last executing test programs: 15.51979484s ago: executing program 4 (id=1744): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$kcm(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f0000000440)="bcc9b1557de1fad1f955144629ed4dd43c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb550dd414b97ba6022f5b6f26380bf57d2bb4e8c57", 0x3d}, {&(0x7f0000001680)="094fb1", 0x3}], 0x3}, 0x800) 15.440217501s ago: executing program 4 (id=1747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007065796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240000000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) 15.291544182s ago: executing program 4 (id=1752): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) socket$kcm(0xa, 0x1, 0x106) 15.142056076s ago: executing program 4 (id=1756): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000002600)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000001c0)='h', 0x1}], 0x1}], 0x1, 0x0) 14.78781743s ago: executing program 4 (id=1762): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000000)=0xfff, 0x4) 7.096685079s ago: executing program 4 (id=1762): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000000)=0xfff, 0x4) 5.581888175s ago: executing program 3 (id=1918): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 5.511815841s ago: executing program 3 (id=1919): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1c", 0x1}], 0x1, &(0x7f0000000500)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x41) 5.398538352s ago: executing program 3 (id=1923): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r3) 4.327657384s ago: executing program 3 (id=1930): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0xffffbfff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000040)=""/73}, 0x20) 4.039178978s ago: executing program 3 (id=1933): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 3.953708077s ago: executing program 3 (id=1935): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$IEEE802154_START_REQ(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x34, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xecf9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r7}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000001740)={0x1, 0xf00, "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"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r10, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 2.259765749s ago: executing program 1 (id=1945): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_create_chunk\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.171767993s ago: executing program 0 (id=1946): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2.028950217s ago: executing program 0 (id=1947): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.907840652s ago: executing program 2 (id=1948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) 1.857361918s ago: executing program 0 (id=1949): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r0, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.81473645s ago: executing program 1 (id=1950): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfdef) 1.627804148s ago: executing program 0 (id=1951): bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f0000000400000004000000040001"], 0x48) 1.627458135s ago: executing program 1 (id=1952): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) 1.627251804s ago: executing program 2 (id=1953): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x4, 0x8, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r4}, &(0x7f00000008c0), &(0x7f0000000900)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0xd5, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf604"}, 0x50) 1.548449436s ago: executing program 0 (id=1954): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x1}]}}, &(0x7f0000001dc0)=""/219, 0x26, 0xdb, 0x1, 0x0, 0x0, @void, @value}, 0x28) 1.480267261s ago: executing program 1 (id=1955): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0x57) 1.480055917s ago: executing program 2 (id=1956): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000000000000000000200000000010000000000000e0100000000000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) 1.351520099s ago: executing program 0 (id=1957): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x34, r4, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_SE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0xffffffffffffffec, 0x0, 0x2, 0x70bd2c}, 0x14}}, 0x2000c800) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xecf9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x2c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca6cef28d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r7}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000001740)={0x1, 0xf00, "bd484a7d41e234d61932a7f3fd4dab6ab87401533f6b4e4152227d33c634ff265bb11bc7a4b5167008a90cf4db301e02b566dd2a73ae0da3895dc6d700835e30fd9fc0495289fc331973a76dd0fafeae1371538f566e6c63f8733f88a8239303a59037e5ecb682dbac62159fbee927425972ab10f53fc7dc2800cded1a9bb36ac1b9324831a8db622db1fae640844419e9d2bd29f1cc930830453d5bffe3f531261536b547b1c5e95a06094bcd0c6b8b67b0e21f0eb071615756d0a6b44e7b78790e51f6ad892ab0efeda4dfab7c847cad9698aa1afc41af6dc8852d671d9e5a1f78ef17c0367b713eb77649ab62278f99691e29230d7a4d64c996c14f9e511f83e9b1e2f2b17f2795ee4e7f1a4f1b682c0e24a574194c148977cf73449919082cfdb746f034760ee229447be29c0098869a9f2b1dff398d64fd1f9e315a8e8c6f16ac9e7d4d3d7cf5cdcb6cf6335a97cb81bef89d3aac9496b76a3c127575aa81a0be8b474447f6017bf567931d79f77e882def2be6572d985a5b0dc9e6bdaa8477651a1dcaad45f4b5adf07ea81ee8baf66f624be6cf14d03e888c8d2803a9450e102471b501ba186d4a30015424b868fdcf25d158d67e8888bf1089866d144d4b36ea9c4bf9dec8ac842e60e42f0b896182db7f46c19972044b24333578b8dbc566499ececd1a1e87d2bc500bd623a3d6b534ada590799b34cd298253989dbcc49a835d5473adacf1bbf4309e35c56fd5ecaba3f3481eb476ccdc79b326dc0aedac0234d1eaf4e6d4aa8a604b50f8bc6ad8511830c57cba5aa1eca966bd2714fbd3100ef391d1528f4e122ea0d8f5af0c7de27c4e3e940aafd2b588d8b217df16feffdbd110c5c63dab678abedf2d1f82f3fdf7958699187eafbc9b9343d4a89950d1a542575fd6a44f363de7e9721161a1d9c82b6d37a3ba8cad73dcd81c877b3fc2eb4819e98877ab58868bd7171a999e6693dd18fa2d58f6f3549557ca48a0e3bcdc533383e19d277ef9b0c8c687f95c2b29632721df959a9eca144ef1c4bba9b3835ba8ee4a6deb8ca9784e628a98ef571532d6fd605be2d29f453dfc39d98cfce6738feb7fa47f9b36eede004e9fe3a933cfb5ca047d986f43ac16afd4c0cc9935cda4370c58567859fd2fd373a297c7ff768157bc6b0211a8ffa66f71ac82998893a1033330a44c4ed0f556913225f61e8941f69ae8519eb080c05bdf61ee6f93fc76d483582fec04a440df2504bb731927e69a3d96b0ef01a4c60c2bd6c9e4326da468c25cfa91599c2bc96f48c46ed1dfd0bc5df6428091cc745889be001f2606a762046f2782e1cd74a39d4674ddfd97dcafa0f2b4becefc3658b7d825e6abdad41a7623bf8910cd8cd55375900ea23381cbde3caaf165b65b4c3eec1379f5d6a91bd68c851846e9fc09e8341df5995370782dd3f978b4ac2194709bbd600d17ecef6bab8ce426c4fda6fa09ff5d54bdf118743eb40821a4032c4b848980f42cae7e7788acf85472b8a010579c4ce0f666163c587c89add2b50b99d9eb3695cc909fde8e27521d7e224a4526e02f3f190d3d37015a27a0e66eb11b2cb5834b9236eee856dd823ce6462f31cb0c9162dc1a2a4a5035a8a02a804bccd206ef44031ccc6fe720103b519c83770428e114f7ea5ec36449a4f716c43fc54358d36262b1224bac09702169c1236406a07c6d649bb212d625af5b93e453b99c454faf0e5da3ed4b5a3e7dad2a55dbabd61d7b3174ed9825e05b1c54a2356ea3473550fa93586f2d72e8d94e296cade0c5dca5620d4dd5633af9f41f05848427f7093db33cf8f0d82c80048cc33c2d0f02503e26111a48619fe1797d8e4547dec5dbb18740d3b59cbdaeb9ea6b8a25a7afb2e41c4e8d131127760ca2647d5bba0a1fa788e5b18328e42602fb3440a3893101686ccaf1fac160c7985b7b5c24d222c7a3ce048ce1b69d91167fe6bd50fed5e852015c3b6b80c6202e53961af0fd65415f06142782a1c88ea6d0fef4ed64990565c55bd83871f8c90fe2c00d2ff99db075b6fa1e8f67b19775ec6d5572eb39775ca4594c0b9c4bbaf1e1c5a08453753478e4391f0b41c22a539b720a58750f5f7795a89a399d3b5be244ba552ca48f088a209a374992b639f7471e117d3312181420b6f14eb1ae03b44da6b32aaeffebe24dc511bcfce61bc768c3a3caf805f4a01963ddeaa497fa7c3ae47b1553f5ad2b1240873d07ebb0ae0653e2bbd7ec680f32531e0f608d22651536a9773821a5898d38251a99296e6009ac4cb279afa473180012857da199d2248fa5dc61e93e18555c369c87a5878c95017565232f768495e779cb96bfbf3519ac3241da7eca15007fd3c417781a93e7f3a7728c494538c61d517fff2a75615cdb98cdd99a2ed2f66439675fc41647322c06341028dcc982f33220ea8f517de49e8882276e8509939241a2e81e88a13711f66c91e5d810930e846f40ea6355d4e73fdc5e645462936218815aae76ac7fc8315a5486a400757e5d9b9336ae50bc87e454d607747bc543029e5722cf6c75710bb9cb2a6d507effd8e7e2ac41afabbc7d401048b402fdbd502844e315a8a790c026ec7071df9fffd8ac1d630804513bc286030c3d63a38ac24c824867708e82e4893c14c60897db0e8854931e8d668d3074a982ed58b010f1ebb1fda5259660bdb5deb128642a6fa4983b681f051bdb48532bffe1fec5689c15884579a9a0a4d1d9f18d62e7638e93e5ec8e85bdf7644f617cacf1ce1e78a17963252d71959c7f21ffdb039b9de85ffac8275c71c28f50d856d7cbabce0fd5e9bd7ba5d164a1ef875710c18666cefec168094ddc375202f3d1d345df24ba912537cf903354c8d4a37664ca1abd6c9a897a23be586d8df82af705fc5afb930ec54c2aac9abd11f9cf8e4d6318d5114e9fe91114b13116f65e2fffa251899d0b1aaa0c00dd22b614f24f6fbf49ab97f6ee63a0c55963fdbd64b5f5fb9179d6496b63575a4f2363b9f6981b215e1a94d974fb85fcb51741ad928828f714cea8970b6e705a86500a5729799d2307bb8dfb9583ac79e00a117610aa8cdc3aa4b2adac83eb172658fd972040940e1351e477fda3aaaa8ee0491b0afb9716f01f88a82d0f5aef8f694417c911212009ce31fd1e1bfcf851003b79e00b3df358f8d384e7a050b3f27338f57408cd5c619247da6ca87cb0bf7d96e3c9052126c2053a93163a829d35cfdec48e3d170c0bfc75399150ad30ec0fec96ae3da537c17ef7d3fa4e906af18574c10853d4cf7e4d2db3f8559ea890394694213d1457f6ab16b337bd72b24bc228828744070f365f0d0d4c050e61d5c461937357a4d152acc319509cda4d4521945712ea59f57010d772dca211a717d607b78ffd0d97e6a11c323097cbf2722622fb78bdf6797613a6907ab8af1f0643cd4a67722d9f21c40cb63f7898542071ca3762801c6b7c3a7d5ecb0f8bf068621b839a2c7ef7b19e1430fa460a1b3810c4d3581fc29faecb2e11fdc02de7551c9ab8c04bfe79d019c01daf1bc0228eb2bef0579233a21ec79c6cc04fc055cecdbc8b2074e9cb21c92f5c63b1222651634f6fd45768098950991f7fa4c03f959a1f3f413b2fe52a849eef9db77d1ec6898e0e95894040d4a9def29c21ab022d80d64d18e01f809d8e22167174fa700c3128cdeb31ff9abdc5a9d81c400b4eea9ec41c545b89e634f0f132441b9542b59d990409d821be8fbf474d93745b32bad319bf4f17e6b4f0031e9dbe064eac6529cfd646dd60256cf8f0bb1c42ab7c24881d812a775f4702141fc13b86b88d42bc58bf99d731774bb9bafa1ae03ef2b81d2e2eed577bade55283e9c2226adb13cb1b111bb64ddd124677882c8042c0327abd575c8116d66d57633a806e1ab4385f74c3315d6f05345e1455a05c95a12c9f28ce9be36f6e47d07548efac66e6adcb65dcccb582fd1d05412c000e5bb0069a7f596b6b6e592812f9c62eda934fa8d9b1e850625c39b45c81bd0a9aafce1e01026f19d37d9938a82ec593ecd59d7665754a55e53d8013e5698fbfee25baeda214f2d30d57c1a0f759bf139edd401dc863535a6b6794e3aa2a8283f14c8251a2344742ae10e33d8792429b24df4cb82e94221324e665011eb717f25daedee5abbdf0145a3457d183ab27798ef5f73f4d0aa4c5318695a710216bc649e78d51a350cc173ea984240ed20b97f42d84144d754019474decbdbcc45f8bd3ca81b21b83aa0e284d347f2f78a820f772b5e65575351452fa8dea14e7ddf2308e20f705a9dc365ffd90c9401554ce39b1b612f6d78b4fb74feba8c52f40577b9ccf48c94eff094bac349b31363b720a2994c1cb6ed7792d0b1c255723f7865bc1e96c439171344fdb2d53747931d9cbbd3d81ddf25a014d769b60d514ee155341a36b33f196be3fb15e4a4242cc40e114761d3d12e9493b16e1123917d864d4de72da3d08a48f895192198199c839000f130ce0b0cad183efe58c1b792f6346270ccd8e7cad0332a484f32434288cedcdbb100d79a82213f5f11c7a5cc86785dcdf9504695e004e17bb86994365875c8c9d2beaa75aa538fc38436b5b667ff227e8572d0cc457fffb3eefdc598366d97f2faa82f2ca886f4eba2c6feb95ebcb74973d03d6a0ad749afda109d52364abbdd0dd50c543b367d74849843b2f350d2b69d44025c4e3cb65343e2baef162c157b09b64da6ab65728bf7a13ba63bbb5cb5c0e7f22ca588f0379738991a366a10ffa49e007c3cea354108b68ca1a8d6e6ce9dda9ab8d3d70bbbd6bd51d049b7c39ef6ed00fbe4b413dcf648b6f42da9b921b119c977d55b8953ff30cff46b2f823874c8b255907ecc205ee9b3ea462e9cf2e150f4fca9e4e1c288dbae10c1b39e49e7242d9d29340b3b7695cb3f416b1a7bb5d24004cb67ad595e9763a6f6645c5faa8f858c3ca67e3fa65b11bc657d3dedd3f6032ea08b51c39c0d6adf78b5e3fdf17ec5020e83e65fd5ca7f44ce015b865db67730725bcc61f3dd8966423e0c3b3e448a89cd1330a410ec2749c6d4b390e732d1cdc815cecfb571c8fd224629140b649803e0b30b723f0028b39c42d420acb1f0fe893048ba7eef3bbdb5a2e6ab1b184b5371c531cee8d5b6684d3f4c10700f3bc3d22cb331e51a1bc99543f257fe0b434fb458d5b64829a167580374c82b8bdd01909f875d9009bc7e24d042f53e67f7410ab60d4ba96160386a274e190caddfc59a8e219157a68cc17701f27500b0769511714e97dfda2a9f7605ddc4fd164d89811449ffdfaab29f3d52b28c5f8700e4a88cc5ce7ce014e9f4345b89f37b09de74c1bf9fc7cff7955c766e6ebbeef2b036df89aa8553905113eb36b0c6e939954538dc2582191cf8039aed1c8725410961a1aaee39a99a0fee9ffc058b84da7a8"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r10, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r10}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) 1.35132117s ago: executing program 2 (id=1958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000040000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x54) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) 1.288976986s ago: executing program 1 (id=1959): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.263330592s ago: executing program 2 (id=1960): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_pid(r0, &(0x7f00000001c0), 0xffbf) write$cgroup_pid(r0, &(0x7f0000000140), 0x12) 43.513483ms ago: executing program 1 (id=1961): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=1962): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100006cc70000000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r0}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0x69) kernel console output (not intermixed with test programs): 696618][ T7261] ? __pfx_validate_chain+0x10/0x10 [ 142.701819][ T7261] ? __sock_sendmsg+0x221/0x270 [ 142.706669][ T7261] ? ____sys_sendmsg+0x52a/0x7e0 [ 142.711606][ T7261] ? __sys_sendmsg+0x269/0x350 [ 142.716369][ T7261] ? do_syscall_64+0xf3/0x230 [ 142.721041][ T7261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.727122][ T7261] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 142.733107][ T7261] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.739443][ T7261] ? mark_lock+0x9a/0x360 [ 142.743785][ T7261] ? __lock_acquire+0x1397/0x2100 [ 142.748851][ T7261] ? rcu_read_unlock+0x87/0xa0 [ 142.753610][ T7261] ? __dev_queue_xmit+0x1775/0x3f50 [ 142.758805][ T7261] ? __pfx_lock_release+0x10/0x10 [ 142.763838][ T7261] ? __pfx_rtnl_newlink+0x10/0x10 [ 142.768868][ T7261] rtnetlink_rcv_msg+0x791/0xcf0 [ 142.773806][ T7261] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 142.778915][ T7261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.784376][ T7261] ? ref_tracker_free+0x643/0x7e0 [ 142.789400][ T7261] netlink_rcv_skb+0x1e3/0x430 [ 142.794163][ T7261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.799624][ T7261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 142.804919][ T7261] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.810143][ T7261] netlink_unicast+0x7f6/0x990 [ 142.814910][ T7261] ? __pfx_netlink_unicast+0x10/0x10 [ 142.820219][ T7261] ? __virt_addr_valid+0x183/0x530 [ 142.825355][ T7261] ? __check_object_size+0x48e/0x900 [ 142.830665][ T7261] netlink_sendmsg+0x8e4/0xcb0 [ 142.835445][ T7261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.840734][ T7261] ? aa_sock_msg_perm+0x91/0x160 [ 142.845683][ T7261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.850967][ T7261] __sock_sendmsg+0x221/0x270 [ 142.855646][ T7261] ____sys_sendmsg+0x52a/0x7e0 [ 142.860414][ T7261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.865695][ T7261] ? __fget_files+0x2a/0x410 [ 142.870281][ T7261] ? __fget_files+0x2a/0x410 [ 142.874882][ T7261] __sys_sendmsg+0x269/0x350 [ 142.879467][ T7261] ? __pfx_lock_release+0x10/0x10 [ 142.884492][ T7261] ? __pfx___sys_sendmsg+0x10/0x10 [ 142.889637][ T7261] ? __pfx_vfs_write+0x10/0x10 [ 142.894419][ T7261] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 142.900851][ T7261] ? do_syscall_64+0x100/0x230 [ 142.905619][ T7261] ? do_syscall_64+0xb6/0x230 [ 142.910336][ T7261] do_syscall_64+0xf3/0x230 [ 142.914868][ T7261] ? clear_bhb_loop+0x35/0x90 [ 142.919561][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.925489][ T7261] RIP: 0033:0x7fb17517ff19 [ 142.929920][ T7261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.949531][ T7261] RSP: 002b:00007fb17602b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.957949][ T7261] RAX: ffffffffffffffda RBX: 00007fb175345fa0 RCX: 00007fb17517ff19 [ 142.965915][ T7261] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 142.973883][ T7261] RBP: 00007fb17602b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.981854][ T7261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.989820][ T7261] R13: 0000000000000000 R14: 00007fb175345fa0 R15: 00007ffde5dd1c28 [ 142.997814][ T7261] [ 143.350485][ T7196] Set syz1 is full, maxelem 65536 reached [ 143.546507][ T7277] bridge0: port 3(vlan3) entered blocking state [ 143.553290][ T7277] bridge0: port 3(vlan3) entered disabled state [ 143.559721][ T7277] vlan3: entered allmulticast mode [ 143.565187][ T7277] gretap0: entered allmulticast mode [ 143.573175][ T7277] vlan3: entered promiscuous mode [ 143.578457][ T7277] gretap0: entered promiscuous mode [ 143.588967][ T7277] bridge0: port 3(vlan3) entered blocking state [ 143.595824][ T7277] bridge0: port 3(vlan3) entered forwarding state [ 143.669237][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.460'. [ 143.674836][ T7286] netlink: 60 bytes leftover after parsing attributes in process `syz.3.458'. [ 143.747937][ T7289] netlink: 48 bytes leftover after parsing attributes in process `syz.2.460'. [ 145.070089][ T7319] FAULT_INJECTION: forcing a failure. [ 145.070089][ T7319] name failslab, interval 1, probability 0, space 0, times 0 [ 145.082832][ T7319] CPU: 1 UID: 0 PID: 7319 Comm: syz.4.467 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 145.093458][ T7319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 145.103552][ T7319] Call Trace: [ 145.106858][ T7319] [ 145.109817][ T7319] dump_stack_lvl+0x241/0x360 [ 145.114551][ T7319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.119796][ T7319] ? __pfx__printk+0x10/0x10 [ 145.124437][ T7319] should_fail_ex+0x3b0/0x4e0 [ 145.129156][ T7319] should_failslab+0xac/0x100 [ 145.133877][ T7319] ? skb_clone+0x20c/0x390 [ 145.138417][ T7319] kmem_cache_alloc_noprof+0x70/0x380 [ 145.143836][ T7319] skb_clone+0x20c/0x390 [ 145.148115][ T7319] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 145.153352][ T7319] dev_queue_xmit_nit+0x249/0xca0 [ 145.158419][ T7319] ? dev_queue_xmit_nit+0x2b/0xca0 [ 145.163568][ T7319] ? validate_xmit_skb+0x9b8/0xff0 [ 145.168718][ T7319] dev_hard_start_xmit+0x15f/0x7d0 [ 145.173870][ T7319] ? __pfx_validate_xmit_skb+0x10/0x10 [ 145.179380][ T7319] __dev_queue_xmit+0x1b73/0x3f50 [ 145.184442][ T7319] ? kasan_save_track+0x51/0x80 [ 145.189332][ T7319] ? ____sys_sendmsg+0x52a/0x7e0 [ 145.194306][ T7319] ? __dev_queue_xmit+0x2f4/0x3f50 [ 145.199462][ T7319] ? __pfx___dev_queue_xmit+0x10/0x10 [ 145.204899][ T7319] ? __copy_skb_header+0x437/0x5b0 [ 145.210133][ T7319] ? __asan_memcpy+0x40/0x70 [ 145.214762][ T7319] ? __copy_skb_header+0x437/0x5b0 [ 145.219912][ T7319] ? __skb_clone+0x454/0x6c0 [ 145.224552][ T7319] ? skb_clone+0x240/0x390 [ 145.229005][ T7319] __netlink_deliver_tap+0x56b/0x7f0 [ 145.234332][ T7319] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.239565][ T7319] netlink_deliver_tap+0x19d/0x1b0 [ 145.244716][ T7319] netlink_unicast+0x7c4/0x990 [ 145.249527][ T7319] ? __pfx_netlink_unicast+0x10/0x10 [ 145.254843][ T7319] ? __virt_addr_valid+0x183/0x530 [ 145.260335][ T7319] ? __check_object_size+0x48e/0x900 [ 145.265659][ T7319] netlink_sendmsg+0x8e4/0xcb0 [ 145.270477][ T7319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.275804][ T7319] ? aa_sock_msg_perm+0x91/0x160 [ 145.280777][ T7319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.286092][ T7319] __sock_sendmsg+0x221/0x270 [ 145.290801][ T7319] ____sys_sendmsg+0x52a/0x7e0 [ 145.295606][ T7319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.300924][ T7319] ? __fget_files+0x2a/0x410 [ 145.305552][ T7319] ? __fget_files+0x2a/0x410 [ 145.310184][ T7319] __sys_sendmsg+0x269/0x350 [ 145.314809][ T7319] ? __pfx_lock_release+0x10/0x10 [ 145.319872][ T7319] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.325031][ T7319] ? __pfx_vfs_write+0x10/0x10 [ 145.329866][ T7319] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 145.336230][ T7319] ? do_syscall_64+0x100/0x230 [ 145.341027][ T7319] ? do_syscall_64+0xb6/0x230 [ 145.345733][ T7319] do_syscall_64+0xf3/0x230 [ 145.350266][ T7319] ? clear_bhb_loop+0x35/0x90 [ 145.354983][ T7319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.360905][ T7319] RIP: 0033:0x7fb17517ff19 [ 145.365782][ T7319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.385421][ T7319] RSP: 002b:00007fb17602b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.393873][ T7319] RAX: ffffffffffffffda RBX: 00007fb175345fa0 RCX: 00007fb17517ff19 [ 145.401877][ T7319] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 145.409878][ T7319] RBP: 00007fb17602b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 145.417883][ T7319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.425885][ T7319] R13: 0000000000000000 R14: 00007fb175345fa0 R15: 00007ffde5dd1c28 [ 145.433905][ T7319] [ 145.649561][ T7340] raw_sendmsg: syz.3.471 forgot to set AF_INET. Fix it! [ 145.707343][ T7343] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 145.755740][ T7338] vlan3: entered promiscuous mode [ 145.845596][ T7343] netlink: 'syz.1.469': attribute type 5 has an invalid length. [ 146.414539][ T7355] netlink: 60 bytes leftover after parsing attributes in process `syz.2.475'. [ 146.890906][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz.4.480'. [ 146.910593][ T7375] bridge_slave_1: left allmulticast mode [ 146.925563][ T7375] bridge_slave_1: left promiscuous mode [ 146.942463][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.000748][ T7375] bridge_slave_0: left allmulticast mode [ 147.008034][ T7375] bridge_slave_0: left promiscuous mode [ 147.016970][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.103393][ T7375] bridge0 (unregistering): left allmulticast mode [ 147.257192][ T5834] Bluetooth: hci3: link tx timeout [ 147.266332][ T5834] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.448316][ T7394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.483'. [ 147.470658][ T7394] pim6reg: left allmulticast mode [ 148.016460][ T7419] netlink: 'syz.4.487': attribute type 4 has an invalid length. [ 148.075418][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.276233][ T7428] netlink: 'syz.1.489': attribute type 1 has an invalid length. [ 148.368676][ T7428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.472699][ T7431] bond2: (slave veth3): Enslaving as an active interface with a down link [ 148.527693][ T5834] Bluetooth: hci3: link tx timeout [ 148.533047][ T5834] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.553337][ T5834] Bluetooth: hci3: link tx timeout [ 148.557989][ T7425] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 148.558577][ T5834] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.597696][ T7425] bond2: (slave batadv1): making interface the new active one [ 148.620032][ T7425] batadv1: entered promiscuous mode [ 148.650626][ T7425] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 148.842420][ T5842] Bluetooth: hci3: link tx timeout [ 148.847648][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.919932][ T7445] netlink: 60 bytes leftover after parsing attributes in process `syz.3.491'. [ 149.005228][ T7450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.495'. [ 149.149253][ T7456] netlink: 48 bytes leftover after parsing attributes in process `syz.0.495'. [ 149.281690][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 149.288293][ T5842] Bluetooth: hci3: link tx timeout [ 149.294069][ T5842] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 150.073114][ T7497] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 150.305007][ T7503] bond0: option arp_validate: invalid value (1953002497) [ 150.320805][ T7501] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 150.394415][ T7506] netlink: 60 bytes leftover after parsing attributes in process `syz.2.508'. [ 150.517489][ T7513] netlink: 892 bytes leftover after parsing attributes in process `syz.1.511'. [ 151.119312][ T7536] netlink: 'syz.3.516': attribute type 4 has an invalid length. [ 151.133816][ T7536] netlink: 152 bytes leftover after parsing attributes in process `syz.3.516'. [ 151.207321][ T7541] tipc: Enabling of bearer rejected, already enabled [ 151.278459][ T7544] bond0: option arp_validate: invalid value (1953002497) [ 151.355972][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.3.522'. [ 151.575415][ T7557] __nla_validate_parse: 1 callbacks suppressed [ 151.575436][ T7557] netlink: 48 bytes leftover after parsing attributes in process `syz.2.525'. [ 152.205570][ T7570] netlink: 60 bytes leftover after parsing attributes in process `syz.1.529'. [ 152.333413][ T7576] bond0: option arp_validate: invalid value (1953002497) [ 152.706287][ T7594] netlink: 'syz.1.538': attribute type 1 has an invalid length. [ 152.716524][ T7594] netlink: 224 bytes leftover after parsing attributes in process `syz.1.538'. [ 152.804574][ T7597] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 152.902306][ T7599] ipip0: entered promiscuous mode [ 153.241993][ T7611] bond0: option arp_validate: invalid value (1953002497) [ 153.548463][ T7626] syzkaller1: entered promiscuous mode [ 153.559019][ T7626] syzkaller1: entered allmulticast mode [ 154.032141][ T7644] bond0: option arp_validate: invalid value (1953002497) [ 154.859636][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.568'. [ 154.936178][ T7674] netlink: 24 bytes leftover after parsing attributes in process `syz.1.568'. [ 155.144623][ T7680] bond0: option arp_validate: invalid value (1953002497) [ 155.300225][ T7694] ipip0: entered promiscuous mode [ 155.316062][ T7691] tipc: Enabling of bearer rejected, failed to enable media [ 155.334612][ T7697] pim6reg: entered allmulticast mode [ 155.426385][ T7697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.577'. [ 155.483836][ T7702] FAULT_INJECTION: forcing a failure. [ 155.483836][ T7702] name failslab, interval 1, probability 0, space 0, times 0 [ 155.508573][ T7702] CPU: 1 UID: 0 PID: 7702 Comm: syz.0.580 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 155.519220][ T7702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 155.529307][ T7702] Call Trace: [ 155.532611][ T7702] [ 155.535561][ T7702] dump_stack_lvl+0x241/0x360 [ 155.540275][ T7702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.545506][ T7702] ? __pfx__printk+0x10/0x10 [ 155.550143][ T7702] should_fail_ex+0x3b0/0x4e0 [ 155.554855][ T7702] should_failslab+0xac/0x100 [ 155.559566][ T7702] ? skb_clone+0x20c/0x390 [ 155.564013][ T7702] kmem_cache_alloc_noprof+0x70/0x380 [ 155.569421][ T7702] skb_clone+0x20c/0x390 [ 155.573700][ T7702] __netlink_deliver_tap+0x3cc/0x7f0 [ 155.579030][ T7702] ? netlink_deliver_tap+0x2e/0x1b0 [ 155.584262][ T7702] netlink_deliver_tap+0x19d/0x1b0 [ 155.589400][ T7702] netlink_unicast+0x7c4/0x990 [ 155.594198][ T7702] ? __pfx_netlink_unicast+0x10/0x10 [ 155.599507][ T7702] ? __virt_addr_valid+0x183/0x530 [ 155.604656][ T7702] ? __check_object_size+0x48e/0x900 [ 155.609976][ T7702] netlink_sendmsg+0x8e4/0xcb0 [ 155.614787][ T7702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.620106][ T7702] ? aa_sock_msg_perm+0x91/0x160 [ 155.625084][ T7702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.630395][ T7702] __sock_sendmsg+0x221/0x270 [ 155.635112][ T7702] ____sys_sendmsg+0x52a/0x7e0 [ 155.639915][ T7702] ? __pfx_____sys_sendmsg+0x10/0x10 [ 155.645225][ T7702] ? __fget_files+0x2a/0x410 [ 155.649864][ T7702] ? __fget_files+0x2a/0x410 [ 155.654503][ T7702] __sys_sendmmsg+0x36a/0x720 [ 155.659250][ T7702] ? __pfx___sys_sendmmsg+0x10/0x10 [ 155.664501][ T7702] ? __pfx_lock_release+0x10/0x10 [ 155.669551][ T7702] ? kstrtouint_from_user+0x128/0x190 [ 155.674984][ T7702] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 155.680913][ T7702] ? ksys_write+0x22a/0x2b0 [ 155.685446][ T7702] ? __pfx_lock_release+0x10/0x10 [ 155.690515][ T7702] ? vfs_write+0x730/0xd30 [ 155.694974][ T7702] ? __mutex_unlock_slowpath+0x21e/0x790 [ 155.700661][ T7702] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 155.706700][ T7702] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.713260][ T7702] ? do_syscall_64+0x100/0x230 [ 155.718062][ T7702] __x64_sys_sendmmsg+0xa0/0xb0 [ 155.722959][ T7702] do_syscall_64+0xf3/0x230 [ 155.727492][ T7702] ? clear_bhb_loop+0x35/0x90 [ 155.732202][ T7702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.738124][ T7702] RIP: 0033:0x7f8b40b7ff19 [ 155.743010][ T7702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.762652][ T7702] RSP: 002b:00007f8b4189e058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 155.771111][ T7702] RAX: ffffffffffffffda RBX: 00007f8b40d45fa0 RCX: 00007f8b40b7ff19 [ 155.779119][ T7702] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000009 [ 155.787124][ T7702] RBP: 00007f8b4189e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.795132][ T7702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.803140][ T7702] R13: 0000000000000000 R14: 00007f8b40d45fa0 R15: 00007ffdb37bf6c8 [ 155.811165][ T7702] [ 155.837738][ T7702] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 155.845671][ T7702] IPv6: NLM_F_CREATE should be set when creating new route [ 156.053479][ T7713] netlink: 68 bytes leftover after parsing attributes in process `syz.0.585'. [ 156.270116][ T7721] bond0: option arp_validate: invalid value (1953002497) [ 156.451001][ T7732] netlink: 8 bytes leftover after parsing attributes in process `syz.1.593'. [ 156.571554][ T7739] netlink: 'syz.1.594': attribute type 11 has an invalid length. [ 157.357602][ T7767] bond0: option arp_validate: invalid value (1953002497) [ 158.449375][ T7794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.675908][ T7832] bond0: option arp_validate: invalid value (1953002497) [ 159.893941][ T3640] batadv1: left promiscuous mode [ 159.920876][ T7840] netlink: 68 bytes leftover after parsing attributes in process `syz.3.623'. [ 159.975024][ T7840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 160.194367][ T7849] FAULT_INJECTION: forcing a failure. [ 160.194367][ T7849] name failslab, interval 1, probability 0, space 0, times 0 [ 160.256419][ T7849] CPU: 1 UID: 0 PID: 7849 Comm: syz.2.627 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 160.267084][ T7849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 160.277176][ T7849] Call Trace: [ 160.280486][ T7849] [ 160.283440][ T7849] dump_stack_lvl+0x241/0x360 [ 160.288134][ T7849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.293348][ T7849] ? __pfx__printk+0x10/0x10 [ 160.297939][ T7849] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 160.303923][ T7849] ? __pfx___might_resched+0x10/0x10 [ 160.309210][ T7849] should_fail_ex+0x3b0/0x4e0 [ 160.313889][ T7849] should_failslab+0xac/0x100 [ 160.318566][ T7849] kmem_cache_alloc_node_noprof+0x77/0x380 [ 160.324374][ T7849] ? __alloc_skb+0x1c3/0x440 [ 160.328964][ T7849] ? idr_get_next+0x3c6/0x4a0 [ 160.333650][ T7849] __alloc_skb+0x1c3/0x440 [ 160.338069][ T7849] ? __pfx___alloc_skb+0x10/0x10 [ 160.343016][ T7849] ctrl_getfamily+0x48c/0x6b0 [ 160.347696][ T7849] ? __pfx_ctrl_getfamily+0x10/0x10 [ 160.352893][ T7849] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 160.359227][ T7849] genl_rcv_msg+0xb14/0xec0 [ 160.363759][ T7849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.368833][ T7849] ? __pfx_lock_acquire+0x10/0x10 [ 160.373882][ T7849] ? __pfx_ctrl_getfamily+0x10/0x10 [ 160.379098][ T7849] ? __pfx___might_resched+0x10/0x10 [ 160.384417][ T7849] netlink_rcv_skb+0x1e3/0x430 [ 160.389204][ T7849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 160.394249][ T7849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.399559][ T7849] genl_rcv+0x28/0x40 [ 160.403566][ T7849] netlink_unicast+0x7f6/0x990 [ 160.408371][ T7849] ? __pfx_netlink_unicast+0x10/0x10 [ 160.413667][ T7849] ? __virt_addr_valid+0x183/0x530 [ 160.418818][ T7849] ? __check_object_size+0x48e/0x900 [ 160.424145][ T7849] netlink_sendmsg+0x8e4/0xcb0 [ 160.428943][ T7849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.434254][ T7849] ? aa_sock_msg_perm+0x91/0x160 [ 160.439223][ T7849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.444538][ T7849] __sock_sendmsg+0x221/0x270 [ 160.449250][ T7849] __sys_sendto+0x363/0x4c0 [ 160.453770][ T7849] ? __pfx___sys_sendto+0x10/0x10 [ 160.458803][ T7849] ? __mutex_unlock_slowpath+0x21e/0x790 [ 160.464441][ T7849] ? __fget_files+0x2a/0x410 [ 160.469039][ T7849] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 160.475027][ T7849] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.481363][ T7849] __x64_sys_sendto+0xde/0x100 [ 160.486129][ T7849] do_syscall_64+0xf3/0x230 [ 160.490627][ T7849] ? clear_bhb_loop+0x35/0x90 [ 160.495301][ T7849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.501199][ T7849] RIP: 0033:0x7fe2d8b81dac [ 160.505612][ T7849] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 160.525221][ T7849] RSP: 002b:00007fe2d99e0ee0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 160.533644][ T7849] RAX: ffffffffffffffda RBX: 00007fe2d99e0fe0 RCX: 00007fe2d8b81dac [ 160.541639][ T7849] RDX: 0000000000000024 RSI: 00007fe2d99e1030 RDI: 0000000000000004 [ 160.549616][ T7849] RBP: 0000000000000000 R08: 00007fe2d99e0f34 R09: 000000000000000c [ 160.557587][ T7849] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 160.565579][ T7849] R13: 00007fe2d99e0f88 R14: 00007fe2d99e1030 R15: 0000000000000000 [ 160.573564][ T7849] [ 161.366008][ T7771] Set syz1 is full, maxelem 65536 reached [ 161.499610][ T7880] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.919724][ T7912] xt_nfacct: accounting object `sy' does not exists [ 162.037902][ T7918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.643'. [ 163.032990][ T7962] netlink: 184 bytes leftover after parsing attributes in process `syz.2.655'. [ 163.618510][ T7989] netlink: 772 bytes leftover after parsing attributes in process `syz.2.658'. [ 163.710241][ T7994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.661'. [ 164.629053][ T8031] netlink: 40 bytes leftover after parsing attributes in process `syz.3.673'. [ 164.715214][ T8032] netlink: 44 bytes leftover after parsing attributes in process `syz.3.673'. [ 164.913374][ T8034] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 165.116312][ T8042] pim6reg: left allmulticast mode [ 165.497670][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 165.636037][ T8061] netlink: 48 bytes leftover after parsing attributes in process `syz.0.682'. [ 166.143423][ T8083] pim6reg: left allmulticast mode [ 166.149025][ T8083] bridge0: left allmulticast mode [ 166.591760][ T8102] netlink: 60 bytes leftover after parsing attributes in process `syz.1.697'. [ 166.820793][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.700'. [ 166.896935][ T8113] netlink: 48 bytes leftover after parsing attributes in process `syz.0.700'. [ 167.644101][ T8145] netlink: 60 bytes leftover after parsing attributes in process `syz.3.713'. [ 167.796742][ T8151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.717'. [ 167.861552][ T8151] pim6reg: left allmulticast mode [ 167.897330][ T8155] netlink: 19 bytes leftover after parsing attributes in process `syz.2.718'. [ 168.089664][ T8162] netlink: 892 bytes leftover after parsing attributes in process `syz.3.722'. [ 168.110968][ T8162] FAULT_INJECTION: forcing a failure. [ 168.110968][ T8162] name failslab, interval 1, probability 0, space 0, times 0 [ 168.125260][ T8162] CPU: 1 UID: 0 PID: 8162 Comm: syz.3.722 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 168.135989][ T8162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.146079][ T8162] Call Trace: [ 168.149389][ T8162] [ 168.152100][ T8164] netlink: 48 bytes leftover after parsing attributes in process `syz.2.719'. [ 168.152325][ T8162] dump_stack_lvl+0x241/0x360 [ 168.165872][ T8162] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.171099][ T8162] ? __pfx__printk+0x10/0x10 [ 168.175732][ T8162] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 168.181781][ T8162] ? __pfx___might_resched+0x10/0x10 [ 168.187104][ T8162] should_fail_ex+0x3b0/0x4e0 [ 168.191831][ T8162] should_failslab+0xac/0x100 [ 168.196549][ T8162] kmem_cache_alloc_node_noprof+0x77/0x380 [ 168.202401][ T8162] ? __alloc_skb+0x1c3/0x440 [ 168.207024][ T8162] __alloc_skb+0x1c3/0x440 [ 168.211477][ T8162] ? __pfx___alloc_skb+0x10/0x10 [ 168.216448][ T8162] ? netlink_ack_tlv_len+0x6e/0x200 [ 168.221682][ T8162] netlink_ack+0x145/0xa50 [ 168.226135][ T8162] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 168.231539][ T8162] ? __pfx_nl80211_post_doit+0x10/0x10 [ 168.237035][ T8162] ? __pfx___might_resched+0x10/0x10 [ 168.242361][ T8162] netlink_rcv_skb+0x262/0x430 [ 168.247160][ T8162] ? __pfx_genl_rcv_msg+0x10/0x10 [ 168.252229][ T8162] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 168.257558][ T8162] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 168.263060][ T8162] genl_rcv+0x28/0x40 [ 168.267069][ T8162] netlink_unicast+0x7f6/0x990 [ 168.271873][ T8162] ? __pfx_netlink_unicast+0x10/0x10 [ 168.277186][ T8162] ? __virt_addr_valid+0x183/0x530 [ 168.282343][ T8162] ? __check_object_size+0x48e/0x900 [ 168.287667][ T8162] netlink_sendmsg+0x8e4/0xcb0 [ 168.292475][ T8162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.297820][ T8162] ? aa_sock_msg_perm+0x91/0x160 [ 168.302795][ T8162] ? __pfx_netlink_sendmsg+0x10/0x10 [ 168.308114][ T8162] __sock_sendmsg+0x221/0x270 [ 168.312843][ T8162] ____sys_sendmsg+0x52a/0x7e0 [ 168.317652][ T8162] ? __pfx_____sys_sendmsg+0x10/0x10 [ 168.322970][ T8162] ? __fget_files+0x2a/0x410 [ 168.327595][ T8162] ? __fget_files+0x2a/0x410 [ 168.332227][ T8162] __sys_sendmsg+0x269/0x350 [ 168.336853][ T8162] ? __pfx_lock_release+0x10/0x10 [ 168.341924][ T8162] ? __pfx___sys_sendmsg+0x10/0x10 [ 168.347091][ T8162] ? __pfx_vfs_write+0x10/0x10 [ 168.351920][ T8162] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 168.358293][ T8162] ? do_syscall_64+0x100/0x230 [ 168.363097][ T8162] ? do_syscall_64+0xb6/0x230 [ 168.367827][ T8162] do_syscall_64+0xf3/0x230 [ 168.372373][ T8162] ? clear_bhb_loop+0x35/0x90 [ 168.377080][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.383007][ T8162] RIP: 0033:0x7f4b6b17ff19 [ 168.387453][ T8162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.407096][ T8162] RSP: 002b:00007f4b68ff6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 168.415557][ T8162] RAX: ffffffffffffffda RBX: 00007f4b6b345fa0 RCX: 00007f4b6b17ff19 [ 168.423568][ T8162] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 0000000000000004 [ 168.431573][ T8162] RBP: 00007f4b68ff60a0 R08: 0000000000000000 R09: 0000000000000000 [ 168.439578][ T8162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.447674][ T8162] R13: 0000000000000000 R14: 00007f4b6b345fa0 R15: 00007ffe1778a518 [ 168.455713][ T8162] [ 168.898824][ T8182] sctp: [Deprecated]: syz.0.728 (pid 8182) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.898824][ T8182] Use struct sctp_sack_info instead [ 168.936697][ T8185] FAULT_INJECTION: forcing a failure. [ 168.936697][ T8185] name failslab, interval 1, probability 0, space 0, times 0 [ 168.960460][ T8185] CPU: 0 UID: 0 PID: 8185 Comm: syz.1.729 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 168.971108][ T8185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 168.981190][ T8185] Call Trace: [ 168.984496][ T8185] [ 168.987446][ T8185] dump_stack_lvl+0x241/0x360 [ 168.992161][ T8185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 168.997387][ T8185] ? __pfx__printk+0x10/0x10 [ 169.002016][ T8185] should_fail_ex+0x3b0/0x4e0 [ 169.006723][ T8185] should_failslab+0xac/0x100 [ 169.011433][ T8185] ? skb_clone+0x20c/0x390 [ 169.015885][ T8185] kmem_cache_alloc_noprof+0x70/0x380 [ 169.021298][ T8185] skb_clone+0x20c/0x390 [ 169.025573][ T8185] __netlink_deliver_tap+0x3cc/0x7f0 [ 169.030890][ T8185] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.036112][ T8185] netlink_deliver_tap+0x19d/0x1b0 [ 169.041256][ T8185] netlink_unicast+0x7c4/0x990 [ 169.046054][ T8185] ? __pfx_netlink_unicast+0x10/0x10 [ 169.051352][ T8185] ? __virt_addr_valid+0x183/0x530 [ 169.056474][ T8185] ? __check_object_size+0x48e/0x900 [ 169.061777][ T8185] netlink_sendmsg+0x8e4/0xcb0 [ 169.066564][ T8185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.071848][ T8185] ? aa_sock_msg_perm+0x91/0x160 [ 169.076783][ T8185] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.082061][ T8185] __sock_sendmsg+0x221/0x270 [ 169.086740][ T8185] ____sys_sendmsg+0x52a/0x7e0 [ 169.091509][ T8185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.096791][ T8185] ? __fget_files+0x2a/0x410 [ 169.101376][ T8185] ? __fget_files+0x2a/0x410 [ 169.105967][ T8185] __sys_sendmsg+0x269/0x350 [ 169.110554][ T8185] ? __pfx_lock_release+0x10/0x10 [ 169.115584][ T8185] ? __pfx___sys_sendmsg+0x10/0x10 [ 169.120702][ T8185] ? __pfx_vfs_write+0x10/0x10 [ 169.125482][ T8185] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 169.131810][ T8185] ? do_syscall_64+0x100/0x230 [ 169.136575][ T8185] ? do_syscall_64+0xb6/0x230 [ 169.141260][ T8185] do_syscall_64+0xf3/0x230 [ 169.145773][ T8185] ? clear_bhb_loop+0x35/0x90 [ 169.150448][ T8185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.156334][ T8185] RIP: 0033:0x7f04e877ff19 [ 169.160747][ T8185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.180361][ T8185] RSP: 002b:00007f04e9658058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.188799][ T8185] RAX: ffffffffffffffda RBX: 00007f04e8945fa0 RCX: 00007f04e877ff19 [ 169.196768][ T8185] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 169.204737][ T8185] RBP: 00007f04e96580a0 R08: 0000000000000000 R09: 0000000000000000 [ 169.212702][ T8185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.220667][ T8185] R13: 0000000000000000 R14: 00007f04e8945fa0 R15: 00007ffe95498b18 [ 169.228651][ T8185] [ 169.273281][ T8177] netlink: 'syz.0.728': attribute type 1 has an invalid length. [ 169.553295][ T8207] bond0: option arp_validate: invalid value (1953002497) [ 169.688343][ T8215] pim6reg: entered allmulticast mode [ 169.696446][ T8215] pim6reg: left allmulticast mode [ 169.933834][ T8223] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 170.890462][ T8261] __nla_validate_parse: 3 callbacks suppressed [ 170.890483][ T8261] netlink: 48 bytes leftover after parsing attributes in process `syz.4.752'. [ 170.971969][ T8262] pim6reg: left allmulticast mode [ 170.987980][ T8262] bridge0: left allmulticast mode [ 171.037131][ T8268] bond0: option use_carrier: invalid value (9) [ 171.080259][ T8268] bond0: option use_carrier: invalid value (9) [ 171.219120][ T8277] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.759'. [ 171.258142][ T8277] netlink: zone id is out of range [ 171.271183][ T8277] netlink: zone id is out of range [ 171.285979][ T8277] netlink: get zone limit has 8 unknown bytes [ 171.486814][ T8292] netlink: 80 bytes leftover after parsing attributes in process `syz.3.763'. [ 171.501847][ T8295] FAULT_INJECTION: forcing a failure. [ 171.501847][ T8295] name failslab, interval 1, probability 0, space 0, times 0 [ 171.548734][ T8295] CPU: 0 UID: 0 PID: 8295 Comm: syz.2.764 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 171.559393][ T8295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.569488][ T8295] Call Trace: [ 171.572802][ T8295] [ 171.575769][ T8295] dump_stack_lvl+0x241/0x360 [ 171.580491][ T8295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.585729][ T8295] ? __pfx__printk+0x10/0x10 [ 171.590362][ T8295] ? kmem_cache_alloc_noprof+0x48/0x380 [ 171.595954][ T8295] ? __pfx___might_resched+0x10/0x10 [ 171.601278][ T8295] should_fail_ex+0x3b0/0x4e0 [ 171.605995][ T8295] should_failslab+0xac/0x100 [ 171.610717][ T8295] ? _sctp_make_chunk+0x161/0x460 [ 171.615778][ T8295] kmem_cache_alloc_noprof+0x70/0x380 [ 171.621204][ T8295] _sctp_make_chunk+0x161/0x460 [ 171.626093][ T8295] sctp_make_datafrag_empty+0xa6/0x510 [ 171.631584][ T8295] ? __kmalloc_cache_noprof+0x243/0x390 [ 171.637164][ T8295] ? sctp_auth_send_cid+0x69/0x250 [ 171.642315][ T8295] sctp_datamsg_from_user+0x740/0xf20 [ 171.647752][ T8295] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 171.653086][ T8295] ? sctp_v6_to_sk_saddr+0x101/0x1c0 [ 171.658416][ T8295] ? __asan_memcpy+0x40/0x70 [ 171.663043][ T8295] ? sctp_assoc_add_peer+0xe3c/0x15c0 [ 171.668474][ T8295] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 171.674236][ T8295] ? sctp_connect_new_asoc+0x3fe/0x6c0 [ 171.679737][ T8295] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 171.685579][ T8295] ? sctp_sendmsg+0xbb9/0x3520 [ 171.690391][ T8295] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 171.696234][ T8295] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 171.702160][ T8295] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 171.707747][ T8295] sctp_sendmsg+0x1bc3/0x3520 [ 171.712484][ T8295] ? __pfx_sctp_sendmsg+0x10/0x10 [ 171.717563][ T8295] ? __pfx_aa_sk_perm+0x10/0x10 [ 171.722462][ T8295] ? inet_sendmsg+0x330/0x390 [ 171.727175][ T8295] __sock_sendmsg+0x1a6/0x270 [ 171.731895][ T8295] __sys_sendto+0x363/0x4c0 [ 171.736441][ T8295] ? __pfx___sys_sendto+0x10/0x10 [ 171.741495][ T8295] ? __mutex_unlock_slowpath+0x21e/0x790 [ 171.747182][ T8295] ? __fget_files+0x2a/0x410 [ 171.751814][ T8295] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 171.757831][ T8295] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 171.764201][ T8295] __x64_sys_sendto+0xde/0x100 [ 171.769007][ T8295] do_syscall_64+0xf3/0x230 [ 171.773549][ T8295] ? clear_bhb_loop+0x35/0x90 [ 171.778268][ T8295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.784200][ T8295] RIP: 0033:0x7fe2d8b7ff19 [ 171.788829][ T8295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.808563][ T8295] RSP: 002b:00007fe2d99e2058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 171.817017][ T8295] RAX: ffffffffffffffda RBX: 00007fe2d8d45fa0 RCX: 00007fe2d8b7ff19 [ 171.825293][ T8295] RDX: 0000000000034000 RSI: 0000000020000500 RDI: 0000000000000003 [ 171.833303][ T8295] RBP: 00007fe2d99e20a0 R08: 0000000020000140 R09: 000000000000001c [ 171.841318][ T8295] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000002 [ 171.849598][ T8295] R13: 0000000000000000 R14: 00007fe2d8d45fa0 R15: 00007ffef016a248 [ 171.857625][ T8295] [ 172.278641][ T8308] pim6reg: left allmulticast mode [ 172.306980][ T8308] bridge0: left allmulticast mode [ 172.352599][ T8317] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 172.361571][ T8310] netlink: 48 bytes leftover after parsing attributes in process `syz.1.771'. [ 172.666408][ T8323] Cannot find del_set index 286 as target [ 172.878557][ T8326] netlink: 72 bytes leftover after parsing attributes in process `syz.4.774'. [ 172.888588][ T8326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.774'. [ 172.927211][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 172.966317][ T8334] netlink: 'syz.3.776': attribute type 4 has an invalid length. [ 173.596513][ T8364] bridge0: entered allmulticast mode [ 173.635141][ T8364] pim6reg: entered allmulticast mode [ 173.754162][ T8368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.788'. [ 174.006936][ T8372] netlink: 48 bytes leftover after parsing attributes in process `syz.0.790'. [ 174.322366][ T8376] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 174.467245][ T8381] bridge0: entered allmulticast mode [ 174.477680][ T8381] pim6reg: entered allmulticast mode [ 174.551054][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.797'. [ 174.626156][ T8389] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 174.826533][ T8395] netlink: 'syz.3.798': attribute type 1 has an invalid length. [ 174.876037][ T8395] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.936684][ T8389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.019545][ T8389] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 175.043473][ T8389] bond1: (slave vti0): Error -95 calling set_mac_address [ 175.973080][ T8426] __nla_validate_parse: 5 callbacks suppressed [ 175.973100][ T8426] netlink: 48 bytes leftover after parsing attributes in process `syz.0.816'. [ 176.425268][ T8437] pim6reg: entered allmulticast mode [ 176.591031][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 177.089458][ T8463] FAULT_INJECTION: forcing a failure. [ 177.089458][ T8463] name failslab, interval 1, probability 0, space 0, times 0 [ 177.109780][ T8463] CPU: 1 UID: 0 PID: 8463 Comm: syz.2.818 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 177.120432][ T8463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 177.130521][ T8463] Call Trace: [ 177.133826][ T8463] [ 177.136786][ T8463] dump_stack_lvl+0x241/0x360 [ 177.141511][ T8463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.146747][ T8463] ? __pfx__printk+0x10/0x10 [ 177.151358][ T8463] should_fail_ex+0x3b0/0x4e0 [ 177.156048][ T8463] should_failslab+0xac/0x100 [ 177.160732][ T8463] ? skb_clone+0x20c/0x390 [ 177.165157][ T8463] kmem_cache_alloc_noprof+0x70/0x380 [ 177.170538][ T8463] skb_clone+0x20c/0x390 [ 177.174786][ T8463] __netlink_deliver_tap+0x3cc/0x7f0 [ 177.180515][ T8463] ? netlink_deliver_tap+0x2e/0x1b0 [ 177.185707][ T8463] netlink_deliver_tap+0x19d/0x1b0 [ 177.190818][ T8463] netlink_dump+0x8c6/0xe10 [ 177.195328][ T8463] ? __pfx_netlink_dump+0x10/0x10 [ 177.200361][ T8463] ? __asan_memset+0x23/0x50 [ 177.204951][ T8463] ? genl_start+0x4ae/0x6d0 [ 177.209458][ T8463] __netlink_dump_start+0x5a2/0x790 [ 177.214664][ T8463] genl_rcv_msg+0x88c/0xec0 [ 177.219171][ T8463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.224273][ T8463] ? __pfx_genl_start+0x10/0x10 [ 177.229156][ T8463] ? __pfx_genl_dumpit+0x10/0x10 [ 177.234114][ T8463] ? __pfx_genl_done+0x10/0x10 [ 177.238939][ T8463] ? __pfx_lock_acquire+0x10/0x10 [ 177.243989][ T8463] ? __pfx_macsec_dump_txsc+0x10/0x10 [ 177.249371][ T8463] ? __pfx___might_resched+0x10/0x10 [ 177.254674][ T8463] netlink_rcv_skb+0x1e3/0x430 [ 177.259440][ T8463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.264488][ T8463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.269805][ T8463] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 177.275286][ T8463] genl_rcv+0x28/0x40 [ 177.279304][ T8463] netlink_unicast+0x7f6/0x990 [ 177.284442][ T8463] ? __pfx_netlink_unicast+0x10/0x10 [ 177.289764][ T8463] ? __virt_addr_valid+0x183/0x530 [ 177.294896][ T8463] ? __check_object_size+0x48e/0x900 [ 177.300223][ T8463] netlink_sendmsg+0x8e4/0xcb0 [ 177.305024][ T8463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.310313][ T8463] ? aa_sock_msg_perm+0x91/0x160 [ 177.315283][ T8463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.320667][ T8463] __sock_sendmsg+0x221/0x270 [ 177.325364][ T8463] ____sys_sendmsg+0x52a/0x7e0 [ 177.330228][ T8463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.335516][ T8463] ? __fget_files+0x2a/0x410 [ 177.340140][ T8463] ? __fget_files+0x2a/0x410 [ 177.344755][ T8463] __sys_sendmsg+0x269/0x350 [ 177.349371][ T8463] ? __pfx___sys_sendmsg+0x10/0x10 [ 177.354506][ T8463] ? trace_sys_enter+0x74/0x120 [ 177.359361][ T8463] ? __pfx_lock_release+0x10/0x10 [ 177.364393][ T8463] ? trace_sys_enter+0x74/0x120 [ 177.369245][ T8463] ? rcu_is_watching+0x15/0xb0 [ 177.374009][ T8463] ? trace_sys_enter+0x25/0x120 [ 177.378861][ T8463] do_syscall_64+0xf3/0x230 [ 177.383368][ T8463] ? clear_bhb_loop+0x35/0x90 [ 177.388049][ T8463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.393937][ T8463] RIP: 0033:0x7fe2d8b7ff19 [ 177.398350][ T8463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.418038][ T8463] RSP: 002b:00007fe2d99e2058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.426463][ T8463] RAX: ffffffffffffffda RBX: 00007fe2d8d45fa0 RCX: 00007fe2d8b7ff19 [ 177.434462][ T8463] RDX: 0000000000008080 RSI: 0000000020000080 RDI: 0000000000000003 [ 177.442448][ T8463] RBP: 00007fe2d99e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.450431][ T8463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 177.458402][ T8463] R13: 0000000000000000 R14: 00007fe2d8d45fa0 R15: 00007ffef016a248 [ 177.466386][ T8463] [ 177.947767][ T8478] netlink: 48 bytes leftover after parsing attributes in process `syz.1.823'. [ 178.663324][ T8499] FAULT_INJECTION: forcing a failure. [ 178.663324][ T8499] name failslab, interval 1, probability 0, space 0, times 0 [ 178.682158][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 178.698691][ T8499] CPU: 1 UID: 0 PID: 8499 Comm: syz.4.832 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 178.709345][ T8499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 178.719435][ T8499] Call Trace: [ 178.722747][ T8499] [ 178.725707][ T8499] dump_stack_lvl+0x241/0x360 [ 178.730432][ T8499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.735676][ T8499] ? __pfx__printk+0x10/0x10 [ 178.740491][ T8499] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 178.746525][ T8499] ? __pfx___might_resched+0x10/0x10 [ 178.751939][ T8499] should_fail_ex+0x3b0/0x4e0 [ 178.756662][ T8499] should_failslab+0xac/0x100 [ 178.761379][ T8499] kmem_cache_alloc_node_noprof+0x77/0x380 [ 178.767224][ T8499] ? __alloc_skb+0x1c3/0x440 [ 178.771852][ T8499] __alloc_skb+0x1c3/0x440 [ 178.776306][ T8499] ? __pfx___alloc_skb+0x10/0x10 [ 178.781284][ T8499] ? netlink_ack_tlv_len+0x6e/0x200 [ 178.786522][ T8499] netlink_ack+0x145/0xa50 [ 178.790984][ T8499] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 178.796393][ T8499] ? __pfx_nl80211_post_doit+0x10/0x10 [ 178.801887][ T8499] ? __pfx___might_resched+0x10/0x10 [ 178.807222][ T8499] netlink_rcv_skb+0x262/0x430 [ 178.812029][ T8499] ? __pfx_genl_rcv_msg+0x10/0x10 [ 178.817096][ T8499] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 178.822416][ T8499] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 178.827896][ T8499] genl_rcv+0x28/0x40 [ 178.831882][ T8499] netlink_unicast+0x7f6/0x990 [ 178.836670][ T8499] ? __pfx_netlink_unicast+0x10/0x10 [ 178.841973][ T8499] ? __virt_addr_valid+0x183/0x530 [ 178.847104][ T8499] ? __check_object_size+0x48e/0x900 [ 178.852398][ T8499] netlink_sendmsg+0x8e4/0xcb0 [ 178.857177][ T8499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.862469][ T8499] ? aa_sock_msg_perm+0x91/0x160 [ 178.867411][ T8499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.872696][ T8499] __sock_sendmsg+0x221/0x270 [ 178.877377][ T8499] ____sys_sendmsg+0x52a/0x7e0 [ 178.882513][ T8499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 178.887817][ T8499] ? __fget_files+0x2a/0x410 [ 178.892413][ T8499] ? __fget_files+0x2a/0x410 [ 178.897008][ T8499] __sys_sendmsg+0x269/0x350 [ 178.901595][ T8499] ? __pfx_lock_release+0x10/0x10 [ 178.906624][ T8499] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.911746][ T8499] ? __pfx_vfs_write+0x10/0x10 [ 178.916535][ T8499] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 178.922866][ T8499] ? do_syscall_64+0x100/0x230 [ 178.927650][ T8499] ? do_syscall_64+0xb6/0x230 [ 178.932345][ T8499] do_syscall_64+0xf3/0x230 [ 178.936863][ T8499] ? clear_bhb_loop+0x35/0x90 [ 178.941548][ T8499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.947439][ T8499] RIP: 0033:0x7fb17517ff19 [ 178.951854][ T8499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.971561][ T8499] RSP: 002b:00007fb17602b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.980010][ T8499] RAX: ffffffffffffffda RBX: 00007fb175345fa0 RCX: 00007fb17517ff19 [ 178.987999][ T8499] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 178.995973][ T8499] RBP: 00007fb17602b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.003944][ T8499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 179.011913][ T8499] R13: 0000000000000000 R14: 00007fb175345fa0 R15: 00007ffde5dd1c28 [ 179.019894][ T8499] [ 179.294823][ T8515] netlink: 48 bytes leftover after parsing attributes in process `syz.4.838'. [ 180.494293][ T8555] netlink: 'syz.2.850': attribute type 10 has an invalid length. [ 180.503471][ T8555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.850'. [ 180.514913][ T8555] bridge0: port 4(macvlan1) entered blocking state [ 180.523286][ T8555] bridge0: port 4(macvlan1) entered disabled state [ 180.530321][ T8555] macvlan1: entered allmulticast mode [ 180.540285][ T8555] veth1_vlan: entered allmulticast mode [ 180.549594][ T8555] macvlan1: entered promiscuous mode [ 180.563862][ T8555] bridge0: port 4(macvlan1) entered blocking state [ 180.570589][ T8555] bridge0: port 4(macvlan1) entered forwarding state [ 180.950268][ T8563] netlink: 16 bytes leftover after parsing attributes in process `syz.4.853'. [ 181.046092][ T8566] netlink: 48 bytes leftover after parsing attributes in process `syz.4.853'. [ 182.470437][ T8599] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 182.665109][ T8612] netlink: 16 bytes leftover after parsing attributes in process `syz.4.870'. [ 182.747614][ T8616] netlink: 48 bytes leftover after parsing attributes in process `syz.4.870'. [ 183.312661][ T8631] netlink: 'syz.0.875': attribute type 10 has an invalid length. [ 183.340357][ T8631] netlink: 40 bytes leftover after parsing attributes in process `syz.0.875'. [ 183.385917][ T8631] bridge0: port 3(macvlan1) entered blocking state [ 183.399735][ T8631] bridge0: port 3(macvlan1) entered disabled state [ 183.422027][ T8631] macvlan1: entered allmulticast mode [ 183.431508][ T8631] veth1_vlan: entered allmulticast mode [ 183.459396][ T8631] macvlan1: entered promiscuous mode [ 183.473051][ T8631] bridge0: port 3(macvlan1) entered blocking state [ 183.479679][ T8631] bridge0: port 3(macvlan1) entered forwarding state [ 183.688167][ T8644] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 184.293679][ T8656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.886'. [ 184.394694][ T8662] netlink: 48 bytes leftover after parsing attributes in process `syz.4.886'. [ 185.987833][ T8701] netlink: 16 bytes leftover after parsing attributes in process `syz.2.905'. [ 186.124054][ T8706] netlink: 48 bytes leftover after parsing attributes in process `syz.2.905'. [ 186.210969][ T8711] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 186.660390][ T8731] IPVS: set_ctl: invalid protocol: 12 172.30.0.3:20001 [ 186.698676][ T8727] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.798628][ T8727] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.955423][ T8727] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.138925][ T8727] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.187039][ T8746] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 187.385978][ T8727] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.410861][ T8727] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.428672][ T8727] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.484519][ T8727] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.604619][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.662662][ T8754] bridge0: port 4(macvlan1) entered disabled state [ 187.688149][ T8754] bridge0: port 3(vlan3) entered disabled state [ 187.721839][ T8756] netlink: 16 bytes leftover after parsing attributes in process `syz.3.927'. [ 187.763301][ T8761] netlink: 48 bytes leftover after parsing attributes in process `syz.3.927'. [ 187.766662][ T8757] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.779416][ T8757] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.840331][ T8757] bridge0: port 4(macvlan1) entered blocking state [ 187.847026][ T8757] bridge0: port 4(macvlan1) entered forwarding state [ 187.910389][ T8757] bridge0: port 3(vlan3) entered blocking state [ 187.916777][ T8757] bridge0: port 3(vlan3) entered forwarding state [ 188.737361][ T8793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.938'. [ 188.910967][ T8798] veth0_vlan: entered allmulticast mode [ 188.994433][ T5908] IPVS: starting estimator thread 0... [ 189.094502][ T8804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.943'. [ 189.119194][ T8802] IPVS: using max 20 ests per chain, 48000 per kthread [ 189.164020][ T8807] netlink: 48 bytes leftover after parsing attributes in process `syz.2.943'. [ 189.833519][ T8832] netlink: 76 bytes leftover after parsing attributes in process `syz.1.954'. [ 190.374712][ T8857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.961'. [ 190.490440][ T8862] netlink: 48 bytes leftover after parsing attributes in process `syz.1.961'. [ 191.126866][ T8885] bridge0: port 5(vlan4) entered blocking state [ 191.152750][ T8885] bridge0: port 5(vlan4) entered disabled state [ 191.169541][ T8885] vlan4: entered allmulticast mode [ 191.179556][ T8885] batadv0: entered allmulticast mode [ 191.200113][ T8885] vlan4: entered promiscuous mode [ 191.220222][ T8885] batadv0: entered promiscuous mode [ 191.240995][ T8885] bridge0: port 5(vlan4) entered blocking state [ 191.247455][ T8885] bridge0: port 5(vlan4) entered forwarding state [ 191.435543][ T8900] netlink: 36 bytes leftover after parsing attributes in process `syz.4.975'. [ 191.471542][ T8900] netlink: 32 bytes leftover after parsing attributes in process `syz.4.975'. [ 191.675544][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 191.753379][ T8913] netlink: 48 bytes leftover after parsing attributes in process `syz.1.977'. [ 192.593440][ T8941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.988'. [ 192.825128][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.993'. [ 192.934891][ T8958] netlink: 48 bytes leftover after parsing attributes in process `syz.0.993'. [ 194.564990][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.614303][ T9008] netlink: 'syz.1.1009': attribute type 4 has an invalid length. [ 194.631729][ T9008] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1009'. [ 194.720327][ T8] hid-generic 0005:16C0:FFF9.0001: item fetching failed at offset 0/1 [ 194.740199][ T8] hid-generic 0005:16C0:FFF9.0001: probe with driver hid-generic failed with error -22 [ 194.781846][ T9017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1010'. [ 195.275707][ T9034] bridge0: entered allmulticast mode [ 195.315007][ T9034] pim6reg: entered allmulticast mode [ 195.440213][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1018'. [ 196.529571][ T9069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1027'. [ 196.785268][ T9076] x_tables: ip_tables: osf match: only valid for protocol 6 [ 196.953832][ T9082] netlink: 'syz.4.1030': attribute type 1 has an invalid length. [ 197.048267][ T9082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.099544][ T9079] bond1: (slave veth3): Enslaving as an active interface with a down link [ 197.118936][ T9078] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1032'. [ 197.156271][ T9082] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 197.177257][ T9082] bond1: (slave batadv1): making interface the new active one [ 197.202078][ T9082] batadv1: entered promiscuous mode [ 197.219918][ T9082] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 197.778202][ T9117] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 197.794296][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1043'. [ 197.807068][ T9117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1043'. [ 197.819447][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1043'. [ 197.829116][ T9117] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1043'. [ 197.897851][ T9119] netlink: 'syz.4.1044': attribute type 1 has an invalid length. [ 197.913500][ T9119] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1044'. [ 198.144554][ T9125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'. [ 198.935732][ T9166] netlink: 'syz.2.1061': attribute type 2 has an invalid length. [ 199.841434][ T5144] Bluetooth: hci0: command tx timeout [ 199.897862][ T9197] FAULT_INJECTION: forcing a failure. [ 199.897862][ T9197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 199.911436][ T9197] CPU: 0 UID: 0 PID: 9197 Comm: syz.3.1071 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 199.922159][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 199.932253][ T9197] Call Trace: [ 199.935558][ T9197] [ 199.938509][ T9197] dump_stack_lvl+0x241/0x360 [ 199.943221][ T9197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.948458][ T9197] ? __pfx__printk+0x10/0x10 [ 199.953085][ T9197] ? __pfx_lock_release+0x10/0x10 [ 199.958141][ T9197] should_fail_ex+0x3b0/0x4e0 [ 199.962911][ T9197] _copy_from_iter+0x21f/0x1e70 [ 199.967775][ T9197] ? __virt_addr_valid+0x183/0x530 [ 199.972892][ T9197] ? __pfx_lock_release+0x10/0x10 [ 199.977918][ T9197] ? __alloc_skb+0x28f/0x440 [ 199.982505][ T9197] ? __pfx__copy_from_iter+0x10/0x10 [ 199.987791][ T9197] ? __virt_addr_valid+0x183/0x530 [ 199.992899][ T9197] ? __virt_addr_valid+0x183/0x530 [ 199.998005][ T9197] ? __virt_addr_valid+0x45f/0x530 [ 200.003112][ T9197] ? __check_object_size+0x48e/0x900 [ 200.008402][ T9197] netlink_sendmsg+0x73d/0xcb0 [ 200.013174][ T9197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.018460][ T9197] ? aa_sock_msg_perm+0x91/0x160 [ 200.023400][ T9197] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.028680][ T9197] __sock_sendmsg+0x221/0x270 [ 200.033446][ T9197] ____sys_sendmsg+0x52a/0x7e0 [ 200.038211][ T9197] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.043495][ T9197] ? __fget_files+0x2a/0x410 [ 200.048080][ T9197] ? __fget_files+0x2a/0x410 [ 200.052668][ T9197] __sys_sendmsg+0x269/0x350 [ 200.057256][ T9197] ? __pfx_lock_release+0x10/0x10 [ 200.062288][ T9197] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.067449][ T9197] ? __pfx_vfs_write+0x10/0x10 [ 200.072234][ T9197] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.078571][ T9197] ? do_syscall_64+0x100/0x230 [ 200.083351][ T9197] ? do_syscall_64+0xb6/0x230 [ 200.088022][ T9197] do_syscall_64+0xf3/0x230 [ 200.092519][ T9197] ? clear_bhb_loop+0x35/0x90 [ 200.097192][ T9197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.103083][ T9197] RIP: 0033:0x7f4b6b17ff19 [ 200.107495][ T9197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.127104][ T9197] RSP: 002b:00007f4b68ff6058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.135516][ T9197] RAX: ffffffffffffffda RBX: 00007f4b6b345fa0 RCX: 00007f4b6b17ff19 [ 200.143571][ T9197] RDX: 0000000000040000 RSI: 0000000020002040 RDI: 0000000000000003 [ 200.151537][ T9197] RBP: 00007f4b68ff60a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.159506][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.167480][ T9197] R13: 0000000000000000 R14: 00007f4b6b345fa0 R15: 00007ffe1778a518 [ 200.175460][ T9197] [ 200.243179][ T9203] FAULT_INJECTION: forcing a failure. [ 200.243179][ T9203] name failslab, interval 1, probability 0, space 0, times 0 [ 200.256105][ T9203] CPU: 0 UID: 0 PID: 9203 Comm: syz.4.1072 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 200.266904][ T9203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 200.276987][ T9203] Call Trace: [ 200.280292][ T9203] [ 200.283239][ T9203] dump_stack_lvl+0x241/0x360 [ 200.287940][ T9203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.293168][ T9203] ? __pfx__printk+0x10/0x10 [ 200.297798][ T9203] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 200.303813][ T9203] ? __pfx___might_resched+0x10/0x10 [ 200.309144][ T9203] should_fail_ex+0x3b0/0x4e0 [ 200.313852][ T9203] should_failslab+0xac/0x100 [ 200.318562][ T9203] kmem_cache_alloc_node_noprof+0x77/0x380 [ 200.324395][ T9203] ? __alloc_skb+0x1c3/0x440 [ 200.329017][ T9203] __alloc_skb+0x1c3/0x440 [ 200.333458][ T9203] ? __pfx___alloc_skb+0x10/0x10 [ 200.338418][ T9203] ? netlink_autobind+0xd6/0x2f0 [ 200.343377][ T9203] ? netlink_autobind+0x2b0/0x2f0 [ 200.348431][ T9203] netlink_sendmsg+0x638/0xcb0 [ 200.353225][ T9203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.358536][ T9203] ? aa_sock_msg_perm+0x91/0x160 [ 200.363504][ T9203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 200.368811][ T9203] __sock_sendmsg+0x221/0x270 [ 200.373520][ T9203] ____sys_sendmsg+0x52a/0x7e0 [ 200.378321][ T9203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 200.383634][ T9203] ? __fget_files+0x2a/0x410 [ 200.388263][ T9203] ? __fget_files+0x2a/0x410 [ 200.392889][ T9203] __sys_sendmsg+0x269/0x350 [ 200.397505][ T9203] ? __pfx_lock_release+0x10/0x10 [ 200.402555][ T9203] ? __pfx___sys_sendmsg+0x10/0x10 [ 200.407711][ T9203] ? __pfx_vfs_write+0x10/0x10 [ 200.412531][ T9203] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 200.418969][ T9203] ? do_syscall_64+0x100/0x230 [ 200.423762][ T9203] ? do_syscall_64+0xb6/0x230 [ 200.428460][ T9203] do_syscall_64+0xf3/0x230 [ 200.432979][ T9203] ? clear_bhb_loop+0x35/0x90 [ 200.437679][ T9203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.443591][ T9203] RIP: 0033:0x7fb17517ff19 [ 200.448035][ T9203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.467672][ T9203] RSP: 002b:00007fb17602b058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 200.476118][ T9203] RAX: ffffffffffffffda RBX: 00007fb175345fa0 RCX: 00007fb17517ff19 [ 200.484115][ T9203] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 200.492112][ T9203] RBP: 00007fb17602b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.500115][ T9203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.508122][ T9203] R13: 0000000000000000 R14: 00007fb175345fa0 R15: 00007ffde5dd1c28 [ 200.516144][ T9203] [ 200.877532][ T9220] FAULT_INJECTION: forcing a failure. [ 200.877532][ T9220] name failslab, interval 1, probability 0, space 0, times 0 [ 200.937280][ T9220] CPU: 0 UID: 0 PID: 9220 Comm: syz.3.1079 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 200.948027][ T9220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 200.958117][ T9220] Call Trace: [ 200.961429][ T9220] [ 200.964382][ T9220] dump_stack_lvl+0x241/0x360 [ 200.969098][ T9220] ? __pfx_dump_stack_lvl+0x10/0x10 [ 200.974338][ T9220] ? __pfx__printk+0x10/0x10 [ 200.978975][ T9220] ? fs_reclaim_acquire+0x93/0x130 [ 200.984119][ T9220] ? __pfx___might_resched+0x10/0x10 [ 200.989436][ T9220] should_fail_ex+0x3b0/0x4e0 [ 200.994236][ T9220] should_failslab+0xac/0x100 [ 200.998959][ T9220] __kmalloc_noprof+0xdd/0x4c0 [ 201.003758][ T9220] ? kstrtouint_from_user+0x128/0x190 [ 201.009162][ T9220] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 201.014915][ T9220] tomoyo_realpath_from_path+0xcf/0x5e0 [ 201.020511][ T9220] tomoyo_path_number_perm+0x236/0x860 [ 201.026006][ T9220] ? __lock_acquire+0x1397/0x2100 [ 201.031076][ T9220] ? tomoyo_path_number_perm+0x206/0x860 [ 201.036745][ T9220] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 201.042819][ T9220] ? __fget_files+0x2a/0x410 [ 201.047421][ T9220] ? __fget_files+0x2a/0x410 [ 201.052011][ T9220] security_file_ioctl+0xc6/0x2a0 [ 201.057039][ T9220] __se_sys_ioctl+0x46/0x170 [ 201.061631][ T9220] do_syscall_64+0xf3/0x230 [ 201.066131][ T9220] ? clear_bhb_loop+0x35/0x90 [ 201.070804][ T9220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.076777][ T9220] RIP: 0033:0x7f4b6b17ff19 [ 201.081197][ T9220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.100822][ T9220] RSP: 002b:00007f4b68ff6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.109237][ T9220] RAX: ffffffffffffffda RBX: 00007f4b6b345fa0 RCX: 00007f4b6b17ff19 [ 201.117213][ T9220] RDX: 0000000020000180 RSI: 0000000000008946 RDI: 000000000000000b [ 201.125177][ T9220] RBP: 00007f4b68ff60a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.133145][ T9220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.141116][ T9220] R13: 0000000000000000 R14: 00007f4b6b345fa0 R15: 00007ffe1778a518 [ 201.149114][ T9220] [ 201.211806][ T9220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 202.043803][ T9256] netlink: 'syz.0.1091': attribute type 2 has an invalid length. [ 202.063635][ T9256] netlink: 'syz.0.1091': attribute type 9 has an invalid length. [ 202.083443][ T9258] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 202.085526][ T9256] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1091'. [ 202.117391][ T9260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1094'. [ 202.311671][ T9269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1097'. [ 202.329915][ T9269] ipt_rpfilter: unknown options [ 202.667489][ T9284] xt_HMARK: spi-set and port-set can't be combined [ 202.838294][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1106'. [ 202.916537][ T9296] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1105'. [ 202.946046][ T9296] bridge0: entered promiscuous mode [ 202.959413][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 202.982408][ T9299] wg2: entered promiscuous mode [ 202.987682][ T9299] wg2: entered allmulticast mode [ 203.009551][ T9296] bridge0 (unregistering): left allmulticast mode [ 203.017193][ T9296] bridge0 (unregistering): left promiscuous mode [ 203.164095][ T9308] FAULT_INJECTION: forcing a failure. [ 203.164095][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 203.177133][ T9308] CPU: 0 UID: 0 PID: 9308 Comm: syz.0.1110 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 203.187846][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.197933][ T9308] Call Trace: [ 203.201230][ T9308] [ 203.204178][ T9308] dump_stack_lvl+0x241/0x360 [ 203.208884][ T9308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.214116][ T9308] ? __pfx__printk+0x10/0x10 [ 203.218744][ T9308] should_fail_ex+0x3b0/0x4e0 [ 203.223455][ T9308] should_failslab+0xac/0x100 [ 203.228165][ T9308] ? skb_clone+0x20c/0x390 [ 203.232611][ T9308] kmem_cache_alloc_noprof+0x70/0x380 [ 203.238026][ T9308] skb_clone+0x20c/0x390 [ 203.242304][ T9308] __netlink_deliver_tap+0x3cc/0x7f0 [ 203.247628][ T9308] ? netlink_deliver_tap+0x2e/0x1b0 [ 203.252852][ T9308] netlink_deliver_tap+0x19d/0x1b0 [ 203.258003][ T9308] netlink_unicast+0x7c4/0x990 [ 203.262803][ T9308] ? __pfx_netlink_unicast+0x10/0x10 [ 203.268115][ T9308] ? __virt_addr_valid+0x183/0x530 [ 203.273258][ T9308] ? __check_object_size+0x48e/0x900 [ 203.278577][ T9308] netlink_sendmsg+0x8e4/0xcb0 [ 203.283389][ T9308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.288698][ T9308] ? aa_sock_msg_perm+0x91/0x160 [ 203.293646][ T9308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.298936][ T9308] __sock_sendmsg+0x221/0x270 [ 203.303620][ T9308] ____sys_sendmsg+0x52a/0x7e0 [ 203.308385][ T9308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.313665][ T9308] ? __fget_files+0x2a/0x410 [ 203.318256][ T9308] ? __fget_files+0x2a/0x410 [ 203.322845][ T9308] __sys_sendmsg+0x269/0x350 [ 203.327433][ T9308] ? __pfx_lock_release+0x10/0x10 [ 203.332464][ T9308] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.337594][ T9308] ? __pfx_vfs_write+0x10/0x10 [ 203.342383][ T9308] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.348708][ T9308] ? do_syscall_64+0x100/0x230 [ 203.353470][ T9308] ? do_syscall_64+0xb6/0x230 [ 203.358150][ T9308] do_syscall_64+0xf3/0x230 [ 203.362647][ T9308] ? clear_bhb_loop+0x35/0x90 [ 203.367325][ T9308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.373211][ T9308] RIP: 0033:0x7f8b40b7ff19 [ 203.377619][ T9308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.397229][ T9308] RSP: 002b:00007f8b4189e058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.405645][ T9308] RAX: ffffffffffffffda RBX: 00007f8b40d45fa0 RCX: 00007f8b40b7ff19 [ 203.413611][ T9308] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 203.421665][ T9308] RBP: 00007f8b4189e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 203.429631][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.437602][ T9308] R13: 0000000000000000 R14: 00007f8b40d45fa0 R15: 00007ffdb37bf6c8 [ 203.445588][ T9308] [ 204.033383][ T9333] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1119'. [ 204.522408][ T9354] netlink: 'syz.4.1125': attribute type 21 has an invalid length. [ 204.552018][ T9354] netlink: 'syz.4.1125': attribute type 6 has an invalid length. [ 204.559832][ T9354] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1125'. [ 204.920826][ T9369] xt_HMARK: spi-set and port-set can't be combined [ 205.030879][ T9378] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1134'. [ 205.152111][ T9376] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1132'. [ 205.332613][ T9389] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 205.342517][ T9389] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 206.751394][ T9439] netlink: 'syz.3.1157': attribute type 15 has an invalid length. [ 207.271672][ T9447] __nla_validate_parse: 1 callbacks suppressed [ 207.271695][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 207.310993][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1161'. [ 207.356816][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1160'. [ 208.140432][ T9489] FAULT_INJECTION: forcing a failure. [ 208.140432][ T9489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.155118][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.4.1175 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 208.165850][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 208.175938][ T9489] Call Trace: [ 208.179243][ T9489] [ 208.182193][ T9489] dump_stack_lvl+0x241/0x360 [ 208.186904][ T9489] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.192129][ T9489] ? __pfx__printk+0x10/0x10 [ 208.196732][ T9489] ? snprintf+0xda/0x120 [ 208.200979][ T9489] should_fail_ex+0x3b0/0x4e0 [ 208.205662][ T9489] _copy_to_user+0x31/0xb0 [ 208.210088][ T9489] simple_read_from_buffer+0xca/0x150 [ 208.215464][ T9489] proc_fail_nth_read+0x1e9/0x250 [ 208.220505][ T9489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.226055][ T9489] ? rw_verify_area+0x55e/0x6f0 [ 208.230940][ T9489] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 208.236487][ T9489] vfs_read+0x1fc/0xb70 [ 208.240648][ T9489] ? __pfx___mutex_lock+0x10/0x10 [ 208.245670][ T9489] ? __pfx_vfs_read+0x10/0x10 [ 208.250354][ T9489] ? __fget_files+0x2a/0x410 [ 208.254951][ T9489] ? __fget_files+0x395/0x410 [ 208.259625][ T9489] ? __fget_files+0x2a/0x410 [ 208.264221][ T9489] ksys_read+0x18f/0x2b0 [ 208.268469][ T9489] ? __pfx_ksys_read+0x10/0x10 [ 208.273231][ T9489] ? do_syscall_64+0x100/0x230 [ 208.277999][ T9489] ? do_syscall_64+0xb6/0x230 [ 208.283020][ T9489] do_syscall_64+0xf3/0x230 [ 208.287529][ T9489] ? clear_bhb_loop+0x35/0x90 [ 208.292205][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.298097][ T9489] RIP: 0033:0x7fb17517e92c [ 208.302512][ T9489] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 208.322552][ T9489] RSP: 002b:00007fb17602b050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 208.330970][ T9489] RAX: ffffffffffffffda RBX: 00007fb175345fa0 RCX: 00007fb17517e92c [ 208.338943][ T9489] RDX: 000000000000000f RSI: 00007fb17602b0b0 RDI: 0000000000000004 [ 208.346911][ T9489] RBP: 00007fb17602b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.354892][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.362863][ T9489] R13: 0000000000000000 R14: 00007fb175345fa0 R15: 00007ffde5dd1c28 [ 208.370845][ T9489] [ 208.394675][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1176'. [ 208.478616][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1177'. [ 208.482780][ T5144] Bluetooth: hci3: link tx timeout [ 208.493219][ T5144] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 208.533086][ T9498] FAULT_INJECTION: forcing a failure. [ 208.533086][ T9498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.556348][ T9498] CPU: 1 UID: 0 PID: 9498 Comm: syz.2.1179 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 208.567088][ T9498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 208.577183][ T9498] Call Trace: [ 208.580490][ T9498] [ 208.583439][ T9498] dump_stack_lvl+0x241/0x360 [ 208.588147][ T9498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.593372][ T9498] ? __pfx__printk+0x10/0x10 [ 208.597991][ T9498] ? __pfx_lock_release+0x10/0x10 [ 208.603047][ T9498] ? aa_label_sk_perm+0x4f3/0x6c0 [ 208.608202][ T9498] should_fail_ex+0x3b0/0x4e0 [ 208.612909][ T9498] _copy_from_iter+0x21f/0x1e70 [ 208.615834][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 208.617792][ T9498] ? __pfx__copy_from_iter+0x10/0x10 [ 208.631925][ T9498] bcm_sendmsg+0x157/0x7a0 [ 208.636375][ T9498] ? __pfx_bcm_sendmsg+0x10/0x10 [ 208.641355][ T9498] ? __import_iovec+0x590/0x870 [ 208.646249][ T9498] ? aa_sock_msg_perm+0x91/0x160 [ 208.651214][ T9498] ? __pfx_bcm_sendmsg+0x10/0x10 [ 208.656183][ T9498] __sock_sendmsg+0x221/0x270 [ 208.659514][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 208.660868][ T9498] ____sys_sendmsg+0x52a/0x7e0 [ 208.674594][ T9498] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.679910][ T9498] ? __fget_files+0x2a/0x410 [ 208.684627][ T9498] ? __fget_files+0x2a/0x410 [ 208.689258][ T9498] __sys_sendmsg+0x269/0x350 [ 208.693886][ T9498] ? __pfx_lock_release+0x10/0x10 [ 208.698941][ T9498] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.704102][ T9498] ? __pfx_vfs_write+0x10/0x10 [ 208.708930][ T9498] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 208.715296][ T9498] ? do_syscall_64+0x100/0x230 [ 208.720100][ T9498] ? do_syscall_64+0xb6/0x230 [ 208.724808][ T9498] do_syscall_64+0xf3/0x230 [ 208.729340][ T9498] ? clear_bhb_loop+0x35/0x90 [ 208.734047][ T9498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.739970][ T9498] RIP: 0033:0x7fe2d8b7ff19 [ 208.744411][ T9498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.764054][ T9498] RSP: 002b:00007fe2d99e2058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.772509][ T9498] RAX: ffffffffffffffda RBX: 00007fe2d8d45fa0 RCX: 00007fe2d8b7ff19 [ 208.780516][ T9498] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 208.788523][ T9498] RBP: 00007fe2d99e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.796530][ T9498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.804533][ T9498] R13: 0000000000000000 R14: 00007fe2d8d45fa0 R15: 00007ffef016a248 [ 208.812559][ T9498] [ 209.379667][ T9521] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1186'. [ 209.431931][ T9519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1188'. [ 209.454472][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1189'. [ 209.494272][ T9525] FAULT_INJECTION: forcing a failure. [ 209.494272][ T9525] name failslab, interval 1, probability 0, space 0, times 0 [ 209.541029][ T9525] CPU: 1 UID: 0 PID: 9525 Comm: syz.1.1189 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 209.551775][ T9525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 209.561862][ T9525] Call Trace: [ 209.565178][ T9525] [ 209.568124][ T9525] dump_stack_lvl+0x241/0x360 [ 209.572838][ T9525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.578070][ T9525] ? __pfx__printk+0x10/0x10 [ 209.582691][ T9525] ? __kmalloc_cache_noprof+0x48/0x390 [ 209.588180][ T9525] ? __pfx___might_resched+0x10/0x10 [ 209.593495][ T9525] should_fail_ex+0x3b0/0x4e0 [ 209.598198][ T9525] should_failslab+0xac/0x100 [ 209.602913][ T9525] __kmalloc_cache_noprof+0x70/0x390 [ 209.608242][ T9525] ? nf_tables_updobj+0x5c/0x480 [ 209.613213][ T9525] nf_tables_updobj+0x5c/0x480 [ 209.618010][ T9525] ? nft_obj_type_get+0x419/0x460 [ 209.623057][ T9525] ? nft_obj_type_get+0x29/0x460 [ 209.628035][ T9525] nf_tables_newobj+0x10b8/0x17e0 [ 209.633102][ T9525] ? __pfx_nf_tables_newobj+0x10/0x10 [ 209.638503][ T9525] ? __nla_parse+0x40/0x60 [ 209.642949][ T9525] nfnetlink_rcv+0x14e3/0x2ab0 [ 209.647778][ T9525] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 209.652966][ T9525] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.658192][ T9525] ? skb_clone+0x240/0x390 [ 209.662646][ T9525] ? __pfx_lock_release+0x10/0x10 [ 209.667714][ T9525] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.672943][ T9525] netlink_unicast+0x7f6/0x990 [ 209.677751][ T9525] ? __pfx_netlink_unicast+0x10/0x10 [ 209.683058][ T9525] ? __virt_addr_valid+0x183/0x530 [ 209.688206][ T9525] ? __check_object_size+0x48e/0x900 [ 209.693541][ T9525] netlink_sendmsg+0x8e4/0xcb0 [ 209.698352][ T9525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.703672][ T9525] ? aa_sock_msg_perm+0x91/0x160 [ 209.708636][ T9525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.713941][ T9525] __sock_sendmsg+0x221/0x270 [ 209.718672][ T9525] ____sys_sendmsg+0x52a/0x7e0 [ 209.723477][ T9525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.728798][ T9525] ? __fget_files+0x2a/0x410 [ 209.733426][ T9525] ? __fget_files+0x2a/0x410 [ 209.738059][ T9525] __sys_sendmsg+0x269/0x350 [ 209.742683][ T9525] ? __pfx_lock_release+0x10/0x10 [ 209.747832][ T9525] ? __pfx___sys_sendmsg+0x10/0x10 [ 209.752993][ T9525] ? __pfx_vfs_write+0x10/0x10 [ 209.757820][ T9525] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 209.764183][ T9525] ? do_syscall_64+0x100/0x230 [ 209.768985][ T9525] ? do_syscall_64+0xb6/0x230 [ 209.773705][ T9525] do_syscall_64+0xf3/0x230 [ 209.778245][ T9525] ? clear_bhb_loop+0x35/0x90 [ 209.782963][ T9525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.788886][ T9525] RIP: 0033:0x7f04e877ff19 [ 209.793335][ T9525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.812974][ T9525] RSP: 002b:00007f04e9658058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.821401][ T9525] RAX: ffffffffffffffda RBX: 00007f04e8945fa0 RCX: 00007f04e877ff19 [ 209.829382][ T9525] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 209.837349][ T9525] RBP: 00007f04e96580a0 R08: 0000000000000000 R09: 0000000000000000 [ 209.845321][ T9525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.853328][ T9525] R13: 0000000000000000 R14: 00007f04e8945fa0 R15: 00007ffe95498b18 [ 209.861318][ T9525] [ 209.889037][ T12] batadv1: left promiscuous mode [ 210.564925][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 210.933558][ T9583] FAULT_INJECTION: forcing a failure. [ 210.933558][ T9583] name failslab, interval 1, probability 0, space 0, times 0 [ 210.961857][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.3.1205 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 210.972597][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 210.982684][ T9583] Call Trace: [ 210.985983][ T9583] [ 210.988933][ T9583] dump_stack_lvl+0x241/0x360 [ 210.993643][ T9583] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.998876][ T9583] ? __pfx__printk+0x10/0x10 [ 211.003494][ T9583] ? __kmalloc_noprof+0xb5/0x4c0 [ 211.008463][ T9583] ? __pfx___might_resched+0x10/0x10 [ 211.013772][ T9583] should_fail_ex+0x3b0/0x4e0 [ 211.018477][ T9583] should_failslab+0xac/0x100 [ 211.023189][ T9583] __kmalloc_noprof+0xdd/0x4c0 [ 211.027979][ T9583] ? iovec_from_user+0x87/0x240 [ 211.032859][ T9583] iovec_from_user+0x87/0x240 [ 211.037571][ T9583] __import_iovec+0x152/0x870 [ 211.042288][ T9583] import_iovec+0xeb/0x120 [ 211.046743][ T9583] copy_msghdr_from_user+0x52f/0x680 [ 211.052071][ T9583] ? read_tsc+0x9/0x20 [ 211.056174][ T9583] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 211.062016][ T9583] ? __fget_files+0x2a/0x410 [ 211.066639][ T9583] ? __fget_files+0x2a/0x410 [ 211.071270][ T9583] do_recvmmsg+0x3bd/0xab0 [ 211.075725][ T9583] ? __pfx_do_recvmmsg+0x10/0x10 [ 211.080689][ T9583] ? __pfx___might_resched+0x10/0x10 [ 211.085978][ T9583] ? __might_fault+0xaa/0x120 [ 211.090650][ T9583] ? __pfx_lock_release+0x10/0x10 [ 211.095691][ T9583] ? vfs_write+0x730/0xd30 [ 211.100135][ T9583] ? get_timespec64+0x19c/0x280 [ 211.105016][ T9583] __x64_sys_recvmmsg+0x1b8/0x250 [ 211.110051][ T9583] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 211.115598][ T9583] ? do_syscall_64+0x100/0x230 [ 211.120365][ T9583] ? do_syscall_64+0xb6/0x230 [ 211.125068][ T9583] do_syscall_64+0xf3/0x230 [ 211.129573][ T9583] ? clear_bhb_loop+0x35/0x90 [ 211.134251][ T9583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.140141][ T9583] RIP: 0033:0x7f4b6b17ff19 [ 211.144559][ T9583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.164249][ T9583] RSP: 002b:00007f4b68fd5058 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 211.172664][ T9583] RAX: ffffffffffffffda RBX: 00007f4b6b346080 RCX: 00007f4b6b17ff19 [ 211.180635][ T9583] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 211.188601][ T9583] RBP: 00007f4b68fd50a0 R08: 0000000020003700 R09: 0000000000000000 [ 211.196575][ T9583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.204627][ T9583] R13: 0000000000000001 R14: 00007f4b6b346080 R15: 00007ffe1778a518 [ 211.212605][ T9583] [ 211.402991][ T9597] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20001 [ 212.001696][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 212.007906][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 212.017160][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 212.141428][ T9636] FAULT_INJECTION: forcing a failure. [ 212.141428][ T9636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.223801][ T9636] CPU: 0 UID: 0 PID: 9636 Comm: syz.1.1219 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 212.234546][ T9636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 212.244644][ T9636] Call Trace: [ 212.247945][ T9636] [ 212.250898][ T9636] dump_stack_lvl+0x241/0x360 [ 212.255613][ T9636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.260852][ T9636] ? __pfx__printk+0x10/0x10 [ 212.265480][ T9636] ? __pfx_lock_release+0x10/0x10 [ 212.270542][ T9636] should_fail_ex+0x3b0/0x4e0 [ 212.275254][ T9636] _copy_from_user+0x2f/0xc0 [ 212.279885][ T9636] __sys_bpf+0x1a4/0x810 [ 212.284250][ T9636] ? __pfx___sys_bpf+0x10/0x10 [ 212.289029][ T9636] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 212.295013][ T9636] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 212.301339][ T9636] ? do_syscall_64+0x100/0x230 [ 212.306100][ T9636] __x64_sys_bpf+0x7c/0x90 [ 212.310521][ T9636] do_syscall_64+0xf3/0x230 [ 212.315016][ T9636] ? clear_bhb_loop+0x35/0x90 [ 212.319692][ T9636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.325585][ T9636] RIP: 0033:0x7f04e877ff19 [ 212.329994][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.349606][ T9636] RSP: 002b:00007f04e9658058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.358034][ T9636] RAX: ffffffffffffffda RBX: 00007f04e8945fa0 RCX: 00007f04e877ff19 [ 212.366270][ T9636] RDX: 0000000000000050 RSI: 0000000020000c80 RDI: 000000000000000a [ 212.374271][ T9636] RBP: 00007f04e96580a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.382259][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.390238][ T9636] R13: 0000000000000000 R14: 00007f04e8945fa0 R15: 00007ffe95498b18 [ 212.398257][ T9636] [ 212.847208][ T9662] __nla_validate_parse: 4 callbacks suppressed [ 212.847228][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1223'. [ 212.883027][ T9662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'. [ 213.135943][ T9673] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 213.330080][ T9681] FAULT_INJECTION: forcing a failure. [ 213.330080][ T9681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.413656][ T9681] CPU: 0 UID: 0 PID: 9681 Comm: syz.2.1228 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 213.424404][ T9681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 213.434494][ T9681] Call Trace: [ 213.437802][ T9681] [ 213.440764][ T9681] dump_stack_lvl+0x241/0x360 [ 213.445482][ T9681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.450717][ T9681] ? __pfx__printk+0x10/0x10 [ 213.455351][ T9681] ? snprintf+0xda/0x120 [ 213.459627][ T9681] should_fail_ex+0x3b0/0x4e0 [ 213.462053][ T9687] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1230'. [ 213.464320][ T9681] _copy_to_user+0x31/0xb0 [ 213.477701][ T9681] simple_read_from_buffer+0xca/0x150 [ 213.483122][ T9681] proc_fail_nth_read+0x1e9/0x250 [ 213.488183][ T9681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.493770][ T9681] ? rw_verify_area+0x55e/0x6f0 [ 213.498648][ T9681] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 213.504238][ T9681] vfs_read+0x1fc/0xb70 [ 213.508434][ T9681] ? do_sock_setsockopt+0x3e2/0x720 [ 213.513668][ T9681] ? __pfx_vfs_read+0x10/0x10 [ 213.518380][ T9681] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 213.524303][ T9681] ? do_sock_setsockopt+0x3e2/0x720 [ 213.529536][ T9681] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 213.535112][ T9681] ksys_read+0x18f/0x2b0 [ 213.537720][ T9683] netlink: 'syz.3.1229': attribute type 6 has an invalid length. [ 213.539420][ T9681] ? __pfx_ksys_read+0x10/0x10 [ 213.551910][ T9681] ? do_syscall_64+0x100/0x230 [ 213.556715][ T9681] ? do_syscall_64+0xb6/0x230 [ 213.561423][ T9681] do_syscall_64+0xf3/0x230 [ 213.566046][ T9681] ? clear_bhb_loop+0x35/0x90 [ 213.570748][ T9681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.576663][ T9681] RIP: 0033:0x7fe2d8b7e92c [ 213.581104][ T9681] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.600743][ T9681] RSP: 002b:00007fe2d99e2050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.609195][ T9681] RAX: ffffffffffffffda RBX: 00007fe2d8d45fa0 RCX: 00007fe2d8b7e92c [ 213.617207][ T9681] RDX: 000000000000000f RSI: 00007fe2d99e20b0 RDI: 0000000000000005 [ 213.625211][ T9681] RBP: 00007fe2d99e20a0 R08: 0000000000000000 R09: 0000000000000000 [ 213.633208][ T9681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.641210][ T9681] R13: 0000000000000000 R14: 00007fe2d8d45fa0 R15: 00007ffef016a248 [ 213.649230][ T9681] [ 214.625949][ T9737] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 214.714428][ T9741] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1241'. [ 214.739754][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'. [ 214.761835][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'. [ 214.845596][ T9747] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1242'. [ 214.956838][ T9753] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 215.451540][ T9773] bond0: option resend_igmp: invalid value (7540) [ 215.472126][ T9773] bond0: option resend_igmp: allowed values 0 - 255 [ 215.531332][ T9773] FAULT_INJECTION: forcing a failure. [ 215.531332][ T9773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.571343][ T9773] CPU: 0 UID: 0 PID: 9773 Comm: syz.0.1249 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 215.582091][ T9773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.592193][ T9773] Call Trace: [ 215.595507][ T9773] [ 215.598460][ T9773] dump_stack_lvl+0x241/0x360 [ 215.603180][ T9773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.608419][ T9773] ? __pfx__printk+0x10/0x10 [ 215.613052][ T9773] ? snprintf+0xda/0x120 [ 215.617337][ T9773] should_fail_ex+0x3b0/0x4e0 [ 215.622059][ T9773] _copy_to_user+0x31/0xb0 [ 215.626516][ T9773] simple_read_from_buffer+0xca/0x150 [ 215.631955][ T9773] proc_fail_nth_read+0x1e9/0x250 [ 215.637116][ T9773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.642711][ T9773] ? rw_verify_area+0x55e/0x6f0 [ 215.647595][ T9773] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.653214][ T9773] vfs_read+0x1fc/0xb70 [ 215.657412][ T9773] ? __pfx___mutex_lock+0x10/0x10 [ 215.662469][ T9773] ? __pfx_vfs_read+0x10/0x10 [ 215.667190][ T9773] ? __fget_files+0x2a/0x410 [ 215.671823][ T9773] ? __fget_files+0x395/0x410 [ 215.676535][ T9773] ? __fget_files+0x2a/0x410 [ 215.681167][ T9773] ksys_read+0x18f/0x2b0 [ 215.685459][ T9773] ? __pfx_ksys_read+0x10/0x10 [ 215.690251][ T9773] ? do_syscall_64+0x100/0x230 [ 215.695048][ T9773] ? do_syscall_64+0xb6/0x230 [ 215.699760][ T9773] do_syscall_64+0xf3/0x230 [ 215.704306][ T9773] ? clear_bhb_loop+0x35/0x90 [ 215.709021][ T9773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.714951][ T9773] RIP: 0033:0x7f8b40b7e92c [ 215.719382][ T9773] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 215.739017][ T9773] RSP: 002b:00007f8b4189e050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.747442][ T9773] RAX: ffffffffffffffda RBX: 00007f8b40d45fa0 RCX: 00007f8b40b7e92c [ 215.755416][ T9773] RDX: 000000000000000f RSI: 00007f8b4189e0b0 RDI: 0000000000000005 [ 215.763387][ T9773] RBP: 00007f8b4189e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.771356][ T9773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 215.779326][ T9773] R13: 0000000000000000 R14: 00007f8b40d45fa0 R15: 00007ffdb37bf6c8 [ 215.787320][ T9773] [ 216.082954][ T9803] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1256'. [ 216.094012][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1253'. [ 216.267067][ T9810] FAULT_INJECTION: forcing a failure. [ 216.267067][ T9810] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.310445][ T9810] CPU: 0 UID: 0 PID: 9810 Comm: syz.1.1257 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 216.321196][ T9810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 216.331279][ T9810] Call Trace: [ 216.334579][ T9810] [ 216.337534][ T9810] dump_stack_lvl+0x241/0x360 [ 216.342256][ T9810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.347491][ T9810] ? __pfx__printk+0x10/0x10 [ 216.352107][ T9810] should_fail_ex+0x3b0/0x4e0 [ 216.356799][ T9810] prepare_alloc_pages+0x1da/0x5b0 [ 216.361927][ T9810] __alloc_pages_noprof+0x16f/0x710 [ 216.367137][ T9810] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 216.372869][ T9810] alloc_pages_mpol_noprof+0x3e8/0x680 [ 216.378338][ T9810] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 216.384334][ T9810] ? alloc_pages_noprof+0xef/0x170 [ 216.389460][ T9810] get_free_pages_noprof+0xc/0x30 [ 216.394485][ T9810] kasan_populate_vmalloc_pte+0x38/0xe0 [ 216.400030][ T9810] __apply_to_page_range+0x806/0xde0 [ 216.405319][ T9810] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 216.411571][ T9810] ? __pfx___apply_to_page_range+0x10/0x10 [ 216.417396][ T9810] ? do_raw_spin_unlock+0x13c/0x8b0 [ 216.422603][ T9810] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 216.427983][ T9810] alloc_vmap_area+0x1d4e/0x2400 [ 216.432930][ T9810] ? __pfx_alloc_vmap_area+0x10/0x10 [ 216.438219][ T9810] ? __kasan_kmalloc+0x98/0xb0 [ 216.443001][ T9810] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 216.448993][ T9810] ? __get_vm_area_node+0x132/0x2d0 [ 216.454227][ T9810] ? bloom_map_alloc+0x21a/0x450 [ 216.459175][ T9810] __get_vm_area_node+0x1c8/0x2d0 [ 216.464201][ T9810] __vmalloc_node_range_noprof+0x344/0x1380 [ 216.470093][ T9810] ? bloom_map_alloc+0x21a/0x450 [ 216.475029][ T9810] ? __lock_acquire+0x1397/0x2100 [ 216.480059][ T9810] ? aa_get_newest_label+0xff/0x6f0 [ 216.485262][ T9810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 216.491590][ T9810] ? apparmor_capable+0x13b/0x1b0 [ 216.496617][ T9810] bpf_map_area_alloc+0xfc/0x120 [ 216.501559][ T9810] ? bloom_map_alloc+0x21a/0x450 [ 216.506496][ T9810] bloom_map_alloc+0x21a/0x450 [ 216.511269][ T9810] map_create+0x946/0x11c0 [ 216.515698][ T9810] __sys_bpf+0x6d1/0x810 [ 216.519947][ T9810] ? __pfx___sys_bpf+0x10/0x10 [ 216.524721][ T9810] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 216.530794][ T9810] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.537119][ T9810] ? do_syscall_64+0x100/0x230 [ 216.541884][ T9810] __x64_sys_bpf+0x7c/0x90 [ 216.546304][ T9810] do_syscall_64+0xf3/0x230 [ 216.550892][ T9810] ? clear_bhb_loop+0x35/0x90 [ 216.555572][ T9810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.561478][ T9810] RIP: 0033:0x7f04e877ff19 [ 216.565909][ T9810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.585521][ T9810] RSP: 002b:00007f04e9658058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 216.593943][ T9810] RAX: ffffffffffffffda RBX: 00007f04e8945fa0 RCX: 00007f04e877ff19 [ 216.601913][ T9810] RDX: 0000000000000048 RSI: 00000000200008c0 RDI: 0000000000000000 [ 216.609888][ T9810] RBP: 00007f04e96580a0 R08: 0000000000000000 R09: 0000000000000000 [ 216.617855][ T9810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 216.625824][ T9810] R13: 0000000000000001 R14: 00007f04e8945fa0 R15: 00007ffe95498b18 [ 216.633804][ T9810] [ 216.812239][ T9823] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1260'. [ 216.918113][ T9831] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 217.247223][ T9842] xt_l2tp: wrong L2TP version: 0 [ 217.280037][ T9842] netlink: 'syz.4.1265': attribute type 10 has an invalid length. [ 217.322572][ T9842] syz_tun: entered promiscuous mode [ 217.349347][ T9842] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 217.933037][ T9879] __nla_validate_parse: 2 callbacks suppressed [ 217.933060][ T9879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1273'. [ 218.466970][ T9904] xt_l2tp: wrong L2TP version: 0 [ 218.503349][ T9904] netlink: 'syz.1.1279': attribute type 10 has an invalid length. [ 218.513027][ T9905] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1276'. [ 218.543072][ T9904] syz_tun: entered promiscuous mode [ 218.962810][ T9919] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 219.341989][ T9927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1284'. [ 219.356021][ T9927] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1284'. [ 219.537424][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 219.573194][ T9939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1288'. [ 219.818077][ T9959] xt_l2tp: wrong L2TP version: 0 [ 219.853181][ T9959] netlink: 'syz.2.1291': attribute type 10 has an invalid length. [ 219.888624][ T9959] syz_tun: entered promiscuous mode [ 219.944831][ T9959] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 220.111448][ T9969] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1294'. [ 220.344060][ T9977] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 220.969281][ T9996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1303'. [ 221.197510][T10007] xt_l2tp: wrong L2TP version: 0 [ 221.252219][T10007] netlink: 'syz.3.1305': attribute type 10 has an invalid length. [ 221.276869][T10007] syz_tun: entered promiscuous mode [ 221.313071][T10007] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 221.464261][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1307'. [ 221.561581][T10024] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1306'. [ 222.483786][T10058] xt_l2tp: wrong L2TP version: 0 [ 222.527079][T10058] netlink: 'syz.2.1319': attribute type 10 has an invalid length. [ 223.165892][T10087] __nla_validate_parse: 3 callbacks suppressed [ 223.165913][T10087] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1326'. [ 223.669085][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1329'. [ 223.695102][T10105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1331'. [ 223.908069][T10111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1332'. [ 223.920167][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1334'. [ 224.147613][T10118] xt_l2tp: wrong L2TP version: 0 [ 224.236564][T10118] netlink: 'syz.0.1335': attribute type 10 has an invalid length. [ 224.270752][T10118] syz_tun: entered promiscuous mode [ 224.443869][T10134] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1340'. [ 224.785652][T10146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1345'. [ 224.968867][T10148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1347'. [ 225.472790][T10167] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1353'. [ 225.511985][T10170] xt_l2tp: wrong L2TP version: 0 [ 225.547780][T10170] netlink: 'syz.0.1354': attribute type 10 has an invalid length. [ 225.639972][T10163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1351'. [ 226.661955][T10219] xt_l2tp: wrong L2TP version: 0 [ 226.691911][T10219] netlink: 'syz.0.1368': attribute type 10 has an invalid length. [ 227.376692][T10241] bridge0: entered allmulticast mode [ 227.405663][T10241] pim6reg: entered allmulticast mode [ 227.781591][T10257] xt_l2tp: wrong L2TP version: 0 [ 227.807922][T10257] netlink: 'syz.4.1382': attribute type 10 has an invalid length. [ 228.219042][T10275] __nla_validate_parse: 9 callbacks suppressed [ 228.219064][T10275] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1388'. [ 228.569564][T10289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1396'. [ 228.679626][T10293] xt_l2tp: wrong L2TP version: 0 [ 228.735169][T10293] netlink: 'syz.1.1397': attribute type 10 has an invalid length. [ 228.758034][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1399'. [ 229.154240][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1403'. [ 229.277759][T10324] bridge_slave_0: entered promiscuous mode [ 229.306276][T10324] bridge_slave_0: entered allmulticast mode [ 229.398765][T10328] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1407'. [ 229.846934][T10336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1410'. [ 229.937237][T10340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1412'. [ 230.102926][T10349] xt_l2tp: wrong L2TP version: 0 [ 230.148857][T10349] netlink: 'syz.1.1415': attribute type 10 has an invalid length. [ 230.292401][ T51] IPVS: starting estimator thread 0... [ 230.329737][T10356] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1418'. [ 230.411516][T10359] IPVS: using max 23 ests per chain, 55200 per kthread [ 230.419796][T10367] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1420'. [ 230.804810][T10383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1426'. [ 231.355887][T10400] xt_l2tp: wrong L2TP version: 0 [ 231.390501][T10400] netlink: 'syz.0.1431': attribute type 10 has an invalid length. [ 232.276982][T10437] xt_l2tp: wrong L2TP version: 0 [ 232.288032][T10437] netlink: 'syz.4.1444': attribute type 10 has an invalid length. [ 233.503013][T10480] xt_l2tp: wrong L2TP version: 0 [ 233.532794][T10480] netlink: 'syz.2.1457': attribute type 10 has an invalid length. [ 234.135246][T10506] __nla_validate_parse: 9 callbacks suppressed [ 234.135266][T10506] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1466'. [ 234.167910][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1467'. [ 234.230772][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1468'. [ 234.368268][T10512] netlink: 'syz.2.1469': attribute type 3 has an invalid length. [ 234.376524][T10512] netlink: 'syz.2.1469': attribute type 3 has an invalid length. [ 234.399764][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1469'. [ 234.658404][T10527] syzkaller1: entered promiscuous mode [ 234.677360][T10527] syzkaller1: entered allmulticast mode [ 234.865418][T10534] xt_l2tp: wrong L2TP version: 0 [ 234.903649][T10534] netlink: 'syz.4.1474': attribute type 10 has an invalid length. [ 235.056895][T10543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 235.154504][T10548] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1476'. [ 235.482509][T10559] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1480'. [ 235.560409][T10561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1479'. [ 235.628997][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1481'. [ 235.973739][T10570] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1482'. [ 236.295089][T10578] syzkaller1: entered promiscuous mode [ 236.300652][T10578] syzkaller1: entered allmulticast mode [ 236.410434][T10585] xt_l2tp: wrong L2TP version: 0 [ 236.427857][T10585] netlink: 'syz.2.1489': attribute type 10 has an invalid length. [ 236.806121][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 238.628685][T10701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.692268][T10701] batadv_slave_1: entered allmulticast mode [ 239.291652][T10733] __nla_validate_parse: 8 callbacks suppressed [ 239.291672][T10733] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1557'. [ 239.378898][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1558'. [ 239.415594][T10739] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1560'. [ 239.628261][T10751] netlink: 'syz.2.1564': attribute type 21 has an invalid length. [ 239.651354][T10751] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1564'. [ 239.810470][T10761] netlink: 'syz.4.1567': attribute type 4 has an invalid length. [ 239.850850][T10761] netlink: 'syz.4.1567': attribute type 4 has an invalid length. [ 240.559199][T10806] IPVS: Unknown mcast interface: [ 240.795623][T10817] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1592'. [ 240.808974][T10817] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1592'. [ 240.956866][T10827] netlink: 778 bytes leftover after parsing attributes in process `syz.3.1594'. [ 241.382316][T10849] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1602'. [ 241.386857][T10852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.634642][T10859] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1606'. [ 241.668919][T10862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1608'. [ 242.624714][T10915] vxcan1: entered allmulticast mode [ 242.630418][T10915] pim6reg: left allmulticast mode [ 242.651748][T10915] vxcan1: left allmulticast mode [ 242.657271][T10915] bridge0: left allmulticast mode [ 243.585513][T10957] netlink: 'syz.0.1653': attribute type 34 has an invalid length. [ 244.122866][T10967] infiniband syz0: set down [ 244.128339][T10967] infiniband syz0: added bond0 [ 244.249243][T10967] RDS/IB: syz0: added [ 244.277113][T10967] smc: adding ib device syz0 with port count 1 [ 244.317474][T10967] smc: ib device syz0 port 1 has pnetid [ 244.369341][T10997] SET target dimension over the limit! [ 244.436136][T11001] __nla_validate_parse: 3 callbacks suppressed [ 244.436157][T11001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1671'. [ 244.732953][T11015] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1676'. [ 244.948543][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1679'. [ 245.106019][T11031] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1683'. [ 245.132574][T11033] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.1684'. [ 245.171340][T11033] netlink: zone id is out of range [ 245.178311][T11033] netlink: zone id is out of range [ 245.667556][T11056] veth0_vlan: default FDB implementation only supports local addresses [ 246.259742][T11081] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1704'. [ 246.280783][T11081] netlink: zone id is out of range [ 246.290865][T11081] netlink: zone id is out of range [ 246.306901][T11081] netlink: get zone limit has 8 unknown bytes [ 246.526933][T11088] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 246.551701][T11088] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 246.627259][T11092] veth1_to_team: entered promiscuous mode [ 246.661747][T11091] veth1_to_team: left promiscuous mode [ 246.672774][T11095] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1711'. [ 246.861544][T11106] netlink: 754 bytes leftover after parsing attributes in process `syz.2.1715'. [ 246.917456][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 246.947305][T11110] syz.4.1717: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 246.974602][T11110] CPU: 0 UID: 0 PID: 11110 Comm: syz.4.1717 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 246.985430][T11110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 246.995516][T11110] Call Trace: [ 246.998833][T11110] [ 247.001784][T11110] dump_stack_lvl+0x241/0x360 [ 247.006498][T11110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.011729][T11110] ? __pfx__printk+0x10/0x10 [ 247.016366][T11110] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 247.022818][T11110] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 247.029373][T11110] warn_alloc+0x278/0x410 [ 247.033741][T11110] ? stack_depot_save_flags+0x29/0x830 [ 247.039233][T11110] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 247.045339][T11110] ? __pfx_warn_alloc+0x10/0x10 [ 247.050231][T11110] ? kasan_save_track+0x3f/0x80 [ 247.055120][T11110] ? __kasan_kmalloc+0x98/0xb0 [ 247.059922][T11110] ? xsk_setsockopt+0x4ea/0x950 [ 247.064804][T11110] ? do_sock_setsockopt+0x3af/0x720 [ 247.070032][T11110] ? __x64_sys_setsockopt+0x1ee/0x280 [ 247.075438][T11110] ? do_syscall_64+0xf3/0x230 [ 247.080147][T11110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.084424][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1719'. [ 247.086240][T11110] __vmalloc_node_range_noprof+0x126/0x1380 [ 247.101169][T11110] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 247.107553][T11110] ? __kasan_kmalloc+0x98/0xb0 [ 247.112364][T11110] vmalloc_user_noprof+0x74/0x80 [ 247.117335][T11110] ? xskq_create+0xb6/0x170 [ 247.121884][T11110] xskq_create+0xb6/0x170 [ 247.126252][T11110] xsk_init_queue+0xa1/0x100 [ 247.130885][T11110] xsk_setsockopt+0x4ea/0x950 [ 247.135605][T11110] ? __pfx_xsk_setsockopt+0x10/0x10 [ 247.140838][T11110] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.145732][T11110] ? aa_sock_opt_perm+0x79/0x120 [ 247.150706][T11110] ? __pfx_xsk_setsockopt+0x10/0x10 [ 247.155937][T11110] do_sock_setsockopt+0x3af/0x720 [ 247.161002][T11110] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 247.166588][T11110] ? __fget_files+0x395/0x410 [ 247.171299][T11110] ? __fget_files+0x2a/0x410 [ 247.175936][T11110] __x64_sys_setsockopt+0x1ee/0x280 [ 247.181176][T11110] do_syscall_64+0xf3/0x230 [ 247.185715][T11110] ? clear_bhb_loop+0x35/0x90 [ 247.190435][T11110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.196368][T11110] RIP: 0033:0x7fb17517ff19 [ 247.200808][T11110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.220448][T11110] RSP: 002b:00007fb17602b058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 247.228911][T11110] RAX: ffffffffffffffda RBX: 00007fb175345fa0 RCX: 00007fb17517ff19 [ 247.236927][T11110] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 247.244934][T11110] RBP: 00007fb1751f3cc8 R08: 0000000000000004 R09: 0000000000000000 [ 247.252966][T11110] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.260977][T11110] R13: 0000000000000000 R14: 00007fb175345fa0 R15: 00007ffde5dd1c28 [ 247.269093][T11110] [ 247.311171][T11110] Mem-Info: [ 247.314351][T11110] active_anon:4453 inactive_anon:0 isolated_anon:0 [ 247.314351][T11110] active_file:1930 inactive_file:38269 isolated_file:0 [ 247.314351][T11110] unevictable:768 dirty:54 writeback:0 [ 247.314351][T11110] slab_reclaimable:10697 slab_unreclaimable:111502 [ 247.314351][T11110] mapped:29052 shmem:1414 pagetables:732 [ 247.314351][T11110] sec_pagetables:0 bounce:0 [ 247.314351][T11110] kernel_misc_reclaimable:0 [ 247.314351][T11110] free:1319523 free_pcp:4630 free_cma:0 [ 247.392027][T11110] Node 0 active_anon:17812kB inactive_anon:0kB active_file:7720kB inactive_file:153008kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116208kB dirty:216kB writeback:0kB shmem:4120kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11132kB pagetables:3028kB sec_pagetables:0kB all_unreclaimable? no [ 247.461123][T11110] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 247.497991][T11110] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.526012][T11110] lowmem_reserve[]: 0 2465 2466 0 0 [ 247.531449][T11110] Node 0 DMA32 free:1377260kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:17676kB inactive_anon:0kB active_file:7720kB inactive_file:152176kB unevictable:1536kB writepending:216kB present:3129332kB managed:2552832kB mlocked:0kB bounce:0kB free_pcp:1612kB local_pcp:732kB free_cma:0kB [ 247.587528][T11110] lowmem_reserve[]: 0 0 0 0 0 [ 247.604661][T11110] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 247.636485][T11110] lowmem_reserve[]: 0 0 0 0 0 [ 247.642066][T11110] Node 1 Normal free:3903088kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 247.672124][T11110] lowmem_reserve[]: 0 0 0 0 0 [ 247.677555][T11110] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 247.724557][T11110] Node 0 DMA32: 218*4kB (UM) 745*8kB (UME) 661*16kB (UME) 132*32kB (UME) 617*64kB (UME) 699*128kB (UME) 461*256kB (UME) 250*512kB (UME) 112*1024kB (UME) 5*2048kB (UM) 208*4096kB (UM) = 1373504kB [ 247.751335][T11110] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 247.764012][T11110] Node 1 Normal: 228*4kB (UME) 62*8kB (UME) 49*16kB (UME) 231*32kB (UME) 100*64kB (UME) 22*128kB (UME) 13*256kB (UM) 10*512kB (UME) 7*1024kB (UM) 3*2048kB (UE) 943*4096kB (M) = 3903088kB [ 247.790342][T11110] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.803305][T11110] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.827212][T11110] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 247.840883][T11110] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 247.851685][T11110] 41613 total pagecache pages [ 247.857993][T11110] 0 pages in swap cache [ 247.862976][T11110] Free swap = 124996kB [ 247.867932][T11110] Total swap = 124996kB [ 247.872871][T11110] 2097051 pages RAM [ 247.878036][T11110] 0 pages HighMem/MovableOnly [ 247.883594][T11110] 426993 pages reserved [ 247.888124][T11110] 0 pages cma reserved [ 249.190609][ T5833] bond0: (slave syz_tun): Releasing backup interface [ 249.742793][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 249.753521][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 249.773337][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 249.787289][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 249.791237][T11229] __nla_validate_parse: 15 callbacks suppressed [ 249.791253][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1767'. [ 249.835187][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 249.850970][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.650971][T11263] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1782'. [ 250.656546][T11265] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1783'. [ 250.661684][T11263] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1782'. [ 250.712288][T11227] chnl_net:caif_netlink_parms(): no params data found [ 251.065141][T11227] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.067069][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1792'. [ 251.092650][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.107471][T11292] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1795'. [ 251.109475][T11227] bridge_slave_0: entered allmulticast mode [ 251.136453][T11227] bridge_slave_0: entered promiscuous mode [ 251.150402][T11288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1792'. [ 251.180477][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.197187][T11297] netlink: 'syz.0.1796': attribute type 11 has an invalid length. [ 251.206542][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.224700][T11227] bridge_slave_1: entered allmulticast mode [ 251.235378][T11227] bridge_slave_1: entered promiscuous mode [ 251.348434][T11227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.375304][T11227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.405967][T11305] netlink: 'syz.2.1800': attribute type 4 has an invalid length. [ 251.439336][T11305] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1800'. [ 251.587815][T11305] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 251.630875][T11227] team0: Port device team_slave_0 added [ 251.650779][T11227] team0: Port device team_slave_1 added [ 251.734169][ T6177] bridge0: port 4(macvlan1) entered disabled state [ 251.820792][T11227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.829283][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.903713][T11227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.922664][ T5842] Bluetooth: hci4: command tx timeout [ 251.945593][T11227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.961330][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.987660][T11227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.117945][T11340] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1815'. [ 252.136444][T11227] hsr_slave_0: entered promiscuous mode [ 252.154333][T11227] hsr_slave_1: entered promiscuous mode [ 252.162161][T11227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.177169][T11227] Cannot create hsr debugfs directory [ 252.366551][T11349] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1820'. [ 252.402530][T11352] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 252.565130][T11361] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 252.623219][T11227] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.675529][T11361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.723423][T11352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 252.730496][T11352] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 252.763178][T11352] bond2: (slave vti0): Error -95 calling set_mac_address [ 252.869202][T11227] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.968076][T11227] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.094080][T11227] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.316505][T11227] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.340945][T11393] netlink: 'syz.0.1839': attribute type 1 has an invalid length. [ 253.353557][T11227] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.394134][T11227] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.427112][T11227] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.608477][T11227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.679063][T11227] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.747431][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.754664][ T3646] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.789409][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.796604][ T3646] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.012022][ T5842] Bluetooth: hci4: command tx timeout [ 254.445930][T11428] netlink: 'syz.1.1852': attribute type 21 has an invalid length. [ 254.499358][T11227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.914247][T11227] veth0_vlan: entered promiscuous mode [ 254.954975][T11227] veth1_vlan: entered promiscuous mode [ 255.039005][T11227] veth0_macvtap: entered promiscuous mode [ 255.068845][T11227] veth1_macvtap: entered promiscuous mode [ 255.118408][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.158247][T11457] __nla_validate_parse: 3 callbacks suppressed [ 255.158268][T11457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1862'. [ 255.163240][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.184903][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.196097][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.206081][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.217499][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.229082][T11227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.240387][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.251901][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.271729][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.282804][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.293371][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.304312][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.316545][T11227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.331254][T11227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.340011][T11227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.349685][T11227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.359401][T11227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.435981][T11461] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1865'. [ 255.522641][ T6177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.532540][ T6177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.619341][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.627383][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.810351][T11476] netlink: zone id is out of range [ 255.837829][T11476] netlink: set zone limit has 8 unknown bytes [ 256.004414][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.265758][T11505] netlink: 'syz.1.1878': attribute type 6 has an invalid length. [ 256.417509][T11513] openvswitch: netlink: Message has 1219 unknown bytes. [ 256.425422][T11513] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.722688][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.864615][T11532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.874939][T11532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.883978][T11532] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.898008][T11531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 256.908383][T11531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.132223][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1897'. [ 257.292842][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.523729][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 257.539510][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 257.548366][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 257.557393][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 257.573083][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 257.582305][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 257.648920][T11558] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1905'. [ 257.674678][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.761785][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.769951][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.858650][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.008124][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.353743][ T12] bridge_slave_1: left allmulticast mode [ 258.359719][ T12] bridge_slave_1: left promiscuous mode [ 258.367429][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.439820][ T12] bridge_slave_0: left allmulticast mode [ 258.446278][ T12] bridge_slave_0: left promiscuous mode [ 258.452639][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.827446][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 259.553616][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.589165][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.601513][ T12] bond0 (unregistering): Released all slaves [ 259.650826][T11613] vlan1: entered promiscuous mode [ 259.691759][ T5842] Bluetooth: hci4: command tx timeout [ 259.853080][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.083937][T11549] chnl_net:caif_netlink_parms(): no params data found [ 260.824310][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.832409][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.849474][T11549] bridge_slave_0: entered allmulticast mode [ 260.863969][T11549] bridge_slave_0: entered promiscuous mode [ 260.897017][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.908591][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.918981][T11549] bridge_slave_1: entered allmulticast mode [ 260.927395][T11549] bridge_slave_1: entered promiscuous mode [ 261.063967][T11549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.081860][T11652] pim6reg1: entered promiscuous mode [ 261.088427][T11652] pim6reg1: entered allmulticast mode [ 261.186171][T11549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.486112][T11549] team0: Port device team_slave_0 added [ 261.532050][T11660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1941'. [ 261.579477][T11549] team0: Port device team_slave_1 added [ 261.762089][ T5842] Bluetooth: hci4: command tx timeout [ 261.931813][ T51] net_ratelimit: 4 callbacks suppressed [ 261.931834][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 261.995941][T11661] pim6reg1: entered promiscuous mode [ 262.011389][T11661] pim6reg1: entered allmulticast mode [ 262.097729][ T12] hsr_slave_0: left promiscuous mode [ 262.141327][ T12] hsr_slave_1: left promiscuous mode [ 262.154648][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.162375][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.171398][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.178851][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.234941][ T12] veth1_macvtap: left promiscuous mode [ 262.244194][ T12] veth0_macvtap: left promiscuous mode [ 262.251251][ T12] veth1_vlan: left promiscuous mode [ 262.257910][ T12] veth0_vlan: left promiscuous mode [ 262.967778][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.045734][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.346658][ T12] team0 (unregistering): Port device team_slave_1 removed [ 263.396584][ T12] team0 (unregistering): Port device team_slave_0 removed [ 263.846714][ T5842] Bluetooth: hci4: command tx timeout [ 263.854056][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.867523][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.874976][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.901657][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.931561][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.938540][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.965052][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.002123][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 264.178763][T11549] hsr_slave_0: entered promiscuous mode [ 264.196717][T11549] [ 264.199079][T11549] ============================= [ 264.203914][T11549] [ BUG: Invalid wait context ] [ 264.208744][T11549] 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 Not tainted [ 264.215844][T11549] ----------------------------- [ 264.220687][T11549] syz-executor/11549 is trying to lock: [ 264.226216][T11549] ffff888032aea200 (&trie->lock){....}-{3:3}, at: trie_delete_elem+0x96/0x6a0 [ 264.235101][T11549] other info that might help us debug this: [ 264.240973][T11549] context-{5:5} [ 264.244426][T11549] 4 locks held by syz-executor/11549: [ 264.249781][T11549] #0: ffffffff901c0470 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x22/0x250 [ 264.259275][T11549] #1: ffffffff8fcaff08 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xbb0/0x20e0 [ 264.268335][T11549] #2: ffff8880b873e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 264.278257][T11549] #3: ffffffff8e937aa0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x244/0x590 [ 264.287657][T11549] stack backtrace: [ 264.291383][T11549] CPU: 1 UID: 0 PID: 11549 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 264.302308][T11549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 264.312354][T11549] Call Trace: [ 264.315621][T11549] [ 264.318544][T11549] dump_stack_lvl+0x241/0x360 [ 264.323221][T11549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.328412][T11549] ? __pfx__printk+0x10/0x10 [ 264.332991][T11549] ? validate_chain+0x11e/0x5920 [ 264.337928][T11549] __lock_acquire+0x15a8/0x2100 [ 264.342775][T11549] lock_acquire+0x1ed/0x550 [ 264.347267][T11549] ? trie_delete_elem+0x96/0x6a0 [ 264.352204][T11549] ? __pfx_lock_acquire+0x10/0x10 [ 264.357219][T11549] ? __lock_acquire+0x1397/0x2100 [ 264.362241][T11549] _raw_spin_lock_irqsave+0xd5/0x120 [ 264.367519][T11549] ? trie_delete_elem+0x96/0x6a0 [ 264.372455][T11549] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 264.378343][T11549] ? __pfx_lock_acquire+0x10/0x10 [ 264.383367][T11549] ? kvm_sched_clock_read+0x11/0x20 [ 264.388566][T11549] trie_delete_elem+0x96/0x6a0 [ 264.393324][T11549] ? __pfx___cant_migrate+0x10/0x10 [ 264.398512][T11549] ? bpf_trace_run4+0x244/0x590 [ 264.403354][T11549] bpf_prog_1c0c44170264bb34+0x46/0x4a [ 264.408799][T11549] bpf_trace_run4+0x334/0x590 [ 264.413465][T11549] ? rcu_read_lock_sched_held+0x8d/0x130 [ 264.419091][T11549] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 264.425150][T11549] ? __pfx_bpf_trace_run4+0x10/0x10 [ 264.430337][T11549] ? __pfx_probe_sched_switch+0x10/0x10 [ 264.435900][T11549] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 264.442570][T11549] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 264.448629][T11549] __traceiter_sched_switch+0x98/0xd0 [ 264.453995][T11549] __schedule+0x22bc/0x4c30 [ 264.458496][T11549] ? mark_lock+0x9a/0x360 [ 264.462830][T11549] ? __lock_acquire+0x1397/0x2100 [ 264.467849][T11549] ? __pfx___schedule+0x10/0x10 [ 264.472698][T11549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 264.478676][T11549] ? preempt_schedule_irq+0xf0/0x1c0 [ 264.483959][T11549] preempt_schedule_irq+0xfb/0x1c0 [ 264.489063][T11549] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 264.494873][T11549] irqentry_exit+0x5e/0x90 [ 264.499284][T11549] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 264.504740][T11549] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x35/0x90 [ 264.511583][T11549] Code: 14 25 00 d6 03 00 65 8b 05 90 5f 64 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 1c 16 00 00 00 74 52 8b 82 f8 15 00 00 <83> f8 03 75 47 48 8b 8a 00 16 00 00 44 8b 8a fc 15 00 00 49 c1 e1 [ 264.531264][T11549] RSP: 0018:ffffc9000bcaea18 EFLAGS: 00000246 [ 264.537328][T11549] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc9000bcae803 [ 264.545302][T11549] RDX: ffff88801dbc9e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 264.553264][T11549] RBP: ffffc9000bcaec88 R08: ffffffff89a2e1d5 R09: 1ffffffff2033ce6 [ 264.561229][T11549] R10: dffffc0000000000 R11: fffffbfff2033ce7 R12: 1ffff1100a325415 [ 264.569192][T11549] R13: dffffc0000000000 R14: ffff88807d562000 R15: ffffc9000bcaeaf0 [ 264.577162][T11549] ? rtnl_fill_ifinfo+0x1115/0x22b0 [ 264.582358][T11549] rtnl_fill_ifinfo+0x1115/0x22b0 [ 264.587377][T11549] ? __pfx_rtnl_fill_ifinfo+0x10/0x10 [ 264.592744][T11549] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 264.599416][T11549] ? __alloc_skb+0x28f/0x440 [ 264.604002][T11549] ? __pfx___alloc_skb+0x10/0x10 [ 264.608931][T11549] rtmsg_ifinfo_build_skb+0x18a/0x260 [ 264.614298][T11549] rtmsg_ifinfo+0x91/0x1b0 [ 264.618796][T11549] __dev_notify_flags+0xf7/0x400 [ 264.623724][T11549] ? __pfx___dev_notify_flags+0x10/0x10 [ 264.629257][T11549] ? __pfx_netdev_info+0x10/0x10 [ 264.634199][T11549] __dev_set_promiscuity+0x152/0x5a0 [ 264.639474][T11549] ? __kasan_kmalloc+0x98/0xb0 [ 264.644238][T11549] dev_set_promiscuity+0x51/0xe0 [ 264.649163][T11549] hsr_add_port+0x53e/0x790 [ 264.653664][T11549] hsr_dev_finalize+0x69a/0xa20 [ 264.658516][T11549] hsr_newlink+0x7ee/0x970 [ 264.662928][T11549] ? alloc_netdev_mqs+0xd56/0x1080 [ 264.668033][T11549] ? __pfx_hsr_newlink+0x10/0x10 [ 264.672973][T11549] ? rtnl_create_link+0x91c/0xc20 [ 264.677988][T11549] ? __pfx_hsr_newlink+0x10/0x10 [ 264.682922][T11549] rtnl_newlink_create+0x2ee/0xa40 [ 264.688034][T11549] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 264.693662][T11549] ? nla_strscpy+0x100/0x180 [ 264.698245][T11549] ? full_name_hash+0x93/0xe0 [ 264.702918][T11549] rtnl_newlink+0x1b40/0x20e0 [ 264.707600][T11549] ? __pfx_rtnl_newlink+0x10/0x10 [ 264.712622][T11549] ? validate_chain+0x11e/0x5920 [ 264.717551][T11549] ? __pfx_lock_acquire+0x10/0x10 [ 264.722564][T11549] ? __pfx_lock_release+0x10/0x10 [ 264.727577][T11549] ? __pfx_validate_chain+0x10/0x10 [ 264.732766][T11549] ? mark_lock+0x9a/0x360 [ 264.737089][T11549] ? __lock_acquire+0x1397/0x2100 [ 264.742114][T11549] ? __pfx_lock_release+0x10/0x10 [ 264.747128][T11549] ? __lock_acquire+0x1397/0x2100 [ 264.752146][T11549] ? __pfx_rtnl_newlink+0x10/0x10 [ 264.757164][T11549] rtnetlink_rcv_msg+0x791/0xcf0 [ 264.762094][T11549] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 264.767203][T11549] ? __lock_acquire+0x1397/0x2100 [ 264.772222][T11549] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.777681][T11549] netlink_rcv_skb+0x1e3/0x430 [ 264.782438][T11549] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.787889][T11549] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.793174][T11549] ? netlink_deliver_tap+0x2e/0x1b0 [ 264.798366][T11549] netlink_unicast+0x7f6/0x990 [ 264.803123][T11549] ? __pfx_netlink_unicast+0x10/0x10 [ 264.808394][T11549] ? __virt_addr_valid+0x183/0x530 [ 264.813496][T11549] ? __check_object_size+0x48e/0x900 [ 264.818779][T11549] netlink_sendmsg+0x8e4/0xcb0 [ 264.823567][T11549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.828872][T11549] ? aa_sock_msg_perm+0x91/0x160 [ 264.833813][T11549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.839102][T11549] __sock_sendmsg+0x221/0x270 [ 264.843805][T11549] __sys_sendto+0x363/0x4c0 [ 264.848305][T11549] ? __pfx___sys_sendto+0x10/0x10 [ 264.853332][T11549] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 264.859316][T11549] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.865637][T11549] __x64_sys_sendto+0xde/0x100 [ 264.870395][T11549] do_syscall_64+0xf3/0x230 [ 264.874889][T11549] ? clear_bhb_loop+0x35/0x90 [ 264.879570][T11549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.885461][T11549] RIP: 0033:0x7f18b0b81dac [ 264.889871][T11549] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 264.909469][T11549] RSP: 002b:00007ffeff2d9790 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 264.917875][T11549] RAX: ffffffffffffffda RBX: 00007f18b1874620 RCX: 00007f18b0b81dac [ 264.925836][T11549] RDX: 0000000000000048 RSI: 00007f18b1874670 RDI: 0000000000000003 [ 264.933799][T11549] RBP: 0000000000000000 R08: 00007ffeff2d97e4 R09: 000000000000000c [ 264.941758][T11549] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 264.949716][T11549] R13: 0000000000000000 R14: 00007f18b1874670 R15: 0000000000000000 [ 264.957680][T11549] [ 265.015203][T11549] hsr_slave_1: entered promiscuous mode [ 265.021387][T11549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.045381][T11549] Cannot create hsr debugfs directory [ 265.051853][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 265.437765][T11549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.446363][T11549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.456239][T11549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.472903][T11549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.511594][T11549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.526413][T11549] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.536656][ T3640] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.543780][ T3640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.557051][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.564165][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.649209][T11549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.746653][T11549] veth0_vlan: entered promiscuous mode [ 265.755785][T11549] veth1_vlan: entered promiscuous mode [ 265.772430][T11549] veth0_macvtap: entered promiscuous mode [ 265.780529][T11549] veth1_macvtap: entered promiscuous mode [ 265.794415][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.805773][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.815619][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.826233][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.836143][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.846726][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.857557][T11549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.867995][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.878834][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.889074][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.900223][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.912149][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.923316][ T5842] Bluetooth: hci4: command tx timeout [ 265.928722][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.940270][T11549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.951369][T11549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.960083][T11549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.968916][T11549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.977681][T11549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.000404][T11549] ieee80211 phy17: Selected rate control algorithm 'minstrel_ht' [ 266.020717][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.022580][T11549] ieee80211 phy18: Selected rate control algorithm 'minstrel_ht' [ 266.029473][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.053495][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.064381][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.081936][ T5908] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.881272][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.889420][ T3646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.132310][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 268.002685][ T3646] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.172065][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.201933][ T5927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.665044][ T3646] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.726476][ T3646] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.785834][ T3646] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.865879][ T3646] bridge_slave_1: left allmulticast mode [ 269.874662][ T3646] bridge_slave_1: left promiscuous mode [ 269.880373][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.890904][ T3646] bridge_slave_0: left allmulticast mode [ 269.897877][ T3646] bridge_slave_0: left promiscuous mode [ 269.904555][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.921363][ T5880] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.017959][ T3646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.028599][ T3646] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.042389][ T3646] bond0 (unregistering): Released all slaves [ 270.245228][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 270.370314][ T3646] hsr_slave_0: left promiscuous mode [ 270.396482][ T3646] hsr_slave_1: left promiscuous mode [ 270.414226][ T3646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.421993][ T3646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.429701][ T3646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.437545][ T3646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.447098][ T3646] veth1_macvtap: left promiscuous mode [ 270.452912][ T3646] veth0_macvtap: left promiscuous mode [ 270.458467][ T3646] veth1_vlan: left promiscuous mode [ 270.464056][ T3646] veth0_vlan: left promiscuous mode [ 270.603552][ T3646] team0 (unregistering): Port device team_slave_1 removed [ 270.635817][ T3646] team0 (unregistering): Port device team_slave_0 removed [ 271.281817][ T5879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.001815][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.322518][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.641753][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.963525][ T5835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog