last executing test programs: 15.167846567s ago: executing program 3 (id=355): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a00000000000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) 14.975303158s ago: executing program 3 (id=359): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x3ff, 0xffff, 0xfffffffa}, 0x10) (async) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000001c0)) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) (async) sendfile(r4, r3, 0x0, 0x10000) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) (async, rerun: 64) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) (async) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r8, r9, 0x0, 0xffffffff000) socket(0xa, 0x3, 0x3a) 14.720909414s ago: executing program 3 (id=364): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x1a, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000240)={0x30, r1, 0x805, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x30}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x38}}, 0x0) 13.991764073s ago: executing program 3 (id=370): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x22}}, 0x5c}, 0x1, 0x0, 0x0, 0x40400a4}, 0x808c0) 13.532538694s ago: executing program 3 (id=379): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x8, 0xbf9}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x10012, 0xffffffffffffffff, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="20000000000000000000000007000000010007038e860b00000000000518cacc1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000026401010100f6ff00"], 0x40}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x128}, 0x8010) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 2.012494899s ago: executing program 0 (id=480): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x10) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r1, 0x1, 0x6300, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x40}}, 0x0) 1.7434536s ago: executing program 0 (id=482): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000ac0)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0xfffeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000000}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1, 0x60, 0xfff, 0x7, 0x80000000, 0x1, 0xa, 0x8, 0xfff, 0x4, 0x9, 0x78f, 0x0, 0x5d7, 0x1, 0x6, 0x0, 0x1, 0x1, 0x1, 0x40, 0x2, 0x1, 0xba0e, 0x3, 0x200, 0x8048, 0x1, 0x1, 0x2, 0xe8, 0x40, 0x6, 0x200, 0x5b3e, 0x993, 0x4, 0x7, 0x846, 0x5, 0x7, 0x8000, 0x30, 0x281, 0x4, 0x80000007, 0x6, 0x3, 0x2, 0x66eb, 0x2, 0x74, 0x7ff, 0xea4c, 0x1, 0x24, 0xfffffffc, 0x4, 0x100, 0x7, 0x8, 0x0, 0x94, 0x2, 0x1, 0xfff, 0x0, 0x5, 0x9, 0x7fff, 0x1, 0x30, 0x9f9, 0x5, 0x7fff, 0x8, 0x2, 0x1, 0x8, 0xf5, 0x10000, 0x9, 0x9, 0xe, 0x5, 0x0, 0x6, 0x1ff, 0x6, 0x5, 0x9, 0x5, 0x14, 0x58, 0x2, 0x3, 0x800, 0xf676, 0xfffffff7, 0xd9, 0x101, 0x2, 0x6, 0x8, 0x10001, 0x2, 0x0, 0xfffffeff, 0x8, 0x9, 0xffffffff, 0x9, 0x5, 0x1e2c, 0x401, 0x5, 0x5, 0x1, 0x7924, 0x0, 0x7, 0x9, 0x8000, 0x9, 0xfffffffd, 0x8, 0x82b, 0x4, 0x7, 0x0, 0x35e80000, 0x1, 0x1, 0xa26, 0x0, 0x2c, 0xfff, 0x7, 0x6, 0x7ede, 0x8000, 0x1, 0x4, 0x5, 0x3, 0x5, 0x3, 0x8, 0x4, 0xa21, 0x0, 0x7, 0x7, 0xfffffffc, 0x2, 0x6, 0x54ed5172, 0x6, 0x5, 0x0, 0xf, 0x20000, 0x9, 0x9e, 0x3, 0xbb42da9, 0x25, 0x6, 0x3, 0xd, 0x7, 0x2, 0x3, 0x5, 0xd, 0x4, 0x1ff, 0x9, 0x6, 0x6, 0x8, 0x40, 0x5, 0x9, 0xff, 0x5, 0x40, 0x0, 0x7, 0xfffffff5, 0x5, 0x8001, 0xdb1, 0x8, 0x81, 0x3, 0xfff, 0xd0, 0x10, 0x5, 0x5, 0xffffffff, 0x8, 0x9, 0xdc1b, 0xf2c, 0x10000, 0x4d, 0xe8b3, 0x6, 0x9, 0x2, 0x4, 0x2, 0xc, 0x1, 0x6, 0x896, 0x3, 0x0, 0x8cc6, 0x8, 0x10000, 0x4, 0x9, 0x8, 0x7, 0x1a, 0x80000001, 0x80000000, 0x10101, 0xd, 0x1, 0x9, 0x5, 0x4, 0xb1c0, 0x7, 0x7fffffff, 0x80, 0x8, 0x0, 0xffffffff, 0x40, 0x8001, 0x101, 0x8, 0x8, 0x1ff, 0xfc51c64, 0x10000, 0xffffffff, 0x400, 0x7, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000003c000b0000000000fcffffff04000000040000800c000100091c", @ANYRES64=r2], 0x24}}, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$kcm(0x29, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f00000003c0)={r4, r1, 0x7, 0xf6, &(0x7f00000002c0)="f79abad43dd342ba2532831e18d24737b0c545edb1effb37ca3efa16d322ada1486c34f1ab1705d8652522fbfc775a20c1792cf751aee430c1c5ebf6ad566e2c79e48d6f031f8491524844789773043c65a8c3aa3f48d18c01e2d56b1e98f89227d1815c7d536b97806958d4f62d47ce208888ba7e0fb859879f5e74129826998eda95c8ab7b293a5b8509aad3ef1d9310970b1f8a961fa61f62192c3d44a79a5d12fdd2ffb099966cb95d81887d671ec7d7f400898da947ed0390dee79d36eb34af9ebf394f618004a6a1079914cbea55ca5865fd17018c79e4fc5d81810dc1c3397d8b7010197043f651c3acba7b05a2da7a66df74", 0x4, 0x5, 0x4, 0xb0a, 0x6377, 0x0, 0x5, 'syz0\x00'}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_int(r1, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x1) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000014c0)="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", 0x5ad}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28, 0xffff0000}}], 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000090a010400000000000000000700fffe08000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d080003401000010000000000000000000084000a"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd602a8435001406ff00000000000000000000000000000000fe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="58c2"], 0x0) 1.631082689s ago: executing program 0 (id=485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000580)={@local, @random="24be2842400a", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x8, 0x4000, 0x0, 0x0, {[@md5sig={0x13, 0x12, "96b0cdc62ee035ff2c0b3cb1d94d93ba"}]}}}}}}}}, 0x0) 1.51581438s ago: executing program 1 (id=486): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x2}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="eb8f000000000000000007"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000851) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x1e) write(r0, &(0x7f0000000080)="0b000300010001", 0x7) 1.413515866s ago: executing program 1 (id=488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(0xffffffffffffffff) bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, &(0x7f0000001280), 0x4) sendmsg$inet(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000080)="0452", 0x2}], 0x1}, 0x20000801) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) sendmsg(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="1d", 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='c\x00\x00\x00', @ANYRES16=r1, @ANYRESOCT, @ANYRES32=r5, @ANYBLOB="30003300c0300700ffffffffffff080211000001505050505050e10639008c10ea00456cc1f3e08c58df61c75eae76e9"], 0x4c}, 0x1, 0x0, 0x0, 0x44}, 0x4008000) r6 = socket$kcm(0xa, 0x2, 0x3a) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448dd, &(0x7f00000003c0)) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRESOCT=r2, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB='\x00'/28], 0x50) recvmsg$kcm(r6, 0x0, 0x40010120) setsockopt$sock_attach_bpf(r6, 0x29, 0x21, &(0x7f0000000100), 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES8, @ANYBLOB='\x00'/14], 0x21}}, 0xa000000) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r9) sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8001) socket(0x27, 0x800, 0x4) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000301010200000000000000000a0000000c00198008000100020800005aaac06add63ac13b895f1213c2a278d63190f0a0c272645a4d3202e72359dffb8e4b650f29c2572e0918bdaa3"], 0x20}}, 0x0) 1.35211284s ago: executing program 0 (id=489): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="040000000000000000000000ae00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620130000000000095"], &(0x7f0000000040)='GPL\x00', 0xe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x710}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4], 0x9) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x7}, 0x1c) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f00000001c0)=0x9, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = socket$inet6(0xa, 0x3, 0x87) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a000101000000000000000002000000000000000000000014001d00"], 0x30}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@loopback={0x0, 0x7ffffffff000}, 0x800, 0x0, 0x1, 0x0, 0x0, 0xffff}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x3000, 0x0, 0x0, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.187807773s ago: executing program 2 (id=490): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x97}}], 0x1, 0x4000000) 1.120966338s ago: executing program 4 (id=491): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d34460400000000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.05116883s ago: executing program 4 (id=492): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r2) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x1, 0x62, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007060000", @ANYRES32=r1, @ANYBLOB], 0x270}}, 0x0) 1.047616923s ago: executing program 2 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x9c, &(0x7f0000000c40)=""/156, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xa, 0x0, &(0x7f0000000000)="b9ffe007600000000100", 0x0, 0x0, 0x60000000, 0x0, 0xfe32, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000100)=[{&(0x7f0000000180)=""/56, 0x38}], 0x1, 0x726, 0x7) socket$netlink(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newchain={0x24, 0x64, 0x10, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xc, 0x7}, {0xffff, 0x7}, {0xa, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd27, 0x4000, {0x60, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1, 0xc}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x7ffffffd}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x3000c81c) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 965.126801ms ago: executing program 1 (id=494): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$tun(r2, &(0x7f0000000640)={@void, @val={0x1, 0x3, 0x2, 0x7, 0x9, 0x1000}, @ipv6=@udp={0x3, 0x6, "a44b84", 0x3c4, 0x11, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, {[@routing={0x16, 0x4, 0x2, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2]}, @dstopts={0x3b, 0x1b, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @generic={0x7e, 0xc1, "bb01f5d83aa7cd424c7592ea7f686e0824b14b71ccf01a3b74598321cbdae19c2538730adf4e8d74e2cf6be3d91ddddd9abaeed5360997ca9445b3d21443dcbb276c7a89f30b8929bee0626c2b24719c13e3b6f8a5b62b931056fc3df50fbc9ec13389ded6768a93fb20843eebf2a16b3e677865fe0522e996d09722344d44d621c90e4fc3eb23ecf3d17edab338589335c24684e5652fa1ac913df022e544d72aa2fc827f8dc487e70c81cdd85b5ad0694190204adef24e29838a768b9619e277"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @srh={0x131a177609f69fbc, 0xc, 0x4, 0x6, 0x5, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @srh={0x88, 0x4, 0x4, 0x2, 0x0, 0x20, 0x1, [@private2, @dev={0xfe, 0x80, '\x00', 0x38}]}, @dstopts={0x32, 0x1f, '\x00', [@calipso={0x7, 0x40, {0x2, 0xe, 0xd, 0x101, [0x1, 0x71e, 0x6, 0x9, 0x6e22, 0x0, 0x5]}}, @ra={0x5, 0x2, 0xff}, @generic={0x60, 0x6f, "970e34bd262d1dc90b26c486287ca98b7f97fa37a69c236232bf17e7c25b283a8298d9da080c58618152e56c586f4d03969090f539ccd64e738fab656a7cd497d7ca6e81a0fc7edbee535427a712375583f6ef95d4424bbc6bb665c826a0123c1fe5896d00a080e42c1aa3d175d6a0"}, @ra={0x5, 0x2, 0xd}, @calipso={0x7, 0x40, {0x2, 0xe, 0x5, 0x100, [0x8000000000000000, 0x7, 0x5, 0x7, 0x1000, 0x4, 0x4]}}]}, @fragment={0x2c, 0x0, 0xc, 0x1, 0x0, 0x1a, 0x67}, @dstopts={0x4, 0x8, '\x00', [@ra, @generic={0x2, 0x33, "ea020b448d6a5e0eaca1ba0644aea7ada37b600f5dcb55372dbbcb607f20fd8bdca1402c1ff267970fcbfe6cc23c6c478ae1ca"}, @jumbo={0xc2, 0x4, 0xe7}, @generic]}], {0x4e21, 0x4e20, 0xc4, 0x0, @opaque="9eedef38907fd6cfeac4aa19940b30bce3e30249241ace7ce7da3715b6ecf4a96a8d666a686eeca3cfe5d39fa4fda21813cbff2b2601d0a3ce2dd5807fb13b4a2e5541becd5dd6ac534578ab87289c235e395d88f71fdf336d6c12d662cd3275a1a2db818a63a0faa5d9e19e6335c00b9283a084000515e11836c61421650b643b0edfa9c284b8e529786da13d982648f09bec02121e0cca74b07a050efafdd94d58665e495515dd5035a8dc53ddd4f74f24e5a736f31878ddd08c65"}}}}, 0x3f6) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x32, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e24, 0x1, 'lc\x00', 0x19, 0x6fe8, 0x79}, 0x2c) 889.693868ms ago: executing program 2 (id=495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xf4ff, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 871.161999ms ago: executing program 4 (id=496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r3, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x0, @dev}}) shutdown(r1, 0x1) recvmsg(r1, 0x0, 0x40010022) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b380380020000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @private2, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000080)="10b6fce2fc05df5bd5e06bf7db00", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14000000130001040000000000"], 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000580)={@local, @random="24be2842400a", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x8, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0xe, "baa2158a380367077c559c98"}, @md5sig={0x13, 0x12, "96b0cdc62ee035ff2c0b3cb1d94d93ba"}, @sack_perm={0x4, 0x2}, @mptcp=@remove_addr={0x1e, 0x1b, 0x3, 0x0, "94f13240280ad4bcb03451c77cf18b5094aa2f35f1d4cc27"}]}}}}}}}}, 0x0) 822.0315ms ago: executing program 1 (id=497): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r2) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000000)={0x0, 0xa7, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r3, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000) (fail_nth: 1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f00000001c0)={'syzkaller0\x00', {0x2, 0x0, @dev}}) shutdown(r1, 0x1) recvmsg(r1, 0x0, 0x40010022) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000480000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67893547db51ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd364158a4591c559f76c0130bfc4e90a6341865c3f5ab3e89cf6c662ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce74c4dae15cb7947c491b8bea3fd2f73902ebcfcf4982277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f00c484d339c480f70006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f294b2a431ab9142f3a06d54740a4bc5e3abd378af7c9676a08ef74c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d3287a7b01ab84d336f3c0f45a0642d6f2c494160cb7f46ce680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffe91ff799a11d9b219c00c369a12bf8685b862d0dbdd956cbda1bae489bcef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d253e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd3153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2af469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b815f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be15579518540000bc2d061827ae6349a045b780893771524a424335b9fc34616ee9f09141057262530b7c2f7c9b969938779736ece7b470078ac0b1b4b528000000009866e99948a9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dd6c3fa87a3ec91df199a9af91a7babf2b8d0e7b77e6dfb4bbc9817847b705000000a1000000000000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676080000007229e0237c1e34641848531712ff09e89fb062a3e66f4f3c9d7a7fc9aab1ced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3de705bdfbfd0e5e381398e9d5428a00cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e4196c3faeb7a690bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b270a3646ef55b9f070ae14466b3acef9f8b28fb938a237e2e068ae4a6bce4407b54cc14614c2cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcc1f594ecfaff9a79b56f8b380380020000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x4e24, 0x0, @private2, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000080)="10b6fce2fc05df5bd5e06bf7db00", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="14000000130001040000000000"], 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x4, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000580)={@local, @random="24be2842400a", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x8, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0xe, "baa2158a380367077c559c98"}, @md5sig={0x13, 0x12, "96b0cdc62ee035ff2c0b3cb1d94d93ba"}, @sack_perm={0x4, 0x2}, @mptcp=@remove_addr={0x1e, 0x1b, 0x3, 0x0, "94f13240280ad4bcb03451c77cf18b5094aa2f35f1d4cc27"}]}}}}}}}}, 0x0) 763.803423ms ago: executing program 2 (id=498): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1, 0x0, 0xb00}}], 0x1, 0x0) 329.18961ms ago: executing program 4 (id=499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xfffffff0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) (fail_nth: 12) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) 309.726536ms ago: executing program 1 (id=500): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003800)=@delchain={0xf90, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0xdd8, 0x2, [@TCA_ROUTE4_ACT={0xdcc, 0x6, [@m_police={0xdc8, 0x14, 0x0, 0x0, {{0xb}, {0xd54, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x2f2dcb08, 0x9, 0xceea, 0x0, 0xff, 0x46e, 0xb16, 0x7fff, 0x1, 0x8ba, 0x0, 0x9, 0x1, 0x7, 0x9, 0x2, 0x3, 0x9, 0x80000001, 0x6, 0x8, 0x7, 0x1, 0xfffffffb, 0x7, 0x81, 0x7, 0x3f, 0x7ff, 0xc0000000, 0xf1, 0x6, 0x7, 0x8, 0xde2, 0x101, 0x8001, 0x400, 0x8, 0x3b, 0x0, 0x8, 0xf6, 0xfa68, 0x729f, 0x2, 0x9, 0x0, 0xfd5, 0x3, 0x40, 0xfffffc01, 0x9, 0x40, 0x3ff, 0x5, 0xd, 0xfffffffb, 0x4, 0x0, 0x0, 0xfffffffd, 0xe, 0x8, 0x1, 0x3ff, 0x3, 0x10, 0xfff, 0x7, 0x1, 0x7, 0xfffffff9, 0x100, 0x401, 0x80, 0xfff, 0xcc, 0xbb2, 0x4, 0x3, 0xb, 0xfffffc01, 0x3ff, 0x10, 0xe1ed, 0x1, 0x6, 0x3, 0x9, 0x8, 0x9, 0x1000, 0x7, 0x6, 0x4, 0xfffffff8, 0x9, 0xbe, 0x183e0c63, 0x3, 0x185, 0xe, 0xf62, 0x80000001, 0x4, 0x9, 0x6, 0xfffffff5, 0x2, 0x10000, 0x0, 0x80, 0x1c0000, 0xa, 0x542, 0x0, 0xbb3, 0xfffffffa, 0x1, 0x1, 0x7f, 0xfffffc01, 0xffffffff, 0x7, 0x9, 0x8, 0x10001, 0xc, 0x1, 0x4f, 0x800, 0x1, 0x5, 0xffffff00, 0x4, 0x6e, 0xffff68b3, 0xfffff43e, 0x3ff, 0xb33, 0x4, 0x3, 0x5, 0x5a, 0x7, 0x5, 0x2, 0x2ef, 0x9, 0x8, 0x1, 0x4, 0x100, 0xfb4, 0x800, 0x8, 0x0, 0x1ff, 0x7fff, 0x2, 0xfffffff1, 0xb1fe, 0x5, 0x7, 0x8, 0xffff8001, 0x8, 0x8, 0x1, 0xffffffd2, 0x6, 0x100, 0x1, 0xb, 0x89, 0x9, 0x9, 0x10000, 0xa21d, 0x0, 0x80000000, 0x1, 0xc, 0x6, 0x7, 0x2, 0x5, 0x6, 0x9, 0x0, 0x1000, 0x10000, 0x7, 0x0, 0x68b0, 0x2, 0x7ff, 0x7fffffff, 0x4, 0xd17b, 0xc, 0x2, 0x401, 0xc, 0x8, 0x5, 0x5, 0x1, 0x0, 0x8, 0x9, 0x63, 0x9, 0x8, 0x4, 0x2, 0x0, 0x0, 0x2, 0x7fff, 0x5, 0x7, 0x1, 0x1, 0x8ad, 0x79aa, 0x7, 0xc, 0x7, 0xfffff618, 0x7, 0x5e2c, 0x1685, 0x7fff, 0x6, 0xfffffffa, 0x6, 0x90e4, 0xc5, 0x6, 0x8, 0x9, 0x6, 0x7, 0x98, 0xffffffff, 0x2, 0x7ff, 0x7, 0x0, 0x3, 0x8, 0xff, 0x9, 0xfff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x100, 0x10001, 0x3, 0x4, 0x2, 0x8001, 0xa, 0xfffffff7, 0xf7a, 0x2, 0x2, 0x8, 0x78, 0x4, 0x5, 0x13a, 0x6, 0x9, 0x7, 0x2, 0x400, 0x4, 0x80, 0x4, 0x3, 0x2, 0x6, 0x4, 0x7, 0x7f, 0x1, 0x1990, 0xffffff7f, 0x1, 0x5, 0x2, 0x8, 0x7, 0x72, 0x890e, 0x400, 0x7, 0x3, 0x2, 0xfffffffe, 0x7a42, 0x8, 0x8, 0x3, 0x5, 0x8, 0xd011, 0x5, 0x2, 0x40, 0xe, 0xfffffffa, 0xa809, 0x6, 0xf, 0x3, 0x9, 0x3, 0x3, 0x5, 0x3, 0x7, 0x40, 0x1, 0x7, 0xffffffff, 0x8, 0xc9c4306, 0xffffff23, 0x7fff, 0x3, 0x9, 0x677, 0x1ff, 0xfffffffb, 0x9b8, 0x2, 0x10000, 0x80000000, 0x6, 0x4, 0x7, 0x3, 0x1074, 0x7ff, 0xe, 0x4ed68c56, 0x7e, 0x34, 0x3ff, 0x80000001, 0x3, 0xe613, 0x1709, 0x400, 0x6, 0xfffffffd, 0xe8, 0x6, 0xb, 0x9, 0x8, 0x5, 0xffffffff, 0xffffff17, 0xb, 0x1ff, 0x5, 0x0, 0x5b36db19, 0x40, 0x101, 0x3, 0x9, 0xfffffff8, 0x4, 0x3, 0x0, 0x8, 0x5, 0x3, 0xfff, 0x3, 0x9, 0x4, 0xfffffff8, 0x400, 0x1f, 0xb526, 0x6, 0x7, 0x8, 0x10001, 0x0, 0x6, 0x3800000, 0x714b, 0x9, 0x1, 0x0, 0x0, 0x5746, 0x4, 0x2, 0x642e, 0xa51b, 0x1, 0x8001, 0x800, 0xfffffff9, 0xe0000000, 0x9, 0x6, 0x5, 0x6, 0x6, 0x9, 0x6a6, 0x20, 0x4, 0x238000, 0x7, 0x7, 0x0, 0x800, 0x20000000, 0x1, 0x5, 0x5, 0x1, 0xe6, 0x9, 0x80000000, 0xffff0001, 0xc9, 0xffffff20, 0x7, 0xfffffffb, 0x2, 0x9, 0x4, 0x4, 0xc97, 0x2, 0x8, 0x4, 0x6, 0x6, 0x5, 0x400, 0x6, 0x5, 0x9, 0x3, 0x9, 0x2, 0xbd8e, 0x4, 0x1, 0x24, 0xfffffff8, 0x38, 0x8000, 0x9, 0x9, 0xfff, 0x820e, 0x6, 0x6, 0x3, 0x4, 0x7, 0x2, 0x10001, 0xfff, 0x2, 0x80000001, 0x6, 0x6d5f, 0xa, 0xe, 0x4be9, 0x8, 0x10001, 0x8cb, 0xc960, 0x6, 0x7, 0x7, 0x1dc, 0x4800, 0x100, 0x401, 0x10, 0x7, 0x0, 0x100, 0x2, 0xffffffff, 0x9, 0x6, 0x8, 0x52, 0xfff, 0x9, 0x6, 0xffffffff, 0x985e, 0x1, 0x80000001, 0x5]}], [@TCA_POLICE_RATE={0x404, 0x2, [0xd8b9, 0x1, 0x7, 0x1, 0x4, 0x6, 0x7, 0x1, 0x8, 0x8, 0xc3f, 0x2, 0x98b, 0xabde0000, 0x3, 0x6, 0x1000, 0x2, 0x3, 0x6, 0x10000, 0x401, 0xc, 0x3, 0x8, 0x47, 0x5, 0x2, 0xfffffff7, 0x6, 0x5, 0x184, 0x80000000, 0xffff, 0x40, 0x2, 0x0, 0x6, 0x4, 0x81, 0x9, 0x1, 0x3, 0xffffffff, 0x8001, 0x7f, 0xffffffff, 0x9, 0x0, 0x1, 0x401, 0x8000, 0x80, 0xfffffffe, 0x7, 0x44f28183, 0x3, 0x6, 0x0, 0x6, 0x8, 0xe, 0x2, 0x8, 0xd81d, 0x1000, 0xffff8000, 0x240, 0x8, 0x5, 0x3, 0x9, 0x4, 0x3, 0x3ff, 0x5, 0x5, 0x1319, 0x1, 0x9, 0x71, 0x9, 0x1, 0xa4, 0x4, 0x7ff, 0x8, 0x2, 0x7, 0x3, 0x0, 0x10001, 0x4, 0x5471, 0x0, 0x2, 0x6, 0xc4e, 0x8, 0x2, 0x5d0c, 0x8001, 0xffffff7f, 0x6, 0x0, 0x3, 0x6, 0x2fdd, 0x101, 0x0, 0x400, 0x0, 0x5, 0x7f, 0x80000000, 0x43, 0xde, 0x2, 0x8, 0x10000, 0x6, 0x7fffffff, 0xf, 0xff, 0x180000, 0x9, 0x3a, 0x800, 0xfffff800, 0xc6, 0x2, 0x6, 0x7, 0x3, 0x0, 0x7, 0x80000000, 0x80, 0x4, 0x3, 0x50d, 0x7, 0x664, 0x9, 0x0, 0x1, 0x3, 0x6659, 0x6, 0x2020, 0x5ee, 0x6acc2006, 0xffff, 0x10, 0x2, 0x5, 0x7, 0x7, 0x1, 0x200000, 0x9, 0x124b1527, 0xc, 0x5, 0x80000001, 0x2, 0xd44, 0x4, 0x0, 0x9, 0x8, 0x10001, 0xcf5a, 0x4, 0x7, 0xfff, 0x5, 0x2, 0x4, 0x7, 0x6, 0x5, 0x6, 0xb, 0x9, 0xd5d, 0x4, 0x3, 0x6, 0x9, 0x3, 0x7, 0xef, 0x40, 0xa9, 0x6, 0x8, 0x7, 0x335, 0xffffff97, 0x3bce43f2, 0x981, 0x9, 0x0, 0x1137, 0x7, 0x8001, 0x10001, 0x4, 0xfffffff3, 0x7fffffff, 0x2, 0x3, 0x1e9, 0xbd5, 0xf, 0x2, 0xfffffffd, 0xfffffffb, 0x1, 0x2, 0x8, 0x8000, 0x3, 0x9, 0xffff755f, 0xc9cf, 0x3, 0x8, 0x4, 0x124d, 0xffffff80, 0x6, 0x1000000, 0x5, 0x5, 0x1, 0x0, 0xfff, 0x7, 0xfffffff9, 0xfff, 0x80000000, 0x202, 0x8, 0x7fff, 0x2, 0x6, 0x8001, 0x7, 0x6, 0x303, 0x4, 0x2, 0x125, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd68}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x1, 0x123, 0x3, {0xf4, 0x0, 0x67b, 0x4, 0x5, 0x101}, {0x9, 0x0, 0x8, 0x1, 0x9e27, 0x1}, 0xfff, 0x7, 0x8}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb0c}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdd, 0x5, 0xffffff80, 0xffffffff, 0x3, {0x2, 0x1, 0x1, 0xfffd, 0xe6c, 0x5}, {0x80, 0x0, 0x7f9, 0x9, 0x810b, 0x800}, 0x5, 0x15, 0xc24}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x8, 0x4, 0x514, 0x3, {0x7, 0x2, 0x401, 0x43, 0x2a0, 0x4}, {0x7, 0x1, 0x101, 0xd4d, 0x1ff, 0xffffffc0}, 0x2, 0xce, 0xea}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x10000000, 0x4, 0xff, 0x1, {0x10, 0x1, 0x6, 0x2, 0x81, 0x5}, {0xf, 0x0, 0x3, 0x5, 0x81, 0x3}, 0x3, 0x94, 0x100}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}]]}, {0x49, 0x6, "f20b202dce24d0703cb45f5ce826bde884bc772400192e3cef45ff05477a724abde39f4bb9d1a8e61bd07b3a0c075a11bc3a70b26518f95995673d7e7bcc26e48c6957c158"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x51}]}}, @TCA_CHAIN={0x8, 0xb, 0x20000000}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @filter_kind_options=@f_route={{0xa}, {0x160, 0x2, [@TCA_ROUTE4_POLICE={0x10, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6db}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xca}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x13c, 0x6, [@m_csum={0x8c, 0x1a, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x7, 0x4, 0x8000}, 0x6f}}]}, {0x41, 0x6, "19381787a244e0c371b7435ddb940e959db279edf692ad52828ad9b613c52af941e9fa7b0f3562267385c1eb87fc4d956dd1e0e83cff90d71de305ddb2"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mirred={0xac, 0x17, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x3, 0xae, 0x2}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x3, 0x10000000, 0x8, 0x8}, 0x4}}]}, {0x3d, 0x6, "2c62c963eac0c6d668d82240967b7532e338321003de4e40bb9a304114863218887c7f704cc0dde2d8751577a0cb3b9ce396244c01aee32fab"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}]}]}}]}, 0xf90}, 0x1, 0x0, 0x0, 0x81}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 263.833473ms ago: executing program 0 (id=501): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="310300000000000000000500000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x1000000}, 0x0) 259.541457ms ago: executing program 2 (id=502): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400600142603600e1208000b0000000401a8001600a400014009000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socket$inet(0x2, 0x80000, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@private1, @in6=@mcast1}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) 187.721072ms ago: executing program 4 (id=503): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x900, 0x20000040}, 0x40) 181.111255ms ago: executing program 1 (id=504): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x30, r1, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x8, 0x0, 0x2}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x70}, 0x2000c800) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b8cd11d00000000000000008000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0002000000000000b20200000000000085f2ff0086004000000000000000cf9e54df437e89b0830b8100"/51], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r4, &(0x7f0000000300)="2df4b984a42d5cc87c79e0b88c5395a648d2dfa3b0d924baa561a3d2739b02e028220bd3", &(0x7f0000000340)=""/91}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket(0x11, 0x3, 0x0) setsockopt$inet6_dccp_int(r5, 0x21, 0xa, &(0x7f00000000c0)=0x3e, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000280)={r8, 0x11, 0x6}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) bind$packet(r10, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 71.827484ms ago: executing program 0 (id=505): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xe803, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 47.890648ms ago: executing program 2 (id=506): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000180)=""/100, 0x64}], 0x1) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x3}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001400030400000000000000542d"], 0x44}}, 0x0) 15.440928ms ago: executing program 4 (id=507): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000540)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x52}, 0x1, 0x0, 0x0, 0x4}, 0x810) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c00000010000104000000000000000000002000", @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000006ef0200010000001ffe02000000000008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x105, 0x0, 0x1, 0x4b39e1fb, 0x0, @void, @value}, 0x28) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 3 (id=379): socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000580)={r0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x2, 0x8, 0xbf9}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x10012, 0xffffffffffffffff, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2713, 0x0, &(0x7f00000000c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="20000000000000000000000007000000010007038e860b00000000000518cacc1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000026401010100f6ff00"], 0x40}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0), 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x128}, 0x8010) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.123' (ED25519) to the list of known hosts. [ 82.040068][ T5832] cgroup: Unknown subsys name 'net' [ 82.152923][ T5832] cgroup: Unknown subsys name 'cpuset' [ 82.162678][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.870070][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.546840][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.559453][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.567823][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.576430][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.598916][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.609535][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.649039][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.658421][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.666466][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.670543][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.674319][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.688185][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.696241][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.707432][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.715472][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.715616][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.722889][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.737612][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.746744][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.755174][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.762314][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.770749][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.771332][ T5861] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.793706][ T5861] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.801586][ T5861] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.324372][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 87.433505][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 87.730186][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 87.754553][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.761967][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.769998][ T5843] bridge_slave_0: entered allmulticast mode [ 87.777459][ T5843] bridge_slave_0: entered promiscuous mode [ 87.786198][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.817251][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 87.843463][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.850813][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.858035][ T5843] bridge_slave_1: entered allmulticast mode [ 87.865913][ T5843] bridge_slave_1: entered promiscuous mode [ 87.966502][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.973816][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.981271][ T5860] bridge_slave_0: entered allmulticast mode [ 87.988888][ T5860] bridge_slave_0: entered promiscuous mode [ 88.027967][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.035597][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.042926][ T5860] bridge_slave_1: entered allmulticast mode [ 88.050990][ T5860] bridge_slave_1: entered promiscuous mode [ 88.067409][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.145466][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.222031][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.231821][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.239902][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.247116][ T5845] bridge_slave_0: entered allmulticast mode [ 88.255614][ T5845] bridge_slave_0: entered promiscuous mode [ 88.313910][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.337922][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.345762][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.353311][ T5845] bridge_slave_1: entered allmulticast mode [ 88.360752][ T5845] bridge_slave_1: entered promiscuous mode [ 88.385895][ T5843] team0: Port device team_slave_0 added [ 88.393037][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.400530][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.407810][ T5844] bridge_slave_0: entered allmulticast mode [ 88.416105][ T5844] bridge_slave_0: entered promiscuous mode [ 88.441509][ T5860] team0: Port device team_slave_0 added [ 88.451701][ T5860] team0: Port device team_slave_1 added [ 88.487510][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.495132][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.502629][ T5842] bridge_slave_0: entered allmulticast mode [ 88.511641][ T5842] bridge_slave_0: entered promiscuous mode [ 88.520072][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.527607][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.535609][ T5842] bridge_slave_1: entered allmulticast mode [ 88.543268][ T5842] bridge_slave_1: entered promiscuous mode [ 88.552671][ T5843] team0: Port device team_slave_1 added [ 88.564824][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.572124][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.579483][ T5844] bridge_slave_1: entered allmulticast mode [ 88.586841][ T5844] bridge_slave_1: entered promiscuous mode [ 88.677363][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.684421][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.710758][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.722037][ T5848] Bluetooth: hci2: command tx timeout [ 88.730538][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.737577][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.763663][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.779413][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.799178][ T5848] Bluetooth: hci3: command tx timeout [ 88.799205][ T5861] Bluetooth: hci1: command tx timeout [ 88.799242][ T5151] Bluetooth: hci0: command tx timeout [ 88.835784][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.849594][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.870367][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.880419][ T5151] Bluetooth: hci4: command tx timeout [ 88.891588][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.904474][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.914544][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.921670][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.947752][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.961069][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.968072][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.994077][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.091709][ T5844] team0: Port device team_slave_0 added [ 89.101789][ T5845] team0: Port device team_slave_0 added [ 89.140659][ T5844] team0: Port device team_slave_1 added [ 89.162559][ T5845] team0: Port device team_slave_1 added [ 89.185778][ T5842] team0: Port device team_slave_0 added [ 89.194725][ T5842] team0: Port device team_slave_1 added [ 89.274690][ T5860] hsr_slave_0: entered promiscuous mode [ 89.281829][ T5860] hsr_slave_1: entered promiscuous mode [ 89.309214][ T5843] hsr_slave_0: entered promiscuous mode [ 89.315671][ T5843] hsr_slave_1: entered promiscuous mode [ 89.322619][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.330734][ T5843] Cannot create hsr debugfs directory [ 89.337115][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.344413][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.371593][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.397772][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.404889][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.430957][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.445197][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.452642][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.478763][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.506092][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.513151][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.539225][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.551187][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.558188][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.584821][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.609562][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.616571][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.642814][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.854690][ T5845] hsr_slave_0: entered promiscuous mode [ 89.862514][ T5845] hsr_slave_1: entered promiscuous mode [ 89.869907][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.877505][ T5845] Cannot create hsr debugfs directory [ 89.903641][ T5842] hsr_slave_0: entered promiscuous mode [ 89.910770][ T5842] hsr_slave_1: entered promiscuous mode [ 89.916970][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.925926][ T5842] Cannot create hsr debugfs directory [ 89.986671][ T5844] hsr_slave_0: entered promiscuous mode [ 89.998995][ T5844] hsr_slave_1: entered promiscuous mode [ 90.005364][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.013287][ T5844] Cannot create hsr debugfs directory [ 90.518862][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.545331][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.558357][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.578929][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.644007][ T5860] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.667046][ T5860] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.696081][ T5860] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.717157][ T5860] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.789628][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.800582][ T5151] Bluetooth: hci2: command tx timeout [ 90.821634][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.836384][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.869425][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.883485][ T5151] Bluetooth: hci0: command tx timeout [ 90.883574][ T5861] Bluetooth: hci1: command tx timeout [ 90.894567][ T5848] Bluetooth: hci3: command tx timeout [ 90.956032][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.963008][ T5848] Bluetooth: hci4: command tx timeout [ 90.973942][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.987335][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.001502][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.086348][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.126759][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.153977][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.184497][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.206883][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.222868][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.284850][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.292215][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.331223][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.338387][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.392030][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.498762][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.546750][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.553995][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.587606][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.613408][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.630605][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.637929][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.723602][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.741567][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.785216][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.816897][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.824400][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.861867][ T2999] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.869128][ T2999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.887705][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.895279][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.914345][ T2999] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.921621][ T2999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.990299][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.014925][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.156730][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.202887][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.221450][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.228688][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.253970][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.261226][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.376323][ T5843] veth0_vlan: entered promiscuous mode [ 92.526925][ T5843] veth1_vlan: entered promiscuous mode [ 92.705395][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.744260][ T5843] veth0_macvtap: entered promiscuous mode [ 92.784342][ T5843] veth1_macvtap: entered promiscuous mode [ 92.879278][ T5848] Bluetooth: hci2: command tx timeout [ 92.924819][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.959112][ T5848] Bluetooth: hci0: command tx timeout [ 92.964601][ T5848] Bluetooth: hci3: command tx timeout [ 92.965674][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.970091][ T5861] Bluetooth: hci1: command tx timeout [ 93.022715][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.039213][ T5151] Bluetooth: hci4: command tx timeout [ 93.076801][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.086009][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.095372][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.104726][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.177013][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.202168][ T5842] veth0_vlan: entered promiscuous mode [ 93.246730][ T5860] veth0_vlan: entered promiscuous mode [ 93.281923][ T5842] veth1_vlan: entered promiscuous mode [ 93.301422][ T5844] veth0_vlan: entered promiscuous mode [ 93.325374][ T5860] veth1_vlan: entered promiscuous mode [ 93.359511][ T5844] veth1_vlan: entered promiscuous mode [ 93.454428][ T5842] veth0_macvtap: entered promiscuous mode [ 93.474831][ T5844] veth0_macvtap: entered promiscuous mode [ 93.494830][ T5844] veth1_macvtap: entered promiscuous mode [ 93.503165][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.526168][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.527950][ T5860] veth0_macvtap: entered promiscuous mode [ 93.544575][ T5842] veth1_macvtap: entered promiscuous mode [ 93.578090][ T5860] veth1_macvtap: entered promiscuous mode [ 93.590526][ T5845] veth0_vlan: entered promiscuous mode [ 93.625247][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.642112][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.653777][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.660125][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.673025][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.686205][ T5845] veth1_vlan: entered promiscuous mode [ 93.701075][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.714165][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.724840][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.736721][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.748357][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.761796][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.772649][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.783064][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.794184][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.804373][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.814932][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.827053][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.841453][ T5860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.852928][ T5860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.865499][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.881740][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.893129][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.904207][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.915254][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.927354][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.947026][ T5860] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.958442][ T5860] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.968394][ T5860] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.977944][ T5860] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.991269][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.003243][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.014811][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.025651][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.035843][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.046702][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.056083][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.059792][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.092434][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.102930][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.112862][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.122723][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.151959][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.163091][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.172561][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.181747][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.250171][ T5845] veth0_macvtap: entered promiscuous mode [ 94.266417][ T5932] veth1_macvtap: left promiscuous mode [ 94.273089][ T5932] macsec0: entered promiscuous mode [ 94.278335][ T5932] macsec0: entered allmulticast mode [ 94.335304][ T5845] veth1_macvtap: entered promiscuous mode [ 94.483832][ T5932] xt_hashlimit: size too large, truncated to 1048576 [ 94.510584][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.511407][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.518450][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.536797][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.559606][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.589689][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.613796][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.634916][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.658176][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.681946][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.706136][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.788316][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.804955][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.815956][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.827069][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.837252][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.848069][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.858314][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.869651][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.882654][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.905320][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.923580][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.941775][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.955187][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.964077][ T5151] Bluetooth: hci2: command tx timeout [ 94.989080][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.998432][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.016893][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.025490][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.041469][ T5151] Bluetooth: hci3: command tx timeout [ 95.043610][ T5848] Bluetooth: hci1: command tx timeout [ 95.046913][ T5151] Bluetooth: hci0: command tx timeout [ 95.097907][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.120954][ T5151] Bluetooth: hci4: command tx timeout [ 95.142624][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.166830][ T5942] Cannot find set identified by id 0 to match [ 95.263278][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.280626][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.389680][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.397568][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.472451][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.485307][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.676516][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.698284][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.408329][ T5987] dvmrp1: entered allmulticast mode [ 96.470890][ T5985] dvmrp1: left allmulticast mode [ 96.582460][ T5983] warning: `syz.1.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.641362][ T5996] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 96.827162][ T5999] FAULT_INJECTION: forcing a failure. [ 96.827162][ T5999] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 96.848494][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.2.18 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 96.848530][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 96.848547][ T5999] Call Trace: [ 96.848554][ T5999] [ 96.848564][ T5999] dump_stack_lvl+0x241/0x360 [ 96.848615][ T5999] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.848647][ T5999] ? __pfx__printk+0x10/0x10 [ 96.848690][ T5999] should_fail_ex+0x424/0x570 [ 96.848719][ T5999] _copy_from_user+0x2d/0xb0 [ 96.848750][ T5999] move_addr_to_kernel+0x7f/0x170 [ 96.848781][ T5999] copy_msghdr_from_user+0x477/0x580 [ 96.848816][ T5999] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 96.848841][ T5999] ? __fget_files+0x2a/0x420 [ 96.848865][ T5999] ? __fget_files+0x2a/0x420 [ 96.848894][ T5999] __sys_sendmmsg+0x361/0x7b0 [ 96.848931][ T5999] ? __pfx___sys_sendmmsg+0x10/0x10 [ 96.848993][ T5999] ? rcu_read_lock_any_held+0xbb/0x160 [ 96.849022][ T5999] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 96.849053][ T5999] ? vfs_write+0xb29/0xd10 [ 96.849088][ T5999] ? ksys_write+0x24e/0x2d0 [ 96.849116][ T5999] ? __mutex_unlock_slowpath+0x229/0x800 [ 96.849176][ T5999] ? ksys_write+0x275/0x2d0 [ 96.849213][ T5999] __x64_sys_sendmmsg+0xa0/0xb0 [ 96.849237][ T5999] do_syscall_64+0xf3/0x230 [ 96.849264][ T5999] ? clear_bhb_loop+0x45/0xa0 [ 96.849289][ T5999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.849310][ T5999] RIP: 0033:0x7f5b2258d169 [ 96.849333][ T5999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.849350][ T5999] RSP: 002b:00007f5b23463038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 96.849372][ T5999] RAX: ffffffffffffffda RBX: 00007f5b227a5fa0 RCX: 00007f5b2258d169 [ 96.849387][ T5999] RDX: 0000000000000001 RSI: 0000200000019680 RDI: 0000000000000004 [ 96.849401][ T5999] RBP: 00007f5b23463090 R08: 0000000000000000 R09: 0000000000000000 [ 96.849414][ T5999] R10: 0000000020004855 R11: 0000000000000246 R12: 0000000000000001 [ 96.849426][ T5999] R13: 0000000000000000 R14: 00007f5b227a5fa0 R15: 00007ffe4d1e3c98 [ 96.849460][ T5999] [ 97.283841][ T6003] FAULT_INJECTION: forcing a failure. [ 97.283841][ T6003] name failslab, interval 1, probability 0, space 0, times 1 [ 97.304183][ T6003] CPU: 1 UID: 0 PID: 6003 Comm: syz.0.20 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 97.304222][ T6003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.304235][ T6003] Call Trace: [ 97.304243][ T6003] [ 97.304253][ T6003] dump_stack_lvl+0x241/0x360 [ 97.304294][ T6003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.304324][ T6003] ? __pfx__printk+0x10/0x10 [ 97.304360][ T6003] ? __ip_dev_find+0x49b/0x580 [ 97.304393][ T6003] should_fail_ex+0x424/0x570 [ 97.304422][ T6003] should_failslab+0xac/0x100 [ 97.304460][ T6003] kmem_cache_alloc_noprof+0x78/0x390 [ 97.304489][ T6003] ? dst_alloc+0x12b/0x190 [ 97.304518][ T6003] dst_alloc+0x12b/0x190 [ 97.304547][ T6003] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 97.304587][ T6003] ip_route_output_key_hash+0x195/0x2b0 [ 97.304610][ T6003] ? ip_route_output_key_hash+0xe1/0x2b0 [ 97.304631][ T6003] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 97.304674][ T6003] ip_route_output_flow+0x29/0x140 [ 97.304710][ T6003] udp_sendmsg+0x17d6/0x2ca0 [ 97.304760][ T6003] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 97.304783][ T6003] ? __pfx_udp_sendmsg+0x10/0x10 [ 97.304815][ T6003] ? __up_read+0x2c4/0x6b0 [ 97.304868][ T6003] ? __pfx_aa_sk_perm+0x10/0x10 [ 97.304894][ T6003] ? sock_rps_record_flow+0x1a/0x410 [ 97.304922][ T6003] ? inet_sendmsg+0x2ba/0x390 [ 97.304950][ T6003] __sock_sendmsg+0x1a6/0x270 [ 97.304982][ T6003] ____sys_sendmsg+0x523/0x860 [ 97.305016][ T6003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.305036][ T6003] ? __fget_files+0x2a/0x420 [ 97.305059][ T6003] ? __fget_files+0x2a/0x420 [ 97.305089][ T6003] __sys_sendmmsg+0x3a0/0x7b0 [ 97.305126][ T6003] ? __pfx___sys_sendmmsg+0x10/0x10 [ 97.305194][ T6003] ? rcu_read_lock_any_held+0xbb/0x160 [ 97.305224][ T6003] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 97.305256][ T6003] ? vfs_write+0xb29/0xd10 [ 97.305292][ T6003] ? ksys_write+0x24e/0x2d0 [ 97.305320][ T6003] ? __mutex_unlock_slowpath+0x229/0x800 [ 97.305381][ T6003] ? ksys_write+0x275/0x2d0 [ 97.305420][ T6003] __x64_sys_sendmmsg+0xa0/0xb0 [ 97.305453][ T6003] do_syscall_64+0xf3/0x230 [ 97.305480][ T6003] ? clear_bhb_loop+0x45/0xa0 [ 97.305505][ T6003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.305526][ T6003] RIP: 0033:0x7fbf39b8d169 [ 97.305544][ T6003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.305562][ T6003] RSP: 002b:00007fbf3a91b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 97.305584][ T6003] RAX: ffffffffffffffda RBX: 00007fbf39da5fa0 RCX: 00007fbf39b8d169 [ 97.305599][ T6003] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 97.305613][ T6003] RBP: 00007fbf3a91b090 R08: 0000000000000000 R09: 0000000000000000 [ 97.305626][ T6003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.305639][ T6003] R13: 0000000000000000 R14: 00007fbf39da5fa0 R15: 00007ffef3ef8d78 [ 97.305672][ T6003] [ 97.619674][ T918] cfg80211: failed to load regulatory.db [ 97.681838][ T5865] IPVS: starting estimator thread 0... [ 97.786442][ T6006] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.788813][ T6004] IPVS: using max 24 ests per chain, 57600 per kthread [ 97.804252][ T6006] FAULT_INJECTION: forcing a failure. [ 97.804252][ T6006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.820842][ T6006] CPU: 1 UID: 0 PID: 6006 Comm: syz.1.22 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 97.820874][ T6006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 97.820887][ T6006] Call Trace: [ 97.820895][ T6006] [ 97.820903][ T6006] dump_stack_lvl+0x241/0x360 [ 97.820942][ T6006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.820972][ T6006] ? __pfx__printk+0x10/0x10 [ 97.821015][ T6006] should_fail_ex+0x424/0x570 [ 97.821043][ T6006] _copy_from_user+0x2d/0xb0 [ 97.821074][ T6006] copy_msghdr_from_user+0xb3/0x580 [ 97.821119][ T6006] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 97.821144][ T6006] ? __fget_files+0x2a/0x420 [ 97.821167][ T6006] ? __fget_files+0x2a/0x420 [ 97.821196][ T6006] __sys_sendmsg+0x20a/0x360 [ 97.821225][ T6006] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.821305][ T6006] ? do_syscall_64+0xb6/0x230 [ 97.821334][ T6006] do_syscall_64+0xf3/0x230 [ 97.821360][ T6006] ? clear_bhb_loop+0x45/0xa0 [ 97.821386][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.821405][ T6006] RIP: 0033:0x7f841798d169 [ 97.821424][ T6006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.821441][ T6006] RSP: 002b:00007f84188a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.821464][ T6006] RAX: ffffffffffffffda RBX: 00007f8417ba5fa0 RCX: 00007f841798d169 [ 97.821479][ T6006] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 97.821492][ T6006] RBP: 00007f84188a0090 R08: 0000000000000000 R09: 0000000000000000 [ 97.821505][ T6006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.821517][ T6006] R13: 0000000000000000 R14: 00007f8417ba5fa0 R15: 00007ffd5e5b3728 [ 97.821550][ T6006] [ 98.090466][ T6008] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 98.113226][ T6008] netlink: 'syz.0.21': attribute type 2 has an invalid length. [ 98.251045][ T6016] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.309022][ T6016] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 98.937202][ T6040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.34'. [ 98.992350][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.093339][ T6045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.191854][ T6040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.539603][ T6057] netlink: 19 bytes leftover after parsing attributes in process `syz.3.39'. [ 99.605531][ T6057] netlink: 'syz.3.39': attribute type 1 has an invalid length. [ 99.638824][ T6057] netlink: 244 bytes leftover after parsing attributes in process `syz.3.39'. [ 99.829701][ T6064] ip6gre1: entered allmulticast mode [ 100.048375][ T6072] FAULT_INJECTION: forcing a failure. [ 100.048375][ T6072] name failslab, interval 1, probability 0, space 0, times 0 [ 100.066182][ T6053] netlink: 'syz.1.37': attribute type 2 has an invalid length. [ 100.075831][ T6072] CPU: 1 UID: 0 PID: 6072 Comm: syz.2.45 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 100.075862][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.075875][ T6072] Call Trace: [ 100.075883][ T6072] [ 100.075891][ T6072] dump_stack_lvl+0x241/0x360 [ 100.075929][ T6072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.075960][ T6072] ? __pfx__printk+0x10/0x10 [ 100.075994][ T6072] ? __pfx___might_resched+0x10/0x10 [ 100.076025][ T6072] should_fail_ex+0x424/0x570 [ 100.076052][ T6072] should_failslab+0xac/0x100 [ 100.076083][ T6072] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 100.076121][ T6072] ? __alloc_skb+0x1c2/0x480 [ 100.076145][ T6072] __alloc_skb+0x1c2/0x480 [ 100.076171][ T6072] ? __pfx___alloc_skb+0x10/0x10 [ 100.076193][ T6072] ? netlink_autobind+0xd6/0x2f0 [ 100.076222][ T6072] ? netlink_autobind+0x2b0/0x2f0 [ 100.076257][ T6072] netlink_sendmsg+0x638/0xcd0 [ 100.076301][ T6072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.076335][ T6072] ? aa_sock_msg_perm+0x91/0x160 [ 100.076371][ T6072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.076398][ T6072] __sock_sendmsg+0x221/0x270 [ 100.076429][ T6072] ____sys_sendmsg+0x523/0x860 [ 100.076460][ T6072] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.076480][ T6072] ? __fget_files+0x2a/0x420 [ 100.076503][ T6072] ? __fget_files+0x2a/0x420 [ 100.076532][ T6072] __sys_sendmsg+0x271/0x360 [ 100.076560][ T6072] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.076640][ T6072] ? do_syscall_64+0xb6/0x230 [ 100.076670][ T6072] do_syscall_64+0xf3/0x230 [ 100.076696][ T6072] ? clear_bhb_loop+0x45/0xa0 [ 100.076721][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.076742][ T6072] RIP: 0033:0x7f5b2258d169 [ 100.076760][ T6072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.076777][ T6072] RSP: 002b:00007f5b23463038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.076801][ T6072] RAX: ffffffffffffffda RBX: 00007f5b227a5fa0 RCX: 00007f5b2258d169 [ 100.076816][ T6072] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 100.076829][ T6072] RBP: 00007f5b23463090 R08: 0000000000000000 R09: 0000000000000000 [ 100.076842][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.076855][ T6072] R13: 0000000000000000 R14: 00007f5b227a5fa0 R15: 00007ffe4d1e3c98 [ 100.076887][ T6072] [ 100.694153][ T6085] ip6gre1: entered promiscuous mode [ 100.813838][ T6087] netlink: 'syz.2.49': attribute type 30 has an invalid length. [ 100.842745][ T6091] netlink: 96 bytes leftover after parsing attributes in process `syz.1.51'. [ 101.015375][ T6102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 101.026479][ T6104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.56'. [ 101.255721][ T6117] FAULT_INJECTION: forcing a failure. [ 101.255721][ T6117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.265289][ T6115] netlink: 32 bytes leftover after parsing attributes in process `syz.2.60'. [ 101.283942][ T6117] CPU: 1 UID: 0 PID: 6117 Comm: syz.3.59 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 101.283970][ T6117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.283980][ T6117] Call Trace: [ 101.283988][ T6117] [ 101.283996][ T6117] dump_stack_lvl+0x241/0x360 [ 101.284028][ T6117] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.284052][ T6117] ? __pfx__printk+0x10/0x10 [ 101.284085][ T6117] should_fail_ex+0x424/0x570 [ 101.284108][ T6117] _copy_to_user+0x31/0xb0 [ 101.284134][ T6117] simple_read_from_buffer+0xc4/0x170 [ 101.284162][ T6117] proc_fail_nth_read+0x1ef/0x260 [ 101.284183][ T6117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.284203][ T6117] ? rw_verify_area+0x246/0x630 [ 101.284222][ T6117] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.284242][ T6117] vfs_read+0x21f/0xb90 [ 101.284268][ T6117] ? __pfx___mutex_lock+0x10/0x10 [ 101.284292][ T6117] ? __pfx_vfs_read+0x10/0x10 [ 101.284315][ T6117] ? __fget_files+0x2a/0x420 [ 101.284332][ T6117] ? __fget_files+0x39d/0x420 [ 101.284345][ T6117] ? __fget_files+0x2a/0x420 [ 101.284371][ T6117] ksys_read+0x19d/0x2d0 [ 101.284395][ T6117] ? __pfx_ksys_read+0x10/0x10 [ 101.284424][ T6117] ? do_syscall_64+0xb6/0x230 [ 101.284453][ T6117] do_syscall_64+0xf3/0x230 [ 101.284479][ T6117] ? clear_bhb_loop+0x45/0xa0 [ 101.284504][ T6117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.284523][ T6117] RIP: 0033:0x7fde5bb8bb7c [ 101.284543][ T6117] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.284559][ T6117] RSP: 002b:00007fde5ca0a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.284582][ T6117] RAX: ffffffffffffffda RBX: 00007fde5bda6080 RCX: 00007fde5bb8bb7c [ 101.284597][ T6117] RDX: 000000000000000f RSI: 00007fde5ca0a0a0 RDI: 0000000000000004 [ 101.284610][ T6117] RBP: 00007fde5ca0a090 R08: 0000000000000000 R09: 0000000000000000 [ 101.284623][ T6117] R10: 0000000000010100 R11: 0000000000000246 R12: 0000000000000001 [ 101.284636][ T6117] R13: 0000000000000001 R14: 00007fde5bda6080 R15: 00007ffc9e3a1068 [ 101.284668][ T6117] [ 101.517677][ T6088] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.891963][ T6131] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 101.917058][ T6127] FAULT_INJECTION: forcing a failure. [ 101.917058][ T6127] name failslab, interval 1, probability 0, space 0, times 0 [ 101.962250][ T6127] CPU: 1 UID: 0 PID: 6127 Comm: syz.1.64 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 101.962282][ T6127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 101.962294][ T6127] Call Trace: [ 101.962302][ T6127] [ 101.962311][ T6127] dump_stack_lvl+0x241/0x360 [ 101.962351][ T6127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.962380][ T6127] ? __pfx__printk+0x10/0x10 [ 101.962412][ T6127] ? __pfx___might_resched+0x10/0x10 [ 101.962442][ T6127] should_fail_ex+0x424/0x570 [ 101.962469][ T6127] should_failslab+0xac/0x100 [ 101.962499][ T6127] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 101.962529][ T6127] ? __alloc_skb+0x1c2/0x480 [ 101.962552][ T6127] __alloc_skb+0x1c2/0x480 [ 101.962574][ T6127] ? __pfx___alloc_skb+0x10/0x10 [ 101.962606][ T6127] ? netlink_autobind+0xd6/0x2f0 [ 101.962635][ T6127] ? netlink_autobind+0x2b0/0x2f0 [ 101.962669][ T6127] netlink_sendmsg+0x638/0xcd0 [ 101.962712][ T6127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.962747][ T6127] ? aa_sock_msg_perm+0x91/0x160 [ 101.962781][ T6127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.962809][ T6127] __sock_sendmsg+0x221/0x270 [ 101.962839][ T6127] ____sys_sendmsg+0x523/0x860 [ 101.962870][ T6127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.962890][ T6127] ? __fget_files+0x2a/0x420 [ 101.962913][ T6127] ? __fget_files+0x2a/0x420 [ 101.962942][ T6127] __sys_sendmsg+0x271/0x360 [ 101.962971][ T6127] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.963050][ T6127] ? do_syscall_64+0xb6/0x230 [ 101.963081][ T6127] do_syscall_64+0xf3/0x230 [ 101.963106][ T6127] ? clear_bhb_loop+0x45/0xa0 [ 101.963130][ T6127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.963150][ T6127] RIP: 0033:0x7f841798d169 [ 101.963168][ T6127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.963185][ T6127] RSP: 002b:00007f84188a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.963208][ T6127] RAX: ffffffffffffffda RBX: 00007f8417ba5fa0 RCX: 00007f841798d169 [ 101.963223][ T6127] RDX: 0000000020008844 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 101.963236][ T6127] RBP: 00007f84188a0090 R08: 0000000000000000 R09: 0000000000000000 [ 101.963249][ T6127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.963262][ T6127] R13: 0000000000000000 R14: 00007f8417ba5fa0 R15: 00007ffd5e5b3728 [ 101.963291][ T6127] [ 102.800902][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.808192][ T6152] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.889315][ T6155] Bluetooth: MGMT ver 1.23 [ 102.923442][ T6149] Zero length message leads to an empty skb [ 103.008769][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 103.483864][ T6180] FAULT_INJECTION: forcing a failure. [ 103.483864][ T6180] name failslab, interval 1, probability 0, space 0, times 0 [ 103.503367][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.3.82 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 103.503400][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.503413][ T6180] Call Trace: [ 103.503421][ T6180] [ 103.503437][ T6180] dump_stack_lvl+0x241/0x360 [ 103.503477][ T6180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.503509][ T6180] ? __pfx__printk+0x10/0x10 [ 103.503543][ T6180] ? __pfx___might_resched+0x10/0x10 [ 103.503574][ T6180] should_fail_ex+0x424/0x570 [ 103.503602][ T6180] should_failslab+0xac/0x100 [ 103.503633][ T6180] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 103.503675][ T6180] ? __alloc_skb+0x1c2/0x480 [ 103.503729][ T6180] __alloc_skb+0x1c2/0x480 [ 103.503756][ T6180] ? __pfx___alloc_skb+0x10/0x10 [ 103.503798][ T6180] netlink_sendmsg+0x638/0xcd0 [ 103.503843][ T6180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.503878][ T6180] ? aa_sock_msg_perm+0x91/0x160 [ 103.503915][ T6180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.503943][ T6180] __sock_sendmsg+0x221/0x270 [ 103.503993][ T6180] ____sys_sendmsg+0x523/0x860 [ 103.504026][ T6180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.504046][ T6180] ? __fget_files+0x2a/0x420 [ 103.504070][ T6180] ? __fget_files+0x2a/0x420 [ 103.504099][ T6180] __sys_sendmsg+0x271/0x360 [ 103.504128][ T6180] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.504208][ T6180] ? do_syscall_64+0xb6/0x230 [ 103.504239][ T6180] do_syscall_64+0xf3/0x230 [ 103.504266][ T6180] ? clear_bhb_loop+0x45/0xa0 [ 103.504291][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.504311][ T6180] RIP: 0033:0x7fde5bb8d169 [ 103.504330][ T6180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.504347][ T6180] RSP: 002b:00007fde5ca2b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.504370][ T6180] RAX: ffffffffffffffda RBX: 00007fde5bda5fa0 RCX: 00007fde5bb8d169 [ 103.504386][ T6180] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 103.504399][ T6180] RBP: 00007fde5ca2b090 R08: 0000000000000000 R09: 0000000000000000 [ 103.504412][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.504425][ T6180] R13: 0000000000000000 R14: 00007fde5bda5fa0 R15: 00007ffc9e3a1068 [ 103.504458][ T6180] [ 103.767685][ T6178] netlink: 'syz.2.81': attribute type 4 has an invalid length. [ 104.185296][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 104.676221][ T6186] infiniband syz!: set active [ 104.738358][ T6186] infiniband syz!: added team_slave_0 [ 104.770030][ T6186] syz!: rxe_create_cq: returned err = -12 [ 104.790297][ T6191] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.826248][ T6186] infiniband syz!: Couldn't create ib_mad CQ [ 104.851233][ T6186] infiniband syz!: Couldn't open port 1 [ 104.888642][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.052460][ T6186] RDS/IB: syz!: added [ 105.057065][ T6186] smc: adding ib device syz! with port count 1 [ 105.077412][ T6226] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.097957][ T6214] can: request_module (can-proto-5) failed. [ 105.112658][ T6186] smc: ib device syz! port 1 has pnetid [ 105.370053][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 105.394810][ T6234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 105.415665][ T6234] hsr0: entered promiscuous mode [ 105.755270][ T6245] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.101'. [ 106.164740][ T6257] FAULT_INJECTION: forcing a failure. [ 106.164740][ T6257] name failslab, interval 1, probability 0, space 0, times 0 [ 106.218244][ T6257] CPU: 1 UID: 0 PID: 6257 Comm: syz.2.106 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 106.218277][ T6257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 106.218290][ T6257] Call Trace: [ 106.218298][ T6257] [ 106.218307][ T6257] dump_stack_lvl+0x241/0x360 [ 106.218345][ T6257] ? __pfx_dump_stack_lvl+0x10/0x10 [ 106.218376][ T6257] ? __pfx__printk+0x10/0x10 [ 106.218410][ T6257] ? __pfx___might_resched+0x10/0x10 [ 106.218441][ T6257] should_fail_ex+0x424/0x570 [ 106.218469][ T6257] should_failslab+0xac/0x100 [ 106.218513][ T6257] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 106.218544][ T6257] ? __alloc_skb+0x1c2/0x480 [ 106.218567][ T6257] __alloc_skb+0x1c2/0x480 [ 106.218592][ T6257] ? __pfx___alloc_skb+0x10/0x10 [ 106.218614][ T6257] ? netlink_autobind+0xd6/0x2f0 [ 106.218643][ T6257] ? netlink_autobind+0x2b0/0x2f0 [ 106.218678][ T6257] netlink_sendmsg+0x638/0xcd0 [ 106.218721][ T6257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.218756][ T6257] ? aa_sock_msg_perm+0x91/0x160 [ 106.218791][ T6257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.218817][ T6257] __sock_sendmsg+0x221/0x270 [ 106.218848][ T6257] ____sys_sendmsg+0x523/0x860 [ 106.218879][ T6257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 106.218899][ T6257] ? __fget_files+0x2a/0x420 [ 106.218921][ T6257] ? __fget_files+0x2a/0x420 [ 106.218948][ T6257] __sys_sendmsg+0x271/0x360 [ 106.218975][ T6257] ? __pfx___sys_sendmsg+0x10/0x10 [ 106.219052][ T6257] ? do_syscall_64+0xb6/0x230 [ 106.219082][ T6257] do_syscall_64+0xf3/0x230 [ 106.219108][ T6257] ? clear_bhb_loop+0x45/0xa0 [ 106.219133][ T6257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.219153][ T6257] RIP: 0033:0x7f5b2258d169 [ 106.219172][ T6257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.219189][ T6257] RSP: 002b:00007f5b23463038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.219212][ T6257] RAX: ffffffffffffffda RBX: 00007f5b227a5fa0 RCX: 00007f5b2258d169 [ 106.219228][ T6257] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 106.219241][ T6257] RBP: 00007f5b23463090 R08: 0000000000000000 R09: 0000000000000000 [ 106.219254][ T6257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.219267][ T6257] R13: 0000000000000000 R14: 00007f5b227a5fa0 R15: 00007ffe4d1e3c98 [ 106.219298][ T6257] [ 106.527010][ T5929] hid-multitouch 0005:0457:0009.0001: unknown main item tag 0x0 [ 106.569226][ T5929] hid-multitouch 0005:0457:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 106.790437][ T6253] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.955655][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 106.969617][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.038636][ T6282] bridge0: entered promiscuous mode [ 107.048214][ T6282] macvlan2: entered promiscuous mode [ 107.157654][ T6282] macvlan3: entered promiscuous mode [ 107.163440][ T30] audit: type=1800 audit(1744320473.673:2): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.111" name="memory.events" dev="tmpfs" ino=118 res=0 errno=0 [ 107.191891][ T30] audit: type=1804 audit(1744320473.673:3): pid=6275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.111" name="/newroot/20/memory.events" dev="tmpfs" ino=118 res=1 errno=0 [ 108.646580][ T6302] netlink: 'syz.2.120': attribute type 29 has an invalid length. [ 108.670515][ T6302] FAULT_INJECTION: forcing a failure. [ 108.670515][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 108.689086][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.2.120 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 108.689117][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.689130][ T6302] Call Trace: [ 108.689138][ T6302] [ 108.689147][ T6302] dump_stack_lvl+0x241/0x360 [ 108.689185][ T6302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.689223][ T6302] ? __pfx__printk+0x10/0x10 [ 108.689257][ T6302] ? __pfx___might_resched+0x10/0x10 [ 108.689288][ T6302] should_fail_ex+0x424/0x570 [ 108.689315][ T6302] should_failslab+0xac/0x100 [ 108.689346][ T6302] __kmalloc_noprof+0xdf/0x4d0 [ 108.689375][ T6302] ? iovec_from_user+0x87/0x240 [ 108.689403][ T6302] ? __lock_acquire+0xad5/0xd80 [ 108.689428][ T6302] iovec_from_user+0x87/0x240 [ 108.689463][ T6302] __import_iovec+0x175/0x830 [ 108.689505][ T6302] import_iovec+0xeb/0x120 [ 108.689541][ T6302] copy_msghdr_from_user+0x3ee/0x580 [ 108.689577][ T6302] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 108.689603][ T6302] ? __fget_files+0x2a/0x420 [ 108.689626][ T6302] ? __fget_files+0x2a/0x420 [ 108.689655][ T6302] __sys_recvmsg+0x210/0x3a0 [ 108.689685][ T6302] ? __pfx___sys_recvmsg+0x10/0x10 [ 108.689722][ T6302] ? __fget_files+0x2a/0x420 [ 108.689768][ T6302] ? do_syscall_64+0xb6/0x230 [ 108.689797][ T6302] do_syscall_64+0xf3/0x230 [ 108.689824][ T6302] ? clear_bhb_loop+0x45/0xa0 [ 108.689849][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.689869][ T6302] RIP: 0033:0x7f5b2258d169 [ 108.689887][ T6302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.689904][ T6302] RSP: 002b:00007f5b23463038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 108.689927][ T6302] RAX: ffffffffffffffda RBX: 00007f5b227a5fa0 RCX: 00007f5b2258d169 [ 108.689943][ T6302] RDX: 0000000000010042 RSI: 0000200000000000 RDI: 0000000000000003 [ 108.689957][ T6302] RBP: 00007f5b23463090 R08: 0000000000000000 R09: 0000000000000000 [ 108.689969][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.689982][ T6302] R13: 0000000000000000 R14: 00007f5b227a5fa0 R15: 00007ffe4d1e3c98 [ 108.690014][ T6302] [ 109.039379][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.878167][ T6328] team0: No ports can be present during mode change [ 109.906416][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.130'. [ 109.959183][ T6330] FAULT_INJECTION: forcing a failure. [ 109.959183][ T6330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.024291][ T6330] CPU: 0 UID: 0 PID: 6330 Comm: syz.1.131 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 110.024325][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.024337][ T6330] Call Trace: [ 110.024346][ T6330] [ 110.024355][ T6330] dump_stack_lvl+0x241/0x360 [ 110.024394][ T6330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.024425][ T6330] ? __pfx__printk+0x10/0x10 [ 110.024465][ T6330] should_fail_ex+0x424/0x570 [ 110.024493][ T6330] _copy_from_user+0x2d/0xb0 [ 110.024523][ T6330] copy_msghdr_from_user+0xb3/0x580 [ 110.024556][ T6330] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 110.024581][ T6330] ? __fget_files+0x2a/0x420 [ 110.024605][ T6330] ? __fget_files+0x2a/0x420 [ 110.024631][ T6330] __sys_sendmsg+0x20a/0x360 [ 110.024659][ T6330] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.024738][ T6330] ? do_syscall_64+0xb6/0x230 [ 110.024768][ T6330] do_syscall_64+0xf3/0x230 [ 110.024794][ T6330] ? clear_bhb_loop+0x45/0xa0 [ 110.024831][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.024852][ T6330] RIP: 0033:0x7f841798d169 [ 110.024871][ T6330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.024888][ T6330] RSP: 002b:00007f84188a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.024911][ T6330] RAX: ffffffffffffffda RBX: 00007f8417ba5fa0 RCX: 00007f841798d169 [ 110.024926][ T6330] RDX: 0000000020008844 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 110.024939][ T6330] RBP: 00007f84188a0090 R08: 0000000000000000 R09: 0000000000000000 [ 110.024952][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.024964][ T6330] R13: 0000000000000000 R14: 00007f8417ba5fa0 R15: 00007ffd5e5b3728 [ 110.024996][ T6330] [ 110.060304][ T6334] netlink: 5096 bytes leftover after parsing attributes in process `syz.2.133'. [ 110.109666][ T6313] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.297837][ T6340] FAULT_INJECTION: forcing a failure. [ 110.297837][ T6340] name failslab, interval 1, probability 0, space 0, times 0 [ 110.324905][ T6340] CPU: 1 UID: 0 PID: 6340 Comm: syz.1.136 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 110.324936][ T6340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.324949][ T6340] Call Trace: [ 110.324956][ T6340] [ 110.324965][ T6340] dump_stack_lvl+0x241/0x360 [ 110.324999][ T6340] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.325026][ T6340] ? __pfx__printk+0x10/0x10 [ 110.325056][ T6340] ? __pfx___might_resched+0x10/0x10 [ 110.325087][ T6340] should_fail_ex+0x424/0x570 [ 110.325114][ T6340] should_failslab+0xac/0x100 [ 110.325143][ T6340] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 110.325167][ T6340] ? __d_alloc+0x31/0x740 [ 110.325193][ T6340] __d_alloc+0x31/0x740 [ 110.325215][ T6340] ? do_raw_spin_lock+0x151/0x370 [ 110.325248][ T6340] d_alloc_pseudo+0x1f/0xb0 [ 110.325271][ T6340] alloc_file_pseudo+0x143/0x320 [ 110.325298][ T6340] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 110.325320][ T6340] ? _raw_spin_unlock+0x28/0x50 [ 110.325341][ T6340] ? alloc_fd+0x6bd/0x730 [ 110.325379][ T6340] sock_alloc_file+0xb7/0x2e0 [ 110.325410][ T6340] __sys_socket+0x1dc/0x3c0 [ 110.325442][ T6340] ? __pfx___sys_socket+0x10/0x10 [ 110.325480][ T6340] __x64_sys_socket+0x7a/0x90 [ 110.325511][ T6340] do_syscall_64+0xf3/0x230 [ 110.325536][ T6340] ? clear_bhb_loop+0x45/0xa0 [ 110.325561][ T6340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.325580][ T6340] RIP: 0033:0x7f841798d169 [ 110.325598][ T6340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.325613][ T6340] RSP: 002b:00007f84188a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 110.325636][ T6340] RAX: ffffffffffffffda RBX: 00007f8417ba5fa0 RCX: 00007f841798d169 [ 110.325650][ T6340] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000002d [ 110.325662][ T6340] RBP: 00007f84188a0090 R08: 0000000000000000 R09: 0000000000000000 [ 110.325675][ T6340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.325687][ T6340] R13: 0000000000000001 R14: 00007f8417ba5fa0 R15: 00007ffd5e5b3728 [ 110.325718][ T6340] [ 110.573362][ T6336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.134'. [ 110.662259][ T6345] bond0: entered promiscuous mode [ 110.667573][ T6345] bond_slave_0: entered promiscuous mode [ 110.673734][ T6345] bond_slave_1: entered promiscuous mode [ 110.947354][ T6357] FAULT_INJECTION: forcing a failure. [ 110.947354][ T6357] name failslab, interval 1, probability 0, space 0, times 0 [ 110.976934][ T6357] CPU: 0 UID: 0 PID: 6357 Comm: syz.4.144 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 110.976982][ T6357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.976994][ T6357] Call Trace: [ 110.977002][ T6357] [ 110.977011][ T6357] dump_stack_lvl+0x241/0x360 [ 110.977049][ T6357] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.977078][ T6357] ? __pfx__printk+0x10/0x10 [ 110.977111][ T6357] ? __pfx___might_resched+0x10/0x10 [ 110.977141][ T6357] should_fail_ex+0x424/0x570 [ 110.977168][ T6357] should_failslab+0xac/0x100 [ 110.977199][ T6357] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 110.977228][ T6357] ? __alloc_skb+0x1c2/0x480 [ 110.977252][ T6357] __alloc_skb+0x1c2/0x480 [ 110.977278][ T6357] ? __pfx___alloc_skb+0x10/0x10 [ 110.977299][ T6357] ? netlink_autobind+0xd6/0x2f0 [ 110.977327][ T6357] ? netlink_autobind+0x2b0/0x2f0 [ 110.977362][ T6357] netlink_sendmsg+0x638/0xcd0 [ 110.977406][ T6357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.977441][ T6357] ? aa_sock_msg_perm+0x91/0x160 [ 110.977477][ T6357] ? __pfx_netlink_sendmsg+0x10/0x10 [ 110.977505][ T6357] __sock_sendmsg+0x221/0x270 [ 110.977536][ T6357] ____sys_sendmsg+0x523/0x860 [ 110.977569][ T6357] ? __pfx_____sys_sendmsg+0x10/0x10 [ 110.977589][ T6357] ? __fget_files+0x2a/0x420 [ 110.977612][ T6357] ? __fget_files+0x2a/0x420 [ 110.977641][ T6357] __sys_sendmsg+0x271/0x360 [ 110.977670][ T6357] ? __pfx___sys_sendmsg+0x10/0x10 [ 110.977751][ T6357] ? do_syscall_64+0xb6/0x230 [ 110.977782][ T6357] do_syscall_64+0xf3/0x230 [ 110.977808][ T6357] ? clear_bhb_loop+0x45/0xa0 [ 110.977833][ T6357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.977853][ T6357] RIP: 0033:0x7fa76a18d169 [ 110.977872][ T6357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.977889][ T6357] RSP: 002b:00007fa76b064038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.977911][ T6357] RAX: ffffffffffffffda RBX: 00007fa76a3a5fa0 RCX: 00007fa76a18d169 [ 110.977927][ T6357] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 110.977941][ T6357] RBP: 00007fa76b064090 R08: 0000000000000000 R09: 0000000000000000 [ 110.977961][ T6357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.977973][ T6357] R13: 0000000000000000 R14: 00007fa76a3a5fa0 R15: 00007ffd0b8a6298 [ 110.978005][ T6357] [ 111.335096][ T6369] FAULT_INJECTION: forcing a failure. [ 111.335096][ T6369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.348833][ T6369] CPU: 0 UID: 0 PID: 6369 Comm: syz.4.149 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 111.348862][ T6369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.348874][ T6369] Call Trace: [ 111.348882][ T6369] [ 111.348890][ T6369] dump_stack_lvl+0x241/0x360 [ 111.348936][ T6369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.348964][ T6369] ? __pfx__printk+0x10/0x10 [ 111.349005][ T6369] should_fail_ex+0x424/0x570 [ 111.349032][ T6369] _copy_to_user+0x31/0xb0 [ 111.349065][ T6369] simple_read_from_buffer+0xc4/0x170 [ 111.349098][ T6369] proc_fail_nth_read+0x1ef/0x260 [ 111.349123][ T6369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.349147][ T6369] ? rw_verify_area+0x246/0x630 [ 111.349168][ T6369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.349192][ T6369] vfs_read+0x21f/0xb90 [ 111.349221][ T6369] ? __pfx___mutex_lock+0x10/0x10 [ 111.349247][ T6369] ? __pfx_vfs_read+0x10/0x10 [ 111.349273][ T6369] ? __fget_files+0x2a/0x420 [ 111.349293][ T6369] ? __fget_files+0x39d/0x420 [ 111.349311][ T6369] ? __fget_files+0x2a/0x420 [ 111.349338][ T6369] ksys_read+0x19d/0x2d0 [ 111.349364][ T6369] ? __pfx_ksys_read+0x10/0x10 [ 111.349393][ T6369] ? do_syscall_64+0xb6/0x230 [ 111.349420][ T6369] do_syscall_64+0xf3/0x230 [ 111.349446][ T6369] ? clear_bhb_loop+0x45/0xa0 [ 111.349471][ T6369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.349491][ T6369] RIP: 0033:0x7fa76a18bb7c [ 111.349510][ T6369] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.349527][ T6369] RSP: 002b:00007fa76b064030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.349550][ T6369] RAX: ffffffffffffffda RBX: 00007fa76a3a5fa0 RCX: 00007fa76a18bb7c [ 111.349565][ T6369] RDX: 000000000000000f RSI: 00007fa76b0640a0 RDI: 0000000000000003 [ 111.349578][ T6369] RBP: 00007fa76b064090 R08: 0000000000000000 R09: 0000000000000000 [ 111.349591][ T6369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.349603][ T6369] R13: 0000000000000000 R14: 00007fa76a3a5fa0 R15: 00007ffd0b8a6298 [ 111.349636][ T6369] [ 111.588779][ T5151] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.595062][ T6364] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 111.902747][ T6381] FAULT_INJECTION: forcing a failure. [ 111.902747][ T6381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.917227][ T6381] CPU: 0 UID: 0 PID: 6381 Comm: syz.0.154 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 111.917257][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 111.917269][ T6381] Call Trace: [ 111.917277][ T6381] [ 111.917286][ T6381] dump_stack_lvl+0x241/0x360 [ 111.917324][ T6381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.917355][ T6381] ? __pfx__printk+0x10/0x10 [ 111.917397][ T6381] should_fail_ex+0x424/0x570 [ 111.917425][ T6381] _copy_from_user+0x2d/0xb0 [ 111.917456][ T6381] copy_msghdr_from_user+0xb3/0x580 [ 111.917491][ T6381] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 111.917555][ T6381] do_recvmmsg+0x3bf/0xab0 [ 111.917597][ T6381] ? __pfx_do_recvmmsg+0x10/0x10 [ 111.917639][ T6381] ? rcu_read_lock_any_held+0xbb/0x160 [ 111.917668][ T6381] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 111.917700][ T6381] ? vfs_write+0xb29/0xd10 [ 111.917736][ T6381] ? ksys_write+0x24e/0x2d0 [ 111.917763][ T6381] ? __mutex_unlock_slowpath+0x229/0x800 [ 111.917801][ T6381] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 111.917826][ T6381] ? __fget_files+0x2a/0x420 [ 111.917863][ T6381] __x64_sys_recvmmsg+0x1ab/0x260 [ 111.917896][ T6381] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 111.917938][ T6381] ? do_syscall_64+0xb6/0x230 [ 111.917968][ T6381] do_syscall_64+0xf3/0x230 [ 111.917994][ T6381] ? clear_bhb_loop+0x45/0xa0 [ 111.918020][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.918040][ T6381] RIP: 0033:0x7fbf39b8d169 [ 111.918064][ T6381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.918107][ T6381] RSP: 002b:00007fbf3a91b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 111.918156][ T6381] RAX: ffffffffffffffda RBX: 00007fbf39da5fa0 RCX: 00007fbf39b8d169 [ 111.918176][ T6381] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 000000000000000e [ 111.918189][ T6381] RBP: 00007fbf3a91b090 R08: 0000000000000000 R09: 0000000000000000 [ 111.918202][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 111.918218][ T6381] R13: 0000000000000000 R14: 00007fbf39da5fa0 R15: 00007ffef3ef8d78 [ 111.918263][ T6381] [ 112.174382][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 112.183915][ T6385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.155'. [ 112.785674][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.164'. [ 112.797300][ T6414] block nbd0: not configured, cannot reconfigure [ 112.854643][ T6414] raw_sendmsg: syz.2.164 forgot to set AF_INET. Fix it! [ 113.228697][ T6397] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 113.285834][ T6425] FAULT_INJECTION: forcing a failure. [ 113.285834][ T6425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.308308][ T6425] CPU: 1 UID: 0 PID: 6425 Comm: syz.1.170 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 113.308340][ T6425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.308353][ T6425] Call Trace: [ 113.308361][ T6425] [ 113.308370][ T6425] dump_stack_lvl+0x241/0x360 [ 113.308409][ T6425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.308439][ T6425] ? __pfx__printk+0x10/0x10 [ 113.308481][ T6425] should_fail_ex+0x424/0x570 [ 113.308518][ T6425] _copy_to_user+0x31/0xb0 [ 113.308551][ T6425] simple_read_from_buffer+0xc4/0x170 [ 113.308587][ T6425] proc_fail_nth_read+0x1ef/0x260 [ 113.308612][ T6425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.308638][ T6425] ? rw_verify_area+0x246/0x630 [ 113.308661][ T6425] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 113.308683][ T6425] vfs_read+0x21f/0xb90 [ 113.308711][ T6425] ? __pfx___mutex_lock+0x10/0x10 [ 113.308738][ T6425] ? __pfx_vfs_read+0x10/0x10 [ 113.308765][ T6425] ? __fget_files+0x2a/0x420 [ 113.308786][ T6425] ? __fget_files+0x39d/0x420 [ 113.308804][ T6425] ? __fget_files+0x2a/0x420 [ 113.308834][ T6425] ksys_read+0x19d/0x2d0 [ 113.308860][ T6425] ? __pfx_ksys_read+0x10/0x10 [ 113.308891][ T6425] ? do_syscall_64+0xb6/0x230 [ 113.308920][ T6425] do_syscall_64+0xf3/0x230 [ 113.308947][ T6425] ? clear_bhb_loop+0x45/0xa0 [ 113.308972][ T6425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.308992][ T6425] RIP: 0033:0x7f841798bb7c [ 113.309011][ T6425] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 113.309028][ T6425] RSP: 002b:00007f84188a0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 113.309052][ T6425] RAX: ffffffffffffffda RBX: 00007f8417ba5fa0 RCX: 00007f841798bb7c [ 113.309067][ T6425] RDX: 000000000000000f RSI: 00007f84188a00a0 RDI: 0000000000000004 [ 113.309080][ T6425] RBP: 00007f84188a0090 R08: 0000000000000000 R09: 0000000000000000 [ 113.309094][ T6425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.309106][ T6425] R13: 0000000000000000 R14: 00007f8417ba5fa0 R15: 00007ffd5e5b3728 [ 113.309139][ T6425] [ 113.570823][ T6430] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 113.583747][ T6430] netlink: 36 bytes leftover after parsing attributes in process `syz.3.173'. [ 113.642409][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.174'. [ 113.749830][ T6435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.174'. [ 113.759038][ T6435] netlink: 28 bytes leftover after parsing attributes in process `syz.2.174'. [ 113.776241][ T6435] batadv0: entered promiscuous mode [ 113.785402][ T6439] Cannot find set identified by id 0 to match [ 113.808349][ T6435] batadv0: left promiscuous mode [ 114.058104][ T6453] x_tables: duplicate underflow at hook 1 [ 114.132525][ T6459] netlink: 'syz.4.181': attribute type 1 has an invalid length. [ 114.165893][ T6459] netlink: 'syz.4.181': attribute type 5 has an invalid length. [ 114.794320][ T6482] netlink: 'syz.3.192': attribute type 7 has an invalid length. [ 114.943955][ T6488] Illegal XDP return value 4291489792 on prog (id 36) dev N/A, expect packet loss! [ 114.965283][ T6490] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 115.002931][ T6490] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.011780][ T6490] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.283750][ T5151] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 115.292757][ T6407] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 115.612030][ T6517] __nla_validate_parse: 5 callbacks suppressed [ 115.612051][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.206'. [ 115.844971][ T6530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.211'. [ 115.857257][ T6530] netlink: 'syz.3.211': attribute type 7 has an invalid length. [ 115.885263][ T6530] netlink: 'syz.3.211': attribute type 8 has an invalid length. [ 115.895948][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.211'. [ 116.169529][ T6546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.461788][ T6557] netlink: 'syz.4.221': attribute type 11 has an invalid length. [ 116.485719][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'. [ 116.496643][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'. [ 116.517042][ T6559] FAULT_INJECTION: forcing a failure. [ 116.517042][ T6559] name failslab, interval 1, probability 0, space 0, times 0 [ 116.535256][ T6559] CPU: 1 UID: 0 PID: 6559 Comm: syz.1.222 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 116.535291][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.535304][ T6559] Call Trace: [ 116.535312][ T6559] [ 116.535321][ T6559] dump_stack_lvl+0x241/0x360 [ 116.535368][ T6559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.535406][ T6559] ? __pfx__printk+0x10/0x10 [ 116.535441][ T6559] ? __pfx___might_resched+0x10/0x10 [ 116.535474][ T6559] should_fail_ex+0x424/0x570 [ 116.535503][ T6559] should_failslab+0xac/0x100 [ 116.535534][ T6559] __kmalloc_cache_noprof+0x73/0x370 [ 116.535562][ T6559] ? hsr_create_self_node+0x5a/0x340 [ 116.535598][ T6559] hsr_create_self_node+0x5a/0x340 [ 116.535633][ T6559] hsr_dev_finalize+0x280/0xa20 [ 116.535664][ T6559] hsr_newlink+0x976/0xab0 [ 116.535686][ T6559] ? alloc_netdev_mqs+0xe8e/0x1210 [ 116.535716][ T6559] ? __pfx_hsr_newlink+0x10/0x10 [ 116.535739][ T6559] ? rtnl_create_link+0x95b/0xc90 [ 116.535766][ T6559] ? __pfx_hsr_newlink+0x10/0x10 [ 116.535789][ T6559] rtnl_newlink_create+0x39b/0xcb0 [ 116.535824][ T6559] ? __mutex_lock+0xbe3/0x10c0 [ 116.535860][ T6559] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 116.535897][ T6559] ? __pfx___mutex_lock+0x10/0x10 [ 116.535940][ T6559] ? ns_capable+0x8a/0xf0 [ 116.535966][ T6559] rtnl_newlink+0x18b0/0x1fe0 [ 116.536018][ T6559] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.536045][ T6559] ? dev_hard_start_xmit+0x2d9/0x830 [ 116.536065][ T6559] ? __dev_queue_xmit+0x1b80/0x3f60 [ 116.536087][ T6559] ? __netlink_deliver_tap+0x561/0x7f0 [ 116.536115][ T6559] ? netlink_deliver_tap+0x19d/0x1b0 [ 116.536142][ T6559] ? netlink_unicast+0x7c6/0x9a0 [ 116.536165][ T6559] ? netlink_sendmsg+0x8c3/0xcd0 [ 116.536192][ T6559] ? __sock_sendmsg+0x221/0x270 [ 116.536217][ T6559] ? ____sys_sendmsg+0x523/0x860 [ 116.536236][ T6559] ? __sys_sendmsg+0x271/0x360 [ 116.536254][ T6559] ? do_syscall_64+0xf3/0x230 [ 116.536279][ T6559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.536345][ T6559] ? kasan_quarantine_put+0xdc/0x230 [ 116.536367][ T6559] ? lockdep_hardirqs_on+0x9d/0x150 [ 116.536396][ T6559] ? nlmon_xmit+0xaf/0x100 [ 116.536435][ T6559] ? __local_bh_enable_ip+0x168/0x200 [ 116.536454][ T6559] ? lockdep_hardirqs_on+0x9d/0x150 [ 116.536488][ T6559] ? aa_get_newest_label+0x101/0x6f0 [ 116.536525][ T6559] ? __lock_acquire+0xad5/0xd80 [ 116.536571][ T6559] ? __pfx_rtnl_newlink+0x10/0x10 [ 116.536603][ T6559] rtnetlink_rcv_msg+0x80f/0xd70 [ 116.536630][ T6559] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 116.536665][ T6559] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.536703][ T6559] ? ref_tracker_free+0x63e/0x7e0 [ 116.536734][ T6559] netlink_rcv_skb+0x208/0x480 [ 116.536765][ T6559] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 116.536798][ T6559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.536848][ T6559] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.536881][ T6559] ? netlink_deliver_tap+0x2e/0x1b0 [ 116.536913][ T6559] netlink_unicast+0x7f8/0x9a0 [ 116.536950][ T6559] ? __pfx_netlink_unicast+0x10/0x10 [ 116.536979][ T6559] ? skb_put+0x114/0x1f0 [ 116.537004][ T6559] netlink_sendmsg+0x8c3/0xcd0 [ 116.537049][ T6559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.537084][ T6559] ? aa_sock_msg_perm+0x91/0x160 [ 116.537120][ T6559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.537147][ T6559] __sock_sendmsg+0x221/0x270 [ 116.537178][ T6559] ____sys_sendmsg+0x523/0x860 [ 116.537211][ T6559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 116.537230][ T6559] ? __fget_files+0x2a/0x420 [ 116.537254][ T6559] ? __fget_files+0x2a/0x420 [ 116.537283][ T6559] __sys_sendmsg+0x271/0x360 [ 116.537312][ T6559] ? __pfx___sys_sendmsg+0x10/0x10 [ 116.537403][ T6559] ? do_syscall_64+0xb6/0x230 [ 116.537432][ T6559] do_syscall_64+0xf3/0x230 [ 116.537458][ T6559] ? clear_bhb_loop+0x45/0xa0 [ 116.537483][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.537504][ T6559] RIP: 0033:0x7f841798d169 [ 116.537522][ T6559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.537539][ T6559] RSP: 002b:00007f84188a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 116.537562][ T6559] RAX: ffffffffffffffda RBX: 00007f8417ba5fa0 RCX: 00007f841798d169 [ 116.537577][ T6559] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000013 [ 116.537591][ T6559] RBP: 00007f84188a0090 R08: 0000000000000000 R09: 0000000000000000 [ 116.537604][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.537616][ T6559] R13: 0000000000000000 R14: 00007f8417ba5fa0 R15: 00007ffd5e5b3728 [ 116.537649][ T6559] [ 117.018391][ T6548] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.216035][ T6567] Cannot find add_set index 2 as target [ 117.989989][ T6598] netlink: 16 bytes leftover after parsing attributes in process `syz.0.237'. [ 118.023985][ T6596] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 118.760290][ T6630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.251'. [ 118.807394][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 118.811742][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 118.823836][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.253'. [ 118.838334][ T6635] netlink: 'syz.0.253': attribute type 14 has an invalid length. [ 118.864988][ T6629] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 118.873360][ T6636] netlink: 'syz.0.253': attribute type 14 has an invalid length. [ 118.885158][ T6635] netlink: 'syz.0.253': attribute type 13 has an invalid length. [ 118.893270][ T6636] netlink: 'syz.0.253': attribute type 13 has an invalid length. [ 119.248243][ T6652] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 119.291106][ T6652] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 119.414390][ T6658] netlink: zone id is out of range [ 119.519957][ T6667] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 119.561282][ T6668] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 119.649222][ T6671] FAULT_INJECTION: forcing a failure. [ 119.649222][ T6671] name failslab, interval 1, probability 0, space 0, times 0 [ 119.686378][ T6671] CPU: 0 UID: 0 PID: 6671 Comm: syz.2.269 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 119.686412][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.686425][ T6671] Call Trace: [ 119.686433][ T6671] [ 119.686442][ T6671] dump_stack_lvl+0x241/0x360 [ 119.686492][ T6671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.686523][ T6671] ? __pfx__printk+0x10/0x10 [ 119.686558][ T6671] ? __pfx___might_resched+0x10/0x10 [ 119.686590][ T6671] should_fail_ex+0x424/0x570 [ 119.686618][ T6671] should_failslab+0xac/0x100 [ 119.686650][ T6671] __kmalloc_noprof+0xdf/0x4d0 [ 119.686679][ T6671] ? nla_strdup+0x9e/0x140 [ 119.686702][ T6671] ? __kasan_kmalloc+0x9d/0xb0 [ 119.686731][ T6671] nla_strdup+0x9e/0x140 [ 119.686760][ T6671] nf_tables_newtable+0x5c0/0x1e80 [ 119.686814][ T6671] ? __pfx_nf_tables_newtable+0x10/0x10 [ 119.686856][ T6671] ? __nla_parse+0x40/0x60 [ 119.686886][ T6671] nfnetlink_rcv+0x12eb/0x28f0 [ 119.686948][ T6671] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 119.687027][ T6671] ? skb_clone+0x240/0x390 [ 119.687065][ T6671] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.687099][ T6671] ? netlink_deliver_tap+0x2e/0x1b0 [ 119.687131][ T6671] netlink_unicast+0x7f8/0x9a0 [ 119.687168][ T6671] ? __pfx_netlink_unicast+0x10/0x10 [ 119.687197][ T6671] ? skb_put+0x114/0x1f0 [ 119.687223][ T6671] netlink_sendmsg+0x8c3/0xcd0 [ 119.687266][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.687302][ T6671] ? aa_sock_msg_perm+0x91/0x160 [ 119.687338][ T6671] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.687366][ T6671] __sock_sendmsg+0x221/0x270 [ 119.687397][ T6671] ____sys_sendmsg+0x523/0x860 [ 119.687430][ T6671] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.687450][ T6671] ? __fget_files+0x2a/0x420 [ 119.687473][ T6671] ? __fget_files+0x2a/0x420 [ 119.687503][ T6671] __sys_sendmsg+0x271/0x360 [ 119.687532][ T6671] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.687615][ T6671] ? do_syscall_64+0xb6/0x230 [ 119.687646][ T6671] do_syscall_64+0xf3/0x230 [ 119.687672][ T6671] ? clear_bhb_loop+0x45/0xa0 [ 119.687697][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.687717][ T6671] RIP: 0033:0x7f5b2258d169 [ 119.687741][ T6671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.687758][ T6671] RSP: 002b:00007f5b23463038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.687788][ T6671] RAX: ffffffffffffffda RBX: 00007f5b227a5fa0 RCX: 00007f5b2258d169 [ 119.687814][ T6671] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 119.687828][ T6671] RBP: 00007f5b23463090 R08: 0000000000000000 R09: 0000000000000000 [ 119.687841][ T6671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.687853][ T6671] R13: 0000000000000000 R14: 00007f5b227a5fa0 R15: 00007ffe4d1e3c98 [ 119.687887][ T6671] [ 120.126088][ T5151] Bluetooth: hci0: command tx timeout [ 120.343046][ T6691] xt_CT: No such helper "pptp" [ 120.559891][ T6708] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 120.716571][ T6689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.726765][ T6714] tipc: Can't bind to reserved service type 1 [ 120.783024][ T6717] dvmrp1: entered allmulticast mode [ 120.803728][ T6717] __nla_validate_parse: 5 callbacks suppressed [ 120.803752][ T6717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 120.823172][ T6717] nbd: must specify a device to reconfigure [ 120.858470][ T6689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.914097][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.285'. [ 120.935553][ T6721] netlink: 'syz.2.285': attribute type 3 has an invalid length. [ 120.962566][ T6721] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.971732][ T6721] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.980718][ T6721] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.989587][ T6721] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.037165][ T6724] vlan2: entered promiscuous mode [ 121.042657][ T6724] bond0: entered promiscuous mode [ 121.047801][ T6724] bond_slave_0: entered promiscuous mode [ 121.054370][ T6724] bond_slave_1: entered promiscuous mode [ 121.055705][ T6732] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.288'. [ 121.146248][ T6689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.178929][ T6736] FAULT_INJECTION: forcing a failure. [ 121.178929][ T6736] name failslab, interval 1, probability 0, space 0, times 0 [ 121.192191][ T6736] CPU: 0 UID: 0 PID: 6736 Comm: syz.2.289 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 121.192221][ T6736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.192234][ T6736] Call Trace: [ 121.192242][ T6736] [ 121.192251][ T6736] dump_stack_lvl+0x241/0x360 [ 121.192290][ T6736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.192321][ T6736] ? __pfx__printk+0x10/0x10 [ 121.192355][ T6736] ? __pfx___might_resched+0x10/0x10 [ 121.192387][ T6736] should_fail_ex+0x424/0x570 [ 121.192415][ T6736] should_failslab+0xac/0x100 [ 121.192447][ T6736] __kmalloc_noprof+0xdf/0x4d0 [ 121.192475][ T6736] ? memcg_list_lru_alloc+0x588/0xa30 [ 121.192507][ T6736] memcg_list_lru_alloc+0x588/0xa30 [ 121.192548][ T6736] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 121.192587][ T6736] ? get_mem_cgroup_from_objcg+0x1af/0x1d0 [ 121.192621][ T6736] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 121.192649][ T6736] __memcg_slab_post_alloc_hook+0x140/0x7e0 [ 121.192690][ T6736] kmem_cache_alloc_lru_noprof+0x296/0x390 [ 121.192719][ T6736] ? shmem_alloc_inode+0x28/0x40 [ 121.192748][ T6736] shmem_alloc_inode+0x28/0x40 [ 121.192769][ T6736] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 121.192790][ T6736] alloc_inode+0x69/0x1b0 [ 121.192823][ T6736] new_inode+0x22/0x180 [ 121.192859][ T6736] shmem_get_inode+0x39d/0xf20 [ 121.192901][ T6736] __shmem_file_setup+0x171/0x2c0 [ 121.192936][ T6736] shmem_zero_setup+0x91/0x130 [ 121.192971][ T6736] mmap_region+0x2886/0x2ea0 [ 121.193038][ T6736] ? __pfx_mmap_region+0x10/0x10 [ 121.193072][ T6736] ? _parse_integer_limit+0x1b4/0x200 [ 121.193161][ T6736] ? mm_get_unmapped_area+0xa8/0xd0 [ 121.193198][ T6736] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 121.193233][ T6736] ? cap_mmap_addr+0xaa/0xf0 [ 121.193258][ T6736] ? bpf_lsm_mmap_addr+0x9/0x10 [ 121.193279][ T6736] ? security_mmap_addr+0x6f/0x250 [ 121.193314][ T6736] do_mmap+0xd42/0x1420 [ 121.193356][ T6736] ? __pfx_do_mmap+0x10/0x10 [ 121.193382][ T6736] ? down_write_killable+0x1a0/0x260 [ 121.193412][ T6736] ? vm_mmap_pgoff+0x214/0x530 [ 121.193440][ T6736] ? __pfx_down_write_killable+0x10/0x10 [ 121.193470][ T6736] ? apparmor_mmap_file+0xc3/0xe0 [ 121.193500][ T6736] vm_mmap_pgoff+0x2a2/0x530 [ 121.193541][ T6736] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 121.193567][ T6736] ? ksys_write+0x275/0x2d0 [ 121.193599][ T6736] ? ksys_mmap_pgoff+0xdf/0x720 [ 121.193630][ T6736] ? __x64_sys_mmap+0x7f/0x140 [ 121.193659][ T6736] do_syscall_64+0xf3/0x230 [ 121.193685][ T6736] ? clear_bhb_loop+0x45/0xa0 [ 121.193709][ T6736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.193729][ T6736] RIP: 0033:0x7f5b2258d169 [ 121.193748][ T6736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.193765][ T6736] RSP: 002b:00007f5b23463038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 121.193788][ T6736] RAX: ffffffffffffffda RBX: 00007f5b227a5fa0 RCX: 00007f5b2258d169 [ 121.193803][ T6736] RDX: 0000000003000001 RSI: 0000000000004000 RDI: 0000200000000000 [ 121.193817][ T6736] RBP: 00007f5b23463090 R08: ffffffffffffffff R09: 0000000000000000 [ 121.193831][ T6736] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 121.193843][ T6736] R13: 0000000000000000 R14: 00007f5b227a5fa0 R15: 00007ffe4d1e3c98 [ 121.193882][ T6736] [ 121.665731][ T6689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.970047][ T6689] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.995511][ T6689] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.015450][ T6689] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.143330][ T6689] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.572250][ T6778] netlink: 'syz.0.305': attribute type 31 has an invalid length. [ 122.653911][ T6783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.307'. [ 123.273987][ T6794] netlink: 'syz.0.312': attribute type 1 has an invalid length. [ 123.282414][ T6794] netlink: 'syz.0.312': attribute type 2 has an invalid length. [ 123.412235][ T6801] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 123.424134][ T6801] netlink: 'syz.0.315': attribute type 2 has an invalid length. [ 123.679638][ T6814] FAULT_INJECTION: forcing a failure. [ 123.679638][ T6814] name failslab, interval 1, probability 0, space 0, times 0 [ 123.698001][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 123.723937][ T6814] CPU: 1 UID: 0 PID: 6814 Comm: syz.4.319 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 123.723971][ T6814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.723984][ T6814] Call Trace: [ 123.723992][ T6814] [ 123.724000][ T6814] dump_stack_lvl+0x241/0x360 [ 123.724041][ T6814] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.724072][ T6814] ? __pfx__printk+0x10/0x10 [ 123.724097][ T6814] ? fib_table_lookup+0x1325/0x1880 [ 123.724143][ T6814] should_fail_ex+0x424/0x570 [ 123.724171][ T6814] should_failslab+0xac/0x100 [ 123.724203][ T6814] kmem_cache_alloc_noprof+0x78/0x390 [ 123.724232][ T6814] ? dst_alloc+0x12b/0x190 [ 123.724259][ T6814] dst_alloc+0x12b/0x190 [ 123.724286][ T6814] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 123.724326][ T6814] ip_route_output_key_hash+0x195/0x2b0 [ 123.724349][ T6814] ? ip_route_output_key_hash+0xe1/0x2b0 [ 123.724371][ T6814] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 123.724398][ T6814] ? stack_trace_save+0x11a/0x1d0 [ 123.724441][ T6814] ip_route_output_flow+0x29/0x140 [ 123.724477][ T6814] tcp_v4_connect+0x739/0x1ba0 [ 123.724525][ T6814] ? __pfx_tcp_v4_connect+0x10/0x10 [ 123.724562][ T6814] __inet_stream_connect+0x2a7/0xfb0 [ 123.724611][ T6814] ? __pfx___inet_stream_connect+0x10/0x10 [ 123.724641][ T6814] ? __kasan_kmalloc+0x9d/0xb0 [ 123.724668][ T6814] ? __kmalloc_cache_noprof+0x236/0x370 [ 123.724696][ T6814] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 123.724726][ T6814] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 123.724760][ T6814] tcp_sendmsg_locked+0x4946/0x5030 [ 123.724793][ T6814] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 123.724853][ T6814] ? __lock_acquire+0xad5/0xd80 [ 123.724889][ T6814] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 123.724919][ T6814] ? tcp_sendmsg+0x22/0x50 [ 123.724943][ T6814] ? do_raw_spin_unlock+0x13c/0x8b0 [ 123.724983][ T6814] tcp_sendmsg+0x30/0x50 [ 123.725007][ T6814] __sock_sendmsg+0x1a6/0x270 [ 123.725038][ T6814] __sys_sendto+0x365/0x4c0 [ 123.725075][ T6814] ? __pfx___sys_sendto+0x10/0x10 [ 123.725122][ T6814] ? __fget_files+0x2a/0x420 [ 123.725152][ T6814] ? ksys_write+0x275/0x2d0 [ 123.725188][ T6814] __x64_sys_sendto+0xde/0x100 [ 123.725211][ T6814] do_syscall_64+0xf3/0x230 [ 123.725237][ T6814] ? clear_bhb_loop+0x45/0xa0 [ 123.725262][ T6814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.725281][ T6814] RIP: 0033:0x7fa76a18d169 [ 123.725300][ T6814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.725315][ T6814] RSP: 002b:00007fa76b064038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 123.725338][ T6814] RAX: ffffffffffffffda RBX: 00007fa76a3a5fa0 RCX: 00007fa76a18d169 [ 123.725354][ T6814] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 123.725366][ T6814] RBP: 00007fa76b064090 R08: 0000200000e68000 R09: 0000000000000010 [ 123.725380][ T6814] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000001 [ 123.725393][ T6814] R13: 0000000000000000 R14: 00007fa76a3a5fa0 R15: 00007ffd0b8a6298 [ 123.725426][ T6814] [ 123.762132][ T6818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.078102][ T6821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.125252][ T6815] wlan1: No basic rates, using min rate instead [ 124.183338][ T6815] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 124.230848][ T6815] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 124.390428][ T5970] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 124.453405][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 124.485823][ T6836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.325'. [ 124.526386][ T36] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 124.546256][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 124.576219][ T6844] netlink: 592 bytes leftover after parsing attributes in process `syz.2.329'. [ 124.640409][ T6846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'. [ 124.650663][ T5966] wlan1: authentication with 08:02:11:00:00:00 timed out [ 124.812573][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.331'. [ 125.281806][ T6870] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 125.340184][ T6879] syz.2.341 uses obsolete (PF_INET,SOCK_PACKET) [ 125.355746][ T6879] syzkaller1: entered promiscuous mode [ 125.373550][ T6879] syzkaller1: entered allmulticast mode [ 125.386599][ T6879] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 125.802671][ T6907] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 125.803110][ T6903] IPVS: stopping master sync thread 6907 ... [ 125.859656][ T6911] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 125.883804][ T6911] __nla_validate_parse: 5 callbacks suppressed [ 125.883825][ T6911] netlink: 244 bytes leftover after parsing attributes in process `syz.2.354'. [ 125.903528][ T6913] netlink: 592 bytes leftover after parsing attributes in process `syz.3.355'. [ 125.936563][ T6911] openvswitch: netlink: Message has 3 unknown bytes. [ 125.958267][ T6911] openvswitch: netlink: Actions may not be safe on all matching packets [ 125.984078][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'. [ 126.166797][ T6928] C: renamed from team_slave_0 (while UP) [ 126.211934][ T6928] netlink: 'syz.2.361': attribute type 1 has an invalid length. [ 126.232134][ T6935] FAULT_INJECTION: forcing a failure. [ 126.232134][ T6935] name failslab, interval 1, probability 0, space 0, times 0 [ 126.251527][ T6928] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 126.275013][ T6935] CPU: 1 UID: 0 PID: 6935 Comm: syz.0.363 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 126.275045][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.275058][ T6935] Call Trace: [ 126.275066][ T6935] [ 126.275074][ T6935] dump_stack_lvl+0x241/0x360 [ 126.275124][ T6935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.275152][ T6935] ? __pfx__printk+0x10/0x10 [ 126.275175][ T6935] ? fib_table_lookup+0x1325/0x1880 [ 126.275222][ T6935] should_fail_ex+0x424/0x570 [ 126.275248][ T6935] should_failslab+0xac/0x100 [ 126.275277][ T6935] kmem_cache_alloc_noprof+0x78/0x390 [ 126.275301][ T6935] ? dst_alloc+0x12b/0x190 [ 126.275326][ T6935] dst_alloc+0x12b/0x190 [ 126.275352][ T6935] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 126.275389][ T6935] ip_route_output_key_hash+0x195/0x2b0 [ 126.275409][ T6935] ? ip_route_output_key_hash+0xe1/0x2b0 [ 126.275430][ T6935] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 126.275448][ T6935] ? stack_trace_save+0x11a/0x1d0 [ 126.275496][ T6935] tcp_v4_connect+0x6e1/0x1ba0 [ 126.275542][ T6935] ? __pfx_tcp_v4_connect+0x10/0x10 [ 126.275578][ T6935] __inet_stream_connect+0x2a7/0xfb0 [ 126.275620][ T6935] ? __pfx___inet_stream_connect+0x10/0x10 [ 126.275649][ T6935] ? __kasan_kmalloc+0x9d/0xb0 [ 126.275676][ T6935] ? __kmalloc_cache_noprof+0x236/0x370 [ 126.275702][ T6935] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 126.275732][ T6935] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 126.275764][ T6935] tcp_sendmsg_locked+0x4946/0x5030 [ 126.275795][ T6935] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 126.275859][ T6935] ? __lock_acquire+0xad5/0xd80 [ 126.275894][ T6935] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 126.275924][ T6935] ? tcp_sendmsg+0x22/0x50 [ 126.275947][ T6935] ? do_raw_spin_unlock+0x13c/0x8b0 [ 126.275988][ T6935] tcp_sendmsg+0x30/0x50 [ 126.276014][ T6935] __sock_sendmsg+0x1a6/0x270 [ 126.276045][ T6935] __sys_sendto+0x365/0x4c0 [ 126.276089][ T6935] ? __pfx___sys_sendto+0x10/0x10 [ 126.276136][ T6935] ? __fget_files+0x2a/0x420 [ 126.276167][ T6935] ? ksys_write+0x275/0x2d0 [ 126.276203][ T6935] __x64_sys_sendto+0xde/0x100 [ 126.276227][ T6935] do_syscall_64+0xf3/0x230 [ 126.276251][ T6935] ? clear_bhb_loop+0x45/0xa0 [ 126.276273][ T6935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.276290][ T6935] RIP: 0033:0x7fbf39b8d169 [ 126.276307][ T6935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.276323][ T6935] RSP: 002b:00007fbf3a91b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 126.276344][ T6935] RAX: ffffffffffffffda RBX: 00007fbf39da5fa0 RCX: 00007fbf39b8d169 [ 126.276358][ T6935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 126.276368][ T6935] RBP: 00007fbf3a91b090 R08: 0000200000e68000 R09: 0000000000000010 [ 126.276380][ T6935] R10: 00000000200017ed R11: 0000000000000246 R12: 0000000000000001 [ 126.276391][ T6935] R13: 0000000000000000 R14: 00007fbf39da5fa0 R15: 00007ffef3ef8d78 [ 126.276421][ T6935] [ 126.592503][ T6928] netlink: 'syz.2.361': attribute type 1 has an invalid length. [ 126.603843][ T6928] netlink: 224 bytes leftover after parsing attributes in process `syz.2.361'. [ 126.635880][ T6928] netlink: 'syz.2.361': attribute type 11 has an invalid length. [ 126.736572][ T6938] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.749280][ T6938] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -1 [ 126.999362][ T6948] netlink: 592 bytes leftover after parsing attributes in process `syz.1.369'. [ 127.023865][ T6944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.054936][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.371'. [ 127.123760][ T6944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.187980][ T6950] bond1: entered promiscuous mode [ 127.215989][ T6950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 127.275496][ T6956] bridge2: entered promiscuous mode [ 127.284625][ T6956] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 127.359321][ T5151] Bluetooth: hci0: command tx timeout [ 127.574433][ T5967] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.631340][ T6973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 127.644103][ T6973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.688010][ T5967] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.712975][ T6973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.746554][ T6973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.785539][ T5967] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.858735][ T5967] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.935947][ T6983] netlink: 592 bytes leftover after parsing attributes in process `syz.2.383'. [ 128.068096][ T6986] FAULT_INJECTION: forcing a failure. [ 128.068096][ T6986] name failslab, interval 1, probability 0, space 0, times 0 [ 128.106635][ T6986] CPU: 0 UID: 0 PID: 6986 Comm: syz.2.385 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 128.106666][ T6986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.106679][ T6986] Call Trace: [ 128.106687][ T6986] [ 128.106695][ T6986] dump_stack_lvl+0x241/0x360 [ 128.106734][ T6986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.106764][ T6986] ? __pfx__printk+0x10/0x10 [ 128.106798][ T6986] ? __pfx___might_resched+0x10/0x10 [ 128.106831][ T6986] should_fail_ex+0x424/0x570 [ 128.106858][ T6986] should_failslab+0xac/0x100 [ 128.106888][ T6986] __kmalloc_noprof+0xdf/0x4d0 [ 128.106915][ T6986] ? nla_strdup+0x9e/0x140 [ 128.106937][ T6986] ? __kasan_kmalloc+0x9d/0xb0 [ 128.106967][ T6986] nla_strdup+0x9e/0x140 [ 128.106995][ T6986] nf_tables_newtable+0x5c0/0x1e80 [ 128.107040][ T6986] ? __pfx_nf_tables_newtable+0x10/0x10 [ 128.107081][ T6986] ? __nla_parse+0x40/0x60 [ 128.107110][ T6986] nfnetlink_rcv+0x12eb/0x28f0 [ 128.107179][ T6986] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 128.107259][ T6986] ? skb_clone+0x240/0x390 [ 128.107296][ T6986] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.107328][ T6986] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.107360][ T6986] netlink_unicast+0x7f8/0x9a0 [ 128.107398][ T6986] ? __pfx_netlink_unicast+0x10/0x10 [ 128.107427][ T6986] ? skb_put+0x114/0x1f0 [ 128.107452][ T6986] netlink_sendmsg+0x8c3/0xcd0 [ 128.107492][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.107519][ T6986] ? aa_sock_msg_perm+0x91/0x160 [ 128.107548][ T6986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.107569][ T6986] __sock_sendmsg+0x221/0x270 [ 128.107596][ T6986] ____sys_sendmsg+0x523/0x860 [ 128.107623][ T6986] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.107638][ T6986] ? __fget_files+0x2a/0x420 [ 128.107656][ T6986] ? __fget_files+0x2a/0x420 [ 128.107681][ T6986] __sys_sendmsg+0x271/0x360 [ 128.107706][ T6986] ? __pfx___sys_sendmsg+0x10/0x10 [ 128.107779][ T6986] ? do_syscall_64+0xb6/0x230 [ 128.107806][ T6986] do_syscall_64+0xf3/0x230 [ 128.107827][ T6986] ? clear_bhb_loop+0x45/0xa0 [ 128.107849][ T6986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.107867][ T6986] RIP: 0033:0x7f5b2258d169 [ 128.107886][ T6986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.107903][ T6986] RSP: 002b:00007f5b23463038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.107926][ T6986] RAX: ffffffffffffffda RBX: 00007f5b227a5fa0 RCX: 00007f5b2258d169 [ 128.107941][ T6986] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 128.107954][ T6986] RBP: 00007f5b23463090 R08: 0000000000000000 R09: 0000000000000000 [ 128.107967][ T6986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.107978][ T6986] R13: 0000000000000000 R14: 00007f5b227a5fa0 R15: 00007ffe4d1e3c98 [ 128.108011][ T6986] [ 128.450086][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.492468][ T6995] netlink: 'syz.4.387': attribute type 1 has an invalid length. [ 128.520149][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.528578][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.536961][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.544904][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.553436][ T5967] bridge_slave_1: left allmulticast mode [ 128.560707][ T5967] bridge_slave_1: left promiscuous mode [ 128.585338][ T5967] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.622819][ T5967] bridge_slave_0: left allmulticast mode [ 128.628889][ T5967] bridge_slave_0: left promiscuous mode [ 128.634698][ T5967] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.646781][ T7000] netlink: 'syz.2.390': attribute type 10 has an invalid length. [ 129.056700][ T5967] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.066583][ T5967] bond_slave_0: left promiscuous mode [ 129.080498][ T5967] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.093719][ T5967] bond_slave_1: left promiscuous mode [ 129.101093][ T5967] bond0 (unregistering): Released all slaves [ 129.591477][ T7028] pimreg: entered allmulticast mode [ 129.617507][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 129.713452][ T7035] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.717324][ T7036] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 129.821882][ T7035] netlink: 'syz.1.402': attribute type 29 has an invalid length. [ 129.836812][ T7036] bridge_slave_1: left allmulticast mode [ 129.850419][ T7036] bridge_slave_1: left promiscuous mode [ 129.858268][ T7036] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.873860][ T7036] bridge_slave_0: left allmulticast mode [ 129.879788][ T7036] bridge_slave_0: left promiscuous mode [ 129.885654][ T7036] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.581725][ T5967] hsr_slave_0: left promiscuous mode [ 130.589841][ T5967] hsr_slave_1: left promiscuous mode [ 130.603746][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.613632][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.638671][ T5151] Bluetooth: hci3: command tx timeout [ 130.715730][ T5967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.749276][ T5967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.794878][ T5967] hsr0: left promiscuous mode [ 130.815622][ T5967] veth1_macvtap: left promiscuous mode [ 130.821685][ T5967] veth0_macvtap: left promiscuous mode [ 130.827741][ T5967] veth1_vlan: left promiscuous mode [ 130.835576][ T5967] veth0_vlan: left promiscuous mode [ 130.845917][ T7065] netlink: 'syz.0.412': attribute type 8 has an invalid length. [ 131.653079][ T5967] team0 (unregistering): Port device team_slave_1 removed [ 131.699865][ T5967] team0 (unregistering): Port device team_slave_0 removed [ 132.338095][ T6991] chnl_net:caif_netlink_parms(): no params data found [ 132.453775][ T7089] __nla_validate_parse: 1 callbacks suppressed [ 132.453800][ T7089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.422'. [ 132.471588][ T7089] netlink: 32 bytes leftover after parsing attributes in process `syz.0.422'. [ 132.703795][ T7103] netlink: 12 bytes leftover after parsing attributes in process `syz.2.425'. [ 132.714728][ T7103] block nbd0: not configured, cannot reconfigure [ 132.728600][ T5151] Bluetooth: hci3: command tx timeout [ 132.912469][ T6991] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.925974][ T6991] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.933908][ T6991] bridge_slave_0: entered allmulticast mode [ 132.942132][ T6991] bridge_slave_0: entered promiscuous mode [ 132.979376][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.987635][ T6991] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.007329][ T6991] bridge_slave_1: entered allmulticast mode [ 133.027245][ T6991] bridge_slave_1: entered promiscuous mode [ 133.180304][ T6991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.204486][ T6991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.391408][ T6991] team0: Port device team_slave_0 added [ 133.421132][ T6991] team0: Port device team_slave_1 added [ 133.586112][ T7127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.419'. [ 133.597644][ T7091] netlink: 16 bytes leftover after parsing attributes in process `syz.4.419'. [ 133.628063][ T7125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.635809][ T7125] IPv6: NLM_F_CREATE should be set when creating new route [ 133.653220][ T7091] netlink: 20 bytes leftover after parsing attributes in process `syz.4.419'. [ 133.689635][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.697744][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.724888][ T7121] openvswitch: netlink: Message has 3 unknown bytes. [ 133.748670][ T7121] openvswitch: netlink: Actions may not be safe on all matching packets [ 133.792682][ T6991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.831337][ T7091] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 133.832992][ T7131] netlink: 36 bytes leftover after parsing attributes in process `syz.0.435'. [ 133.871066][ T6991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.878558][ T6991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.960731][ T6991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.185163][ T7146] can: request_module (can-proto-0) failed. [ 134.344495][ T6991] hsr_slave_0: entered promiscuous mode [ 134.369263][ T6991] hsr_slave_1: entered promiscuous mode [ 134.375491][ T6991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.386043][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.1.441'. [ 134.399218][ T6991] Cannot create hsr debugfs directory [ 134.494286][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 134.596013][ T7155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.443'. [ 134.799846][ T5151] Bluetooth: hci3: command tx timeout [ 135.892527][ T6991] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 135.938895][ T6991] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 135.965719][ T6991] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 135.984627][ T6991] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 136.003867][ T7184] bond0: entered promiscuous mode [ 136.010734][ T7184] bond_slave_0: entered promiscuous mode [ 136.016884][ T7184] bond_slave_1: entered promiscuous mode [ 136.083519][ T7187] wireguard: wg2: Could not create IPv4 socket [ 136.338157][ T6991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.375240][ T6991] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.421293][ T7195] FAULT_INJECTION: forcing a failure. [ 136.421293][ T7195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.438442][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.445680][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.455473][ T7195] CPU: 1 UID: 0 PID: 7195 Comm: syz.1.454 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 136.455502][ T7195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.455516][ T7195] Call Trace: [ 136.455524][ T7195] [ 136.455533][ T7195] dump_stack_lvl+0x241/0x360 [ 136.455570][ T7195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.455598][ T7195] ? __pfx__printk+0x10/0x10 [ 136.455647][ T7195] should_fail_ex+0x424/0x570 [ 136.455675][ T7195] _copy_from_user+0x2d/0xb0 [ 136.455706][ T7195] copy_msghdr_from_user+0xb3/0x580 [ 136.455741][ T7195] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 136.455785][ T7195] do_recvmmsg+0x3bf/0xab0 [ 136.455822][ T7195] ? __pfx_do_recvmmsg+0x10/0x10 [ 136.455862][ T7195] ? rcu_read_lock_any_held+0xbb/0x160 [ 136.455890][ T7195] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 136.455921][ T7195] ? vfs_write+0xb29/0xd10 [ 136.455955][ T7195] ? ksys_write+0x24e/0x2d0 [ 136.455981][ T7195] ? __mutex_unlock_slowpath+0x229/0x800 [ 136.456025][ T7195] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 136.456049][ T7195] ? __fget_files+0x2a/0x420 [ 136.456084][ T7195] __x64_sys_recvmmsg+0x1ab/0x260 [ 136.456111][ T7195] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 136.456143][ T7195] ? do_syscall_64+0xb6/0x230 [ 136.456172][ T7195] do_syscall_64+0xf3/0x230 [ 136.456198][ T7195] ? clear_bhb_loop+0x45/0xa0 [ 136.456223][ T7195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.456242][ T7195] RIP: 0033:0x7f841798d169 [ 136.456261][ T7195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.456278][ T7195] RSP: 002b:00007f84188a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 136.456300][ T7195] RAX: ffffffffffffffda RBX: 00007f8417ba5fa0 RCX: 00007f841798d169 [ 136.456315][ T7195] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 136.456328][ T7195] RBP: 00007f84188a0090 R08: 0000000000000000 R09: 0000000000000000 [ 136.456349][ T7195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 136.456361][ T7195] R13: 0000000000000000 R14: 00007f8417ba5fa0 R15: 00007ffd5e5b3728 [ 136.456394][ T7195] [ 136.673489][ T7193] netlink: 'syz.2.453': attribute type 12 has an invalid length. [ 136.696722][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.703978][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.878745][ T5151] Bluetooth: hci3: command tx timeout [ 137.075091][ T7218] netlink: 'syz.4.461': attribute type 10 has an invalid length. [ 137.127318][ T7222] netlink: 'syz.4.461': attribute type 11 has an invalid length. [ 137.152271][ T7218] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 137.161971][ T7218] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 137.458417][ T6991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.669098][ T7240] xt_hashlimit: size too large, truncated to 1048576 [ 137.791300][ T6991] veth0_vlan: entered promiscuous mode [ 137.874895][ T6991] veth1_vlan: entered promiscuous mode [ 137.971344][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3af000: rx timeout, send abort [ 138.045209][ T6991] veth0_macvtap: entered promiscuous mode [ 138.078819][ T6991] veth1_macvtap: entered promiscuous mode [ 138.150645][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.171244][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.181298][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.191834][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.202482][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.213073][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.223121][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 138.233666][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.245361][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.256502][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.283272][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.295035][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.306333][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.321958][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.332776][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.342686][ T6991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.369091][ T6991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.390624][ T6991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.439282][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.446089][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.472324][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3ac000: rx timeout, send abort [ 138.481138][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3af000: abort rx timeout. Force session deactivation [ 138.538602][ T6991] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.574666][ T6991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.603953][ T6991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.627080][ T6991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.647581][ T7254] netlink: 'syz.2.476': attribute type 1 has an invalid length. [ 138.675320][ T7254] __nla_validate_parse: 6 callbacks suppressed [ 138.675339][ T7254] netlink: 224 bytes leftover after parsing attributes in process `syz.2.476'. [ 138.728371][ T7253] netlink: 'syz.2.476': attribute type 1 has an invalid length. [ 138.755810][ T7253] netlink: 224 bytes leftover after parsing attributes in process `syz.2.476'. [ 138.867334][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.890781][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.944265][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.976351][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.980679][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3ac000: abort rx timeout. Force session deactivation [ 139.026924][ T7262] smc: net device bond0 applied user defined pnetid SYZ0 [ 139.790875][ T7286] netlink: 'syz.0.489': attribute type 29 has an invalid length. [ 139.832837][ T7285] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 140.043088][ T7299] IPVS: set_ctl: invalid protocol: 50 172.20.20.58:20004 [ 140.185956][ T7305] FAULT_INJECTION: forcing a failure. [ 140.185956][ T7305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.204782][ T7305] CPU: 1 UID: 0 PID: 7305 Comm: syz.1.497 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 140.204815][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.204827][ T7305] Call Trace: [ 140.204836][ T7305] [ 140.204845][ T7305] dump_stack_lvl+0x241/0x360 [ 140.204884][ T7305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.204915][ T7305] ? __pfx__printk+0x10/0x10 [ 140.204958][ T7305] should_fail_ex+0x424/0x570 [ 140.204986][ T7305] _copy_from_user+0x2d/0xb0 [ 140.205017][ T7305] copy_msghdr_from_user+0xb3/0x580 [ 140.205053][ T7305] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 140.205078][ T7305] ? __fget_files+0x2a/0x420 [ 140.205102][ T7305] ? __fget_files+0x2a/0x420 [ 140.205132][ T7305] __sys_sendmsg+0x20a/0x360 [ 140.205161][ T7305] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.205242][ T7305] ? do_syscall_64+0xb6/0x230 [ 140.205274][ T7305] do_syscall_64+0xf3/0x230 [ 140.205300][ T7305] ? clear_bhb_loop+0x45/0xa0 [ 140.205325][ T7305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.205346][ T7305] RIP: 0033:0x7f841798d169 [ 140.205365][ T7305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.205382][ T7305] RSP: 002b:00007f84188a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.205404][ T7305] RAX: ffffffffffffffda RBX: 00007f8417ba5fa0 RCX: 00007f841798d169 [ 140.205420][ T7305] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000005 [ 140.205433][ T7305] RBP: 00007f84188a0090 R08: 0000000000000000 R09: 0000000000000000 [ 140.205446][ T7305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.205458][ T7305] R13: 0000000000000000 R14: 00007f8417ba5fa0 R15: 00007ffd5e5b3728 [ 140.205491][ T7305] [ 140.702173][ T7315] netlink: 'syz.2.502': attribute type 21 has an invalid length. [ 140.834383][ T7323] netlink: 'syz.1.504': attribute type 10 has an invalid length. [ 140.870033][ T7323] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 140.883021][ T7323] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 140.911247][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.504'. [ 141.036641][ T7332] lo speed is unknown, defaulting to 1000 [ 141.055388][ T7332] lo speed is unknown, defaulting to 1000 [ 141.079193][ T7332] lo speed is unknown, defaulting to 1000 [ 141.129694][ T7335] netlink: 16 bytes leftover after parsing attributes in process `syz.4.507'. [ 141.155521][ T7332] [ 141.157915][ T7332] ====================================================== [ 141.165046][ T7332] WARNING: possible circular locking dependency detected [ 141.172617][ T7332] 6.14.0-syzkaller-13344-ga9843689e2de #0 Not tainted [ 141.179416][ T7332] ------------------------------------------------------ [ 141.186464][ T7332] syz.4.507/7332 is trying to acquire lock: [ 141.192388][ T7332] ffff88805f9d9bd8 (sk_lock-AF_INET){+.+.}-{0:0}, at: sock_set_reuseaddr+0x17/0x60 [ 141.201773][ T7332] [ 141.201773][ T7332] but task is already holding lock: [ 141.209168][ T7332] ffffffff8fe84f28 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x6c1/0xce0 [ 141.217345][ T7332] [ 141.217345][ T7332] which lock already depends on the new lock. [ 141.217345][ T7332] [ 141.227782][ T7332] [ 141.227782][ T7332] the existing dependency chain (in reverse order) is: [ 141.236829][ T7332] [ 141.236829][ T7332] -> #3 (lock#7){+.+.}-{4:4}: [ 141.243767][ T7332] lock_acquire+0x116/0x2f0 [ 141.248836][ T7332] __mutex_lock+0x1a5/0x10c0 [ 141.254006][ T7332] cma_init+0x1e/0x140 [ 141.258635][ T7332] do_one_initcall+0x24a/0x940 [ 141.263964][ T7332] do_initcall_level+0x157/0x210 [ 141.269460][ T7332] do_initcalls+0x71/0xd0 [ 141.274349][ T7332] kernel_init_freeable+0x432/0x5d0 [ 141.280112][ T7332] kernel_init+0x1d/0x2b0 [ 141.285005][ T7332] ret_from_fork+0x4b/0x80 [ 141.290066][ T7332] ret_from_fork_asm+0x1a/0x30 [ 141.295373][ T7332] [ 141.295373][ T7332] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 141.302603][ T7332] lock_acquire+0x116/0x2f0 [ 141.307637][ T7332] __mutex_lock+0x1a5/0x10c0 [ 141.312759][ T7332] start_sync_thread+0xde/0x2d60 [ 141.318228][ T7332] do_ip_vs_set_ctl+0x48e/0xe50 [ 141.323602][ T7332] nf_setsockopt+0x295/0x2c0 [ 141.328727][ T7332] smc_setsockopt+0x25c/0xd50 [ 141.333939][ T7332] do_sock_setsockopt+0x3b1/0x710 [ 141.339509][ T7332] __x64_sys_setsockopt+0x1ee/0x280 [ 141.345232][ T7332] do_syscall_64+0xf3/0x230 [ 141.350264][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.356682][ T7332] [ 141.356682][ T7332] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 141.365297][ T7332] lock_acquire+0x116/0x2f0 [ 141.370330][ T7332] __mutex_lock+0x1a5/0x10c0 [ 141.375450][ T7332] smc_switch_to_fallback+0x35/0xda0 [ 141.381360][ T7332] smc_sendmsg+0x11f/0x530 [ 141.386318][ T7332] __sock_sendmsg+0x221/0x270 [ 141.391622][ T7332] __sys_sendto+0x365/0x4c0 [ 141.396660][ T7332] __x64_sys_sendto+0xde/0x100 [ 141.401949][ T7332] do_syscall_64+0xf3/0x230 [ 141.406982][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.413401][ T7332] [ 141.413401][ T7332] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 141.421088][ T7332] validate_chain+0xa69/0x24e0 [ 141.426382][ T7332] __lock_acquire+0xad5/0xd80 [ 141.431589][ T7332] lock_acquire+0x116/0x2f0 [ 141.436623][ T7332] lock_sock_nested+0x48/0x100 [ 141.441924][ T7332] sock_set_reuseaddr+0x17/0x60 [ 141.447307][ T7332] siw_create_listen+0x19f/0x1250 [ 141.452855][ T7332] iw_cm_listen+0x15e/0x230 [ 141.457889][ T7332] rdma_listen+0xb51/0xe40 [ 141.462837][ T7332] cma_listen_on_dev+0x3e0/0x6f0 [ 141.468311][ T7332] cma_add_one+0x7dc/0xce0 [ 141.473259][ T7332] add_client_context+0x53e/0x8b0 [ 141.478829][ T7332] enable_device_and_get+0x1de/0x450 [ 141.484676][ T7332] ib_register_device+0x1138/0x1460 [ 141.490436][ T7332] siw_newlink+0x938/0xda0 [ 141.495397][ T7332] nldev_newlink+0x5ed/0x680 [ 141.500529][ T7332] rdma_nl_rcv+0x6e5/0x9e0 [ 141.505478][ T7332] netlink_unicast+0x7f8/0x9a0 [ 141.510773][ T7332] netlink_sendmsg+0x8c3/0xcd0 [ 141.516079][ T7332] __sock_sendmsg+0x221/0x270 [ 141.521292][ T7332] ____sys_sendmsg+0x523/0x860 [ 141.526586][ T7332] __sys_sendmsg+0x271/0x360 [ 141.531703][ T7332] do_syscall_64+0xf3/0x230 [ 141.536737][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.543163][ T7332] [ 141.543163][ T7332] other info that might help us debug this: [ 141.543163][ T7332] [ 141.553412][ T7332] Chain exists of: [ 141.553412][ T7332] sk_lock-AF_INET --> rtnl_mutex --> lock#7 [ 141.553412][ T7332] [ 141.565288][ T7332] Possible unsafe locking scenario: [ 141.565288][ T7332] [ 141.572752][ T7332] CPU0 CPU1 [ 141.578147][ T7332] ---- ---- [ 141.583581][ T7332] lock(lock#7); [ 141.587237][ T7332] lock(rtnl_mutex); [ 141.593752][ T7332] lock(lock#7); [ 141.599934][ T7332] lock(sk_lock-AF_INET); [ 141.604393][ T7332] [ 141.604393][ T7332] *** DEADLOCK *** [ 141.604393][ T7332] [ 141.612546][ T7332] 6 locks held by syz.4.507/7332: [ 141.617623][ T7332] #0: ffffffff9aafa038 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32f/0x9e0 [ 141.627685][ T7332] #1: ffffffff8fe710f0 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x456/0x680 [ 141.637117][ T7332] #2: ffffffff8fe63b90 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x130/0x450 [ 141.647142][ T7332] #3: ffffffff8fe63e90 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x18e/0x450 [ 141.657169][ T7332] #4: ffff8880487e45f0 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x4fa/0x8b0 [ 141.668066][ T7332] #5: ffffffff8fe84f28 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x6c1/0xce0 [ 141.676656][ T7332] [ 141.676656][ T7332] stack backtrace: [ 141.682567][ T7332] CPU: 0 UID: 0 PID: 7332 Comm: syz.4.507 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 141.682593][ T7332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.682605][ T7332] Call Trace: [ 141.682614][ T7332] [ 141.682623][ T7332] dump_stack_lvl+0x241/0x360 [ 141.682654][ T7332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.682679][ T7332] ? __pfx__printk+0x10/0x10 [ 141.682703][ T7332] ? print_lock+0x171/0x1a0 [ 141.682726][ T7332] print_circular_bug+0x2e1/0x300 [ 141.682752][ T7332] check_noncircular+0x142/0x160 [ 141.682777][ T7332] validate_chain+0xa69/0x24e0 [ 141.682802][ T7332] ? __cgroup_bpf_run_filter_sk+0xcb/0x6a0 [ 141.682827][ T7332] ? look_up_lock_class+0x7b/0x170 [ 141.682849][ T7332] ? register_lock_class+0x54/0x330 [ 141.682868][ T7332] __lock_acquire+0xad5/0xd80 [ 141.682889][ T7332] lock_acquire+0x116/0x2f0 [ 141.682906][ T7332] ? sock_set_reuseaddr+0x17/0x60 [ 141.682936][ T7332] lock_sock_nested+0x48/0x100 [ 141.682958][ T7332] ? sock_set_reuseaddr+0x17/0x60 [ 141.682983][ T7332] sock_set_reuseaddr+0x17/0x60 [ 141.683007][ T7332] siw_create_listen+0x19f/0x1250 [ 141.683023][ T7332] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 141.683044][ T7332] ? __pfx_siw_create_listen+0x10/0x10 [ 141.683064][ T7332] iw_cm_listen+0x15e/0x230 [ 141.683089][ T7332] rdma_listen+0xb51/0xe40 [ 141.683110][ T7332] ? __pfx_rdma_listen+0x10/0x10 [ 141.683132][ T7332] ? rdma_restrack_add+0x28a/0x7b0 [ 141.683151][ T7332] ? _cma_attach_to_dev+0x295/0x490 [ 141.683175][ T7332] cma_listen_on_dev+0x3e0/0x6f0 [ 141.683201][ T7332] cma_add_one+0x7dc/0xce0 [ 141.683228][ T7332] ? __pfx_cma_add_one+0x10/0x10 [ 141.683253][ T7332] ? _raw_spin_unlock+0x28/0x50 [ 141.683271][ T7332] add_client_context+0x53e/0x8b0 [ 141.683293][ T7332] ? __pfx_add_client_context+0x10/0x10 [ 141.683311][ T7332] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 141.683336][ T7332] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.683361][ T7332] enable_device_and_get+0x1de/0x450 [ 141.683380][ T7332] ? __pfx_enable_device_and_get+0x10/0x10 [ 141.683403][ T7332] ? device_add+0x460/0xbf0 [ 141.683429][ T7332] ib_register_device+0x1138/0x1460 [ 141.683455][ T7332] ? __pfx_ib_register_device+0x10/0x10 [ 141.683477][ T7332] ? xa_load+0x2df/0x350 [ 141.683508][ T7332] ? xa_load+0x149/0x350 [ 141.683534][ T7332] ? __pfx_xa_load+0x10/0x10 [ 141.683570][ T7332] ? ib_device_set_netdev+0x5c5/0x6c0 [ 141.683596][ T7332] ? __raw_spin_lock_init+0x45/0x100 [ 141.683629][ T7332] siw_newlink+0x938/0xda0 [ 141.683653][ T7332] nldev_newlink+0x5ed/0x680 [ 141.683687][ T7332] ? __pfx_nldev_newlink+0x10/0x10 [ 141.683718][ T7332] ? unwind_get_return_address+0x4d/0x90 [ 141.683792][ T7332] ? aa_get_newest_label+0x101/0x6f0 [ 141.683825][ T7332] ? __pfx_aa_get_newest_label+0x10/0x10 [ 141.683855][ T7332] ? __pfx_aa_get_newest_label+0x10/0x10 [ 141.683887][ T7332] ? apparmor_capable+0x13b/0x1b0 [ 141.683906][ T7332] ? bpf_lsm_capable+0x9/0x10 [ 141.683926][ T7332] ? security_capable+0x7e/0x2d0 [ 141.683950][ T7332] ? __pfx_nldev_newlink+0x10/0x10 [ 141.683976][ T7332] rdma_nl_rcv+0x6e5/0x9e0 [ 141.683997][ T7332] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 141.684015][ T7332] ? __lock_acquire+0xad5/0xd80 [ 141.684039][ T7332] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.684065][ T7332] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.684089][ T7332] netlink_unicast+0x7f8/0x9a0 [ 141.684114][ T7332] ? __pfx_netlink_unicast+0x10/0x10 [ 141.684137][ T7332] ? skb_put+0x114/0x1f0 [ 141.684154][ T7332] netlink_sendmsg+0x8c3/0xcd0 [ 141.684183][ T7332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.684209][ T7332] ? aa_sock_msg_perm+0x91/0x160 [ 141.684239][ T7332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.684263][ T7332] __sock_sendmsg+0x221/0x270 [ 141.684287][ T7332] ____sys_sendmsg+0x523/0x860 [ 141.684309][ T7332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.684325][ T7332] ? __fget_files+0x2a/0x420 [ 141.684342][ T7332] ? __fget_files+0x2a/0x420 [ 141.684360][ T7332] __sys_sendmsg+0x271/0x360 [ 141.684377][ T7332] ? __pfx_futex_wake+0x10/0x10 [ 141.684396][ T7332] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.684436][ T7332] ? do_syscall_64+0xb6/0x230 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 141.684459][ T7332] do_syscall_64+0xf3/0x230 [ 141.684479][ T7332] ? clear_bhb_loop+0x45/0xa0 [ 141.684504][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.684521][ T7332] RIP: 0033:0x7fa76a18d169 [ 141.684537][ T7332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.684553][ T7332] RSP: 002b:00007fa76b064038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.684573][ T7332] RAX: ffffffffffffffda RBX: 00007fa76a3a5fa0 RCX: 00007fa76a18d169 [ 141.684587][ T7332] RDX: 0000000000000810 RSI: 0000200000000240 RDI: 0000000000000013 [ 141.684598][ T7332] RBP: 00007fa76a20e990 R08: 0000000000000000 R09: 0000000000000000 [ 141.684610][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.684620][ T7332] R13: 0000000000000000 R14: 00007fa76a3a5fa0 R15: 00007ffd0b8a6298 [ 141.684640][ T7332] [ 141.839092][ T5151] Bluetooth: hci0: command tx timeout [ 141.899669][ T7332] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.220171][ T7323] bridge_slave_1 (unregistering): left allmulticast mode [ 142.227281][ T7323] bridge_slave_1 (unregistering): left promiscuous mode [ 142.261896][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.383301][ T7335] batadv0: entered promiscuous mode [ 142.406304][ T7335] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 142.431782][ T7335] batadv0: left promiscuous mode [ 142.454043][ T7332] lo speed is unknown, defaulting to 1000 [ 142.469545][ T7332] lo speed is unknown, defaulting to 1000 [ 142.476265][ T7332] lo speed is unknown, defaulting to 1000 [ 142.515778][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.532082][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.539594][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.547427][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.556645][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.619465][ T7332] lo speed is unknown, defaulting to 1000 [ 142.626247][ T7332] lo speed is unknown, defaulting to 1000 [ 142.640346][ T7332] lo speed is unknown, defaulting to 1000 [ 142.731511][ T5843] syz-executor (5843) used greatest stack depth: 19448 bytes left [ 142.835382][ T7339] lo speed is unknown, defaulting to 1000 [ 142.955502][ T7339] chnl_net:caif_netlink_parms(): no params data found [ 143.014098][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.022742][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.030380][ T7339] bridge_slave_0: entered allmulticast mode [ 143.037121][ T7339] bridge_slave_0: entered promiscuous mode [ 143.045145][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.052387][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.060235][ T7339] bridge_slave_1: entered allmulticast mode [ 143.067017][ T7339] bridge_slave_1: entered promiscuous mode [ 143.091707][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.103296][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.132037][ T7339] team0: Port device team_slave_0 added [ 143.141595][ T7339] team0: Port device team_slave_1 added [ 143.165771][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.172850][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.201548][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.213399][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.221513][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.247743][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.282965][ T7339] hsr_slave_0: entered promiscuous mode [ 143.289157][ T7339] hsr_slave_1: entered promiscuous mode [ 143.295277][ T7339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.302913][ T7339] Cannot create hsr debugfs directory [ 143.376996][ T7339] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.434512][ T7339] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.494459][ T7339] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.535453][ T7339] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.597561][ T7339] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 143.607876][ T7339] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 143.623458][ T7339] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 143.633278][ T7339] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 143.691518][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.709284][ T7339] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.722354][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.729505][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.744872][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.752042][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.871857][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.903072][ T7339] veth0_vlan: entered promiscuous mode [ 143.915368][ T7339] veth1_vlan: entered promiscuous mode [ 143.939569][ T7339] veth0_macvtap: entered promiscuous mode [ 143.947909][ T7339] veth1_macvtap: entered promiscuous mode [ 143.962877][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.973734][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.983787][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.994320][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.005048][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.015599][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.025695][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.036493][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.046943][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.057521][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.068406][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.081427][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.092199][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.102068][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.112650][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.122900][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.133968][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.144134][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.154792][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.164990][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.176124][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.187404][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.198259][ T7339] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.207496][ T7339] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.216350][ T7339] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.225257][ T7339] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.257916][ T7339] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 144.280179][ T5970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.282066][ T7339] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 144.288026][ T5970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.314537][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.323216][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50