452540][T10424] ? security_socket_sendmsg+0x87/0xb0 [ 210.457990][T10424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.463306][T10424] __sock_sendmsg+0x221/0x270 [ 210.468000][T10424] ____sys_sendmsg+0x525/0x7d0 [ 210.472762][T10424] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.478050][T10424] __sys_sendmsg+0x2b0/0x3a0 [ 210.482632][T10424] ? __pfx___sys_sendmsg+0x10/0x10 [ 210.487735][T10424] ? vfs_write+0x7c4/0xc90 [ 210.492170][T10424] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 210.498662][T10424] ? do_syscall_64+0x100/0x230 [ 210.503425][T10424] ? do_syscall_64+0xb6/0x230 [ 210.508097][T10424] do_syscall_64+0xf3/0x230 [ 210.512593][T10424] ? clear_bhb_loop+0x35/0x90 [ 210.517261][T10424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.523230][T10424] RIP: 0033:0x7fd0b9575bd9 [ 210.527652][T10424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.547281][T10424] RSP: 002b:00007fd0ba288048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.555704][T10424] RAX: ffffffffffffffda RBX: 00007fd0b9703f60 RCX: 00007fd0b9575bd9 [ 210.563663][T10424] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004 [ 210.571623][T10424] RBP: 00007fd0ba2880a0 R08: 0000000000000000 R09: 0000000000000000 [ 210.579602][T10424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.587585][T10424] R13: 000000000000000b R14: 00007fd0b9703f60 R15: 00007fff43df1388 [ 210.595667][T10424] [ 210.603381][ T9056] bridge_slave_0: left allmulticast mode [ 210.619069][ T9056] bridge_slave_0: left promiscuous mode [ 210.624903][ T9056] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.397322][ T9056] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.409043][ T9056] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.420838][ T9056] bond0 (unregistering): Released all slaves [ 211.441730][T10451] team_slave_0: entered promiscuous mode [ 211.447793][T10451] team_slave_1: entered promiscuous mode [ 211.453852][T10451] vlan2: entered promiscuous mode [ 211.460923][T10451] team0: entered promiscuous mode [ 211.466531][T10451] vlan2: entered allmulticast mode [ 211.478189][T10451] team0: entered allmulticast mode [ 211.483364][T10451] team_slave_0: entered allmulticast mode [ 211.489907][T10451] team_slave_1: entered allmulticast mode [ 211.514423][T10451] team0: left allmulticast mode [ 211.521680][T10451] team_slave_0: left allmulticast mode [ 211.528721][T10451] team_slave_1: left allmulticast mode [ 211.534407][T10451] team0: left promiscuous mode [ 211.540384][T10451] team_slave_0: left promiscuous mode [ 211.545833][T10451] team_slave_1: left promiscuous mode [ 211.779910][T10471] tc_dump_action: action bad kind [ 211.787808][ T5113] Bluetooth: hci2: command tx timeout [ 211.831391][T10313] chnl_net:caif_netlink_parms(): no params data found [ 211.861565][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1674'. [ 211.903344][T10471] xfrm1: entered promiscuous mode [ 211.913821][T10471] xfrm1: entered allmulticast mode [ 212.133999][ T9038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.157108][ T9038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.553099][ T9054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.566876][ T9054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.937037][ T9056] hsr_slave_0: left promiscuous mode [ 212.957978][ T9056] hsr_slave_1: left promiscuous mode [ 212.969332][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.977590][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.986234][ T9056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.994056][ T9056] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.049097][ T9056] veth1_macvtap: left promiscuous mode [ 213.061993][ T9056] veth0_macvtap: left promiscuous mode [ 213.075163][ T9056] veth1_vlan: left promiscuous mode [ 213.090220][ T9056] veth0_vlan: left promiscuous mode [ 213.214825][T10542] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 213.228179][T10542] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1691'. [ 213.247820][T10542] netlink: 'syz.0.1691': attribute type 1 has an invalid length. [ 213.272000][T10542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1691'. [ 213.605971][ T9056] team0 (unregistering): Port device team_slave_1 removed [ 213.646139][ T9056] team0 (unregistering): Port device team_slave_0 removed [ 213.877739][ T5113] Bluetooth: hci2: command 0x040f tx timeout [ 214.081918][T10313] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.089458][T10313] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.096683][T10313] bridge_slave_0: entered allmulticast mode [ 214.104111][T10313] bridge_slave_0: entered promiscuous mode [ 214.120145][T10533] infiniband syz0: set active [ 214.227811][ T5149] lo speed is unknown, defaulting to 1000 [ 214.228213][T10313] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.279420][T10313] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.323484][T10313] bridge_slave_1: entered allmulticast mode [ 214.344751][T10313] bridge_slave_1: entered promiscuous mode [ 214.382431][T10557] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1696'. [ 214.395181][T10555] FAULT_INJECTION: forcing a failure. [ 214.395181][T10555] name failslab, interval 1, probability 0, space 0, times 0 [ 214.427350][T10555] CPU: 0 PID: 10555 Comm: syz.0.1697 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 214.437553][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 214.447633][T10555] Call Trace: [ 214.450938][T10555] [ 214.453889][T10555] dump_stack_lvl+0x241/0x360 [ 214.458598][T10555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.463832][T10555] ? __pfx__printk+0x10/0x10 [ 214.468625][T10555] ? ref_tracker_alloc+0x332/0x490 [ 214.473775][T10555] should_fail_ex+0x3b0/0x4e0 [ 214.478487][T10555] ? skb_clone+0x20c/0x390 [ 214.482930][T10555] should_failslab+0x9/0x20 [ 214.487478][T10555] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 214.492885][T10555] skb_clone+0x20c/0x390 [ 214.497167][T10555] __netlink_deliver_tap+0x3cc/0x7c0 [ 214.502497][T10555] ? netlink_deliver_tap+0x2e/0x1b0 [ 214.507724][T10555] netlink_deliver_tap+0x19d/0x1b0 [ 214.512872][T10555] netlink_broadcast_filtered+0xe5b/0x1290 [ 214.518734][T10555] xfrm_nlmsg_multicast+0x187/0x1f0 [ 214.523973][T10555] xfrm_send_acquire+0x932/0x1240 [ 214.529046][T10555] ? __pfx_xfrm_send_acquire+0x10/0x10 [ 214.534551][T10555] ? __pfx_lock_release+0x10/0x10 [ 214.539607][T10555] ? xfrm_init_tempstate+0x9a3/0x1240 [ 214.545016][T10555] ? km_query+0x30/0x220 [ 214.549298][T10555] km_query+0x120/0x220 [ 214.553510][T10555] ? km_query+0x30/0x220 [ 214.557796][T10555] xfrm_state_find+0x328e/0x4de0 [ 214.562819][T10555] ? xfrm_state_find+0x42f/0x4de0 [ 214.567959][T10555] ? __pfx_xfrm_state_find+0x10/0x10 [ 214.573276][T10555] ? __pfx_validate_chain+0x10/0x10 [ 214.578490][T10555] ? __lock_acquire+0x1346/0x1fd0 [ 214.583508][T10555] xfrm_resolve_and_create_bundle+0x6d2/0x2c80 [ 214.589705][T10555] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 214.596391][T10555] ? xfrm_sk_policy_lookup+0x7ef/0x840 [ 214.601849][T10555] ? xfrm_sk_policy_lookup+0x93/0x840 [ 214.607219][T10555] ? xfrm_expand_policies+0x3fb/0x690 [ 214.612589][T10555] xfrm_lookup_with_ifid+0x334/0x1ed0 [ 214.617957][T10555] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 214.623839][T10555] ? ip6_dst_lookup_tail+0x29c/0x11a0 [ 214.629203][T10555] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 214.634824][T10555] ? __pfx_lock_release+0x10/0x10 [ 214.639840][T10555] ? up_write+0x1a9/0x590 [ 214.644173][T10555] xfrm_lookup_route+0x3c/0x1c0 [ 214.649019][T10555] ip6_dst_lookup_flow+0x13e/0x180 [ 214.654124][T10555] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 214.659744][T10555] ? aa_label_sk_perm+0x4f0/0x6d0 [ 214.664763][T10555] ? rawv6_sendmsg+0xfe9/0x23c0 [ 214.669609][T10555] rawv6_sendmsg+0x1283/0x23c0 [ 214.674380][T10555] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 214.679495][T10555] ? aa_sk_perm+0x967/0xab0 [ 214.683997][T10555] ? iovec_from_user+0x61/0x240 [ 214.688853][T10555] ? inet_sendmsg+0x330/0x390 [ 214.693519][T10555] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 214.698795][T10555] ? security_socket_sendmsg+0x87/0xb0 [ 214.704251][T10555] __sock_sendmsg+0x1a6/0x270 [ 214.708927][T10555] ____sys_sendmsg+0x525/0x7d0 [ 214.713694][T10555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.718983][T10555] __sys_sendmmsg+0x3b2/0x740 [ 214.723656][T10555] ? __pfx___sys_sendmmsg+0x10/0x10 [ 214.728924][T10555] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 214.734808][T10555] ? ksys_write+0x23e/0x2c0 [ 214.739314][T10555] ? __pfx_lock_release+0x10/0x10 [ 214.744332][T10555] ? vfs_write+0x7c4/0xc90 [ 214.748745][T10555] ? __mutex_unlock_slowpath+0x21d/0x750 [ 214.754376][T10555] ? __pfx_vfs_write+0x10/0x10 [ 214.759149][T10555] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 214.765119][T10555] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.771435][T10555] ? do_syscall_64+0x100/0x230 [ 214.776195][T10555] __x64_sys_sendmmsg+0xa0/0xb0 [ 214.781042][T10555] do_syscall_64+0xf3/0x230 [ 214.785540][T10555] ? clear_bhb_loop+0x35/0x90 [ 214.790206][T10555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.796094][T10555] RIP: 0033:0x7f08af175bd9 [ 214.800502][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.820099][T10555] RSP: 002b:00007f08affbb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 214.828502][T10555] RAX: ffffffffffffffda RBX: 00007f08af303f60 RCX: 00007f08af175bd9 [ 214.836462][T10555] RDX: 00000000000002e9 RSI: 0000000020000480 RDI: 0000000000000004 [ 214.844421][T10555] RBP: 00007f08affbb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 214.852382][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.860340][T10555] R13: 000000000000000b R14: 00007f08af303f60 R15: 00007ffcd464c798 [ 214.868311][T10555] [ 214.942222][T10573] FAULT_INJECTION: forcing a failure. [ 214.942222][T10573] name failslab, interval 1, probability 0, space 0, times 0 [ 214.956548][T10573] CPU: 0 PID: 10573 Comm: syz.0.1702 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 214.966744][T10573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 214.976821][T10573] Call Trace: [ 214.980129][T10573] [ 214.983085][T10573] dump_stack_lvl+0x241/0x360 [ 214.987799][T10573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.993017][T10573] ? __pfx__printk+0x10/0x10 [ 214.997646][T10573] should_fail_ex+0x3b0/0x4e0 [ 215.002357][T10573] ? __alloc_skb+0x1c3/0x440 [ 215.006982][T10573] should_failslab+0x9/0x20 [ 215.011529][T10573] kmem_cache_alloc_node_noprof+0x71/0x320 [ 215.017465][T10573] __alloc_skb+0x1c3/0x440 [ 215.021922][T10573] ? __pfx___alloc_skb+0x10/0x10 [ 215.026896][T10573] ? netlink_ack_tlv_len+0x6e/0x200 [ 215.032123][T10573] netlink_ack+0x13f/0xa30 [ 215.036566][T10573] ? __pfx_lock_acquire+0x10/0x10 [ 215.041613][T10573] ? __pfx_nl80211_start_ap+0x10/0x10 [ 215.046998][T10573] ? __pfx_nl80211_post_doit+0x10/0x10 [ 215.052473][T10573] netlink_rcv_skb+0x262/0x430 [ 215.057250][T10573] ? __pfx_genl_rcv_msg+0x10/0x10 [ 215.062272][T10573] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 215.067574][T10573] ? __netlink_deliver_tap+0x77e/0x7c0 [ 215.073049][T10573] genl_rcv+0x28/0x40 [ 215.077030][T10573] netlink_unicast+0x7ea/0x980 [ 215.081821][T10573] ? __pfx_netlink_unicast+0x10/0x10 [ 215.087122][T10573] ? __virt_addr_valid+0x183/0x520 [ 215.092239][T10573] ? __check_object_size+0x49c/0x900 [ 215.097523][T10573] ? bpf_lsm_netlink_send+0x9/0x10 [ 215.102631][T10573] netlink_sendmsg+0x8db/0xcb0 [ 215.107408][T10573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.112699][T10573] ? __import_iovec+0x536/0x820 [ 215.117540][T10573] ? aa_sock_msg_perm+0x91/0x160 [ 215.122474][T10573] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 215.127746][T10573] ? security_socket_sendmsg+0x87/0xb0 [ 215.133197][T10573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.138473][T10573] __sock_sendmsg+0x221/0x270 [ 215.143147][T10573] ____sys_sendmsg+0x525/0x7d0 [ 215.147909][T10573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.153198][T10573] __sys_sendmsg+0x2b0/0x3a0 [ 215.157782][T10573] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.162887][T10573] ? vfs_write+0x7c4/0xc90 [ 215.167344][T10573] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 215.173686][T10573] ? do_syscall_64+0x100/0x230 [ 215.178462][T10573] ? do_syscall_64+0xb6/0x230 [ 215.183145][T10573] do_syscall_64+0xf3/0x230 [ 215.187645][T10573] ? clear_bhb_loop+0x35/0x90 [ 215.192314][T10573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.198204][T10573] RIP: 0033:0x7f08af175bd9 [ 215.202608][T10573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.222233][T10573] RSP: 002b:00007f08affbb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.230653][T10573] RAX: ffffffffffffffda RBX: 00007f08af303f60 RCX: 00007f08af175bd9 [ 215.238645][T10573] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 215.246620][T10573] RBP: 00007f08affbb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.254584][T10573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.262551][T10573] R13: 000000000000000b R14: 00007f08af303f60 R15: 00007ffcd464c798 [ 215.270532][T10573] [ 215.334571][T10313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.355902][T10313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.384932][T10580] tipc: Started in network mode [ 215.400638][T10580] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 215.451644][T10580] tipc: Enabling of bearer rejected, failed to enable media [ 215.557683][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 215.566722][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 215.639190][T10313] team0: Port device team_slave_0 added [ 215.645829][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'. [ 215.666128][T10587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1706'. [ 215.704548][T10313] team0: Port device team_slave_1 added [ 215.890478][T10313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.922364][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.956756][ T5107] Bluetooth: hci2: command 0x040f tx timeout [ 215.984106][T10313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.012565][T10313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.020021][T10313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.067260][T10313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.282063][T10313] hsr_slave_0: entered promiscuous mode [ 216.334101][T10313] hsr_slave_1: entered promiscuous mode [ 216.379366][T10313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.412535][T10313] Cannot create hsr debugfs directory [ 216.652462][T10627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1717'. [ 217.012028][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'. [ 217.030051][T10649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1720'. [ 217.249266][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 217.297360][T10660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1722'. [ 218.027089][ T5107] Bluetooth: hci2: command 0x040f tx timeout [ 218.213066][T10692] veth1: mtu less than device minimum [ 218.449559][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 218.465871][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1732'. [ 218.606383][T10708] vlan2: entered allmulticast mode [ 218.651228][T10716] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1737'. [ 218.750662][T10313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.789442][T10313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.841245][T10313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.869279][T10313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 218.905322][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 218.958581][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1738'. [ 219.019574][T10732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1740'. [ 219.129313][T10313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.209743][T10313] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.239209][ T5149] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.246536][ T5149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.303993][ T5149] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.311251][ T5149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.714056][T10756] FAULT_INJECTION: forcing a failure. [ 219.714056][T10756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.781497][T10756] CPU: 0 PID: 10756 Comm: syz.1.1744 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 219.791709][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 219.801788][T10756] Call Trace: [ 219.805082][T10756] [ 219.808033][T10756] dump_stack_lvl+0x241/0x360 [ 219.812741][T10756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.817974][T10756] ? __pfx__printk+0x10/0x10 [ 219.822595][T10756] ? snprintf+0xda/0x120 [ 219.826856][T10756] should_fail_ex+0x3b0/0x4e0 [ 219.831561][T10756] _copy_to_user+0x2f/0xb0 [ 219.835993][T10756] simple_read_from_buffer+0xca/0x150 [ 219.841396][T10756] proc_fail_nth_read+0x1e9/0x250 [ 219.846453][T10756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.852028][T10756] ? rw_verify_area+0x514/0x6b0 [ 219.856899][T10756] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 219.862465][T10756] vfs_read+0x204/0xbd0 [ 219.866648][T10756] ? __pfx_vfs_read+0x10/0x10 [ 219.871340][T10756] ? isotp_bind+0x62c/0x890 [ 219.875869][T10756] ? __sys_bind+0x256/0x2f0 [ 219.880394][T10756] ksys_read+0x1a0/0x2c0 [ 219.884655][T10756] ? __pfx_ksys_read+0x10/0x10 [ 219.889440][T10756] ? do_syscall_64+0x100/0x230 [ 219.894235][T10756] ? do_syscall_64+0xb6/0x230 [ 219.898953][T10756] do_syscall_64+0xf3/0x230 [ 219.903487][T10756] ? clear_bhb_loop+0x35/0x90 [ 219.908182][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.914101][T10756] RIP: 0033:0x7f655d5746bc [ 219.918538][T10756] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 219.938173][T10756] RSP: 002b:00007f655e2fc040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 219.946618][T10756] RAX: ffffffffffffffda RBX: 00007f655d703f60 RCX: 00007f655d5746bc [ 219.954615][T10756] RDX: 000000000000000f RSI: 00007f655e2fc0b0 RDI: 0000000000000004 [ 219.962614][T10756] RBP: 00007f655e2fc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 219.970610][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.978605][T10756] R13: 000000000000000b R14: 00007f655d703f60 R15: 00007ffce2a0a308 [ 219.986622][T10756] [ 220.031380][T10770] netlink: 'syz.2.1745': attribute type 12 has an invalid length. [ 220.100944][T10313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.288541][T10785] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 220.307509][T10785] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 220.329019][T10785] netlink: 'syz.3.1750': attribute type 29 has an invalid length. [ 220.704947][T10313] veth0_vlan: entered promiscuous mode [ 220.866458][T10313] veth1_vlan: entered promiscuous mode [ 220.966865][T10313] veth0_macvtap: entered promiscuous mode [ 221.016559][T10313] veth1_macvtap: entered promiscuous mode [ 221.089059][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.121779][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.142906][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.186093][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.214504][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.235434][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.246587][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.264247][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.298823][T10313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.341857][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.372100][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.393253][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.418961][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.444212][T10313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.470592][T10313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.483337][T10313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.503055][T10313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.541394][T10313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.558477][T10313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.570033][T10313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.711452][ T9054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.726167][ T9054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.769060][ T9054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.780659][ T9054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.068230][T10868] __nla_validate_parse: 3 callbacks suppressed [ 222.068250][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1776'. [ 222.092139][T10868] vlan2: entered promiscuous mode [ 222.097387][T10868] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 222.117593][T10868] mac80211_hwsim hwsim20 wlan1: left promiscuous mode [ 222.525824][T10893] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1785'. [ 222.928117][T10921] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1792'. [ 223.025196][T10926] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1795'. [ 223.035707][T10926] bridge_slave_1: left allmulticast mode [ 223.041842][T10926] bridge_slave_1: left promiscuous mode [ 223.048655][T10926] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.061146][T10926] bridge_slave_0: left allmulticast mode [ 223.072062][T10926] bridge_slave_0: left promiscuous mode [ 223.082734][T10926] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.289213][T10939] FAULT_INJECTION: forcing a failure. [ 223.289213][T10939] name failslab, interval 1, probability 0, space 0, times 0 [ 223.303552][T10939] CPU: 1 PID: 10939 Comm: syz.0.1799 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 223.313749][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 223.323823][T10939] Call Trace: [ 223.327208][T10939] [ 223.330159][T10939] dump_stack_lvl+0x241/0x360 [ 223.334861][T10939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.340073][T10939] ? __pfx__printk+0x10/0x10 [ 223.344680][T10939] ? __mutex_unlock_slowpath+0x21d/0x750 [ 223.350318][T10939] should_fail_ex+0x3b0/0x4e0 [ 223.355000][T10939] ? alloc_workqueue+0x1b0/0x2060 [ 223.360067][T10939] should_failslab+0x9/0x20 [ 223.364586][T10939] __kmalloc_noprof+0xd8/0x400 [ 223.369365][T10939] alloc_workqueue+0x1b0/0x2060 [ 223.374235][T10939] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 223.380044][T10939] ? __kasan_kmalloc_large+0x8a/0xa0 [ 223.385350][T10939] ? __pfx_alloc_workqueue+0x10/0x10 [ 223.390635][T10939] ? __kmalloc_node_noprof+0x247/0x440 [ 223.396095][T10939] ? kvmalloc_node_noprof+0x72/0x190 [ 223.401378][T10939] ? __raw_spin_lock_init+0x45/0x100 [ 223.406666][T10939] wg_newlink+0x260/0x640 [ 223.411001][T10939] ? __pfx_wg_newlink+0x10/0x10 [ 223.415851][T10939] rtnl_newlink+0x158f/0x20a0 [ 223.420521][T10939] ? __kernel_text_address+0xd/0x40 [ 223.425723][T10939] ? rtnl_newlink+0x4b1/0x20a0 [ 223.430574][T10939] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.435596][T10939] ? __pfx___mutex_trylock_common+0x10/0x10 [ 223.441513][T10939] ? __pfx_lock_release+0x10/0x10 [ 223.446548][T10939] ? __pfx_rtnl_newlink+0x10/0x10 [ 223.451586][T10939] rtnetlink_rcv_msg+0x89b/0x1180 [ 223.456637][T10939] ? rtnetlink_rcv_msg+0x208/0x1180 [ 223.461850][T10939] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.467324][T10939] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 223.473313][T10939] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.479643][T10939] ? __local_bh_enable_ip+0x168/0x200 [ 223.485007][T10939] ? lockdep_hardirqs_on+0x99/0x150 [ 223.490200][T10939] ? __local_bh_enable_ip+0x168/0x200 [ 223.495561][T10939] ? dev_hard_start_xmit+0x773/0x7e0 [ 223.500842][T10939] ? __dev_queue_xmit+0x2d2/0x3d30 [ 223.505956][T10939] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 223.511674][T10939] ? __dev_queue_xmit+0x2d2/0x3d30 [ 223.516803][T10939] ? __dev_queue_xmit+0x16c9/0x3d30 [ 223.522033][T10939] ? __dev_queue_xmit+0x2d2/0x3d30 [ 223.527164][T10939] ? ref_tracker_free+0x643/0x7e0 [ 223.532201][T10939] netlink_rcv_skb+0x1e3/0x430 [ 223.536969][T10939] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 223.542428][T10939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 223.547721][T10939] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.552920][T10939] netlink_unicast+0x7ea/0x980 [ 223.557684][T10939] ? __pfx_netlink_unicast+0x10/0x10 [ 223.562958][T10939] ? __virt_addr_valid+0x183/0x520 [ 223.568065][T10939] ? __check_object_size+0x49c/0x900 [ 223.573342][T10939] ? bpf_lsm_netlink_send+0x9/0x10 [ 223.578453][T10939] netlink_sendmsg+0x8db/0xcb0 [ 223.583219][T10939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.588500][T10939] ? __import_iovec+0x536/0x820 [ 223.593336][T10939] ? aa_sock_msg_perm+0x91/0x160 [ 223.598270][T10939] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 223.603545][T10939] ? security_socket_sendmsg+0x87/0xb0 [ 223.609001][T10939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.614280][T10939] __sock_sendmsg+0x221/0x270 [ 223.618981][T10939] ____sys_sendmsg+0x525/0x7d0 [ 223.623761][T10939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.629061][T10939] __sys_sendmsg+0x2b0/0x3a0 [ 223.633653][T10939] ? __pfx___sys_sendmsg+0x10/0x10 [ 223.638761][T10939] ? vfs_write+0x7c4/0xc90 [ 223.643205][T10939] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 223.649525][T10939] ? do_syscall_64+0x100/0x230 [ 223.654287][T10939] ? do_syscall_64+0xb6/0x230 [ 223.658957][T10939] do_syscall_64+0xf3/0x230 [ 223.663452][T10939] ? clear_bhb_loop+0x35/0x90 [ 223.668119][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.674011][T10939] RIP: 0033:0x7f08af175bd9 [ 223.678422][T10939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.698058][T10939] RSP: 002b:00007f08affbb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.706491][T10939] RAX: ffffffffffffffda RBX: 00007f08af303f60 RCX: 00007f08af175bd9 [ 223.714469][T10939] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 223.722436][T10939] RBP: 00007f08affbb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 223.730401][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 223.738380][T10939] R13: 000000000000000b R14: 00007f08af303f60 R15: 00007ffcd464c798 [ 223.746354][T10939] [ 224.134627][T10959] FAULT_INJECTION: forcing a failure. [ 224.134627][T10959] name failslab, interval 1, probability 0, space 0, times 0 [ 224.170717][T10959] CPU: 0 PID: 10959 Comm: syz.0.1805 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 224.180930][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 224.191009][T10959] Call Trace: [ 224.194297][T10959] [ 224.197228][T10959] dump_stack_lvl+0x241/0x360 [ 224.201931][T10959] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.207151][T10959] ? __pfx__printk+0x10/0x10 [ 224.211748][T10959] ? _copy_from_iter+0x26b/0x1960 [ 224.216789][T10959] should_fail_ex+0x3b0/0x4e0 [ 224.221498][T10959] ? build_skb+0x52/0x2a0 [ 224.225853][T10959] should_failslab+0x9/0x20 [ 224.230392][T10959] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 224.235798][T10959] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 224.241815][T10959] build_skb+0x52/0x2a0 [ 224.246003][T10959] ? __tun_build_skb+0x25/0x2f0 [ 224.250888][T10959] __tun_build_skb+0x33/0x2f0 [ 224.255593][T10959] tun_get_user+0x2084/0x4560 [ 224.260296][T10959] ? tun_get_user+0x84c/0x4560 [ 224.265095][T10959] ? __pfx_tun_get_user+0x10/0x10 [ 224.270147][T10959] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 224.275638][T10959] ? tun_get+0x1e/0x2f0 [ 224.279841][T10959] ? tun_get+0x1e/0x2f0 [ 224.284036][T10959] ? tun_get+0x27d/0x2f0 [ 224.288304][T10959] tun_chr_write_iter+0x113/0x1f0 [ 224.293360][T10959] vfs_write+0xa72/0xc90 [ 224.297636][T10959] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 224.303214][T10959] ? __pfx_vfs_write+0x10/0x10 [ 224.308024][T10959] ksys_write+0x1a0/0x2c0 [ 224.312388][T10959] ? __pfx_ksys_write+0x10/0x10 [ 224.313290][T10968] FAULT_INJECTION: forcing a failure. [ 224.313290][T10968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.317245][T10959] ? do_syscall_64+0x100/0x230 [ 224.317278][T10959] ? do_syscall_64+0xb6/0x230 [ 224.317303][T10959] do_syscall_64+0xf3/0x230 [ 224.317327][T10959] ? clear_bhb_loop+0x35/0x90 [ 224.348924][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.354839][T10959] RIP: 0033:0x7f08af17475f [ 224.359269][T10959] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 224.378899][T10959] RSP: 002b:00007f08aff9a010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 224.387342][T10959] RAX: ffffffffffffffda RBX: 00007f08af304038 RCX: 00007f08af17475f [ 224.395342][T10959] RDX: 0000000000000036 RSI: 0000000020000000 RDI: 00000000000000c8 [ 224.403337][T10959] RBP: 00007f08aff9a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 224.411338][T10959] R10: 0000000000000036 R11: 0000000000000293 R12: 0000000000000001 [ 224.419334][T10959] R13: 000000000000006e R14: 00007f08af304038 R15: 00007ffcd464c798 [ 224.427355][T10959] [ 224.436369][T10968] CPU: 0 PID: 10968 Comm: syz.2.1810 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 224.446560][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 224.456610][T10968] Call Trace: [ 224.459881][T10968] [ 224.462801][T10968] dump_stack_lvl+0x241/0x360 [ 224.467502][T10968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.472692][T10968] ? __pfx__printk+0x10/0x10 [ 224.477369][T10968] ? snprintf+0xda/0x120 [ 224.481625][T10968] should_fail_ex+0x3b0/0x4e0 [ 224.486314][T10968] _copy_to_user+0x2f/0xb0 [ 224.490728][T10968] simple_read_from_buffer+0xca/0x150 [ 224.496106][T10968] proc_fail_nth_read+0x1e9/0x250 [ 224.501132][T10968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.506669][T10968] ? rw_verify_area+0x514/0x6b0 [ 224.511508][T10968] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 224.517044][T10968] vfs_read+0x204/0xbd0 [ 224.521187][T10968] ? __pfx_lock_release+0x10/0x10 [ 224.526214][T10968] ? __pfx_vfs_read+0x10/0x10 [ 224.530898][T10968] ? __fget_files+0x29/0x470 [ 224.535487][T10968] ? __fget_files+0x3f6/0x470 [ 224.540164][T10968] ksys_read+0x1a0/0x2c0 [ 224.544431][T10968] ? __pfx_ksys_read+0x10/0x10 [ 224.549199][T10968] ? do_syscall_64+0x100/0x230 [ 224.553968][T10968] ? do_syscall_64+0xb6/0x230 [ 224.558644][T10968] do_syscall_64+0xf3/0x230 [ 224.563149][T10968] ? clear_bhb_loop+0x35/0x90 [ 224.567817][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.573705][T10968] RIP: 0033:0x7f5d76f746bc [ 224.578115][T10968] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 224.597716][T10968] RSP: 002b:00007f5d77d2f040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 224.606127][T10968] RAX: ffffffffffffffda RBX: 00007f5d77103f60 RCX: 00007f5d76f746bc [ 224.614089][T10968] RDX: 000000000000000f RSI: 00007f5d77d2f0b0 RDI: 0000000000000004 [ 224.622047][T10968] RBP: 00007f5d77d2f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 224.630010][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.637972][T10968] R13: 000000000000000b R14: 00007f5d77103f60 R15: 00007ffd9a5aff88 [ 224.645942][T10968] [ 224.963654][T10983] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1814'. [ 225.181350][T10988] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1818'. [ 225.545606][T11016] netlink: 'syz.3.1825': attribute type 27 has an invalid length. [ 226.119228][T11016] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.126931][T11016] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.176314][T11016] bond0: left promiscuous mode [ 226.188443][T11016] bond_slave_0: left promiscuous mode [ 226.194158][T11016] bond_slave_1: left promiscuous mode [ 226.791484][T11016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.870893][T11016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.042245][T11043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1833'. [ 227.217604][T11016] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.226515][T11016] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.247303][T11016] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.256441][T11016] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.404251][T11016] dummy0: left promiscuous mode [ 227.427611][T11016] vlan2: left allmulticast mode [ 227.519703][T11016] syz.3.1825 (11016) used greatest stack depth: 18768 bytes left [ 227.724360][T11063] netlink: 'syz.3.1837': attribute type 1 has an invalid length. [ 227.757104][T11055] xt_ipvs: protocol family 7 not supported [ 228.534096][T11111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1853'. [ 228.552126][T11111] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1853'. [ 229.085366][T11129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1860'. [ 229.096153][T11129] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1860'. [ 229.112477][T11129] FAULT_INJECTION: forcing a failure. [ 229.112477][T11129] name failslab, interval 1, probability 0, space 0, times 0 [ 229.132027][T11129] CPU: 1 PID: 11129 Comm: syz.4.1860 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 229.142229][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 229.152306][T11129] Call Trace: [ 229.155604][T11129] [ 229.158559][T11129] dump_stack_lvl+0x241/0x360 [ 229.163271][T11129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.168499][T11129] ? __pfx__printk+0x10/0x10 [ 229.173129][T11129] should_fail_ex+0x3b0/0x4e0 [ 229.177838][T11129] ? __alloc_skb+0x1c3/0x440 [ 229.182453][T11129] should_failslab+0x9/0x20 [ 229.186991][T11129] kmem_cache_alloc_node_noprof+0x71/0x320 [ 229.192828][T11129] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 229.198836][T11129] __alloc_skb+0x1c3/0x440 [ 229.203283][T11129] ? __pfx___alloc_skb+0x10/0x10 [ 229.208242][T11129] ? if_nlmsg_size+0x74f/0x7a0 [ 229.213028][T11129] ? if_nlmsg_size+0x53a/0x7a0 [ 229.217815][T11129] rtmsg_ifinfo_build_skb+0x84/0x260 [ 229.223125][T11129] ? in6_dev_get+0x22a/0x290 [ 229.227743][T11129] ? notifier_call_chain+0x162/0x3e0 [ 229.233053][T11129] rtmsg_ifinfo+0x91/0x1b0 [ 229.237496][T11129] netdev_state_change+0x139/0x1a0 [ 229.242643][T11129] ? __pfx_netdev_state_change+0x10/0x10 [ 229.248312][T11129] ? rcu_is_watching+0x15/0xb0 [ 229.253106][T11129] do_setlink+0x3e3/0x41f0 [ 229.257564][T11129] ? __pfx___nla_validate_parse+0x10/0x10 [ 229.263311][T11129] ? __pfx_do_setlink+0x10/0x10 [ 229.268208][T11129] ? __nla_validate_parse+0x26ce/0x3090 [ 229.273774][T11129] ? mark_lock+0x9a/0x350 [ 229.278229][T11129] ? __nla_parse+0x40/0x60 [ 229.282668][T11129] ? inet6_validate_link_af+0x180/0x4b0 [ 229.288235][T11129] ? inet6_validate_link_af+0x308/0x4b0 [ 229.293799][T11129] ? __pfx_inet6_validate_link_af+0x10/0x10 [ 229.299729][T11129] ? validate_linkmsg+0x75e/0x900 [ 229.304775][T11129] rtnl_setlink+0x40d/0x5a0 [ 229.309297][T11129] ? mark_lock+0x9a/0x350 [ 229.313649][T11129] ? __pfx_rtnl_setlink+0x10/0x10 [ 229.318755][T11129] ? __pfx_lock_release+0x10/0x10 [ 229.323802][T11129] ? __pfx___mutex_lock+0x10/0x10 [ 229.328870][T11129] ? __pfx_rtnl_setlink+0x10/0x10 [ 229.333916][T11129] rtnetlink_rcv_msg+0x89b/0x1180 [ 229.338969][T11129] ? rtnetlink_rcv_msg+0x208/0x1180 [ 229.344198][T11129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.349691][T11129] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 229.355692][T11129] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.362051][T11129] ? __local_bh_enable_ip+0x168/0x200 [ 229.367444][T11129] ? lockdep_hardirqs_on+0x99/0x150 [ 229.372669][T11129] ? __local_bh_enable_ip+0x168/0x200 [ 229.378060][T11129] ? dev_hard_start_xmit+0x773/0x7e0 [ 229.383369][T11129] ? __dev_queue_xmit+0x2d2/0x3d30 [ 229.388508][T11129] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 229.394248][T11129] ? __dev_queue_xmit+0x2d2/0x3d30 [ 229.399384][T11129] ? __dev_queue_xmit+0x16c9/0x3d30 [ 229.404606][T11129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.410722][T11129] ? __dev_queue_xmit+0x2d2/0x3d30 [ 229.415875][T11129] ? ref_tracker_free+0x643/0x7e0 [ 229.420939][T11129] netlink_rcv_skb+0x1e3/0x430 [ 229.425728][T11129] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 229.431206][T11129] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.436506][T11129] ? netlink_deliver_tap+0x2e/0x1b0 [ 229.441701][T11129] netlink_unicast+0x7ea/0x980 [ 229.446464][T11129] ? __pfx_netlink_unicast+0x10/0x10 [ 229.451741][T11129] ? __virt_addr_valid+0x183/0x520 [ 229.456849][T11129] ? __check_object_size+0x49c/0x900 [ 229.462126][T11129] ? bpf_lsm_netlink_send+0x9/0x10 [ 229.467238][T11129] netlink_sendmsg+0x8db/0xcb0 [ 229.472005][T11129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.477280][T11129] ? __mutex_trylock_common+0x183/0x2e0 [ 229.482820][T11129] ? aa_sock_msg_perm+0x91/0x160 [ 229.487751][T11129] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 229.493025][T11129] ? security_socket_sendmsg+0x87/0xb0 [ 229.498474][T11129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.503748][T11129] __sock_sendmsg+0x221/0x270 [ 229.508421][T11129] sock_sendmsg+0x134/0x200 [ 229.512925][T11129] ? __pfx_sock_sendmsg+0x10/0x10 [ 229.517956][T11129] ? iov_iter_bvec+0x4e/0x180 [ 229.522623][T11129] splice_to_socket+0xa13/0x10b0 [ 229.527551][T11129] ? __pfx_lock_release+0x10/0x10 [ 229.532722][T11129] ? __pfx_splice_to_socket+0x10/0x10 [ 229.538141][T11129] ? __lock_acquire+0x1346/0x1fd0 [ 229.543178][T11129] ? bpf_lsm_file_permission+0x9/0x10 [ 229.548551][T11129] ? security_file_permission+0x7f/0xa0 [ 229.554100][T11129] ? rw_verify_area+0x1d2/0x6b0 [ 229.558947][T11129] ? __pfx_splice_to_socket+0x10/0x10 [ 229.564329][T11129] do_splice+0xd77/0x1900 [ 229.568655][T11129] ? __pfx_lock_release+0x10/0x10 [ 229.573666][T11129] ? vfs_write+0x7c4/0xc90 [ 229.578076][T11129] ? __mutex_unlock_slowpath+0x21d/0x750 [ 229.583701][T11129] ? pipe_clear_nowait+0x196/0x220 [ 229.588805][T11129] ? __pfx_do_splice+0x10/0x10 [ 229.593567][T11129] __se_sys_splice+0x331/0x4a0 [ 229.598418][T11129] ? __pfx___se_sys_splice+0x10/0x10 [ 229.603693][T11129] ? do_syscall_64+0x100/0x230 [ 229.608454][T11129] ? __x64_sys_splice+0x21/0xf0 [ 229.613298][T11129] do_syscall_64+0xf3/0x230 [ 229.617799][T11129] ? clear_bhb_loop+0x35/0x90 [ 229.622466][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.628361][T11129] RIP: 0033:0x7fa59c975bd9 [ 229.632766][T11129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.652365][T11129] RSP: 002b:00007fa59d7c2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 229.660773][T11129] RAX: ffffffffffffffda RBX: 00007fa59cb04038 RCX: 00007fa59c975bd9 [ 229.668733][T11129] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000004 [ 229.676694][T11129] RBP: 00007fa59d7c20a0 R08: 00000000000008f8 R09: 0000000000000000 [ 229.684655][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.692621][T11129] R13: 000000000000006e R14: 00007fa59cb04038 R15: 00007ffd71a5c688 [ 229.700599][T11129] [ 229.728328][T11140] xt_policy: output policy not valid in PREROUTING and INPUT [ 229.748789][T11140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 229.869248][T11140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1864'. [ 229.887808][T11140] unsupported nlmsg_type 40 [ 230.437904][T11165] FAULT_INJECTION: forcing a failure. [ 230.437904][T11165] name failslab, interval 1, probability 0, space 0, times 0 [ 230.468060][T11166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1874'. [ 230.490070][T11165] CPU: 1 PID: 11165 Comm: syz.3.1875 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 230.500376][T11165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 230.509491][T11166] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1874'. [ 230.510431][T11165] Call Trace: [ 230.510445][T11165] [ 230.525593][T11165] dump_stack_lvl+0x241/0x360 [ 230.530320][T11165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.535557][T11165] ? __pfx__printk+0x10/0x10 [ 230.540188][T11165] ? arch_stack_walk+0x16d/0x1b0 [ 230.545168][T11165] should_fail_ex+0x3b0/0x4e0 [ 230.549876][T11165] ? __alloc_skb+0x1c3/0x440 [ 230.554500][T11165] should_failslab+0x9/0x20 [ 230.559124][T11165] kmem_cache_alloc_node_noprof+0x71/0x320 [ 230.564971][T11165] __alloc_skb+0x1c3/0x440 [ 230.569418][T11165] ? __pfx___alloc_skb+0x10/0x10 [ 230.574392][T11165] ? netlink_ack_tlv_len+0x6e/0x200 [ 230.579627][T11165] netlink_ack+0x13f/0xa30 [ 230.584180][T11165] netlink_rcv_skb+0x262/0x430 [ 230.589001][T11165] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 230.594494][T11165] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 230.599838][T11165] ? netlink_deliver_tap+0x2e/0x1b0 [ 230.605073][T11165] netlink_unicast+0x7ea/0x980 [ 230.609880][T11165] ? __pfx_netlink_unicast+0x10/0x10 [ 230.615194][T11165] ? __virt_addr_valid+0x183/0x520 [ 230.620339][T11165] ? __check_object_size+0x49c/0x900 [ 230.625662][T11165] ? bpf_lsm_netlink_send+0x9/0x10 [ 230.630811][T11165] netlink_sendmsg+0x8db/0xcb0 [ 230.635613][T11165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.640931][T11165] ? __import_iovec+0x536/0x820 [ 230.645807][T11165] ? aa_sock_msg_perm+0x91/0x160 [ 230.650776][T11165] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 230.656087][T11165] ? security_socket_sendmsg+0x87/0xb0 [ 230.661578][T11165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 230.666896][T11165] __sock_sendmsg+0x221/0x270 [ 230.671617][T11165] ____sys_sendmsg+0x525/0x7d0 [ 230.676433][T11165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.681857][T11165] __sys_sendmsg+0x2b0/0x3a0 [ 230.686485][T11165] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.691630][T11165] ? vfs_write+0x7c4/0xc90 [ 230.696116][T11165] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.702473][T11165] ? do_syscall_64+0x100/0x230 [ 230.707277][T11165] ? do_syscall_64+0xb6/0x230 [ 230.712004][T11165] do_syscall_64+0xf3/0x230 [ 230.716546][T11165] ? clear_bhb_loop+0x35/0x90 [ 230.721260][T11165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.727184][T11165] RIP: 0033:0x7fd0b9575bd9 [ 230.731594][T11165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.751194][T11165] RSP: 002b:00007fd0ba288048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.759601][T11165] RAX: ffffffffffffffda RBX: 00007fd0b9703f60 RCX: 00007fd0b9575bd9 [ 230.767647][T11165] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 230.775610][T11165] RBP: 00007fd0ba2880a0 R08: 0000000000000000 R09: 0000000000000000 [ 230.783579][T11165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 230.791544][T11165] R13: 000000000000000b R14: 00007fd0b9703f60 R15: 00007fff43df1388 [ 230.799517][T11165] [ 230.941214][T11172] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1878'. [ 231.010138][T11175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1879'. [ 231.239190][T11183] macvlan0: entered promiscuous mode [ 231.266820][T11183] ipvlan0: entered promiscuous mode [ 231.292182][T11183] ipvlan0: left promiscuous mode [ 231.312292][T11183] macvlan0: left promiscuous mode [ 233.478055][T11255] netlink: 'syz.4.1908': attribute type 21 has an invalid length. [ 233.794560][T11266] macsec0: entered promiscuous mode [ 233.823134][T11266] macsec0: entered allmulticast mode [ 233.850076][T11266] veth1_macvtap: entered allmulticast mode [ 234.446004][T11298] __nla_validate_parse: 3 callbacks suppressed [ 234.446025][T11298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1927'. [ 234.887968][T11316] FAULT_INJECTION: forcing a failure. [ 234.887968][T11316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.897673][T11324] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1937'. [ 234.902612][T11316] CPU: 0 PID: 11316 Comm: syz.4.1934 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 234.920305][T11316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 234.930384][T11316] Call Trace: [ 234.933692][T11316] [ 234.936638][T11316] dump_stack_lvl+0x241/0x360 [ 234.941347][T11316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.946570][T11316] ? __pfx__printk+0x10/0x10 [ 234.951199][T11316] ? __pfx_lock_release+0x10/0x10 [ 234.956251][T11316] should_fail_ex+0x3b0/0x4e0 [ 234.960948][T11316] _copy_to_iter+0x43a/0x1960 [ 234.965639][T11316] ? __pfx__copy_to_iter+0x10/0x10 [ 234.970773][T11316] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 234.976668][T11316] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 234.983005][T11316] tun_do_read+0x151b/0x2330 [ 234.987613][T11316] ? __pfx_tun_do_read+0x10/0x10 [ 234.992552][T11316] ? __pfx_default_wake_function+0x10/0x10 [ 234.998355][T11316] ? tun_get+0x1e/0x2f0 [ 235.002501][T11316] ? tun_get+0x27d/0x2f0 [ 235.006735][T11316] tun_chr_read_iter+0x13a/0x270 [ 235.011682][T11316] do_iter_readv_writev+0x5a4/0x800 [ 235.016885][T11316] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 235.022600][T11316] ? bpf_lsm_file_permission+0x9/0x10 [ 235.027962][T11316] ? security_file_permission+0x7f/0xa0 [ 235.033502][T11316] ? rw_verify_area+0x51b/0x6b0 [ 235.038343][T11316] vfs_readv+0x2b6/0xa90 [ 235.042588][T11316] ? __pfx_vfs_readv+0x10/0x10 [ 235.047354][T11316] ? __fget_files+0x29/0x470 [ 235.051951][T11316] __x64_sys_preadv+0x1c7/0x2d0 [ 235.056795][T11316] ? __pfx___x64_sys_preadv+0x10/0x10 [ 235.062159][T11316] ? do_syscall_64+0x100/0x230 [ 235.066922][T11316] ? do_syscall_64+0xb6/0x230 [ 235.071597][T11316] do_syscall_64+0xf3/0x230 [ 235.076094][T11316] ? clear_bhb_loop+0x35/0x90 [ 235.080764][T11316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.086681][T11316] RIP: 0033:0x7fa59c975bd9 [ 235.091088][T11316] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.110686][T11316] RSP: 002b:00007fa59d7e3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 235.119094][T11316] RAX: ffffffffffffffda RBX: 00007fa59cb03f60 RCX: 00007fa59c975bd9 [ 235.127052][T11316] RDX: 00000000000003e8 RSI: 0000000020001300 RDI: 0000000000000004 [ 235.135009][T11316] RBP: 00007fa59d7e30a0 R08: 0000000000000000 R09: 0000000000000000 [ 235.142968][T11316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.150931][T11316] R13: 000000000000000b R14: 00007fa59cb03f60 R15: 00007ffd71a5c688 [ 235.158905][T11316] [ 235.747220][ T5151] IPVS: starting estimator thread 0... [ 235.753477][T11355] FAULT_INJECTION: forcing a failure. [ 235.753477][T11355] name failslab, interval 1, probability 0, space 0, times 0 [ 235.773669][T11355] CPU: 0 PID: 11355 Comm: syz.4.1949 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 235.783866][T11355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 235.793956][T11355] Call Trace: [ 235.797252][T11355] [ 235.800198][T11355] dump_stack_lvl+0x241/0x360 [ 235.804932][T11355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.810166][T11355] ? __pfx__printk+0x10/0x10 [ 235.814784][T11355] ? __pfx___might_resched+0x10/0x10 [ 235.820105][T11355] should_fail_ex+0x3b0/0x4e0 [ 235.824817][T11355] ? set_mcast_msfilter+0x3d/0x370 [ 235.829966][T11355] should_failslab+0x9/0x20 [ 235.834497][T11355] __kmalloc_noprof+0xd8/0x400 [ 235.839297][T11355] set_mcast_msfilter+0x3d/0x370 [ 235.844271][T11355] ip_set_mcast_msfilter+0x326/0x3f0 [ 235.849595][T11355] do_ip_setsockopt+0x2033/0x3cd0 [ 235.854657][T11355] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 235.860060][T11355] ? aa_sk_perm+0x967/0xab0 [ 235.864604][T11355] ? __pfx_aa_sk_perm+0x10/0x10 [ 235.869492][T11355] ? __pfx_lock_acquire+0x10/0x10 [ 235.874539][T11355] ? aa_sock_opt_perm+0x79/0x120 [ 235.879512][T11355] ip_setsockopt+0x63/0x100 [ 235.884050][T11355] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 235.889973][T11355] do_sock_setsockopt+0x3af/0x720 [ 235.895036][T11355] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 235.900607][T11355] ? __fget_files+0x29/0x470 [ 235.905228][T11355] ? __fget_files+0x3f6/0x470 [ 235.909948][T11355] __sys_setsockopt+0x1ae/0x250 [ 235.914835][T11355] __x64_sys_setsockopt+0xb5/0xd0 [ 235.919890][T11355] do_syscall_64+0xf3/0x230 [ 235.924430][T11355] ? clear_bhb_loop+0x35/0x90 [ 235.927506][T11356] IPVS: using max 22 ests per chain, 52800 per kthread [ 235.929111][T11355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.929172][T11355] RIP: 0033:0x7fa59c975bd9 [ 235.929192][T11355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.966126][T11355] RSP: 002b:00007fa59d7e3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 235.974568][T11355] RAX: ffffffffffffffda RBX: 00007fa59cb03f60 RCX: 00007fa59c975bd9 [ 235.982564][T11355] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000004 [ 235.990560][T11355] RBP: 00007fa59d7e30a0 R08: 0000000000000110 R09: 0000000000000000 [ 235.998557][T11355] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000001 [ 236.006554][T11355] R13: 000000000000000b R14: 00007fa59cb03f60 R15: 00007ffd71a5c688 [ 236.014567][T11355] [ 236.462328][T11368] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1953'. [ 237.143627][T11391] macsec0: entered promiscuous mode [ 237.162481][T11391] macsec0: entered allmulticast mode [ 237.182011][T11391] veth1_macvtap: entered allmulticast mode [ 237.428120][T11402] netlink: 'syz.4.1964': attribute type 21 has an invalid length. [ 237.459291][T11402] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1964'. [ 237.932651][T11425] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1973'. [ 238.166359][T11432] netlink: 'syz.3.1976': attribute type 2 has an invalid length. [ 238.446666][T11436] lo speed is unknown, defaulting to 1000 [ 238.473232][T11441] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.509198][T11441] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.537718][T11442] FAULT_INJECTION: forcing a failure. [ 238.537718][T11442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.557820][T11441] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.582502][T11442] CPU: 0 PID: 11442 Comm: syz.4.1980 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 238.592703][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 238.594785][T11441] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.602751][T11442] Call Trace: [ 238.602764][T11442] [ 238.602774][T11442] dump_stack_lvl+0x241/0x360 [ 238.602806][T11442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 238.602831][T11442] ? __pfx__printk+0x10/0x10 [ 238.602856][T11442] ? __pfx_lock_release+0x10/0x10 [ 238.637187][T11442] should_fail_ex+0x3b0/0x4e0 [ 238.641899][T11442] _copy_from_user+0x2f/0xe0 [ 238.646511][T11442] copy_msghdr_from_user+0xae/0x680 [ 238.651740][T11442] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 238.657588][T11442] __sys_sendmsg+0x23d/0x3a0 [ 238.662199][T11442] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.667325][T11442] ? vfs_write+0x7c4/0xc90 [ 238.671799][T11442] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.678146][T11442] ? do_syscall_64+0x100/0x230 [ 238.682944][T11442] ? do_syscall_64+0xb6/0x230 [ 238.687649][T11442] do_syscall_64+0xf3/0x230 [ 238.692176][T11442] ? clear_bhb_loop+0x35/0x90 [ 238.696874][T11442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.702788][T11442] RIP: 0033:0x7fa59c975bd9 [ 238.707301][T11442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.726926][T11442] RSP: 002b:00007fa59d7c2048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.735369][T11442] RAX: ffffffffffffffda RBX: 00007fa59cb04038 RCX: 00007fa59c975bd9 [ 238.743370][T11442] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000007 [ 238.751384][T11442] RBP: 00007fa59d7c20a0 R08: 0000000000000000 R09: 0000000000000000 [ 238.759379][T11442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.767374][T11442] R13: 000000000000006e R14: 00007fa59cb04038 R15: 00007ffd71a5c688 [ 238.775383][T11442] [ 239.004002][T11442] lo speed is unknown, defaulting to 1000 [ 240.131979][T11460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1986'. [ 240.625667][T11475] bridge0: entered promiscuous mode [ 240.653669][T11475] bridge0: left promiscuous mode [ 240.873814][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1994'. [ 240.949387][T11485] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1996'. [ 240.979489][T11485] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1996'. [ 241.249842][T11494] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2001'. [ 241.320921][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2001'. [ 241.357996][T11498] netlink: 'syz.3.2001': attribute type 14 has an invalid length. [ 241.365867][T11498] netlink: 'syz.3.2001': attribute type 11 has an invalid length. [ 241.555834][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 241.573423][T11508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 241.594783][T11510] FAULT_INJECTION: forcing a failure. [ 241.594783][T11510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.625117][T11510] CPU: 1 PID: 11510 Comm: syz.4.2007 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 241.635324][T11510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 241.645396][T11510] Call Trace: [ 241.648688][T11510] [ 241.651631][T11510] dump_stack_lvl+0x241/0x360 [ 241.656337][T11510] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.661560][T11510] ? __pfx__printk+0x10/0x10 [ 241.666174][T11510] ? vfs_write+0x7c4/0xc90 [ 241.670614][T11510] should_fail_ex+0x3b0/0x4e0 [ 241.675325][T11510] _copy_from_user+0x2f/0xe0 [ 241.679933][T11510] move_addr_to_kernel+0x82/0x150 [ 241.684980][T11510] __sys_connect+0xc1/0x310 [ 241.689503][T11510] ? __pfx___sys_connect+0x10/0x10 [ 241.694648][T11510] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 241.700995][T11510] ? do_syscall_64+0x100/0x230 [ 241.705789][T11510] __x64_sys_connect+0x7a/0x90 [ 241.710575][T11510] do_syscall_64+0xf3/0x230 [ 241.715131][T11510] ? clear_bhb_loop+0x35/0x90 [ 241.719833][T11510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.725745][T11510] RIP: 0033:0x7fa59c975bd9 [ 241.730175][T11510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.749799][T11510] RSP: 002b:00007fa59d7e3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 241.758239][T11510] RAX: ffffffffffffffda RBX: 00007fa59cb03f60 RCX: 00007fa59c975bd9 [ 241.766234][T11510] RDX: 0000000000000010 RSI: 0000000020000440 RDI: 0000000000000003 [ 241.774230][T11510] RBP: 00007fa59d7e30a0 R08: 0000000000000000 R09: 0000000000000000 [ 241.782223][T11510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.790215][T11510] R13: 000000000000000b R14: 00007fa59cb03f60 R15: 00007ffd71a5c688 [ 241.798227][T11510] [ 241.891505][T11516] bridge0: entered allmulticast mode [ 241.918747][T11516] pim6reg: entered allmulticast mode [ 242.135281][T11524] FAULT_INJECTION: forcing a failure. [ 242.135281][T11524] name failslab, interval 1, probability 0, space 0, times 0 [ 242.179031][T11524] CPU: 1 PID: 11524 Comm: syz.4.2013 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 242.189248][T11524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 242.199325][T11524] Call Trace: [ 242.202621][T11524] [ 242.205564][T11524] dump_stack_lvl+0x241/0x360 [ 242.210269][T11524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.215487][T11524] ? __pfx__printk+0x10/0x10 [ 242.220102][T11524] ? is_bpf_text_address+0x285/0x2a0 [ 242.225420][T11524] should_fail_ex+0x3b0/0x4e0 [ 242.230128][T11524] ? tipc_udp_enable+0x181/0x1810 [ 242.235175][T11524] should_failslab+0x9/0x20 [ 242.239694][T11524] kmalloc_trace_noprof+0x6c/0x2c0 [ 242.244821][T11524] tipc_udp_enable+0x181/0x1810 [ 242.249677][T11524] ? stack_trace_save+0x118/0x1d0 [ 242.254779][T11524] ? __pfx_stack_trace_save+0x10/0x10 [ 242.260140][T11524] ? __pfx_tipc_udp_enable+0x10/0x10 [ 242.265419][T11524] ? stack_depot_save_flags+0x29/0x830 [ 242.270875][T11524] ? kasan_save_track+0x51/0x80 [ 242.275712][T11524] ? kasan_save_track+0x3f/0x80 [ 242.280548][T11524] ? __kasan_kmalloc+0x98/0xb0 [ 242.285300][T11524] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 242.290664][T11524] ? __tipc_nl_bearer_enable+0x9a2/0x11f0 [ 242.296382][T11524] ? tipc_nl_bearer_enable+0x22/0x40 [ 242.301655][T11524] ? genl_rcv_msg+0xb14/0xec0 [ 242.306317][T11524] ? netlink_rcv_skb+0x1e3/0x430 [ 242.311249][T11524] ? genl_rcv+0x28/0x40 [ 242.315396][T11524] ? netlink_unicast+0x7ea/0x980 [ 242.320409][T11524] ? netlink_sendmsg+0x8db/0xcb0 [ 242.325345][T11524] ? __sock_sendmsg+0x221/0x270 [ 242.330197][T11524] ? ____sys_sendmsg+0x525/0x7d0 [ 242.335122][T11524] ? __sys_sendmsg+0x2b0/0x3a0 [ 242.339874][T11524] ? do_syscall_64+0xf3/0x230 [ 242.344545][T11524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.350665][T11524] ? __kasan_kmalloc+0x98/0xb0 [ 242.355420][T11524] ? __tipc_nl_bearer_enable+0x9a2/0x11f0 [ 242.361141][T11524] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 242.366514][T11524] __tipc_nl_bearer_enable+0xa14/0x11f0 [ 242.372063][T11524] ? __pfx___tipc_nl_bearer_enable+0x10/0x10 [ 242.378042][T11524] ? trace_contention_end+0x3c/0x120 [ 242.383325][T11524] ? tipc_nl_bearer_enable+0x17/0x40 [ 242.388598][T11524] ? __pfx___mutex_lock+0x10/0x10 [ 242.393612][T11524] ? __nla_parse+0x40/0x60 [ 242.398021][T11524] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 242.404340][T11524] ? genl_family_rcv_msg_attrs_parse+0x21b/0x290 [ 242.410655][T11524] tipc_nl_bearer_enable+0x22/0x40 [ 242.415759][T11524] genl_rcv_msg+0xb14/0xec0 [ 242.420249][T11524] ? mark_lock+0x9a/0x350 [ 242.424573][T11524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.429603][T11524] ? __pfx_lock_acquire+0x10/0x10 [ 242.434616][T11524] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 242.440413][T11524] ? __pfx___might_resched+0x10/0x10 [ 242.445699][T11524] netlink_rcv_skb+0x1e3/0x430 [ 242.450460][T11524] ? __pfx_genl_rcv_msg+0x10/0x10 [ 242.455472][T11524] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 242.460760][T11524] ? __netlink_deliver_tap+0x77e/0x7c0 [ 242.466220][T11524] genl_rcv+0x28/0x40 [ 242.470203][T11524] netlink_unicast+0x7ea/0x980 [ 242.474975][T11524] ? __pfx_netlink_unicast+0x10/0x10 [ 242.480247][T11524] ? __virt_addr_valid+0x183/0x520 [ 242.485352][T11524] ? __check_object_size+0x49c/0x900 [ 242.490641][T11524] ? bpf_lsm_netlink_send+0x9/0x10 [ 242.495760][T11524] netlink_sendmsg+0x8db/0xcb0 [ 242.500524][T11524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.505804][T11524] ? __import_iovec+0x536/0x820 [ 242.510642][T11524] ? aa_sock_msg_perm+0x91/0x160 [ 242.515575][T11524] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 242.520847][T11524] ? security_socket_sendmsg+0x87/0xb0 [ 242.526324][T11524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.531621][T11524] __sock_sendmsg+0x221/0x270 [ 242.536310][T11524] ____sys_sendmsg+0x525/0x7d0 [ 242.541092][T11524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.546397][T11524] __sys_sendmsg+0x2b0/0x3a0 [ 242.550987][T11524] ? __pfx___sys_sendmsg+0x10/0x10 [ 242.556091][T11524] ? vfs_write+0x7c4/0xc90 [ 242.560534][T11524] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.566853][T11524] ? do_syscall_64+0x100/0x230 [ 242.571637][T11524] ? do_syscall_64+0xb6/0x230 [ 242.576318][T11524] do_syscall_64+0xf3/0x230 [ 242.580817][T11524] ? clear_bhb_loop+0x35/0x90 [ 242.585484][T11524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.591371][T11524] RIP: 0033:0x7fa59c975bd9 [ 242.595880][T11524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.615476][T11524] RSP: 002b:00007fa59d7e3048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.623907][T11524] RAX: ffffffffffffffda RBX: 00007fa59cb03f60 RCX: 00007fa59c975bd9 [ 242.631871][T11524] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 242.639832][T11524] RBP: 00007fa59d7e30a0 R08: 0000000000000000 R09: 0000000000000000 [ 242.647793][T11524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.655847][T11524] R13: 000000000000000b R14: 00007fa59cb03f60 R15: 00007ffd71a5c688 [ 242.663831][T11524] [ 242.679544][T11524] tipc: Enabling of bearer rejected, failed to enable media [ 242.960155][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 242.998491][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2018'. [ 243.270469][T11541] netlink: 'syz.1.2022': attribute type 6 has an invalid length. [ 243.317503][T11541] syz_tun: entered allmulticast mode [ 243.337470][T11540] syz_tun: left allmulticast mode [ 243.518366][T11545] lo speed is unknown, defaulting to 1000 [ 243.576556][T11552] netlink: 'syz.3.2024': attribute type 1 has an invalid length. [ 243.706053][T11554] netlink: 'syz.1.2026': attribute type 29 has an invalid length. [ 243.736769][T11554] netlink: 'syz.1.2026': attribute type 29 has an invalid length. [ 243.756829][T11554] netlink: 'syz.1.2026': attribute type 29 has an invalid length. [ 243.777586][T11554] netlink: 'syz.1.2026': attribute type 29 has an invalid length. [ 243.830735][T11554] netlink: 'syz.1.2026': attribute type 29 has an invalid length. [ 244.521837][T11583] netlink: 'syz.0.2039': attribute type 10 has an invalid length. [ 244.611008][T11583] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 244.842163][T11592] pim6reg: entered allmulticast mode [ 244.886933][T11592] pim6reg: left allmulticast mode [ 245.763715][T11633] __nla_validate_parse: 9 callbacks suppressed [ 245.763742][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'. [ 245.800306][T11633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'. [ 245.921370][T11642] FAULT_INJECTION: forcing a failure. [ 245.921370][T11642] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.942636][T11642] CPU: 0 PID: 11642 Comm: syz.0.2061 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 245.952855][T11642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 245.962949][T11642] Call Trace: [ 245.966250][T11642] [ 245.969290][T11642] dump_stack_lvl+0x241/0x360 [ 245.974004][T11642] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.979232][T11642] ? __pfx__printk+0x10/0x10 [ 245.983850][T11642] ? __pfx_lock_release+0x10/0x10 [ 245.988911][T11642] should_fail_ex+0x3b0/0x4e0 [ 245.993631][T11642] _copy_to_user+0x2f/0xb0 [ 245.998081][T11642] bpf_test_finish+0x593/0x8b0 [ 246.002904][T11642] ? __might_fault+0xaa/0x120 [ 246.007672][T11642] ? __pfx_bpf_test_finish+0x10/0x10 [ 246.013000][T11642] ? _copy_from_user+0xa6/0xe0 [ 246.017884][T11642] ? bpf_test_init+0x15a/0x180 [ 246.022703][T11642] bpf_prog_test_run_xdp+0x905/0x11b0 [ 246.028114][T11642] ? __pfx_lock_release+0x10/0x10 [ 246.033176][T11642] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 246.039015][T11642] ? __fget_files+0x29/0x470 [ 246.043643][T11642] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 246.049487][T11642] bpf_prog_test_run+0x33a/0x3b0 [ 246.054445][T11642] __sys_bpf+0x48d/0x810 [ 246.058701][T11642] ? __pfx___sys_bpf+0x10/0x10 [ 246.063474][T11642] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 246.069450][T11642] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 246.075771][T11642] ? do_syscall_64+0x100/0x230 [ 246.080534][T11642] __x64_sys_bpf+0x7c/0x90 [ 246.084967][T11642] do_syscall_64+0xf3/0x230 [ 246.089469][T11642] ? clear_bhb_loop+0x35/0x90 [ 246.094137][T11642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.100043][T11642] RIP: 0033:0x7f08af175bd9 [ 246.104455][T11642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.124141][T11642] RSP: 002b:00007f08affbb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 246.132658][T11642] RAX: ffffffffffffffda RBX: 00007f08af303f60 RCX: 00007f08af175bd9 [ 246.140628][T11642] RDX: 0000000000000050 RSI: 0000000020000240 RDI: 000000000000000a [ 246.148599][T11642] RBP: 00007f08affbb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.156563][T11642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.164529][T11642] R13: 000000000000000b R14: 00007f08af303f60 R15: 00007ffcd464c798 [ 246.172511][T11642] [ 246.361842][T11652] lo speed is unknown, defaulting to 1000 [ 246.545325][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2068'. [ 246.960282][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 246.997463][T11676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2072'. [ 247.085649][T11681] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2073'. [ 247.177372][T11681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.702419][T11696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2076'. [ 247.793798][T11699] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2080'. [ 248.116562][T11705] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2083'. [ 248.129481][T11705] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2083'. [ 248.166390][T11705] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 248.669909][T11726] lo speed is unknown, defaulting to 1000 [ 250.222713][T11791] FAULT_INJECTION: forcing a failure. [ 250.222713][T11791] name failslab, interval 1, probability 0, space 0, times 0 [ 250.267499][T11791] CPU: 0 PID: 11791 Comm: syz.3.2108 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 250.277736][T11791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 250.288079][T11791] Call Trace: [ 250.291349][T11791] [ 250.294269][T11791] dump_stack_lvl+0x241/0x360 [ 250.298949][T11791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.304228][T11791] ? __pfx__printk+0x10/0x10 [ 250.308818][T11791] should_fail_ex+0x3b0/0x4e0 [ 250.313491][T11791] ? __alloc_skb+0x1c3/0x440 [ 250.318080][T11791] should_failslab+0x9/0x20 [ 250.322579][T11791] kmem_cache_alloc_node_noprof+0x71/0x320 [ 250.328388][T11791] __alloc_skb+0x1c3/0x440 [ 250.332832][T11791] ? __pfx___alloc_skb+0x10/0x10 [ 250.337786][T11791] ? netlink_ack_tlv_len+0x6e/0x200 [ 250.342990][T11791] netlink_ack+0x13f/0xa30 [ 250.347438][T11791] netlink_rcv_skb+0x262/0x430 [ 250.352208][T11791] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 250.357665][T11791] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.362954][T11791] ? apparmor_capable+0x138/0x1b0 [ 250.367972][T11791] ? bpf_lsm_capable+0x9/0x10 [ 250.372641][T11791] ? security_capable+0x90/0xb0 [ 250.377505][T11791] nfnetlink_rcv+0x297/0x2a80 [ 250.382198][T11791] ? __pfx_validate_chain+0x10/0x10 [ 250.387421][T11791] ? mark_lock+0x9a/0x350 [ 250.391742][T11791] ? __pfx_validate_chain+0x10/0x10 [ 250.396941][T11791] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 250.402055][T11791] ? mark_lock+0x9a/0x350 [ 250.406382][T11791] ? __lock_acquire+0x1346/0x1fd0 [ 250.411418][T11791] ? __pfx_lock_release+0x10/0x10 [ 250.416607][T11791] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.421799][T11791] ? __pfx_lock_release+0x10/0x10 [ 250.426821][T11791] ? netlink_deliver_tap+0x2e/0x1b0 [ 250.432029][T11791] netlink_unicast+0x7ea/0x980 [ 250.436805][T11791] ? __pfx_netlink_unicast+0x10/0x10 [ 250.442083][T11791] ? __virt_addr_valid+0x183/0x520 [ 250.447196][T11791] ? __check_object_size+0x49c/0x900 [ 250.452479][T11791] ? bpf_lsm_netlink_send+0x9/0x10 [ 250.457592][T11791] netlink_sendmsg+0x8db/0xcb0 [ 250.462370][T11791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.467654][T11791] ? __import_iovec+0x536/0x820 [ 250.472492][T11791] ? aa_sock_msg_perm+0x91/0x160 [ 250.477435][T11791] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 250.482707][T11791] ? security_socket_sendmsg+0x87/0xb0 [ 250.488167][T11791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.493445][T11791] __sock_sendmsg+0x221/0x270 [ 250.498120][T11791] ____sys_sendmsg+0x525/0x7d0 [ 250.502886][T11791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.508174][T11791] __sys_sendmsg+0x2b0/0x3a0 [ 250.512792][T11791] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.517894][T11791] ? vfs_write+0x7c4/0xc90 [ 250.522350][T11791] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.528688][T11791] ? do_syscall_64+0x100/0x230 [ 250.533463][T11791] ? do_syscall_64+0xb6/0x230 [ 250.538148][T11791] do_syscall_64+0xf3/0x230 [ 250.542651][T11791] ? clear_bhb_loop+0x35/0x90 [ 250.547320][T11791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.553211][T11791] RIP: 0033:0x7fd0b9575bd9 [ 250.557619][T11791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.577235][T11791] RSP: 002b:00007fd0ba288048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.585657][T11791] RAX: ffffffffffffffda RBX: 00007fd0b9703f60 RCX: 00007fd0b9575bd9 [ 250.593632][T11791] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 250.601593][T11791] RBP: 00007fd0ba2880a0 R08: 0000000000000000 R09: 0000000000000000 [ 250.609552][T11791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.617598][T11791] R13: 000000000000000b R14: 00007fd0b9703f60 R15: 00007fff43df1388 [ 250.625570][T11791] [ 251.244378][T11815] FAULT_INJECTION: forcing a failure. [ 251.244378][T11815] name failslab, interval 1, probability 0, space 0, times 0 [ 251.287290][T11815] CPU: 0 PID: 11815 Comm: syz.2.2116 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 251.297501][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 251.307581][T11815] Call Trace: [ 251.310885][T11815] [ 251.313835][T11815] dump_stack_lvl+0x241/0x360 [ 251.318551][T11815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.323785][T11815] ? __pfx__printk+0x10/0x10 [ 251.328389][T11815] ? __pfx___might_resched+0x10/0x10 [ 251.333673][T11815] ? stack_depot_init+0x36/0x140 [ 251.338608][T11815] should_fail_ex+0x3b0/0x4e0 [ 251.343280][T11815] ? __hw_addr_add_ex+0x1a8/0x610 [ 251.348359][T11815] should_failslab+0x9/0x20 [ 251.352868][T11815] kmalloc_trace_noprof+0x6c/0x2c0 [ 251.357999][T11815] __hw_addr_add_ex+0x1a8/0x610 [ 251.362863][T11815] dev_addr_init+0x143/0x230 [ 251.367456][T11815] ? __pfx_dev_addr_init+0x10/0x10 [ 251.372574][T11815] ? rcu_is_watching+0x15/0xb0 [ 251.377339][T11815] ? read_word_at_a_time+0xe/0x20 [ 251.382364][T11815] alloc_netdev_mqs+0x2a7/0xf80 [ 251.387209][T11815] ? __pfx_br_dev_setup+0x10/0x10 [ 251.392230][T11815] rtnl_create_link+0x2f9/0xc20 [ 251.397092][T11815] rtnl_newlink+0x1421/0x20a0 [ 251.401772][T11815] ? __kernel_text_address+0xd/0x40 [ 251.406969][T11815] ? rtnl_newlink+0xab1/0x20a0 [ 251.411742][T11815] ? __pfx_rtnl_newlink+0x10/0x10 [ 251.416760][T11815] ? __pfx___mutex_trylock_common+0x10/0x10 [ 251.422651][T11815] ? rcu_is_watching+0x15/0xb0 [ 251.427409][T11815] ? trace_contention_end+0x3c/0x120 [ 251.432687][T11815] ? __mutex_lock+0x2ef/0xd70 [ 251.437362][T11815] ? __pfx_lock_release+0x10/0x10 [ 251.442391][T11815] ? __pfx_rtnl_newlink+0x10/0x10 [ 251.447412][T11815] rtnetlink_rcv_msg+0x89b/0x1180 [ 251.452437][T11815] ? rtnetlink_rcv_msg+0x208/0x1180 [ 251.457638][T11815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.463097][T11815] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 251.469071][T11815] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.475391][T11815] ? __local_bh_enable_ip+0x168/0x200 [ 251.480754][T11815] ? lockdep_hardirqs_on+0x99/0x150 [ 251.485947][T11815] ? __local_bh_enable_ip+0x168/0x200 [ 251.491307][T11815] ? dev_hard_start_xmit+0x773/0x7e0 [ 251.496583][T11815] ? __dev_queue_xmit+0x2d2/0x3d30 [ 251.501687][T11815] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 251.507403][T11815] ? __dev_queue_xmit+0x2d2/0x3d30 [ 251.512509][T11815] ? __dev_queue_xmit+0x16c9/0x3d30 [ 251.517708][T11815] ? __dev_queue_xmit+0x2d2/0x3d30 [ 251.522821][T11815] ? ref_tracker_free+0x643/0x7e0 [ 251.527848][T11815] netlink_rcv_skb+0x1e3/0x430 [ 251.532607][T11815] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.538063][T11815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.543356][T11815] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.548551][T11815] netlink_unicast+0x7ea/0x980 [ 251.553314][T11815] ? __pfx_netlink_unicast+0x10/0x10 [ 251.558596][T11815] ? __virt_addr_valid+0x183/0x520 [ 251.563718][T11815] ? __check_object_size+0x49c/0x900 [ 251.569000][T11815] ? bpf_lsm_netlink_send+0x9/0x10 [ 251.574109][T11815] netlink_sendmsg+0x8db/0xcb0 [ 251.578878][T11815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.584187][T11815] ? __import_iovec+0x536/0x820 [ 251.589030][T11815] ? aa_sock_msg_perm+0x91/0x160 [ 251.593963][T11815] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 251.599237][T11815] ? security_socket_sendmsg+0x87/0xb0 [ 251.604691][T11815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.609969][T11815] __sock_sendmsg+0x221/0x270 [ 251.614645][T11815] ____sys_sendmsg+0x525/0x7d0 [ 251.619411][T11815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.624701][T11815] __sys_sendmsg+0x2b0/0x3a0 [ 251.629286][T11815] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.634389][T11815] ? vfs_write+0x7c4/0xc90 [ 251.638830][T11815] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.645147][T11815] ? do_syscall_64+0x100/0x230 [ 251.649920][T11815] ? do_syscall_64+0xb6/0x230 [ 251.654598][T11815] do_syscall_64+0xf3/0x230 [ 251.659102][T11815] ? clear_bhb_loop+0x35/0x90 [ 251.663775][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.669669][T11815] RIP: 0033:0x7f5d76f75bd9 [ 251.674074][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.693667][T11815] RSP: 002b:00007f5d77d2f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.702076][T11815] RAX: ffffffffffffffda RBX: 00007f5d77103f60 RCX: 00007f5d76f75bd9 [ 251.710052][T11815] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 251.718012][T11815] RBP: 00007f5d77d2f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 251.725969][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.733931][T11815] R13: 000000000000000b R14: 00007f5d77103f60 R15: 00007ffd9a5aff88 [ 251.741907][T11815] [ 251.973156][T11822] __nla_validate_parse: 7 callbacks suppressed [ 251.973176][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2119'. [ 251.996267][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2119'. [ 252.586263][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 252.625720][T11854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 252.690001][T11857] netlink: 'syz.2.2133': attribute type 2 has an invalid length. [ 252.694303][T11858] FAULT_INJECTION: forcing a failure. [ 252.694303][T11858] name failslab, interval 1, probability 0, space 0, times 0 [ 252.728269][T11860] netlink: 193372 bytes leftover after parsing attributes in process `syz.1.2135'. [ 252.737303][T11858] CPU: 1 PID: 11858 Comm: syz.0.2134 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 252.747730][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 252.757780][T11858] Call Trace: [ 252.761051][T11858] [ 252.763973][T11858] dump_stack_lvl+0x241/0x360 [ 252.768652][T11858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.773846][T11858] ? __pfx__printk+0x10/0x10 [ 252.778429][T11858] ? __pfx___might_resched+0x10/0x10 [ 252.783712][T11858] should_fail_ex+0x3b0/0x4e0 [ 252.788388][T11858] ? offload_action_alloc+0x2f/0x2a0 [ 252.793667][T11858] should_failslab+0x9/0x20 [ 252.798254][T11858] __kmalloc_noprof+0xd8/0x400 [ 252.803016][T11858] ? __lock_acquire+0x1346/0x1fd0 [ 252.808036][T11858] offload_action_alloc+0x2f/0x2a0 [ 252.813140][T11858] tcf_action_offload_add_ex+0x37f/0x840 [ 252.818771][T11858] ? __pfx_tcf_action_offload_add_ex+0x10/0x10 [ 252.824938][T11858] ? tcf_action_fill_size+0x1e/0x2d0 [ 252.830223][T11858] ? tcf_action_fill_size+0x269/0x2d0 [ 252.835590][T11858] tcf_action_init+0x33b/0x940 [ 252.840353][T11858] ? __pfx_tcf_action_init+0x10/0x10 [ 252.845672][T11858] ? apparmor_capable+0x138/0x1b0 [ 252.850694][T11858] tc_ctl_action+0x47d/0xcf0 [ 252.855279][T11858] ? __kernel_text_address+0xd/0x40 [ 252.860479][T11858] ? __pfx_tc_ctl_action+0x10/0x10 [ 252.865603][T11858] ? trace_contention_end+0x3c/0x120 [ 252.870883][T11858] ? __mutex_lock+0x2ef/0xd70 [ 252.875559][T11858] ? __pfx___mutex_lock+0x10/0x10 [ 252.880585][T11858] ? __pfx_tc_ctl_action+0x10/0x10 [ 252.885685][T11858] rtnetlink_rcv_msg+0x89b/0x1180 [ 252.890712][T11858] ? rtnetlink_rcv_msg+0x208/0x1180 [ 252.895907][T11858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.901366][T11858] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.907349][T11858] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.913686][T11858] ? __local_bh_enable_ip+0x168/0x200 [ 252.919052][T11858] ? lockdep_hardirqs_on+0x99/0x150 [ 252.924246][T11858] ? __local_bh_enable_ip+0x168/0x200 [ 252.929610][T11858] ? dev_hard_start_xmit+0x773/0x7e0 [ 252.934884][T11858] ? __dev_queue_xmit+0x2d2/0x3d30 [ 252.939985][T11858] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 252.945697][T11858] ? __dev_queue_xmit+0x2d2/0x3d30 [ 252.950800][T11858] ? __dev_queue_xmit+0x16c9/0x3d30 [ 252.955999][T11858] ? __dev_queue_xmit+0x2d2/0x3d30 [ 252.961116][T11858] ? ref_tracker_free+0x643/0x7e0 [ 252.966142][T11858] netlink_rcv_skb+0x1e3/0x430 [ 252.970907][T11858] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.976369][T11858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.981677][T11858] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.986876][T11858] netlink_unicast+0x7ea/0x980 [ 252.991642][T11858] ? __pfx_netlink_unicast+0x10/0x10 [ 252.996936][T11858] ? __virt_addr_valid+0x183/0x520 [ 253.002057][T11858] ? __check_object_size+0x49c/0x900 [ 253.007337][T11858] ? bpf_lsm_netlink_send+0x9/0x10 [ 253.012453][T11858] netlink_sendmsg+0x8db/0xcb0 [ 253.017225][T11858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.022508][T11858] ? __import_iovec+0x536/0x820 [ 253.027344][T11858] ? aa_sock_msg_perm+0x91/0x160 [ 253.032277][T11858] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 253.037549][T11858] ? security_socket_sendmsg+0x87/0xb0 [ 253.043001][T11858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.048279][T11858] __sock_sendmsg+0x221/0x270 [ 253.052956][T11858] ____sys_sendmsg+0x525/0x7d0 [ 253.057721][T11858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.063010][T11858] __sys_sendmsg+0x2b0/0x3a0 [ 253.067596][T11858] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.072698][T11858] ? vfs_write+0x7c4/0xc90 [ 253.077138][T11858] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.083457][T11858] ? do_syscall_64+0x100/0x230 [ 253.088218][T11858] ? do_syscall_64+0xb6/0x230 [ 253.092902][T11858] do_syscall_64+0xf3/0x230 [ 253.097404][T11858] ? clear_bhb_loop+0x35/0x90 [ 253.102071][T11858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.107961][T11858] RIP: 0033:0x7f08af175bd9 [ 253.112366][T11858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.131962][T11858] RSP: 002b:00007f08affbb048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.140371][T11858] RAX: ffffffffffffffda RBX: 00007f08af303f60 RCX: 00007f08af175bd9 [ 253.148334][T11858] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 253.156291][T11858] RBP: 00007f08affbb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 253.164254][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 253.172214][T11858] R13: 000000000000000b R14: 00007f08af303f60 R15: 00007ffcd464c798 [ 253.180191][T11858] [ 253.208049][T11860] netlink: zone id is out of range [ 253.233979][T11860] netlink: zone id is out of range [ 253.281574][T11860] netlink: zone id is out of range [ 253.296711][T11860] netlink: zone id is out of range [ 253.303783][T11860] netlink: zone id is out of range [ 253.319198][T11860] netlink: zone id is out of range [ 253.324431][T11860] netlink: zone id is out of range [ 253.335290][T11860] netlink: zone id is out of range [ 253.343320][T11860] netlink: zone id is out of range [ 253.352432][T11860] netlink: zone id is out of range [ 253.635703][T11884] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2145'. [ 253.722021][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 253.740340][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2146'. [ 254.152929][T11900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2150'. [ 254.177056][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2150'. [ 254.548324][T11910] vxcan1: tx address claim with different name [ 254.731447][T11916] FAULT_INJECTION: forcing a failure. [ 254.731447][T11916] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.784213][T11916] CPU: 1 PID: 11916 Comm: syz.1.2156 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 254.794424][T11916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 254.804502][T11916] Call Trace: [ 254.807801][T11916] [ 254.810757][T11916] dump_stack_lvl+0x241/0x360 [ 254.815471][T11916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.820705][T11916] ? __pfx__printk+0x10/0x10 [ 254.825331][T11916] ? snprintf+0xda/0x120 [ 254.829602][T11916] should_fail_ex+0x3b0/0x4e0 [ 254.834310][T11916] _copy_to_user+0x2f/0xb0 [ 254.838754][T11916] simple_read_from_buffer+0xca/0x150 [ 254.844161][T11916] proc_fail_nth_read+0x1e9/0x250 [ 254.849208][T11916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.854781][T11916] ? rw_verify_area+0x514/0x6b0 [ 254.859671][T11916] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 254.865243][T11916] vfs_read+0x204/0xbd0 [ 254.869429][T11916] ? __pfx_lock_release+0x10/0x10 [ 254.874486][T11916] ? __pfx_vfs_read+0x10/0x10 [ 254.879187][T11916] ? bpf_prog_test_run+0x352/0x3b0 [ 254.884323][T11916] ? __fget_files+0x29/0x470 [ 254.888938][T11916] ? __fget_files+0x3f6/0x470 [ 254.893651][T11916] ksys_read+0x1a0/0x2c0 [ 254.897925][T11916] ? __pfx_ksys_read+0x10/0x10 [ 254.902714][T11916] ? do_syscall_64+0x100/0x230 [ 254.907508][T11916] ? do_syscall_64+0xb6/0x230 [ 254.912214][T11916] do_syscall_64+0xf3/0x230 [ 254.916748][T11916] ? clear_bhb_loop+0x35/0x90 [ 254.921452][T11916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.927369][T11916] RIP: 0033:0x7f655d5746bc [ 254.931810][T11916] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 254.951446][T11916] RSP: 002b:00007f655e2fc040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.959888][T11916] RAX: ffffffffffffffda RBX: 00007f655d703f60 RCX: 00007f655d5746bc [ 254.967886][T11916] RDX: 000000000000000f RSI: 00007f655e2fc0b0 RDI: 0000000000000004 [ 254.975882][T11916] RBP: 00007f655e2fc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 254.983876][T11916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.991870][T11916] R13: 000000000000000b R14: 00007f655d703f60 R15: 00007ffce2a0a308 [ 254.999881][T11916] [ 255.225004][T11924] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 255.255990][T11929] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 255.341584][T11932] netlink: 'syz.1.2162': attribute type 1 has an invalid length. [ 255.513499][ T5113] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.530807][ T5113] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.544502][ T5113] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.564055][ T5113] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.573139][ T5113] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 255.581345][ T5113] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.731628][T11936] lo speed is unknown, defaulting to 1000 [ 255.950689][ T9054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.072329][ T9054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.109697][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.116187][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.218360][ T9054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.335357][ T9054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.731692][T11967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.767119][T11968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.927328][ T9054] bridge_slave_1: left allmulticast mode [ 256.942767][ T9054] bridge_slave_1: left promiscuous mode [ 256.955430][ T9054] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.991024][ T9054] bridge_slave_0: left allmulticast mode [ 257.012587][ T9054] bridge_slave_0: left promiscuous mode [ 257.019622][ T9054] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.637211][ T5113] Bluetooth: hci5: command tx timeout [ 257.836820][ T9054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.865606][ T9054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.888342][ T9054] bond0 (unregistering): Released all slaves [ 258.067327][T11936] chnl_net:caif_netlink_parms(): no params data found [ 258.367193][T11979] __nla_validate_parse: 6 callbacks suppressed [ 258.367215][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'. [ 258.407317][T11981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2175'. [ 258.795507][T11983] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2176'. [ 258.811916][T11936] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.830766][T11936] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.847254][T11936] bridge_slave_0: entered allmulticast mode [ 258.863833][T11936] bridge_slave_0: entered promiscuous mode [ 258.919544][T11936] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.926717][T11936] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.957326][T11936] bridge_slave_1: entered allmulticast mode [ 258.964728][T11936] bridge_slave_1: entered promiscuous mode [ 259.283265][T11936] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.375884][T11936] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 259.576692][ T9054] hsr_slave_0: left promiscuous mode [ 259.596211][ T9054] hsr_slave_1: left promiscuous mode [ 259.621135][ T9054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.647179][ T9054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.682426][ T9054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.700494][ T9054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.718440][ T5113] Bluetooth: hci5: command tx timeout [ 259.759853][ T9054] veth1_macvtap: left allmulticast mode [ 259.769868][ T9054] veth1_macvtap: left promiscuous mode [ 259.775513][ T9054] veth0_macvtap: left promiscuous mode [ 259.782171][ T9054] veth1_vlan: left promiscuous mode [ 259.787760][ T9054] veth0_vlan: left promiscuous mode [ 260.772949][ T9054] team0 (unregistering): Port device team_slave_1 removed [ 260.869271][ T9054] team0 (unregistering): Port device team_slave_0 removed [ 261.790916][ T5113] Bluetooth: hci5: command tx timeout [ 262.006243][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'. [ 262.017832][T12014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2179'. [ 262.119767][T11936] team0: Port device team_slave_0 added [ 262.156384][T11936] team0: Port device team_slave_1 added [ 262.292206][T11936] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.326481][T11936] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.328759][T12043] netlink: 'syz.2.2188': attribute type 3 has an invalid length. [ 262.418058][T11936] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.447534][T11936] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.454521][T11936] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.536008][T11936] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.713762][T12053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'. [ 262.748473][T11936] hsr_slave_0: entered promiscuous mode [ 262.772417][T11936] hsr_slave_1: entered promiscuous mode [ 262.797917][T11936] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.820717][T11936] Cannot create hsr debugfs directory [ 263.457163][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 263.486443][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2197'. [ 263.877250][ T5113] Bluetooth: hci5: command tx timeout [ 263.987485][T11936] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.030498][T11936] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.073625][T11936] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.086748][T12102] FAULT_INJECTION: forcing a failure. [ 264.086748][T12102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.121257][T11936] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 264.133377][T12102] CPU: 1 PID: 12102 Comm: syz.0.2205 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 264.143586][T12102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 264.153668][T12102] Call Trace: [ 264.156980][T12102] [ 264.159932][T12102] dump_stack_lvl+0x241/0x360 [ 264.164648][T12102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.169876][T12102] ? __pfx__printk+0x10/0x10 [ 264.174496][T12102] ? __pfx_lock_release+0x10/0x10 [ 264.179555][T12102] should_fail_ex+0x3b0/0x4e0 [ 264.184265][T12102] _copy_from_iter+0x1f6/0x1960 [ 264.189145][T12102] ? __mutex_lock+0x2ef/0xd70 [ 264.193851][T12102] ? __pfx__copy_from_iter+0x10/0x10 [ 264.199162][T12102] ? alloc_pages_mpol_noprof+0x417/0x680 [ 264.204825][T12102] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 264.210830][T12102] ? page_copy_sane+0x46/0x260 [ 264.215615][T12102] copy_page_from_iter+0x7a/0x100 [ 264.220659][T12102] pipe_write+0x7fa/0x1a40 [ 264.225107][T12102] ? __pfx_pipe_write+0x10/0x10 [ 264.229965][T12102] ? bpf_lsm_file_permission+0x9/0x10 [ 264.235333][T12102] ? security_file_permission+0x7f/0xa0 [ 264.240883][T12102] vfs_write+0xa72/0xc90 [ 264.245125][T12102] ? __pfx_pipe_write+0x10/0x10 [ 264.249976][T12102] ? __pfx_vfs_write+0x10/0x10 [ 264.254749][T12102] ksys_write+0x1a0/0x2c0 [ 264.259082][T12102] ? __pfx_ksys_write+0x10/0x10 [ 264.263932][T12102] ? do_syscall_64+0x100/0x230 [ 264.268792][T12102] ? do_syscall_64+0xb6/0x230 [ 264.273471][T12102] do_syscall_64+0xf3/0x230 [ 264.277982][T12102] ? clear_bhb_loop+0x35/0x90 [ 264.282667][T12102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.288573][T12102] RIP: 0033:0x7f08af175bd9 [ 264.292998][T12102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.312691][T12102] RSP: 002b:00007f08affbb048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 264.321102][T12102] RAX: ffffffffffffffda RBX: 00007f08af303f60 RCX: 00007f08af175bd9 [ 264.329065][T12102] RDX: 00000000fffffdef RSI: 00000000200001c0 RDI: 0000000000000000 [ 264.337029][T12102] RBP: 00007f08affbb0a0 R08: 0000000000000000 R09: 0000000000000000 [ 264.344991][T12102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.352950][T12102] R13: 000000000000000b R14: 00007f08af303f60 R15: 00007ffcd464c798 [ 264.360925][T12102] [ 264.578451][T11936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.642018][T11936] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.667637][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.674808][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.708457][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.715611][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.837995][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 264.861587][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 264.904717][T11936] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.320513][T11936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.380290][T12145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2212'. [ 265.655680][T12162] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.2216'. [ 265.829102][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 265.847396][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2218'. [ 265.995348][T11936] veth0_vlan: entered promiscuous mode [ 266.061065][T11936] veth1_vlan: entered promiscuous mode [ 266.087312][T12176] FAULT_INJECTION: forcing a failure. [ 266.087312][T12176] name failslab, interval 1, probability 0, space 0, times 0 [ 266.141324][T12176] CPU: 1 PID: 12176 Comm: syz.3.2221 Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 266.151537][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 266.161615][T12176] Call Trace: [ 266.164916][T12176] [ 266.167868][T12176] dump_stack_lvl+0x241/0x360 [ 266.172583][T12176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.177821][T12176] ? __pfx__printk+0x10/0x10 [ 266.182440][T12176] ? __pfx___might_resched+0x10/0x10 [ 266.186297][T11936] veth0_macvtap: entered promiscuous mode [ 266.187739][T12176] should_fail_ex+0x3b0/0x4e0 [ 266.187773][T12176] ? ah6_init_state+0x11c/0x680 [ 266.187793][T12176] should_failslab+0x9/0x20 [ 266.207522][T12176] kmalloc_trace_noprof+0x6c/0x2c0 [ 266.212700][T12176] ah6_init_state+0x11c/0x680 [ 266.217408][T12176] ? __xfrm_init_state+0x70b/0xd70 [ 266.222545][T12176] __xfrm_init_state+0x9dd/0xd70 [ 266.227519][T12176] xfrm_init_state+0x1f/0x80 [ 266.232135][T12176] pfkey_add+0x1dfe/0x3030 [ 266.235284][T11936] veth1_macvtap: entered promiscuous mode [ 266.236570][T12176] ? __pfx_pfkey_add+0x10/0x10 [ 266.236601][T12176] ? pfkey_broadcast+0x45/0x400 [ 266.251906][T12176] ? pfkey_broadcast+0x3e1/0x400 [ 266.256882][T12176] pfkey_sendmsg+0xbaa/0x1020 [ 266.261611][T12176] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 266.266770][T12176] ? __might_fault+0xaa/0x120 [ 266.271476][T12176] ? __pfx_lock_release+0x10/0x10 [ 266.276517][T12176] ? __import_iovec+0x536/0x820 [ 266.281386][T12176] ? aa_sock_msg_perm+0x91/0x160 [ 266.281884][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.286332][T12176] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 266.286355][T12176] ? security_socket_sendmsg+0x87/0xb0 [ 266.286379][T12176] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 266.312616][T12176] __sock_sendmsg+0x221/0x270 [ 266.317329][T12176] ____sys_sendmsg+0x525/0x7d0 [ 266.322129][T12176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.327458][T12176] __sys_sendmsg+0x2b0/0x3a0 [ 266.331383][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.332067][T12176] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.332098][T12176] ? vfs_write+0x7c4/0xc90 [ 266.351470][T12176] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.357835][T12176] ? do_syscall_64+0x100/0x230 [ 266.362634][T12176] ? do_syscall_64+0xb6/0x230 [ 266.365594][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.367328][T12176] do_syscall_64+0xf3/0x230 [ 266.367358][T12176] ? clear_bhb_loop+0x35/0x90 [ 266.367377][T12176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.367401][T12176] RIP: 0033:0x7fd0b9575bd9 [ 266.367418][T12176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.367433][T12176] RSP: 002b:00007fd0ba288048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.367454][T12176] RAX: ffffffffffffffda RBX: 00007fd0b9703f60 RCX: 00007fd0b9575bd9 [ 266.405617][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.416867][T12176] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000006 [ 266.416888][T12176] RBP: 00007fd0ba2880a0 R08: 0000000000000000 R09: 0000000000000000 [ 266.416902][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.416914][T12176] R13: 000000000000000b R14: 00007fd0b9703f60 R15: 00007fff43df1388 [ 266.416941][T12176] [ 266.494163][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.512072][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.525529][T11936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.630854][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.658523][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.679648][T11936] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.713850][T11936] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.733796][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 266.743737][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 266.752772][ T5107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 266.754828][T11936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.762108][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 266.790497][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 266.798846][T11936] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.808350][T11936] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.817566][T11936] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.826504][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 266.834930][T11936] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.006042][T12193] lo speed is unknown, defaulting to 1000 [ 267.172887][ T9054] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.269685][ C0] hrtimer: interrupt took 8469891 ns [ 267.421426][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 267.445177][T12215] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 268.094055][ T9054] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.149569][ T5107] Bluetooth: hci2: command tx timeout [ 269.187284][ T9049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.195136][ T9049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.788455][T12236] sctp: [Deprecated]: syz.3.2236 (pid 12236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.788455][T12236] Use struct sctp_sack_info instead [ 270.835240][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.851023][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.427453][ T5107] Bluetooth: hci2: command tx timeout [ 274.590028][ T5107] Bluetooth: hci2: command tx timeout [ 276.677624][ T5107] Bluetooth: hci2: command tx timeout [ 276.831311][ T9054] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.861640][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2240'. [ 276.874792][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2240'. [ 279.303295][T12193] chnl_net:caif_netlink_parms(): no params data found [ 279.419635][T12284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.147739][ T9054] bond0: (slave netdevsim0): Releasing backup interface [ 286.164494][ T9054] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.635613][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 293.648747][T12306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2255'. [ 293.717724][T12308] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2256'. [ 298.331305][ T5113] Bluetooth: hci1: command 0x0406 tx timeout [ 303.538813][ T5113] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 303.609069][T12193] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.618191][T12193] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.625435][T12193] bridge_slave_0: entered allmulticast mode [ 303.640855][T12193] bridge_slave_0: entered promiscuous mode [ 303.650020][T12193] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.657305][T12193] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.664518][T12193] bridge_slave_1: entered allmulticast mode [ 303.682324][T12193] bridge_slave_1: entered promiscuous mode [ 303.894507][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 303.917822][ T5104] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.929065][ T5104] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.937700][ T5104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.945919][ T5104] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.957844][ T5104] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 303.965557][ T5104] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.043175][T12332] lo speed is unknown, defaulting to 1000 [ 309.707076][T12329] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 309.718183][ T5107] Bluetooth: hci6: command tx timeout [ 325.047942][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.054295][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.618331][ T5107] Bluetooth: hci6: command tx timeout [ 346.117148][ T5107] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 346.534957][T12337] Bluetooth: hci4: Opcode 0x0c03 failed: -4 [ 360.248773][ T5104] Bluetooth: hci6: command tx timeout [ 360.255993][ T5113] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 360.321905][ T5107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.436387][ T5108] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 360.862040][ T5107] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.870258][ T5107] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 360.886740][ T5108] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 360.914158][T12358] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 360.923360][T12358] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 360.931689][T12358] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 360.938837][T12358] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.960991][T12358] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.968748][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 360.975857][ T5107] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 360.986623][ T5107] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 360.995877][ T5107] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.011081][T12358] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 361.018882][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 361.029431][ T5107] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 361.036535][ T5107] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 361.045475][T12358] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 361.057000][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 361.064196][ T5107] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.075881][T12358] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 361.084544][T12358] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 361.091715][T12358] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 361.111229][ T5107] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 377.478466][T12359] Bluetooth: hci6: command tx timeout [ 397.688535][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 397.695758][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 421.499662][T12361] Bluetooth: hci4: command tx timeout [ 421.505568][T12361] Bluetooth: hci7: command tx timeout [ 421.512169][T12358] Bluetooth: hci2: command 0x0406 tx timeout [ 421.518380][T12359] Bluetooth: hci1: command tx timeout [ 421.524448][T12359] Bluetooth: hci8: command tx timeout [ 477.618418][ T5104] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 477.625131][T12361] Bluetooth: hci7: command tx timeout [ 477.630643][T12361] Bluetooth: hci8: command tx timeout [ 477.636039][T12361] Bluetooth: hci1: command tx timeout [ 477.642276][T12361] Bluetooth: hci4: command tx timeout [ 477.649249][T12361] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 477.728054][ T30] INFO: task kworker/1:1:50 blocked for more than 152 seconds. [ 477.735642][ T30] Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 477.744079][ T1242] ieee802154 phy0 wpan0: encryption failed: -22 [ 477.750514][ T1242] ieee802154 phy1 wpan1: encryption failed: -22 [ 477.759548][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 477.769204][ T30] task:kworker/1:1 state:D stack:21200 pid:50 tgid:50 ppid:2 flags:0x00004000 [ 477.786967][ T30] Workqueue: events switchdev_deferred_process_work [ 477.793693][ T30] Call Trace: [ 477.827277][ T30] [ 477.830264][ T30] __schedule+0x17e8/0x4a20 [ 477.834812][ T30] ? __pfx___schedule+0x10/0x10 [ 477.874339][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 477.886907][ T30] ? __pfx_lock_release+0x10/0x10 [ 477.891962][ T30] ? kick_pool+0x45c/0x620 [ 477.896395][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.911970][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 477.917656][ T30] ? schedule+0x90/0x320 [ 477.921911][ T30] schedule+0x14b/0x320 [ 477.926077][ T30] schedule_preempt_disabled+0x13/0x30 [ 477.931626][ T30] __mutex_lock+0x6a4/0xd70 [ 477.936144][ T30] ? __mutex_lock+0x527/0xd70 [ 477.940909][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 477.947072][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 477.952123][ T30] ? process_scheduled_works+0x945/0x1830 [ 477.957929][ T30] switchdev_deferred_process_work+0xe/0x20 [ 477.963839][ T30] process_scheduled_works+0xa2c/0x1830 [ 477.970460][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 477.976469][ T30] ? assign_work+0x364/0x3d0 [ 477.981566][ T30] worker_thread+0x86d/0xd50 [ 477.986191][ T30] ? __kthread_parkme+0x169/0x1d0 [ 477.991325][ T30] ? __pfx_worker_thread+0x10/0x10 [ 477.996452][ T30] kthread+0x2f0/0x390 [ 478.000626][ T30] ? __pfx_worker_thread+0x10/0x10 [ 478.005749][ T30] ? __pfx_kthread+0x10/0x10 [ 478.010453][ T30] ret_from_fork+0x4b/0x80 [ 478.014885][ T30] ? __pfx_kthread+0x10/0x10 [ 478.019858][ T30] ret_from_fork_asm+0x1a/0x30 [ 478.024655][ T30] [ 478.079975][ T30] INFO: task kworker/1:2:57 blocked for more than 179 seconds. [ 478.107041][ T30] Not tainted 6.10.0-rc5-syzkaller-00213-ge367197166a0 #0 [ 478.114800][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 478.157038][ T30] task:kworker/1:2 state:D stack:21200 pid:57 tgid:57 ppid:2 flags:0x00004000