last executing test programs: 4.54270742s ago: executing program 1 (id=3448): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b27", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24000002) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/24, 0x18}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x84}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60d0}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001100)=ANY=[@ANYBLOB="61152000000000006113500000000000bf5000000000000004000000080000003d03010000000000250500000000000069163e0000000000bf07000000000000450607000fff0720670600003f000000160300000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e273827017826251ed834f2af97787f696649a462e7ee4bcf800000000000000000000004000bc00f679629709e75b99f9632b6ce78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1fff5f1be1969a1ba791ad46d800000000c7f26a0337302f3341eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf48903d3fc78700d429a2d4c8b6d803eb83eecfe4c700000000a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d4a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0453b65586f65c7943d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798a9c2dca871073f6bd61940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d1542c882e672fea96aedf346279ec000000000000000000000000c6427829b65ee55eef70520871b2a26df69559b5a06ad06d3d0183ae3b317478fff42cc48b461c56baea65a667000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 4.46823867s ago: executing program 1 (id=3449): unshare(0x62040200) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="18080000000040000000000007000000d10a00000450f9a51c728581f87e9c33b3445ff9f86d9e2c7acf5ace2b9aee9ecc2163f11d049335c8c0e778ae9757d94724a68130b174866cd37986187d561a1664da7e9ae5143f0a9fafc9534a71ac68482cd51d1dc124c18ac446e5539b5afae9386aa9a0b8685421ab174bc9480865a3c2a3bdfd7566050b271583efd8b5", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0908000000000055090100000000009500000000000000b702000000000000db9a00fe00000000b6090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bd9800000000000056020000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @broadcast}, 0x240}) 3.417574384s ago: executing program 1 (id=3461): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r1, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) (async) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="515206"], 0x14) 2.444226104s ago: executing program 1 (id=3474): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000300)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) socket$packet(0x11, 0x0, 0x300) pipe(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYRES64, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000400)={'ip6gre0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000007000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r6, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="4ce02b9d64e50d293ddb0ae4b8a0", 0x0, 0x4003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000080)="7800000018002507b9409b14ffff0b7a0204be04050714056406040c5c0009003f0006180a0000000d0085a168d0bf46d32345653610648d270005000a06024e49935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000400160008030a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) write$binfmt_script(r3, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) 2.408897911s ago: executing program 4 (id=3475): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r5 = syz_genetlink_get_family_id$team(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a80)={0x20, r5, 0x237, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000100)=ANY=[@ANYBLOB="00000300aaaaaa6eaaaab3acc2926d7b10e7ac6d624542"]) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8}, @IFLA_GENEVE_PORT={0x6}]}}}]}, 0x44}}, 0x0) 2.22753392s ago: executing program 4 (id=3478): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x10000200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r2 = socket$inet(0x2, 0x2, 0x1) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000c40)={0x1, [0xe]}, &(0x7f0000000c80)=0x6) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = accept4(r2, &(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, &(0x7f0000000300)=0x80, 0x80800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xac, r8, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d9154d75f0cffc26dcfba6011e52eb610e04b03811e5911b"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "92e9d3db1180fb11384279586aa8a124ccea2991df46583e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x8001) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x38}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x40040800) 2.173404041s ago: executing program 3 (id=3479): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xe, &(0x7f0000001340)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x0, 0x0, 0xfffffffd}, 0x10}, 0xc5) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f00000000c0)=0x30) unshare(0x20040600) socket(0x6, 0x80801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) pselect6(0x40, &(0x7f0000000080)={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0) 1.968534187s ago: executing program 4 (id=3484): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000280)={@cgroup, 0x0, 0x1e, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) r2 = socket$unix(0x1, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x61, &(0x7f0000000580), 0x18, 0x20000000}}], 0x1, 0x4000011) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x40, r10, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x9}, @NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x14}, @NL80211_MESHCONF_MAX_RETRIES={0x5}]}]}, 0x40}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) sendfile(r6, r5, 0x0, 0x100004002) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x6d, &(0x7f0000000240)={r13}, &(0x7f0000000280)=0x8) socket$inet6(0xa, 0x6, 0x0) syz_emit_ethernet(0x2fe, &(0x7f0000000b40)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x2c8, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x25, "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"}, {0x19, 0xc, "78f8bedfcc437174a7325edb8d52300c800887868c693939062b3f76dd70e9425210228d7b01ae2912a6ec66e6d7592e1569d1cdc69130d5c7424aff64de9f1295ac9d8ff992ce497dba9dcb639a4a3b7c60ad1a91647a2c3993e54bb306ed99b252"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0400000000000000b8164e240069f656d3a05fecf894222a141123f5acaa556b9b30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x18, 0x1, "d47ae6e8805d"}, {0x0, 0x6, "cd594a6362fc7d77af9f5d1e2eff81933f8d4d9591760cbd114b4e639011b60d4e0b00"/48}]}}}}}}, 0x0) 1.74674031s ago: executing program 0 (id=3487): r0 = socket(0x3, 0x800, 0x1) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000000)={r3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={r3, 0xfffffffa}, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000300)={'dummy0\x00', &(0x7f0000001640)}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x0, &(0x7f0000005640)=0x2, 0x4) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r6, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x33) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000600)=@assoc_value, &(0x7f0000001000)=0x8) ioctl$int_in(r7, 0x5452, &(0x7f0000000300)=0x208) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, &(0x7f0000000240)={'erspan0\x00', 0x4}) sendto$inet6(r1, 0x0, 0x0, 0x2200c051, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @mcast2, 0x6}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = gettid() r10 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r10, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000041000701ffffffffffdbdf25017c000008000100", @ANYRES32=r9], 0x1c}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001680)) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x0, 0x0, 0x0) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/57, 0x39}, {&(0x7f0000000ac0)=""/220, 0xdc}, {&(0x7f0000000bc0)=""/99, 0x63}, {&(0x7f0000000c40)=""/89, 0x59}, {&(0x7f0000000cc0)=""/98, 0x62}, {&(0x7f0000000d80)=""/227, 0xe3}], 0x6, &(0x7f0000000f00)=""/208, 0xd0}, 0x1}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000025c0)=""/4096, 0x1000}], 0x1}, 0x7f}, {{&(0x7f00000010c0)=@nfc, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001140)=""/133, 0x85}, {&(0x7f0000001280)=""/46, 0x2e}], 0x2, &(0x7f0000001480)=""/37, 0x25}}], 0x3, 0x40010163, 0x0) 1.600910491s ago: executing program 2 (id=3488): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @bcast]}, 0x48) connect$ax25(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x18, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) syz_emit_ethernet(0xd2, &(0x7f0000000d00)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x9c, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9b92fc056f07d114fe3b41c776904545fb44d8e5dc0e57fdbba583dbc1bf026f", "ba38149afe78e80f44a98eddddbf2b6f237458668eb2461a95cd9a215310bae58679f26df35b2d9306a4a2e1dc85e86f", "6ba2c77aea3ef00f0ac8f0e3066b25082e39f5fb07fb432ca8f22890", {"e79710a9e57f1011496e538064796900", "f9d98c0072c691ce00"}}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.532620952s ago: executing program 1 (id=3489): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$inet(r2, &(0x7f0000000200)="ac", 0x1, 0x0, &(0x7f0000000140)={0x2, 0x0, @dev}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r3, 0x6, 0x1f, &(0x7f0000000080)="460f6056b0339ad906118515b90cc059e514c9461679dae4ca093d04cbbc5b7667d27ae9bcdfb4602b3a6816530cd582b965f14b577d95b151e69082ba7aad143aabc4981c22c243295f2688b29406c24adf04f83060994882a52bab570009fbece88edc90d7dfc5b22f5880e4b4b6614dd60b9273fdc7c681454ddb20104970e466ea13bb68125bb60a2847d87c6b1f5c93ef46bc8714faaab65d2117e605855cc7c654e9b2ae898f3ed44298900767fe8e28bd1a1854b4327f3d378f7dad237edd0f2f11886f2b277b30b78e1a", 0xce) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @private}, 0x4}}, 0x26) syz_emit_ethernet(0xd2, &(0x7f0000000500)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "22c4e0a869f0da488b00f1331023d79655308915f202f58a23464882182dd011", "621e8c6b6125f176f884f41771b204efec9e4b2a73a39213226751553e453f901348bf86e98ae34040da03cbe4cb6027", "b949ff1d3896755e8150f78198093a2f17876f43e3740f98ab30c505", {"0918a0da71f97175431c5d7d741fe089", "005a02053c979ffdca4ef18674620eb5"}}}}}}}}, 0x0) 1.518492461s ago: executing program 2 (id=3490): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x0, 0x0) sendmsg$inet_sctp(r0, &(0x7f00000021c0)={&(0x7f0000001080)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000002100)=[{&(0x7f00000010c0)='5', 0x1}], 0x1, 0x0, 0x30}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) socket(0x15, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002180)={{{@in6=@private0, @in=@broadcast}}, {{@in6=@empty}, 0x0, @in6=@private0}}, &(0x7f0000002280)=0xe8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002440)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r4, 0x0, 0x78) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@ipv4_newaddr={0x28, 0x14, 0x1, 0x0, 0xfffffffc, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) 1.330768296s ago: executing program 2 (id=3491): unshare(0x24020400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd}, 0xe) (async) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {&(0x7f0000000580)="d8eff0d8396958dffe2ab463adb531c74fbaee8fe74726121fc7ca129ec816d187431bc4937bc44315ff068158ffb11a7c9db7369509ec5acca4d715b4a4bd3edebff5a7658c02e67d3e5fb941064d69af3b39ca7f4054377acf3de7abad1e5de03b8f0f46c3dedd5a7b01f13203f36c7c469abca165dbc6787bcd0892973b5d7fc8a1f154c3c7e95ab911f9e31d09ff6bcd6082ac73083916d658076bb066dea5bed4b2ddc5556b93655e1fb0e2bfbb3c6281e56629d7c35887f225a2da0d16b9f7b5cea8", 0xc5}, {&(0x7f00000004c0)="71e09a67fa483f299865ceda28c23d30999990955ed9a85113bd30172758d8bb8effee0eb8039cdcecfc868975117bcea85d596448769a8ebad2561ee6c7a1d50e5b8e81333cc46ef24064355d0cc1a47ea0d891ab0e8cf76392539a95eba9a6f859c2a894774bffe2bbd4600b74a34718a00a4b85fd646282d22fbddfc019b141bbe11da79eaa09244ae398be47f3e4f41994bcf1b3a0ab4fadbb627355a80e1053718cec7e030f232d481d0c6bb6", 0xaf}, {&(0x7f00000002c0)="ec75ec255cdc5dba0a300d81675f848523a105ce675618f5d7b05f0cf798af4811f75376e6ba71a25dbf8f7b7ea1540423749f4eb0902e890c4891de2985c760bf44ef5e6c950f4c437bc117d05f5db8fbae", 0xfdc6}, {0x0, 0x63}], 0x5}}], 0x1, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r1, 0x0, 0x0}, 0x10) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r4 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x83, &(0x7f0000000340)={r5}, 0x8) (async, rerun: 64) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r5, 0x91, "72a2c4a4edba23cced93e4b98371b93161bf95696551d81faa1ddbf336774f9b73d922e28ac40545e8aafc494e9dd8bab4010ad8afadac8e856c385d7a3833255dbc51ab3a2d3bc2e72cc450beb9407e1b8908b875e4ece350bfdad5a672dc92713c23812ff234988bdc771710305af6eacccb64feba0dbe98ff241a4816ff4619837f1d3c2ade1de05ed8c521d9a603f2"}, &(0x7f0000000200)=0x99) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.270270256s ago: executing program 3 (id=3492): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000940)}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000d80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000016c0), 0x3af4701e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0x1b}, 0x20) bind$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0xffdf) ioctl$sock_netdev_private(r3, 0x8924, &(0x7f0000000000)) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[{0x10}, {0x10, 0x110, 0xd}], 0x20, 0xe000}, 0x5}], 0x1, 0x0) shutdown(r2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xe, 0x1, '!+-#.&-%*\x00'}]}, 0x24}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000240)=[{0x40, 0x0, 0x0, 0xffefffff}, {0x6}]}, 0x10) listen(0xffffffffffffffff, 0x0) 1.167273176s ago: executing program 2 (id=3493): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bc690000001400003509010000000000950000000400000087060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf64000000000000070400000b000000b70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.022764963s ago: executing program 2 (id=3494): unshare(0x22020600) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x10000200) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r2 = socket$inet(0x2, 0x2, 0x1) close(r2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x458, 0x300, 0xb, 0x148, 0x308, 0x148, 0x3c0, 0x230, 0x242, 0x3c0, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'batadv_slave_0\x00', 'macvtap0\x00', {}, {}, 0x73}, 0x0, 0x2d0, 0x300, 0x0, {0xff0f000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0xe, 0x0, 0x6, './file0\x00'}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0xec010000, 0xa0, 0xc0, 0x0, {}, [@common=@ah={{0x30}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000040850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000c40)={0x1, [0xe]}, &(0x7f0000000c80)=0x6) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = accept4(r2, &(0x7f00000004c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, &(0x7f0000000300)=0x80, 0x80800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ac0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xac, r8, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d9154d75f0cffc26dcfba6011e52eb610e04b03811e5911b"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "92e9d3db1180fb11384279586aa8a124ccea2991df46583e"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x8001) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r6, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x38}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4041}, 0x40040800) 1.019463025s ago: executing program 4 (id=3495): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000300000000030000000200000000000000000000000000000a020000000000168c33ca4397e8ce3f644dd5e91d3f7370"], 0x0, 0x3e}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2e, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) syz_emit_ethernet(0x66, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08174500005800000000002f907800000000e0000001248086dd0000000010000800000086dd080088be00000000100000000100000000000000080022eb000000002000e9ff01000000000000000000000008006558000000007deeb586f982a90c1690aae4c387842fabe496b6e4d9e3810ede0ffe49cd89b3b6fe14d1c5a4f26bf1a22bfb31dafa6e0a0bb87b7e846c45597287ba56a9ac3d63b2edd7840fd57eb4ec3ef41a10501f8ea02cb0f47c01"], 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000140)="b7028d7289a1d9bf", 0x8}], 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000020a000000000000000000000850000001700000095"], &(0x7f0000000140)='syzkaller\x00'}, 0x90) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1, 0x0, 0x0, @fd=r6}]}]}, 0x34}], 0x1}, 0x0) 889.528972ms ago: executing program 4 (id=3496): r0 = socket$qrtr(0x2a, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)=@qipcrtr, 0x1) r1 = socket$inet(0xa, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x4}, [], {0x95, 0x0, 0x0, 0x1a03d3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x90) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x45}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000001780)={'ip6gre0\x00', 0x0, 0x2f, 0x6, 0x3, 0x6, 0x5, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7, 0x40, 0x0, 0x7}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'wg2\x00'}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004f00010000000000000000000000000054f68e0beb4908000100ec3ce91106fccd43991a85c83806357e798d73733e8a1a88a33f8e365e6c1683a3faa4ede687ec", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000fe8000000000000000000000000000bbac1414aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/268], 0x154}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000003500)={{{@in=@local, @in=@local, 0x4e23, 0x5, 0x4e24, 0x8, 0x2, 0x0, 0x0, 0x62}, {0x3, 0x7d, 0x8, 0x3, 0x5, 0x4, 0x7fffffffffffffff, 0x1df2}, {0x9, 0x4, 0x5, 0x800}, 0xfff, 0x0, 0x2, 0x1, 0x0, 0x1}, {{@in6=@private0, 0x4d4, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x32}, 0x3503, 0x1, 0x0, 0x5, 0x1, 0x4, 0xd30}}, 0xe8) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001bc0)=@newlink={0x7c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002dc0)={'syztnl0\x00', &(0x7f0000002d40)={'syztnl2\x00', 0x0, 0x8, 0x20, 0x1, 0x8, {{0xb, 0x4, 0x1, 0x5, 0x2c, 0x66, 0x0, 0x9, 0x4, 0x0, @remote, @loopback, {[@cipso={0x86, 0x18, 0x3, [{0x5, 0xb, "fb9099257391dafed8"}, {0x2, 0x7, "9ba05b81c8"}]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000104000000000000000000480000", @ANYRES32=r7, @ANYBLOB="00000000000000001400030096657468305f766c616e000000000000080004000001"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000032c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x0, 0x12}, 0x48) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) 872.778477ms ago: executing program 2 (id=3497): syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES16=r0], 0x4c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) recvmmsg(r3, &(0x7f0000004080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0x10002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000000), 0x14) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000500)={0x0, 0xfffffffa, 0x80, 0xffff, 0x3, 0x800, 0x3, 0x1, {0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x9, 0x4, 0x5f1778d0, 0x80000000}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r4, 0x1}, &(0x7f0000000340)=0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e000800570000080026006c0900005603a89057010e83a7c5b52b50405b9bffffffff819b051c5ab6e066b70f5f2276d36fdff0c91278beae0cb421fb3e3aab3dc8589b938b49c060364bca5a4865c5b014014f23754b3abe23c4fc3ec46647469e64db8cc1fe08b0e88f2551016bfef6a8920a78de68408e1ef04fb473227c8bb114142f7dca47f9019bd6ff95cb9df3cfeb5238b7eb85e3a6171a8a"], 0x398}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r8, @ANYBLOB="000000000000000008001a809104001c"], 0x28}}, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r12, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2400000012000100000000000000e88a69ba0000100000000c000000000000000000000004003500"], 0x24}], 0x1}, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r11, 0x3, 0x6, @broadcast}, 0x10) socket$igmp6(0xa, 0x3, 0x2) 776.343624ms ago: executing program 0 (id=3498): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="07d98d396058a855921d034d0fb8034a5317ce586c382c8d41f8212309f82dd261e5f9263338a10244d7b49f8608f304ee79d951cd4ca8c44b84d8b2da6feb009a0d53224f69c7a037105aa12b36d0f2fa926dad5b4a129773ae0025ee2dccc42c4cc23ddd896f77e5b427f7950212eaeb0dd9c789f8def4d9fbf6274bbf72f31c5a548464395d9a68564fc12ef2196d7eac2b93ba137c89c360011aa0c15d2a0db9dfc760b6e069968685b051123d404ba4e94ccfdfebeaa7a30c8de388e00edff56b0c6968ec98e00ad8decf9dec77295a37e60510e906474b55034f7f6594c92e49dd422bb4346631b852e64add94f0ee30da8e199a89d8969df24601639c324ea084f8b00dbb3322aa7b1759fde71e4279841257c589725c12070d0cd41423d566d8b73b2936119519e31f4c8243e9207e688e77550867081b9b685d277a4800", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0xfffffffe, 0x43) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x10, 0x700, 0xa, 0x7afe, {{0x27, 0x4, 0x3, 0x5, 0x9c, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @rr={0x7, 0x13, 0xf8, [@dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010101, @rand_addr=0x64010101]}, @cipso={0x86, 0x49, 0x2, [{0x6, 0xa, "73a036b7d79b3e70"}, {0x6, 0x6, "35d0c382"}, {0x0, 0xb, "a95b92add821d07ee1"}, {0x6, 0x4, "0cd0"}, {0x2, 0xe, "d7998bbf4e5b5eaefc10c6a6"}, {0x0, 0x4, '\tZ'}, {0x6, 0x12, "35201292265535200644ac5dfd23c748"}]}, @generic={0x89, 0xf, "4f62f13a5b0e63155272299262"}, @generic={0x7, 0x2}, @rr={0x7, 0x13, 0x38, [@remote, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, @multicast1]}, @lsrr={0x83, 0x7, 0xab, [@remote]}]}}}}}) pipe(&(0x7f0000000d00)) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(r3, &(0x7f0000000440)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='freezer.parent_freezing\x00', 0x275a, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) accept4$x25(r5, &(0x7f00000000c0), &(0x7f0000000300)=0x12, 0x800) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010400000000000000001a000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES8], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 654.337201ms ago: executing program 1 (id=3499): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f00000004c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcd}, 0x90) r0 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r0, &(0x7f0000000140)=""/197, 0xc5, 0x100, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 551.829354ms ago: executing program 3 (id=3500): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000000000ffea000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800400018008000340000000010c71cffd1d000000000000000900010073797a30"], 0xd8}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x810, r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x45, 0x9, 0xc0000000, 0x4, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r2, 0x9, 0xfff}, 0x8) 304.108429ms ago: executing program 0 (id=3501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x3}}, @NFQA_CFG_QUEUE_MAXLEN={0x8}, @NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x29, 0xb, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x158, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}, @TCA_STAB={0x10c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0xc, 0x2, [0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, {0xffffffffffffffd2, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, {0x16, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, {{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, {0x18, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}]}, 0x158}}, 0x0) 257.897182ms ago: executing program 0 (id=3502): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000fff6"], 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x7}}}}, [@NL80211_ATTR_MAC={0xa}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x38}}, 0x0) 255.037982ms ago: executing program 3 (id=3503): sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, 0xfffffffffffffffe, 0x4000000) r0 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @remote, @rose, 0x1, @null}, &(0x7f0000000040)=0x1c, 0x800) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000080)={0x0, 0xc, 0x57bb, 0x1}) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000480)={'pim6reg1\x00', {0x2, 0x0, @dev}}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000540)={&(0x7f00000004c0)=""/70, 0x46}) r2 = socket(0x26, 0x0, 0x5380) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000580)={0x3, 'veth1_to_team\x00', {0x5}, 0x3}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000005c0)={r1, 0x989, 0x0, [0xffffffffffffffeb, 0xaf1, 0xffff, 0x8001, 0x5], [0x715, 0x7f, 0xffffffff, 0x0, 0x5, 0x2, 0x5, 0x80000001, 0x8000000000000000, 0xc, 0x8001, 0xc, 0x1, 0x8, 0x50e, 0x7, 0xd66, 0x5, 0x80000001, 0x9, 0x4, 0x4, 0xca, 0x6, 0x2, 0x8, 0x7, 0xffffffffffffff24, 0x8001, 0x2, 0x80, 0x7ff, 0x7fffffff, 0x6, 0x8, 0x39d, 0x3, 0x80, 0x8, 0x6, 0xc6, 0x1000000000, 0x4c2, 0x7f, 0x1, 0x8001, 0x1, 0xaf, 0x8, 0x0, 0x4, 0x0, 0x8, 0x4, 0x8a, 0x6, 0x3, 0x9, 0x8, 0x0, 0x1, 0x544, 0x4, 0x3, 0x5, 0x9, 0x1, 0x2, 0x401, 0x2, 0x3, 0xfffffffffffffffa, 0x0, 0x0, 0x5, 0x8, 0x876, 0x8, 0x100000001, 0x2, 0x7f, 0x2, 0x8001, 0xe2, 0x2a, 0x40, 0xffffffffffffff00, 0x1, 0x7b, 0x4c61, 0x4, 0x7fffffff, 0x200, 0x7, 0xb, 0x8000000000000000, 0x5, 0x9, 0x7, 0x9, 0x7, 0xffffffff, 0x0, 0x40, 0x40, 0x3, 0x5, 0x3, 0x1, 0x68ba, 0xe, 0x5, 0xf, 0x63, 0x3, 0x1, 0x9, 0x5, 0x6, 0x7, 0x76]}) sendmsg$kcm(r2, &(0x7f0000001e00)={&(0x7f0000000a00)=@hci={0x1f, 0x1}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="8a40c827c810ec7b9e07c27e6e958242fbf470fe0d0415f2f5dac688a4fd18b256174bb85ed2e7cde1c9edaf3446c752442db602c046669f9cdd7868253f77fc272b9eb670297969d3cbe0241420d96aee3a207974e63ee5ad2e7f4c38537af1ca54015274bfc7c3b7044cad1e05fbe8ac3e5e4dd183dd6e4aa1814e49fa756d22e7f7ecdbf03a3588461a8146f9b29af1c34230cebf1cf0b413eaeb0c3b0ee7e8fd1eec8743cc0d", 0xa8}, {&(0x7f0000001b40)="9e604219908c5d7c67ed8be40c39aa6527d7630586ec991c3a6b8228fba880ab22e95679d794db6493c06170b9d8e98fe361302b33bb19744a961fed23d549fecfe46f518209ca0f9636986b1aed35ce5fd9e1ea4a7e32945a6a40fade7f054e8065d5a19a75e5a1a7bfcdc0ce5edb043b49eaff86e7238963965a50ec9240e3d7b313967020f67a58b55a6b3cfc730cdcef1353815635c97526060943317b0517c690f89cf6f36d398bd71ee5", 0xad}], 0x3, &(0x7f0000001c40)=[{0x70, 0x0, 0xf, "c6b2d1cd6cdb8ff00c18c0c5f3f047ec06ea5b35e14a4fd8f6b739c27579d1a3db93d6742a43c11f742bfa69af49fc06094911d7192fb66cb5f801c17ced1b085318867fd3936cc2e928b7966b33d0325f1b14282559474a0cbada"}, {0x50, 0x3a, 0x5, "5c137d07614be888c32c87093520a6110349449fff7e559134e37d82c5988aefea6e244845589ead3de4ae2452a19d3c843d1121b7acb3c6aef9623ffbaa"}, {0xf8, 0x113, 0x6, "9ea98d78b2b2cd628ae05a8705f7ebb52ff40cb1bad63329cfbfef52434c3fa51958e8fda0e1f10703d9267d53ad3047693530f95a746eb27739a5f701d89b421d71ca597ca612b76a103883ddbe1a354a7853bcedf6a4002aaffa5e93d6d9c4ffa85b50a1785a7269f4414623637823c6d715cdcfd70b6a2712a21c246d3c83bbe0713fb80b3f9a6abbbe479fc9b0d9d9c265d9d42936eb3a08205af0187b35622c00b58297d2b7260d5e8d3e290a0b2bfb93e96468c1462a542ff74b192815b6ef3b0464d998d738d2809fef5837c378fe620f4f4fa2ed0ab6e4366242af245151d33295af"}], 0x1b8}, 0x50) sendmsg$IPSET_CMD_TYPE(r2, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x54, 0xd, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xb}]}, 0x54}, 0x1, 0x0, 0x0, 0x24044045}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = accept4$netrom(r2, 0x0, &(0x7f0000001f80), 0x80800) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000001fc0), &(0x7f0000002000)=0x30) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002040)={'vxcan1\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000002080)={0x1d, r5}, 0x10) r6 = socket(0xa, 0x5, 0x3) sendmsg$BATADV_CMD_GET_GATEWAYS(r2, &(0x7f00000021c0)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x64, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x81}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xb8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x4c040) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002200)='syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000002240)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000002280)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002300), r2) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f00000024c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002480)={&(0x7f0000002340)={0x110, r9, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x7c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}]}, 0x110}, 0x1, 0x0, 0x0, 0x4014}, 0x40) r10 = socket$nl_audit(0x10, 0x3, 0x9) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x5, 0x8010, r10, 0x2dce6000) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000002540), r8) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x50, r11, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008005}, 0xf0da1d82eb511eb9) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000027c0)={0x0, 0x6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000002880)={0x6, 0x2, &(0x7f0000002680)=@raw=[@alu={0x4, 0x1, 0xd, 0xe, 0xa, 0x18, 0x1}, @generic={0x7f, 0x1, 0x8, 0x200, 0x101}], &(0x7f00000026c0)='GPL\x00', 0x5, 0x21, &(0x7f0000002700)=""/33, 0x41000, 0x42, '\x00', r5, 0xa, r8, 0x8, &(0x7f0000002740)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000002780)={0x1, 0x1, 0xffffffa4, 0x8}, 0x10, 0x0, r8, 0x4, &(0x7f0000002800)=[r8, r3, r12, r8, r8, 0xffffffffffffffff, r8, r8], &(0x7f0000002840)=[{0x4, 0x4, 0xf, 0x8}, {0x5, 0x3, 0xe, 0x6}, {0x2, 0x1, 0x10, 0x3}, {0x2, 0x4, 0xe, 0x1}], 0x10, 0x2}, 0x90) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x24, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x200400c4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000002ec0)={@map, 0xffffffffffffffff, 0x2a, 0x3c, 0xffffffffffffffff, @link_id}, 0x20) 190.572292ms ago: executing program 0 (id=3504): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000000008500000005000000bc690000002000003509010000000000950000000400000087060000000000007b9af8ff00000000b5090200000000007baaf0ff00000000bfa600000000000007080000f8ffffffbf64000000000000070400000b000000b70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056040000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 68.358044ms ago: executing program 0 (id=3505): socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a40)='o', 0x1}, {0x0, 0x2}], 0x2}}], 0x5, 0x0) (async) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000a40)='o', 0x1}, {0x0, 0x2}], 0x2}}], 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800b8b6531ab4e0f3e000000018110000000000", @ANYRESOCT=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000010bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000000f0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x4000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f00000001c0)='cachefiles_ondemand_cread\x00', r2}, 0x2) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, 0x0, 0x0) (async) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) (async) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r2, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(r2, &(0x7f0000000440)='memory.events\x00', 0x275a, 0x0) preadv(r4, 0x0, 0x0, 0x0, 0x0) (async) preadv(r4, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000400)={'#! ', '', [{0x20, '@*\x00(@,)!'}]}, 0xd) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000002b) (async) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000002b) ioctl$sock_netrom_SIOCDELRT(r5, 0x890c, &(0x7f0000000380)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x9, 'syz1\x00', @bcast, 0x0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @null]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) (async) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="44000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000140012800b000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYBLOB="5cf30ddabb344ad11540c386b8034c3e22b59b273f11148e1c522f8ba0708daaf39bd00efe9d1f0c376668705e95c6105d6e4496e9730935f8488af29f2de92191572893fa2465bd308fc28deaa794d746bdcb063046ba"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r7, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r8, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) (async) recvmsg(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2) 67.498569ms ago: executing program 3 (id=3506): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x6, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000190001000000000075000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000001"], 0xb8}}, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x8a98}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000005c0)={r2, 0x100}, 0x8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x20040600) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x0) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="87", 0x1}], 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_opts(r6, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0204965bf0177e4a13748a9f92b82f14de704b29b012fff0688511e1656d9cdcd465c8ca1416aa3b40c223fa4045c7673af7f8631f3dd4fa08941cf506f7"], 0x18) socket$key(0xf, 0x3, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x90) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r8, r7}, 0x10) 7.324212ms ago: executing program 3 (id=3507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet(0xa, 0x801, 0x0) unshare(0x20000400) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32], 0x90}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000eb0000000001000000940000930600003e5f0000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000001c0)={0x6, 'sit0\x00', {0xfffffffe}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(r7, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0xa2e0, 0x4) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r10, @ANYBLOB="00000000000000002000128008000100677265001400028006000f000000000006000e00002f"], 0x40}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4030000120008002dbd7000fedbdf234e24090000000600000000080000800000007f7f0000070000000300000006000000", @ANYRES32=r10, @ANYBLOB="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"], 0x3c4}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) 0s ago: executing program 4 (id=3508): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x48) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x4, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040000}, 0xc010) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x800000, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f00000015c0)="f5", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0x3f}}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080), 0x14) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="0180d55532b5a224800f8000000000aa95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000001280), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): ack_lvl+0x241/0x360 [ 251.937921][T13974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.943145][T13974] ? __pfx__printk+0x10/0x10 [ 251.947758][T13974] ? __pfx_lock_release+0x10/0x10 [ 251.952814][T13974] should_fail_ex+0x3b0/0x4e0 [ 251.957516][T13974] _copy_from_iter+0x1f6/0x1960 [ 251.962483][T13974] ? __virt_addr_valid+0x183/0x530 [ 251.967626][T13974] ? __pfx_lock_release+0x10/0x10 [ 251.972871][T13974] ? __alloc_skb+0x28f/0x440 [ 251.977504][T13974] ? __pfx__copy_from_iter+0x10/0x10 [ 251.982838][T13974] ? __virt_addr_valid+0x183/0x530 [ 251.987986][T13974] ? __virt_addr_valid+0x183/0x530 [ 251.993128][T13974] ? __virt_addr_valid+0x45f/0x530 [ 251.998270][T13974] ? __check_object_size+0x49c/0x900 [ 252.003589][T13974] netlink_sendmsg+0x73d/0xcb0 [ 252.008401][T13974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.013707][T13974] ? __import_iovec+0x536/0x820 [ 252.018589][T13974] ? aa_sock_msg_perm+0x91/0x160 [ 252.023560][T13974] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 252.028877][T13974] ? security_socket_sendmsg+0x87/0xb0 [ 252.034365][T13974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.039676][T13974] __sock_sendmsg+0x221/0x270 [ 252.044390][T13974] ____sys_sendmsg+0x525/0x7d0 [ 252.049200][T13974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.054530][T13974] __sys_sendmsg+0x2b0/0x3a0 [ 252.059146][T13974] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.064285][T13974] ? vfs_write+0x7c4/0xc90 [ 252.068781][T13974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.075133][T13974] ? do_syscall_64+0x100/0x230 [ 252.079922][T13974] ? do_syscall_64+0xb6/0x230 [ 252.084632][T13974] do_syscall_64+0xf3/0x230 [ 252.089263][T13974] ? clear_bhb_loop+0x35/0x90 [ 252.093961][T13974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.099868][T13974] RIP: 0033:0x7f8984175f19 [ 252.104275][T13974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.123878][T13974] RSP: 002b:00007f8984e80048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.132301][T13974] RAX: ffffffffffffffda RBX: 00007f8984305f60 RCX: 00007f8984175f19 [ 252.140294][T13974] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 252.148334][T13974] RBP: 00007f8984e800a0 R08: 0000000000000000 R09: 0000000000000000 [ 252.156323][T13974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.164318][T13974] R13: 000000000000000b R14: 00007f8984305f60 R15: 00007ffe420a73a8 [ 252.172317][T13974] [ 252.212615][T13979] syzkaller0: left allmulticast mode [ 253.110489][T14035] FAULT_INJECTION: forcing a failure. [ 253.110489][T14035] name failslab, interval 1, probability 0, space 0, times 0 [ 253.124132][ C0] eth0: bad gso: type: 1, size: 1408 [ 253.130894][ C0] eth0: bad gso: type: 1, size: 1408 [ 253.143801][T14035] CPU: 0 PID: 14035 Comm: syz.3.2318 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 253.153656][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 253.163741][T14035] Call Trace: [ 253.167034][T14035] [ 253.169974][T14035] dump_stack_lvl+0x241/0x360 [ 253.174679][T14035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.179898][T14035] ? __pfx__printk+0x10/0x10 [ 253.184512][T14035] ? ref_tracker_alloc+0x332/0x490 [ 253.189658][T14035] should_fail_ex+0x3b0/0x4e0 [ 253.194365][T14035] ? skb_clone+0x20c/0x390 [ 253.198800][T14035] should_failslab+0x9/0x20 [ 253.203306][T14035] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 253.208682][T14035] skb_clone+0x20c/0x390 [ 253.212923][T14035] __netlink_deliver_tap+0x3cc/0x7c0 [ 253.218215][T14035] ? netlink_deliver_tap+0x2e/0x1b0 [ 253.223416][T14035] netlink_deliver_tap+0x19d/0x1b0 [ 253.228524][T14035] netlink_unicast+0x7be/0x990 [ 253.233295][T14035] ? __pfx_netlink_unicast+0x10/0x10 [ 253.238578][T14035] ? __virt_addr_valid+0x183/0x530 [ 253.243783][T14035] ? __check_object_size+0x49c/0x900 [ 253.249065][T14035] ? bpf_lsm_netlink_send+0x9/0x10 [ 253.254173][T14035] netlink_sendmsg+0x8e4/0xcb0 [ 253.258944][T14035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.264225][T14035] ? __import_iovec+0x536/0x820 [ 253.269070][T14035] ? aa_sock_msg_perm+0x91/0x160 [ 253.274091][T14035] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 253.279370][T14035] ? security_socket_sendmsg+0x87/0xb0 [ 253.284827][T14035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.290109][T14035] __sock_sendmsg+0x221/0x270 [ 253.294786][T14035] ____sys_sendmsg+0x525/0x7d0 [ 253.299556][T14035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.304850][T14035] __sys_sendmsg+0x2b0/0x3a0 [ 253.309432][T14035] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.314541][T14035] ? vfs_write+0x7c4/0xc90 [ 253.318987][T14035] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.325399][T14035] ? do_syscall_64+0x100/0x230 [ 253.330157][T14035] ? do_syscall_64+0xb6/0x230 [ 253.334828][T14035] do_syscall_64+0xf3/0x230 [ 253.339325][T14035] ? clear_bhb_loop+0x35/0x90 [ 253.344001][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.349890][T14035] RIP: 0033:0x7f8984175f19 [ 253.354302][T14035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.373903][T14035] RSP: 002b:00007f8984e80048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.382309][T14035] RAX: ffffffffffffffda RBX: 00007f8984305f60 RCX: 00007f8984175f19 [ 253.390285][T14035] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 253.398485][T14035] RBP: 00007f8984e800a0 R08: 0000000000000000 R09: 0000000000000000 [ 253.406561][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.414530][T14035] R13: 000000000000000b R14: 00007f8984305f60 R15: 00007ffe420a73a8 [ 253.422526][T14035] [ 254.336763][T14096] FAULT_INJECTION: forcing a failure. [ 254.336763][T14096] name failslab, interval 1, probability 0, space 0, times 0 [ 254.378302][T14096] CPU: 1 PID: 14096 Comm: syz.3.2331 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 254.388168][T14096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 254.398246][T14096] Call Trace: [ 254.401632][T14096] [ 254.404579][T14096] dump_stack_lvl+0x241/0x360 [ 254.409290][T14096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.414517][T14096] ? __pfx__printk+0x10/0x10 [ 254.419150][T14096] should_fail_ex+0x3b0/0x4e0 [ 254.423857][T14096] ? __alloc_skb+0x1c3/0x440 [ 254.428570][T14096] should_failslab+0x9/0x20 [ 254.433103][T14096] kmem_cache_alloc_node_noprof+0x71/0x320 [ 254.438960][T14096] __alloc_skb+0x1c3/0x440 [ 254.443409][T14096] ? __pfx___alloc_skb+0x10/0x10 [ 254.448405][T14096] ? netlink_ack_tlv_len+0x6e/0x200 [ 254.453617][T14096] netlink_ack+0x13f/0xa30 [ 254.458038][T14096] ? __sys_sendmsg+0x2b0/0x3a0 [ 254.462799][T14096] ? do_syscall_64+0xf3/0x230 [ 254.467504][T14096] netlink_rcv_skb+0x262/0x430 [ 254.472293][T14096] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 254.477760][T14096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 254.483072][T14096] ? apparmor_capable+0x138/0x1b0 [ 254.488114][T14096] ? bpf_lsm_capable+0x9/0x10 [ 254.492892][T14096] ? security_capable+0x90/0xb0 [ 254.497769][T14096] nfnetlink_rcv+0x297/0x2a90 [ 254.502896][T14096] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 254.508621][T14096] ? __dev_queue_xmit+0x2da/0x3e90 [ 254.513742][T14096] ? __dev_queue_xmit+0x1763/0x3e90 [ 254.518935][T14096] ? kasan_save_track+0x51/0x80 [ 254.523876][T14096] ? do_syscall_64+0xf3/0x230 [ 254.528547][T14096] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 254.533656][T14096] ? __dev_queue_xmit+0x2da/0x3e90 [ 254.538771][T14096] ? __pfx___dev_queue_xmit+0x10/0x10 [ 254.544159][T14096] ? ref_tracker_free+0x643/0x7e0 [ 254.549192][T14096] ? __asan_memcpy+0x40/0x70 [ 254.553805][T14096] ? __pfx_ref_tracker_free+0x10/0x10 [ 254.559200][T14096] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.564403][T14096] ? skb_clone+0x240/0x390 [ 254.568819][T14096] ? __pfx_lock_release+0x10/0x10 [ 254.573873][T14096] ? __netlink_deliver_tap+0x77e/0x7c0 [ 254.579337][T14096] ? netlink_deliver_tap+0x2e/0x1b0 [ 254.584530][T14096] netlink_unicast+0x7f0/0x990 [ 254.589295][T14096] ? __pfx_netlink_unicast+0x10/0x10 [ 254.594569][T14096] ? __virt_addr_valid+0x183/0x530 [ 254.599684][T14096] ? __check_object_size+0x49c/0x900 [ 254.604963][T14096] ? bpf_lsm_netlink_send+0x9/0x10 [ 254.610071][T14096] netlink_sendmsg+0x8e4/0xcb0 [ 254.614839][T14096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.620156][T14096] ? __import_iovec+0x536/0x820 [ 254.625087][T14096] ? aa_sock_msg_perm+0x91/0x160 [ 254.630018][T14096] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 254.635293][T14096] ? security_socket_sendmsg+0x87/0xb0 [ 254.640750][T14096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.646027][T14096] __sock_sendmsg+0x221/0x270 [ 254.650711][T14096] ____sys_sendmsg+0x525/0x7d0 [ 254.655574][T14096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 254.660866][T14096] __sys_sendmsg+0x2b0/0x3a0 [ 254.665450][T14096] ? __pfx___sys_sendmsg+0x10/0x10 [ 254.670555][T14096] ? vfs_write+0x7c4/0xc90 [ 254.675002][T14096] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.681320][T14096] ? do_syscall_64+0x100/0x230 [ 254.686174][T14096] ? do_syscall_64+0xb6/0x230 [ 254.690844][T14096] do_syscall_64+0xf3/0x230 [ 254.695340][T14096] ? clear_bhb_loop+0x35/0x90 [ 254.700014][T14096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.705914][T14096] RIP: 0033:0x7f8984175f19 [ 254.710320][T14096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.729918][T14096] RSP: 002b:00007f8984e80048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.738334][T14096] RAX: ffffffffffffffda RBX: 00007f8984305f60 RCX: 00007f8984175f19 [ 254.746308][T14096] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 254.754276][T14096] RBP: 00007f8984e800a0 R08: 0000000000000000 R09: 0000000000000000 [ 254.762262][T14096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.770252][T14096] R13: 000000000000000b R14: 00007f8984305f60 R15: 00007ffe420a73a8 [ 254.778240][T14096] [ 255.390659][T14109] __nla_validate_parse: 40 callbacks suppressed [ 255.390680][T14109] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2336'. [ 255.802327][T14139] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2339'. [ 256.102839][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.210223][T14156] FAULT_INJECTION: forcing a failure. [ 256.210223][T14156] name failslab, interval 1, probability 0, space 0, times 0 [ 256.236205][T14156] CPU: 1 PID: 14156 Comm: syz.3.2345 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 256.246149][T14156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 256.256231][T14156] Call Trace: [ 256.259536][T14156] [ 256.262482][T14156] dump_stack_lvl+0x241/0x360 [ 256.267267][T14156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.272477][T14156] ? __pfx__printk+0x10/0x10 [ 256.277087][T14156] should_fail_ex+0x3b0/0x4e0 [ 256.282046][T14156] ? __alloc_skb+0x1c3/0x440 [ 256.286653][T14156] should_failslab+0x9/0x20 [ 256.291164][T14156] kmem_cache_alloc_node_noprof+0x71/0x320 [ 256.296991][T14156] __alloc_skb+0x1c3/0x440 [ 256.301422][T14156] ? __pfx___alloc_skb+0x10/0x10 [ 256.306376][T14156] ? netlink_ack_tlv_len+0x6e/0x200 [ 256.311593][T14156] netlink_ack+0x13f/0xa30 [ 256.316028][T14156] ? __sys_sendmsg+0x2b0/0x3a0 [ 256.320887][T14156] ? do_syscall_64+0xf3/0x230 [ 256.325623][T14156] netlink_rcv_skb+0x262/0x430 [ 256.330428][T14156] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 256.335999][T14156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 256.341315][T14156] ? apparmor_capable+0x138/0x1b0 [ 256.346365][T14156] ? bpf_lsm_capable+0x9/0x10 [ 256.351059][T14156] ? security_capable+0x90/0xb0 [ 256.355960][T14156] nfnetlink_rcv+0x297/0x2a90 [ 256.360676][T14156] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 256.366427][T14156] ? __dev_queue_xmit+0x2da/0x3e90 [ 256.371565][T14156] ? __dev_queue_xmit+0x1763/0x3e90 [ 256.376781][T14156] ? kasan_save_track+0x51/0x80 [ 256.381651][T14156] ? do_syscall_64+0xf3/0x230 [ 256.386359][T14156] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 256.391496][T14156] ? __dev_queue_xmit+0x2da/0x3e90 [ 256.396620][T14156] ? __pfx___dev_queue_xmit+0x10/0x10 [ 256.402014][T14156] ? ref_tracker_free+0x643/0x7e0 [ 256.407059][T14156] ? __asan_memcpy+0x40/0x70 [ 256.411670][T14156] ? __pfx_ref_tracker_free+0x10/0x10 [ 256.417070][T14156] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.422369][T14156] ? skb_clone+0x240/0x390 [ 256.426897][T14156] ? __pfx_lock_release+0x10/0x10 [ 256.431957][T14156] ? __netlink_deliver_tap+0x77e/0x7c0 [ 256.437450][T14156] ? netlink_deliver_tap+0x2e/0x1b0 [ 256.442680][T14156] netlink_unicast+0x7f0/0x990 [ 256.447483][T14156] ? __pfx_netlink_unicast+0x10/0x10 [ 256.452794][T14156] ? __virt_addr_valid+0x183/0x530 [ 256.457951][T14156] ? __check_object_size+0x49c/0x900 [ 256.463261][T14156] ? bpf_lsm_netlink_send+0x9/0x10 [ 256.468399][T14156] netlink_sendmsg+0x8e4/0xcb0 [ 256.473201][T14156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.478510][T14156] ? __import_iovec+0x536/0x820 [ 256.483381][T14156] ? aa_sock_msg_perm+0x91/0x160 [ 256.488516][T14156] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 256.493924][T14156] ? security_socket_sendmsg+0x87/0xb0 [ 256.499417][T14156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.504724][T14156] __sock_sendmsg+0x221/0x270 [ 256.509429][T14156] ____sys_sendmsg+0x525/0x7d0 [ 256.514228][T14156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.519556][T14156] __sys_sendmsg+0x2b0/0x3a0 [ 256.524312][T14156] ? __pfx___sys_sendmsg+0x10/0x10 [ 256.529495][T14156] ? vfs_write+0x7c4/0xc90 [ 256.533981][T14156] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.540333][T14156] ? do_syscall_64+0x100/0x230 [ 256.545118][T14156] ? do_syscall_64+0xb6/0x230 [ 256.549825][T14156] do_syscall_64+0xf3/0x230 [ 256.554355][T14156] ? clear_bhb_loop+0x35/0x90 [ 256.559069][T14156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.565002][T14156] RIP: 0033:0x7f8984175f19 [ 256.569442][T14156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.589083][T14156] RSP: 002b:00007f8984e80048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.597513][T14156] RAX: ffffffffffffffda RBX: 00007f8984305f60 RCX: 00007f8984175f19 [ 256.605577][T14156] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 256.613556][T14156] RBP: 00007f8984e800a0 R08: 0000000000000000 R09: 0000000000000000 [ 256.621537][T14156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.629527][T14156] R13: 000000000000000b R14: 00007f8984305f60 R15: 00007ffe420a73a8 [ 256.637519][T14156] [ 256.666967][T14160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 256.757042][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'. [ 256.848440][T14172] netlink: 'syz.2.2348': attribute type 2 has an invalid length. [ 256.922450][T14170] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2349'. [ 257.230027][T14193] bond0: left promiscuous mode [ 257.242930][T14193] bond_slave_0: left promiscuous mode [ 257.262853][T14193] bond_slave_1: left promiscuous mode [ 257.489475][T14203] FAULT_INJECTION: forcing a failure. [ 257.489475][T14203] name failslab, interval 1, probability 0, space 0, times 0 [ 257.512919][T14203] CPU: 1 PID: 14203 Comm: syz.4.2356 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 257.522790][T14203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 257.532871][T14203] Call Trace: [ 257.536186][T14203] [ 257.539143][T14203] dump_stack_lvl+0x241/0x360 [ 257.543837][T14203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.549033][T14203] ? __pfx__printk+0x10/0x10 [ 257.553627][T14203] ? ref_tracker_alloc+0x332/0x490 [ 257.558732][T14203] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 257.564191][T14203] should_fail_ex+0x3b0/0x4e0 [ 257.568863][T14203] ? skb_clone+0x20c/0x390 [ 257.573269][T14203] should_failslab+0x9/0x20 [ 257.577765][T14203] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 257.583134][T14203] skb_clone+0x20c/0x390 [ 257.587368][T14203] __netlink_deliver_tap+0x3cc/0x7c0 [ 257.592656][T14203] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.597847][T14203] netlink_deliver_tap+0x19d/0x1b0 [ 257.602956][T14203] netlink_sendskb+0x68/0x140 [ 257.607628][T14203] netlink_unicast+0x39d/0x990 [ 257.612386][T14203] ? __asan_memcpy+0x40/0x70 [ 257.617029][T14203] ? __pfx_netlink_unicast+0x10/0x10 [ 257.622346][T14203] netlink_rcv_skb+0x262/0x430 [ 257.627242][T14203] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 257.632718][T14203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 257.638115][T14203] ? apparmor_capable+0x138/0x1b0 [ 257.643236][T14203] ? bpf_lsm_capable+0x9/0x10 [ 257.647919][T14203] ? security_capable+0x90/0xb0 [ 257.652789][T14203] nfnetlink_rcv+0x297/0x2a90 [ 257.657472][T14203] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 257.663192][T14203] ? __dev_queue_xmit+0x2da/0x3e90 [ 257.668300][T14203] ? __dev_queue_xmit+0x1763/0x3e90 [ 257.673489][T14203] ? kasan_save_track+0x51/0x80 [ 257.678340][T14203] ? do_syscall_64+0xf3/0x230 [ 257.683015][T14203] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 257.688127][T14203] ? __dev_queue_xmit+0x2da/0x3e90 [ 257.693239][T14203] ? __pfx___dev_queue_xmit+0x10/0x10 [ 257.698618][T14203] ? ref_tracker_free+0x643/0x7e0 [ 257.703636][T14203] ? __asan_memcpy+0x40/0x70 [ 257.708220][T14203] ? __pfx_ref_tracker_free+0x10/0x10 [ 257.713626][T14203] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.718841][T14203] ? skb_clone+0x240/0x390 [ 257.723259][T14203] ? __pfx_lock_release+0x10/0x10 [ 257.728284][T14203] ? __netlink_deliver_tap+0x77e/0x7c0 [ 257.733747][T14203] ? netlink_deliver_tap+0x2e/0x1b0 [ 257.738943][T14203] netlink_unicast+0x7f0/0x990 [ 257.743709][T14203] ? __pfx_netlink_unicast+0x10/0x10 [ 257.749043][T14203] ? __virt_addr_valid+0x183/0x530 [ 257.754159][T14203] ? __check_object_size+0x49c/0x900 [ 257.759459][T14203] ? bpf_lsm_netlink_send+0x9/0x10 [ 257.764592][T14203] netlink_sendmsg+0x8e4/0xcb0 [ 257.769380][T14203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.774756][T14203] ? __import_iovec+0x536/0x820 [ 257.779606][T14203] ? aa_sock_msg_perm+0x91/0x160 [ 257.784545][T14203] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 257.789932][T14203] ? security_socket_sendmsg+0x87/0xb0 [ 257.795423][T14203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.800720][T14203] __sock_sendmsg+0x221/0x270 [ 257.805411][T14203] ____sys_sendmsg+0x525/0x7d0 [ 257.810187][T14203] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.815483][T14203] __sys_sendmsg+0x2b0/0x3a0 [ 257.820080][T14203] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.825190][T14203] ? vfs_write+0x7c4/0xc90 [ 257.829812][T14203] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.836139][T14203] ? do_syscall_64+0x100/0x230 [ 257.840901][T14203] ? do_syscall_64+0xb6/0x230 [ 257.845574][T14203] do_syscall_64+0xf3/0x230 [ 257.850160][T14203] ? clear_bhb_loop+0x35/0x90 [ 257.854838][T14203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.860726][T14203] RIP: 0033:0x7fc868375f19 [ 257.865150][T14203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.884859][T14203] RSP: 002b:00007fc867dff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.893269][T14203] RAX: ffffffffffffffda RBX: 00007fc868505f60 RCX: 00007fc868375f19 [ 257.901231][T14203] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 257.909196][T14203] RBP: 00007fc867dff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 257.917253][T14203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.925217][T14203] R13: 000000000000004d R14: 00007fc868505f60 R15: 00007ffd2fdfecc8 [ 257.933201][T14203] [ 258.169414][ T54] Bluetooth: hci5: command 0x0405 tx timeout [ 258.307860][T14222] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2361'. [ 258.389463][T14215] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2362'. [ 258.638716][T14248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2364'. [ 259.331308][T14273] FAULT_INJECTION: forcing a failure. [ 259.331308][T14273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.388480][T14273] CPU: 1 PID: 14273 Comm: syz.3.2374 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 259.398459][T14273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 259.409773][T14273] Call Trace: [ 259.414124][T14273] [ 259.417884][T14273] dump_stack_lvl+0x241/0x360 [ 259.422866][T14273] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.428219][T14273] ? __pfx__printk+0x10/0x10 [ 259.433053][T14273] ? snprintf+0xda/0x120 [ 259.437339][T14273] should_fail_ex+0x3b0/0x4e0 [ 259.442222][T14273] _copy_to_user+0x2f/0xb0 [ 259.446655][T14273] simple_read_from_buffer+0xca/0x150 [ 259.452465][T14273] proc_fail_nth_read+0x1e9/0x250 [ 259.457804][T14273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.463412][T14273] ? rw_verify_area+0x520/0x6b0 [ 259.470328][T14273] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 259.476206][T14273] vfs_read+0x204/0xbc0 [ 259.480871][T14273] ? __pfx_lock_release+0x10/0x10 [ 259.486030][T14273] ? __pfx_vfs_read+0x10/0x10 [ 259.491024][T14273] ? __fget_files+0x29/0x470 [ 259.496178][T14273] ? __fget_files+0x3f6/0x470 [ 259.503257][T14273] ksys_read+0x1a0/0x2c0 [ 259.507568][T14273] ? __pfx_ksys_read+0x10/0x10 [ 259.512551][T14273] ? rcu_is_watching+0x15/0xb0 [ 259.517406][T14273] ? trace_sys_enter+0x1f/0xd0 [ 259.522326][T14273] do_syscall_64+0xf3/0x230 [ 259.527820][T14273] ? clear_bhb_loop+0x35/0x90 [ 259.532548][T14273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.538479][T14273] RIP: 0033:0x7f89841749fc [ 259.542923][T14273] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 259.562658][T14273] RSP: 002b:00007f8984e80040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 259.571112][T14273] RAX: ffffffffffffffda RBX: 00007f8984305f60 RCX: 00007f89841749fc [ 259.579155][T14273] RDX: 000000000000000f RSI: 00007f8984e800b0 RDI: 0000000000000004 [ 259.587249][T14273] RBP: 00007f8984e800a0 R08: 0000000000000000 R09: 0000000000000000 [ 259.595506][T14273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.603507][T14273] R13: 000000000000000b R14: 00007f8984305f60 R15: 00007ffe420a73a8 [ 259.611711][T14273] [ 259.649986][T14277] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2375'. [ 259.682966][T14277] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 259.707235][T14277] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2375'. [ 259.890007][T14280] netlink: 'syz.4.2375': attribute type 1 has an invalid length. [ 260.500571][T14318] sctp: [Deprecated]: syz.1.2384 (pid 14318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 260.500571][T14318] Use struct sctp_sack_info instead [ 260.539190][T14318] __nla_validate_parse: 3 callbacks suppressed [ 260.539206][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2384'. [ 260.544946][T14320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2386'. [ 260.776563][T14325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.831817][T14325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.036693][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 261.046165][T14335] xt_connbytes: Forcing CT accounting to be enabled [ 261.057609][T14335] xt_NFQUEUE: number of total queues is 0 [ 261.163761][T14341] bridge_slave_0: left allmulticast mode [ 261.174566][T14341] bridge_slave_0: left promiscuous mode [ 261.185212][T14341] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.203182][T14341] bridge_slave_1: left allmulticast mode [ 261.230693][T14341] bridge_slave_1: left promiscuous mode [ 261.251169][T14341] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.314793][T14341] bond0: (slave bond_slave_0): Releasing backup interface [ 261.363695][T14341] bond0: (slave bond_slave_1): Releasing backup interface [ 261.470865][T14341] team0: Port device team_slave_0 removed [ 261.510181][T14341] team0: Port device team_slave_1 removed [ 261.531381][T14349] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2393'. [ 261.532677][T14341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.567152][T14341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.587290][T14341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.606041][T14341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.667282][T14342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.694218][T14342] team0: Port device bond0 added [ 261.717522][T14353] netlink: 'syz.0.2394': attribute type 3 has an invalid length. [ 261.948948][T14368] sit0: entered allmulticast mode [ 262.018960][T14368] sit0: entered promiscuous mode [ 262.688546][T14391] xt_connbytes: Forcing CT accounting to be enabled [ 262.923089][ C0] eth0: bad gso: type: 1, size: 1408 [ 262.925329][T14397] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2404'. [ 262.983204][T14402] IPv6: Can't replace route, no match found [ 263.046863][T14405] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2407'. [ 263.063075][T14405] Êü: entered promiscuous mode [ 263.171094][T14409] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2408'. [ 263.212346][T14418] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 263.231258][T14411] IPVS: stopping backup sync thread 14418 ... [ 263.244842][T14416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.369002][T14427] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 263.378770][T14416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.957856][T14451] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2418'. [ 264.801920][T14494] batadv0: entered promiscuous mode [ 264.815292][T14492] batadv0: left promiscuous mode [ 265.095171][T14505] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2431'. [ 265.430405][T14523] RDS: rds_bind could not find a transport for ::1200:0:c001:20:0:0, load rds_tcp or rds_rdma? [ 265.946524][T14540] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2440'. [ 266.022555][T14545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.082457][T14550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2441'. [ 266.111485][T14545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.397829][T14568] veth0_vlan: entered allmulticast mode [ 266.481588][T14572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2443'. [ 266.636511][T14577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2446'. [ 267.488230][T14620] netlink: 'syz.2.2456': attribute type 8 has an invalid length. [ 267.500751][T14620] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 267.558963][T14621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2456'. [ 267.597111][T14620] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2456'. [ 267.831187][T14634] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2458'. [ 268.003941][T14645] netlink: 'syz.2.2461': attribute type 10 has an invalid length. [ 268.094086][T14645] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 268.249069][ T54] Bluetooth: hci6: command 0x0405 tx timeout [ 268.514900][T14668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.602758][T14668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.960716][ C0] eth0: bad gso: type: 1, size: 1408 [ 268.967376][T14690] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2471'. [ 269.153614][T14701] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2474'. [ 269.469110][T14703] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2475'. [ 270.064454][ T5271] IPVS: starting estimator thread 0... [ 270.168903][T14739] IPVS: using max 21 ests per chain, 50400 per kthread [ 270.840550][T14771] IPVS: dh: SCTP 172.20.20.170:0 - no destination available [ 271.543491][T14792] __nla_validate_parse: 3 callbacks suppressed [ 271.543511][T14792] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2498'. [ 271.581528][T14789] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2496'. [ 271.759869][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 271.778999][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 271.787604][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 271.797855][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 271.807245][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 271.818407][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 272.558852][T12037] bond0: (slave netdevsim0): Releasing backup interface [ 273.058460][T14849] bridge0: port 1(team0) entered blocking state [ 273.068353][T14849] bridge0: port 1(team0) entered disabled state [ 273.076979][T14849] team0: entered allmulticast mode [ 273.082389][T14849] bond0: entered allmulticast mode [ 273.087625][T14849] mac80211_hwsim hwsim24 wlan1: entered allmulticast mode [ 273.111927][T14849] team0: entered promiscuous mode [ 273.128043][T14849] bond0: entered promiscuous mode [ 273.133412][T14849] mac80211_hwsim hwsim24 wlan1: entered promiscuous mode [ 273.152503][T14849] bridge0: port 1(team0) entered blocking state [ 273.158937][T14849] bridge0: port 1(team0) entered forwarding state [ 273.181418][T14857] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2510'. [ 273.651197][T12037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.662658][T12037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.673483][T12037] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 273.690700][T12037] bond0 (unregistering): Released all slaves [ 273.713989][T12037] bond1 (unregistering): Released all slaves [ 273.730540][T14853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2510'. [ 273.785272][ C0] eth0: bad gso: type: 1, size: 1408 [ 273.848551][T12037] tipc: Left network mode [ 273.859246][ T54] Bluetooth: hci7: command tx timeout [ 273.966907][T12037] IPVS: stopping backup sync thread 6717 ... [ 273.976400][T14803] chnl_net:caif_netlink_parms(): no params data found [ 274.049445][T14871] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2515'. [ 274.072956][T14865] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2513'. [ 274.254710][T14887] batadv_slave_1: entered promiscuous mode [ 274.504031][T14887] batadv_slave_1: left promiscuous mode [ 274.577878][T14803] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.585486][T14803] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.679558][T14803] bridge_slave_0: entered allmulticast mode [ 274.687024][T14803] bridge_slave_0: entered promiscuous mode [ 274.814903][T14803] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.846261][T14803] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.861543][T14803] bridge_slave_1: entered allmulticast mode [ 274.879452][T14803] bridge_slave_1: entered promiscuous mode [ 275.285870][T14803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.449838][T12037] hsr_slave_0: left promiscuous mode [ 275.479995][T14940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'. [ 275.499554][T12037] hsr_slave_1: left promiscuous mode [ 275.505375][T14932] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2528'. [ 275.552841][T12037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.586410][T12037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.930169][ T54] Bluetooth: hci7: command tx timeout [ 276.070079][T14955] netlink: 201400 bytes leftover after parsing attributes in process `syz.0.2532'. [ 276.319394][T12037] team0 (unregistering): Port device team_slave_1 removed [ 276.366349][T12037] team0 (unregistering): Port device team_slave_0 removed [ 276.762482][T14803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.049987][T14803] team0: Port device team_slave_0 added [ 277.112550][T14803] team0: Port device team_slave_1 added [ 277.247769][T14978] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2540'. [ 277.248475][T14981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2541'. [ 277.386950][T14803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.422511][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.479829][T14803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.493464][T14803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.502814][T14803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.536283][T14803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.546245][T14995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'. [ 277.641309][T14803] hsr_slave_0: entered promiscuous mode [ 277.661119][T14803] hsr_slave_1: entered promiscuous mode [ 277.699393][T12037] IPVS: stop unused estimator thread 0... [ 277.900781][T15009] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.2550'. [ 278.012814][T15019] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 278.028771][ T54] Bluetooth: hci7: command tx timeout [ 278.100548][T15024] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 278.526828][T15047] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'. [ 278.563798][T15047] IPVS: set_ctl: invalid protocol: 136 172.30.0.1:20004 [ 278.588154][ T5271] IPVS: starting estimator thread 0... [ 278.698665][T15054] IPVS: using max 18 ests per chain, 43200 per kthread [ 278.769362][T15067] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2568'. [ 278.820643][T14803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.985997][T14803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.045247][T14803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.109428][T14803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.443993][T14803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.536065][T14803] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.605143][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.612352][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.638761][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.645944][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.937376][T15123] can: request_module (can-proto-0) failed. [ 280.088496][ T54] Bluetooth: hci7: command tx timeout [ 280.143332][T14803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.227069][T15133] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2587'. [ 280.350030][T14803] veth0_vlan: entered promiscuous mode [ 280.376216][T14803] veth1_vlan: entered promiscuous mode [ 280.447249][T12047] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 280.491797][T14803] veth0_macvtap: entered promiscuous mode [ 280.515204][T14803] veth1_macvtap: entered promiscuous mode [ 280.612697][T15151] bridge0: port 1(team0) entered disabled state [ 280.721638][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.778230][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.810318][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.828128][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.848764][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.868454][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.881391][T14803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.900350][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.912960][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.923433][T14803] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 280.944611][T14803] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.964896][T14803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.031258][T15175] netlink: 'syz.0.2599': attribute type 4 has an invalid length. [ 281.081017][T14803] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.116495][T14803] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.133099][T14803] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.151383][T14803] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.174190][T15185] netlink: 'syz.0.2603': attribute type 21 has an invalid length. [ 281.182646][T15185] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2603'. [ 281.192846][T15185] netlink: 'syz.0.2603': attribute type 5 has an invalid length. [ 281.201473][T15185] netlink: 'syz.0.2603': attribute type 6 has an invalid length. [ 281.213545][T15185] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2603'. [ 281.436096][T15194] FAULT_INJECTION: forcing a failure. [ 281.436096][T15194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.471655][ T8223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.485499][T15194] CPU: 1 PID: 15194 Comm: syz.0.2605 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 281.495360][T15194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 281.505446][T15194] Call Trace: [ 281.505657][ T8223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.508734][T15194] [ 281.508745][T15194] dump_stack_lvl+0x241/0x360 [ 281.508773][T15194] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.508793][T15194] ? __pfx__printk+0x10/0x10 [ 281.508814][T15194] ? __pfx_lock_release+0x10/0x10 [ 281.508842][T15194] should_fail_ex+0x3b0/0x4e0 [ 281.508867][T15194] _copy_from_user+0x2f/0xe0 [ 281.508892][T15194] btf_new_fd+0x324/0xd30 [ 281.508923][T15194] ? __pfx_btf_new_fd+0x10/0x10 [ 281.508949][T15194] ? bpf_btf_load+0xcf/0x1a0 [ 281.508972][T15194] __sys_bpf+0x6ef/0x810 [ 281.508995][T15194] ? __pfx___sys_bpf+0x10/0x10 [ 281.509026][T15194] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.563821][T12037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.566220][T15194] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 281.566253][T15194] ? do_syscall_64+0x100/0x230 [ 281.581414][T12037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.584743][T15194] __x64_sys_bpf+0x7c/0x90 [ 281.584775][T15194] do_syscall_64+0xf3/0x230 [ 281.612128][T15194] ? clear_bhb_loop+0x35/0x90 [ 281.616839][T15194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.622763][T15194] RIP: 0033:0x7f76ba375f19 [ 281.627205][T15194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.647017][T15194] RSP: 002b:00007f76bb13f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 281.655465][T15194] RAX: ffffffffffffffda RBX: 00007f76ba505f60 RCX: 00007f76ba375f19 [ 281.663563][T15194] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000012 [ 281.671563][T15194] RBP: 00007f76bb13f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 281.679611][T15194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 281.687604][T15194] R13: 000000000000004d R14: 00007f76ba505f60 R15: 00007ffebfe8ce18 [ 281.695624][T15194] [ 281.839012][T15203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.876913][T15203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.910833][T15205] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2608'. [ 282.057138][ T5274] IPVS: starting estimator thread 0... [ 282.179512][T15213] IPVS: using max 18 ests per chain, 43200 per kthread [ 282.558932][T15244] netlink: 'syz.3.2617': attribute type 33 has an invalid length. [ 282.583690][T15251] FAULT_INJECTION: forcing a failure. [ 282.583690][T15251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 282.612713][T15251] CPU: 1 PID: 15251 Comm: syz.0.2618 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 282.622579][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 282.632751][T15251] Call Trace: [ 282.636056][T15251] [ 282.639007][T15251] dump_stack_lvl+0x241/0x360 [ 282.643889][T15251] ? __pfx_dump_stack_lvl+0x10/0x10 [ 282.649114][T15251] ? __pfx__printk+0x10/0x10 [ 282.653732][T15251] ? __pfx_lock_release+0x10/0x10 [ 282.658868][T15251] ? btf_check_sec_info+0x379/0x4f0 [ 282.664089][T15251] should_fail_ex+0x3b0/0x4e0 [ 282.668793][T15251] _copy_to_user+0x2f/0xb0 [ 282.673233][T15251] btf_new_fd+0x515/0xd30 [ 282.677620][T15251] ? __pfx_btf_new_fd+0x10/0x10 [ 282.682501][T15251] ? bpf_btf_load+0xcf/0x1a0 [ 282.687204][T15251] __sys_bpf+0x6ef/0x810 [ 282.691675][T15251] ? __pfx___sys_bpf+0x10/0x10 [ 282.696469][T15251] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 282.702477][T15251] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 282.708833][T15251] ? do_syscall_64+0x100/0x230 [ 282.713624][T15251] __x64_sys_bpf+0x7c/0x90 [ 282.718073][T15251] do_syscall_64+0xf3/0x230 [ 282.722594][T15251] ? clear_bhb_loop+0x35/0x90 [ 282.727271][T15251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.733165][T15251] RIP: 0033:0x7f76ba375f19 [ 282.737592][T15251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.757307][T15251] RSP: 002b:00007f76bb13f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 282.765728][T15251] RAX: ffffffffffffffda RBX: 00007f76ba505f60 RCX: 00007f76ba375f19 [ 282.773722][T15251] RDX: 0000000000000020 RSI: 0000000020000280 RDI: 0000000000000012 [ 282.781686][T15251] RBP: 00007f76bb13f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 282.789650][T15251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.797615][T15251] R13: 000000000000004d R14: 00007f76ba505f60 R15: 00007ffebfe8ce18 [ 282.805618][T15251] [ 283.062590][ C0] eth0: bad gso: type: 1, size: 1408 [ 283.123171][T15265] __nla_validate_parse: 2 callbacks suppressed [ 283.123191][T15265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2623'. [ 283.184691][T15265] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2623'. [ 283.492483][T15285] FAULT_INJECTION: forcing a failure. [ 283.492483][T15285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.510943][T15285] CPU: 0 PID: 15285 Comm: syz.4.2631 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 283.520802][T15285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 283.530936][T15285] Call Trace: [ 283.534244][T15285] [ 283.537193][T15285] dump_stack_lvl+0x241/0x360 [ 283.541883][T15285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.547085][T15285] ? __pfx__printk+0x10/0x10 [ 283.551674][T15285] ? snprintf+0xda/0x120 [ 283.555914][T15285] should_fail_ex+0x3b0/0x4e0 [ 283.560586][T15285] _copy_to_user+0x2f/0xb0 [ 283.564993][T15285] simple_read_from_buffer+0xca/0x150 [ 283.570377][T15285] proc_fail_nth_read+0x1e9/0x250 [ 283.575440][T15285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.581022][T15285] ? rw_verify_area+0x520/0x6b0 [ 283.585893][T15285] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.591465][T15285] vfs_read+0x204/0xbc0 [ 283.595651][T15285] ? __pfx_lock_release+0x10/0x10 [ 283.600674][T15285] ? __pfx_vfs_read+0x10/0x10 [ 283.605457][T15285] ? __fget_files+0x29/0x470 [ 283.610155][T15285] ? __fget_files+0x3f6/0x470 [ 283.614878][T15285] ksys_read+0x1a0/0x2c0 [ 283.619153][T15285] ? __pfx_ksys_read+0x10/0x10 [ 283.623948][T15285] ? rcu_is_watching+0x15/0xb0 [ 283.628920][T15285] ? trace_sys_enter+0x1f/0xd0 [ 283.633712][T15285] do_syscall_64+0xf3/0x230 [ 283.638240][T15285] ? clear_bhb_loop+0x35/0x90 [ 283.642952][T15285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.648869][T15285] RIP: 0033:0x7fc8683749fc [ 283.653309][T15285] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 283.673033][T15285] RSP: 002b:00007fc867dff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.681481][T15285] RAX: ffffffffffffffda RBX: 00007fc868505f60 RCX: 00007fc8683749fc [ 283.689465][T15285] RDX: 000000000000000f RSI: 00007fc867dff0b0 RDI: 0000000000000003 [ 283.697439][T15285] RBP: 00007fc867dff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 283.705422][T15285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.713388][T15285] R13: 000000000000004d R14: 00007fc868505f60 R15: 00007ffd2fdfecc8 [ 283.721387][T15285] [ 283.879820][T15288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2630'. [ 283.898551][T15289] netlink: 'syz.2.2630': attribute type 4 has an invalid length. [ 284.618498][T15345] vlan2: entered promiscuous mode [ 284.640276][T15341] bridge0: port 2(team0) entered blocking state [ 284.649285][T15341] bridge0: port 2(team0) entered disabled state [ 284.667508][T15341] team0: entered allmulticast mode [ 284.675290][T15341] team_slave_0: entered allmulticast mode [ 284.697575][T15341] team_slave_1: entered allmulticast mode [ 284.704487][T15341] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 284.715766][T15341] team0: entered promiscuous mode [ 284.723257][T15341] team_slave_0: entered promiscuous mode [ 284.730007][T15341] team_slave_1: entered promiscuous mode [ 284.735958][T15341] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 285.016490][T15362] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2648'. [ 285.075529][T15365] Cannot find set identified by id 0 to match [ 285.268513][T15376] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2654'. [ 285.278234][T15376] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 286.193062][T15424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2669'. [ 286.261466][T15427] pimreg: entered allmulticast mode [ 286.387232][T15433] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2672'. [ 286.639466][T15450] (unnamed net_device) (uninitialized): option arp_validate: invalid value (54528) [ 286.679212][T15450] netlink: 'syz.4.2680': attribute type 11 has an invalid length. [ 286.717608][T15450] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2680'. [ 286.767453][T15458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2683'. [ 287.732733][T15502] netlink: 'syz.2.2695': attribute type 2 has an invalid length. [ 287.779178][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'. [ 288.355362][T15539] netlink: 'syz.2.2704': attribute type 11 has an invalid length. [ 288.410942][T15548] xt_TPROXY: Can be used only with -p tcp or -p udp [ 288.614793][T15553] __nla_validate_parse: 2 callbacks suppressed [ 288.614810][T15553] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2708'. [ 288.656486][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2709'. [ 288.683311][T15561] netlink: 'syz.1.2709': attribute type 20 has an invalid length. [ 288.708380][T15559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2710'. [ 288.768419][T15563] x_tables: duplicate underflow at hook 2 [ 289.000815][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2714'. [ 289.051948][T15573] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2714'. [ 289.089441][T15580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2716'. [ 289.123515][T15580] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2716'. [ 289.215103][T15586] bridge2: entered promiscuous mode [ 289.221335][T15586] bridge2: entered allmulticast mode [ 289.308278][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2718'. [ 289.648682][T15606] x_tables: duplicate underflow at hook 2 [ 289.801921][T15614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2725'. [ 289.830775][T15614] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2725'. [ 290.940084][T15653] dummy0: entered promiscuous mode [ 291.019028][T15653] dummy0: left promiscuous mode [ 291.525194][T15694] ipvlan0: entered promiscuous mode [ 291.550285][T15694] Cannot find add_set index 0 as target [ 291.585225][T15693] ipvlan0: left promiscuous mode [ 292.429352][T15732] netlink: 'syz.2.2762': attribute type 3 has an invalid length. [ 292.467331][T15732] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 292.511541][T15740] netlink: 'syz.4.2766': attribute type 3 has an invalid length. [ 292.956375][T15762] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 293.007037][T15762] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 293.457014][T15792] netlink: 'syz.2.2779': attribute type 16 has an invalid length. [ 293.478656][T15792] bridge_slave_0: entered allmulticast mode [ 293.751104][T15805] netdevsim netdevsim2 : renamed from netdevsim0 (while UP) [ 294.034159][T15828] __nla_validate_parse: 16 callbacks suppressed [ 294.034179][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2789'. [ 294.067349][T15825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2788'. [ 294.093022][T15825] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2788'. [ 294.514224][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2795'. [ 294.534448][T15848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2795'. [ 294.554317][T15848] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2795'. [ 295.011451][T15864] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 295.036022][T15871] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.993786][T15918] IPVS: dh: SCTP 172.20.20.170:0 - no destination available [ 296.733055][T15948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2819'. [ 296.771294][T15948] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2819'. [ 298.001870][T16051] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2834'. [ 298.033263][T16051] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2834'. [ 298.252170][T16071] IPVS: set_ctl: invalid protocol: 137 172.30.1.4:20002 [ 298.512239][T16089] x_tables: duplicate underflow at hook 2 [ 298.856560][ C0] eth0: bad gso: type: 1, size: 1408 [ 299.218765][T16123] Unsupported ieee802154 address type: 0 [ 299.398696][T16131] netlink: 'syz.4.2856': attribute type 1 has an invalid length. [ 299.465407][T16131] geneve0: entered promiscuous mode [ 299.482927][T16131] geneve0: left promiscuous mode [ 299.507035][T16137] netlink: 'syz.3.2858': attribute type 22 has an invalid length. [ 299.678982][T16155] FAULT_INJECTION: forcing a failure. [ 299.678982][T16155] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.736995][T16155] CPU: 0 PID: 16155 Comm: syz.4.2863 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 299.746846][T16155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 299.756919][T16155] Call Trace: [ 299.760213][T16155] [ 299.763157][T16155] dump_stack_lvl+0x241/0x360 [ 299.767865][T16155] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.773084][T16155] ? __pfx__printk+0x10/0x10 [ 299.777691][T16155] ? __pfx_lock_release+0x10/0x10 [ 299.782745][T16155] should_fail_ex+0x3b0/0x4e0 [ 299.787440][T16155] _copy_from_iter+0x1f6/0x1960 [ 299.792309][T16155] ? __virt_addr_valid+0x183/0x530 [ 299.797514][T16155] ? __pfx_lock_release+0x10/0x10 [ 299.802541][T16155] ? __alloc_skb+0x28f/0x440 [ 299.807129][T16155] ? __pfx__copy_from_iter+0x10/0x10 [ 299.812412][T16155] ? __virt_addr_valid+0x183/0x530 [ 299.817518][T16155] ? __virt_addr_valid+0x183/0x530 [ 299.822658][T16155] ? __virt_addr_valid+0x45f/0x530 [ 299.827768][T16155] ? __check_object_size+0x49c/0x900 [ 299.833052][T16155] netlink_sendmsg+0x73d/0xcb0 [ 299.837819][T16155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.843101][T16155] ? __import_iovec+0x536/0x820 [ 299.847950][T16155] ? aa_sock_msg_perm+0x91/0x160 [ 299.852883][T16155] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 299.858161][T16155] ? security_socket_sendmsg+0x87/0xb0 [ 299.863614][T16155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.868889][T16155] __sock_sendmsg+0x221/0x270 [ 299.873563][T16155] ____sys_sendmsg+0x525/0x7d0 [ 299.878330][T16155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.883616][T16155] __sys_sendmsg+0x2b0/0x3a0 [ 299.888208][T16155] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.893323][T16155] ? vfs_write+0x7c4/0xc90 [ 299.897759][T16155] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.904083][T16155] ? do_syscall_64+0x100/0x230 [ 299.908845][T16155] ? do_syscall_64+0xb6/0x230 [ 299.913518][T16155] do_syscall_64+0xf3/0x230 [ 299.918016][T16155] ? clear_bhb_loop+0x35/0x90 [ 299.922690][T16155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.928581][T16155] RIP: 0033:0x7fc868375f19 [ 299.932992][T16155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.952772][T16155] RSP: 002b:00007fc867dff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.961185][T16155] RAX: ffffffffffffffda RBX: 00007fc868505f60 RCX: 00007fc868375f19 [ 299.969150][T16155] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000005 [ 299.977138][T16155] RBP: 00007fc867dff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 299.985103][T16155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.993068][T16155] R13: 000000000000004d R14: 00007fc868505f60 R15: 00007ffd2fdfecc8 [ 300.001048][T16155] [ 300.021646][T16162] __nla_validate_parse: 7 callbacks suppressed [ 300.021666][T16162] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2864'. [ 300.566914][T16189] xt_hashlimit: max too large, truncated to 1048576 [ 300.725813][T16209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2876'. [ 300.936897][T16222] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2878'. [ 301.297255][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2879'. [ 301.356110][T16230] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2879'. [ 301.532496][ C0] eth0: bad gso: type: 1, size: 1408 [ 301.538466][ C0] eth0: bad gso: type: 1, size: 1408 [ 301.639476][T16248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.829314][T16257] Bluetooth: hci3: invalid length 0, exp 2 for type 7 [ 302.226583][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2893'. [ 302.253506][T16285] netlink: 'syz.1.2894': attribute type 3 has an invalid length. [ 302.263128][T16277] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2893'. [ 302.274012][T16285] netlink: 'syz.1.2894': attribute type 1 has an invalid length. [ 302.288923][T16285] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.2894'. [ 302.376286][T16289] ip6t_srh: unknown srh invflags A757 [ 302.791351][T16306] xt_TCPMSS: Only works on TCP SYN packets [ 303.151286][T16331] Cannot find add_set index 0 as target [ 303.357769][T16328] syzkaller1: entered promiscuous mode [ 303.390629][T16328] syzkaller1: entered allmulticast mode [ 303.788946][ T5110] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 303.805966][ T5110] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 303.816723][ T5110] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 303.825297][ T5110] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 303.849924][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 303.874719][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.675434][T16358] chnl_net:caif_netlink_parms(): no params data found [ 304.911807][T16358] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.926050][T16358] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.938505][T16358] bridge_slave_0: entered allmulticast mode [ 304.945953][T16407] FAULT_INJECTION: forcing a failure. [ 304.945953][T16407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.956752][T16358] bridge_slave_0: entered promiscuous mode [ 304.960053][T16407] CPU: 1 PID: 16407 Comm: syz.4.2924 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 304.975083][T16407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 304.985179][T16407] Call Trace: [ 304.988470][T16407] [ 304.991418][T16407] dump_stack_lvl+0x241/0x360 [ 304.996122][T16407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.001339][T16407] ? __pfx__printk+0x10/0x10 [ 305.005938][T16407] ? snprintf+0xda/0x120 [ 305.010186][T16407] should_fail_ex+0x3b0/0x4e0 [ 305.014860][T16407] _copy_to_user+0x2f/0xb0 [ 305.019275][T16407] simple_read_from_buffer+0xca/0x150 [ 305.024648][T16407] proc_fail_nth_read+0x1e9/0x250 [ 305.029675][T16407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.035225][T16407] ? rw_verify_area+0x520/0x6b0 [ 305.040072][T16407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.045613][T16407] vfs_read+0x204/0xbc0 [ 305.049769][T16407] ? __pfx_lock_release+0x10/0x10 [ 305.054809][T16407] ? __pfx_vfs_read+0x10/0x10 [ 305.059484][T16407] ? __fget_files+0x29/0x470 [ 305.064066][T16407] ? __fget_files+0x3f6/0x470 [ 305.068818][T16407] ksys_read+0x1a0/0x2c0 [ 305.073056][T16407] ? __pfx_ksys_read+0x10/0x10 [ 305.077815][T16407] ? do_syscall_64+0x100/0x230 [ 305.082574][T16407] ? do_syscall_64+0xb6/0x230 [ 305.087245][T16407] do_syscall_64+0xf3/0x230 [ 305.091745][T16407] ? clear_bhb_loop+0x35/0x90 [ 305.096416][T16407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.102313][T16407] RIP: 0033:0x7fc8683749fc [ 305.106719][T16407] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 305.126322][T16407] RSP: 002b:00007fc867dff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.134756][T16407] RAX: ffffffffffffffda RBX: 00007fc868505f60 RCX: 00007fc8683749fc [ 305.142728][T16407] RDX: 000000000000000f RSI: 00007fc867dff0b0 RDI: 0000000000000006 [ 305.150715][T16407] RBP: 00007fc867dff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 305.158686][T16407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.166648][T16407] R13: 000000000000004d R14: 00007fc868505f60 R15: 00007ffd2fdfecc8 [ 305.174627][T16407] [ 305.219184][T16358] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.226363][T16358] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.250191][T16358] bridge_slave_1: entered allmulticast mode [ 305.273985][T16358] bridge_slave_1: entered promiscuous mode [ 305.435908][T16416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2927'. [ 305.465351][T16358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.501025][T16358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.632997][T16358] team0: Port device team_slave_0 added [ 305.642538][T16425] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2931'. [ 305.656674][T16425] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2931'. [ 305.666504][T16423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2930'. [ 305.676196][T16423] team_slave_0: entered promiscuous mode [ 305.682352][T16423] team_slave_0: entered allmulticast mode [ 305.716465][T16358] team0: Port device team_slave_1 added [ 305.830710][T16358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.837696][T16358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.895625][T16358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.916938][T16358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.926923][T16358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.953186][ T54] Bluetooth: hci1: command tx timeout [ 305.974989][T16447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2938'. [ 306.000574][T16358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.181897][T16464] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2938'. [ 306.230218][T16358] hsr_slave_0: entered promiscuous mode [ 306.238768][T16358] hsr_slave_1: entered promiscuous mode [ 306.255423][T16358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.266288][T16358] Cannot create hsr debugfs directory [ 306.630408][T16358] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.693452][T16482] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 306.811658][T16358] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.019427][T16510] sock: sock_timestamping_bind_phc: sock not bind to device [ 307.037804][T16358] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.379667][T16358] team0: Port device netdevsim0 removed [ 307.387893][T16358] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 307.399846][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2960'. [ 307.634816][T16358] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.658712][T16358] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.693985][T16358] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.719657][T16358] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.795867][T16549] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2965'. [ 307.919066][T16358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.965114][T16358] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.009232][ T54] Bluetooth: hci1: command tx timeout [ 308.021013][ T5152] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.028214][ T5152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.068118][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.075282][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.298779][T16564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2967'. [ 308.357808][T16567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2968'. [ 308.665633][T16358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.820661][T16358] veth0_vlan: entered promiscuous mode [ 308.869625][T16358] veth1_vlan: entered promiscuous mode [ 308.956532][T16547] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 308.960575][T16358] veth0_macvtap: entered promiscuous mode [ 309.102956][T16358] veth1_macvtap: entered promiscuous mode [ 309.178832][T16358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.210933][T16358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.233027][T16358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.252585][T16358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.278456][T16358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.290543][T16358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.303328][T16358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.314090][T16358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.364497][T16358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.396206][T16358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.443857][T16358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.479483][T16358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.518154][T16358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.563222][T16358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.585340][T16358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.610929][T16358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.726224][T16358] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.759262][T16358] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.781342][T16358] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.800307][T16358] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.004317][T16629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.088722][ T54] Bluetooth: hci1: command tx timeout [ 310.140673][ C0] eth0: bad gso: type: 1, size: 1408 [ 310.153985][T12048] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.203284][T12048] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.272342][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.287764][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.480249][T16643] __nla_validate_parse: 6 callbacks suppressed [ 310.480270][T16643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2991'. [ 311.116665][T16678] netlink: 'syz.1.2998': attribute type 11 has an invalid length. [ 311.373069][T12051] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 311.450135][T16693] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 311.645487][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'. [ 311.744891][T16709] netlink: 'syz.3.3009': attribute type 2 has an invalid length. [ 311.768045][T16709] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3009'. [ 311.810196][ C0] eth0: bad gso: type: 1, size: 1408 [ 312.129840][T16709] netlink: 'syz.3.3009': attribute type 10 has an invalid length. [ 312.137704][T16709] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3009'. [ 312.156464][T16709] veth0_to_team: entered allmulticast mode [ 312.164259][T16709] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 312.165073][T16735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3012'. [ 312.181185][ T54] Bluetooth: hci1: command tx timeout [ 312.269385][T16731] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3012'. [ 312.440627][T16747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3016'. [ 312.601754][T16754] dummy0: entered promiscuous mode [ 312.651884][T16754] dummy0: left promiscuous mode [ 312.665887][T16763] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3021'. [ 312.689325][T16767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 312.726996][T16767] dummy0: entered promiscuous mode [ 312.732944][T16767] macvtap1: entered promiscuous mode [ 312.739258][T16767] macvtap1: entered allmulticast mode [ 312.744756][T16767] dummy0: entered allmulticast mode [ 312.773021][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3020'. [ 312.792749][T16760] dummy0: left allmulticast mode [ 312.803615][T16756] IPVS: persistence engine module ip_vs_pe_C not found [ 312.808144][T16760] dummy0: left promiscuous mode [ 312.838502][T16760] macvtap1: left promiscuous mode [ 312.843591][T16760] macvtap1: left allmulticast mode [ 313.106034][T16792] netlink: 'syz.2.3026': attribute type 6 has an invalid length. [ 313.196114][T16743] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 313.742794][ C0] eth0: bad gso: type: 1, size: 1408 [ 313.791320][T16813] ip6t_rpfilter: unknown options [ 314.130862][T16831] netlink: 'syz.3.3040': attribute type 8 has an invalid length. [ 314.249628][ T54] Bluetooth: hci1: command tx timeout [ 314.678209][T16868] ip6t_rpfilter: unknown options [ 314.784195][T16870] netlink: 'syz.4.3048': attribute type 7 has an invalid length. [ 314.797423][T16870] netlink: 'syz.4.3048': attribute type 2 has an invalid length. [ 315.523351][T16915] __nla_validate_parse: 5 callbacks suppressed [ 315.523371][T16915] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3058'. [ 315.588888][T16917] ebt_among: dst integrity fail: 101 [ 315.615823][T16915] netlink: 'syz.2.3058': attribute type 11 has an invalid length. [ 315.749102][T16924] netlink: 'syz.3.3061': attribute type 21 has an invalid length. [ 315.929471][T16924] bond0: entered promiscuous mode [ 315.944897][T16924] bond_slave_0: entered promiscuous mode [ 315.968827][T16924] bond_slave_1: entered promiscuous mode [ 315.987551][T16924] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 316.311261][T16950] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 316.328540][T16950] macvlan2: entered allmulticast mode [ 316.339178][T16950] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 316.360331][T16950] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 316.932577][T16978] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3074'. [ 316.974048][T16978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3074'. [ 317.470130][T16998] ip6t_rpfilter: unknown options [ 317.593941][T12051] geneve1: left allmulticast mode [ 317.611837][T12051] geneve1: left promiscuous mode [ 317.625733][T12051] bridge0: port 3(geneve1) entered disabled state [ 317.666200][T12051] bridge_slave_1: left allmulticast mode [ 317.681312][ C0] eth0: bad gso: type: 1, size: 1408 [ 317.688437][T12051] bridge_slave_1: left promiscuous mode [ 317.702160][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.756989][T12051] bridge_slave_0: left allmulticast mode [ 317.784429][T12051] bridge_slave_0: left promiscuous mode [ 317.806558][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.623217][T12051] bridge0 (unregistering): left allmulticast mode [ 318.635243][T12051] tipc: Disabling bearer [ 319.018366][T12051] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.029455][T12051] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.044665][T12051] bond0 (unregistering): Released all slaves [ 319.063872][T12051] bond1 (unregistering): Released all slaves [ 319.126457][T17027] netlink: 'syz.4.3087': attribute type 33 has an invalid length. [ 319.219571][T12051] Êü: left promiscuous mode [ 319.357268][T17064] netlink: 'syz.2.3093': attribute type 21 has an invalid length. [ 319.424942][T12051] tipc: Left network mode [ 319.508886][T17069] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3096'. [ 319.622129][T17069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3096'. [ 319.750172][T17076] bridge0: entered promiscuous mode [ 319.797566][T17076] bridge0: left promiscuous mode [ 319.952247][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3098'. [ 320.393986][T12051] hsr_slave_0: left promiscuous mode [ 320.419060][T12051] hsr_slave_1: left promiscuous mode [ 320.430413][T12051] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.449643][T12051] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.468048][T12051] batman_adv: batadv0: Removing interface: ipvlan2 [ 320.486869][T12051] veth1_macvtap: left allmulticast mode [ 321.212602][T17116] netlink: 'syz.4.3105': attribute type 10 has an invalid length. [ 321.581205][T12051] team0 (unregistering): Port device team_slave_1 removed [ 321.680221][T17128] netlink: 'syz.4.3107': attribute type 1 has an invalid length. [ 321.697099][T17128] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.3107'. [ 321.885943][T12050] smc: removing ib device A [ 322.642961][T17128] syzkaller0: entered promiscuous mode [ 322.654274][T17128] syzkaller0: entered allmulticast mode [ 322.848984][T17131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3108'. [ 323.038397][T17141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3109'. [ 323.281738][ C0] eth0: bad gso: type: 1, size: 1408 [ 323.552325][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3115'. [ 323.576228][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3115'. [ 323.639483][T17156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3114'. [ 324.404961][T12051] IPVS: stop unused estimator thread 0... [ 324.608755][T17187] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3122'. [ 324.653533][T17187] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3122'. [ 324.685241][T17187] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3122'. [ 325.207104][T17204] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3128'. [ 325.256165][T17204] IPv6: NLM_F_REPLACE set, but no existing node found! [ 325.294720][T17204] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.339889][T17214] netlink: 'syz.0.3130': attribute type 21 has an invalid length. [ 325.504584][T17225] IPVS: dh: SCTP 172.20.20.170:0 - no destination available [ 325.551265][T17230] bridge0: entered promiscuous mode [ 325.570701][T17234] FAULT_INJECTION: forcing a failure. [ 325.570701][T17234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.589142][T17230] bond0: entered promiscuous mode [ 325.597229][T17230] bond_slave_0: entered promiscuous mode [ 325.620844][T17234] CPU: 1 PID: 17234 Comm: syz.1.3135 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 325.630710][T17234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 325.631750][T17230] bond_slave_1: entered promiscuous mode [ 325.640763][T17234] Call Trace: [ 325.640779][T17234] [ 325.640787][T17234] dump_stack_lvl+0x241/0x360 [ 325.640817][T17234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.640837][T17234] ? __pfx__printk+0x10/0x10 [ 325.640858][T17234] ? __pfx_lock_release+0x10/0x10 [ 325.640885][T17234] should_fail_ex+0x3b0/0x4e0 [ 325.640909][T17234] _copy_from_iter+0x1f6/0x1960 [ 325.640932][T17234] ? __virt_addr_valid+0x183/0x530 [ 325.640955][T17234] ? __pfx_lock_release+0x10/0x10 [ 325.692209][T17234] ? __alloc_skb+0x28f/0x440 [ 325.696922][T17234] ? __pfx__copy_from_iter+0x10/0x10 [ 325.702240][T17234] ? __virt_addr_valid+0x183/0x530 [ 325.707398][T17234] ? __virt_addr_valid+0x183/0x530 [ 325.712546][T17234] ? __virt_addr_valid+0x45f/0x530 [ 325.717696][T17234] ? __check_object_size+0x49c/0x900 [ 325.723105][T17234] netlink_sendmsg+0x73d/0xcb0 [ 325.727912][T17234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.733286][T17234] ? __import_iovec+0x536/0x820 [ 325.738170][T17234] ? aa_sock_msg_perm+0x91/0x160 [ 325.743142][T17234] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 325.748460][T17234] ? security_socket_sendmsg+0x87/0xb0 [ 325.753957][T17234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.759277][T17234] __sock_sendmsg+0x221/0x270 [ 325.764004][T17234] ____sys_sendmsg+0x525/0x7d0 [ 325.768810][T17234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 325.774144][T17234] __sys_sendmsg+0x2b0/0x3a0 [ 325.778847][T17234] ? __pfx___sys_sendmsg+0x10/0x10 [ 325.784010][T17234] ? vfs_write+0x7c4/0xc90 [ 325.788494][T17234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.794856][T17234] ? do_syscall_64+0x100/0x230 [ 325.799826][T17234] ? do_syscall_64+0xb6/0x230 [ 325.804534][T17234] do_syscall_64+0xf3/0x230 [ 325.809061][T17234] ? clear_bhb_loop+0x35/0x90 [ 325.813784][T17234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.819712][T17234] RIP: 0033:0x7f4f86b75f19 [ 325.824150][T17234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.843783][T17234] RSP: 002b:00007f4f879e9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.852245][T17234] RAX: ffffffffffffffda RBX: 00007f4f86d05f60 RCX: 00007f4f86b75f19 [ 325.860358][T17234] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 325.868384][T17234] RBP: 00007f4f879e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 325.876392][T17234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.884480][T17234] R13: 000000000000004d R14: 00007f4f86d05f60 R15: 00007ffcd49291f8 [ 325.892503][T17234] [ 325.898018][T17230] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 325.932673][T17230] Cannot create hsr debugfs directory [ 325.939786][T17230] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 326.080194][T17248] ip6t_srh: unknown srh match flags 4001 [ 326.608203][T17274] tipc: Invalid UDP bearer configuration [ 326.608263][T17274] tipc: Enabling of bearer rejected, failed to enable media [ 326.850599][T17280] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.859919][T17280] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.868733][T17280] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.877466][T17280] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.888984][T17280] vxlan0: entered promiscuous mode [ 326.907897][T17280] vxlan0: entered allmulticast mode [ 326.927296][T17280] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.937503][T17280] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.947473][T17280] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.956461][T17280] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.973401][T17282] __nla_validate_parse: 8 callbacks suppressed [ 326.973421][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3146'. [ 327.013754][T17282] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3146'. [ 327.037032][T17284] dummy0: Device is already in use. [ 327.219713][T17288] sctp: [Deprecated]: syz.2.3148 (pid 17288) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.219713][T17288] Use struct sctp_sack_info instead [ 327.244628][T17291] FAULT_INJECTION: forcing a failure. [ 327.244628][T17291] name failslab, interval 1, probability 0, space 0, times 0 [ 327.263593][T17288] openvswitch: netlink: Key type 2848 is out of range max 32 [ 327.296477][T17291] CPU: 1 PID: 17291 Comm: syz.0.3149 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 327.306345][T17291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 327.316512][T17291] Call Trace: [ 327.319815][T17291] [ 327.322772][T17291] dump_stack_lvl+0x241/0x360 [ 327.327486][T17291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.332718][T17291] ? __pfx__printk+0x10/0x10 [ 327.337344][T17291] ? ref_tracker_alloc+0x332/0x490 [ 327.342494][T17291] should_fail_ex+0x3b0/0x4e0 [ 327.347204][T17291] ? skb_clone+0x20c/0x390 [ 327.351734][T17291] should_failslab+0x9/0x20 [ 327.356265][T17291] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 327.361678][T17291] skb_clone+0x20c/0x390 [ 327.365949][T17291] __netlink_deliver_tap+0x3cc/0x7c0 [ 327.371269][T17291] ? netlink_deliver_tap+0x2e/0x1b0 [ 327.376470][T17291] netlink_deliver_tap+0x19d/0x1b0 [ 327.381582][T17291] netlink_unicast+0x7be/0x990 [ 327.386344][T17291] ? __pfx_netlink_unicast+0x10/0x10 [ 327.391619][T17291] ? __virt_addr_valid+0x183/0x530 [ 327.396729][T17291] ? __check_object_size+0x49c/0x900 [ 327.402010][T17291] ? bpf_lsm_netlink_send+0x9/0x10 [ 327.407118][T17291] netlink_sendmsg+0x8e4/0xcb0 [ 327.411888][T17291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.417176][T17291] ? __import_iovec+0x536/0x820 [ 327.422029][T17291] ? aa_sock_msg_perm+0x91/0x160 [ 327.426964][T17291] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 327.432503][T17291] ? security_socket_sendmsg+0x87/0xb0 [ 327.437965][T17291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.443269][T17291] __sock_sendmsg+0x221/0x270 [ 327.447972][T17291] ____sys_sendmsg+0x525/0x7d0 [ 327.452800][T17291] ? __pfx_____sys_sendmsg+0x10/0x10 [ 327.458120][T17291] __sys_sendmsg+0x2b0/0x3a0 [ 327.462735][T17291] ? __pfx___sys_sendmsg+0x10/0x10 [ 327.467852][T17291] ? vfs_write+0x7c4/0xc90 [ 327.472330][T17291] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.478693][T17291] ? do_syscall_64+0x100/0x230 [ 327.483473][T17291] ? do_syscall_64+0xb6/0x230 [ 327.488153][T17291] do_syscall_64+0xf3/0x230 [ 327.492652][T17291] ? clear_bhb_loop+0x35/0x90 [ 327.497337][T17291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.503228][T17291] RIP: 0033:0x7f1309775f19 [ 327.507647][T17291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.527516][T17291] RSP: 002b:00007f130a4b7048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 327.535942][T17291] RAX: ffffffffffffffda RBX: 00007f1309905f60 RCX: 00007f1309775f19 [ 327.543916][T17291] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 327.551895][T17291] RBP: 00007f130a4b70a0 R08: 0000000000000000 R09: 0000000000000000 [ 327.560302][T17291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.568281][T17291] R13: 000000000000000b R14: 00007f1309905f60 R15: 00007ffcffc93198 [ 327.576364][T17291] [ 327.772054][T17309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3152'. [ 327.838920][T17306] tipc: Started in network mode [ 327.848072][T17306] tipc: Node identity baa2f91747ff, cluster identity 4711 [ 327.859753][T17306] tipc: Enabled bearer , priority 0 [ 327.866868][T17305] tipc: Enabling of bearer rejected, already enabled [ 327.891132][T17305] tipc: Disabling bearer [ 327.973181][T17288] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 327.979129][T17328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3156'. [ 328.147279][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3156'. [ 328.524796][T17356] FAULT_INJECTION: forcing a failure. [ 328.524796][T17356] name failslab, interval 1, probability 0, space 0, times 0 [ 328.549005][T17356] CPU: 0 PID: 17356 Comm: syz.1.3164 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 328.558215][T17357] netlink: 'syz.0.3163': attribute type 30 has an invalid length. [ 328.558922][T17356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 328.576790][T17356] Call Trace: [ 328.580095][T17356] [ 328.583039][T17356] dump_stack_lvl+0x241/0x360 [ 328.587716][T17356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 328.592938][T17356] ? __pfx__printk+0x10/0x10 [ 328.597548][T17356] ? netlink_sendmsg+0x8e4/0xcb0 [ 328.602525][T17356] ? do_syscall_64+0xf3/0x230 [ 328.607224][T17356] should_fail_ex+0x3b0/0x4e0 [ 328.611909][T17356] ? rtnl_newlink+0xf2/0x20a0 [ 328.616596][T17356] should_failslab+0x9/0x20 [ 328.621098][T17356] __kmalloc_cache_noprof+0x6c/0x2c0 [ 328.626405][T17356] rtnl_newlink+0xf2/0x20a0 [ 328.630938][T17356] ? __mutex_trylock_common+0x183/0x2e0 [ 328.636489][T17356] ? __pfx___might_resched+0x10/0x10 [ 328.641774][T17356] ? __pfx_rtnl_newlink+0x10/0x10 [ 328.646792][T17356] ? __pfx___mutex_trylock_common+0x10/0x10 [ 328.652699][T17356] ? rcu_is_watching+0x15/0xb0 [ 328.657476][T17356] ? trace_contention_end+0x3c/0x120 [ 328.662767][T17356] ? __mutex_lock+0x2ef/0xd70 [ 328.667441][T17356] ? rcu_read_unlock+0x87/0xa0 [ 328.672197][T17356] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 328.677309][T17356] ? __pfx_lock_release+0x10/0x10 [ 328.682364][T17356] ? __pfx___mutex_lock+0x10/0x10 [ 328.687403][T17356] ? __pfx_rtnl_newlink+0x10/0x10 [ 328.692432][T17356] rtnetlink_rcv_msg+0x73f/0xcf0 [ 328.697372][T17356] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 328.702571][T17356] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 328.708032][T17356] ? ref_tracker_free+0x643/0x7e0 [ 328.713057][T17356] netlink_rcv_skb+0x1e3/0x430 [ 328.717827][T17356] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 328.723284][T17356] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 328.728582][T17356] ? netlink_deliver_tap+0x2e/0x1b0 [ 328.733778][T17356] netlink_unicast+0x7f0/0x990 [ 328.738543][T17356] ? __pfx_netlink_unicast+0x10/0x10 [ 328.743817][T17356] ? __virt_addr_valid+0x183/0x530 [ 328.748931][T17356] ? __check_object_size+0x49c/0x900 [ 328.754211][T17356] ? bpf_lsm_netlink_send+0x9/0x10 [ 328.759321][T17356] netlink_sendmsg+0x8e4/0xcb0 [ 328.764178][T17356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.769633][T17356] ? __import_iovec+0x536/0x820 [ 328.774477][T17356] ? aa_sock_msg_perm+0x91/0x160 [ 328.779410][T17356] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 328.784692][T17356] ? security_socket_sendmsg+0x87/0xb0 [ 328.790159][T17356] ? __pfx_netlink_sendmsg+0x10/0x10 [ 328.795452][T17356] __sock_sendmsg+0x221/0x270 [ 328.800127][T17356] ____sys_sendmsg+0x525/0x7d0 [ 328.804893][T17356] ? __pfx_____sys_sendmsg+0x10/0x10 [ 328.810186][T17356] __sys_sendmsg+0x2b0/0x3a0 [ 328.814820][T17356] ? __pfx___sys_sendmsg+0x10/0x10 [ 328.819926][T17356] ? vfs_write+0x7c4/0xc90 [ 328.824365][T17356] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 328.830688][T17356] ? do_syscall_64+0x100/0x230 [ 328.835539][T17356] ? do_syscall_64+0xb6/0x230 [ 328.840210][T17356] do_syscall_64+0xf3/0x230 [ 328.844722][T17356] ? clear_bhb_loop+0x35/0x90 [ 328.849401][T17356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.855291][T17356] RIP: 0033:0x7f4f86b75f19 [ 328.859698][T17356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.879741][T17356] RSP: 002b:00007f4f879e9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.888157][T17356] RAX: ffffffffffffffda RBX: 00007f4f86d05f60 RCX: 00007f4f86b75f19 [ 328.896210][T17356] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 328.904183][T17356] RBP: 00007f4f879e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 328.912153][T17356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.920121][T17356] R13: 000000000000004d R14: 00007f4f86d05f60 R15: 00007ffcd49291f8 [ 328.928099][T17356] [ 329.028122][T17365] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.3163'. [ 329.062297][T17365] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 329.548408][T17385] vlan2: entered promiscuous mode [ 329.567153][T17389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.599407][T17389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.611145][T17391] netlink: 'syz.0.3171': attribute type 4 has an invalid length. [ 329.779674][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3175'. [ 329.875650][T17404] FAULT_INJECTION: forcing a failure. [ 329.875650][T17404] name failslab, interval 1, probability 0, space 0, times 0 [ 329.923732][T17404] CPU: 0 PID: 17404 Comm: syz.2.3177 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 329.933599][T17404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 329.943680][T17404] Call Trace: [ 329.946980][T17404] [ 329.949929][T17404] dump_stack_lvl+0x241/0x360 [ 329.954645][T17404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 329.959963][T17404] ? __pfx__printk+0x10/0x10 [ 329.964667][T17404] ? rcu_is_watching+0x15/0xb0 [ 329.969472][T17404] ? trace_contention_end+0x3c/0x120 [ 329.974793][T17404] should_fail_ex+0x3b0/0x4e0 [ 329.979502][T17404] ? __alloc_skb+0x1c3/0x440 [ 329.984121][T17404] should_failslab+0x9/0x20 [ 329.988652][T17404] kmem_cache_alloc_node_noprof+0x71/0x320 [ 329.994496][T17404] __alloc_skb+0x1c3/0x440 [ 329.998990][T17404] ? __pfx___alloc_skb+0x10/0x10 [ 330.004056][T17404] ? netlink_ack_tlv_len+0x6e/0x200 [ 330.009310][T17404] netlink_ack+0x13f/0xa30 [ 330.013859][T17404] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 330.019379][T17404] netlink_rcv_skb+0x262/0x430 [ 330.024183][T17404] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 330.029684][T17404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 330.035568][T17404] ? netlink_deliver_tap+0x2e/0x1b0 [ 330.040974][T17404] netlink_unicast+0x7f0/0x990 [ 330.046054][T17404] ? __pfx_netlink_unicast+0x10/0x10 [ 330.051806][T17404] ? __virt_addr_valid+0x183/0x530 [ 330.057300][T17404] ? __check_object_size+0x49c/0x900 [ 330.062794][T17404] ? bpf_lsm_netlink_send+0x9/0x10 [ 330.068033][T17404] netlink_sendmsg+0x8e4/0xcb0 [ 330.073114][T17404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.079057][T17404] ? __import_iovec+0x536/0x820 [ 330.084377][T17404] ? aa_sock_msg_perm+0x91/0x160 [ 330.089699][T17404] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 330.095371][T17404] ? security_socket_sendmsg+0x87/0xb0 [ 330.101084][T17404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 330.106489][T17404] __sock_sendmsg+0x221/0x270 [ 330.111468][T17404] ____sys_sendmsg+0x525/0x7d0 [ 330.116457][T17404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 330.122178][T17404] __sys_sendmsg+0x2b0/0x3a0 [ 330.127134][T17404] ? __pfx___sys_sendmsg+0x10/0x10 [ 330.132268][T17404] ? vfs_write+0x7c4/0xc90 [ 330.137957][T17404] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 330.144664][T17404] ? do_syscall_64+0x100/0x230 [ 330.149444][T17404] ? do_syscall_64+0xb6/0x230 [ 330.154233][T17404] do_syscall_64+0xf3/0x230 [ 330.159013][T17404] ? clear_bhb_loop+0x35/0x90 [ 330.163721][T17404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.170072][T17404] RIP: 0033:0x7f835f775f19 [ 330.176085][T17404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.196253][T17404] RSP: 002b:00007f8360571048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 330.204792][T17404] RAX: ffffffffffffffda RBX: 00007f835f905f60 RCX: 00007f835f775f19 [ 330.212847][T17404] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 330.220964][T17404] RBP: 00007f83605710a0 R08: 0000000000000000 R09: 0000000000000000 [ 330.228958][T17404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.236963][T17404] R13: 000000000000000b R14: 00007f835f905f60 R15: 00007fff594f9688 [ 330.245241][T17404] [ 330.340465][T17416] netlink: 'syz.4.3182': attribute type 3 has an invalid length. [ 330.516094][T17433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3184'. [ 330.685461][T17444] ax25_connect(): syz.1.3188 uses autobind, please contact jreuter@yaina.de [ 330.734385][T17445] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !0x0000000000000003000000000000 [ 330.801174][T17439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3187'. [ 330.846553][T17451] netlink: 'syz.1.3188': attribute type 1 has an invalid length. [ 330.863564][T17439] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3187'. [ 330.864189][T17451] netlink: 'syz.1.3188': attribute type 8 has an invalid length. [ 331.118277][T17463] netlink: 'syz.3.3193': attribute type 10 has an invalid length. [ 331.178180][T17463] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.197119][T17468] FAULT_INJECTION: forcing a failure. [ 331.197119][T17468] name failslab, interval 1, probability 0, space 0, times 0 [ 331.232187][T17468] CPU: 0 PID: 17468 Comm: syz.1.3195 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 331.242049][T17468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 331.252129][T17468] Call Trace: [ 331.255424][T17468] [ 331.258374][T17468] dump_stack_lvl+0x241/0x360 [ 331.263070][T17468] ? __pfx_dump_stack_lvl+0x10/0x10 [ 331.268312][T17468] ? __pfx__printk+0x10/0x10 [ 331.269434][T17467] vlan2: entered promiscuous mode [ 331.272916][T17468] should_fail_ex+0x3b0/0x4e0 [ 331.282740][T17468] ? __alloc_skb+0x1c3/0x440 [ 331.287366][T17468] should_failslab+0x9/0x20 [ 331.291974][T17468] kmem_cache_alloc_node_noprof+0x71/0x320 [ 331.297791][T17468] __alloc_skb+0x1c3/0x440 [ 331.302209][T17468] ? __pfx___alloc_skb+0x10/0x10 [ 331.307146][T17468] ? netlink_ack_tlv_len+0x6e/0x200 [ 331.312345][T17468] netlink_ack+0x13f/0xa30 [ 331.316752][T17468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.322217][T17468] netlink_rcv_skb+0x262/0x430 [ 331.326974][T17468] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 331.332427][T17468] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 331.337729][T17468] ? netlink_deliver_tap+0x2e/0x1b0 [ 331.342933][T17468] netlink_unicast+0x7f0/0x990 [ 331.347706][T17468] ? __pfx_netlink_unicast+0x10/0x10 [ 331.352982][T17468] ? __virt_addr_valid+0x183/0x530 [ 331.358095][T17468] ? __check_object_size+0x49c/0x900 [ 331.363371][T17468] ? bpf_lsm_netlink_send+0x9/0x10 [ 331.368568][T17468] netlink_sendmsg+0x8e4/0xcb0 [ 331.373339][T17468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.378649][T17468] ? __import_iovec+0x536/0x820 [ 331.383502][T17468] ? aa_sock_msg_perm+0x91/0x160 [ 331.388454][T17468] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 331.393824][T17468] ? security_socket_sendmsg+0x87/0xb0 [ 331.399280][T17468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 331.404561][T17468] __sock_sendmsg+0x221/0x270 [ 331.409341][T17468] ____sys_sendmsg+0x525/0x7d0 [ 331.414130][T17468] ? __pfx_____sys_sendmsg+0x10/0x10 [ 331.419436][T17468] __sys_sendmsg+0x2b0/0x3a0 [ 331.424027][T17468] ? __pfx___sys_sendmsg+0x10/0x10 [ 331.429240][T17468] ? vfs_write+0x7c4/0xc90 [ 331.433698][T17468] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 331.440041][T17468] ? do_syscall_64+0x100/0x230 [ 331.444811][T17468] ? do_syscall_64+0xb6/0x230 [ 331.449556][T17468] do_syscall_64+0xf3/0x230 [ 331.454059][T17468] ? clear_bhb_loop+0x35/0x90 [ 331.458750][T17468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.464643][T17468] RIP: 0033:0x7f4f86b75f19 [ 331.469052][T17468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.488760][T17468] RSP: 002b:00007f4f879e9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.497177][T17468] RAX: ffffffffffffffda RBX: 00007f4f86d05f60 RCX: 00007f4f86b75f19 [ 331.505153][T17468] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 331.513209][T17468] RBP: 00007f4f879e90a0 R08: 0000000000000000 R09: 0000000000000000 [ 331.521174][T17468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.529138][T17468] R13: 000000000000004d R14: 00007f4f86d05f60 R15: 00007ffcd49291f8 [ 331.537144][T17468] [ 331.887681][T17492] syz_tun: entered promiscuous mode [ 331.936154][T17495] netlink: 'syz.3.3199': attribute type 1 has an invalid length. [ 331.951123][T17492] batadv_slave_0: entered promiscuous mode [ 331.978887][T17495] __nla_validate_parse: 4 callbacks suppressed [ 331.978911][T17495] netlink: 9348 bytes leftover after parsing attributes in process `syz.3.3199'. [ 331.994483][T17483] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3201'. [ 332.020139][T17483] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3201'. [ 332.027114][T17495] netlink: 'syz.3.3199': attribute type 1 has an invalid length. [ 332.038260][T17492] syz_tun: left promiscuous mode [ 332.050433][T17492] batadv_slave_0: left promiscuous mode [ 332.227254][T17500] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3203'. [ 332.269396][T17504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3205'. [ 332.296163][T17504] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3205'. [ 332.324030][T17504] gtp0: entered promiscuous mode [ 332.330233][T17504] gtp0: entered allmulticast mode [ 332.544677][T17522] FAULT_INJECTION: forcing a failure. [ 332.544677][T17522] name failslab, interval 1, probability 0, space 0, times 0 [ 332.559603][T17522] CPU: 1 PID: 17522 Comm: syz.2.3210 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 332.569455][T17522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 332.579545][T17522] Call Trace: [ 332.582844][T17522] [ 332.585836][T17522] dump_stack_lvl+0x241/0x360 [ 332.590544][T17522] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.595774][T17522] ? __pfx__printk+0x10/0x10 [ 332.600404][T17522] ? ref_tracker_alloc+0x332/0x490 [ 332.605586][T17522] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 332.611071][T17522] should_fail_ex+0x3b0/0x4e0 [ 332.615784][T17522] ? skb_clone+0x20c/0x390 [ 332.620217][T17522] should_failslab+0x9/0x20 [ 332.624748][T17522] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 332.630163][T17522] skb_clone+0x20c/0x390 [ 332.634436][T17522] __netlink_deliver_tap+0x3cc/0x7c0 [ 332.639784][T17522] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.645019][T17522] netlink_deliver_tap+0x19d/0x1b0 [ 332.650170][T17522] netlink_sendskb+0x68/0x140 [ 332.654874][T17522] netlink_unicast+0x39d/0x990 [ 332.659671][T17522] ? __asan_memcpy+0x40/0x70 [ 332.664397][T17522] ? __pfx_netlink_unicast+0x10/0x10 [ 332.669724][T17522] netlink_rcv_skb+0x262/0x430 [ 332.674523][T17522] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 332.680010][T17522] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 332.685348][T17522] ? netlink_deliver_tap+0x2e/0x1b0 [ 332.690678][T17522] netlink_unicast+0x7f0/0x990 [ 332.695481][T17522] ? __pfx_netlink_unicast+0x10/0x10 [ 332.700877][T17522] ? __virt_addr_valid+0x183/0x530 [ 332.706052][T17522] ? __check_object_size+0x49c/0x900 [ 332.711427][T17522] ? bpf_lsm_netlink_send+0x9/0x10 [ 332.716674][T17522] netlink_sendmsg+0x8e4/0xcb0 [ 332.721567][T17522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.726904][T17522] ? __import_iovec+0x536/0x820 [ 332.731875][T17522] ? aa_sock_msg_perm+0x91/0x160 [ 332.736847][T17522] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 332.742420][T17522] ? security_socket_sendmsg+0x87/0xb0 [ 332.747921][T17522] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.753236][T17522] __sock_sendmsg+0x221/0x270 [ 332.757948][T17522] ____sys_sendmsg+0x525/0x7d0 [ 332.762751][T17522] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.768100][T17522] __sys_sendmsg+0x2b0/0x3a0 [ 332.772715][T17522] ? __pfx___sys_sendmsg+0x10/0x10 [ 332.777863][T17522] ? vfs_write+0x7c4/0xc90 [ 332.782342][T17522] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 332.788869][T17522] ? do_syscall_64+0x100/0x230 [ 332.793666][T17522] ? do_syscall_64+0xb6/0x230 [ 332.798373][T17522] do_syscall_64+0xf3/0x230 [ 332.802912][T17522] ? clear_bhb_loop+0x35/0x90 [ 332.807797][T17522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.813720][T17522] RIP: 0033:0x7f835f775f19 [ 332.818154][T17522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.837870][T17522] RSP: 002b:00007f8360571048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.846331][T17522] RAX: ffffffffffffffda RBX: 00007f835f905f60 RCX: 00007f835f775f19 [ 332.854331][T17522] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 332.862328][T17522] RBP: 00007f83605710a0 R08: 0000000000000000 R09: 0000000000000000 [ 332.870323][T17522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.878317][T17522] R13: 000000000000000b R14: 00007f835f905f60 R15: 00007fff594f9688 [ 332.886388][T17522] [ 333.027568][T17543] syzkaller1: entered promiscuous mode [ 333.033300][T17543] syzkaller1: entered allmulticast mode [ 333.313331][T17556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3223'. [ 333.497365][T17564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3226'. [ 333.510681][T17564] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3226'. [ 333.601435][T17568] FAULT_INJECTION: forcing a failure. [ 333.601435][T17568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.632564][T17568] CPU: 1 PID: 17568 Comm: syz.2.3227 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 333.642435][T17568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 333.652516][T17568] Call Trace: [ 333.655825][T17568] [ 333.658772][T17568] dump_stack_lvl+0x241/0x360 [ 333.663472][T17568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.668761][T17568] ? __pfx__printk+0x10/0x10 [ 333.673354][T17568] ? snprintf+0xda/0x120 [ 333.677592][T17568] should_fail_ex+0x3b0/0x4e0 [ 333.682281][T17568] _copy_to_user+0x2f/0xb0 [ 333.686780][T17568] simple_read_from_buffer+0xca/0x150 [ 333.692173][T17568] proc_fail_nth_read+0x1e9/0x250 [ 333.697236][T17568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.702801][T17568] ? rw_verify_area+0x520/0x6b0 [ 333.707656][T17568] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 333.713201][T17568] vfs_read+0x204/0xbc0 [ 333.717361][T17568] ? __pfx_lock_release+0x10/0x10 [ 333.722410][T17568] ? __pfx_vfs_read+0x10/0x10 [ 333.727110][T17568] ? __fget_files+0x29/0x470 [ 333.731709][T17568] ? __fget_files+0x3f6/0x470 [ 333.736418][T17568] ksys_read+0x1a0/0x2c0 [ 333.740665][T17568] ? __pfx_ksys_read+0x10/0x10 [ 333.745423][T17568] ? do_syscall_64+0x100/0x230 [ 333.750188][T17568] ? do_syscall_64+0xb6/0x230 [ 333.754950][T17568] do_syscall_64+0xf3/0x230 [ 333.759536][T17568] ? clear_bhb_loop+0x35/0x90 [ 333.764216][T17568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.770107][T17568] RIP: 0033:0x7f835f7749fc [ 333.774517][T17568] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 333.794122][T17568] RSP: 002b:00007f8360571040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 333.802540][T17568] RAX: ffffffffffffffda RBX: 00007f835f905f60 RCX: 00007f835f7749fc [ 333.810523][T17568] RDX: 000000000000000f RSI: 00007f83605710b0 RDI: 0000000000000005 [ 333.818491][T17568] RBP: 00007f83605710a0 R08: 0000000000000000 R09: 0000000000000000 [ 333.826455][T17568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 333.834420][T17568] R13: 000000000000000b R14: 00007f835f905f60 R15: 00007fff594f9688 [ 333.842408][T17568] [ 333.962635][T17570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3228'. [ 334.549663][T17584] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.624603][ C0] eth0: bad gso: type: 1, size: 1408 [ 334.654820][ C0] eth0: bad gso: type: 1, size: 1408 [ 335.143348][T17614] pim6reg1: entered promiscuous mode [ 335.152328][T17614] pim6reg1: entered allmulticast mode [ 335.274793][T17617] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 335.522940][T17635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.669398][T17643] netlink: 'syz.3.3251': attribute type 1 has an invalid length. [ 336.347054][T17672] veth0_vlan: entered allmulticast mode [ 336.380735][T17676] netlink: 'syz.2.3261': attribute type 11 has an invalid length. [ 336.990384][T17705] __nla_validate_parse: 15 callbacks suppressed [ 336.990406][T17705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'. [ 336.991120][T17703] netlink: 'syz.2.3268': attribute type 4 has an invalid length. [ 337.230117][T17716] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3274'. [ 337.290795][T17713] pim6reg1: entered promiscuous mode [ 337.296554][T17713] pim6reg1: entered allmulticast mode [ 337.887174][T17730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3278'. [ 337.999045][T17730] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3278'. [ 338.161391][T17747] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3284'. [ 338.277231][T17758] hsr0: entered promiscuous mode [ 338.366453][T17761] pim6reg1: entered promiscuous mode [ 338.373222][T17761] pim6reg1: entered allmulticast mode [ 338.633322][T17773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3291'. [ 338.851010][ C0] eth0: bad gso: type: 1, size: 1408 [ 338.989006][T17784] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3296'. [ 339.019075][T17784] netlink: 'syz.1.3296': attribute type 10 has an invalid length. [ 339.157405][T17784] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 339.272296][T17796] dccp_invalid_packet: P.CsCov 11 exceeds packet length 256 [ 339.294605][T17796] A link change request failed with some changes committed already. Interface vxcan1 may have been left with an inconsistent configuration, please check. [ 339.469840][T17802] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3301'. [ 339.858578][T17817] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 1 [ 339.878155][T17812] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 1 [ 339.979409][T17828] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3309'. [ 340.052042][T17833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3310'. [ 340.547706][ T5110] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.560605][ T5110] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.572966][ T5110] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.585577][ T5110] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.595156][ T5110] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.606005][ T5110] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.782643][T17868] chnl_net:caif_netlink_parms(): no params data found [ 340.897535][T17868] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.906869][T17868] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.915184][T17868] bridge_slave_0: entered allmulticast mode [ 340.923514][T17868] bridge_slave_0: entered promiscuous mode [ 340.932894][T17868] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.940177][T17868] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.947720][T17868] bridge_slave_1: entered allmulticast mode [ 340.955203][T17868] bridge_slave_1: entered promiscuous mode [ 341.003899][T17868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.013588][T17878] IPVS: set_ctl: invalid protocol: 1 10.1.1.2:20001 [ 341.020163][T17868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.097431][T17868] team0: Port device team_slave_0 added [ 341.131974][T17868] team0: Port device team_slave_1 added [ 341.280512][T17868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.287491][T17868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.370358][T17868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.406101][T17868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.421575][T17868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.464584][T17868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 341.623889][T17868] hsr_slave_0: entered promiscuous mode [ 341.649236][T17911] syz.2.3328[17911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.649381][T17911] syz.2.3328[17911] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 341.668519][T17868] hsr_slave_1: entered promiscuous mode [ 341.723364][T17868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.744911][T17868] Cannot create hsr debugfs directory [ 342.217329][T17928] netlink: 'syz.1.3333': attribute type 33 has an invalid length. [ 342.274747][T17868] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.400645][T12051] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 342.461562][T17868] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.631812][T17868] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.654555][ T54] Bluetooth: hci2: command tx timeout [ 342.663305][T17943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.695196][T17946] __nla_validate_parse: 2 callbacks suppressed [ 342.695215][T17946] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3338'. [ 342.716529][ C0] eth0: bad gso: type: 1, size: 1408 [ 342.806800][T17868] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 342.831859][T17868] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 342.868563][T17868] team0: Port device netdevsim0 removed [ 342.880409][T17868] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.815163][T17968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3342'. [ 343.918902][T17977] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.099459][T17977] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.195450][T17986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3346'. [ 344.208432][T17986] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3346'. [ 344.330156][T17977] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.356573][T17868] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 344.402766][T17989] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 344.420851][T17868] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 344.421039][T17989] sctp: [Deprecated]: syz.2.3347 (pid 17989) Use of struct sctp_assoc_value in delayed_ack socket option. [ 344.421039][T17989] Use struct sctp_sack_info instead [ 344.499782][T17977] bond0: (slave netdevsim0): Releasing backup interface [ 344.501935][T17989] IPVS: Scheduler module ip_vs_sip not found [ 344.518742][T17977] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.536273][T17868] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 344.563560][T17868] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 344.725374][T17977] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.733992][ T54] Bluetooth: hci2: command tx timeout [ 344.812395][T17977] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.840569][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3349'. [ 344.881324][T17977] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.914731][T17977] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.930483][T17995] netlink: 'syz.2.3349': attribute type 142 has an invalid length. [ 344.959955][T17997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3349'. [ 344.997727][T18000] netlink: 'syz.0.3350': attribute type 2 has an invalid length. [ 345.013083][T17868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.111222][T17868] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.185372][T18008] netlink: 'syz.1.3352': attribute type 1 has an invalid length. [ 345.207305][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.214514][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.259281][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.266471][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.395382][T18024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3357'. [ 345.406870][T18022] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3356'. [ 345.426840][T18022] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3356'. [ 345.663281][T18035] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.3359'. [ 345.686829][T18035] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 345.845171][T17868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.211359][T18065] netlink: 'syz.2.3369': attribute type 3 has an invalid length. [ 346.454495][ C0] eth0: bad gso: type: 1, size: 1408 [ 346.466006][T17868] veth0_vlan: entered promiscuous mode [ 346.502990][T17868] veth1_vlan: entered promiscuous mode [ 346.612820][T18089] tipc: Enabling not permitted [ 346.623888][T18089] tipc: Enabling of bearer rejected, failed to enable media [ 346.637179][T17868] veth0_macvtap: entered promiscuous mode [ 346.685623][T17868] veth1_macvtap: entered promiscuous mode [ 346.772471][T17868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.809104][ T54] Bluetooth: hci2: command tx timeout [ 346.818003][T17868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.842927][T17868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.859839][T17868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.870253][T17868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.881478][T17868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.906127][T17868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.941969][T17868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.979526][T17868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.998082][T17868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.024225][T17868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.073868][T17868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.101388][T17868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.143540][T17868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.155869][T17868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.166702][T17868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.177880][T17868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.188250][T17868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 347.201151][T17868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 347.216109][T17868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.284979][T17868] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.315753][T17868] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.333976][T17868] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.346424][T17868] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.576328][T18134] tipc: Enabling of bearer rejected, failed to enable media [ 347.616686][T12050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.635846][T12050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.670422][ C0] eth0: bad gso: type: 1, size: 1408 [ 347.686469][ C0] eth0: bad gso: type: 1, size: 1408 [ 347.718602][T18141] __nla_validate_parse: 6 callbacks suppressed [ 347.718624][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3388'. [ 347.751931][T12050] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.767571][T12050] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.898753][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3388'. [ 347.911490][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3388'. [ 347.999567][T18145] netlink: 'syz.3.3388': attribute type 4 has an invalid length. [ 348.063623][T18145] netlink: 'syz.3.3388': attribute type 4 has an invalid length. [ 348.079057][T18160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3392'. [ 348.087443][T18145] tc_dump_action: action bad kind [ 348.335932][T18174] netlink: 'syz.1.3397': attribute type 5 has an invalid length. [ 348.367008][T18174] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3397'. [ 348.391828][T18174] netlink: 'syz.1.3397': attribute type 5 has an invalid length. [ 348.416610][T18177] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3397'. [ 348.431763][ C0] eth0: bad gso: type: 1, size: 1408 [ 348.457838][T18180] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3399'. [ 348.833512][T18193] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 348.890480][ T5116] Bluetooth: hci2: command tx timeout [ 349.319752][T18231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3412'. [ 349.436045][T18231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3412'. [ 349.457566][T18238] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3414'. [ 349.497640][T18231] netlink: 'syz.1.3412': attribute type 4 has an invalid length. [ 349.583988][T18231] netlink: 'syz.1.3412': attribute type 4 has an invalid length. [ 349.642356][T18231] tc_dump_action: action bad kind [ 349.697448][ C0] eth0: bad gso: type: 1, size: 1408 [ 349.722499][T18250] netlink: 'syz.1.3416': attribute type 1 has an invalid length. [ 350.267049][T18276] netlink: 'syz.0.3426': attribute type 21 has an invalid length. [ 350.329163][ T5110] Bluetooth: hci4: command 0x0405 tx timeout [ 350.393177][T18282] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 351.166317][T18334] tipc: Enabling of bearer rejected, media not registered [ 351.292156][T18339] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.608559][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 351.700102][T18365] bridge0: entered allmulticast mode [ 351.796245][T18369] veth0_to_team: entered allmulticast mode [ 351.990789][T18376] netlink: 'syz.4.3451': attribute type 10 has an invalid length. [ 352.056891][T18376] batman_adv: batadv0: Adding interface: team0 [ 352.063938][T18376] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.099175][T18376] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 352.122898][T18381] netlink: 'syz.4.3451': attribute type 10 has an invalid length. [ 352.132918][T18381] team0: entered promiscuous mode [ 352.157655][T18381] team_slave_0: entered promiscuous mode [ 352.180484][T18381] team_slave_1: entered promiscuous mode [ 352.196559][T18381] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.211201][T18381] batman_adv: batadv0: Interface activated: team0 [ 352.223421][T18381] batman_adv: batadv0: Interface deactivated: team0 [ 352.234644][T18381] batman_adv: batadv0: Removing interface: team0 [ 352.245936][T18381] bridge0: port 3(team0) entered blocking state [ 352.253293][T18381] bridge0: port 3(team0) entered disabled state [ 352.267372][T18381] team0: entered allmulticast mode [ 352.279632][T18381] team_slave_0: entered allmulticast mode [ 352.287123][T18381] team_slave_1: entered allmulticast mode [ 352.310896][T18381] bridge0: port 3(team0) entered blocking state [ 352.317349][T18381] bridge0: port 3(team0) entered forwarding state [ 352.781298][T18382] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 353.218486][T18424] xt_bpf: check failed: parse error [ 353.711911][T18449] __nla_validate_parse: 13 callbacks suppressed [ 353.711932][T18449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3472'. [ 353.756012][T18449] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3472'. [ 353.790157][ C0] eth0: bad gso: type: 1, size: 1408 [ 353.995997][T18464] Bluetooth: MGMT ver 1.23 [ 354.050169][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3477'. [ 354.153386][T18468] xt_bpf: check failed: parse error [ 354.240714][T18476] validate_nla: 3 callbacks suppressed [ 354.240733][T18476] netlink: 'syz.0.3482': attribute type 2 has an invalid length. [ 354.262831][T18476] netlink: 16142 bytes leftover after parsing attributes in process `syz.0.3482'. [ 354.291835][T18476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3482'. [ 354.399760][T18485] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3485'. [ 354.443761][T18485] bond1: entered promiscuous mode [ 354.466372][T18488] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 354.489117][T18488] ip6gretap2: entered promiscuous mode [ 354.495353][T18488] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 354.534659][T18485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'. [ 354.546834][T18485] bond1: left promiscuous mode [ 354.556534][T18485] ip6gretap2: left promiscuous mode [ 354.570346][T18485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 355.266004][T18515] xt_bpf: check failed: parse error [ 355.460084][ C0] eth0: bad gso: type: 1, size: 1408 [ 355.499726][T18527] netlink: 880 bytes leftover after parsing attributes in process `syz.2.3497'. [ 355.585177][T18530] –eth0_vlan: renamed from bridge_slave_1 (while UP) [ 355.910482][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3500'. [ 355.933679][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3500'. [ 355.982170][ C0] eth0: bad gso: type: 1, size: 1408 [ 356.319689][T18558] IPVS: lc: TCP 172.20.20.170:0 - no destination available [ 356.329357][ C0] ------------[ cut here ]------------ [ 356.335527][ C0] WARNING: CPU: 0 PID: 16 at net/ipv4/route.c:1241 ip_rt_bug+0x2c/0x110 [ 356.344140][ C0] Modules linked in: [ 356.348097][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 356.355885][T18561] x_tables: duplicate underflow at hook 2 [ 356.357814][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 356.373895][ C0] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 356.378910][ C0] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 1b 26 aa f7 66 90 e8 14 26 aa f7 31 ff 48 89 de ba 02 00 00 00 e8 45 ad 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 356.398689][ C0] RSP: 0018:ffffc900001574c0 EFLAGS: 00010286 [ 356.404791][ C0] RAX: 4a1608fec3ea0800 RBX: ffff88806d848b40 RCX: ffffffff816fef2a [ 356.412843][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcac920 RDI: ffffffff8c206900 [ 356.420887][ C0] RBP: 0000000000000001 R08: ffffffff92ff069f R09: 1ffffffff25fe0d3 [ 356.429019][ C0] R10: dffffc0000000000 R11: fffffbfff25fe0d4 R12: dffffc0000000000 [ 356.437017][ C0] R13: dffffc0000000000 R14: ffff8880627e5940 R15: ffff888016721a00 [ 356.445064][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 356.454152][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.460803][ C0] CR2: 00000000201fa000 CR3: 00000000563cc000 CR4: 00000000003506f0 [ 356.468836][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.476832][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.484881][ C0] Call Trace: [ 356.488207][ C0] [ 356.491153][ C0] ? __warn+0x163/0x4e0 [ 356.495328][ C0] ? ip_rt_bug+0x2c/0x110 [ 356.499759][ C0] ? report_bug+0x2b3/0x500 [ 356.504290][ C0] ? ip_rt_bug+0x2c/0x110 [ 356.508688][ C0] ? handle_bug+0x3e/0x70 [ 356.513053][ C0] ? exc_invalid_op+0x1a/0x50 [ 356.517753][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 356.522877][ C0] ? mark_lock+0x9a/0x350 [ 356.527250][ C0] ? ip_rt_bug+0x2c/0x110 [ 356.531667][ C0] ip_push_pending_frames+0xbf/0x150 [ 356.537162][ C0] __icmp_send+0xf89/0x14e0 [ 356.541755][ C0] ? __icmp_send+0x59c/0x14e0 [ 356.546478][ C0] ? __pfx___icmp_send+0x10/0x10 [ 356.551499][ C0] ? mark_lock+0x9a/0x350 [ 356.555871][ C0] ? look_up_lock_class+0x77/0x160 [ 356.561059][ C0] ? mark_lock+0x9a/0x350 [ 356.565449][ C0] ipv4_link_failure+0x62f/0xa10 [ 356.570464][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 356.575987][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 356.581185][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 356.586675][ C0] arp_error_report+0x114/0x160 [ 356.591596][ C0] neigh_invalidate+0x244/0x470 [ 356.596487][ C0] neigh_timer_handler+0x8a5/0xfd0 [ 356.601673][ C0] call_timer_fn+0x18e/0x650 [ 356.606297][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 356.612010][ C0] ? call_timer_fn+0xc0/0x650 [ 356.616716][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 356.622417][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 356.627562][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 356.633272][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 356.638981][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 356.644636][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 356.650016][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 356.655246][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 356.660966][ C0] __run_timer_base+0x66a/0x8e0 [ 356.665858][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 356.671333][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.677787][ C0] run_timer_softirq+0xb7/0x170 [ 356.682804][ C0] handle_softirqs+0x2c4/0x970 [ 356.687624][ C0] ? run_ksoftirqd+0xca/0x130 [ 356.692383][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 356.697710][ C0] run_ksoftirqd+0xca/0x130 [ 356.702302][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 356.707541][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 356.712718][ C0] smpboot_thread_fn+0x544/0xa30 [ 356.717681][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 356.722784][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 356.728304][ C0] kthread+0x2f0/0x390 [ 356.732402][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 356.737949][ C0] ? __pfx_kthread+0x10/0x10 [ 356.742590][ C0] ret_from_fork+0x4b/0x80 [ 356.747036][ C0] ? __pfx_kthread+0x10/0x10 [ 356.751698][ C0] ret_from_fork_asm+0x1a/0x30 [ 356.756526][ C0] [ 356.759617][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 356.767064][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 356.776681][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 356.786729][ C0] Call Trace: [ 356.789996][ C0] [ 356.792941][ C0] dump_stack_lvl+0x241/0x360 [ 356.797704][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.802895][ C0] ? __pfx__printk+0x10/0x10 [ 356.807483][ C0] ? vscnprintf+0x5d/0x90 [ 356.811805][ C0] panic+0x349/0x860 [ 356.815690][ C0] ? __warn+0x172/0x4e0 [ 356.819840][ C0] ? __pfx_panic+0x10/0x10 [ 356.824259][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 356.829204][ C0] __warn+0x346/0x4e0 [ 356.833178][ C0] ? ip_rt_bug+0x2c/0x110 [ 356.837514][ C0] report_bug+0x2b3/0x500 [ 356.841848][ C0] ? ip_rt_bug+0x2c/0x110 [ 356.846175][ C0] handle_bug+0x3e/0x70 [ 356.850329][ C0] exc_invalid_op+0x1a/0x50 [ 356.854823][ C0] asm_exc_invalid_op+0x1a/0x20 [ 356.859754][ C0] RIP: 0010:ip_rt_bug+0x2c/0x110 [ 356.864687][ C0] Code: 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 1b 26 aa f7 66 90 e8 14 26 aa f7 31 ff 48 89 de ba 02 00 00 00 e8 45 ad 6b ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 356.884385][ C0] RSP: 0018:ffffc900001574c0 EFLAGS: 00010286 [ 356.890448][ C0] RAX: 4a1608fec3ea0800 RBX: ffff88806d848b40 RCX: ffffffff816fef2a [ 356.898521][ C0] RDX: dffffc0000000000 RSI: ffffffff8bcac920 RDI: ffffffff8c206900 [ 356.906600][ C0] RBP: 0000000000000001 R08: ffffffff92ff069f R09: 1ffffffff25fe0d3 [ 356.914568][ C0] R10: dffffc0000000000 R11: fffffbfff25fe0d4 R12: dffffc0000000000 [ 356.922536][ C0] R13: dffffc0000000000 R14: ffff8880627e5940 R15: ffff888016721a00 [ 356.930509][ C0] ? mark_lock+0x9a/0x350 [ 356.934848][ C0] ip_push_pending_frames+0xbf/0x150 [ 356.940146][ C0] __icmp_send+0xf89/0x14e0 [ 356.944659][ C0] ? __icmp_send+0x59c/0x14e0 [ 356.949420][ C0] ? __pfx___icmp_send+0x10/0x10 [ 356.954362][ C0] ? mark_lock+0x9a/0x350 [ 356.958688][ C0] ? look_up_lock_class+0x77/0x160 [ 356.963796][ C0] ? mark_lock+0x9a/0x350 [ 356.968150][ C0] ipv4_link_failure+0x62f/0xa10 [ 356.973105][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 356.978605][ C0] ? do_raw_write_lock+0x148/0x4f0 [ 356.983710][ C0] ? __pfx_ipv4_link_failure+0x10/0x10 [ 356.989165][ C0] arp_error_report+0x114/0x160 [ 356.994015][ C0] neigh_invalidate+0x244/0x470 [ 356.998869][ C0] neigh_timer_handler+0x8a5/0xfd0 [ 357.004002][ C0] call_timer_fn+0x18e/0x650 [ 357.008611][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 357.014254][ C0] ? call_timer_fn+0xc0/0x650 [ 357.018938][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 357.024573][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 357.029685][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 357.035316][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 357.040942][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 357.046578][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 357.051866][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 357.057057][ C0] ? __pfx_neigh_timer_handler+0x10/0x10 [ 357.062683][ C0] __run_timer_base+0x66a/0x8e0 [ 357.067537][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 357.072929][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.079257][ C0] run_timer_softirq+0xb7/0x170 [ 357.084113][ C0] handle_softirqs+0x2c4/0x970 [ 357.088874][ C0] ? run_ksoftirqd+0xca/0x130 [ 357.093547][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 357.098829][ C0] run_ksoftirqd+0xca/0x130 [ 357.103326][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 357.108442][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 357.113544][ C0] smpboot_thread_fn+0x544/0xa30 [ 357.118479][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 357.123510][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 357.128959][ C0] kthread+0x2f0/0x390 [ 357.133025][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 357.138474][ C0] ? __pfx_kthread+0x10/0x10 [ 357.143062][ C0] ret_from_fork+0x4b/0x80 [ 357.147477][ C0] ? __pfx_kthread+0x10/0x10 [ 357.152067][ C0] ret_from_fork_asm+0x1a/0x30 [ 357.156838][ C0] [ 357.159966][ C0] Kernel Offset: disabled [ 357.164670][ C0] Rebooting in 86400 seconds..