last executing test programs: 1m15.771657917s ago: executing program 1 (id=1099): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x48844) 1m4.674722503s ago: executing program 1 (id=1099): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x48844) 50.080273329s ago: executing program 1 (id=1099): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x48844) 32.631723538s ago: executing program 1 (id=1099): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x48844) 17.109911132s ago: executing program 1 (id=1099): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x48844) 8.900310017s ago: executing program 2 (id=2053): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc0}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}]}], {0x6b, 0x11, 0x1, 0x24, 0x0, {0x2}}}, 0x94}}, 0x0) 8.754311658s ago: executing program 4 (id=2055): openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0xa0042, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x28, 0x5, 0xa) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000580)=0x10, 0x80000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x1, [], 0x0, 0xf2f0540c6a304b27, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @dev, @private0, @local, @loopback, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast2, @ipv4, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local]}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 8.727796739s ago: executing program 2 (id=2056): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x5, r2, 0x1, 0xfe, 0x6, @local}, 0x69) r3 = socket$kcm(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e24, 0x16c00, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffff60000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc0621"], 0x294}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r6, 0x0, 0x5, &(0x7f0000000240)={@local, @multicast2, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x3, 0x0, 0x7e, 0x4f04}, 0x3c) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000040), 0x4) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9b4ad0f5", @ANYRES16=r7, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r8, @ANYBLOB="04001780"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}, {&(0x7f00000000c0)}], 0x2}, 0x0) 8.551077976s ago: executing program 4 (id=2057): unshare(0x6a040000) unshare(0x22000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002040)=@newtaction={0xe78, 0x30, 0x25, 0x0, 0x0, {}, [{0xe64, 0x1, [@m_pedit={0xe60, 0x1, 0x0, 0x0, {{0xa}, {0xe34, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x10, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x9f725529ae6b4bf9}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xd4a4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe78}}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='svcsock_new_socket\x00', r1}, 0x18) 8.369126034s ago: executing program 2 (id=2059): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0000000080037040000000200b4fbab514e0236", @ANYBLOB="8304050000000000800012800e00010069703665727370616e0000006c000280140006002001000000000000000000000000000214000600fc020000000000000000000000000001060002000030000014000700fc0200000000000000000000000000000400120005000800", @ANYRES16=0x0, @ANYRES8=r2], 0xa0}, 0x1, 0x0, 0x0, 0x4840}, 0x2081) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4146b4ae9abd9c7a98ba240000001800090000000000000000001c140000fe00", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r5) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r10, 0x400452c9, &(0x7f0000000100)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000000000000000021300000000"], 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x20}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x8000) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="8100080008004c0000540000000000019078ac1e0001ac1414aa441ce9d3ac14141b17e00400fc8e923e1fb82e1a781200183f2500000000000000000100007f0000017f00000100186371ae9b1c0300"/102], 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{0x1}, &(0x7f00000003c0), &(0x7f0000000440)='%ps \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x700, 0x7, 0x400, 0x401, {{0x6, 0x4, 0x0, 0x6, 0x18, 0x67, 0x0, 0x1, 0x4, 0x0, @rand_addr=0x64010101, @remote, {[@ra={0x94, 0x4}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000a40)={0x148, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf60d35681b550377}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4010}, 0x64008404) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 7.687656337s ago: executing program 2 (id=2064): r0 = socket(0x8, 0x4, 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) unshare(0x42000000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005840)=@deltfilter={0x24, 0x2d, 0x200, 0x78bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff3, 0x3}, {0xffff, 0xffff}}}, 0x24}}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000003, 0x12, 0xffffffffffffffff, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sendfile(0xffffffffffffffff, r3, 0x0, 0xffffffff000) bind$can_raw(r1, &(0x7f00000005c0), 0x10) read(r5, &(0x7f00000027c0)=""/4069, 0xfe5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000200000005002dbd7000ffdbdf251d01000005000d0008000000"], 0x1c}}, 0x4040850) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0xffffffff, 0x4) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="06000200"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="050000000400"/28], 0x50) socket$inet(0x2, 0x80001, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) 6.715988744s ago: executing program 2 (id=2068): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000001300)=""/4083, 0x1001}], 0x10000000000000c0, 0x80000000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e00ff"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a00)=@delchain={0x1e0, 0x65, 0x2, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1b4, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_ACT={0x198, 0x1, [@m_sample={0x194, 0x10, 0x0, 0x0, {{0xb}, {0x4}, {0x165, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.498102689s ago: executing program 4 (id=2070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000007140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 6.288097947s ago: executing program 2 (id=2073): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r2, 0x84, 0x80, &(0x7f0000000a40)=""/4067, &(0x7f00000000c0)=0xfe3) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000480)="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") unshare(0x22020600) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/user\x00') ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x5c, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 6.13440745s ago: executing program 4 (id=2075): unshare(0x42000000) socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xfe1d, &(0x7f0000000400), 0x1}}], 0x101d0, 0x101d0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x9, 0x0, 0x48, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @mcast2={0xff, 0x5}}}) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000800)="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", 0x255, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 4.901335921s ago: executing program 3 (id=2080): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xb}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r2, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x6, 0x401, 0x1000, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x20) 4.205545429s ago: executing program 0 (id=2083): writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000009060103000007000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x1, @null, @bpq0, 0xb49, 'syz1\x00', @null, 0xfff, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x701, 0x70bd2a, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x10004891}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r5, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 4.014818211s ago: executing program 0 (id=2084): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000700)={0x16c, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40) 3.980933569s ago: executing program 3 (id=2085): r0 = socket(0x1, 0x80802, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000700)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010300, @local}, @info_reply={0xd, 0x0, 0x0, 0xfffe}}}}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0xa0000000}) r3 = socket$igmp6(0xa, 0x3, 0x2) recvmsg(r3, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f0000000280)={0x20002000}) sendmmsg(r1, &(0x7f0000001040), 0x0, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="af4221fe", @ANYRES16=r5, @ANYBLOB="070628bd7000fcdbdf252d00000005002b00000000000a0001007770616e3000000008002f000000000006000600000000000c0005000200aaaaaaaaaaaa"], 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x810) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000000}, 0xc) 3.806351667s ago: executing program 0 (id=2086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0xa, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="020000000000000000400000", @ANYRES32, @ANYBLOB="0d1ad7995ae13d2acc17ccfbfee3f0469c2dc0aac5bf7c3822fb8ab7a120e4e9df1e9c74601496805a4f68034aa6ed2c2a5eab32ecb8f38de4", @ANYRES64=0x0], 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x1b59, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "fbb21a45d76f90027b0ef0c2e3cfc4ca9906c7112e27f27a2c086f6c9fe7827e", "52aa2145dd2002954f253c51856691c6dae33708d1ee94df87c4d56dc08f30c78ae1cd2bccbf060487bf39897cc11adb", "e98914bc40a34f8703586ff4225a999e345f0a3f58505296e5b5bd91", {"97d3ccb7f2720f3e461e34919a13dcb5", "5280d4da1a9c8fd8899e11b7775d3027"}}}}}}}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf160000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000001440)={@private, @broadcast}, &(0x7f0000000100)=0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x22, 0x2, 0x1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$tipc(r1, &(0x7f0000000e80)={&(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x2}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24040000}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100", 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00'}) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) r7 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r8, 0x0, 0x80) sendmmsg$alg(r7, 0x0, 0x0, 0x20000804) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000100)=0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_batadv\x00', &(0x7f0000000100)=@ethtool_cmd={0x24, 0x2, 0x4, 0xc1, 0xc0, 0x9, 0x2, 0x8, 0x6c, 0xf7, 0x400, 0xfffffc00, 0x3, 0x0, 0x5, 0xfffffffa, [0xc35c, 0x2400]}}) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000001380), 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x14}, 0x18) bind$alg(r1, &(0x7f00000013c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) 3.476859417s ago: executing program 3 (id=2087): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f00000014c0)={&(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x300}, 0x0) 3.476294721s ago: executing program 0 (id=2088): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000001c0)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@mark={0xc, 0x15, {0x35075c, 0x3}}]}, 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001005c07350000000000fc020000000000000000000000000000fe80000000000000000000000000003500000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000034011100ac14140c000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aaff0000000200000002000a00ac1414aa000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000ff020000000000000000000000000001ff020000003500000a000800ac"], 0x184}}, 0x0) 3.313092808s ago: executing program 3 (id=2089): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x894a, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0xfffffffc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xb2041, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x30c) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1}, 0x80000000}], 0x1, 0x62, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007060000", @ANYRES32=r6, @ANYBLOB="000000000000000008001a80100003800c0005800800000000000000100003803000018005000c000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d80500060000000000130002006272696467655f696c6176655f30000007000200293a00000500060000000000080001000000000018000180140004004d2906d0880fc8acc30fe2020f9849675000018014000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af080001000000000008000100000000006000018005000600000000000500060000000000080001000000000005000600000000000c00020073797a746e6c30000800010000000000130002006272696467655f736c6176655f30000014000500e078d277f38ed3a40a448f3f6b6763e8e0000c"], 0x270}}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, 0x0}, 0x20) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x0, 0x0, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 3.295702052s ago: executing program 0 (id=2090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x24, 0x0, {0x2}}}, 0x74}}, 0x0) 2.981373394s ago: executing program 0 (id=2091): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{}, 0x0, 0x0}, 0x20) recvmmsg(0xffffffffffffffff, &(0x7f0000002900), 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r2, &(0x7f0000001d40)=[{{0x0, 0xfdbb, 0x0, 0x0, &(0x7f0000000440)=""/217, 0x118}, 0x218}], 0x40000ee, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x14, 0x0, 0x1, 0x400000, 0x0, {0x54}}, 0x14}}, 0x4004800) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r4, &(0x7f00000007c0)={0x28, 0x0, 0x2710}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@ipv4={""/10, ""/2, @empty}, @in6=@mcast1}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000740)=0xe8) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x10, &(0x7f0000000140)=0x1, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="400000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff00000000000018001280080001006772650062fd028005000a000000000008000500", @ANYRES32=0x0, @ANYBLOB="5efcc94180ec3580fa4b3d20d35f6f8cbfc8fd5b6e2d681ad4dfcde1d9b72acd9d4a6bae7d21c623e5f39201b5a5e3f84eb687239fed040206005649721d4822028d323cbd1ca9809d0c6397d2f17694749edad10a3fc1f792977c092c1cdba1b7811ba6a3d2663a658908c53ccecb8ebb53a3d62aed8e32c3fdc1086e22b6d81172729bcba820fa374d4b64c4a93fb940"], 0x40}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x9, 0xffffffffffffffa6) 2.833876425s ago: executing program 4 (id=2092): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32, @ANYBLOB="0000000414"], 0x40}, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x25ffffff7}, 0xc) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) socket$inet_sctp(0x2, 0x5, 0x84) r2 = getpid() r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000ec0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x20000000, 0xffff21a5, 0x3, 0x4, {0x3, 0x2, 0xfffb, 0xc7, 0x6554, 0x7}, {0x3, 0x0, 0x5, 0x8, 0xd, 0x8}, 0x80, 0x5b2, 0x6}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x4000084) 2.366166461s ago: executing program 1 (id=1099): r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) sendmsg$IPSET_CMD_HEADER(r0, 0x0, 0x48844) 299.881091ms ago: executing program 3 (id=2093): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x40}, 0xc) getsockname$packet(r2, 0x0, &(0x7f0000000200)) listen(r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000180)={0x5}, 0x1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$sock_buf(r3, 0x1, 0x37, &(0x7f00000010c0)=""/4096, &(0x7f0000000140)=0x1000) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f0000000440)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0xb, &(0x7f00000002c0)=ANY=[@ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x3fe, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x42, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0xfeb6) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000001100)=0x804, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x49, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYRES32=0x0], 0xdc}}, 0x4048000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000062004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000340)={'ip6_vti0\x00', 0x8000}) r6 = epoll_create1(0x80000) r7 = epoll_create1(0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvfrom(r8, 0x0, 0x0, 0x141, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x300, r6, &(0x7f0000000140)={0x30002000}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="b80000000101010400000000000000000500000518000e8006000340000100000c000280050001008800000008001a400000000370000d8008000100ac1414bb1400050000000000000000000100ac1414bb34000380060001004e220000060001004e240000060001004e210000060002004e240000060002004e240000060002004e21000014000400fe8000000000000000000000000000aa08000c40000000040c000f800800014000000006"], 0xb8}, 0x1, 0x0, 0x0, 0x20000000}, 0x44881) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x8001) 257.420638ms ago: executing program 4 (id=2094): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0xfff, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) socket$packet(0x11, 0x3, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2689064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 3 (id=2095): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="ac1414bb0a0101010100000007"], 0x28) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x40000}}], 0x18}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r5, 0x6) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=@newqdisc={0x1a4, 0x24, 0x8dc5264c06f47bb6, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0xb, 0xfff2}}, [@TCA_STAB={0x160, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x1, 0x0, 0x9, 0x1, 0x80000000, 0x200, 0x1}}, {0x6, 0x2, [0xcc8f]}}, {{0x1c, 0x1, {0x9, 0x1, 0x3e, 0x3, 0x1, 0xc, 0x8, 0x1}}, {0x6}}, {{0x1c, 0x1, {0xaa, 0x0, 0x5, 0x5, 0x0, 0x80000000, 0xfffffff7, 0x3}}, {0xa, 0x2, [0x7fff, 0x6, 0xd064]}}, {{0x1c, 0x1, {0x9, 0xcf, 0xfe01, 0x9, 0x2, 0x0, 0x6, 0x2}}, {0x8, 0x2, [0x4f4, 0x2]}}, {{0x1c, 0x1, {0x8c, 0x9, 0x9, 0x327d, 0x1, 0x5, 0x1, 0x3}}, {0xa, 0x2, [0x0, 0xffff, 0x2]}}, {{0x1c, 0x1, {0x5, 0x7, 0x1, 0x7, 0x2, 0x0, 0x7, 0x5}}, {0xe, 0x2, [0x4, 0x2, 0x5, 0x6, 0x2]}}, {{0x1c, 0x1, {0x4, 0x7, 0x5, 0x3, 0x1, 0x400, 0x3, 0x2}}, {0x8, 0x2, [0x6, 0xfffd]}}, {{0x1c, 0x1, {0x76, 0x7f, 0x6, 0xb, 0x1, 0x5, 0x8, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x3, 0x2, 0xe, 0x1000, 0x2, 0x1732, 0x5, 0x5}}, {0xe, 0x2, [0x1, 0x2, 0x2, 0x101, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8000}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_EGRESS_BLOCK={0xfffffffffffffc9f, 0xe, 0x2}]}, 0x1a4}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @local}, 0x10) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r8, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) ioctl$F2FS_IOC_SEC_TRIM_FILE(r7, 0x4018f514, &(0x7f00000000c0)={0xfff, 0x3}) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.3.1561'. [ 311.319369][T11299] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1561'. [ 311.345906][T11184] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.388169][T11275] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.399374][T11292] lo speed is unknown, defaulting to 1000 [ 311.404815][T11301] netlink: 'syz.2.1563': attribute type 4 has an invalid length. [ 311.456525][T11275] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.541618][T11184] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.572277][T11305] FAULT_INJECTION: forcing a failure. [ 311.572277][T11305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.590096][T11305] CPU: 1 UID: 0 PID: 11305 Comm: syz.2.1565 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 311.590128][T11305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.590141][T11305] Call Trace: [ 311.590149][T11305] [ 311.590158][T11305] dump_stack_lvl+0x241/0x360 [ 311.590199][T11305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.590228][T11305] ? __pfx__printk+0x10/0x10 [ 311.590282][T11305] should_fail_ex+0x424/0x570 [ 311.590320][T11305] _copy_from_user+0x2d/0xb0 [ 311.590344][T11305] generic_map_update_batch+0x53b/0x8e0 [ 311.590387][T11305] ? __pfx_generic_map_update_batch+0x10/0x10 [ 311.590426][T11305] ? __fget_files+0x39d/0x420 [ 311.590461][T11305] ? __fget_files+0x2a/0x420 [ 311.590507][T11305] ? __pfx_generic_map_update_batch+0x10/0x10 [ 311.590533][T11305] bpf_map_do_batch+0x39a/0x660 [ 311.590582][T11305] __sys_bpf+0x3c1/0x8b0 [ 311.590605][T11305] ? __pfx___sys_bpf+0x10/0x10 [ 311.590640][T11305] ? ksys_write+0x275/0x2d0 [ 311.590678][T11305] __x64_sys_bpf+0x7c/0x90 [ 311.590710][T11305] do_syscall_64+0xf3/0x230 [ 311.590735][T11305] ? clear_bhb_loop+0x45/0xa0 [ 311.590760][T11305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.590780][T11305] RIP: 0033:0x7fafa038d169 [ 311.590799][T11305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.590817][T11305] RSP: 002b:00007fafa116c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 311.590840][T11305] RAX: ffffffffffffffda RBX: 00007fafa05a5fa0 RCX: 00007fafa038d169 [ 311.590855][T11305] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 311.590868][T11305] RBP: 00007fafa116c090 R08: 0000000000000000 R09: 0000000000000000 [ 311.590881][T11305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 311.590893][T11305] R13: 0000000000000000 R14: 00007fafa05a5fa0 R15: 00007ffd09b5a868 [ 311.590926][T11305] [ 311.604218][T11275] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.659006][T11306] ipt_ECN: cannot use operation on non-tcp rule [ 311.861967][T11184] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.956052][T11184] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.967774][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 312.013074][T11313] netlink: 'syz.0.1567': attribute type 13 has an invalid length. [ 312.079626][T11316] xt_socket: unknown flags 0x8 [ 312.105312][T11314] syzkaller0: entered allmulticast mode [ 312.118013][ T55] Bluetooth: hci4: command tx timeout [ 312.479685][T11324] __nla_validate_parse: 3 callbacks suppressed [ 312.479709][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1569'. [ 312.503163][T11302] syzkaller0: left allmulticast mode [ 312.997816][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 313.593278][T11310] lo speed is unknown, defaulting to 1000 [ 313.746967][T11330] gre1: entered allmulticast mode [ 314.037878][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 314.085127][T11339] netlink: 'syz.3.1573': attribute type 39 has an invalid length. [ 314.117969][T11338] block nbd0: server does not support multiple connections per device. [ 314.127366][T11338] block nbd0: shutting down sockets [ 314.160098][T11341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1573'. [ 314.174409][T11341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1573'. [ 314.211962][ T55] Bluetooth: hci4: command tx timeout [ 314.233874][T11341] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.244477][T11341] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.252733][T11341] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.261517][T11341] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.270317][T11341] geneve2: entered promiscuous mode [ 314.275759][T11341] geneve2: entered allmulticast mode [ 314.461686][T11184] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 314.530297][T11351] FAULT_INJECTION: forcing a failure. [ 314.530297][T11351] name failslab, interval 1, probability 0, space 0, times 0 [ 314.564324][T11184] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 314.609590][T11351] CPU: 1 UID: 0 PID: 11351 Comm: syz.0.1577 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 314.609622][T11351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.609636][T11351] Call Trace: [ 314.609644][T11351] [ 314.609653][T11351] dump_stack_lvl+0x241/0x360 [ 314.609692][T11351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.609721][T11351] ? __pfx__printk+0x10/0x10 [ 314.609754][T11351] ? __pfx___might_resched+0x10/0x10 [ 314.609785][T11351] should_fail_ex+0x424/0x570 [ 314.609817][T11351] should_failslab+0xac/0x100 [ 314.609848][T11351] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 314.609877][T11351] ? __alloc_skb+0x1c2/0x480 [ 314.609906][T11351] __alloc_skb+0x1c2/0x480 [ 314.609936][T11351] ? __pfx___alloc_skb+0x10/0x10 [ 314.609962][T11351] ? skb_put+0x114/0x1f0 [ 314.609992][T11351] tipc_buf_acquire+0x2b/0xe0 [ 314.610015][T11351] tipc_msg_build+0x8b7/0x1050 [ 314.610057][T11351] ? __pfx_tipc_msg_build+0x10/0x10 [ 314.610077][T11351] ? tipc_group_bc_cong+0x197/0x290 [ 314.610124][T11351] tipc_send_group_bcast+0x88d/0xbe0 [ 314.610169][T11351] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 314.610189][T11351] ? process_measurement+0x1b33/0x1fe0 [ 314.610239][T11351] ? __pfx_woken_wake_function+0x10/0x10 [ 314.610273][T11351] ? __pfx_process_measurement+0x10/0x10 [ 314.610305][T11351] ? tomoyo_check_open_permission+0x209/0x4f0 [ 314.610350][T11351] __tipc_sendmsg+0x367/0x3490 [ 314.610388][T11351] ? __lock_acquire+0xad5/0xd80 [ 314.610411][T11351] ? __pfx___tipc_sendmsg+0x10/0x10 [ 314.610431][T11351] ? __lock_acquire+0xad5/0xd80 [ 314.610466][T11351] ? aa_label_sk_perm+0x4f4/0x6d0 [ 314.610501][T11351] ? 0xffffffffa0000950 [ 314.610519][T11351] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 314.610562][T11351] ? __lock_acquire+0xad5/0xd80 [ 314.610620][T11351] ? __local_bh_enable_ip+0x168/0x200 [ 314.610642][T11351] ? tipc_sendmsg+0x47/0x70 [ 314.610663][T11351] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 314.610682][T11351] ? do_raw_spin_unlock+0x13c/0x8b0 [ 314.610721][T11351] ? __pfx_tipc_sendmsg+0x10/0x10 [ 314.610741][T11351] tipc_sendmsg+0x55/0x70 [ 314.610765][T11351] __sock_sendmsg+0x221/0x270 [ 314.610802][T11351] sock_write_iter+0x2d9/0x3f0 [ 314.610835][T11351] ? __pfx_sock_write_iter+0x10/0x10 [ 314.610879][T11351] ? bpf_lsm_file_permission+0x9/0x10 [ 314.610911][T11351] vfs_write+0x70f/0xd10 [ 314.610943][T11351] ? __pfx_sock_write_iter+0x10/0x10 [ 314.610974][T11351] ? __pfx_vfs_write+0x10/0x10 [ 314.611002][T11351] ? __fget_files+0x2a/0x420 [ 314.611036][T11351] ? __fget_files+0x2a/0x420 [ 314.611079][T11351] ksys_write+0x19d/0x2d0 [ 314.611105][T11351] ? __pfx_ksys_write+0x10/0x10 [ 314.611135][T11351] ? do_syscall_64+0xb6/0x230 [ 314.611163][T11351] do_syscall_64+0xf3/0x230 [ 314.611187][T11351] ? clear_bhb_loop+0x45/0xa0 [ 314.611212][T11351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.611233][T11351] RIP: 0033:0x7f9d6c38d169 [ 314.611251][T11351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.611269][T11351] RSP: 002b:00007f9d6d2d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.611292][T11351] RAX: ffffffffffffffda RBX: 00007f9d6c5a5fa0 RCX: 00007f9d6c38d169 [ 314.611307][T11351] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 314.611329][T11351] RBP: 00007f9d6d2d3090 R08: 0000000000000000 R09: 0000000000000000 [ 314.611342][T11351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 314.611354][T11351] R13: 0000000000000000 R14: 00007f9d6c5a5fa0 R15: 00007ffe76f6a9e8 [ 314.611388][T11351] [ 314.987244][T11184] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 315.001540][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1576'. [ 315.019910][T11355] IPVS: set_ctl: invalid protocol: 136 172.30.1.4:20003 [ 315.073262][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1576'. [ 315.087826][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 315.200560][T11184] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 315.363851][T11184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.389009][T11184] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.440308][T11184] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 315.456546][T11361] netlink: del zone limit has 4 unknown bytes [ 315.470246][T11184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 315.500812][T11357] lo speed is unknown, defaulting to 1000 [ 315.517227][ T9229] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.524473][ T9229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.545439][ T9229] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.552692][ T9229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.056041][T11371] xt_socket: unknown flags 0x8 [ 316.112531][T11184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.127811][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 316.208748][T11376] gre1: entered allmulticast mode [ 316.371268][T11184] veth0_vlan: entered promiscuous mode [ 316.405511][T11348] lo speed is unknown, defaulting to 1000 [ 316.477021][T11184] veth1_vlan: entered promiscuous mode [ 316.618228][T11184] veth0_macvtap: entered promiscuous mode [ 316.652070][T11184] veth1_macvtap: entered promiscuous mode [ 316.704246][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.715656][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.726039][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.736780][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.747009][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.758807][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.769398][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.782619][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1585'. [ 316.792093][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.805970][T11184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.850832][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.883914][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.918288][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.930491][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.941306][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.952263][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.962835][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 316.973404][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.986399][T11184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.024334][T11184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.045464][T11184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.129371][T11184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.145241][T11184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.168291][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 317.320774][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'. [ 317.386511][T11401] netlink: 'syz.0.1587': attribute type 4 has an invalid length. [ 317.433717][T11401] netlink: 'syz.0.1587': attribute type 1 has an invalid length. [ 317.458003][T11401] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1587'. [ 317.481211][T11401] netlink: 'syz.0.1587': attribute type 1 has an invalid length. [ 317.502711][T11404] sch_tbf: burst 1 is lower than device ip6tnl0 mtu (1452) ! [ 317.520605][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1587'. [ 317.583473][T11406] FAULT_INJECTION: forcing a failure. [ 317.583473][T11406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 317.622047][T11406] CPU: 0 UID: 0 PID: 11406 Comm: syz.3.1590 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 317.622080][T11406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.622093][T11406] Call Trace: [ 317.622102][T11406] [ 317.622111][T11406] dump_stack_lvl+0x241/0x360 [ 317.622149][T11406] ? __pfx_dump_stack_lvl+0x10/0x10 [ 317.622180][T11406] ? __pfx__printk+0x10/0x10 [ 317.622223][T11406] should_fail_ex+0x424/0x570 [ 317.622256][T11406] _copy_from_user+0x2d/0xb0 [ 317.622280][T11406] copy_msghdr_from_user+0xb3/0x580 [ 317.622320][T11406] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 317.622349][T11406] ? __fget_files+0x2a/0x420 [ 317.622384][T11406] ? __fget_files+0x2a/0x420 [ 317.622425][T11406] __sys_sendmsg+0x20a/0x360 [ 317.622458][T11406] ? __pfx___sys_sendmsg+0x10/0x10 [ 317.622545][T11406] ? do_syscall_64+0xb6/0x230 [ 317.622573][T11406] do_syscall_64+0xf3/0x230 [ 317.622596][T11406] ? clear_bhb_loop+0x45/0xa0 [ 317.622622][T11406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.622642][T11406] RIP: 0033:0x7f06cc38d169 [ 317.622660][T11406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.622679][T11406] RSP: 002b:00007f06cd243038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.622702][T11406] RAX: ffffffffffffffda RBX: 00007f06cc5a5fa0 RCX: 00007f06cc38d169 [ 317.622717][T11406] RDX: 0000000004000084 RSI: 0000200000000100 RDI: 0000000000000004 [ 317.622731][T11406] RBP: 00007f06cd243090 R08: 0000000000000000 R09: 0000000000000000 [ 317.622744][T11406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.622756][T11406] R13: 0000000000000000 R14: 00007f06cc5a5fa0 R15: 00007ffd17960b68 [ 317.622797][T11406] [ 317.680402][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.944975][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.121810][ T2936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.145514][ T2936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.198073][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 318.407839][T11425] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 318.652441][T11433] xt_socket: unknown flags 0x8 [ 318.765021][T11437] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 318.896965][T11447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1601'. [ 319.183095][T11452] xt_NFQUEUE: number of total queues is 0 [ 319.193775][T11452] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1604'. [ 320.422144][T11464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1609'. [ 320.535706][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1611'. [ 320.589689][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1610'. [ 320.621778][T11473] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1611'. [ 320.645447][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1610'. [ 320.649615][T11473] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1611'. [ 320.673795][T11474] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1610'. [ 321.035847][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 321.045308][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 321.053183][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 321.061403][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 321.074703][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 321.212601][T11490] netlink: 'syz.4.1616': attribute type 10 has an invalid length. [ 321.831896][T11485] lo speed is unknown, defaulting to 1000 [ 321.917166][T11512] xt_socket: unknown flags 0x8 [ 322.288954][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.140342][T11485] chnl_net:caif_netlink_parms(): no params data found [ 323.157826][ T55] Bluetooth: hci4: command tx timeout [ 323.490103][T11540] sctp: [Deprecated]: syz.3.1626 (pid 11540) Use of int in max_burst socket option deprecated. [ 323.490103][T11540] Use struct sctp_assoc_value instead [ 323.582976][T11485] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.610895][T11485] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.632677][T11485] bridge_slave_0: entered allmulticast mode [ 323.653886][T11485] bridge_slave_0: entered promiscuous mode [ 323.669713][T11544] netlink: 'syz.3.1627': attribute type 13 has an invalid length. [ 323.690827][T11485] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.705510][T11485] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.715774][T11485] bridge_slave_1: entered allmulticast mode [ 323.733587][T11485] bridge_slave_1: entered promiscuous mode [ 323.787754][T11544] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.796291][T11544] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.805312][T11544] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.814684][T11544] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.886692][T11530] lo speed is unknown, defaulting to 1000 [ 323.921200][T11485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.981215][T11485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.064145][T11549] __nla_validate_parse: 2 callbacks suppressed [ 324.064168][T11549] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1628'. [ 324.171766][T11485] team0: Port device team_slave_0 added [ 324.229182][T11485] team0: Port device team_slave_1 added [ 324.393552][T11534] lo speed is unknown, defaulting to 1000 [ 324.397729][T11485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.407060][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.453424][T11485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.516377][T11485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.538886][T11485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.574615][T11485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.680528][T11553] syzkaller1: entered promiscuous mode [ 324.689478][T11553] syzkaller1: entered allmulticast mode [ 324.823282][T11485] hsr_slave_0: entered promiscuous mode [ 324.831062][T11485] hsr_slave_1: entered promiscuous mode [ 324.837571][T11485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.865331][T11485] Cannot create hsr debugfs directory [ 324.965234][T11560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1631'. [ 325.098757][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1631'. [ 325.237917][ T55] Bluetooth: hci4: command tx timeout [ 325.391197][T11485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.558689][T11485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.700667][T11485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.735533][T11582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 325.803123][T11485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.145281][T11485] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 326.193287][T11485] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 326.215951][T11485] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 326.244413][T11485] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 326.443584][T11485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.503310][T11485] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.564689][ T2936] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.571939][ T2936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.618604][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.625816][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.639383][T11589] lo speed is unknown, defaulting to 1000 [ 326.668642][T11598] batman_adv: batadv0: Adding interface: dummy0 [ 326.675067][T11598] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.700936][T11598] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 326.883856][T11485] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.011215][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1648'. [ 327.185449][T11620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1649'. [ 327.302144][T11485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.318173][ T55] Bluetooth: hci4: command tx timeout [ 327.445426][T11485] veth0_vlan: entered promiscuous mode [ 327.478930][T11485] veth1_vlan: entered promiscuous mode [ 327.576061][T11485] veth0_macvtap: entered promiscuous mode [ 327.613079][T11485] veth1_macvtap: entered promiscuous mode [ 327.688171][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.728148][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.762420][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.782023][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.822451][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.856113][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.915759][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.967992][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.991298][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.039280][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.052024][T11485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.112282][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.145310][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.156371][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.171264][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.196633][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.214323][T11682] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 328.247319][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.257320][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.271938][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.282467][T11485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.314491][T11485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.352816][T11485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.457300][T11485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.500545][T11485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.542721][T11485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.581964][T11485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.128721][T11686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.178104][T11686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.325382][T11707] lo speed is unknown, defaulting to 1000 [ 329.362253][T11674] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.378206][T11674] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.400471][ T55] Bluetooth: hci4: command tx timeout [ 329.954051][T11726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1664'. [ 330.455440][T11715] lo speed is unknown, defaulting to 1000 [ 332.024016][T11746] netlink: 'syz.4.1672': attribute type 1 has an invalid length. [ 332.033935][T11746] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1672'. [ 332.257934][T11753] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1676'. [ 332.468673][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 332.478656][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 332.487563][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 332.489816][T11758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 332.516994][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 332.550238][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 332.963895][T11751] lo speed is unknown, defaulting to 1000 [ 333.956738][T11757] lo speed is unknown, defaulting to 1000 [ 334.399713][T11800] No such timeout policy "syz0" [ 334.523909][T11809] x_tables: duplicate underflow at hook 1 [ 334.542413][T11808] sit0: entered promiscuous mode [ 334.552389][T11808] netlink: 'syz.2.1692': attribute type 1 has an invalid length. [ 334.590702][T11808] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1692'. [ 334.606638][T11813] netlink: 'syz.0.1693': attribute type 11 has an invalid length. [ 334.617408][ T55] Bluetooth: hci4: command tx timeout [ 334.767815][T11815] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1694'. [ 334.805628][T11818] FAULT_INJECTION: forcing a failure. [ 334.805628][T11818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.865036][T11818] CPU: 1 UID: 0 PID: 11818 Comm: syz.2.1695 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 334.865070][T11818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.865083][T11818] Call Trace: [ 334.865092][T11818] [ 334.865101][T11818] dump_stack_lvl+0x241/0x360 [ 334.865141][T11818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.865170][T11818] ? __pfx__printk+0x10/0x10 [ 334.865212][T11818] should_fail_ex+0x424/0x570 [ 334.865244][T11818] _copy_from_user+0x2d/0xb0 [ 334.865267][T11818] generic_map_update_batch+0x59f/0x8e0 [ 334.865311][T11818] ? __pfx_generic_map_update_batch+0x10/0x10 [ 334.865337][T11818] ? __fget_files+0x39d/0x420 [ 334.865368][T11818] ? __fget_files+0x2a/0x420 [ 334.865409][T11818] ? __pfx_generic_map_update_batch+0x10/0x10 [ 334.865435][T11818] bpf_map_do_batch+0x39a/0x660 [ 334.865465][T11818] __sys_bpf+0x3c1/0x8b0 [ 334.865488][T11818] ? __pfx___sys_bpf+0x10/0x10 [ 334.865523][T11818] ? ksys_write+0x275/0x2d0 [ 334.865561][T11818] __x64_sys_bpf+0x7c/0x90 [ 334.865593][T11818] do_syscall_64+0xf3/0x230 [ 334.865618][T11818] ? clear_bhb_loop+0x45/0xa0 [ 334.865643][T11818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.865674][T11818] RIP: 0033:0x7fafa038d169 [ 334.865693][T11818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.865710][T11818] RSP: 002b:00007fafa116c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.865733][T11818] RAX: ffffffffffffffda RBX: 00007fafa05a5fa0 RCX: 00007fafa038d169 [ 334.865748][T11818] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 334.865762][T11818] RBP: 00007fafa116c090 R08: 0000000000000000 R09: 0000000000000000 [ 334.865775][T11818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 334.865787][T11818] R13: 0000000000000000 R14: 00007fafa05a5fa0 R15: 00007ffd09b5a868 [ 334.865821][T11818] [ 335.165842][T11757] chnl_net:caif_netlink_parms(): no params data found [ 335.529601][T11846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 335.567266][T11757] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.574779][T11757] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.578323][T11847] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 335.582302][T11757] bridge_slave_0: entered allmulticast mode [ 335.597947][T11757] bridge_slave_0: entered promiscuous mode [ 335.608605][T11757] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.627107][T11757] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.648883][ T55] block nbd0: Receive control failed (result -107) [ 335.658132][T11757] bridge_slave_1: entered allmulticast mode [ 335.675733][T11757] bridge_slave_1: entered promiscuous mode [ 335.704584][T11854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1704'. [ 335.818618][T11846] nbd0: detected capacity change from 0 to 32 [ 335.831303][ T5847] block nbd0: Dead connection, failed to find a fallback [ 335.839665][ T5847] block nbd0: shutting down sockets [ 335.850863][T11757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.860185][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.881923][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 335.882633][T11757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.908160][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.957767][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 335.967922][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.987268][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 336.024819][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.062952][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 336.096381][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.126682][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 336.146290][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.174771][T11757] team0: Port device team_slave_0 added [ 336.188912][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 336.196914][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.238843][T11757] team0: Port device team_slave_1 added [ 336.260088][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 336.288429][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.311746][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 336.337459][T11877] FAULT_INJECTION: forcing a failure. [ 336.337459][T11877] name failslab, interval 1, probability 0, space 0, times 0 [ 336.358028][ T5847] ldm_validate_partition_table(): Disk read failed. [ 336.388180][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.415338][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 336.418661][T11877] CPU: 1 UID: 0 PID: 11877 Comm: syz.0.1710 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 336.418694][T11877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.418709][T11877] Call Trace: [ 336.418718][T11877] [ 336.418728][T11877] dump_stack_lvl+0x241/0x360 [ 336.418769][T11877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.418803][T11877] ? __pfx__printk+0x10/0x10 [ 336.418839][T11877] ? __pfx___might_resched+0x10/0x10 [ 336.418872][T11877] should_fail_ex+0x424/0x570 [ 336.418906][T11877] should_failslab+0xac/0x100 [ 336.418940][T11877] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 336.418972][T11877] ? __alloc_skb+0x1c2/0x480 [ 336.419004][T11877] __alloc_skb+0x1c2/0x480 [ 336.419037][T11877] ? __pfx___alloc_skb+0x10/0x10 [ 336.419065][T11877] ? skb_put+0x114/0x1f0 [ 336.419097][T11877] tipc_buf_acquire+0x2b/0xe0 [ 336.419121][T11877] tipc_msg_build+0x8b7/0x1050 [ 336.419166][T11877] ? __pfx_tipc_msg_build+0x10/0x10 [ 336.419189][T11877] ? tipc_group_bc_cong+0x197/0x290 [ 336.419229][T11877] ? remove_wait_queue+0x33/0x130 [ 336.419280][T11877] tipc_send_group_bcast+0x88d/0xbe0 [ 336.419328][T11877] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 336.419350][T11877] ? process_measurement+0x1b33/0x1fe0 [ 336.419404][T11877] ? __pfx_woken_wake_function+0x10/0x10 [ 336.419440][T11877] ? __pfx_process_measurement+0x10/0x10 [ 336.419475][T11877] ? tomoyo_check_open_permission+0x209/0x4f0 [ 336.419514][T11877] __tipc_sendmsg+0x367/0x3490 [ 336.419555][T11877] ? __lock_acquire+0xad5/0xd80 [ 336.419580][T11877] ? __pfx___tipc_sendmsg+0x10/0x10 [ 336.419602][T11877] ? __lock_acquire+0xad5/0xd80 [ 336.419641][T11877] ? aa_label_sk_perm+0x4f4/0x6d0 [ 336.419679][T11877] ? 0xffffffffa0000950 [ 336.419700][T11877] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 336.419746][T11877] ? __lock_acquire+0xad5/0xd80 [ 336.419803][T11877] ? __local_bh_enable_ip+0x168/0x200 [ 336.419826][T11877] ? tipc_sendmsg+0x47/0x70 [ 336.419849][T11877] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 336.419869][T11877] ? do_raw_spin_unlock+0x13c/0x8b0 [ 336.419912][T11877] ? __pfx_tipc_sendmsg+0x10/0x10 [ 336.419934][T11877] tipc_sendmsg+0x55/0x70 [ 336.419959][T11877] __sock_sendmsg+0x221/0x270 [ 336.419998][T11877] sock_write_iter+0x2d9/0x3f0 [ 336.420034][T11877] ? __pfx_sock_write_iter+0x10/0x10 [ 336.420081][T11877] ? bpf_lsm_file_permission+0x9/0x10 [ 336.420116][T11877] vfs_write+0x70f/0xd10 [ 336.420149][T11877] ? __pfx_sock_write_iter+0x10/0x10 [ 336.420184][T11877] ? __pfx_vfs_write+0x10/0x10 [ 336.420213][T11877] ? __fget_files+0x2a/0x420 [ 336.420251][T11877] ? __fget_files+0x2a/0x420 [ 336.420300][T11877] ksys_write+0x19d/0x2d0 [ 336.420329][T11877] ? __pfx_ksys_write+0x10/0x10 [ 336.420361][T11877] ? do_syscall_64+0xb6/0x230 [ 336.420390][T11877] do_syscall_64+0xf3/0x230 [ 336.420415][T11877] ? clear_bhb_loop+0x45/0xa0 [ 336.420443][T11877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.420464][T11877] RIP: 0033:0x7f9d6c38d169 [ 336.420484][T11877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.420502][T11877] RSP: 002b:00007f9d6d2d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 336.420527][T11877] RAX: ffffffffffffffda RBX: 00007f9d6c5a5fa0 RCX: 00007f9d6c38d169 [ 336.420543][T11877] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 336.420557][T11877] RBP: 00007f9d6d2d3090 R08: 0000000000000000 R09: 0000000000000000 [ 336.420571][T11877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.420583][T11877] R13: 0000000000000000 R14: 00007f9d6c5a5fa0 R15: 00007ffe76f6a9e8 [ 336.420619][T11877] [ 336.688283][ T55] Bluetooth: hci4: command tx timeout [ 336.705802][ T5847] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.813350][T11757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.828629][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1712'. [ 336.838061][T11757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.838107][T11757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.876945][ T5847] Buffer I/O error on dev nbd0, logical block 0, async page read [ 336.886132][ T5847] Dev nbd0: unable to read RDB block 0 [ 336.893997][ T5847] nbd0: unable to read partition table [ 336.906509][ T5847] ldm_validate_partition_table(): Disk read failed. [ 336.929634][ T5847] Dev nbd0: unable to read RDB block 0 [ 336.935935][ T5847] nbd0: unable to read partition table [ 336.960570][T11882] FAULT_INJECTION: forcing a failure. [ 336.960570][T11882] name failslab, interval 1, probability 0, space 0, times 0 [ 336.995772][T11882] CPU: 0 UID: 0 PID: 11882 Comm: syz.4.1712 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 336.995807][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.995820][T11882] Call Trace: [ 336.995829][T11882] [ 336.995838][T11882] dump_stack_lvl+0x241/0x360 [ 336.995876][T11882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.995906][T11882] ? __pfx__printk+0x10/0x10 [ 336.995940][T11882] ? __pfx___might_resched+0x10/0x10 [ 336.995970][T11882] should_fail_ex+0x424/0x570 [ 336.996002][T11882] should_failslab+0xac/0x100 [ 336.996033][T11882] __kmalloc_noprof+0xdf/0x4d0 [ 336.996061][T11882] ? __alloc_workqueue+0x11c/0x1bc0 [ 336.996096][T11882] __alloc_workqueue+0x11c/0x1bc0 [ 336.996123][T11882] ? __kasan_kmalloc+0x9d/0xb0 [ 336.996145][T11882] ? __kmalloc_cache_noprof+0x236/0x370 [ 336.996172][T11882] ? register_netdevice+0x59a/0x1b80 [ 336.996197][T11882] ? bond_newlink+0x5e/0xb0 [ 336.996220][T11882] ? rtnl_newlink_create+0x3a1/0xc30 [ 336.996241][T11882] ? rtnl_newlink+0x18b0/0x1fe0 [ 336.996259][T11882] ? rtnetlink_rcv_msg+0x80f/0xd70 [ 336.996283][T11882] ? __lock_acquire+0xad5/0xd80 [ 336.996310][T11882] alloc_workqueue+0xd8/0x210 [ 336.996343][T11882] ? net_generic+0x14b/0x240 [ 336.996369][T11882] ? __pfx_alloc_workqueue+0x10/0x10 [ 336.996400][T11882] ? net_generic+0x1f/0x240 [ 336.996427][T11882] ? net_generic+0x1f/0x240 [ 336.996456][T11882] bond_init+0xd7/0x8b0 [ 336.996486][T11882] ? __pfx_bond_init+0x10/0x10 [ 336.996514][T11882] ? __kasan_kmalloc+0x9d/0xb0 [ 336.996539][T11882] ? __kmalloc_cache_noprof+0x236/0x370 [ 336.996574][T11882] register_netdevice+0x6df/0x1b80 [ 336.996603][T11882] ? alloc_netdev_mqs+0xce7/0x1210 [ 336.996633][T11882] ? rcu_is_watching+0x15/0xb0 [ 336.996658][T11882] ? validate_linkmsg+0x82a/0xa40 [ 336.996685][T11882] ? __pfx_bond_changelink+0x10/0x10 [ 336.996720][T11882] ? __pfx_register_netdevice+0x10/0x10 [ 336.996758][T11882] ? rtnl_create_link+0xb3f/0xea0 [ 336.996793][T11882] bond_newlink+0x5e/0xb0 [ 336.996817][T11882] ? __pfx_bond_newlink+0x10/0x10 [ 336.996843][T11882] rtnl_newlink_create+0x3a1/0xc30 [ 336.996868][T11882] ? __mutex_lock+0xbe3/0x10c0 [ 336.996903][T11882] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 336.996931][T11882] ? __pfx___mutex_lock+0x10/0x10 [ 336.996966][T11882] ? ns_capable+0x8a/0xf0 [ 336.996991][T11882] rtnl_newlink+0x18b0/0x1fe0 [ 336.997035][T11882] ? __pfx_rtnl_newlink+0x10/0x10 [ 336.997053][T11882] ? unwind_get_return_address+0x4d/0x90 [ 336.997081][T11882] ? arch_stack_walk+0xff/0x150 [ 336.997113][T11882] ? __lock_acquire+0xad5/0xd80 [ 336.997142][T11882] ? __lock_acquire+0xad5/0xd80 [ 336.997184][T11882] ? __lock_acquire+0xad5/0xd80 [ 336.997227][T11882] ? is_bpf_text_address+0x26/0x2a0 [ 336.997254][T11882] ? 0xffffffffa0000950 [ 336.997275][T11882] ? is_bpf_text_address+0x288/0x2a0 [ 336.997297][T11882] ? is_bpf_text_address+0x26/0x2a0 [ 336.997322][T11882] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 336.997353][T11882] ? kernel_text_address+0xa7/0xe0 [ 336.997386][T11882] ? __kernel_text_address+0xd/0x40 [ 336.997425][T11882] ? aa_get_newest_label+0x101/0x6f0 [ 336.997462][T11882] ? __lock_acquire+0xad5/0xd80 [ 336.997517][T11882] ? __pfx_rtnl_newlink+0x10/0x10 [ 336.997540][T11882] rtnetlink_rcv_msg+0x80f/0xd70 [ 336.997559][T11882] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 336.997589][T11882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.997607][T11882] ? __lock_acquire+0xad5/0xd80 [ 336.997646][T11882] netlink_rcv_skb+0x208/0x480 [ 336.997670][T11882] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 336.997694][T11882] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 336.997735][T11882] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.997760][T11882] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.997785][T11882] netlink_unicast+0x7f8/0x9a0 [ 336.997828][T11882] ? __pfx_netlink_unicast+0x10/0x10 [ 336.997861][T11882] ? skb_put+0x114/0x1f0 [ 336.997891][T11882] netlink_sendmsg+0x8c3/0xcd0 [ 336.997928][T11882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.997956][T11882] ? aa_sock_msg_perm+0x91/0x160 [ 336.997991][T11882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.998010][T11882] __sock_sendmsg+0x221/0x270 [ 336.998046][T11882] ____sys_sendmsg+0x523/0x860 [ 336.998083][T11882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.998107][T11882] ? __fget_files+0x2a/0x420 [ 336.998142][T11882] ? __fget_files+0x2a/0x420 [ 336.998184][T11882] __sys_sendmsg+0x271/0x360 [ 336.998218][T11882] ? __pfx___sys_sendmsg+0x10/0x10 [ 336.998310][T11882] ? do_syscall_64+0xb6/0x230 [ 336.998338][T11882] do_syscall_64+0xf3/0x230 [ 336.998362][T11882] ? clear_bhb_loop+0x45/0xa0 [ 336.998388][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.998409][T11882] RIP: 0033:0x7fd97c98d169 [ 336.998428][T11882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.998446][T11882] RSP: 002b:00007fd97d874038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.998469][T11882] RAX: ffffffffffffffda RBX: 00007fd97cba5fa0 RCX: 00007fd97c98d169 [ 336.998486][T11882] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 336.998506][T11882] RBP: 00007fd97d874090 R08: 0000000000000000 R09: 0000000000000000 [ 336.998520][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 336.998533][T11882] R13: 0000000000000000 R14: 00007fd97cba5fa0 R15: 00007fff1da12a98 [ 336.998568][T11882] [ 337.552335][T11757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.559680][T11757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.587298][T11757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.734313][T11757] hsr_slave_0: entered promiscuous mode [ 337.741483][T11757] hsr_slave_1: entered promiscuous mode [ 337.748000][T11757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.755596][T11757] Cannot create hsr debugfs directory [ 337.857169][T11892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1717'. [ 337.906680][T11888] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1715'. [ 337.940088][T11888] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1715'. [ 337.949589][T11888] netlink: 'syz.2.1715': attribute type 5 has an invalid length. [ 337.950362][T11872] lo speed is unknown, defaulting to 1000 [ 337.957333][T11888] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1715'. [ 338.068553][T11890] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1716'. [ 338.487505][T11911] ipt_REJECT: TCP_RESET invalid for non-tcp [ 338.560577][T11914] netlink: 'syz.2.1723': attribute type 9 has an invalid length. [ 338.588098][T11914] netlink: 150828 bytes leftover after parsing attributes in process `syz.2.1723'. [ 338.619723][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1724'. [ 338.760185][ T55] Bluetooth: hci4: command tx timeout [ 338.830127][T11757] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.967043][T11757] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.085861][T11757] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.205709][T11757] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.340033][T11940] FAULT_INJECTION: forcing a failure. [ 339.340033][T11940] name failslab, interval 1, probability 0, space 0, times 0 [ 339.384235][T11940] CPU: 0 UID: 0 PID: 11940 Comm: syz.0.1734 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 339.384269][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.384283][T11940] Call Trace: [ 339.384292][T11940] [ 339.384302][T11940] dump_stack_lvl+0x241/0x360 [ 339.384341][T11940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.384371][T11940] ? __pfx__printk+0x10/0x10 [ 339.384405][T11940] ? __pfx___might_resched+0x10/0x10 [ 339.384436][T11940] should_fail_ex+0x424/0x570 [ 339.384469][T11940] should_failslab+0xac/0x100 [ 339.384501][T11940] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 339.384531][T11940] ? __alloc_skb+0x1c2/0x480 [ 339.384561][T11940] __alloc_skb+0x1c2/0x480 [ 339.384592][T11940] ? __pfx___alloc_skb+0x10/0x10 [ 339.384630][T11940] ? netlink_autobind+0xd6/0x2f0 [ 339.384651][T11940] ? netlink_autobind+0x2b0/0x2f0 [ 339.384679][T11940] netlink_sendmsg+0x638/0xcd0 [ 339.384714][T11940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.384741][T11940] ? aa_sock_msg_perm+0x91/0x160 [ 339.384777][T11940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.384797][T11940] __sock_sendmsg+0x221/0x270 [ 339.384832][T11940] ____sys_sendmsg+0x523/0x860 [ 339.384868][T11940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.384891][T11940] ? __fget_files+0x2a/0x420 [ 339.384925][T11940] ? __fget_files+0x2a/0x420 [ 339.384965][T11940] __sys_sendmsg+0x271/0x360 [ 339.384997][T11940] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.385087][T11940] ? do_syscall_64+0xb6/0x230 [ 339.385115][T11940] do_syscall_64+0xf3/0x230 [ 339.385138][T11940] ? clear_bhb_loop+0x45/0xa0 [ 339.385163][T11940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.385183][T11940] RIP: 0033:0x7f9d6c38d169 [ 339.385201][T11940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.385219][T11940] RSP: 002b:00007f9d6d2d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.385241][T11940] RAX: ffffffffffffffda RBX: 00007f9d6c5a5fa0 RCX: 00007f9d6c38d169 [ 339.385257][T11940] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 339.385270][T11940] RBP: 00007f9d6d2d3090 R08: 0000000000000000 R09: 0000000000000000 [ 339.385284][T11940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.385296][T11940] R13: 0000000000000000 R14: 00007f9d6c5a5fa0 R15: 00007ffe76f6a9e8 [ 339.385328][T11940] [ 339.840076][T11757] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 339.864659][T11757] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 339.885088][T11757] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 339.901665][T11757] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.943843][T11956] syzkaller1: entered promiscuous mode [ 339.962056][T11956] syzkaller1: entered allmulticast mode [ 340.393893][T11757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.507462][T11757] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.574565][T11674] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.581804][T11674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.641713][T11683] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.648989][T11683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.717529][T11983] __nla_validate_parse: 4 callbacks suppressed [ 340.717551][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1748'. [ 340.845454][ T55] Bluetooth: hci4: command tx timeout [ 340.913513][T11985] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1749'. [ 340.936268][T11985] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1749'. [ 341.053706][T11985] netlink: 'syz.3.1749': attribute type 12 has an invalid length. [ 341.345249][T11757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.394152][T12006] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1755'. [ 341.519366][T11757] veth0_vlan: entered promiscuous mode [ 341.587305][T11757] veth1_vlan: entered promiscuous mode [ 341.715667][T11757] veth0_macvtap: entered promiscuous mode [ 341.773165][T11757] veth1_macvtap: entered promiscuous mode [ 341.836817][T12013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1758'. [ 341.838886][T12009] xt_NFQUEUE: number of total queues is 0 [ 341.889617][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.909734][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.935250][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.966685][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.977346][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 341.998859][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.020592][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.041815][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.062704][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.083409][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.107813][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 342.129755][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.155236][T11757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.232732][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.262184][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.283355][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.306331][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.326966][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.349323][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.369518][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.388273][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.407755][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.428655][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.449338][T11757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 342.469721][T11757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 342.492545][T11757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.586902][T11757] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.617460][T11757] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.645988][T11757] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.665589][T11757] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.710624][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1763'. [ 342.974692][T12048] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1768'. [ 343.059592][T11689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.067474][T11689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.186846][T11677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.215677][T11677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.442596][T12055] xt_socket: unknown flags 0x8 [ 343.905355][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1767'. [ 344.554194][T12045] lo speed is unknown, defaulting to 1000 [ 344.572346][T12065] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 344.574477][T12066] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 344.722889][T12071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1774'. [ 345.633298][T12079] syzkaller0: Caught tx_queue_len zero misconfig [ 346.479284][T12092] FAULT_INJECTION: forcing a failure. [ 346.479284][T12092] name failslab, interval 1, probability 0, space 0, times 0 [ 346.492034][T12092] CPU: 1 UID: 0 PID: 12092 Comm: syz.3.1780 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 346.492064][T12092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 346.492078][T12092] Call Trace: [ 346.492088][T12092] [ 346.492097][T12092] dump_stack_lvl+0x241/0x360 [ 346.492136][T12092] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.492166][T12092] ? __pfx__printk+0x10/0x10 [ 346.492202][T12092] ? __lock_acquire+0xad5/0xd80 [ 346.492229][T12092] should_fail_ex+0x424/0x570 [ 346.492261][T12092] should_failslab+0xac/0x100 [ 346.492292][T12092] kmem_cache_alloc_noprof+0x78/0x390 [ 346.492319][T12092] ? skb_clone+0x20c/0x390 [ 346.492352][T12092] skb_clone+0x20c/0x390 [ 346.492384][T12092] bpf_clone_redirect+0xab/0x3d0 [ 346.492425][T12092] bpf_prog_6893982b85ceadf7+0x5f/0x64 [ 346.492446][T12092] ? unwind_get_return_address+0x4d/0x90 [ 346.492506][T12092] ? ktime_get+0x3e/0x200 [ 346.492533][T12092] ? seqcount_lockdep_reader_access+0x159/0x230 [ 346.492561][T12092] ? lockdep_hardirqs_on+0x9d/0x150 [ 346.492586][T12092] ? seqcount_lockdep_reader_access+0x1d9/0x230 [ 346.492616][T12092] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 346.492653][T12092] ? bpf_test_run+0x36f/0xa90 [ 346.492672][T12092] ? __pfx___cant_migrate+0x10/0x10 [ 346.492703][T12092] ? read_tsc+0x9/0x20 [ 346.492730][T12092] bpf_test_run+0x4ea/0xa90 [ 346.492758][T12092] ? bpf_test_run+0x36f/0xa90 [ 346.492792][T12092] ? __pfx_bpf_test_run+0x10/0x10 [ 346.492847][T12092] ? __pfx_eth_type_trans+0x10/0x10 [ 346.492877][T12092] ? convert___skb_to_skb+0x41/0x630 [ 346.492902][T12092] bpf_prog_test_run_skb+0xcc3/0x1850 [ 346.492949][T12092] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 346.492967][T12092] ? __fget_files+0x2a/0x420 [ 346.493003][T12092] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 346.493026][T12092] bpf_prog_test_run+0x2e4/0x360 [ 346.493055][T12092] __sys_bpf+0x4ee/0x8b0 [ 346.493079][T12092] ? __pfx___sys_bpf+0x10/0x10 [ 346.493115][T12092] ? ksys_write+0x275/0x2d0 [ 346.493154][T12092] __x64_sys_bpf+0x7c/0x90 [ 346.493187][T12092] do_syscall_64+0xf3/0x230 [ 346.493212][T12092] ? clear_bhb_loop+0x45/0xa0 [ 346.493238][T12092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.493260][T12092] RIP: 0033:0x7f06cc38d169 [ 346.493279][T12092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.493297][T12092] RSP: 002b:00007f06cd243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 346.493320][T12092] RAX: ffffffffffffffda RBX: 00007f06cc5a5fa0 RCX: 00007f06cc38d169 [ 346.493337][T12092] RDX: 000000000000002c RSI: 0000200000000080 RDI: 000000000000000a [ 346.493351][T12092] RBP: 00007f06cd243090 R08: 0000000000000000 R09: 0000000000000000 [ 346.493365][T12092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.493379][T12092] R13: 0000000000000000 R14: 00007f06cc5a5fa0 R15: 00007ffd17960b68 [ 346.493412][T12092] [ 346.795163][T12096] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1779'. [ 347.136514][T12106] xt_socket: unknown flags 0x8 [ 347.322044][T12109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1786'. [ 347.457272][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 347.468135][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 347.476077][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 347.484701][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 347.492627][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.867566][T12116] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1788'. [ 348.977647][T12111] lo speed is unknown, defaulting to 1000 [ 348.998089][T12135] syzkaller0: entered promiscuous mode [ 349.008252][T12135] syzkaller0: entered allmulticast mode [ 349.558221][ T5846] Bluetooth: hci4: command tx timeout [ 349.724060][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1796'. [ 349.931506][T12111] chnl_net:caif_netlink_parms(): no params data found [ 349.969261][T12171] IPVS: Error connecting to the multicast addr [ 350.000113][T12168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1799'. [ 350.095876][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1800'. [ 350.109399][T12171] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.191005][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 350.231448][T12171] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.381070][T12171] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.406555][T12189] xt_socket: unknown flags 0x8 [ 351.062051][T12171] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.219670][T12196] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20001 - 0 [ 351.228553][T12196] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20001 - 0 [ 351.239610][T12196] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20001 - 0 [ 351.248149][T12196] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20001 - 0 [ 351.259563][T12111] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.273673][T12111] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.287116][T12111] bridge_slave_0: entered allmulticast mode [ 351.295412][T12111] bridge_slave_0: entered promiscuous mode [ 351.306227][T12111] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.336332][T12111] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.358253][T12111] bridge_slave_1: entered allmulticast mode [ 351.377825][T12111] bridge_slave_1: entered promiscuous mode [ 351.442294][T12204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 351.521790][T12111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.578558][T12171] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.586922][T12211] netlink: 216 bytes leftover after parsing attributes in process `syz.3.1810'. [ 351.605793][T12111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.606736][T12211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1810'. [ 351.630101][T12171] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.638964][ T5846] Bluetooth: hci4: command tx timeout [ 351.679842][T12171] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.700627][T12171] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.755778][T12111] team0: Port device team_slave_0 added [ 351.788911][T12111] team0: Port device team_slave_1 added [ 351.864302][T12218] netlink: 'syz.2.1813': attribute type 10 has an invalid length. [ 351.904396][T12218] macvlan0: entered promiscuous mode [ 351.919088][T12220] __nla_validate_parse: 1 callbacks suppressed [ 351.919120][T12220] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1815'. [ 351.945537][T12218] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 351.955467][T12111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.966554][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.034460][T12111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.086504][T12111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.101908][T12111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.139774][T12111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.288734][T12232] xt_socket: unknown flags 0x8 [ 352.324758][T12111] hsr_slave_0: entered promiscuous mode [ 352.354850][T12234] netlink: 'syz.2.1821': attribute type 11 has an invalid length. [ 352.358463][T12111] hsr_slave_1: entered promiscuous mode [ 352.376999][T12111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.384868][T12111] Cannot create hsr debugfs directory [ 352.884682][T12237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1820'. [ 353.533082][T12256] syzkaller0: Caught tx_queue_len zero misconfig [ 353.610751][T12252] wg2: entered promiscuous mode [ 353.615681][T12252] wg2: entered allmulticast mode [ 353.657107][T12266] veth0_to_bridge: entered promiscuous mode [ 353.722227][ T5846] Bluetooth: hci4: command tx timeout [ 353.782867][T12268] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1833'. [ 353.801616][T12268] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1833'. [ 353.811305][T12268] netlink: 'syz.2.1833': attribute type 5 has an invalid length. [ 353.819846][T12268] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1833'. [ 353.822118][T12111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.922451][T12265] veth0_to_bridge: left promiscuous mode [ 354.040984][T12281] xt_socket: unknown flags 0x8 [ 354.056347][T12111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.143580][T12288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 354.155169][T12284] sch_fq: defrate 511 ignored. [ 354.399548][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1842'. [ 354.465313][T12294] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1842'. [ 354.937567][T12111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.116315][T12111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.451075][T12111] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.476017][T12312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'. [ 355.496628][T12111] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.533445][T12111] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.592333][T12111] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.656639][T12316] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1850'. [ 355.684454][T12316] netlink: 'syz.4.1850': attribute type 2 has an invalid length. [ 355.797853][ T5846] Bluetooth: hci4: command tx timeout [ 355.842443][T12111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.866145][T12111] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.895188][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.902437][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.909427][T12323] xt_socket: unknown flags 0x8 [ 356.011357][T11653] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.018595][T11653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.182288][T12320] lo speed is unknown, defaulting to 1000 [ 356.657325][T12324] lo speed is unknown, defaulting to 1000 [ 356.849783][T12111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.271285][T12111] veth0_vlan: entered promiscuous mode [ 357.311093][T12111] veth1_vlan: entered promiscuous mode [ 357.450330][T12111] veth0_macvtap: entered promiscuous mode [ 357.490417][T12111] veth1_macvtap: entered promiscuous mode [ 357.621414][T12356] wg2: entered promiscuous mode [ 357.626342][T12356] wg2: entered allmulticast mode [ 357.662493][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.694989][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.717084][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.728588][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.738521][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.749242][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.761429][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.778287][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.790957][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.802619][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.812875][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.825474][T12364] __nla_validate_parse: 2 callbacks suppressed [ 357.825492][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 357.842181][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.852192][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.865224][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.878462][T12111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 357.904192][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.915880][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.926261][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.937280][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.958936][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.985915][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.996327][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.008681][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.013745][T12369] FAULT_INJECTION: forcing a failure. [ 358.013745][T12369] name failslab, interval 1, probability 0, space 0, times 0 [ 358.019108][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.042817][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.045460][T12369] CPU: 0 UID: 0 PID: 12369 Comm: syz.3.1869 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 358.045492][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 358.045507][T12369] Call Trace: [ 358.045517][T12369] [ 358.045527][T12369] dump_stack_lvl+0x241/0x360 [ 358.045570][T12369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.045611][T12369] ? __pfx__printk+0x10/0x10 [ 358.045648][T12369] ? __pfx___might_resched+0x10/0x10 [ 358.045681][T12369] should_fail_ex+0x424/0x570 [ 358.045717][T12369] should_failslab+0xac/0x100 [ 358.045752][T12369] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 358.045786][T12369] ? __alloc_skb+0x1c2/0x480 [ 358.045818][T12369] __alloc_skb+0x1c2/0x480 [ 358.045850][T12369] ? __pfx___alloc_skb+0x10/0x10 [ 358.045879][T12369] ? netlink_autobind+0xd6/0x2f0 [ 358.045903][T12369] ? netlink_autobind+0x2b0/0x2f0 [ 358.045933][T12369] netlink_sendmsg+0x638/0xcd0 [ 358.045973][T12369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.046002][T12369] ? aa_sock_msg_perm+0x91/0x160 [ 358.046041][T12369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.046063][T12369] __sock_sendmsg+0x221/0x270 [ 358.046103][T12369] ____sys_sendmsg+0x523/0x860 [ 358.046142][T12369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.046169][T12369] ? __fget_files+0x2a/0x420 [ 358.046206][T12369] ? __fget_files+0x2a/0x420 [ 358.046251][T12369] __sys_sendmsg+0x271/0x360 [ 358.046287][T12369] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.046379][T12369] ? do_syscall_64+0xb6/0x230 [ 358.046409][T12369] do_syscall_64+0xf3/0x230 [ 358.046435][T12369] ? clear_bhb_loop+0x45/0xa0 [ 358.046462][T12369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.046485][T12369] RIP: 0033:0x7f06cc38d169 [ 358.046506][T12369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.046527][T12369] RSP: 002b:00007f06cd243038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.046552][T12369] RAX: ffffffffffffffda RBX: 00007f06cc5a5fa0 RCX: 00007f06cc38d169 [ 358.046570][T12369] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000003 [ 358.046591][T12369] RBP: 00007f06cd243090 R08: 0000000000000000 R09: 0000000000000000 [ 358.046607][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.046621][T12369] R13: 0000000000000000 R14: 00007f06cc5a5fa0 R15: 00007ffd17960b68 [ 358.046657][T12369] [ 358.314236][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.324976][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.335331][T12111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 358.346016][T12111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.360977][T12111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.363880][T12371] xt_socket: unknown flags 0x8 [ 358.415068][T12111] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.426677][T12111] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.435580][T12111] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.452125][T12111] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.374150][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1877'. [ 359.496347][T11662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.559953][T11662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.578306][T12393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 359.666261][T11662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.678154][T11662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.847885][T12405] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1879'. [ 360.546228][T12419] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1885'. [ 360.555797][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1885'. [ 360.638850][T12420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1885'. [ 362.205776][T12397] lo speed is unknown, defaulting to 1000 [ 362.314973][T12431] xt_socket: unknown flags 0x8 [ 363.056171][T12429] lo speed is unknown, defaulting to 1000 [ 363.588107][T12434] lo speed is unknown, defaulting to 1000 [ 364.046648][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1890'. [ 364.172268][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1891'. [ 364.307907][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1892'. [ 364.370026][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1893'. [ 364.638045][T12457] xt_NFQUEUE: number of total queues is 0 [ 364.902493][T12459] vlan2: entered allmulticast mode [ 364.913876][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.914524][T12459] batadv0: entered allmulticast mode [ 364.938622][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.962007][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.971911][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.974307][T12470] FAULT_INJECTION: forcing a failure. [ 364.974307][T12470] name failslab, interval 1, probability 0, space 0, times 0 [ 364.993403][T12470] CPU: 1 UID: 0 PID: 12470 Comm: syz.4.1900 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 364.993434][T12470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.993449][T12470] Call Trace: [ 364.993458][T12470] [ 364.993468][T12470] dump_stack_lvl+0x241/0x360 [ 364.993507][T12470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.993538][T12470] ? __pfx__printk+0x10/0x10 [ 364.993565][T12470] ? _raw_spin_unlock_irqrestore+0xde/0x140 [ 364.993605][T12470] ? __pfx___might_resched+0x10/0x10 [ 364.993636][T12470] should_fail_ex+0x424/0x570 [ 364.993669][T12470] should_failslab+0xac/0x100 [ 364.993701][T12470] kmem_cache_alloc_noprof+0x78/0x390 [ 364.993730][T12470] ? alloc_vfsmnt+0x23/0x490 [ 364.993760][T12470] alloc_vfsmnt+0x23/0x490 [ 364.993789][T12470] clone_mnt+0x6b/0xc90 [ 364.993812][T12470] ? do_raw_spin_unlock+0x13c/0x8b0 [ 364.993852][T12470] copy_tree+0x482/0x940 [ 364.993888][T12470] ? copy_mnt_ns+0x185/0x960 [ 364.993921][T12470] copy_mnt_ns+0x185/0x960 [ 364.993962][T12470] ? kmem_cache_alloc_noprof+0x237/0x390 [ 364.993998][T12470] create_new_namespaces+0xd3/0x7b0 [ 364.994028][T12470] ? bpf_lsm_capable+0x9/0x10 [ 364.994052][T12470] ? security_capable+0x7e/0x2d0 [ 364.994088][T12470] unshare_nsproxy_namespaces+0x124/0x180 [ 364.994117][T12470] ksys_unshare+0x5e2/0xad0 [ 364.994152][T12470] ? __pfx_ksys_unshare+0x10/0x10 [ 364.994192][T12470] __x64_sys_unshare+0x38/0x40 [ 364.994218][T12470] do_syscall_64+0xf3/0x230 [ 364.994242][T12470] ? clear_bhb_loop+0x45/0xa0 [ 364.994267][T12470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.994289][T12470] RIP: 0033:0x7fd97c98d169 [ 364.994308][T12470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.994327][T12470] RSP: 002b:00007fd97d874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 364.994349][T12470] RAX: ffffffffffffffda RBX: 00007fd97cba5fa0 RCX: 00007fd97c98d169 [ 364.994365][T12470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 364.994377][T12470] RBP: 00007fd97d874090 R08: 0000000000000000 R09: 0000000000000000 [ 364.994390][T12470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 364.994404][T12470] R13: 0000000000000000 R14: 00007fd97cba5fa0 R15: 00007fff1da12a98 [ 364.994436][T12470] [ 364.995248][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 365.374713][T12473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1901'. [ 365.891427][T12465] lo speed is unknown, defaulting to 1000 [ 365.977038][T12492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1908'. [ 366.046626][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1909'. [ 366.087773][T12494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1909'. [ 366.236280][T12499] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1910'. [ 366.440951][T12508] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1914'. [ 366.591461][T12466] lo speed is unknown, defaulting to 1000 [ 366.752160][T12517] gtp1: entered promiscuous mode [ 366.762460][T12517] gtp1: entered allmulticast mode [ 366.874168][T12517] syz.3.1916 (12517) used greatest stack depth: 17544 bytes left [ 367.318177][ T5846] Bluetooth: hci4: command tx timeout [ 367.465630][T12466] chnl_net:caif_netlink_parms(): no params data found [ 367.800989][T12561] netlink: 'syz.2.1930': attribute type 11 has an invalid length. [ 367.838413][T12466] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.846121][T12466] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.869483][T12466] bridge_slave_0: entered allmulticast mode [ 367.877483][T12466] bridge_slave_0: entered promiscuous mode [ 367.961442][T12466] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.974845][T12466] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.987906][T12466] bridge_slave_1: entered allmulticast mode [ 368.019877][T12466] bridge_slave_1: entered promiscuous mode [ 368.188794][T12466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.226908][T12466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.243210][T12582] nbd: socks must be embedded in a SOCK_ITEM attr [ 368.289680][ T5847] block nbd64: NBD_DISCONNECT [ 368.512654][T12466] team0: Port device team_slave_0 added [ 368.543805][T12466] team0: Port device team_slave_1 added [ 368.640833][T12466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.648960][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.675811][T12466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.700865][T12466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.710011][T12466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.740964][T12466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.144873][T12599] __nla_validate_parse: 3 callbacks suppressed [ 369.144895][T12599] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1940'. [ 369.205188][ T30] audit: type=1800 audit(1744696719.328:7): pid=12599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1940" name="memory.events" dev="tmpfs" ino=2150 res=0 errno=0 [ 369.233033][T12599] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1940'. [ 369.249379][T12604] FAULT_INJECTION: forcing a failure. [ 369.249379][T12604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.397896][ T5846] Bluetooth: hci4: command tx timeout [ 369.439109][T12604] CPU: 0 UID: 0 PID: 12604 Comm: syz.2.1941 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 369.439142][T12604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.439156][T12604] Call Trace: [ 369.439165][T12604] [ 369.439175][T12604] dump_stack_lvl+0x241/0x360 [ 369.439214][T12604] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.439256][T12604] ? __pfx__printk+0x10/0x10 [ 369.439298][T12604] should_fail_ex+0x424/0x570 [ 369.439331][T12604] _copy_from_user+0x2d/0xb0 [ 369.439354][T12604] copy_msghdr_from_user+0xb3/0x580 [ 369.439393][T12604] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 369.439444][T12604] __sys_sendmmsg+0x361/0x7b0 [ 369.439483][T12604] ? __pfx___sys_sendmmsg+0x10/0x10 [ 369.439548][T12604] ? rcu_read_lock_any_held+0xbb/0x160 [ 369.439582][T12604] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 369.439614][T12604] ? vfs_write+0xb29/0xd10 [ 369.439648][T12604] ? ksys_write+0x24e/0x2d0 [ 369.439674][T12604] ? __mutex_unlock_slowpath+0x229/0x800 [ 369.439731][T12604] ? ksys_write+0x275/0x2d0 [ 369.439766][T12604] __x64_sys_sendmmsg+0xa0/0xb0 [ 369.439795][T12604] do_syscall_64+0xf3/0x230 [ 369.439819][T12604] ? clear_bhb_loop+0x45/0xa0 [ 369.439845][T12604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.439866][T12604] RIP: 0033:0x7fafa038d169 [ 369.439884][T12604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.439902][T12604] RSP: 002b:00007fafa114b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 369.439925][T12604] RAX: ffffffffffffffda RBX: 00007fafa05a6080 RCX: 00007fafa038d169 [ 369.439941][T12604] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 369.439956][T12604] RBP: 00007fafa114b090 R08: 0000000000000000 R09: 0000000000000000 [ 369.439970][T12604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.439982][T12604] R13: 0000000000000001 R14: 00007fafa05a6080 R15: 00007ffd09b5a868 [ 369.440015][T12604] [ 369.824244][T12466] hsr_slave_0: entered promiscuous mode [ 369.864200][T12466] hsr_slave_1: entered promiscuous mode [ 369.894360][T12466] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.914978][T12466] Cannot create hsr debugfs directory [ 370.200845][T12622] FAULT_INJECTION: forcing a failure. [ 370.200845][T12622] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.263142][T12622] CPU: 1 UID: 0 PID: 12622 Comm: syz.3.1947 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 370.263176][T12622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 370.263191][T12622] Call Trace: [ 370.263200][T12622] [ 370.263210][T12622] dump_stack_lvl+0x241/0x360 [ 370.263250][T12622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 370.263280][T12622] ? __pfx__printk+0x10/0x10 [ 370.263325][T12622] should_fail_ex+0x424/0x570 [ 370.263358][T12622] _copy_from_iter+0x211/0x1c70 [ 370.263394][T12622] ? __build_skb_around+0x247/0x3d0 [ 370.263424][T12622] ? __alloc_skb+0x2e8/0x480 [ 370.263450][T12622] ? __pfx__copy_from_iter+0x10/0x10 [ 370.263483][T12622] ? __pfx___alloc_skb+0x10/0x10 [ 370.263510][T12622] ? skb_put+0x114/0x1f0 [ 370.263535][T12622] ? tipc_msg_build+0xa7c/0x1050 [ 370.263570][T12622] tipc_msg_build+0x842/0x1050 [ 370.263613][T12622] ? __pfx_tipc_msg_build+0x10/0x10 [ 370.263634][T12622] ? tipc_group_bc_cong+0x197/0x290 [ 370.263673][T12622] ? remove_wait_queue+0x33/0x130 [ 370.263709][T12622] tipc_send_group_bcast+0x88d/0xbe0 [ 370.263754][T12622] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 370.263776][T12622] ? process_measurement+0x1b33/0x1fe0 [ 370.263826][T12622] ? __pfx_woken_wake_function+0x10/0x10 [ 370.263860][T12622] ? __pfx_process_measurement+0x10/0x10 [ 370.263893][T12622] ? tomoyo_check_open_permission+0x209/0x4f0 [ 370.263929][T12622] __tipc_sendmsg+0x367/0x3490 [ 370.263967][T12622] ? __lock_acquire+0xad5/0xd80 [ 370.263991][T12622] ? __pfx___tipc_sendmsg+0x10/0x10 [ 370.264017][T12622] ? __lock_acquire+0xad5/0xd80 [ 370.264052][T12622] ? aa_label_sk_perm+0x4f4/0x6d0 [ 370.264088][T12622] ? 0xffffffffa0000950 [ 370.264107][T12622] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 370.264148][T12622] ? __lock_acquire+0xad5/0xd80 [ 370.264206][T12622] ? __local_bh_enable_ip+0x168/0x200 [ 370.264228][T12622] ? tipc_sendmsg+0x47/0x70 [ 370.264248][T12622] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 370.264267][T12622] ? do_raw_spin_unlock+0x13c/0x8b0 [ 370.264305][T12622] ? __pfx_tipc_sendmsg+0x10/0x10 [ 370.264326][T12622] tipc_sendmsg+0x55/0x70 [ 370.264349][T12622] __sock_sendmsg+0x221/0x270 [ 370.264386][T12622] sock_write_iter+0x2d9/0x3f0 [ 370.264420][T12622] ? __pfx_sock_write_iter+0x10/0x10 [ 370.264464][T12622] ? bpf_lsm_file_permission+0x9/0x10 [ 370.264496][T12622] vfs_write+0x70f/0xd10 [ 370.264528][T12622] ? __pfx_sock_write_iter+0x10/0x10 [ 370.264559][T12622] ? __pfx_vfs_write+0x10/0x10 [ 370.264596][T12622] ? __fget_files+0x2a/0x420 [ 370.264630][T12622] ? __fget_files+0x2a/0x420 [ 370.264671][T12622] ksys_write+0x19d/0x2d0 [ 370.264698][T12622] ? __pfx_ksys_write+0x10/0x10 [ 370.264729][T12622] ? do_syscall_64+0xb6/0x230 [ 370.264756][T12622] do_syscall_64+0xf3/0x230 [ 370.264780][T12622] ? clear_bhb_loop+0x45/0xa0 [ 370.264806][T12622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.264828][T12622] RIP: 0033:0x7f06cc38d169 [ 370.264847][T12622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.264866][T12622] RSP: 002b:00007f06cd243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.264889][T12622] RAX: ffffffffffffffda RBX: 00007f06cc5a5fa0 RCX: 00007f06cc38d169 [ 370.264906][T12622] RDX: 000000000000fdef RSI: 0000200000000040 RDI: 0000000000000005 [ 370.264920][T12622] RBP: 00007f06cd243090 R08: 0000000000000000 R09: 0000000000000000 [ 370.264934][T12622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.264948][T12622] R13: 0000000000000000 R14: 00007f06cc5a5fa0 R15: 00007ffd17960b68 [ 370.264982][T12622] [ 370.706837][T12626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1949'. [ 370.798072][T12626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1949'. [ 370.946600][T12626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.993956][T12613] lo speed is unknown, defaulting to 1000 [ 371.239991][T12640] netlink: 'syz.3.1953': attribute type 32 has an invalid length. [ 371.389790][T12650] ieee802154 phy1 wpan1: encryption failed: -22 [ 371.455294][T12466] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.477801][ T5846] Bluetooth: hci4: command tx timeout [ 371.691819][T12466] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.919036][T12466] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.020147][T12662] sctp: [Deprecated]: syz.0.1960 (pid 12662) Use of int in max_burst socket option. [ 372.020147][T12662] Use struct sctp_assoc_value instead [ 372.044063][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1960'. [ 372.055568][T12663] macvlan3: entered promiscuous mode [ 372.073586][T12663] macvlan3: entered allmulticast mode [ 372.106344][T12667] FAULT_INJECTION: forcing a failure. [ 372.106344][T12667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.128570][T12667] CPU: 0 UID: 0 PID: 12667 Comm: syz.4.1962 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 372.128623][T12667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 372.128650][T12667] Call Trace: [ 372.128659][T12667] [ 372.128669][T12667] dump_stack_lvl+0x241/0x360 [ 372.128708][T12667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.128738][T12667] ? __pfx__printk+0x10/0x10 [ 372.128782][T12667] should_fail_ex+0x424/0x570 [ 372.128815][T12667] _copy_from_user+0x2d/0xb0 [ 372.128839][T12667] generic_map_update_batch+0x59f/0x8e0 [ 372.128883][T12667] ? __pfx_generic_map_update_batch+0x10/0x10 [ 372.128911][T12667] ? __fget_files+0x39d/0x420 [ 372.128940][T12667] ? __fget_files+0x2a/0x420 [ 372.128981][T12667] ? __pfx_generic_map_update_batch+0x10/0x10 [ 372.129007][T12667] bpf_map_do_batch+0x39a/0x660 [ 372.129038][T12667] __sys_bpf+0x3c1/0x8b0 [ 372.129061][T12667] ? __pfx___sys_bpf+0x10/0x10 [ 372.129097][T12667] ? ksys_write+0x275/0x2d0 [ 372.129135][T12667] __x64_sys_bpf+0x7c/0x90 [ 372.129168][T12667] do_syscall_64+0xf3/0x230 [ 372.129192][T12667] ? clear_bhb_loop+0x45/0xa0 [ 372.129218][T12667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.129239][T12667] RIP: 0033:0x7fd97c98d169 [ 372.129258][T12667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.129276][T12667] RSP: 002b:00007fd97d874038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 372.129299][T12667] RAX: ffffffffffffffda RBX: 00007fd97cba5fa0 RCX: 00007fd97c98d169 [ 372.129315][T12667] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 372.129329][T12667] RBP: 00007fd97d874090 R08: 0000000000000000 R09: 0000000000000000 [ 372.129342][T12667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 372.129355][T12667] R13: 0000000000000000 R14: 00007fd97cba5fa0 R15: 00007fff1da12a98 [ 372.129392][T12667] [ 372.132460][T12466] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.236024][T12669] xt_NFQUEUE: number of total queues is 0 [ 372.443942][T12672] FAULT_INJECTION: forcing a failure. [ 372.443942][T12672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.463007][T12672] CPU: 0 UID: 0 PID: 12672 Comm: syz.3.1963 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 372.463040][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 372.463055][T12672] Call Trace: [ 372.463064][T12672] [ 372.463074][T12672] dump_stack_lvl+0x241/0x360 [ 372.463112][T12672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.463143][T12672] ? __pfx__printk+0x10/0x10 [ 372.463186][T12672] should_fail_ex+0x424/0x570 [ 372.463219][T12672] _copy_from_iter+0x211/0x1c70 [ 372.463258][T12672] ? __build_skb_around+0x247/0x3d0 [ 372.463288][T12672] ? __alloc_skb+0x298/0x480 [ 372.463310][T12672] ? __pfx__copy_from_iter+0x10/0x10 [ 372.463345][T12672] ? __pfx___alloc_skb+0x10/0x10 [ 372.463380][T12672] ? skb_put+0x114/0x1f0 [ 372.463409][T12672] netlink_sendmsg+0x73c/0xcd0 [ 372.463447][T12672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.463474][T12672] ? aa_sock_msg_perm+0x91/0x160 [ 372.463511][T12672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.463532][T12672] __sock_sendmsg+0x221/0x270 [ 372.463568][T12672] ____sys_sendmsg+0x523/0x860 [ 372.463606][T12672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.463631][T12672] ? __fget_files+0x2a/0x420 [ 372.463666][T12672] ? __fget_files+0x2a/0x420 [ 372.463708][T12672] __sys_sendmsg+0x271/0x360 [ 372.463741][T12672] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.463829][T12672] ? do_syscall_64+0xb6/0x230 [ 372.463857][T12672] do_syscall_64+0xf3/0x230 [ 372.463881][T12672] ? clear_bhb_loop+0x45/0xa0 [ 372.463907][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.463928][T12672] RIP: 0033:0x7f06cc38d169 [ 372.463946][T12672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.463964][T12672] RSP: 002b:00007f06cd243038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.463988][T12672] RAX: ffffffffffffffda RBX: 00007f06cc5a5fa0 RCX: 00007f06cc38d169 [ 372.464004][T12672] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 372.464019][T12672] RBP: 00007f06cd243090 R08: 0000000000000000 R09: 0000000000000000 [ 372.464033][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.464046][T12672] R13: 0000000000000000 R14: 00007f06cc5a5fa0 R15: 00007ffd17960b68 [ 372.464080][T12672] [ 372.791902][T12676] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1964'. [ 372.896042][T12466] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.925911][T12466] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.985677][T12677] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 101 [ 372.996257][T12466] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 373.063199][T12466] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 373.279497][T12692] IPv6: NLM_F_CREATE should be specified when creating new route [ 373.432963][T12697] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 373.446952][T12466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.515289][T12466] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.532423][T12697] syzkaller0: left promiscuous mode [ 373.543411][T12697] syzkaller0: left allmulticast mode [ 373.558635][ T5846] Bluetooth: hci4: command tx timeout [ 373.571435][T11654] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.578692][T11654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.642905][T11653] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.650269][T11653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.065292][T12703] netlink: 'syz.0.1972': attribute type 16 has an invalid length. [ 374.109613][T12703] netlink: 'syz.0.1972': attribute type 3 has an invalid length. [ 374.148081][T12703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1972'. [ 374.355250][T12713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1974'. [ 374.379092][T12699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1971'. [ 374.392578][T12715] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1975'. [ 374.436438][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1975'. [ 374.486186][T12715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1975'. [ 374.506764][T12716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1974'. [ 374.517506][T12466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.564564][T12716] bridge_slave_1: left allmulticast mode [ 374.579421][T12716] bridge_slave_1: left promiscuous mode [ 374.595620][T12716] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.613313][T12716] bridge_slave_0: left allmulticast mode [ 374.619254][T12716] bridge_slave_0: left promiscuous mode [ 374.633416][T12716] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.858379][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1976'. [ 375.012711][T12466] veth0_vlan: entered promiscuous mode [ 375.070933][T12466] veth1_vlan: entered promiscuous mode [ 375.234244][T12466] veth0_macvtap: entered promiscuous mode [ 375.300223][T12466] veth1_macvtap: entered promiscuous mode [ 375.402922][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.426251][T12731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1981'. [ 375.438115][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.470198][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.506952][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.520847][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.542895][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.561169][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.583582][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.602160][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.623843][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.645045][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.665877][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.689446][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.709993][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.730114][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 375.752898][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.769729][T12466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.799909][T12722] lo speed is unknown, defaulting to 1000 [ 375.891832][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.914922][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.927937][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.947790][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.971486][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 375.983839][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 375.996835][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.007548][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.017448][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.029137][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.085552][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.102833][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.113065][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.131723][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.141714][T12466] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.152461][T12466] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.175946][T12466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.279876][T12466] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.307288][T12466] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.326571][T12466] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.336704][T12466] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.615911][T12734] lo speed is unknown, defaulting to 1000 [ 376.896036][T11662] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.918725][T11662] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.220240][T11653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.251839][T11653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.383821][T12745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 377.865503][T12753] netlink: 'syz.3.1989': attribute type 11 has an invalid length. [ 377.920772][T12757] netlink: 'syz.4.1991': attribute type 1 has an invalid length. [ 378.802156][T12762] lo speed is unknown, defaulting to 1000 [ 379.618652][T12770] bond0: (slave macvlan0): Releasing backup interface [ 379.849686][T12772] xt_NFQUEUE: number of total queues is 0 [ 379.865731][T12770] vlan2: entered allmulticast mode [ 379.897948][T12770] bond0: entered allmulticast mode [ 380.138853][T12785] __nla_validate_parse: 4 callbacks suppressed [ 380.138878][T12785] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1999'. [ 380.365437][T12793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2005'. [ 380.424889][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 380.439712][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 380.448923][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 380.468675][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 380.477831][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 380.574446][T12805] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.765897][T12811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2007'. [ 380.949289][T12816] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2009'. [ 381.100073][T12817] netlink: 'syz.3.2009': attribute type 10 has an invalid length. [ 381.115895][T12820] netlink: 'syz.0.2010': attribute type 3 has an invalid length. [ 381.244078][T12820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2010'. [ 381.276552][T12820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 381.546800][T12798] lo speed is unknown, defaulting to 1000 [ 381.561370][T12830] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2013'. [ 381.571359][T12830] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2013'. [ 381.803627][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'. [ 381.831625][T12841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2017'. [ 381.905559][T12841] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 382.029314][T12798] chnl_net:caif_netlink_parms(): no params data found [ 382.326061][T12798] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.340304][T12798] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.358590][T12798] bridge_slave_0: entered allmulticast mode [ 382.409997][T12798] bridge_slave_0: entered promiscuous mode [ 382.426665][T12798] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.455093][T12798] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.468630][T12798] bridge_slave_1: entered allmulticast mode [ 382.534071][T12798] bridge_slave_1: entered promiscuous mode [ 382.598310][ T5846] Bluetooth: hci4: command tx timeout [ 382.762275][T12798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.795987][T12798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.393554][T12888] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 383.522959][T12884] tipc: Enabling of bearer rejected, failed to enable media [ 383.620427][T12798] team0: Port device team_slave_0 added [ 383.660291][T12798] team0: Port device team_slave_1 added [ 383.732670][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.753050][T12897] FAULT_INJECTION: forcing a failure. [ 383.753050][T12897] name failslab, interval 1, probability 0, space 0, times 0 [ 383.772301][T12897] CPU: 0 UID: 0 PID: 12897 Comm: syz.2.2036 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 383.772333][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 383.772347][T12897] Call Trace: [ 383.772356][T12897] [ 383.772366][T12897] dump_stack_lvl+0x241/0x360 [ 383.772405][T12897] ? __pfx_dump_stack_lvl+0x10/0x10 [ 383.772447][T12897] ? __pfx__printk+0x10/0x10 [ 383.772482][T12897] ? __pfx___might_resched+0x10/0x10 [ 383.772514][T12897] should_fail_ex+0x424/0x570 [ 383.772546][T12897] should_failslab+0xac/0x100 [ 383.772577][T12897] __kmalloc_node_track_caller_noprof+0xe2/0x4d0 [ 383.772609][T12897] ? alloc_vfsmnt+0xea/0x490 [ 383.772632][T12897] ? do_raw_spin_unlock+0x13c/0x8b0 [ 383.772667][T12897] kstrdup+0x42/0x100 [ 383.772695][T12897] alloc_vfsmnt+0xea/0x490 [ 383.772724][T12897] clone_mnt+0x6b/0xc90 [ 383.772747][T12897] ? do_raw_spin_unlock+0x13c/0x8b0 [ 383.772787][T12897] copy_tree+0x482/0x940 [ 383.772822][T12897] ? copy_mnt_ns+0x185/0x960 [ 383.772855][T12897] copy_mnt_ns+0x185/0x960 [ 383.772887][T12897] ? kmem_cache_alloc_noprof+0x237/0x390 [ 383.772923][T12897] create_new_namespaces+0xd3/0x7b0 [ 383.772952][T12897] ? bpf_lsm_capable+0x9/0x10 [ 383.772976][T12897] ? security_capable+0x7e/0x2d0 [ 383.773012][T12897] unshare_nsproxy_namespaces+0x124/0x180 [ 383.773041][T12897] ksys_unshare+0x5e2/0xad0 [ 383.773078][T12897] ? __pfx_ksys_unshare+0x10/0x10 [ 383.773121][T12897] __x64_sys_unshare+0x38/0x40 [ 383.773145][T12897] do_syscall_64+0xf3/0x230 [ 383.773171][T12897] ? clear_bhb_loop+0x45/0xa0 [ 383.773197][T12897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.773218][T12897] RIP: 0033:0x7fafa038d169 [ 383.773244][T12897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.773263][T12897] RSP: 002b:00007fafa116c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 383.773286][T12897] RAX: ffffffffffffffda RBX: 00007fafa05a5fa0 RCX: 00007fafa038d169 [ 383.773301][T12897] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000024020400 [ 383.773315][T12897] RBP: 00007fafa116c090 R08: 0000000000000000 R09: 0000000000000000 [ 383.773328][T12897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 383.773341][T12897] R13: 0000000000000000 R14: 00007fafa05a5fa0 R15: 00007ffd09b5a868 [ 383.773376][T12897] [ 384.108493][T12798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.115605][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.142811][T12798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.156619][T12798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.163916][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.193648][T12798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.297098][T12798] hsr_slave_0: entered promiscuous mode [ 384.319252][T12798] hsr_slave_1: entered promiscuous mode [ 384.325816][T12798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.338099][T12798] Cannot create hsr debugfs directory [ 384.414169][T12915] ipvlan2: entered promiscuous mode [ 384.428905][T12915] ipvlan2: entered allmulticast mode [ 384.437964][T12915] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 384.678178][ T5846] Bluetooth: hci4: command tx timeout [ 385.451996][T12798] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.473061][T12920] lo speed is unknown, defaulting to 1000 [ 385.604645][T12798] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.608163][T12950] FAULT_INJECTION: forcing a failure. [ 385.608163][T12950] name failslab, interval 1, probability 0, space 0, times 0 [ 385.648840][T12950] CPU: 1 UID: 0 PID: 12950 Comm: syz.3.2052 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 385.648874][T12950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 385.648889][T12950] Call Trace: [ 385.648898][T12950] [ 385.648908][T12950] dump_stack_lvl+0x241/0x360 [ 385.648948][T12950] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.648978][T12950] ? __pfx__printk+0x10/0x10 [ 385.649013][T12950] ? __pfx___might_resched+0x10/0x10 [ 385.649045][T12950] should_fail_ex+0x424/0x570 [ 385.649077][T12950] should_failslab+0xac/0x100 [ 385.649108][T12950] kmem_cache_alloc_noprof+0x78/0x390 [ 385.649136][T12950] ? __kernfs_new_node+0xdf/0x890 [ 385.649164][T12950] __kernfs_new_node+0xdf/0x890 [ 385.649187][T12950] ? __lock_acquire+0xad5/0xd80 [ 385.649216][T12950] ? __pfx___kernfs_new_node+0x10/0x10 [ 385.649251][T12950] ? kernfs_root+0x1c/0x230 [ 385.649273][T12950] ? kernfs_root+0x1c/0x230 [ 385.649347][T12950] kernfs_new_node+0x114/0x220 [ 385.649375][T12950] __kernfs_create_file+0x49/0x2e0 [ 385.649407][T12950] sysfs_add_file_mode_ns+0x24a/0x310 [ 385.649447][T12950] sysfs_create_file_ns+0x197/0x2c0 [ 385.649481][T12950] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 385.649513][T12950] ? __dev_fwnode+0x50/0x80 [ 385.649541][T12950] ? device_create_file+0xf2/0x1c0 [ 385.649573][T12950] device_add+0x522/0xbf0 [ 385.649611][T12950] device_create+0x259/0x2f0 [ 385.649652][T12950] ? __pfx_device_create+0x10/0x10 [ 385.649689][T12950] ? __pfx_mac80211_hwsim_add_chanctx+0x10/0x10 [ 385.649722][T12950] mac80211_hwsim_new_radio+0x3e4/0x4a60 [ 385.649762][T12950] ? stack_trace_save+0x11a/0x1d0 [ 385.649794][T12950] ? __pfx_stack_trace_save+0x10/0x10 [ 385.649829][T12950] ? stack_depot_save_flags+0x44/0x940 [ 385.649859][T12950] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 385.649918][T12950] hwsim_new_radio_nl+0xed0/0x2290 [ 385.649961][T12950] ? __pfx___nla_validate_parse+0x10/0x10 [ 385.649996][T12950] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 385.650062][T12950] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 385.650102][T12950] genl_rcv_msg+0xb38/0xf00 [ 385.650140][T12950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.650163][T12950] ? stack_trace_save+0x11a/0x1d0 [ 385.650191][T12950] ? __pfx_stack_trace_save+0x10/0x10 [ 385.650218][T12950] ? stack_depot_save_flags+0x44/0x940 [ 385.650241][T12950] ? stack_trace_snprint+0x71/0xf0 [ 385.650293][T12950] ? __lock_acquire+0xad5/0xd80 [ 385.650318][T12950] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 385.650362][T12950] netlink_rcv_skb+0x208/0x480 [ 385.650385][T12950] ? __pfx_genl_rcv_msg+0x10/0x10 [ 385.650416][T12950] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 385.650463][T12950] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.650494][T12950] genl_rcv+0x28/0x40 [ 385.650519][T12950] netlink_unicast+0x7f8/0x9a0 [ 385.650561][T12950] ? __pfx_netlink_unicast+0x10/0x10 [ 385.650597][T12950] ? skb_put+0x114/0x1f0 [ 385.650628][T12950] netlink_sendmsg+0x8c3/0xcd0 [ 385.650666][T12950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.650694][T12950] ? aa_sock_msg_perm+0x91/0x160 [ 385.650731][T12950] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.650751][T12950] __sock_sendmsg+0x221/0x270 [ 385.650788][T12950] ____sys_sendmsg+0x523/0x860 [ 385.650826][T12950] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.650851][T12950] ? __fget_files+0x2a/0x420 [ 385.650887][T12950] ? __fget_files+0x2a/0x420 [ 385.650929][T12950] __sys_sendmsg+0x271/0x360 [ 385.650963][T12950] ? __pfx___sys_sendmsg+0x10/0x10 [ 385.651052][T12950] ? do_syscall_64+0xb6/0x230 [ 385.651080][T12950] do_syscall_64+0xf3/0x230 [ 385.651103][T12950] ? clear_bhb_loop+0x45/0xa0 [ 385.651129][T12950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.651150][T12950] RIP: 0033:0x7f06cc38d169 [ 385.651170][T12950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.651188][T12950] RSP: 002b:00007f06cd243038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.651212][T12950] RAX: ffffffffffffffda RBX: 00007f06cc5a5fa0 RCX: 00007f06cc38d169 [ 385.651228][T12950] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 385.651242][T12950] RBP: 00007f06cd243090 R08: 0000000000000000 R09: 0000000000000000 [ 385.651255][T12950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.651267][T12950] R13: 0000000000000000 R14: 00007f06cc5a5fa0 R15: 00007ffd17960b68 [ 385.651368][T12950] [ 386.251045][T12955] sctp: [Deprecated]: syz.3.2054 (pid 12955) Use of int in max_burst socket option. [ 386.251045][T12955] Use struct sctp_assoc_value instead [ 386.345587][T12798] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.388835][T12960] netlink: 'syz.2.2056': attribute type 10 has an invalid length. [ 386.445763][T12960] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.488645][T12960] team0: entered allmulticast mode [ 386.499212][T12960] bond0: (slave team0): Enslaving as an active interface with an up link [ 386.665135][T12798] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.759654][ T5846] Bluetooth: hci4: command tx timeout [ 387.023787][T12981] FAULT_INJECTION: forcing a failure. [ 387.023787][T12981] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.040219][T12981] CPU: 0 UID: 0 PID: 12981 Comm: syz.3.2062 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 387.040249][T12981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 387.040263][T12981] Call Trace: [ 387.040272][T12981] [ 387.040281][T12981] dump_stack_lvl+0x241/0x360 [ 387.040316][T12981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.040345][T12981] ? __pfx__printk+0x10/0x10 [ 387.040384][T12981] should_fail_ex+0x424/0x570 [ 387.040415][T12981] _copy_from_user+0x2d/0xb0 [ 387.040437][T12981] copy_msghdr_from_user+0xb3/0x580 [ 387.040483][T12981] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 387.040512][T12981] ? __fget_files+0x2a/0x420 [ 387.040546][T12981] ? __fget_files+0x2a/0x420 [ 387.040585][T12981] __sys_sendmsg+0x20a/0x360 [ 387.040617][T12981] ? __pfx___sys_sendmsg+0x10/0x10 [ 387.040700][T12981] ? do_syscall_64+0xb6/0x230 [ 387.040728][T12981] do_syscall_64+0xf3/0x230 [ 387.040751][T12981] ? clear_bhb_loop+0x45/0xa0 [ 387.040776][T12981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.040795][T12981] RIP: 0033:0x7f06cc38d169 [ 387.040813][T12981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.040831][T12981] RSP: 002b:00007f06cd243038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.040853][T12981] RAX: ffffffffffffffda RBX: 00007f06cc5a5fa0 RCX: 00007f06cc38d169 [ 387.040868][T12981] RDX: 0000000004000084 RSI: 0000200000000100 RDI: 0000000000000006 [ 387.040882][T12981] RBP: 00007f06cd243090 R08: 0000000000000000 R09: 0000000000000000 [ 387.040895][T12981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.040907][T12981] R13: 0000000000000000 R14: 00007f06cc5a5fa0 R15: 00007ffd17960b68 [ 387.040940][T12981] [ 387.159062][T12962] lo speed is unknown, defaulting to 1000 [ 387.750072][T12798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 387.778003][T12798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 387.855807][T12798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 387.883968][T12798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 387.906391][T12986] lo speed is unknown, defaulting to 1000 [ 387.952389][T12998] __nla_validate_parse: 6 callbacks suppressed [ 387.952410][T12998] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2067'. [ 388.388270][T13002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2068'. [ 388.419449][T13002] netlink: 'syz.2.2068': attribute type 30 has an invalid length. [ 388.444078][T13002] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.453344][T13002] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.462093][T13002] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.470839][T13002] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.534345][T12798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.621784][T12798] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.646096][T13009] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2070'. [ 388.701187][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.708440][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.749175][T11671] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.756396][T11671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.841573][ T5846] Bluetooth: hci4: command tx timeout [ 389.267851][T13036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2076'. [ 389.425917][T13036] nbd: socks must be embedded in a SOCK_ITEM attr [ 389.612578][T12798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 389.858130][T12798] veth0_vlan: entered promiscuous mode [ 389.883172][T12798] veth1_vlan: entered promiscuous mode [ 389.981458][T12798] veth0_macvtap: entered promiscuous mode [ 390.068741][T12798] veth1_macvtap: entered promiscuous mode [ 390.112618][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.154042][T13052] netlink: 'syz.0.2079': attribute type 3 has an invalid length. [ 390.162403][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.205786][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.216770][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.229853][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.240989][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.254023][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.264769][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.280336][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.291096][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.303115][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.313974][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.327206][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.338098][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.348237][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.359760][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.370753][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.381874][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.394260][T12798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.412342][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.433020][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.444356][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.455196][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.468217][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.480871][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.496294][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.507497][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.519644][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.536014][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.550154][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.561071][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.571016][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.581834][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.592047][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.608139][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.618745][T12798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.633626][T12798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.646301][T12798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.656422][T13022] lo speed is unknown, defaulting to 1000 [ 390.813635][T12798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.827666][T12798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.850418][T12798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.879386][T12798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.519053][T11653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.537479][T11653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.742963][T11669] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.751710][T11669] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.399961][T13086] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.448082][T13087] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 392.461673][T13087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2091'. [ 392.563816][T13086] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.649028][T13086] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.999148][T13086] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.211544][T13086] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.280180][T13086] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.388828][T13086] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.460045][T13086] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.049709][T13095] [ 395.052101][T13095] ====================================================== [ 395.059234][T13095] WARNING: possible circular locking dependency detected [ 395.066279][T13095] 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 Not tainted [ 395.073412][T13095] ------------------------------------------------------ [ 395.080454][T13095] syz.3.2095/13095 is trying to acquire lock: [ 395.086551][T13095] ffffffff900fe688 (rtnl_mutex){+.+.}-{4:4}, at: do_ip_setsockopt+0x10f0/0x39c0 [ 395.095761][T13095] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 395.095761][T13095] but task is already holding lock: [ 395.103155][T13095] ffff8880620f21a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 395.113306][T13095] [ 395.113306][T13095] which lock already depends on the new lock. [ 395.113306][T13095] [ 395.123736][T13095] [ 395.123736][T13095] the existing dependency chain (in reverse order) is: [ 395.132757][T13095] [ 395.132757][T13095] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 395.141387][T13095] lock_acquire+0x116/0x2f0 [ 395.146425][T13095] __mutex_lock+0x1a5/0x10c0 [ 395.151553][T13095] smc_switch_to_fallback+0x35/0xda0 [ 395.157365][T13095] smc_sendmsg+0x11f/0x530 [ 395.162397][T13095] __sock_sendmsg+0x221/0x270 [ 395.167616][T13095] __sys_sendto+0x365/0x4c0 [ 395.172643][T13095] __x64_sys_sendto+0xde/0x100 [ 395.177937][T13095] do_syscall_64+0xf3/0x230 [ 395.182982][T13095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.189400][T13095] [ 395.189400][T13095] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 395.197053][T13095] lock_acquire+0x116/0x2f0 [ 395.202079][T13095] lock_sock_nested+0x48/0x100 [ 395.207365][T13095] do_ip_setsockopt+0x17e9/0x39c0 [ 395.212923][T13095] ip_setsockopt+0x63/0x100 [ 395.217958][T13095] do_sock_setsockopt+0x3b1/0x710 [ 395.223507][T13095] __x64_sys_setsockopt+0x1ee/0x280 [ 395.229236][T13095] do_syscall_64+0xf3/0x230 [ 395.234264][T13095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.240699][T13095] [ 395.240699][T13095] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 395.247937][T13095] validate_chain+0xa69/0x24e0 [ 395.253243][T13095] __lock_acquire+0xad5/0xd80 [ 395.258444][T13095] lock_acquire+0x116/0x2f0 [ 395.263471][T13095] __mutex_lock+0x1a5/0x10c0 [ 395.268625][T13095] do_ip_setsockopt+0x10f0/0x39c0 [ 395.274176][T13095] ip_setsockopt+0x63/0x100 [ 395.279211][T13095] smc_setsockopt+0x25c/0xd50 [ 395.284499][T13095] do_sock_setsockopt+0x3b1/0x710 [ 395.290055][T13095] __x64_sys_setsockopt+0x1ee/0x280 [ 395.295786][T13095] do_syscall_64+0xf3/0x230 [ 395.300816][T13095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.307232][T13095] [ 395.307232][T13095] other info that might help us debug this: [ 395.307232][T13095] [ 395.317461][T13095] Chain exists of: [ 395.317461][T13095] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 395.317461][T13095] [ 395.331138][T13095] Possible unsafe locking scenario: [ 395.331138][T13095] [ 395.338598][T13095] CPU0 CPU1 [ 395.343976][T13095] ---- ---- [ 395.349347][T13095] lock(&smc->clcsock_release_lock); [ 395.354729][T13095] lock(sk_lock-AF_INET); [ 395.361936][T13095] lock(&smc->clcsock_release_lock); [ 395.369869][T13095] lock(rtnl_mutex); [ 395.373870][T13095] [ 395.373870][T13095] *** DEADLOCK *** [ 395.373870][T13095] [ 395.382015][T13095] 1 lock held by syz.3.2095/13095: [ 395.387125][T13095] #0: ffff8880620f21a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x1b2/0xd50 [ 395.397677][T13095] [ 395.397677][T13095] stack backtrace: [ 395.403571][T13095] CPU: 1 UID: 0 PID: 13095 Comm: syz.3.2095 Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 395.403595][T13095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.403608][T13095] Call Trace: [ 395.403616][T13095] [ 395.403624][T13095] dump_stack_lvl+0x241/0x360 [ 395.403654][T13095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.403678][T13095] ? __pfx__printk+0x10/0x10 [ 395.403702][T13095] ? print_lock+0x171/0x1a0 [ 395.403724][T13095] print_circular_bug+0x2e1/0x300 [ 395.403748][T13095] check_noncircular+0x142/0x160 [ 395.403774][T13095] validate_chain+0xa69/0x24e0 [ 395.403797][T13095] ? finish_task_switch+0x1e5/0x870 [ 395.403831][T13095] __lock_acquire+0xad5/0xd80 [ 395.403851][T13095] lock_acquire+0x116/0x2f0 [ 395.403867][T13095] ? do_ip_setsockopt+0x10f0/0x39c0 [ 395.403896][T13095] __mutex_lock+0x1a5/0x10c0 [ 395.403915][T13095] ? do_ip_setsockopt+0x10f0/0x39c0 [ 395.403938][T13095] ? look_up_lock_class+0x7b/0x170 [ 395.403958][T13095] ? register_lock_class+0x54/0x330 [ 395.403974][T13095] ? do_ip_setsockopt+0x10f0/0x39c0 [ 395.403998][T13095] ? __pfx___mutex_lock+0x10/0x10 [ 395.404017][T13095] ? __lock_acquire+0xad5/0xd80 [ 395.404038][T13095] ? __pfx___mutex_trylock_common+0x10/0x10 [ 395.404063][T13095] do_ip_setsockopt+0x10f0/0x39c0 [ 395.404091][T13095] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 395.404117][T13095] ? smc_setsockopt+0x1b2/0xd50 [ 395.404134][T13095] ? __pfx___mutex_lock+0x10/0x10 [ 395.404158][T13095] ip_setsockopt+0x63/0x100 [ 395.404181][T13095] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 395.404199][T13095] smc_setsockopt+0x25c/0xd50 [ 395.404217][T13095] ? __pfx_aa_sk_perm+0x10/0x10 [ 395.404238][T13095] ? __pfx_smc_setsockopt+0x10/0x10 [ 395.404256][T13095] ? aa_sock_opt_perm+0x79/0x120 [ 395.404281][T13095] ? __pfx_smc_setsockopt+0x10/0x10 [ 395.404298][T13095] do_sock_setsockopt+0x3b1/0x710 [ 395.404321][T13095] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 395.404341][T13095] ? __fget_files+0x2a/0x420 [ 395.404368][T13095] ? __fget_files+0x39d/0x420 [ 395.404392][T13095] ? __fget_files+0x2a/0x420 [ 395.404420][T13095] __x64_sys_setsockopt+0x1ee/0x280 [ 395.404444][T13095] do_syscall_64+0xf3/0x230 [ 395.404463][T13095] ? clear_bhb_loop+0x45/0xa0 [ 395.404483][T13095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.404501][T13095] RIP: 0033:0x7f06cc38d169 [ 395.404524][T13095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 395.404540][T13095] RSP: 002b:00007f06cd243038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 395.404559][T13095] RAX: ffffffffffffffda RBX: 00007f06cc5a5fa0 RCX: 00007f06cc38d169 [ 395.404573][T13095] RDX: 0000000000000029 RSI: 0000000000000000 RDI: 0000000000000005 [ 395.404584][T13095] RBP: 00007f06cc40e990 R08: 0000000000000028 R09: 0000000000000000 [ 395.404597][T13095] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 395.404611][T13095] R13: 0000000000000000 R14: 00007f06cc5a5fa0 R15: 00007ffd17960b68 [ 395.404632][T13095] [ 395.600883][T13089] syz-executor: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 395.894619][T13089] CPU: 0 UID: 0 PID: 13089 Comm: syz-executor Not tainted 6.15.0-rc1-syzkaller-00314-g23f09f01b495 #0 PREEMPT(full) [ 395.894654][T13089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.894668][T13089] Call Trace: [ 395.894676][T13089] [ 395.894685][T13089] dump_stack_lvl+0x241/0x360 [ 395.894731][T13089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.894760][T13089] ? __pfx__printk+0x10/0x10 [ 395.894785][T13089] ? lock_release+0x4e/0x3e0 [ 395.894808][T13089] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 395.894838][T13089] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 395.894868][T13089] warn_alloc+0x27c/0x410 [ 395.894891][T13089] ? __pfx_warn_alloc+0x10/0x10 [ 395.894914][T13089] ? kcov_ioctl+0x56/0x640 [ 395.894933][T13089] ? __get_vm_area_node+0x1c8/0x2d0 [ 395.894962][T13089] ? __get_vm_area_node+0x25c/0x2d0 [ 395.894995][T13089] __vmalloc_node_range_noprof+0x634/0x1390 [ 395.895042][T13089] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 395.895082][T13089] vmalloc_user_noprof+0x74/0x80 [ 395.895113][T13089] ? kcov_ioctl+0x56/0x640 [ 395.895131][T13089] kcov_ioctl+0x56/0x640 [ 395.895151][T13089] ? __pfx_kcov_ioctl+0x10/0x10 [ 395.895172][T13089] __se_sys_ioctl+0xf1/0x160 [ 395.895197][T13089] do_syscall_64+0xf3/0x230 [ 395.895221][T13089] ? clear_bhb_loop+0x45/0xa0 [ 395.895244][T13089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.895264][T13089] RIP: 0033:0x7f88e398cd6b [ 395.895283][T13089] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 395.895302][T13089] RSP: 002b:00007ffda532b000 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.895326][T13089] RAX: ffffffffffffffda RBX: 0000000000100000 RCX: 00007f88e398cd6b [ 395.895342][T13089] RDX: 0000000000100000 RSI: ffffffff80086301 RDI: 00000000000000d7 [ 395.895357][T13089] RBP: 00007f88e3ba5f40 R08: 00000000000000da R09: 0000000000000000 [ 395.895371][T13089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.895385][T13089] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 395.895407][T13089] [ 395.895416][T13089] Mem-Info: [ 396.116223][T13089] active_anon:3137 inactive_anon:0 isolated_anon:0 [ 396.116223][T13089] active_file:1669 inactive_file:38448 isolated_file:0 [ 396.116223][T13089] unevictable:768 dirty:187 writeback:0 [ 396.116223][T13089] slab_reclaimable:12188 slab_unreclaimable:213639 [ 396.116223][T13089] mapped:15543 shmem:1452 pagetables:781 [ 396.116223][T13089] sec_pagetables:0 bounce:0 [ 396.116223][T13089] kernel_misc_reclaimable:0 [ 396.116223][T13089] free:1221668 free_pcp:3621 free_cma:0 [ 396.202002][T13089] Node 0 active_anon:11548kB inactive_anon:0kB active_file:6676kB inactive_file:153720kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:41572kB dirty:748kB writeback:0kB shmem:4272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14908kB pagetables:3024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 396.297228][T13089] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 396.328622][T13089] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.356044][T13089] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 396.397624][T13089] Node 0 DMA32 free:996520kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:11440kB inactive_anon:0kB active_file:6676kB inactive_file:153628kB unevictable:1536kB writepending:744kB present:3129332kB managed:2547416kB mlocked:0kB bounce:0kB free_pcp:27880kB local_pcp:6712kB free_cma:0kB [ 396.507738][T13089] lowmem_reserve[]: 0 0 0 0 0 [ 396.512536][T13089] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 396.607947][T13089] lowmem_reserve[]: 0 0 0 0 0 [ 396.612953][T13089] Node 1 Normal free:3911144kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1752kB local_pcp:1752kB free_cma:0kB [ 396.644688][T13089] lowmem_reserve[]: 0 0 0 0 0 [ 396.649931][T13089] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 396.663093][T13089] Node 0 DMA32: 1159*4kB (UME) 551*8kB (UME) 524*16kB (UME) 470*32kB (UME) 214*64kB (UM) 135*128kB (UME) 93*256kB (UME) 66*512kB (UME) 35*1024kB (UM) 9*2048kB (UME) 221*4096kB (M) = 1080532kB [ 396.685095][T13089] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 396.696744][T13089] Node 1 Normal: 126*4kB (UE) 2*8kB (ME) 10*16kB (UME) 172*32kB (UME) 107*64kB (UME) 34*128kB (UME) 10*256kB (UM) 8*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 947*4096kB (ME) = 3911144kB [ 396.715117][T13089] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.731117][T13089] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.745829][T13089] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.755802][T13089] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.768699][T13089] 41119 total pagecache pages [ 396.775697][T13089] 0 pages in swap cache [ 396.780888][T13089] Free swap = 124996kB [ 396.785162][T13089] Total swap = 124996kB [ 396.789852][T13089] 2097051 pages RAM [ 396.806756][T13089] 0 pages HighMem/MovableOnly [ 396.824663][T13089] 428539 pages reserved [ 396.829787][T13089] 0 pages cma reserved [ 396.888401][T13016] Set syz1 is full, maxelem 65536 reached [ 399.897700][ T13] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3