last executing test programs: 2.763037686s ago: executing program 2 (id=3452): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x3, 0x20000000, 0x4) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="85000000110000003500000000000000850000002a0000009500000000000000f4670880271efa95b2c8c037c5a142c9a8d76287066c51adde96fcc309926fa397fabd5f9810e81ae0b737126ea6f7be39cd34d5ae35de38dde54704d25c79949c00a7c09cc28d7673294f42a5f0a8320e13fecd45c0f8612c10b100000000b0d3712c7e93363af3c075ff1e23166a32d95433008000000000000051e1cc4c45d576090c4867a7b62a7e73a0c14e97dc30fd4b393e366c6386d5ec7209d031f40f3012e9576e51a7f578602f07785b92e544fc46c744ae6af3e4195cc037102124d85cec074c6949e1298901ebb39522f6649dd76d067a82f5fe47fe5f17f9ab800f4104dbaba46aa43a815a1e5c6d1d224b64be6c4d7f47ef21eb7e46f9aa4a9779f8555eaea768c1f2c221c410ef4b253d110ee282ab7894de93d928cf95846be6277c04b48556c870814ec532b66a696a623cd8a4f8dc8dcba00b1b2d2747c45b0c52087b5efabf8496b9a951667d510ba0e3c4c00356ffebfb19a34268335648e1f844ce328c10752a42dca52fb98c1452b6518a6ef7297f7b3d0cd46dafc6ac5500f53e5309ec91d83cf4fbd775d9c07d8d591a4d8c60ff000000b78863e629b3b200000000000000000000000000008b00000000449c810d3174c87e080000003126af7a8b20744ea9875b9cba735b9594aa904e5a4bb2c3dfa80564e3e7000860000000004a2147c1128c697d9966b3c9f0e9e203911a3fac921a4fc6e625247510bc24e20ad88d3442a5d143c3047dd08e56a1b9764270c6ab800451b95e22f30a85f5681ca300000000af89a79b92a2c6743e478bd799415b6000f51168b71714bada12041752e2fcf95c1ced98fdc4f4bf2157b261380307d943b34c489734d55c4e15bbda5f5e31371c5330d920b71fbaaabd57ae73201b47f2c7e5e69a798f3c14f969fab1005e8ccedd9c46c3e39f949dd4c87ae724ef73e2abdb4485027139e9445f77e8dd3af90248ede241b408a320e069f6becd0b8405d24f0000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x2040400) pipe(&(0x7f00000001c0)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r2, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x348, 0xffffffff, 0xffffffff, 0x348, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x278, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x478) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97000788"], 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000b17651ab434494e946f899c5fed6fafeeb000000000200e40000000000000000e015ebc7f94859e05660c5dfaf6e4a07c44d7ea291812618d1af79fc2729f56bbad53aa9ec6235c2894881054b206eb3e6ddf5a2f2fd7d915a91d88288c4868e3996a5fed7e60e82706109fc29207db28f6512af3f90ae169f236bf17b5ab222be6e2c3352789c3fca9953ac4512fb56675e46f25fec0523d72a6ef57019cb4afd98c5f13470e788f56869ea8513e541c3c6037b19a903769500"/203], 0x48) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, r5, 0x241a07f23122330a, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48040}, 0x800) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r4}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000000400)={0x0, 'netdevsim0\x00', {0x1}}) socket$inet_dccp(0x2, 0x6, 0x0) 2.697422644s ago: executing program 1 (id=3454): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000300)={0x1, 0xc}, 0x8) close(0x3) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0), 0x10) recvmsg$can_raw(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}], 0x2}, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r5 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r5, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xf, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$can_raw(r1, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x0) 2.364092722s ago: executing program 3 (id=3456): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1956, 0x21, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x8001, {0x3, 0x2ff}}, {0x1, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x8, 0x9fd, {0x0, 0x8}}, {0x52f, 0x7, {0x3}}, {0x8, 0x7, {0x0, 0x13}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x2, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x0, 0x1, {0x1, 0x8000}}, {0xd, 0x3, {0x3, 0x400}}, {0xd5, 0x2, {0x1, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x9, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x1, 0x3}}, {0x7ff, 0x7, {0x1, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x7, {0x0, 0x7}}, {0x2, 0x0, {0x2, 0x3}}, {0x5, 0xb, {0x2, 0x1}}, {0x5, 0xf, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0xaa0}}, {0x9, 0x8, {0x0, 0x6}}, {0x1ff, 0x636a, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0xc, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x5, {0x2, 0x9}}, {0x400, 0x101, {0x3, 0x5}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1, 0x3}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0x20a80}}, {0x8, 0x0, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x95, 0x9, {0x2, 0x80000001}}, {0xa9, 0x6, {0x1, 0x5}}, {0x81, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000100)="259a53f271a76d2608fff74588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x2c, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x6, 0x2, [{0x2}, {0x4, 0x8}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r5, &(0x7f0000007680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x3) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, 0x0, 0x400c010) 1.831681776s ago: executing program 4 (id=3458): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) 1.724236532s ago: executing program 2 (id=3460): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000007b080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff6, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010800800154000000000200004"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="48120000", @ANYRES16=r4, @ANYBLOB="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"], 0x1248}, 0x1, 0x0, 0x0, 0x48001}, 0x800) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="34000000710073ed28bd7000ffdbdf250a0800050003000000080002000f00000008000100", @ANYRES32=0x0, @ANYBLOB="08000500a30e0000000000"], 0x34}}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x11, 0x0, 0x0, &(0x7f0000001540)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x30, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff, @void, @value}, 0x94) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r9, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x7}) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000084}, 0x40040004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000001640)={'team0\x00'}) accept4(r6, 0x0, &(0x7f0000000600), 0x0) 1.724031997s ago: executing program 1 (id=3461): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) (fail_nth: 53) 1.723807771s ago: executing program 0 (id=3462): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x64, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1d27f061244554c9, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x42, 0x6, "70dfed201442454555f1447d1276d41d0e4ba8eca0825573ad3acc36f2841aa85e9bf9ed652aa519c7e5958e1566a778d5607591c025132e86d509041e8b"}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}}, @NFT_MSG_DELFLOWTABLE={0x40, 0x18, 0xa, 0x202, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x4}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xf4}, 0x1, 0x0, 0x0, 0x8004041}, 0x20000814) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r3, @ANYBLOB="83040500010000003000128008000100677265002400028008000700ac1414000500"], 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty}}}], 0x20, 0x97ff}}], 0x1, 0x0) 1.657888569s ago: executing program 2 (id=3463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001440)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000100)="9ddfc5a2c87fe3", 0xfffffdef}], 0x1}], 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r8 = openat$cgroup_procs(r6, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0), 0x12) preadv(r8, &(0x7f0000000600)=[{&(0x7f0000001700)=""/172, 0xac}], 0x1, 0x103, 0x0) setsockopt$inet6_tcp_int(r2, 0x11a, 0x3, &(0x7f00000001c0)=0xf3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @random="bd66a4830a18"}) write$tun(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="10000000ffffffffffffaaaaaaaaaa0088a83e008100480008004500001400000000002f9078000000000a010101a00088f7"], 0x3a) 1.613574729s ago: executing program 4 (id=3464): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = socket(0x200000000000011, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x7fffffff, 0x34}, 0x1c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x10}]}, 0x2c}, 0x1, 0x20, 0x0, 0xc1}, 0x80) 1.266970897s ago: executing program 0 (id=3465): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000d04000000000000000000000004", @ANYRES32=r2, @ANYBLOB="60c000000800000024001280110001006272696467655f736c617665000000000c0005800800", @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x95}, 0x0) 981.944156ms ago: executing program 1 (id=3466): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) r1 = socket(0x11, 0x800000003, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080)=0xd, 0x4) (async) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000080)=0xd, 0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) 974.597845ms ago: executing program 4 (id=3467): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000400010000000400048008000200010000000800010000000000380008801400078008000600fe0000"], 0x60}}, 0x0) 909.139935ms ago: executing program 3 (id=3468): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) r1 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x107, 0x18, 0x0, 0x20000000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x7c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}]}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip,mac\x00'}]}, 0x91}}, 0x814) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$int_out(r4, 0x5460, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x4001, 0x3, 0x1318, 0x1158, 0x0, 0x148, 0x0, 0x148, 0x1280, 0x240, 0x240, 0x1280, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @remote, 0x0, 0x0, 'ip6gretap0\x00', 'bridge0\x00'}, 0x0, 0x10f8, 0x1158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x0, 0x0, './cgroup/syz0\x00'}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1378) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffff963}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000071120d000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYRES32=r6], 0xc) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000300)=@req3={0x0, 0xfffffffc, 0xb, 0xbf, 0x0, 0xdfd5, 0x7fffffff}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r7 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r7, &(0x7f0000003e00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)='!', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_init_net_socket$ax25(0x3, 0x2, 0x6) 768.281555ms ago: executing program 0 (id=3469): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 767.586347ms ago: executing program 2 (id=3470): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x84}, {@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4d5, 0x6c}, @in6=@dev={0xfe, 0x80, '\x00', 0x1f}, {0x0, 0x2000000}, {0x8000, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x70bd2b, 0x0, 0x2, 0x0, 0x0, 0x22}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}]}, 0x138}}, 0x0) 729.005929ms ago: executing program 3 (id=3471): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000000010104000000000000000002000000240001801400018008000100ac14140008000200ac1414bb0c00028005000100000000002400028014000180080001007f00000108000200ac1414aa0c000280050001000000000008000740000000002c000e800c00028005000100000000001400018008000100ac1414aa080002", @ANYRES16=r0], 0x90}}, 0x0) 708.69464ms ago: executing program 4 (id=3472): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="35d1a38163cfe5cdd6d1cbbd0a78836bbb76edb5794423f97f47dc8eab6a0133322fa6eb8a6b49cd75d3cfcba0a12278e4a276d650f0833a0e9ded24a2ef7963ebb9bbff56522b672000", @ANYRES64=0x0], 0x10) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r3}, &(0x7f0000000500), &(0x7f0000000540)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e00000004000000050000001200000000000000", @ANYRESDEC=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000e4f67c0413a03d3d02a348734823a9ea8d4982ff5efcb1dd9d8ca0b88661522ca8b5ce7f03d20ade22b70a6a1ba1ba973537affbc6f5b8d38f72d03f9018685f5444506d9710d815ca9fb97ab478dc1320813e414114033679c757976b0e6dbc8483de8ef80703d588831ab6e03b164a159aa61c6ad4b81984ad433f92f1f81b04cff963a038ee5d04622ca494c6c01e3e474ef3e89"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000100), &(0x7f0000000180)=r1}, 0x20) close(r1) socketpair(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000140), &(0x7f0000000280)=r1}, 0x20) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000003c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008"], 0x398}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="34a5e153f6a7ffffff03ffff88a8000081"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000800)={'geneve0\x00'}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f00000002c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e22, @local}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r10, 0x100}, &(0x7f0000000080)=0x8) 659.80617ms ago: executing program 1 (id=3473): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x2, 0xf000000) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c0001000000000000000c000400008010000c"], 0x24}], 0x1}, 0x0) 554.124634ms ago: executing program 3 (id=3474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 541.803953ms ago: executing program 2 (id=3475): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="cce19689bfd0fe633f858338466c61f7d3d5bb3dbbdac81dd8416936d7f44ffbca289fa300389948e0401f9012ab83f503487ead15130f5e9cb992e0f2b46b1f0b23f5dcd3d18686f01345430999cbd1aa95f7628d67583a09e0d7f7fec7d9fe5b1baed14ba1b7f905b3", 0x6a}, {&(0x7f0000000000)="1324c2394d5f45244fb3c128bb23b28c3153fa8971ef", 0x16}], 0x2, 0x0, 0x0, 0x400fff0}, 0x20000000) 512.715062ms ago: executing program 4 (id=3476): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x48, r0, 0xfaac4106a1b87a7, 0xffffffff, 0xffffffa1, {0x7}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xec0}, 0x0) 380.274044ms ago: executing program 3 (id=3477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) (async) unshare(0x20000080) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x1, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x0, 0x2}], "f841"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "1ba4"}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000300)=""/2, 0x44, 0x2, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c9, &(0x7f0000000100)) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6}, 0x10) 380.009825ms ago: executing program 2 (id=3478): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002e40)=@polexpire={0xc0, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@private1, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffc}, 0x0, 0x0, 0x3, 0x0, 0x3}}}, 0xc0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0x2c, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000410}, 0x20000015) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64=r5, @ANYRESOCT=r1, @ANYRES64=r6], 0x34}}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000500)="d719") ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e21, 0x2, @loopback, 0x9}, 0x1c) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="107a3d34402fa409000000000000007c87a3af4240c010138a42bf7b8d6631000019200001002bbd7000ffdbdf250210040000000001030000ddedd67d1dc7f437a65d91aee5ee7d899376178872866bce1cdc"], 0x2c}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r12) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000101180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000e500010000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 288.572477ms ago: executing program 3 (id=3479): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'mangle\x00', 0x0, [0xe36c, 0x2c00f, 0x0, 0x8, 0x3]}, &(0x7f0000000100)=0x54) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xa0, 0x0, 0xa00, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7a}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x61, 0x20}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x33}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x25}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf71}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x869c}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008040}, 0x40812) 281.694871ms ago: executing program 0 (id=3480): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="8500000035000000d500070000000000950000000000000053553a606a8c1a11daf216fccdcba80e77b6"], &(0x7f0000000000)='GPL\x00', 0x5, 0x1af, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 245.174793ms ago: executing program 4 (id=3481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000d00)=0x2, 0x4) listen(0xffffffffffffffff, 0x491) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x34, r4, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x0) accept4(r2, 0x0, 0x0, 0x0) close(r1) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r0, @ANYRESOCT=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffdc8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848360000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r11 = openat$cgroup_ro(r9, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, r11, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000500)=[{r7}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 159.376131ms ago: executing program 1 (id=3482): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x510, 0x2e0, 0xd0, 0x2e0, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x570) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000000000038005080080003000bac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 159.198678ms ago: executing program 0 (id=3483): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14, &(0x7f0000000180)={0x0, 0x25}, 0x1, 0x0, 0x0, 0x24044001}, 0x8080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4000000000000007900c8000000000006000000000000009500000c000000005227b82e49b66db0bf0134d3b9e309646f0e5023b22ec11768f37ae44eb780bb440401fdd0db"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 261.253µs ago: executing program 0 (id=3484): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="a5", 0x34000, 0x4001, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 0s ago: executing program 1 (id=3485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x6000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x4}}}, {0x34, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_CMP_OP={0x8}, @NFTA_CMP_DATA={0x4}, @NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "efbb17b799"}]}, @NFTA_CMP_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xec}}, 0x0) kernel console output (not intermixed with test programs): 651][T13497] _copy_from_user+0x2f/0xc0 [ 292.275284][T13497] copy_msghdr_from_user+0xae/0x680 [ 292.280518][T13497] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 292.286344][T13497] ? __fget_files+0x2a/0x410 [ 292.290949][T13497] ? __fget_files+0x2a/0x410 [ 292.295556][T13497] __sys_sendmsg+0x209/0x350 [ 292.300171][T13497] ? __pfx_lock_release+0x10/0x10 [ 292.305221][T13497] ? __pfx___sys_sendmsg+0x10/0x10 [ 292.310366][T13497] ? __pfx_vfs_write+0x10/0x10 [ 292.315169][T13497] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 292.321524][T13497] ? do_syscall_64+0x100/0x230 [ 292.326324][T13497] ? do_syscall_64+0xb6/0x230 [ 292.329672][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888059e42c00: rx timeout, send abort [ 292.331005][T13497] do_syscall_64+0xf3/0x230 [ 292.331030][T13497] ? clear_bhb_loop+0x35/0x90 [ 292.331056][T13497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.339601][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888059e42c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 292.343760][T13497] RIP: 0033:0x7fcb37385d29 [ 292.343782][T13497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.343799][T13497] RSP: 002b:00007fcb38126038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.401155][T13497] RAX: ffffffffffffffda RBX: 00007fcb37575fa0 RCX: 00007fcb37385d29 [ 292.409157][T13497] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 292.417161][T13497] RBP: 00007fcb38126090 R08: 0000000000000000 R09: 0000000000000000 [ 292.425158][T13497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.433156][T13497] R13: 0000000000000000 R14: 00007fcb37575fa0 R15: 00007ffe2bed1448 [ 292.441173][T13497] [ 292.454875][T13505] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 292.612844][T13517] IPVS: set_ctl: invalid protocol: 59 172.20.20.17:20002 [ 292.622298][T13519] tipc: Enabling of bearer rejected, failed to enable media [ 292.706673][T13522] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 292.713596][T13522] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 293.285910][T13546] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.293077][T13546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.343508][T13546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 293.525334][T13562] __nla_validate_parse: 17 callbacks suppressed [ 293.525354][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2745'. [ 293.691154][T13568] set match dimension is over the limit! [ 293.748740][T13568] pim6reg: entered allmulticast mode [ 293.791892][T13568] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 293.811803][T13568] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 293.822807][T13568] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 293.835128][T13568] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 294.172120][T13590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2757'. [ 294.222100][T13592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2753'. [ 294.233123][T13592] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2753'. [ 294.244943][T13592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2753'. [ 294.254172][T13592] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2753'. [ 294.473176][T13602] netlink: 'syz.0.2761': attribute type 10 has an invalid length. [ 294.495818][T13604] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2762'. [ 294.543103][T13604] netlink: 'syz.4.2762': attribute type 5 has an invalid length. [ 294.614523][T13609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2764'. [ 294.699304][T13613] netlink: 'syz.0.2767': attribute type 4 has an invalid length. [ 294.820025][T13621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2769'. [ 294.933728][T13624] netlink: 'syz.4.2770': attribute type 7 has an invalid length. [ 295.166292][T13638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2776'. [ 295.167804][T13636] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 295.450811][T13648] netlink: 'syz.2.2779': attribute type 25 has an invalid length. [ 296.036674][T13674] netlink: 'syz.2.2791': attribute type 12 has an invalid length. [ 296.580186][T13707] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸Ú' [ 296.602397][T13707] CPU: 1 UID: 0 PID: 13707 Comm: syz.3.2801 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 296.613224][T13707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 296.623315][T13707] Call Trace: [ 296.626618][T13707] [ 296.629569][T13707] dump_stack_lvl+0x241/0x360 [ 296.634297][T13707] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.639496][T13707] ? __pfx__printk+0x10/0x10 [ 296.644082][T13707] ? __kmalloc_cache_noprof+0x243/0x390 [ 296.649638][T13707] ? sysfs_warn_dup+0x51/0xa0 [ 296.654345][T13707] sysfs_warn_dup+0x8e/0xa0 [ 296.658878][T13707] sysfs_do_create_link_sd+0xbe/0x110 [ 296.664281][T13707] device_add_class_symlinks+0x1c5/0x250 [ 296.669943][T13707] device_add+0x553/0xbf0 [ 296.674301][T13707] wiphy_register+0x1a58/0x27b0 [ 296.679197][T13707] ? __pfx_wiphy_register+0x10/0x10 [ 296.684416][T13707] ? minstrel_ht_alloc+0x72b/0x860 [ 296.689569][T13707] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 296.695674][T13707] ieee80211_register_hw+0x30fb/0x3e10 [ 296.701166][T13707] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 296.707538][T13707] ? ieee80211_register_hw+0x14c1/0x3e10 [ 296.713199][T13707] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 296.719048][T13707] ? __asan_memset+0x23/0x50 [ 296.723653][T13707] ? __hrtimer_init+0x170/0x250 [ 296.728503][T13707] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 296.734238][T13707] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 296.740306][T13707] ? kstrndup+0x5c/0xb0 [ 296.744467][T13707] ? __asan_memcpy+0x40/0x70 [ 296.749078][T13707] hwsim_new_radio_nl+0xece/0x2290 [ 296.754211][T13707] ? __pfx___nla_validate_parse+0x10/0x10 [ 296.759953][T13707] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 296.765538][T13707] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 296.771893][T13707] genl_rcv_msg+0xb14/0xec0 [ 296.776402][T13707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.781442][T13707] ? __pfx_lock_acquire+0x10/0x10 [ 296.786476][T13707] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 296.792016][T13707] ? __pfx___might_resched+0x10/0x10 [ 296.797301][T13707] netlink_rcv_skb+0x1e3/0x430 [ 296.802064][T13707] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.807106][T13707] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.812420][T13707] genl_rcv+0x28/0x40 [ 296.816400][T13707] netlink_unicast+0x7f6/0x990 [ 296.821163][T13707] ? __pfx_netlink_unicast+0x10/0x10 [ 296.826439][T13707] ? __virt_addr_valid+0x45f/0x530 [ 296.831552][T13707] ? __phys_addr_symbol+0x2f/0x70 [ 296.836574][T13707] ? __check_object_size+0x47a/0x730 [ 296.841873][T13707] netlink_sendmsg+0x8e4/0xcb0 [ 296.846640][T13707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.851926][T13707] ? aa_sock_msg_perm+0x91/0x160 [ 296.856870][T13707] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.862152][T13707] __sock_sendmsg+0x221/0x270 [ 296.866848][T13707] ____sys_sendmsg+0x52a/0x7e0 [ 296.871648][T13707] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.876939][T13707] ? __fget_files+0x2a/0x410 [ 296.881529][T13707] ? __fget_files+0x2a/0x410 [ 296.886141][T13707] __sys_sendmsg+0x269/0x350 [ 296.890751][T13707] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.895888][T13707] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.902213][T13707] ? do_syscall_64+0x100/0x230 [ 296.906989][T13707] ? do_syscall_64+0xb6/0x230 [ 296.911686][T13707] do_syscall_64+0xf3/0x230 [ 296.916183][T13707] ? clear_bhb_loop+0x35/0x90 [ 296.920861][T13707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.926752][T13707] RIP: 0033:0x7f85ceb85d29 [ 296.931170][T13707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.950784][T13707] RSP: 002b:00007f85cf9e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.959227][T13707] RAX: ffffffffffffffda RBX: 00007f85ced75fa0 RCX: 00007f85ceb85d29 [ 296.967201][T13707] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 296.975191][T13707] RBP: 00007f85cec01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 296.983165][T13707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.991131][T13707] R13: 0000000000000000 R14: 00007f85ced75fa0 R15: 00007fffb74afaf8 [ 296.999122][T13707] [ 297.158898][T13717] netlink: 'syz.0.2805': attribute type 12 has an invalid length. [ 297.235044][T10196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.263617][T10196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.847661][T13758] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 298.381251][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.400294][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.421822][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.443749][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.459426][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 298.468602][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.499645][T13793] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 298.539963][T13795] __nla_validate_parse: 13 callbacks suppressed [ 298.539985][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2835'. [ 298.579851][T13786] lo speed is unknown, defaulting to 1000 [ 298.679888][T13798] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2836'. [ 298.716894][T13801] SET target dimension over the limit! [ 298.772017][T13795] lo speed is unknown, defaulting to 1000 [ 298.794189][T13786] lo speed is unknown, defaulting to 1000 [ 299.021197][T13786] chnl_net:caif_netlink_parms(): no params data found [ 299.140661][T13795] lo speed is unknown, defaulting to 1000 [ 299.150040][T13814] netlink: 'syz.2.2841': attribute type 4 has an invalid length. [ 299.158065][T13813] netlink: 'syz.4.2840': attribute type 8 has an invalid length. [ 299.186508][T13814] netlink: 'syz.2.2841': attribute type 4 has an invalid length. [ 299.377423][T13786] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.386208][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2842'. [ 299.400801][T13786] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.420233][T13786] bridge_slave_0: entered allmulticast mode [ 299.437237][T13786] bridge_slave_0: entered promiscuous mode [ 299.495627][T13786] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.511244][T13786] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.548964][T13786] bridge_slave_1: entered allmulticast mode [ 299.569092][T13786] bridge_slave_1: entered promiscuous mode [ 299.675322][T13786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.736647][T13786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.849655][T13835] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2847'. [ 299.964360][T13786] team0: Port device team_slave_0 added [ 299.992352][T13786] team0: Port device team_slave_1 added [ 300.155899][T13786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.162906][T13786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.209198][T13786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.236052][T13786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.243048][T13786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.270629][T13786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.319378][T13786] hsr_slave_0: entered promiscuous mode [ 300.336295][T13786] hsr_slave_1: entered promiscuous mode [ 300.343024][T13786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.358779][T13786] Cannot create hsr debugfs directory [ 300.364649][T13846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2851'. [ 300.376158][T13848] FAULT_INJECTION: forcing a failure. [ 300.376158][T13848] name failslab, interval 1, probability 0, space 0, times 0 [ 300.392150][T13848] CPU: 1 UID: 0 PID: 13848 Comm: syz.4.2852 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 300.402958][T13848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 300.413039][T13848] Call Trace: [ 300.416353][T13848] [ 300.419297][T13848] dump_stack_lvl+0x241/0x360 [ 300.424009][T13848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.429243][T13848] ? __pfx__printk+0x10/0x10 [ 300.433862][T13848] ? kmem_cache_alloc_noprof+0x48/0x380 [ 300.439436][T13848] ? __pfx___might_resched+0x10/0x10 [ 300.444774][T13848] should_fail_ex+0x3b0/0x4e0 [ 300.449479][T13848] should_failslab+0xac/0x100 [ 300.454210][T13848] ? __kernfs_new_node+0xd8/0x870 [ 300.459232][T13848] kmem_cache_alloc_noprof+0x70/0x380 [ 300.464610][T13848] __kernfs_new_node+0xd8/0x870 [ 300.469474][T13848] ? up_write+0x1a9/0x590 [ 300.473806][T13848] ? __pfx___kernfs_new_node+0x10/0x10 [ 300.479269][T13848] ? __pfx_up_write+0x10/0x10 [ 300.483985][T13848] kernfs_new_node+0x137/0x240 [ 300.488756][T13848] __kernfs_create_file+0x49/0x2e0 [ 300.493870][T13848] sysfs_add_file_mode_ns+0x24a/0x310 [ 300.499253][T13848] internal_create_group+0x782/0x12d0 [ 300.504632][T13848] ? __pfx_up_write+0x10/0x10 [ 300.509308][T13848] ? __pfx_internal_create_group+0x10/0x10 [ 300.515120][T13848] sysfs_create_groups+0x56/0x120 [ 300.520143][T13848] device_add_attrs+0xe5/0x600 [ 300.524904][T13848] ? __pfx_device_add_attrs+0x10/0x10 [ 300.530286][T13848] device_add+0x576/0xbf0 [ 300.534615][T13848] ? device_initialize+0x266/0x460 [ 300.539724][T13848] netdev_register_kobject+0x157/0x2e0 [ 300.545202][T13848] register_netdevice+0x12c5/0x1b00 [ 300.550412][T13848] ? __pfx_register_netdevice+0x10/0x10 [ 300.555958][T13848] ? __kasan_kmalloc+0x98/0xb0 [ 300.560720][T13848] ? register_vlan_dev+0x342/0x810 [ 300.565843][T13848] register_vlan_dev+0x38c/0x810 [ 300.570797][T13848] vlan_newlink+0x476/0x5c0 [ 300.575304][T13848] ? __pfx_vlan_newlink+0x10/0x10 [ 300.580328][T13848] rtnl_newlink_create+0x2ee/0xa40 [ 300.585449][T13848] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 300.591088][T13848] ? ns_capable+0x8a/0xf0 [ 300.595424][T13848] rtnl_newlink+0x1c7e/0x2210 [ 300.600117][T13848] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.605141][T13848] ? __netlink_deliver_tap+0x56b/0x7f0 [ 300.610607][T13848] ? __pfx_validate_chain+0x10/0x10 [ 300.615806][T13848] ? __sock_sendmsg+0x221/0x270 [ 300.620660][T13848] ? ____sys_sendmsg+0x52a/0x7e0 [ 300.625594][T13848] ? __sys_sendmsg+0x269/0x350 [ 300.630363][T13848] ? do_syscall_64+0xf3/0x230 [ 300.635053][T13848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.641140][T13848] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 300.647132][T13848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.653474][T13848] ? mark_lock+0x9a/0x360 [ 300.657806][T13848] ? __lock_acquire+0x1397/0x2100 [ 300.662850][T13848] ? __pfx_lock_release+0x10/0x10 [ 300.667972][T13848] ? __pfx_rtnl_newlink+0x10/0x10 [ 300.673007][T13848] rtnetlink_rcv_msg+0x791/0xcf0 [ 300.677942][T13848] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 300.683061][T13848] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.688536][T13848] ? ref_tracker_free+0x643/0x7e0 [ 300.693573][T13848] netlink_rcv_skb+0x1e3/0x430 [ 300.698341][T13848] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.703800][T13848] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.709122][T13848] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.714339][T13848] netlink_unicast+0x7f6/0x990 [ 300.719121][T13848] ? __pfx_netlink_unicast+0x10/0x10 [ 300.724407][T13848] ? __virt_addr_valid+0x45f/0x530 [ 300.729519][T13848] ? __phys_addr_symbol+0x2f/0x70 [ 300.734543][T13848] ? __check_object_size+0x47a/0x730 [ 300.739860][T13848] netlink_sendmsg+0x8e4/0xcb0 [ 300.744634][T13848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.750085][T13848] ? aa_sock_msg_perm+0x91/0x160 [ 300.755023][T13848] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.760306][T13848] __sock_sendmsg+0x221/0x270 [ 300.764986][T13848] ____sys_sendmsg+0x52a/0x7e0 [ 300.769755][T13848] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.775046][T13848] ? __fget_files+0x2a/0x410 [ 300.779639][T13848] ? __fget_files+0x2a/0x410 [ 300.784264][T13848] __sys_sendmsg+0x269/0x350 [ 300.788895][T13848] ? __pfx_lock_release+0x10/0x10 [ 300.793930][T13848] ? __pfx___sys_sendmsg+0x10/0x10 [ 300.799118][T13848] ? __pfx_vfs_write+0x10/0x10 [ 300.803900][T13848] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 300.810229][T13848] ? do_syscall_64+0x100/0x230 [ 300.814993][T13848] ? do_syscall_64+0xb6/0x230 [ 300.819670][T13848] do_syscall_64+0xf3/0x230 [ 300.824171][T13848] ? clear_bhb_loop+0x35/0x90 [ 300.828848][T13848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.834738][T13848] RIP: 0033:0x7f6943385d29 [ 300.839149][T13848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.858764][T13848] RSP: 002b:00007f69442a2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.867180][T13848] RAX: ffffffffffffffda RBX: 00007f6943575fa0 RCX: 00007f6943385d29 [ 300.875144][T13848] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 300.883108][T13848] RBP: 00007f69442a2090 R08: 0000000000000000 R09: 0000000000000000 [ 300.891073][T13848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 300.899062][T13848] R13: 0000000000000000 R14: 00007f6943575fa0 R15: 00007fff3afd02f8 [ 300.907054][T13848] [ 300.914868][ T5840] Bluetooth: hci5: command tx timeout [ 300.918958][T13850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2853'. [ 301.130194][T13858] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2857'. [ 301.180032][T13786] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.190473][T13786] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.230882][T13861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2858'. [ 301.273714][T13786] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.285760][T13786] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.307067][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2860'. [ 301.340182][T13786] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.369583][T13786] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.397569][T13867] netlink: 'syz.1.2858': attribute type 1 has an invalid length. [ 301.413722][T13867] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2858'. [ 301.465017][T13786] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.484003][T13786] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.553651][T13874] netlink: 'syz.2.2863': attribute type 1 has an invalid length. [ 301.596130][ T5840] block nbd2: Receive control failed (result -107) [ 301.697475][T13786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.708083][T13786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.746081][T13786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.760106][T13786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.927691][T13786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.945359][T13786] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.960381][T10191] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.967567][T10191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.018422][T10198] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.025618][T10198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.175777][T13904] FAULT_INJECTION: forcing a failure. [ 302.175777][T13904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.224726][T13904] CPU: 0 UID: 0 PID: 13904 Comm: syz.4.2870 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 302.235559][T13904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 302.245644][T13904] Call Trace: [ 302.248949][T13904] [ 302.251903][T13904] dump_stack_lvl+0x241/0x360 [ 302.256620][T13904] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.261848][T13904] ? __pfx__printk+0x10/0x10 [ 302.266467][T13904] ? __pfx_lock_release+0x10/0x10 [ 302.271527][T13904] should_fail_ex+0x3b0/0x4e0 [ 302.276265][T13904] _copy_from_user+0x2f/0xc0 [ 302.280900][T13904] copy_msghdr_from_user+0xae/0x680 [ 302.286134][T13904] ? __pfx___might_resched+0x10/0x10 [ 302.291444][T13904] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 302.297288][T13904] ? do_recvmmsg+0x44e/0xab0 [ 302.301910][T13904] ? __might_fault+0xaa/0x120 [ 302.306597][T13904] do_recvmmsg+0x3bd/0xab0 [ 302.311030][T13904] ? __pfx_do_recvmmsg+0x10/0x10 [ 302.315988][T13904] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 302.321889][T13904] ? ksys_write+0x22a/0x2b0 [ 302.326398][T13904] ? __pfx_lock_release+0x10/0x10 [ 302.331427][T13904] ? vfs_write+0x730/0xd30 [ 302.335847][T13904] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.341828][T13904] ? __fget_files+0x2a/0x410 [ 302.346430][T13904] __x64_sys_recvmmsg+0x199/0x250 [ 302.351455][T13904] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 302.357002][T13904] ? do_syscall_64+0x100/0x230 [ 302.361768][T13904] ? do_syscall_64+0xb6/0x230 [ 302.366446][T13904] do_syscall_64+0xf3/0x230 [ 302.370948][T13904] ? clear_bhb_loop+0x35/0x90 [ 302.375628][T13904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.381517][T13904] RIP: 0033:0x7f6943385d29 [ 302.385928][T13904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.405533][T13904] RSP: 002b:00007f6944281038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 302.413944][T13904] RAX: ffffffffffffffda RBX: 00007f6943576080 RCX: 00007f6943385d29 [ 302.421911][T13904] RDX: 000000000000072a RSI: 0000000020000080 RDI: 0000000000000006 [ 302.429878][T13904] RBP: 00007f6944281090 R08: 0000000000000000 R09: 0000000000000000 [ 302.437843][T13904] R10: 0000000000000500 R11: 0000000000000246 R12: 0000000000000002 [ 302.445810][T13904] R13: 0000000000000000 R14: 00007f6943576080 R15: 00007fff3afd02f8 [ 302.453791][T13904] [ 302.754211][T13786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.889618][T13786] veth0_vlan: entered promiscuous mode [ 302.904000][T13786] veth1_vlan: entered promiscuous mode [ 302.928962][T13786] veth0_macvtap: entered promiscuous mode [ 302.933118][ T5840] Bluetooth: hci5: command tx timeout [ 302.938331][T13786] veth1_macvtap: entered promiscuous mode [ 302.957182][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.967995][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.978022][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.988559][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.999640][T13786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.024590][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.035503][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.045420][T13786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.055949][T13786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.066977][T13786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.077018][T13786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.086112][T13786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.095040][T13786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.103869][T13786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.241746][T13935] ªªªªªª: renamed from bond0 (while UP) [ 303.400728][T10190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.429996][T10190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.477907][T10198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.519828][T10198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.903110][T13945] veth0_to_team: entered promiscuous mode [ 303.926040][T13945] __nla_validate_parse: 6 callbacks suppressed [ 303.926060][T13945] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2884'. [ 303.970455][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2886'. [ 304.012440][T13945] tap0: tun_chr_ioctl cmd 1074025677 [ 304.030945][T13945] tap0: linktype set to 0 [ 304.571085][T13980] netlink: 'syz.2.2890': attribute type 11 has an invalid length. [ 304.667919][T13978] veth2: entered allmulticast mode [ 304.926506][T13991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2899'. [ 304.939222][T13995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2898'. [ 305.047351][ T5840] Bluetooth: hci5: command tx timeout [ 305.170045][T14011] netlink: 'syz.0.2906': attribute type 8 has an invalid length. [ 305.457403][T14028] netlink: 'syz.0.2912': attribute type 11 has an invalid length. [ 305.469201][T14030] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2913'. [ 305.500876][T14032] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2914'. [ 305.572949][T14036] netlink: 'syz.4.2914': attribute type 21 has an invalid length. [ 305.769616][T14052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2921'. [ 305.779039][T14052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2921'. [ 305.885465][T14050] netlink: 'syz.2.2918': attribute type 12 has an invalid length. [ 305.985019][T14060] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2924'. [ 306.013500][T14062] FAULT_INJECTION: forcing a failure. [ 306.013500][T14062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.062869][T14065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2927'. [ 306.072914][T14062] CPU: 1 UID: 0 PID: 14062 Comm: syz.1.2925 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 306.083726][T14062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 306.093815][T14062] Call Trace: [ 306.097113][T14062] [ 306.100057][T14062] dump_stack_lvl+0x241/0x360 [ 306.104771][T14062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.109990][T14062] ? __pfx__printk+0x10/0x10 [ 306.114591][T14062] ? __pfx_lock_release+0x10/0x10 [ 306.119633][T14062] should_fail_ex+0x3b0/0x4e0 [ 306.124308][T14062] _copy_from_iter+0x1e9/0x1c20 [ 306.129152][T14062] ? __virt_addr_valid+0x183/0x530 [ 306.134281][T14062] ? __alloc_skb+0x28f/0x440 [ 306.138898][T14062] ? __pfx__copy_from_iter+0x10/0x10 [ 306.144210][T14062] ? __virt_addr_valid+0x183/0x530 [ 306.149343][T14062] ? __virt_addr_valid+0x183/0x530 [ 306.154444][T14062] ? __virt_addr_valid+0x45f/0x530 [ 306.159545][T14062] ? __phys_addr_symbol+0x2f/0x70 [ 306.164576][T14062] ? __check_object_size+0x47a/0x730 [ 306.169878][T14062] netlink_sendmsg+0x73d/0xcb0 [ 306.174653][T14062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.179941][T14062] ? aa_sock_msg_perm+0x91/0x160 [ 306.184879][T14062] ? __pfx_netlink_sendmsg+0x10/0x10 [ 306.190163][T14062] __sock_sendmsg+0x221/0x270 [ 306.194846][T14062] ____sys_sendmsg+0x52a/0x7e0 [ 306.199612][T14062] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.204891][T14062] ? __fget_files+0x2a/0x410 [ 306.209487][T14062] ? __fget_files+0x2a/0x410 [ 306.214094][T14062] __sys_sendmsg+0x269/0x350 [ 306.218694][T14062] ? __pfx___sys_sendmsg+0x10/0x10 [ 306.223800][T14062] ? lockdep_softirqs_on+0x334/0x5a0 [ 306.229102][T14062] ? __irq_exit_rcu+0xf7/0x220 [ 306.233878][T14062] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.240207][T14062] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 306.246529][T14062] ? __irq_exit_rcu+0x105/0x220 [ 306.251380][T14062] ? do_syscall_64+0xb6/0x230 [ 306.256057][T14062] do_syscall_64+0xf3/0x230 [ 306.260556][T14062] ? clear_bhb_loop+0x35/0x90 [ 306.265233][T14062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.271137][T14062] RIP: 0033:0x7fcb37385d29 [ 306.275549][T14062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.295149][T14062] RSP: 002b:00007fcb38126038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.303561][T14062] RAX: ffffffffffffffda RBX: 00007fcb37575fa0 RCX: 00007fcb37385d29 [ 306.311529][T14062] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 306.319499][T14062] RBP: 00007fcb38126090 R08: 0000000000000000 R09: 0000000000000000 [ 306.327469][T14062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.335435][T14062] R13: 0000000000000000 R14: 00007fcb37575fa0 R15: 00007ffe2bed1448 [ 306.343409][T14062] [ 306.565151][T14086] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 306.635665][T14093] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 306.980808][T14110] xt_ipvs: protocol family 7 not supported [ 307.083889][ T5840] Bluetooth: hci5: command tx timeout [ 307.122597][T14133] netlink: 'syz.4.2948': attribute type 4 has an invalid length. [ 307.164192][T14133] netlink: 'syz.4.2948': attribute type 4 has an invalid length. [ 307.256226][T14136] netlink: 'syz.3.2949': attribute type 1 has an invalid length. [ 307.440659][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 307.455039][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 307.465507][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 307.492204][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 307.499940][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 307.508788][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 307.538661][T14139] lo speed is unknown, defaulting to 1000 [ 307.640860][T14139] lo speed is unknown, defaulting to 1000 [ 307.885287][T14159] FAULT_INJECTION: forcing a failure. [ 307.885287][T14159] name failslab, interval 1, probability 0, space 0, times 0 [ 307.898275][T14159] CPU: 0 UID: 0 PID: 14159 Comm: syz.3.2958 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 307.909061][T14159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 307.919139][T14159] Call Trace: [ 307.922436][T14159] [ 307.925383][T14159] dump_stack_lvl+0x241/0x360 [ 307.930095][T14159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 307.935327][T14159] ? __pfx__printk+0x10/0x10 [ 307.939963][T14159] should_fail_ex+0x3b0/0x4e0 [ 307.944670][T14159] should_failslab+0xac/0x100 [ 307.949354][T14159] ? skb_clone+0x20c/0x390 [ 307.953780][T14159] kmem_cache_alloc_noprof+0x70/0x380 [ 307.959166][T14159] skb_clone+0x20c/0x390 [ 307.963421][T14159] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 307.968656][T14159] dev_queue_xmit_nit+0x249/0xca0 [ 307.973684][T14159] ? dev_queue_xmit_nit+0x2b/0xca0 [ 307.978792][T14159] ? validate_xmit_skb+0x9b8/0xff0 [ 307.983905][T14159] dev_hard_start_xmit+0x15f/0x7d0 [ 307.989020][T14159] ? __pfx_validate_xmit_skb+0x10/0x10 [ 307.994482][T14159] __dev_queue_xmit+0x1b73/0x3f50 [ 307.999514][T14159] ? kasan_save_track+0x51/0x80 [ 308.004379][T14159] ? ____sys_sendmsg+0x52a/0x7e0 [ 308.009336][T14159] ? __dev_queue_xmit+0x2f4/0x3f50 [ 308.014456][T14159] ? __pfx___dev_queue_xmit+0x10/0x10 [ 308.019845][T14159] ? __copy_skb_header+0x437/0x5b0 [ 308.024963][T14159] ? __asan_memcpy+0x40/0x70 [ 308.029570][T14159] ? __copy_skb_header+0x437/0x5b0 [ 308.034684][T14159] ? __skb_clone+0x454/0x6c0 [ 308.039279][T14159] ? skb_clone+0x240/0x390 [ 308.043721][T14159] __netlink_deliver_tap+0x56b/0x7f0 [ 308.049028][T14159] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.054230][T14159] netlink_deliver_tap+0x19d/0x1b0 [ 308.059340][T14159] netlink_unicast+0x7c4/0x990 [ 308.064108][T14159] ? __pfx_netlink_unicast+0x10/0x10 [ 308.069385][T14159] ? __virt_addr_valid+0x45f/0x530 [ 308.074497][T14159] ? __phys_addr_symbol+0x2f/0x70 [ 308.079518][T14159] ? __check_object_size+0x47a/0x730 [ 308.084806][T14159] netlink_sendmsg+0x8e4/0xcb0 [ 308.089578][T14159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.094863][T14159] ? aa_sock_msg_perm+0x91/0x160 [ 308.099801][T14159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.105080][T14159] __sock_sendmsg+0x221/0x270 [ 308.109763][T14159] ____sys_sendmsg+0x52a/0x7e0 [ 308.114531][T14159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.119811][T14159] ? __fget_files+0x2a/0x410 [ 308.124414][T14159] ? __fget_files+0x2a/0x410 [ 308.129110][T14159] __sys_sendmsg+0x269/0x350 [ 308.133705][T14159] ? __pfx_lock_release+0x10/0x10 [ 308.138729][T14159] ? __pfx___sys_sendmsg+0x10/0x10 [ 308.143851][T14159] ? __pfx_vfs_write+0x10/0x10 [ 308.148631][T14159] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 308.154959][T14159] ? do_syscall_64+0x100/0x230 [ 308.159732][T14159] ? do_syscall_64+0xb6/0x230 [ 308.164408][T14159] do_syscall_64+0xf3/0x230 [ 308.168908][T14159] ? clear_bhb_loop+0x35/0x90 [ 308.173585][T14159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.179476][T14159] RIP: 0033:0x7f85ceb85d29 [ 308.183887][T14159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.203493][T14159] RSP: 002b:00007f85cf9e9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.211905][T14159] RAX: ffffffffffffffda RBX: 00007f85ced75fa0 RCX: 00007f85ceb85d29 [ 308.219872][T14159] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 308.227839][T14159] RBP: 00007f85cf9e9090 R08: 0000000000000000 R09: 0000000000000000 [ 308.235808][T14159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.243777][T14159] R13: 0000000000000000 R14: 00007f85ced75fa0 R15: 00007fffb74afaf8 [ 308.251758][T14159] [ 308.360331][T14139] chnl_net:caif_netlink_parms(): no params data found [ 308.919225][T14187] netlink: 'syz.4.2963': attribute type 1 has an invalid length. [ 308.967797][T14187] __nla_validate_parse: 6 callbacks suppressed [ 308.967816][T14187] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2963'. [ 309.052665][ T5833] syz_tun (unregistering): left promiscuous mode [ 309.252697][T14139] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.262552][T14139] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.270417][T14139] bridge_slave_0: entered allmulticast mode [ 309.281901][T14139] bridge_slave_0: entered promiscuous mode [ 309.344013][T14139] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.351257][T14139] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.360203][T14139] bridge_slave_1: entered allmulticast mode [ 309.367629][T14139] bridge_slave_1: entered promiscuous mode [ 309.446687][T14139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.459621][T14139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.572240][ T5840] Bluetooth: hci3: command tx timeout [ 309.587907][T14139] team0: Port device team_slave_0 added [ 309.609257][T14139] team0: Port device team_slave_1 added [ 309.782368][T14139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.798395][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.829446][T14139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.842211][T14139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.849467][T14139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.875895][T14139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.004745][T14139] hsr_slave_0: entered promiscuous mode [ 310.039270][T14139] hsr_slave_1: entered promiscuous mode [ 310.051948][T14139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.061387][T14139] Cannot create hsr debugfs directory [ 310.079675][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2982'. [ 310.210392][T14246] netlink: 'syz.0.2982': attribute type 1 has an invalid length. [ 310.235953][T14246] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2982'. [ 310.255721][T14245] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2984'. [ 310.258086][T14247] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2985'. [ 310.332374][T14139] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.343192][T14139] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 310.461429][T14254] FAULT_INJECTION: forcing a failure. [ 310.461429][T14254] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.500374][T14139] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.507851][T14254] CPU: 1 UID: 0 PID: 14254 Comm: syz.0.2988 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 310.512255][T14139] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 310.520877][T14254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 310.520892][T14254] Call Trace: [ 310.520900][T14254] [ 310.520910][T14254] dump_stack_lvl+0x241/0x360 [ 310.520942][T14254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 310.556894][T14254] ? __pfx__printk+0x10/0x10 [ 310.561516][T14254] ? __pfx_lock_release+0x10/0x10 [ 310.566571][T14254] should_fail_ex+0x3b0/0x4e0 [ 310.571275][T14254] _copy_from_user+0x2f/0xc0 [ 310.575885][T14254] copy_msghdr_from_user+0xae/0x680 [ 310.581080][T14254] ? __pfx___might_resched+0x10/0x10 [ 310.586359][T14254] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 310.592167][T14254] ? do_recvmmsg+0x44e/0xab0 [ 310.596770][T14254] ? __might_fault+0xaa/0x120 [ 310.601464][T14254] do_recvmmsg+0x3bd/0xab0 [ 310.605904][T14254] ? __pfx_do_recvmmsg+0x10/0x10 [ 310.610894][T14254] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 310.616829][T14254] ? ksys_write+0x22a/0x2b0 [ 310.621358][T14254] ? __pfx_lock_release+0x10/0x10 [ 310.626412][T14254] ? vfs_write+0x730/0xd30 [ 310.630846][T14254] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 310.636829][T14254] ? __fget_files+0x2a/0x410 [ 310.641420][T14254] __x64_sys_recvmmsg+0x199/0x250 [ 310.646447][T14254] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 310.652006][T14254] ? do_syscall_64+0x100/0x230 [ 310.656790][T14254] ? do_syscall_64+0xb6/0x230 [ 310.661492][T14254] do_syscall_64+0xf3/0x230 [ 310.666026][T14254] ? clear_bhb_loop+0x35/0x90 [ 310.670746][T14254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.676701][T14254] RIP: 0033:0x7fe167985d29 [ 310.681138][T14254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.700789][T14254] RSP: 002b:00007fe1688a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 310.709221][T14254] RAX: ffffffffffffffda RBX: 00007fe167b75fa0 RCX: 00007fe167985d29 [ 310.717206][T14254] RDX: 000000000000072a RSI: 0000000020000080 RDI: 0000000000000006 [ 310.725176][T14254] RBP: 00007fe1688a3090 R08: 0000000000000000 R09: 0000000000000000 [ 310.733141][T14254] R10: 0000000000000500 R11: 0000000000000246 R12: 0000000000000002 [ 310.741106][T14254] R13: 0000000000000000 R14: 00007fe167b75fa0 R15: 00007ffcafeefe08 [ 310.749083][T14254] [ 310.768818][T14263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2991'. [ 310.797891][T14263] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2991'. [ 310.845450][T14263] macvlan1: entered promiscuous mode [ 310.858635][T14263] macvlan1: left promiscuous mode [ 310.874556][T14139] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.903558][T14139] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 311.086591][T14280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2997'. [ 311.108427][T14272] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2994'. [ 311.140884][T14139] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.150839][T14139] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 311.185161][T14283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2999'. [ 311.350258][T14139] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.400043][T14139] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.460889][T14139] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.477838][T14139] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.606139][T14302] netlink: 'syz.4.3008': attribute type 10 has an invalid length. [ 311.638693][T14297] vlan6: entered allmulticast mode [ 311.656534][ T5842] Bluetooth: hci3: command tx timeout [ 311.706800][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.714965][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.841773][T14139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.894202][T14139] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.933686][T10178] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.940852][T10178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.988604][T10178] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.995809][T10178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.538221][T14139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.640862][T14139] veth0_vlan: entered promiscuous mode [ 312.679203][T14139] veth1_vlan: entered promiscuous mode [ 312.817896][T14139] veth0_macvtap: entered promiscuous mode [ 312.844718][T14139] veth1_macvtap: entered promiscuous mode [ 312.907651][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.943244][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.971274][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 312.989821][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.000215][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.021510][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.035176][T14139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.091776][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.111424][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.138813][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.167538][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.199151][T14139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.220062][T14139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.248394][T14139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.291521][T14139] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.317941][T14139] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.327118][ T5840] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 313.335143][ T5840] Bluetooth: hci0: command 0x0c20 tx timeout [ 313.363583][T14139] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.390205][T14139] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.641431][T10181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.669976][T10181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.723834][ T5840] Bluetooth: hci3: command tx timeout [ 313.741816][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.756975][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.035135][T14393] __nla_validate_parse: 6 callbacks suppressed [ 314.035155][T14393] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3033'. [ 314.300673][T14407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 314.520954][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3037'. [ 314.562624][T14417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 314.641804][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 314.672467][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 314.689812][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 314.698512][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 314.712998][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 314.720946][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 314.728484][ T5831] syz_tun (unregistering): left promiscuous mode [ 314.867581][T14418] lo speed is unknown, defaulting to 1000 [ 314.871987][T14426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'. [ 314.948900][T14430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3042'. [ 315.110068][T14418] lo speed is unknown, defaulting to 1000 [ 315.244940][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3043'. [ 315.311401][T14418] chnl_net:caif_netlink_parms(): no params data found [ 315.657308][T14418] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.665102][T14418] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.672589][T14418] bridge_slave_0: entered allmulticast mode [ 315.679845][T14418] bridge_slave_0: entered promiscuous mode [ 315.734462][T14418] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.741901][T14418] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.749300][T14418] bridge_slave_1: entered allmulticast mode [ 315.758412][T14418] bridge_slave_1: entered promiscuous mode [ 315.796407][T14454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3049'. [ 315.833461][ T5842] Bluetooth: hci3: command tx timeout [ 315.924362][T14418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.936341][T14418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.021810][T14418] team0: Port device team_slave_0 added [ 316.025653][T14462] netlink: 'syz.2.3053': attribute type 1 has an invalid length. [ 316.042032][T14418] team0: Port device team_slave_1 added [ 316.093867][T14418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.102943][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.129398][T14418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.235166][T14418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.242293][T14418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.272481][T14418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.362758][T14418] hsr_slave_0: entered promiscuous mode [ 316.375144][T14418] hsr_slave_1: entered promiscuous mode [ 316.399322][T14418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.411772][T14418] Cannot create hsr debugfs directory [ 316.599440][T14418] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.620852][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3062'. [ 316.692535][T14418] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.773673][ T5842] Bluetooth: hci1: command tx timeout [ 316.816132][T14418] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.948605][T14494] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.959537][T14494] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 317.029880][T14418] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.079202][T14494] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.087836][T14507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3068'. [ 317.091685][T14494] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 317.200895][T14494] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.224919][T14494] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 317.272434][T14512] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 317.327691][T14494] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.358600][T14494] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 317.438074][T14418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 317.449624][T14418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 317.464048][T14418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 317.480388][T14418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 317.541772][T14494] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.560832][T14494] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.601140][T14494] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.629823][T14494] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.655732][T14494] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.665148][T14494] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.684258][T14494] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 317.692570][T14494] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.805523][T14418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.843242][T14418] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.862218][T10194] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.869374][T10194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.921441][T14520] netlink: 'syz.0.3075': attribute type 1 has an invalid length. [ 317.949492][T10194] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.956727][T10194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.414969][T14553] macvlan1: entered promiscuous mode [ 318.422555][T14553] macvlan1: left promiscuous mode [ 318.504642][T14418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.616246][T14418] veth0_vlan: entered promiscuous mode [ 318.635229][T14418] veth1_vlan: entered promiscuous mode [ 318.668834][T14418] veth0_macvtap: entered promiscuous mode [ 318.689599][T14418] veth1_macvtap: entered promiscuous mode [ 318.721973][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.753705][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.770656][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.798890][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.818338][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.848006][ T5842] Bluetooth: hci1: command tx timeout [ 318.860614][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.875588][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.889979][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.906284][T14418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.945416][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.963643][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.994591][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.013383][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.035527][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.048584][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.073247][T14418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.085132][T14418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.097484][T14418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.108059][T14418] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.117950][T14418] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.127411][T14418] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.136486][T14418] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.160031][T14590] sctp: [Deprecated]: syz.4.3094 (pid 14590) Use of int in max_burst socket option. [ 319.160031][T14590] Use struct sctp_assoc_value instead [ 319.206982][T14583] __nla_validate_parse: 8 callbacks suppressed [ 319.207000][T14583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3093'. [ 319.288646][T10180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.312131][T10180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.350673][T10194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.359784][T10194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.054904][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 320.072081][ T5843] syz_tun (unregistering): left promiscuous mode [ 320.099817][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 320.163832][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 320.184458][T14613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3105'. [ 320.343750][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 320.354752][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 320.362791][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 320.374349][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 320.382843][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 320.393050][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 320.394228][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3108'. [ 320.477656][T14629] netlink: 'syz.4.3108': attribute type 1 has an invalid length. [ 320.496662][T14629] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3108'. [ 320.510181][T14622] lo speed is unknown, defaulting to 1000 [ 320.541302][T14633] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3109'. [ 320.643937][T14622] lo speed is unknown, defaulting to 1000 [ 320.684387][T14635] netlink: 'syz.2.3109': attribute type 1 has an invalid length. [ 320.692842][T14635] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3109'. [ 320.748369][T14640] FAULT_INJECTION: forcing a failure. [ 320.748369][T14640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.782422][T14640] CPU: 1 UID: 0 PID: 14640 Comm: syz.3.3111 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 320.793249][T14640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 320.803333][T14640] Call Trace: [ 320.806636][T14640] [ 320.809587][T14640] dump_stack_lvl+0x241/0x360 [ 320.814296][T14640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 320.819536][T14640] ? __pfx__printk+0x10/0x10 [ 320.824163][T14640] ? __pfx_lock_release+0x10/0x10 [ 320.829223][T14640] should_fail_ex+0x3b0/0x4e0 [ 320.833932][T14640] _copy_from_user+0x2f/0xc0 [ 320.838533][T14640] copy_msghdr_from_user+0xae/0x680 [ 320.843742][T14640] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 320.849562][T14640] ? __fget_files+0x2a/0x410 [ 320.854160][T14640] ? __fget_files+0x2a/0x410 [ 320.858756][T14640] __sys_sendmsg+0x209/0x350 [ 320.863348][T14640] ? __pfx_lock_release+0x10/0x10 [ 320.868378][T14640] ? __pfx___sys_sendmsg+0x10/0x10 [ 320.873502][T14640] ? __pfx_vfs_write+0x10/0x10 [ 320.878318][T14640] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.884644][T14640] ? do_syscall_64+0x100/0x230 [ 320.889430][T14640] ? do_syscall_64+0xb6/0x230 [ 320.894132][T14640] do_syscall_64+0xf3/0x230 [ 320.898632][T14640] ? clear_bhb_loop+0x35/0x90 [ 320.903316][T14640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.909205][T14640] RIP: 0033:0x7f5f59985d29 [ 320.913618][T14640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.933229][T14640] RSP: 002b:00007f5f5a77a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.941647][T14640] RAX: ffffffffffffffda RBX: 00007f5f59b75fa0 RCX: 00007f5f59985d29 [ 320.949616][T14640] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 320.957584][T14640] RBP: 00007f5f5a77a090 R08: 0000000000000000 R09: 0000000000000000 [ 320.965552][T14640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.973550][T14640] R13: 0000000000000000 R14: 00007f5f59b75fa0 R15: 00007ffe14a5e9c8 [ 320.981531][T14640] [ 320.996262][ T5840] Bluetooth: hci1: command tx timeout [ 321.161791][T14622] chnl_net:caif_netlink_parms(): no params data found [ 321.209094][T14655] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3115'. [ 321.322479][T14658] dummy0: entered promiscuous mode [ 321.345248][T14658] bond0: entered promiscuous mode [ 321.353789][T14658] bond_slave_0: entered promiscuous mode [ 321.359691][T14658] bond_slave_1: entered promiscuous mode [ 321.379574][T14658] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 321.392258][T14658] Cannot create hsr debugfs directory [ 321.555489][T14622] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.562727][T14622] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.571076][T14622] bridge_slave_0: entered allmulticast mode [ 321.578530][T14622] bridge_slave_0: entered promiscuous mode [ 321.587335][T14622] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.595394][T14622] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.602738][T14622] bridge_slave_1: entered allmulticast mode [ 321.610032][T14622] bridge_slave_1: entered promiscuous mode [ 321.708285][T14678] netlink: 'syz.2.3121': attribute type 1 has an invalid length. [ 321.712092][T14622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.741447][T14622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.823099][T14622] team0: Port device team_slave_0 added [ 321.850375][T14622] team0: Port device team_slave_1 added [ 321.996595][T14687] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 322.009907][T14687] bridge1: entered promiscuous mode [ 322.018264][T14687] bridge1: entered allmulticast mode [ 322.035506][T14622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.053624][T14622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.079932][T14622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.095023][T14622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.102000][T14622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.128401][T14622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.148603][T14689] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 322.162519][T14689] bridge2: entered promiscuous mode [ 322.168732][T14689] bridge2: entered allmulticast mode [ 322.188347][T14694] nr0: entered allmulticast mode [ 322.227082][T14696] vlan2: entered allmulticast mode [ 322.232539][T14696] gretap0: entered allmulticast mode [ 322.387391][T14622] hsr_slave_0: entered promiscuous mode [ 322.409295][T14622] hsr_slave_1: entered promiscuous mode [ 322.430972][T14622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.443794][ T5840] Bluetooth: hci0: command tx timeout [ 322.453403][T14622] Cannot create hsr debugfs directory [ 322.734862][T14719] netlink: 'syz.0.3138': attribute type 1 has an invalid length. [ 322.938870][T14622] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.009028][ T5840] Bluetooth: hci1: command tx timeout [ 323.081614][T14622] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.244331][ T940] page_pool_release_retry() stalled pool shutdown: id 37, 1 inflight 60 sec [ 323.285367][T14622] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.434348][T14622] team0: Port device netdevsim0 removed [ 323.501292][T14622] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.779269][T14622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 323.816095][T14622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 323.856363][T14622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 323.953860][T14622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.136626][T14622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.154837][T14622] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.191911][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.199126][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.224886][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.232060][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.264132][T14769] xt_TPROXY: Can be used only with -p tcp or -p udp [ 324.382241][T14770] netlink: 'syz.3.3157': attribute type 1 has an invalid length. [ 324.391518][T14770] __nla_validate_parse: 16 callbacks suppressed [ 324.391537][T14770] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3157'. [ 324.514768][T14784] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input10 [ 324.538031][ T5840] Bluetooth: hci0: command tx timeout [ 324.648644][T14622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.714335][T14796] netlink: 'syz.0.3165': attribute type 1 has an invalid length. [ 324.722134][T14796] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3165'. [ 324.742303][T14622] veth0_vlan: entered promiscuous mode [ 324.759819][T14622] veth1_vlan: entered promiscuous mode [ 324.778238][T14796] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3165'. [ 324.785902][T14622] veth0_macvtap: entered promiscuous mode [ 324.789666][T14796] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3165'. [ 324.796561][T14622] veth1_macvtap: entered promiscuous mode [ 324.819051][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.829930][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.840040][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.851101][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.861686][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.872806][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.882782][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.893482][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.903491][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.928195][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.939535][T14622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.951105][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.961680][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.971913][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 324.982521][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.000604][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.012204][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.022360][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.033134][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.043073][T14622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.054163][T14622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.065774][T14622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.103184][T14622] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.112551][T14622] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.129596][T14622] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.144430][T14622] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.382614][T14817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3173'. [ 325.577270][T10178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.577452][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 325.587078][T10178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.603418][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 325.686129][T14826] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 325.713931][T14826] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3173'. [ 325.842064][T14839] macsec1: entered allmulticast mode [ 325.873965][T14842] netlink: 'syz.1.3102': attribute type 64 has an invalid length. [ 326.614476][ T5840] Bluetooth: hci0: command tx timeout [ 326.922552][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 326.934930][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 326.943251][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 326.951574][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.026143][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 327.055620][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 327.128308][T14840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 327.162491][T14855] lo speed is unknown, defaulting to 1000 [ 327.360225][T14855] lo speed is unknown, defaulting to 1000 [ 327.680473][T14855] chnl_net:caif_netlink_parms(): no params data found [ 327.706804][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058633800: rx timeout, send abort [ 327.715194][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058633c00: rx timeout, send abort [ 327.730975][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058633800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 327.745413][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058633c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 327.781345][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3194'. [ 327.829981][T14880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3194'. [ 327.974774][T14855] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.981925][T14855] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.001586][T14855] bridge_slave_0: entered allmulticast mode [ 328.009932][T14855] bridge_slave_0: entered promiscuous mode [ 328.021254][T14855] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.028546][T14855] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.036052][T14855] bridge_slave_1: entered allmulticast mode [ 328.043140][T14855] bridge_slave_1: entered promiscuous mode [ 328.121085][T14855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.135519][T14855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.322383][T14855] team0: Port device team_slave_0 added [ 328.342856][T14855] team0: Port device team_slave_1 added [ 328.401748][T14855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.419383][T14855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.447328][T14855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.474620][T14855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.481618][T14855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.507812][T14855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.596538][T14855] hsr_slave_0: entered promiscuous mode [ 328.634051][T14855] hsr_slave_1: entered promiscuous mode [ 328.646708][T14855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.663215][T14855] Cannot create hsr debugfs directory [ 328.683994][ T5842] Bluetooth: hci0: command tx timeout [ 328.941076][T14921] lo speed is unknown, defaulting to 1000 [ 329.045119][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888066b5e800: rx timeout, send abort [ 329.053772][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888066b5e800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 329.068230][T14924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3211'. [ 329.164414][ T5842] Bluetooth: hci4: command tx timeout [ 329.177033][T14855] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.213690][T14855] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.295947][T14921] lo speed is unknown, defaulting to 1000 [ 329.334704][T14930] netlink: 'syz.1.3214': attribute type 4 has an invalid length. [ 329.384889][T14855] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.396263][T14855] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.462401][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3217'. [ 329.473586][T14936] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3217'. [ 329.506172][T14855] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.516387][T14855] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.532306][T14936] dummy0: entered promiscuous mode [ 329.543764][T14936] bond0: entered promiscuous mode [ 329.548843][T14936] bond_slave_0: entered promiscuous mode [ 329.554906][T14936] bond_slave_1: entered promiscuous mode [ 329.561999][T14936] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 329.570074][T14936] Cannot create hsr debugfs directory [ 329.610394][T14855] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 329.622151][T14855] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 329.642800][T14938] veth0_to_bridge: entered promiscuous mode [ 329.660874][T14940] lo speed is unknown, defaulting to 1000 [ 329.967964][T14947] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3221'. [ 329.987093][T14949] FAULT_INJECTION: forcing a failure. [ 329.987093][T14949] name failslab, interval 1, probability 0, space 0, times 0 [ 330.028328][T14949] CPU: 1 UID: 0 PID: 14949 Comm: syz.3.3222 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 330.039162][T14949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 330.049252][T14949] Call Trace: [ 330.052552][T14949] [ 330.055502][T14949] dump_stack_lvl+0x241/0x360 [ 330.060214][T14949] ? __pfx_dump_stack_lvl+0x10/0x10 [ 330.065438][T14949] ? __pfx__printk+0x10/0x10 [ 330.070066][T14949] ? __kmalloc_noprof+0xb5/0x4c0 [ 330.075046][T14949] ? __pfx___might_resched+0x10/0x10 [ 330.080358][T14949] ? aa_get_newest_label+0xff/0x6f0 [ 330.082815][T14953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3223'. [ 330.085570][T14949] should_fail_ex+0x3b0/0x4e0 [ 330.085599][T14949] should_failslab+0xac/0x100 [ 330.085625][T14949] __kmalloc_noprof+0xdd/0x4c0 [ 330.085647][T14949] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 330.085671][T14949] ? apparmor_capable+0x13b/0x1b0 [ 330.085698][T14949] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 330.085729][T14949] genl_rcv_msg+0x802/0xec0 [ 330.085760][T14949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.085810][T14949] ? __pfx_lock_acquire+0x10/0x10 [ 330.085832][T14949] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 330.085856][T14949] ? __pfx___might_resched+0x10/0x10 [ 330.085891][T14949] netlink_rcv_skb+0x1e3/0x430 [ 330.085914][T14949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 330.085939][T14949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.085969][T14949] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 330.086005][T14949] genl_rcv+0x28/0x40 [ 330.086027][T14949] netlink_unicast+0x7f6/0x990 [ 330.086055][T14949] ? __pfx_netlink_unicast+0x10/0x10 [ 330.086072][T14949] ? __virt_addr_valid+0x45f/0x530 [ 330.086096][T14949] ? __phys_addr_symbol+0x2f/0x70 [ 330.086116][T14949] ? __check_object_size+0x47a/0x730 [ 330.086142][T14949] netlink_sendmsg+0x8e4/0xcb0 [ 330.086174][T14949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.086197][T14949] ? aa_sock_msg_perm+0x91/0x160 [ 330.086220][T14949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.086238][T14949] __sock_sendmsg+0x221/0x270 [ 330.086267][T14949] ____sys_sendmsg+0x52a/0x7e0 [ 330.086295][T14949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.086315][T14949] ? __fget_files+0x2a/0x410 [ 330.086341][T14949] ? __fget_files+0x2a/0x410 [ 330.086373][T14949] __sys_sendmsg+0x269/0x350 [ 330.086395][T14949] ? __pfx_lock_release+0x10/0x10 [ 330.086420][T14949] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.086454][T14949] ? __pfx_vfs_write+0x10/0x10 [ 330.086500][T14949] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.086524][T14949] ? do_syscall_64+0x100/0x230 [ 330.086550][T14949] ? do_syscall_64+0xb6/0x230 [ 330.086571][T14949] do_syscall_64+0xf3/0x230 [ 330.086590][T14949] ? clear_bhb_loop+0x35/0x90 [ 330.086615][T14949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.086636][T14949] RIP: 0033:0x7f5f59985d29 [ 330.099068][T14855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.100217][T14949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.327372][T14949] RSP: 002b:00007f5f5a77a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.335789][T14949] RAX: ffffffffffffffda RBX: 00007f5f59b75fa0 RCX: 00007f5f59985d29 [ 330.343762][T14949] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 330.351731][T14949] RBP: 00007f5f5a77a090 R08: 0000000000000000 R09: 0000000000000000 [ 330.359698][T14949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.367664][T14949] R13: 0000000000000000 R14: 00007f5f59b75fa0 R15: 00007ffe14a5e9c8 [ 330.375654][T14949] [ 330.412986][T14855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.414188][T14951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3223'. [ 330.463171][T14855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.508391][T14855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.645895][T14940] lo speed is unknown, defaulting to 1000 [ 330.951495][T14968] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3226'. [ 331.018635][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3229'. [ 331.030723][T14855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.051011][T14855] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.114535][T10180] wlan1: Trigger new scan to find an IBSS to join [ 331.155207][T10180] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.162324][T10180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.216417][T10180] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.218436][T14972] infiniband syz!: set active [ 331.223589][T10180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.243042][T14972] infiniband syz!: added team_slave_0 [ 331.249588][ T5842] Bluetooth: hci4: command tx timeout [ 331.268151][T14937] veth0_to_bridge: left promiscuous mode [ 331.300353][T14855] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.308260][T14984] Cannot find set identified by id 0 to match [ 331.318730][T14972] RDS/IB: syz!: added [ 331.322090][T14855] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.325762][T14972] smc: adding ib device syz! with port count 1 [ 331.340089][T14972] smc: ib device syz! port 1 has pnetid [ 331.375330][T14986] syzkaller0: refused to change device tx_queue_len [ 331.836237][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3233'. [ 331.921031][T15001] lo speed is unknown, defaulting to 1000 [ 331.947147][T14855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.478605][T14855] veth0_vlan: entered promiscuous mode [ 332.502535][T14855] veth1_vlan: entered promiscuous mode [ 332.577562][T14855] veth0_macvtap: entered promiscuous mode [ 332.601738][T14855] veth1_macvtap: entered promiscuous mode [ 332.680998][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.697184][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.710188][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.726912][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.742656][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.756668][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.779101][T15023] FAULT_INJECTION: forcing a failure. [ 332.779101][T15023] name failslab, interval 1, probability 0, space 0, times 0 [ 332.796969][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.814088][T15023] CPU: 0 UID: 0 PID: 15023 Comm: syz.1.3240 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 332.824900][T15023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 332.829049][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.834954][T15023] Call Trace: [ 332.834966][T15023] [ 332.834975][T15023] dump_stack_lvl+0x241/0x360 [ 332.835009][T15023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.835033][T15023] ? __pfx__printk+0x10/0x10 [ 332.835057][T15023] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 332.835080][T15023] ? __pfx___might_resched+0x10/0x10 [ 332.835101][T15023] should_fail_ex+0x3b0/0x4e0 [ 332.835123][T15023] should_failslab+0xac/0x100 [ 332.835148][T15023] __kmalloc_node_noprof+0xe1/0x4d0 [ 332.835169][T15023] ? apparmor_capable+0x13b/0x1b0 [ 332.835188][T15023] ? __kvmalloc_node_noprof+0x72/0x190 [ 332.835211][T15023] __kvmalloc_node_noprof+0x72/0x190 [ 332.835229][T15023] xt_alloc_table_info+0x3d/0xa0 [ 332.835250][T15023] do_ipt_set_ctl+0xb97/0x1250 [ 332.835277][T15023] ? __pfx___mutex_trylock_common+0x10/0x10 [ 332.835303][T15023] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 332.835327][T15023] ? __pfx_lock_release+0x10/0x10 [ 332.835345][T15023] ? rcu_is_watching+0x15/0xb0 [ 332.835369][T15023] ? trace_contention_end+0x3c/0x120 [ 332.835412][T15023] ? __mutex_unlock_slowpath+0x21e/0x790 [ 332.835436][T15023] ? __pfx___mutex_lock+0x10/0x10 [ 332.835456][T15023] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 332.835476][T15023] ? aa_sk_perm+0x96d/0xab0 [ 332.835510][T15023] ? __pfx_aa_sk_perm+0x10/0x10 [ 332.835538][T15023] nf_setsockopt+0x295/0x2c0 [ 332.835566][T15023] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 332.835591][T15023] do_sock_setsockopt+0x3af/0x720 [ 332.878077][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.881340][T15023] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 332.881375][T15023] ? __fget_files+0x395/0x410 [ 332.896862][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.901686][T15023] ? __fget_files+0x2a/0x410 [ 332.920236][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.922516][T15023] __x64_sys_setsockopt+0x1ee/0x280 [ 333.034535][T15023] do_syscall_64+0xf3/0x230 [ 333.039049][T15023] ? clear_bhb_loop+0x35/0x90 [ 333.043733][T15023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.049623][T15023] RIP: 0033:0x7f8d8dd85d29 [ 333.054038][T15023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.073640][T15023] RSP: 002b:00007f8d8ec9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.082051][T15023] RAX: ffffffffffffffda RBX: 00007f8d8df75fa0 RCX: 00007f8d8dd85d29 [ 333.090024][T15023] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000e [ 333.097998][T15023] RBP: 00007f8d8ec9c090 R08: 0000000000000580 R09: 0000000000000000 [ 333.105968][T15023] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000001 [ 333.113952][T15023] R13: 0000000000000000 R14: 00007f8d8df75fa0 R15: 00007ffcafa49918 [ 333.121949][T15023] [ 333.130319][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.150182][T14855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.160553][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.172515][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.182547][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.193106][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.203000][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.213646][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.223529][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.234089][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.244789][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.255806][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.265730][T14855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.276229][T14855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.288033][T14855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.314020][T14855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.322803][T14855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.331987][T14855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.340926][T14855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.343717][ T5842] Bluetooth: hci4: command tx timeout [ 333.608102][T15027] FAULT_INJECTION: forcing a failure. [ 333.608102][T15027] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.623891][T15027] CPU: 1 UID: 0 PID: 15027 Comm: syz.2.3242 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 333.624922][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.634674][T15027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 333.634689][T15027] Call Trace: [ 333.634696][T15027] [ 333.634704][T15027] dump_stack_lvl+0x241/0x360 [ 333.634736][T15027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.634758][T15027] ? __pfx__printk+0x10/0x10 [ 333.634787][T15027] ? snprintf+0xda/0x120 [ 333.663433][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.663485][T15027] should_fail_ex+0x3b0/0x4e0 [ 333.689504][T15027] _copy_to_user+0x31/0xb0 [ 333.693959][T15027] simple_read_from_buffer+0xca/0x150 [ 333.699362][T15027] proc_fail_nth_read+0x1e9/0x250 [ 333.704411][T15027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.709979][T15027] ? rw_verify_area+0x55e/0x6f0 [ 333.714847][T15027] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.720416][T15027] vfs_read+0x1fc/0xb70 [ 333.724596][T15027] ? __pfx___mutex_lock+0x10/0x10 [ 333.729653][T15027] ? __pfx_vfs_read+0x10/0x10 [ 333.734371][T15027] ? __fget_files+0x2a/0x410 [ 333.738993][T15027] ? __fget_files+0x395/0x410 [ 333.743700][T15027] ? __fget_files+0x2a/0x410 [ 333.748327][T15027] ksys_read+0x18f/0x2b0 [ 333.752601][T15027] ? __pfx_ksys_read+0x10/0x10 [ 333.757387][T15027] ? do_syscall_64+0x100/0x230 [ 333.762181][T15027] ? do_syscall_64+0xb6/0x230 [ 333.766885][T15027] do_syscall_64+0xf3/0x230 [ 333.771411][T15027] ? clear_bhb_loop+0x35/0x90 [ 333.776116][T15027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.782032][T15027] RIP: 0033:0x7f386738473c [ 333.786462][T15027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 333.806094][T15027] RSP: 002b:00007f3868111030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.814539][T15027] RAX: ffffffffffffffda RBX: 00007f3867575fa0 RCX: 00007f386738473c [ 333.822531][T15027] RDX: 000000000000000f RSI: 00007f38681110a0 RDI: 0000000000000004 [ 333.830522][T15027] RBP: 00007f3868111090 R08: 0000000000000000 R09: 0000000000000000 [ 333.838510][T15027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.846482][T15027] R13: 0000000000000000 R14: 00007f3867575fa0 R15: 00007ffc6f0791e8 [ 333.846515][T15027] [ 333.954497][T10181] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.973201][T10181] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.157067][T15039] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3182'. [ 334.167646][T10181] wlan1: Trigger new scan to find an IBSS to join [ 334.175677][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'. [ 334.267961][ T1049] wlan1: Trigger new scan to find an IBSS to join [ 334.369880][T10207] wlan1: Trigger new scan to find an IBSS to join [ 334.472384][T10180] wlan1: Trigger new scan to find an IBSS to join [ 334.476038][T15049] vlan0: entered promiscuous mode [ 334.514657][T15049] team0: Port device vlan0 added [ 334.519897][T15052] __nla_validate_parse: 2 callbacks suppressed [ 334.519913][T15052] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3249'. [ 334.549433][T15046] netlink: 'syz.1.3246': attribute type 1 has an invalid length. [ 334.578099][T15046] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3246'. [ 334.584824][ T1049] wlan1: Trigger new scan to find an IBSS to join [ 334.677507][T10207] wlan1: Trigger new scan to find an IBSS to join [ 334.725447][T15059] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 334.755210][T15059] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 334.773545][T15059] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 334.783658][T10180] wlan1: Trigger new scan to find an IBSS to join [ 334.835284][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3252'. [ 334.845083][T15065] netlink: 'syz.1.3252': attribute type 4 has an invalid length. [ 334.869435][T15065] netlink: 'syz.1.3252': attribute type 4 has an invalid length. [ 334.895227][T10180] wlan1: Trigger new scan to find an IBSS to join [ 334.985632][T10207] wlan1: Trigger new scan to find an IBSS to join [ 335.093888][T10181] wlan1: Trigger new scan to find an IBSS to join [ 335.189161][ T1049] wlan1: Trigger new scan to find an IBSS to join [ 335.291619][ T1049] wlan1: Trigger new scan to find an IBSS to join [ 335.377272][T15001] lo speed is unknown, defaulting to 1000 [ 335.404056][T10207] wlan1: Trigger new scan to find an IBSS to join [ 335.420852][ T5842] Bluetooth: hci4: command tx timeout [ 335.429076][T15082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'. [ 335.515705][ T1049] wlan1: Trigger new scan to find an IBSS to join [ 335.630741][T15087] team_slave_0: entered promiscuous mode [ 335.636851][T15087] team_slave_1: entered promiscuous mode [ 335.656730][ T1049] wlan1: Trigger new scan to find an IBSS to join [ 335.668394][T15087] team0: Device macsec1 is already an upper device of the team interface [ 335.692568][T15087] team_slave_0: left promiscuous mode [ 335.698099][T15087] team_slave_1: left promiscuous mode [ 335.704650][ T1049] wlan1: Trigger new scan to find an IBSS to join [ 336.393604][T15114] netlink: 'syz.2.3270': attribute type 7 has an invalid length. [ 336.597784][T15131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3275'. [ 336.630535][T15131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3275'. [ 336.984495][T10181] wlan1: Creating new IBSS network, BSSID aa:49:af:fe:01:f0 [ 336.992577][T15142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3280'. [ 337.061442][T15156] netlink: 'syz.0.3283': attribute type 4 has an invalid length. [ 337.065575][T15160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.154058][T15162] netlink: 'syz.2.3287': attribute type 8 has an invalid length. [ 337.183672][T15153] netlink: 'syz.0.3283': attribute type 4 has an invalid length. [ 337.240280][T15169] netlink: 'syz.4.3280': attribute type 1 has an invalid length. [ 337.269096][T15167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3288'. [ 337.290445][T15169] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3280'. [ 337.374106][T15175] lo speed is unknown, defaulting to 1000 [ 337.505363][T15184] IPv6: Can't replace route, no match found [ 337.513060][T15167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 337.549076][T15185] xt_l2tp: missing protocol rule (udp|l2tpip) [ 337.654479][T15175] lo speed is unknown, defaulting to 1000 [ 337.693019][T15191] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3296'. [ 337.765626][T15193] FAULT_INJECTION: forcing a failure. [ 337.765626][T15193] name failslab, interval 1, probability 0, space 0, times 0 [ 337.789840][T15193] CPU: 1 UID: 0 PID: 15193 Comm: syz.2.3297 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 337.800681][T15193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 337.810759][T15193] Call Trace: [ 337.814064][T15193] [ 337.817014][T15193] dump_stack_lvl+0x241/0x360 [ 337.821725][T15193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.826961][T15193] ? __pfx__printk+0x10/0x10 [ 337.831598][T15193] should_fail_ex+0x3b0/0x4e0 [ 337.836304][T15193] should_failslab+0xac/0x100 [ 337.841013][T15193] ? skb_clone+0x20c/0x390 [ 337.845453][T15193] kmem_cache_alloc_noprof+0x70/0x380 [ 337.850859][T15193] skb_clone+0x20c/0x390 [ 337.855136][T15193] __netlink_deliver_tap+0x3cc/0x7f0 [ 337.860456][T15193] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.865679][T15193] netlink_deliver_tap+0x19d/0x1b0 [ 337.870816][T15193] netlink_unicast+0x7c4/0x990 [ 337.875609][T15193] ? __pfx_netlink_unicast+0x10/0x10 [ 337.880914][T15193] ? __virt_addr_valid+0x45f/0x530 [ 337.886082][T15193] ? __phys_addr_symbol+0x2f/0x70 [ 337.891134][T15193] ? __check_object_size+0x47a/0x730 [ 337.896453][T15193] netlink_sendmsg+0x8e4/0xcb0 [ 337.901258][T15193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.906574][T15193] ? aa_sock_msg_perm+0x91/0x160 [ 337.911545][T15193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.916861][T15193] __sock_sendmsg+0x221/0x270 [ 337.921583][T15193] ____sys_sendmsg+0x52a/0x7e0 [ 337.926380][T15193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.931684][T15193] ? __fget_files+0x2a/0x410 [ 337.936303][T15193] ? __fget_files+0x2a/0x410 [ 337.940921][T15193] __sys_sendmsg+0x269/0x350 [ 337.945519][T15193] ? __pfx_lock_release+0x10/0x10 [ 337.950546][T15193] ? __pfx___sys_sendmsg+0x10/0x10 [ 337.955671][T15193] ? __pfx_vfs_write+0x10/0x10 [ 337.960471][T15193] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 337.966822][T15193] ? do_syscall_64+0x100/0x230 [ 337.971601][T15193] ? do_syscall_64+0xb6/0x230 [ 337.976281][T15193] do_syscall_64+0xf3/0x230 [ 337.980783][T15193] ? clear_bhb_loop+0x35/0x90 [ 337.985462][T15193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.991355][T15193] RIP: 0033:0x7f3867385d29 [ 337.995772][T15193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.015375][T15193] RSP: 002b:00007f3868111038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.023789][T15193] RAX: ffffffffffffffda RBX: 00007f3867575fa0 RCX: 00007f3867385d29 [ 338.031753][T15193] RDX: 0000000000040004 RSI: 0000000020002bc0 RDI: 0000000000000007 [ 338.039735][T15193] RBP: 00007f3868111090 R08: 0000000000000000 R09: 0000000000000000 [ 338.047710][T15193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.055688][T15193] R13: 0000000000000000 R14: 00007f3867575fa0 R15: 00007ffc6f0791e8 [ 338.063688][T15193] [ 338.708178][T15209] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.715951][T15209] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.928327][T15225] FAULT_INJECTION: forcing a failure. [ 338.928327][T15225] name failslab, interval 1, probability 0, space 0, times 0 [ 338.959049][T15225] CPU: 0 UID: 0 PID: 15225 Comm: syz.4.3309 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 338.969879][T15225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 338.979962][T15225] Call Trace: [ 338.983270][T15225] [ 338.986224][T15225] dump_stack_lvl+0x241/0x360 [ 338.990936][T15225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 338.996148][T15225] ? __pfx__printk+0x10/0x10 [ 339.000837][T15225] ? __kmalloc_noprof+0xb5/0x4c0 [ 339.005783][T15225] ? __pfx___might_resched+0x10/0x10 [ 339.011075][T15225] should_fail_ex+0x3b0/0x4e0 [ 339.015791][T15225] should_failslab+0xac/0x100 [ 339.020486][T15225] __kmalloc_noprof+0xdd/0x4c0 [ 339.025295][T15225] ? ethnl_default_notify+0x1c9/0x780 [ 339.030672][T15225] ethnl_default_notify+0x1c9/0x780 [ 339.035873][T15225] ? __pfx_ethnl_set_linkmodes+0x10/0x10 [ 339.041505][T15225] ? __pfx_ethnl_default_notify+0x10/0x10 [ 339.047235][T15225] ? mutex_is_locked+0x17/0x50 [ 339.052003][T15225] ethnl_default_set_doit+0x617/0x910 [ 339.057381][T15225] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 339.063275][T15225] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 339.069617][T15225] genl_rcv_msg+0xb14/0xec0 [ 339.074129][T15225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.079175][T15225] ? __pfx_lock_acquire+0x10/0x10 [ 339.084204][T15225] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 339.090103][T15225] ? __pfx___might_resched+0x10/0x10 [ 339.095392][T15225] netlink_rcv_skb+0x1e3/0x430 [ 339.100155][T15225] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.105180][T15225] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.110473][T15225] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 339.115944][T15225] genl_rcv+0x28/0x40 [ 339.119925][T15225] netlink_unicast+0x7f6/0x990 [ 339.124693][T15225] ? __pfx_netlink_unicast+0x10/0x10 [ 339.129971][T15225] ? __virt_addr_valid+0x45f/0x530 [ 339.135083][T15225] ? __phys_addr_symbol+0x2f/0x70 [ 339.140105][T15225] ? __check_object_size+0x47a/0x730 [ 339.145394][T15225] netlink_sendmsg+0x8e4/0xcb0 [ 339.150164][T15225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.155455][T15225] ? aa_sock_msg_perm+0x91/0x160 [ 339.160394][T15225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.165682][T15225] __sock_sendmsg+0x221/0x270 [ 339.170367][T15225] ____sys_sendmsg+0x52a/0x7e0 [ 339.175138][T15225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.180420][T15225] ? __fget_files+0x2a/0x410 [ 339.185021][T15225] ? __fget_files+0x2a/0x410 [ 339.189629][T15225] __sys_sendmsg+0x269/0x350 [ 339.194220][T15225] ? __pfx_lock_release+0x10/0x10 [ 339.199247][T15225] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.204370][T15225] ? __pfx_vfs_write+0x10/0x10 [ 339.209150][T15225] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 339.215507][T15225] ? do_syscall_64+0x100/0x230 [ 339.220272][T15225] ? do_syscall_64+0xb6/0x230 [ 339.224949][T15225] do_syscall_64+0xf3/0x230 [ 339.229455][T15225] ? clear_bhb_loop+0x35/0x90 [ 339.234133][T15225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.240022][T15225] RIP: 0033:0x7f7aaf785d29 [ 339.244465][T15225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.264072][T15225] RSP: 002b:00007f7ab04f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.272487][T15225] RAX: ffffffffffffffda RBX: 00007f7aaf975fa0 RCX: 00007f7aaf785d29 [ 339.280456][T15225] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 339.288426][T15225] RBP: 00007f7ab04f5090 R08: 0000000000000000 R09: 0000000000000000 [ 339.296399][T15225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.304368][T15225] R13: 0000000000000000 R14: 00007f7aaf975fa0 R15: 00007ffc5aa09168 [ 339.312350][T15225] [ 339.425317][T15227] bridge0: entered promiscuous mode [ 339.431091][T15227] macvtap1: entered promiscuous mode [ 339.454806][T15227] macvtap1: entered allmulticast mode [ 339.461133][T15227] bridge0: entered allmulticast mode [ 339.543890][T15230] bridge0: left allmulticast mode [ 339.551179][T15230] bridge0: left promiscuous mode [ 339.897639][T15245] __nla_validate_parse: 1 callbacks suppressed [ 339.897670][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3317'. [ 339.926038][T15248] lo speed is unknown, defaulting to 1000 [ 340.073537][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3320'. [ 340.337673][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3326'. [ 340.372698][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3326'. [ 340.423210][T15274] vlan2: entered promiscuous mode [ 340.557953][T15248] lo speed is unknown, defaulting to 1000 [ 340.851280][T15290] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3335'. [ 340.910185][T15294] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20001 [ 340.972122][T15296] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 341.091358][T15303] netlink: 'syz.1.3338': attribute type 5 has an invalid length. [ 341.618939][T15318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3344'. [ 342.289506][T15347] netlink: 'syz.4.3356': attribute type 1 has an invalid length. [ 342.306361][T15348] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.3357'. [ 342.307728][T15347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3356'. [ 342.386696][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3358'. [ 342.403127][T15355] FAULT_INJECTION: forcing a failure. [ 342.403127][T15355] name failslab, interval 1, probability 0, space 0, times 0 [ 342.423537][T15355] CPU: 1 UID: 0 PID: 15355 Comm: syz.0.3359 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 342.434390][T15355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 342.444481][T15355] Call Trace: [ 342.447783][T15355] [ 342.450738][T15355] dump_stack_lvl+0x241/0x360 [ 342.455472][T15355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.460712][T15355] ? __pfx__printk+0x10/0x10 [ 342.465348][T15355] ? __kmalloc_noprof+0xb5/0x4c0 [ 342.470324][T15355] ? __pfx___might_resched+0x10/0x10 [ 342.475649][T15355] should_fail_ex+0x3b0/0x4e0 [ 342.480363][T15355] should_failslab+0xac/0x100 [ 342.485129][T15355] __kmalloc_noprof+0xdd/0x4c0 [ 342.489929][T15355] ? ethnl_default_notify+0x18f/0x780 [ 342.495333][T15355] ethnl_default_notify+0x18f/0x780 [ 342.500569][T15355] ? __pfx_ethnl_set_linkmodes+0x10/0x10 [ 342.506242][T15355] ? __pfx_ethnl_default_notify+0x10/0x10 [ 342.512015][T15355] ? mutex_is_locked+0x17/0x50 [ 342.516820][T15355] ethnl_default_set_doit+0x617/0x910 [ 342.522234][T15355] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 342.528167][T15355] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 342.534533][T15355] genl_rcv_msg+0xb14/0xec0 [ 342.539052][T15355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.544102][T15355] ? __pfx_lock_acquire+0x10/0x10 [ 342.549130][T15355] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 342.555028][T15355] ? __pfx___might_resched+0x10/0x10 [ 342.560324][T15355] netlink_rcv_skb+0x1e3/0x430 [ 342.565095][T15355] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.570127][T15355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.575424][T15355] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 342.580889][T15355] genl_rcv+0x28/0x40 [ 342.584872][T15355] netlink_unicast+0x7f6/0x990 [ 342.589643][T15355] ? __pfx_netlink_unicast+0x10/0x10 [ 342.594922][T15355] ? __virt_addr_valid+0x45f/0x530 [ 342.600037][T15355] ? __phys_addr_symbol+0x2f/0x70 [ 342.605059][T15355] ? __check_object_size+0x47a/0x730 [ 342.610347][T15355] netlink_sendmsg+0x8e4/0xcb0 [ 342.615125][T15355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.620457][T15355] ? aa_sock_msg_perm+0x91/0x160 [ 342.625401][T15355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.630682][T15355] __sock_sendmsg+0x221/0x270 [ 342.635371][T15355] ____sys_sendmsg+0x52a/0x7e0 [ 342.640151][T15355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.645434][T15355] ? __fget_files+0x2a/0x410 [ 342.650026][T15355] ? __fget_files+0x2a/0x410 [ 342.654627][T15355] __sys_sendmsg+0x269/0x350 [ 342.659223][T15355] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.664344][T15355] ? __asan_memset+0x23/0x50 [ 342.668945][T15355] ? trace_sys_enter+0x74/0x120 [ 342.673804][T15355] ? __pfx_lock_release+0x10/0x10 [ 342.678860][T15355] ? trace_sys_enter+0x74/0x120 [ 342.683720][T15355] ? rcu_is_watching+0x15/0xb0 [ 342.688500][T15355] ? trace_sys_enter+0x25/0x120 [ 342.693363][T15355] do_syscall_64+0xf3/0x230 [ 342.697883][T15355] ? clear_bhb_loop+0x35/0x90 [ 342.702560][T15355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.708454][T15355] RIP: 0033:0x7fe167985d29 [ 342.712865][T15355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.732471][T15355] RSP: 002b:00007fe1688a3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.740891][T15355] RAX: ffffffffffffffda RBX: 00007fe167b75fa0 RCX: 00007fe167985d29 [ 342.748862][T15355] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 342.756846][T15355] RBP: 00007fe1688a3090 R08: 0000000000000000 R09: 0000000000000000 [ 342.764822][T15355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.772794][T15355] R13: 0000000000000000 R14: 00007fe167b75fa0 R15: 00007ffcafeefe08 [ 342.780782][T15355] [ 342.803384][ T5842] Bluetooth: hci4: command tx timeout [ 342.912740][T15367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3362'. [ 342.954361][T15368] lo speed is unknown, defaulting to 1000 [ 342.998148][T15373] x_tables: duplicate entry at hook 3 [ 343.356906][T15388] netlink: 'syz.1.3371': attribute type 7 has an invalid length. [ 343.474933][T15398] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 343.992181][T15422] lo speed is unknown, defaulting to 1000 [ 344.034487][T15426] netlink: 'syz.1.3386': attribute type 12 has an invalid length. [ 344.421174][T15422] lo speed is unknown, defaulting to 1000 [ 345.302886][T15470] __nla_validate_parse: 2 callbacks suppressed [ 345.302910][T15470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3400'. [ 345.469782][T15480] Unsupported ieee802154 address type: 0 [ 345.479770][T15470] netlink: 'syz.2.3400': attribute type 1 has an invalid length. [ 345.520098][T15470] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3400'. [ 346.041827][T15498] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3409'. [ 346.162039][T15504] FAULT_INJECTION: forcing a failure. [ 346.162039][T15504] name failslab, interval 1, probability 0, space 0, times 0 [ 346.194184][T15504] CPU: 1 UID: 0 PID: 15504 Comm: syz.1.3412 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 346.205026][T15504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 346.215115][T15504] Call Trace: [ 346.218409][T15504] [ 346.221361][T15504] dump_stack_lvl+0x241/0x360 [ 346.226071][T15504] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.231303][T15504] ? __pfx__printk+0x10/0x10 [ 346.235906][T15504] ? __kmalloc_noprof+0xb5/0x4c0 [ 346.240861][T15504] ? __pfx___might_resched+0x10/0x10 [ 346.246147][T15504] should_fail_ex+0x3b0/0x4e0 [ 346.250822][T15504] should_failslab+0xac/0x100 [ 346.255510][T15504] __kmalloc_noprof+0xdd/0x4c0 [ 346.260304][T15504] ? ethnl_default_notify+0x1c9/0x780 [ 346.265705][T15504] ethnl_default_notify+0x1c9/0x780 [ 346.270954][T15504] ? __pfx_ethnl_set_linkmodes+0x10/0x10 [ 346.276588][T15504] ? __pfx_ethnl_default_notify+0x10/0x10 [ 346.282318][T15504] ? mutex_is_locked+0x17/0x50 [ 346.287095][T15504] ethnl_default_set_doit+0x617/0x910 [ 346.292488][T15504] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 346.298374][T15504] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 346.304722][T15504] genl_rcv_msg+0xb14/0xec0 [ 346.309261][T15504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.314328][T15504] ? __pfx_lock_acquire+0x10/0x10 [ 346.319361][T15504] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 346.325370][T15504] ? __pfx___might_resched+0x10/0x10 [ 346.330705][T15504] netlink_rcv_skb+0x1e3/0x430 [ 346.335487][T15504] ? __pfx_genl_rcv_msg+0x10/0x10 [ 346.340512][T15504] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 346.345805][T15504] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 346.351273][T15504] genl_rcv+0x28/0x40 [ 346.355388][T15504] netlink_unicast+0x7f6/0x990 [ 346.360193][T15504] ? __pfx_netlink_unicast+0x10/0x10 [ 346.365500][T15504] ? __virt_addr_valid+0x45f/0x530 [ 346.370649][T15504] ? __phys_addr_symbol+0x2f/0x70 [ 346.375700][T15504] ? __check_object_size+0x47a/0x730 [ 346.380999][T15504] netlink_sendmsg+0x8e4/0xcb0 [ 346.385789][T15504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.391095][T15504] ? aa_sock_msg_perm+0x91/0x160 [ 346.396041][T15504] ? __pfx_netlink_sendmsg+0x10/0x10 [ 346.401331][T15504] __sock_sendmsg+0x221/0x270 [ 346.406031][T15504] ____sys_sendmsg+0x52a/0x7e0 [ 346.410835][T15504] ? __pfx_____sys_sendmsg+0x10/0x10 [ 346.416131][T15504] ? __fget_files+0x2a/0x410 [ 346.420731][T15504] ? __fget_files+0x2a/0x410 [ 346.425325][T15504] __sys_sendmsg+0x269/0x350 [ 346.429918][T15504] ? __pfx_lock_release+0x10/0x10 [ 346.434953][T15504] ? __pfx___sys_sendmsg+0x10/0x10 [ 346.440078][T15504] ? __pfx_vfs_write+0x10/0x10 [ 346.444872][T15504] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 346.451200][T15504] ? do_syscall_64+0x100/0x230 [ 346.455981][T15504] ? do_syscall_64+0xb6/0x230 [ 346.460686][T15504] do_syscall_64+0xf3/0x230 [ 346.465208][T15504] ? clear_bhb_loop+0x35/0x90 [ 346.469913][T15504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.475808][T15504] RIP: 0033:0x7f8d8dd85d29 [ 346.480217][T15504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.499820][T15504] RSP: 002b:00007f8d8ec9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 346.508260][T15504] RAX: ffffffffffffffda RBX: 00007f8d8df75fa0 RCX: 00007f8d8dd85d29 [ 346.516244][T15504] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 346.524224][T15504] RBP: 00007f8d8ec9c090 R08: 0000000000000000 R09: 0000000000000000 [ 346.532192][T15504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.540169][T15504] R13: 0000000000000000 R14: 00007f8d8df75fa0 R15: 00007ffcafa49918 [ 346.548143][T15504] [ 346.564115][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3415'. [ 346.755297][T15519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3419'. [ 346.852475][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3421'. [ 346.887612][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3422'. [ 346.936994][T15530] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3422'. [ 347.319229][T15552] syzkaller0: entered allmulticast mode [ 347.351770][T15552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3432'. [ 347.375391][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3432'. [ 347.405487][T15550] syzkaller0: left allmulticast mode [ 347.535100][T15564] xt_TPROXY: Can be used only with -p tcp or -p udp [ 347.798568][T15574] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸Ú' [ 347.824485][T15574] CPU: 1 UID: 0 PID: 15574 Comm: syz.4.3441 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 347.835326][T15574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 347.845415][T15574] Call Trace: [ 347.848720][T15574] [ 347.851676][T15574] dump_stack_lvl+0x241/0x360 [ 347.856385][T15574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 347.861600][T15574] ? __pfx__printk+0x10/0x10 [ 347.866212][T15574] ? __kmalloc_cache_noprof+0x243/0x390 [ 347.871782][T15574] ? sysfs_warn_dup+0x51/0xa0 [ 347.876471][T15574] sysfs_warn_dup+0x8e/0xa0 [ 347.880983][T15574] sysfs_do_create_link_sd+0xbe/0x110 [ 347.886361][T15574] device_add_class_symlinks+0x1c5/0x250 [ 347.891997][T15574] device_add+0x553/0xbf0 [ 347.896332][T15574] wiphy_register+0x1a58/0x27b0 [ 347.901196][T15574] ? __pfx_wiphy_register+0x10/0x10 [ 347.906394][T15574] ? minstrel_ht_alloc+0x72b/0x860 [ 347.911513][T15574] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 347.917582][T15574] ieee80211_register_hw+0x30fb/0x3e10 [ 347.923044][T15574] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 347.929389][T15574] ? ieee80211_register_hw+0x14c1/0x3e10 [ 347.935047][T15574] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 347.940883][T15574] ? __asan_memset+0x23/0x50 [ 347.945486][T15574] ? __hrtimer_init+0x170/0x250 [ 347.950350][T15574] mac80211_hwsim_new_radio+0x2a9f/0x4a90 [ 347.956098][T15574] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 347.962167][T15574] ? kstrndup+0x5c/0xb0 [ 347.966327][T15574] ? __asan_memcpy+0x40/0x70 [ 347.970919][T15574] hwsim_new_radio_nl+0xece/0x2290 [ 347.976049][T15574] ? __pfx___nla_validate_parse+0x10/0x10 [ 347.981773][T15574] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 347.987345][T15574] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 347.993694][T15574] genl_rcv_msg+0xb14/0xec0 [ 347.998239][T15574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.003330][T15574] ? __pfx_lock_acquire+0x10/0x10 [ 348.008369][T15574] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 348.013927][T15574] ? __pfx___might_resched+0x10/0x10 [ 348.019239][T15574] netlink_rcv_skb+0x1e3/0x430 [ 348.024009][T15574] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.029038][T15574] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.034342][T15574] genl_rcv+0x28/0x40 [ 348.038326][T15574] netlink_unicast+0x7f6/0x990 [ 348.043093][T15574] ? __pfx_netlink_unicast+0x10/0x10 [ 348.048371][T15574] ? __virt_addr_valid+0x45f/0x530 [ 348.053483][T15574] ? __phys_addr_symbol+0x2f/0x70 [ 348.058505][T15574] ? __check_object_size+0x47a/0x730 [ 348.063791][T15574] netlink_sendmsg+0x8e4/0xcb0 [ 348.068561][T15574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.073851][T15574] ? aa_sock_msg_perm+0x91/0x160 [ 348.078793][T15574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.084089][T15574] __sock_sendmsg+0x221/0x270 [ 348.088775][T15574] ____sys_sendmsg+0x52a/0x7e0 [ 348.093562][T15574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.098859][T15574] ? __fget_files+0x2a/0x410 [ 348.103456][T15574] ? __fget_files+0x2a/0x410 [ 348.108081][T15574] __sys_sendmsg+0x269/0x350 [ 348.112670][T15574] ? __pfx_futex_wake+0x10/0x10 [ 348.117522][T15574] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.122664][T15574] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.128993][T15574] ? do_syscall_64+0x100/0x230 [ 348.133773][T15574] ? do_syscall_64+0xb6/0x230 [ 348.138470][T15574] do_syscall_64+0xf3/0x230 [ 348.142971][T15574] ? clear_bhb_loop+0x35/0x90 [ 348.147649][T15574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.153543][T15574] RIP: 0033:0x7f7aaf785d29 [ 348.157957][T15574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.177560][T15574] RSP: 002b:00007f7ab04f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.185974][T15574] RAX: ffffffffffffffda RBX: 00007f7aaf975fa0 RCX: 00007f7aaf785d29 [ 348.193943][T15574] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 348.201918][T15574] RBP: 00007f7aaf801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 348.209884][T15574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.217861][T15574] R13: 0000000000000000 R14: 00007f7aaf975fa0 R15: 00007ffc5aa09168 [ 348.225842][T15574] [ 348.496411][T15585] gre1: entered promiscuous mode [ 348.747810][T15601] lo speed is unknown, defaulting to 1000 [ 348.938994][T15601] lo speed is unknown, defaulting to 1000 [ 349.812528][T15634] FAULT_INJECTION: forcing a failure. [ 349.812528][T15634] name failslab, interval 1, probability 0, space 0, times 0 [ 349.829967][T15634] CPU: 1 UID: 0 PID: 15634 Comm: syz.1.3461 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 349.840799][T15634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 349.850879][T15634] Call Trace: [ 349.854178][T15634] [ 349.857134][T15634] dump_stack_lvl+0x241/0x360 [ 349.861845][T15634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.867066][T15634] ? __pfx__printk+0x10/0x10 [ 349.871668][T15634] ? kmem_cache_alloc_noprof+0x48/0x380 [ 349.877212][T15634] ? __pfx___might_resched+0x10/0x10 [ 349.882492][T15634] should_fail_ex+0x3b0/0x4e0 [ 349.887181][T15634] should_failslab+0xac/0x100 [ 349.891896][T15634] ? __kernfs_new_node+0xd8/0x870 [ 349.896955][T15634] kmem_cache_alloc_noprof+0x70/0x380 [ 349.902361][T15634] __kernfs_new_node+0xd8/0x870 [ 349.907245][T15634] ? up_write+0x1a9/0x590 [ 349.911600][T15634] ? __pfx___kernfs_new_node+0x10/0x10 [ 349.917127][T15634] ? __pfx_up_write+0x10/0x10 [ 349.921850][T15634] kernfs_new_node+0x137/0x240 [ 349.926662][T15634] __kernfs_create_file+0x49/0x2e0 [ 349.931817][T15634] sysfs_add_file_mode_ns+0x24a/0x310 [ 349.937229][T15634] internal_create_group+0x782/0x12d0 [ 349.942633][T15634] ? __pfx_up_write+0x10/0x10 [ 349.947330][T15634] ? __pfx_internal_create_group+0x10/0x10 [ 349.953152][T15634] sysfs_create_groups+0x56/0x120 [ 349.958185][T15634] device_add_attrs+0xe5/0x600 [ 349.962955][T15634] ? __pfx_device_add_attrs+0x10/0x10 [ 349.968332][T15634] device_add+0x576/0xbf0 [ 349.972675][T15634] ? device_initialize+0x266/0x460 [ 349.977787][T15634] netdev_register_kobject+0x157/0x2e0 [ 349.983256][T15634] register_netdevice+0x12c5/0x1b00 [ 349.988488][T15634] ? __pfx_register_netdevice+0x10/0x10 [ 349.994062][T15634] ? __kasan_kmalloc+0x98/0xb0 [ 349.998851][T15634] ? register_vlan_dev+0x342/0x810 [ 350.003979][T15634] register_vlan_dev+0x38c/0x810 [ 350.008932][T15634] vlan_newlink+0x476/0x5c0 [ 350.013436][T15634] ? __pfx_vlan_newlink+0x10/0x10 [ 350.018462][T15634] rtnl_newlink_create+0x2ee/0xa40 [ 350.023584][T15634] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 350.029220][T15634] ? ns_capable+0x8a/0xf0 [ 350.033555][T15634] rtnl_newlink+0x1c7e/0x2210 [ 350.038251][T15634] ? __pfx_rtnl_newlink+0x10/0x10 [ 350.043281][T15634] ? __netlink_deliver_tap+0x56b/0x7f0 [ 350.048776][T15634] ? __pfx_validate_chain+0x10/0x10 [ 350.053985][T15634] ? __sock_sendmsg+0x221/0x270 [ 350.058850][T15634] ? ____sys_sendmsg+0x52a/0x7e0 [ 350.063795][T15634] ? __sys_sendmsg+0x269/0x350 [ 350.068558][T15634] ? do_syscall_64+0xf3/0x230 [ 350.073235][T15634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.079313][T15634] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 350.085299][T15634] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.091635][T15634] ? mark_lock+0x9a/0x360 [ 350.095965][T15634] ? __lock_acquire+0x1397/0x2100 [ 350.101009][T15634] ? __pfx_lock_release+0x10/0x10 [ 350.106045][T15634] ? __pfx_rtnl_newlink+0x10/0x10 [ 350.111070][T15634] rtnetlink_rcv_msg+0x791/0xcf0 [ 350.116005][T15634] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 350.121126][T15634] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.126588][T15634] ? ref_tracker_free+0x643/0x7e0 [ 350.131617][T15634] netlink_rcv_skb+0x1e3/0x430 [ 350.136389][T15634] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 350.141857][T15634] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 350.147159][T15634] ? netlink_deliver_tap+0x2e/0x1b0 [ 350.152358][T15634] netlink_unicast+0x7f6/0x990 [ 350.157124][T15634] ? __pfx_netlink_unicast+0x10/0x10 [ 350.162400][T15634] ? __virt_addr_valid+0x45f/0x530 [ 350.167511][T15634] ? __phys_addr_symbol+0x2f/0x70 [ 350.172531][T15634] ? __check_object_size+0x47a/0x730 [ 350.177820][T15634] netlink_sendmsg+0x8e4/0xcb0 [ 350.182589][T15634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.187884][T15634] ? aa_sock_msg_perm+0x91/0x160 [ 350.192821][T15634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 350.198099][T15634] __sock_sendmsg+0x221/0x270 [ 350.202802][T15634] ____sys_sendmsg+0x52a/0x7e0 [ 350.207603][T15634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 350.212888][T15634] ? __fget_files+0x2a/0x410 [ 350.217479][T15634] ? __fget_files+0x2a/0x410 [ 350.222071][T15634] __sys_sendmsg+0x269/0x350 [ 350.226657][T15634] ? __pfx_lock_release+0x10/0x10 [ 350.231679][T15634] ? __pfx___sys_sendmsg+0x10/0x10 [ 350.236797][T15634] ? __pfx_vfs_write+0x10/0x10 [ 350.241578][T15634] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 350.247907][T15634] ? do_syscall_64+0x100/0x230 [ 350.252674][T15634] ? do_syscall_64+0xb6/0x230 [ 350.257349][T15634] do_syscall_64+0xf3/0x230 [ 350.261847][T15634] ? clear_bhb_loop+0x35/0x90 [ 350.266524][T15634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.272418][T15634] RIP: 0033:0x7f8d8dd85d29 [ 350.276852][T15634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.296460][T15634] RSP: 002b:00007f8d8ec9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.304875][T15634] RAX: ffffffffffffffda RBX: 00007f8d8df75fa0 RCX: 00007f8d8dd85d29 [ 350.312841][T15634] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 350.320814][T15634] RBP: 00007f8d8ec9c090 R08: 0000000000000000 R09: 0000000000000000 [ 350.328782][T15634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 350.336753][T15634] R13: 0000000000000000 R14: 00007f8d8df75fa0 R15: 00007ffcafa49918 [ 350.344742][T15634] [ 350.468207][T15647] netlink: 'syz.1.3466': attribute type 12 has an invalid length. [ 350.502150][T15642] netlink: 'syz.0.3465': attribute type 7 has an invalid length. [ 350.524169][T15652] __nla_validate_parse: 7 callbacks suppressed [ 350.524191][T15652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3468'. [ 350.537758][T15652] xt_cgroup: invalid path, errno=-2 [ 350.746176][T15663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3471'. [ 350.807375][T15658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3469'. [ 350.822872][T15658] bond_slave_0: entered promiscuous mode [ 350.828645][T15658] bond_slave_1: entered promiscuous mode [ 350.866665][T15664] netlink: 'syz.1.3473': attribute type 12 has an invalid length. [ 350.915381][T15658] macvtap0: entered promiscuous mode [ 350.920767][T15658] bond0: entered promiscuous mode [ 350.944903][T15658] macvtap0: entered allmulticast mode [ 350.963667][T15658] bond0: entered allmulticast mode [ 350.983117][T15658] bond_slave_0: entered allmulticast mode [ 351.004304][T15658] bond_slave_1: entered allmulticast mode [ 351.019567][T15658] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 351.102430][T15679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3478'. [ 351.135654][T15679] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 351.173714][T15679] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 351.278725][T15687] lo speed is unknown, defaulting to 1000 [ 351.301409][T15692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3482'. [ 351.316961][T15693] netlink: 'syz.4.3481': attribute type 10 has an invalid length. [ 351.425512][T15693] veth0_vlan: left promiscuous mode [ 351.434721][T15693] veth0_vlan: entered promiscuous mode [ 351.458445][T15693] [ 351.460819][T15693] ============================================ [ 351.466992][T15693] WARNING: possible recursive locking detected [ 351.473179][T15693] 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 Not tainted [ 351.480301][T15693] -------------------------------------------- [ 351.486460][T15693] syz.4.3481/15693 is trying to acquire lock: [ 351.492533][T15693] ffff888047700e00 (team->team_lock_key#10){+.+.}-{4:4}, at: team_port_change_check+0x51/0x1e0 [ 351.502940][T15693] [ 351.502940][T15693] but task is already holding lock: [ 351.510314][T15693] ffff888047700e00 (team->team_lock_key#10){+.+.}-{4:4}, at: team_add_slave+0xad/0x2760 [ 351.520102][T15693] [ 351.520102][T15693] other info that might help us debug this: [ 351.528161][T15693] Possible unsafe locking scenario: [ 351.528161][T15693] [ 351.535624][T15693] CPU0 [ 351.538910][T15693] ---- [ 351.542197][T15693] lock(team->team_lock_key#10); [ 351.547249][T15693] lock(team->team_lock_key#10); [ 351.552305][T15693] [ 351.552305][T15693] *** DEADLOCK *** [ 351.552305][T15693] [ 351.560459][T15693] May be due to missing lock nesting notation [ 351.560459][T15693] [ 351.568789][T15693] 2 locks held by syz.4.3481/15693: [ 351.573997][T15693] #0: ffffffff8fcb3908 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210 [ 351.583094][T15693] #1: ffff888047700e00 (team->team_lock_key#10){+.+.}-{4:4}, at: team_add_slave+0xad/0x2760 [ 351.593332][T15693] [ 351.593332][T15693] stack backtrace: [ 351.599232][T15693] CPU: 0 UID: 0 PID: 15693 Comm: syz.4.3481 Not tainted 6.13.0-rc3-syzkaller-00672-gb73e56f16250 #0 [ 351.610017][T15693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 351.620093][T15693] Call Trace: [ 351.623387][T15693] [ 351.626333][T15693] dump_stack_lvl+0x241/0x360 [ 351.631036][T15693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 351.636251][T15693] ? __pfx__printk+0x10/0x10 [ 351.640843][T15693] ? lockdep_unlock+0x16a/0x300 [ 351.645704][T15693] print_deadlock_bug+0x483/0x620 [ 351.650777][T15693] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 351.656826][T15693] validate_chain+0x15e2/0x5920 [ 351.661704][T15693] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 351.668035][T15693] ? __pfx_validate_chain+0x10/0x10 [ 351.673227][T15693] ? __wake_up_common_lock+0x18c/0x1e0 [ 351.678688][T15693] ? __pfx_validate_chain+0x10/0x10 [ 351.683903][T15693] ? consume_skb+0xce/0xf0 [ 351.688317][T15693] ? netlink_broadcast_filtered+0x1260/0x12a0 [ 351.694379][T15693] ? __alloc_skb+0x28f/0x440 [ 351.698968][T15693] ? mod_objcg_state+0x125/0x930 [ 351.703912][T15693] ? nlmsg_notify+0xfb/0x1c0 [ 351.708505][T15693] ? nlmsg_notify+0x15a/0x1c0 [ 351.713185][T15693] ? mark_lock+0x9a/0x360 [ 351.717526][T15693] __lock_acquire+0x1397/0x2100 [ 351.722401][T15693] lock_acquire+0x1ed/0x550 [ 351.726904][T15693] ? team_port_change_check+0x51/0x1e0 [ 351.732360][T15693] ? __pfx_lock_acquire+0x10/0x10 [ 351.737387][T15693] ? __pfx___might_resched+0x10/0x10 [ 351.742668][T15693] ? cfg80211_netdev_notifier_call+0x1ec/0x1480 [ 351.748907][T15693] ? neigh_lookup+0xb9/0x700 [ 351.753526][T15693] ? __pfx_lock_release+0x10/0x10 [ 351.758565][T15693] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 351.765123][T15693] ? fib_new_table+0x120/0x2d0 [ 351.769902][T15693] __mutex_lock+0x1ac/0xee0 [ 351.774398][T15693] ? team_port_change_check+0x51/0x1e0 [ 351.779854][T15693] ? neigh_lookup+0x5da/0x700 [ 351.784542][T15693] ? __pfx_arp_key_eq+0x10/0x10 [ 351.789402][T15693] ? __pfx_arp_hash+0x10/0x10 [ 351.794070][T15693] ? neigh_lookup+0xb9/0x700 [ 351.798651][T15693] ? team_port_change_check+0x51/0x1e0 [ 351.804112][T15693] ? __pfx___mutex_lock+0x10/0x10 [ 351.809142][T15693] ? __asan_memset+0x23/0x50 [ 351.813746][T15693] team_port_change_check+0x51/0x1e0 [ 351.819039][T15693] team_device_event+0x4e6/0x5b0 [ 351.823990][T15693] ? notifier_call_chain+0x15a/0x3f0 [ 351.829266][T15693] notifier_call_chain+0x1a5/0x3f0 [ 351.834367][T15693] __dev_notify_flags+0x207/0x400 [ 351.839382][T15693] ? dev_set_rx_mode+0xb8/0x2e0 [ 351.844222][T15693] ? __pfx___dev_notify_flags+0x10/0x10 [ 351.849753][T15693] ? __dev_change_flags+0x515/0x6f0 [ 351.854964][T15693] ? __pfx___dev_change_flags+0x10/0x10 [ 351.860530][T15693] ? dsa_user_netdevice_event+0x714/0x2970 [ 351.866365][T15693] dev_change_flags+0xf0/0x1a0 [ 351.871158][T15693] vlan_device_event+0x1b81/0x1de0 [ 351.876291][T15693] ? rt6_multipath_rebalance+0x7b0/0x880 [ 351.881943][T15693] ? br_device_event+0x148/0x970 [ 351.886884][T15693] ? __pfx_phonet_device_notify+0x10/0x10 [ 351.892622][T15693] ? __pfx_vlan_device_event+0x10/0x10 [ 351.898086][T15693] ? __pfx_br_device_event+0x10/0x10 [ 351.903376][T15693] ? raw_notifier+0x9d/0x740 [ 351.908000][T15693] ? isotp_notifier+0xa4/0x6b0 [ 351.912765][T15693] ? cgw_notifier+0xd8/0x3b0 [ 351.917351][T15693] ? packet_notifier+0x76/0xa30 [ 351.922199][T15693] notifier_call_chain+0x1a5/0x3f0 [ 351.927306][T15693] dev_open+0x13a/0x1b0 [ 351.931469][T15693] ? __pfx_dev_open+0x10/0x10 [ 351.936160][T15693] ? trace_kmalloc+0x1f/0xd0 [ 351.940748][T15693] ? team_add_slave+0x8b5/0x2760 [ 351.945679][T15693] team_add_slave+0x9c8/0x2760 [ 351.950439][T15693] ? __dev_change_flags+0x515/0x6f0 [ 351.955626][T15693] ? __pfx_team_add_slave+0x10/0x10 [ 351.960817][T15693] ? __pfx___dev_change_flags+0x10/0x10 [ 351.966440][T15693] ? validate_linkmsg+0x828/0xa40 [ 351.971469][T15693] ? vprintk_emit+0x7ed/0xa10 [ 351.976150][T15693] ? __pfx_validate_linkmsg+0x10/0x10 [ 351.981516][T15693] ? mutex_is_locked+0x17/0x50 [ 351.986283][T15693] do_setlink+0xe40/0x4210 [ 351.990701][T15693] ? __pfx_do_setlink+0x10/0x10 [ 351.995573][T15693] ? __pfx___might_resched+0x10/0x10 [ 352.000848][T15693] ? __pfx___mutex_trylock_common+0x10/0x10 [ 352.006742][T15693] ? rcu_is_watching+0x15/0xb0 [ 352.011509][T15693] ? trace_contention_end+0x3c/0x120 [ 352.016806][T15693] ? __mutex_lock+0x37f/0xee0 [ 352.021482][T15693] ? __pfx_aa_get_newest_label+0x10/0x10 [ 352.027122][T15693] ? __pfx_aa_get_newest_label+0x10/0x10 [ 352.032748][T15693] ? rtnl_newlink+0xce2/0x2210 [ 352.037509][T15693] ? __pfx___mutex_lock+0x10/0x10 [ 352.042536][T15693] ? ns_capable+0x8a/0xf0 [ 352.046881][T15693] ? rtnl_link_get_net_capable+0x168/0x340 [ 352.052687][T15693] rtnl_newlink+0x1bb6/0x2210 [ 352.057365][T15693] ? __pfx_rtnl_newlink+0x10/0x10 [ 352.062383][T15693] ? __netlink_deliver_tap+0x56b/0x7f0 [ 352.067846][T15693] ? __pfx_validate_chain+0x10/0x10 [ 352.073061][T15693] ? __sock_sendmsg+0x221/0x270 [ 352.077910][T15693] ? ____sys_sendmsg+0x52a/0x7e0 [ 352.082840][T15693] ? __sys_sendmsg+0x269/0x350 [ 352.087596][T15693] ? do_syscall_64+0xf3/0x230 [ 352.092279][T15693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.098369][T15693] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 352.104345][T15693] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.110677][T15693] ? mark_lock+0x9a/0x360 [ 352.115029][T15693] ? __lock_acquire+0x1397/0x2100 [ 352.120053][T15693] ? __pfx_lock_release+0x10/0x10 [ 352.125075][T15693] ? __pfx_rtnl_newlink+0x10/0x10 [ 352.130093][T15693] rtnetlink_rcv_msg+0x791/0xcf0 [ 352.135037][T15693] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 352.140146][T15693] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.145604][T15693] ? ref_tracker_free+0x643/0x7e0 [ 352.150638][T15693] netlink_rcv_skb+0x1e3/0x430 [ 352.155446][T15693] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 352.160907][T15693] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 352.166203][T15693] ? netlink_deliver_tap+0x2e/0x1b0 [ 352.171426][T15693] netlink_unicast+0x7f6/0x990 [ 352.176179][T15693] ? __pfx_netlink_unicast+0x10/0x10 [ 352.181452][T15693] ? __virt_addr_valid+0x45f/0x530 [ 352.186564][T15693] ? __phys_addr_symbol+0x2f/0x70 [ 352.191595][T15693] ? __check_object_size+0x47a/0x730 [ 352.196877][T15693] netlink_sendmsg+0x8e4/0xcb0 [ 352.201637][T15693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.206934][T15693] ? aa_sock_msg_perm+0x91/0x160 [ 352.211862][T15693] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.217139][T15693] __sock_sendmsg+0x221/0x270 [ 352.221820][T15693] ____sys_sendmsg+0x52a/0x7e0 [ 352.226584][T15693] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.231865][T15693] ? __fget_files+0x2a/0x410 [ 352.236465][T15693] ? __fget_files+0x2a/0x410 [ 352.241053][T15693] __sys_sendmsg+0x269/0x350 [ 352.245639][T15693] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.250781][T15693] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 352.257103][T15693] ? do_syscall_64+0x100/0x230 [ 352.261863][T15693] ? do_syscall_64+0xb6/0x230 [ 352.266542][T15693] do_syscall_64+0xf3/0x230 [ 352.271038][T15693] ? clear_bhb_loop+0x35/0x90 [ 352.275711][T15693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.281619][T15693] RIP: 0033:0x7f7aaf785d29 [ 352.286028][T15693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.305657][T15693] RSP: 002b:00007f7ab04f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.314066][T15693] RAX: ffffffffffffffda RBX: 00007f7aaf975fa0 RCX: 00007f7aaf785d29 [ 352.322030][T15693] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 000000000000000b [ 352.329992][T15693] RBP: 00007f7aaf801aa8 R08: 0000000000000000 R09: 0000000000000000 [ 352.337952][T15693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.345923][T15693] R13: 0000000000000000 R14: 00007f7aaf975fa0 R15: 00007ffc5aa09168 [ 352.353889][T15693]