last executing test programs: 2.64325265s ago: executing program 4 (id=1519): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0xfcff}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x43}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 2.624570134s ago: executing program 3 (id=1520): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @private}, {0x0, 0x0, 0x8}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000011000101000000000a00000000000000", @ANYRES32=r5], 0x20}}, 0x0) 2.556073694s ago: executing program 2 (id=1522): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000b00000000000001120022eb"], 0xfdef) 2.479174176s ago: executing program 4 (id=1523): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x10000004}) (async) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x3) (async) epoll_wait(r5, &(0x7f0000000540)=[{}], 0x1, 0x7f36be39) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000300)="580000001400192340834b80040d8c560a11820fffff5bab4e210000000058000b4824ca945f6400940f6a0325010ebc000000000000008007f0fffeffe809005300fff5dd00000010000100080c100000", 0x51}, {&(0x7f00000000c0)="530a065b00ae95", 0x7}], 0x2) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000008007c82000000080063bb21fb0ff582abec6105000000000900000000000000002400038008000170787f6075964c873f828a9b81d2fedfd8c8dca4dcc67e34c8d42f100172ac2f7c7d3b1125f6a7bac3dbdad4105b4c8bb5b8313bd408"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00H\x00', @ANYRES16=r8, @ANYBLOB="01002abd7000fddbdf25060000001400038006000400010000000800010001000000080005004000000038000280080008000400000006000e004e2300000800050009000000140001007f00000100000000000000000000000008000500090000007c00038008000500000000001400060020010000000000000000000000000000050008000600000014000600ff0200000000000000000000000000010500080006000000060007004e21000008000300040000001400060000000000000000000000ffff00000000140002006361696630000000000000000000000008000500380a0000"], 0xec}, 0x1, 0x0, 0x0, 0x40880}, 0x200049c0) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0), &(0x7f0000000280), 0xa7c, r9}, 0x38) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r13, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000240000000050900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x74}}, 0x0) (async) close(r3) write$cgroup_int(r2, &(0x7f0000000200), 0x40c000) (async) sendfile(r1, r0, 0x0, 0xf03a0005) (async) sendfile(r1, r0, 0x0, 0x8000000000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 2.227645276s ago: executing program 4 (id=1524): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0x15, &(0x7f0000001480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f900001ab703000008000000b704000000001500850000003300000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) close(r6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) r9 = openat$cgroup_ro(r7, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6800000014000100000000000000000000000000000000000000000000000000ac1414aa00"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00a4fe0800000000000c0015000000007fffffffffffffff0000000000000000"], 0x68}}, 0x0) 1.987735462s ago: executing program 1 (id=1525): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000001bc0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xae}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) recvmmsg(r4, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xfffffff8, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) 1.598373578s ago: executing program 2 (id=1526): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) r1 = socket$inet6(0xa, 0x3, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000200)=0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) shutdown(r6, 0x1) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x17, @loopback}, 0x1c) r7 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000440)={'wlan0\x00', &(0x7f0000000400)=@ethtool_ringparam={0x11}}) 1.42805991s ago: executing program 1 (id=1528): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) write$binfmt_script(r0, &(0x7f00000008c0)={'#! ', './file0'}, 0xb) (async) pipe(&(0x7f0000000000)) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r1, &(0x7f0000008f80)=[{{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000280)=""/123, 0x7b}, {&(0x7f0000000ac0)=""/241, 0xf1}, {&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000540)=""/77, 0x4d}, {&(0x7f0000000bc0)=""/111, 0x6f}], 0x6}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, "9b356cd8c5ef0248"}}}}}, 0x0) (async) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000002580)=ANY=[@ANYBLOB="18000000000005000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000000000", @ANYBLOB="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", @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000400d000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r0, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x48) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000}, 0x1, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0xc0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x3d, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0xe, 0x7ff, 0x10001}, 0x10, 0x15b36, r4, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$binfmt_misc(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001e00)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000001e40)={r10, 0x3, 0x6}, 0x10) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f0000000040)={r10, 0x3, 0x6, @broadcast}, 0x10) 1.345241511s ago: executing program 3 (id=1530): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x50}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}, 0x11000}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 1.240720548s ago: executing program 4 (id=1531): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0x10}, {0x10, 0x110}], 0x20, 0x700}, 0x0) 1.230021088s ago: executing program 0 (id=1532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.195932291s ago: executing program 2 (id=1533): getpeername(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x5) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) read$alg(r2, &(0x7f0000001e00)=""/4108, 0x1001) sendmsg$alg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001540)="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", 0x202}, {&(0x7f0000000180)="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", 0xefa}], 0x2}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6}]}, 0x10) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r4], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r6, 0x10c, 0x4, &(0x7f0000000000), 0x4) r7 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891b, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @multicast1=0xac14140a}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) 1.144655416s ago: executing program 1 (id=1534): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=@newchain={0x24, 0x64, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x800000000000000}, 0x0) 1.143861957s ago: executing program 4 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000002f80)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4}]}}}], 0x18}}], 0x1, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r2) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x80000000}]}, 0x1c}}, 0x4004081) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000005180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="140000000000000028dd0000080000000000000000000000140000000000000029000000", @ANYRESHEX], 0x30}}], 0x2, 0x4404c000) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a54049f0c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x0, 0x0, 0x32) splice(r4, 0x0, r3, 0x0, 0x406f408, 0x0) ioctl$SIOCRSSCAUSE(r3, 0x89e1, &(0x7f0000000040)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0103000000470000000027"], 0x14}}, 0x0) 1.143303943s ago: executing program 3 (id=1536): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x3}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_mark_inode_dirty\x00', r1}, 0x10) r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001780), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002900)={r2, 0x20, &(0x7f00000028c0)={&(0x7f00000017c0)=""/195, 0xc3, 0x0, &(0x7f00000018c0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000029c0)={0x1a, 0x7, &(0x7f0000002940)=ANY=[@ANYBLOB="180000001f000000000000000700000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000185700000e00000000000000000000009500000000000300"], &(0x7f0000000740)='syzkaller\x00', 0x40, 0x1000, &(0x7f0000000780)=""/4096, 0x41000, 0x28, '\x00', r3, 0x7, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000002a80)=[{0x4, 0x1, 0xd, 0xa}, {0x0, 0x5, 0x8, 0x2}, {0x0, 0x3, 0x1, 0xa}, {0x2, 0x2, 0x7, 0x7}, {0x3, 0x4, 0x0, 0xa}, {0x5, 0x2, 0xc}, {0x3, 0x3, 0x0, 0x1}], 0x10, 0x8001}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180000f9ec429cf470ec74d78658d205826fa400080000000010000007000000000000002020702500000000002020207b1af8ff00000000bfa10000000000000701000019000000b702000008000000b70300000000000085000000700000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, r5, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r6}, 0x9) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000001b000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000085b17c6b66c739e39fa83089879"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r12}, 0x9) ioctl$SIOCSIFHWADDR(r7, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 1.012701983s ago: executing program 1 (id=1537): accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) (async) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)=0x3f, 0x4) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r0 = socket$packet(0x11, 0x3, 0x300) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) (async, rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x3c, 0x13, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}}, 0x0) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) (async, rerun: 32) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async, rerun: 32) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x11, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = socket$inet6(0xa, 0x802, 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c20000000c004500001c0000000000029078ac1e0001ac1414bb8bc7907800000000"], 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getpeername(r9, 0x0, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000375b74a61c09557d16", @ANYRES32=r7, @ANYBLOB="0a00340001010101010100000500180108000000"], 0x30}}, 0x0) (async) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async, rerun: 32) sendto$inet6(r5, 0x0, 0x7400, 0x0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) (rerun: 32) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) r10 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_proto_private(r10, 0x89ee, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_DELTABLE={0x14}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x5c}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 960.39718ms ago: executing program 0 (id=1538): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffff}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b0b, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)=ANY=[@ANYBLOB="14010000280001000000000000000000010100800c0001000000000000000000040002"], 0x114}], 0x1}, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r4, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1401000031000100000000000000000002"], 0x114}], 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) recvmmsg(r6, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) writev(r6, &(0x7f00000002c0)=[{&(0x7f00000001c0)="4800000014001d0d09074beafd0d8c560284606088ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e6ee11ac3439693b948e142ff0000000309ff5b", 0x48}], 0x1) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000080)={0x1, 0xc9}, 0x8) 844.443983ms ago: executing program 3 (id=1539): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000040)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfe}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000000)=0x9c) r4 = socket(0x10, 0x80003, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) recvmsg$unix(r4, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/1, 0x1}], 0x5}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000080)={'sit0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x25dfdbfe, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x0, 0x80000000}}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae535af2f0a70ddeb37f"}, @TCA_CT_NAT_PORT_MIN={0x0, 0xd, 0x4e23}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x34}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r6 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) epoll_create(0x8000) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000340)={'some', 0x20, 0x5, 0x20, 0xffffa}, 0x2f) 665.237202ms ago: executing program 2 (id=1540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @dev}]}}}]}, 0x50}, 0x1, 0x2}, 0x0) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) sendmsg$netlink(r3, &(0x7f0000000240)={&(0x7f0000000180)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)=[{&(0x7f0000000540)={0x1194, 0x41, 0x200, 0x70bd25, 0x25dfdbfd, "", [@nested={0xa2, 0x76, 0x0, 0x1, [@generic="151a7bd7de66fb7ecf2a00a6d0455707adfd9480c306ae0c09e360026916c200df044a3cb3831a98d1dad7d2f78062a04c8420d47c2e14095a4c9be5d1ff0e23f58fcda1d398f1591198fbd3dd9419c7e6b61faafb1c100de119b44ea4434d2cef33508b4d078f1e6e30a5422095f5deb4a0531d5d59f8576f81305f6cae760c01805893f525ce14261d05a2449fc182c98ac799f8d6", @typed={0x8, 0x4b, 0x0, 0x0, @fd=r1}]}, @nested={0x1010, 0xf8, 0x0, 0x1, [@typed={0x8, 0xa1, 0x0, 0x0, @ipv4=@private=0xa010102}, @typed={0x4, 0xe1}, @generic="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"]}, @nested={0x8, 0x45, 0x0, 0x1, [@typed={0x4, 0x1f}]}, @generic="33ccdadaaa4c4ac2af6f06090b92bc77998a3c65594e882824e9edd0595a505809dfe53dac7c5b9b6bd59a3fae8125269c76e6e60181da7cd69bf25c0a3fa7a47f4713ed4219cdd594527c7227835dcf2ebf07b2632bb50688b98e59c3bf7d9e5165260592a2293e7d77501711c32771f7c52a2bd8b6832b872a7ad68f4251d05eca39422d5a91fb99293a447010b42104336c0a4d330616ce0953aed1c4e74423b61ad2e4fca9963731e09281a0f91848c896ae049ac9c9215ed7b344d78b6dc81c", @typed={0x4, 0x3f}]}, 0x1194}], 0x1, 0x0, 0x0, 0x54800}, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0x3, 0x4) syz_emit_ethernet(0xd2, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x9c, 0x3b, 0x0, @mcast2, @loopback, {[], {0x0, 0xffff, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "84fd2a290899707a3ed014cada48030119412b1db35313dcdc80fe6a6b3c4750", "7062e065c7979124e1714f9e4a747fe41a3a5dd920c19ad9756a5b3cc7e94013ae01e2de71a29a6bf5196065f6f2a527", "0398064dcd245cdb49c362e8ad0c695721aeebd441b9e9d28ba36de0", {"bc120fcf89d4ec18925ef731c67f44d5", "20c63c5b26093323fd366b6e9f2a0197"}}}}}}}}, 0x0) 524.79941ms ago: executing program 0 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8000000010000305000000000000000004000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400", @ANYRES32], 0x80}}, 0x0) 460.596405ms ago: executing program 1 (id=1542): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), 0x0) socket$inet6(0xa, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)=0x44) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff02"], 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f2, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) 427.674422ms ago: executing program 2 (id=1543): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df6006558000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r0], 0x4c}}, 0x0) 405.068453ms ago: executing program 3 (id=1544): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001200000008000800000000000800090000000000180001801400020076657468305f746f5f626f6e6400000008000700000000000800060000004b"], 0x4c}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x25, &(0x7f0000000180)={0x0, @in={{0x2, 0x3, @empty}}, 0x0, 0x0, 0x3, 0x3, 0x0, 0x4, 0xd9}, 0x9c) 332.604846ms ago: executing program 0 (id=1545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x2c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x24}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_CMD={0x8}]}, 0x2c}, 0x1, 0x0, 0xf0ff}, 0x0) 196.454842ms ago: executing program 2 (id=1546): socket$tipc(0x1e, 0x2, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$tipc(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) 155.211833ms ago: executing program 0 (id=1547): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x37) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 144.351765ms ago: executing program 4 (id=1548): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], 0x450}, 0x1, 0x0, 0x0, 0x40000}, 0x1) epoll_create1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r3) socket$packet(0x11, 0x2, 0x300) accept$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x108, 0xff8, &(0x7f0000002e00)=""/4088, 0x0, 0x8, '\x00', 0x0, 0x0, r3}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_rdma(0x10, 0x3, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000100012800800010068"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000160a01010000000000000000010000000900020073797a30001c00000900010073797a3000000000140003"], 0xc8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x0, @mcast1, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000780)="f4000900062b2f25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80), 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004520004800000000fc06907864010102ac1414aa00000040", @ANYRES32=0x41424344, @ANYRESHEX=r3, @ANYRES8=r5], 0x0) 4.643912ms ago: executing program 1 (id=1549): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=@framed={{0x18, 0x2, 0x0, 0x73}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.273621ms ago: executing program 3 (id=1550): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x2c}}, 0xc000000) 0s ago: executing program 0 (id=1551): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000240)={0x0, 0xa6ff, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="24000000070611020000000000000000000f000005000100070000000800064000000004"], 0x24}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.139' (ED25519) to the list of known hosts. [ 66.703369][ T5083] cgroup: Unknown subsys name 'net' [ 66.844000][ T5083] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.518508][ T5083] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.649388][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.658160][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.719360][ T5102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.729066][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.738377][ T5105] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.756074][ T5105] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.764574][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.765284][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.780720][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.784488][ T5108] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.788523][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.795483][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.803665][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.810860][ T5108] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.816157][ T5104] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.830607][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.833810][ T5108] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.840588][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.846197][ T5108] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.854277][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.859817][ T5108] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.866204][ T5104] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.879836][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.887629][ T5097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.892474][ T5104] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.902072][ T5108] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.902257][ T5104] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.918230][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.926026][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.954227][ T5097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.962368][ T5097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.970073][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.526459][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 72.639312][ T5094] chnl_net:caif_netlink_parms(): no params data found [ 72.654766][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 72.743224][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 72.842748][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 72.876833][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.884555][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.892105][ T5096] bridge_slave_0: entered allmulticast mode [ 72.899229][ T5096] bridge_slave_0: entered promiscuous mode [ 72.909537][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.916775][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.923936][ T5096] bridge_slave_1: entered allmulticast mode [ 72.932463][ T5096] bridge_slave_1: entered promiscuous mode [ 72.961707][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.969109][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.976474][ T5092] bridge_slave_0: entered allmulticast mode [ 72.983667][ T5092] bridge_slave_0: entered promiscuous mode [ 73.050151][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.057835][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.065018][ T5092] bridge_slave_1: entered allmulticast mode [ 73.073620][ T5092] bridge_slave_1: entered promiscuous mode [ 73.083422][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.092854][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.100775][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.108041][ T5094] bridge_slave_0: entered allmulticast mode [ 73.115050][ T5094] bridge_slave_0: entered promiscuous mode [ 73.162929][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.186663][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.193865][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.201190][ T5094] bridge_slave_1: entered allmulticast mode [ 73.208328][ T5094] bridge_slave_1: entered promiscuous mode [ 73.273763][ T5096] team0: Port device team_slave_0 added [ 73.302918][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.311811][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.319415][ T5093] bridge_slave_0: entered allmulticast mode [ 73.327041][ T5093] bridge_slave_0: entered promiscuous mode [ 73.336003][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.343184][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.350750][ T5093] bridge_slave_1: entered allmulticast mode [ 73.357978][ T5093] bridge_slave_1: entered promiscuous mode [ 73.368388][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.380227][ T5096] team0: Port device team_slave_1 added [ 73.400254][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.413382][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.446687][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.530833][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.538519][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.568307][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.585735][ T5094] team0: Port device team_slave_0 added [ 73.592114][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.599550][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.606838][ T5107] bridge_slave_0: entered allmulticast mode [ 73.613676][ T5107] bridge_slave_0: entered promiscuous mode [ 73.623934][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.636821][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.660845][ T5092] team0: Port device team_slave_0 added [ 73.667484][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.674448][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.700793][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.714041][ T5094] team0: Port device team_slave_1 added [ 73.746920][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.754068][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.762246][ T5107] bridge_slave_1: entered allmulticast mode [ 73.769379][ T5107] bridge_slave_1: entered promiscuous mode [ 73.802333][ T5092] team0: Port device team_slave_1 added [ 73.828661][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.836256][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.863067][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.877150][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.884105][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.910150][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.949514][ T5093] team0: Port device team_slave_0 added [ 73.966115][ T5097] Bluetooth: hci0: command tx timeout [ 73.966132][ T5102] Bluetooth: hci3: command tx timeout [ 73.966420][ T5102] Bluetooth: hci2: command tx timeout [ 73.982899][ T5105] Bluetooth: hci1: command tx timeout [ 73.991711][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.999118][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.025074][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.044495][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.054129][ T5105] Bluetooth: hci4: command tx timeout [ 74.058706][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.073071][ T5093] team0: Port device team_slave_1 added [ 74.100995][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.108472][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.134699][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.180176][ T5096] hsr_slave_0: entered promiscuous mode [ 74.186817][ T5096] hsr_slave_1: entered promiscuous mode [ 74.231421][ T5107] team0: Port device team_slave_0 added [ 74.302746][ T5107] team0: Port device team_slave_1 added [ 74.322250][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.329827][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.356178][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.385556][ T5094] hsr_slave_0: entered promiscuous mode [ 74.392543][ T5094] hsr_slave_1: entered promiscuous mode [ 74.400253][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.408383][ T5094] Cannot create hsr debugfs directory [ 74.446534][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.453517][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.480085][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.496646][ T5092] hsr_slave_0: entered promiscuous mode [ 74.503206][ T5092] hsr_slave_1: entered promiscuous mode [ 74.509671][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.517530][ T5092] Cannot create hsr debugfs directory [ 74.533499][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.540785][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.567191][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.580685][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.588059][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.614081][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.819385][ T5093] hsr_slave_0: entered promiscuous mode [ 74.829146][ T5093] hsr_slave_1: entered promiscuous mode [ 74.835489][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.843063][ T5093] Cannot create hsr debugfs directory [ 74.896962][ T5107] hsr_slave_0: entered promiscuous mode [ 74.903946][ T5107] hsr_slave_1: entered promiscuous mode [ 74.911398][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.919306][ T5107] Cannot create hsr debugfs directory [ 75.239834][ T5096] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.275600][ T5096] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.303446][ T5096] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.319926][ T5096] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.362653][ T5094] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.380766][ T5094] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.397379][ T5094] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.419919][ T5094] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.488380][ T5092] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.501525][ T5092] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.529167][ T5092] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.543364][ T5092] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.639976][ T5093] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.652683][ T5093] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.664688][ T5093] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.678296][ T5093] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.800340][ T5107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.811416][ T5107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.842309][ T5107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.853779][ T5107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.887452][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.917964][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.982909][ T5094] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.023884][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.038360][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.045798][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.046427][ T5105] Bluetooth: hci1: command tx timeout [ 76.054919][ T5102] Bluetooth: hci2: command tx timeout [ 76.058983][ T5108] Bluetooth: hci0: command tx timeout [ 76.064583][ T5097] Bluetooth: hci3: command tx timeout [ 76.098640][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.105812][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.118800][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.125982][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.129782][ T5097] Bluetooth: hci4: command tx timeout [ 76.168858][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.176172][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.321497][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.394449][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.415761][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.469518][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.476737][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.498705][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.505945][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.557744][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.592189][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.631377][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.674773][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.707333][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.714488][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.760603][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.767852][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.799849][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.807947][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.854405][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.903010][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.910268][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.929951][ T5094] veth0_vlan: entered promiscuous mode [ 76.978881][ T5094] veth1_vlan: entered promiscuous mode [ 77.021833][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.140957][ T5094] veth0_macvtap: entered promiscuous mode [ 77.222726][ T5094] veth1_macvtap: entered promiscuous mode [ 77.258457][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.336267][ T5096] veth0_vlan: entered promiscuous mode [ 77.361165][ T5096] veth1_vlan: entered promiscuous mode [ 77.380474][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.428616][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.470212][ T5094] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.503358][ T5094] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.512443][ T5094] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.526985][ T5094] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.671795][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.693966][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.733718][ T5096] veth0_macvtap: entered promiscuous mode [ 77.777546][ T2809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.782437][ T5096] veth1_macvtap: entered promiscuous mode [ 77.791895][ T2809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.871938][ T2437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.881126][ T2437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.927585][ T5107] veth0_vlan: entered promiscuous mode [ 77.967356][ T5092] veth0_vlan: entered promiscuous mode [ 77.983263][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.994823][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.007637][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.029709][ T5107] veth1_vlan: entered promiscuous mode [ 78.043024][ T5092] veth1_vlan: entered promiscuous mode [ 78.064777][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.099712][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.121351][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.129831][ T5102] Bluetooth: hci0: command tx timeout [ 78.129933][ T5097] Bluetooth: hci1: command tx timeout [ 78.135574][ T5102] Bluetooth: hci2: command tx timeout [ 78.148118][ T5097] Bluetooth: hci3: command tx timeout [ 78.187608][ T5096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.208902][ T5102] Bluetooth: hci4: command tx timeout [ 78.215759][ T5096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.224496][ T5096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.234547][ T5096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.265426][ T5093] veth0_vlan: entered promiscuous mode [ 78.333462][ T5107] veth0_macvtap: entered promiscuous mode [ 78.342737][ T5093] veth1_vlan: entered promiscuous mode [ 78.401923][ T5092] veth0_macvtap: entered promiscuous mode [ 78.434097][ T5107] veth1_macvtap: entered promiscuous mode [ 78.510786][ T5093] veth0_macvtap: entered promiscuous mode [ 78.532039][ T5092] veth1_macvtap: entered promiscuous mode [ 78.545048][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.564831][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.576050][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.592789][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.604890][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.623965][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.639196][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.650322][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.661449][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.681407][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.703951][ T5093] veth1_macvtap: entered promiscuous mode [ 78.713292][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.724340][ T5107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.740758][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.754409][ T5107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.771920][ T5107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.787568][ T5107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.844178][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.857818][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.867771][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.879556][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.889970][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.900550][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.913409][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.921338][ T5189] pim6reg1: entered promiscuous mode [ 78.927125][ T5189] pim6reg1: entered allmulticast mode [ 78.963073][ T2809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.972219][ T2809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.973926][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 78.982818][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.010475][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.027471][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.042324][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.055349][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.066418][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.076649][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.087639][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.112161][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.137213][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.148649][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.158922][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.169700][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.179606][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.190593][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.211003][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.303959][ T5092] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.313098][ T5092] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.325166][ T5092] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.337576][ T5092] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.393333][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.404256][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.414874][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.426083][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.436004][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.446550][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.458409][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.469217][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.481060][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.618767][ T5093] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.629584][ T5093] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.639670][ T5093] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.651043][ T5093] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.682597][ T5195] netlink: 'syz.2.3': attribute type 10 has an invalid length. [ 79.727314][ T5195] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 79.753137][ T5198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 79.880993][ T5202] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 79.935124][ T2809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.960422][ T2809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.044704][ T2868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.065006][ T2868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.165930][ T2868] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.203841][ T2868] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.213103][ T5102] Bluetooth: hci3: command tx timeout [ 80.215366][ T5097] Bluetooth: hci1: command tx timeout [ 80.221451][ T5102] Bluetooth: hci0: command tx timeout [ 80.223884][ T5097] Bluetooth: hci2: command tx timeout [ 80.264837][ T5212] netlink: 36 bytes leftover after parsing attributes in process `syz.3.15'. [ 80.286086][ T5097] Bluetooth: hci4: command tx timeout [ 80.291708][ T2437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.299169][ T5212] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.310735][ T2437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.399982][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.408045][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.473133][ T5215] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.512954][ T2437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.527364][ T2437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.880276][ T5228] unsupported nlmsg_type 40 [ 80.906650][ T5226] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 80.927619][ T5230] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 81.379909][ T5255] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.399222][ T5249] syzkaller0: entered promiscuous mode [ 81.430807][ T5249] syzkaller0: entered allmulticast mode [ 81.502945][ T5262] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.662053][ T5263] Illegal XDP return value 8594561 on prog (id 9) dev N/A, expect packet loss! [ 82.074410][ T5277] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 82.167594][ T5280] bridge0: entered promiscuous mode [ 82.255451][ T5280] bridge0: left promiscuous mode [ 82.720278][ T5298] IPVS: set_ctl: invalid protocol: 0 172.20.20.0:0 [ 82.895144][ T5302] dccp_invalid_packet: P.Data Offset(132) too large [ 83.139854][ T5310] netlink: 'syz.4.46': attribute type 10 has an invalid length. [ 83.211567][ T5310] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 83.818575][ T5342] netlink: 40 bytes leftover after parsing attributes in process `syz.4.55'. [ 83.877187][ T5344] vlan2: entered promiscuous mode [ 84.282296][ T5361] netlink: 'syz.2.66': attribute type 3 has an invalid length. [ 85.089737][ T5395] syz_tun: entered promiscuous mode [ 85.111972][ T5395] ip6gretap0: entered promiscuous mode [ 85.119556][ T5401] Cannot find add_set index 0 as target [ 85.233892][ T5402] netlink: 40 bytes leftover after parsing attributes in process `syz.4.78'. [ 85.637444][ T5424] netlink: 'syz.1.88': attribute type 30 has an invalid length. [ 85.679802][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 85.713847][ T5426] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 85.844208][ T5434] netlink: 188336 bytes leftover after parsing attributes in process `syz.0.90'. [ 85.903775][ T5439] Cannot find del_set index 0 as target [ 86.206917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.311163][ T5454] Zero length message leads to an empty skb [ 86.609281][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.817986][ T5462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.102'. [ 86.845954][ T5149] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.865112][ T5471] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.105'. [ 87.029511][ T785] cfg80211: failed to load regulatory.db [ 87.380573][ T5490] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 87.451183][ T5495] netlink: 104 bytes leftover after parsing attributes in process `syz.0.116'. [ 87.575963][ T5502] netlink: 76 bytes leftover after parsing attributes in process `syz.2.117'. [ 87.677632][ T45] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.839264][ T5514] netlink: 830 bytes leftover after parsing attributes in process `syz.1.121'. [ 88.227537][ T5532] netlink: 24 bytes leftover after parsing attributes in process `syz.3.127'. [ 88.687586][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.765921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.027159][ T5582] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 89.049836][ T5586] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 89.157677][ T5582] vlan0: entered promiscuous mode [ 89.331041][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 89.368227][ T5595] team0: Port device batadv1 added [ 89.977481][ T5616] bond0: entered allmulticast mode [ 89.982676][ T5616] bond_slave_0: entered allmulticast mode [ 89.997654][ T5632] dccp_invalid_packet: P.Data Offset(0) too small [ 90.074703][ T5616] bond_slave_1: entered allmulticast mode [ 90.165721][ T5628] vlan2: entered promiscuous mode [ 90.379505][ T5642] __nla_validate_parse: 9 callbacks suppressed [ 90.379528][ T5642] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.161'. [ 90.397299][ T5642] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 90.935952][ T5671] macsec0: entered allmulticast mode [ 90.949867][ T5671] veth1_macvtap: entered allmulticast mode [ 90.975897][ T5676] netlink: 'syz.4.175': attribute type 3 has an invalid length. [ 91.298016][ T5690] netlink: 'syz.2.181': attribute type 1 has an invalid length. [ 91.801723][ T5149] IPVS: starting estimator thread 0... [ 91.915539][ T5715] IPVS: using max 17 ests per chain, 40800 per kthread [ 92.196809][ T5732] sctp: [Deprecated]: syz.1.200 (pid 5732) Use of int in maxseg socket option. [ 92.196809][ T5732] Use struct sctp_assoc_value instead [ 92.388491][ T5738] macvtap0: mtu less than device minimum [ 92.787261][ T5758] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 93.005816][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 93.378043][ T5792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'. [ 93.398147][ T5792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'. [ 93.646018][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.225'. [ 93.839501][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.228'. [ 94.577866][ T5865] tipc: Enabling of bearer rejected, media not registered [ 94.905537][ T5886] netlink: 36 bytes leftover after parsing attributes in process `syz.3.249'. [ 95.184482][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 95.409266][ T5912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 95.445377][ T5912] netlink: 28 bytes leftover after parsing attributes in process `syz.4.260'. [ 95.598952][ T5915] netlink: 'syz.0.261': attribute type 10 has an invalid length. [ 95.658268][ T5915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.261'. [ 95.987412][ T5936] netlink: 'syz.2.268': attribute type 3 has an invalid length. [ 96.042480][ T5935] netlink: 'syz.2.268': attribute type 3 has an invalid length. [ 96.085952][ T5936] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.268'. [ 96.128399][ T5935] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.268'. [ 96.306439][ T5953] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.606102][ T5967] tap0: tun_chr_ioctl cmd 1074025675 [ 96.654918][ T5967] tap0: persist enabled [ 96.680524][ T5967] tap0: tun_chr_ioctl cmd 1074025675 [ 96.719982][ T5967] tap0: persist enabled [ 96.903578][ T5977] macvlan2: entered promiscuous mode [ 96.948730][ T5977] macvlan2: entered allmulticast mode [ 96.977234][ T5977] bridge0: entered promiscuous mode [ 96.984731][ T5977] bridge0: entered allmulticast mode [ 97.014047][ T5977] team0: Port device macvlan2 added [ 97.369171][ T6005] netlink: 76 bytes leftover after parsing attributes in process `syz.3.293'. [ 97.449248][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.294'. [ 98.359042][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 98.444517][ T6051] netlink: 224 bytes leftover after parsing attributes in process `syz.3.312'. [ 98.711270][ T6071] netlink: 188 bytes leftover after parsing attributes in process `syz.4.317'. [ 98.804450][ T6071] netlink: 'syz.4.317': attribute type 1 has an invalid length. [ 98.888607][ T6073] syzkaller0: entered promiscuous mode [ 98.894167][ T6073] syzkaller0: entered allmulticast mode [ 98.932769][ T6078] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 98.978660][ T6079] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 99.022426][ T6079] syzkaller0: Linktype set failed because interface is up [ 100.367570][ T6101] netlink: 'syz.3.327': attribute type 34 has an invalid length. [ 100.493082][ T29] audit: type=1107 audit(1720313392.364:2): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='†(CSáã 6ŒÕ¡aÅ;šÎ¢ÎG#WïÈî#(‘—­c?9£Î»ßþgÝ–ÇKP‚Ô0E⡉—þ–Î`b%ÇåÄR-•]$¬/oVkô|tÒ협œãT«¿Ü£öõ³µ‡R¾{WTç,YØê£aŸßPë}ØO`„•)ú[_)šÁqWþÓ' [ 100.567693][ T6114] netlink: 'syz.3.331': attribute type 10 has an invalid length. [ 100.931894][ T6135] __nla_validate_parse: 3 callbacks suppressed [ 100.931915][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'. [ 101.077037][ T6144] team0: Device vlan3 is already an upper device of the team interface [ 101.599570][ T6168] netlink: 'syz.1.353': attribute type 13 has an invalid length. [ 101.984818][ T6190] dccp_invalid_packet: P.Data Offset(4) too small [ 102.477637][ T6224] netlink: 76 bytes leftover after parsing attributes in process `syz.3.375'. [ 103.496464][ T6277] netlink: 276 bytes leftover after parsing attributes in process `syz.4.396'. [ 103.628030][ T6285] dccp_invalid_packet: P.Data Offset(224) too large [ 103.806117][ T6290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.402'. [ 103.873245][ T6294] netlink: 104 bytes leftover after parsing attributes in process `syz.0.404'. [ 104.190171][ T6313] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.410'. [ 104.367146][ T6318] gre1: entered promiscuous mode [ 104.372507][ T6318] gre1: entered allmulticast mode [ 104.683942][ T6333] ip6tnl1: entered promiscuous mode [ 104.699978][ T6333] ip6tnl1: entered allmulticast mode [ 104.894823][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 105.018998][ T6352] xt_HMARK: spi-set and port-set can't be combined [ 105.024904][ T6349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.424'. [ 105.076531][ T6352] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 105.086421][ T6352] netlink: 67 bytes leftover after parsing attributes in process `syz.1.422'. [ 105.252637][ T6358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.427'. [ 105.296810][ T6364] nbd: socks must be embedded in a SOCK_ITEM attr [ 106.102924][ T6408] netlink: 'syz.0.444': attribute type 1 has an invalid length. [ 106.146073][ T6409] syzkaller1: entered promiscuous mode [ 106.165329][ T6409] syzkaller1: entered allmulticast mode [ 106.211479][ T6414] trusted_key: syz.1.448 sent an empty control message without MSG_MORE. [ 106.362566][ T6424] __nla_validate_parse: 1 callbacks suppressed [ 106.362585][ T6424] netlink: 168 bytes leftover after parsing attributes in process `syz.3.450'. [ 106.751741][ T6448] lo: entered promiscuous mode [ 106.874898][ T6456] netlink: 'syz.4.461': attribute type 10 has an invalid length. [ 106.886968][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.461'. [ 106.897907][ T6457] netlink: 'syz.1.462': attribute type 4 has an invalid length. [ 107.059350][ T6466] FAULT_INJECTION: forcing a failure. [ 107.059350][ T6466] name failslab, interval 1, probability 0, space 0, times 1 [ 107.078694][ T6466] CPU: 1 PID: 6466 Comm: syz.1.466 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 107.088740][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.098836][ T6466] Call Trace: [ 107.102171][ T6466] [ 107.105121][ T6466] dump_stack_lvl+0x241/0x360 [ 107.109845][ T6466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.115076][ T6466] ? __pfx__printk+0x10/0x10 [ 107.119715][ T6466] should_fail_ex+0x3b0/0x4e0 [ 107.124427][ T6466] ? sctp_add_bind_addr+0x89/0x3a0 [ 107.129570][ T6466] should_failslab+0x9/0x20 [ 107.134105][ T6466] kmalloc_trace_noprof+0x6c/0x2c0 [ 107.139253][ T6466] sctp_add_bind_addr+0x89/0x3a0 [ 107.144236][ T6466] sctp_copy_local_addr_list+0x311/0x500 [ 107.149913][ T6466] ? sctp_copy_local_addr_list+0xab/0x500 [ 107.155669][ T6466] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 107.161869][ T6466] ? sctp_v4_is_any+0x35/0x60 [ 107.166605][ T6466] sctp_bind_addr_copy+0xad/0x3b0 [ 107.171677][ T6466] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 107.178055][ T6466] sctp_connect_new_asoc+0x2f3/0x6c0 [ 107.183376][ T6466] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 107.189213][ T6466] ? sctp_sendmsg+0xbb9/0x3520 [ 107.194017][ T6466] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 107.199592][ T6466] ? security_sctp_bind_connect+0x90/0xb0 [ 107.205348][ T6466] sctp_sendmsg+0x219a/0x3520 [ 107.210077][ T6466] ? __pfx_sctp_sendmsg+0x10/0x10 [ 107.215151][ T6466] ? __pfx_aa_sk_perm+0x10/0x10 [ 107.220134][ T6466] ? inet_sendmsg+0x330/0x390 [ 107.224839][ T6466] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 107.230152][ T6466] ? security_socket_sendmsg+0x87/0xb0 [ 107.235668][ T6466] __sock_sendmsg+0x1a6/0x270 [ 107.240401][ T6466] ____sys_sendmsg+0x525/0x7d0 [ 107.245210][ T6466] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.250552][ T6466] __sys_sendmmsg+0x3b2/0x740 [ 107.255295][ T6466] ? __pfx___sys_sendmmsg+0x10/0x10 [ 107.260570][ T6466] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 107.266501][ T6466] ? ksys_write+0x23e/0x2c0 [ 107.271046][ T6466] ? __pfx_lock_release+0x10/0x10 [ 107.276108][ T6466] ? vfs_write+0x7c4/0xc90 [ 107.280566][ T6466] ? __mutex_unlock_slowpath+0x21d/0x750 [ 107.286232][ T6466] ? __pfx_vfs_write+0x10/0x10 [ 107.291072][ T6466] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.297092][ T6466] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.303452][ T6466] ? do_syscall_64+0x100/0x230 [ 107.308264][ T6466] __x64_sys_sendmmsg+0xa0/0xb0 [ 107.313150][ T6466] do_syscall_64+0xf3/0x230 [ 107.317673][ T6466] ? clear_bhb_loop+0x35/0x90 [ 107.322359][ T6466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.328303][ T6466] RIP: 0033:0x7f285df75bd9 [ 107.332735][ T6466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.352356][ T6466] RSP: 002b:00007f285ed1c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.360786][ T6466] RAX: ffffffffffffffda RBX: 00007f285e103f60 RCX: 00007f285df75bd9 [ 107.368767][ T6466] RDX: 0000000000000002 RSI: 0000000020000e40 RDI: 0000000000000003 [ 107.376740][ T6466] RBP: 00007f285ed1c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.384708][ T6466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 107.392698][ T6466] R13: 000000000000000b R14: 00007f285e103f60 R15: 00007ffdb6832ff8 [ 107.400689][ T6466] [ 107.683410][ T6493] netlink: 60 bytes leftover after parsing attributes in process `syz.0.475'. [ 108.036684][ T6509] netlink: 'syz.2.481': attribute type 6 has an invalid length. [ 108.387506][ T6530] netlink: 816 bytes leftover after parsing attributes in process `syz.2.487'. [ 108.406912][ T6533] netlink: 16 bytes leftover after parsing attributes in process `syz.1.486'. [ 108.692086][ T6555] netlink: 28 bytes leftover after parsing attributes in process `syz.4.494'. [ 108.732236][ T6555] netlink: 24 bytes leftover after parsing attributes in process `syz.4.494'. [ 108.968102][ T6572] netlink: 'syz.3.499': attribute type 4 has an invalid length. [ 108.974675][ T6573] netlink: 36 bytes leftover after parsing attributes in process `syz.4.498'. [ 109.026602][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 109.129878][ T6578] pimreg: entered allmulticast mode [ 109.148748][ T6582] netlink: 'syz.0.504': attribute type 1 has an invalid length. [ 109.161440][ T6582] netlink: 244 bytes leftover after parsing attributes in process `syz.0.504'. [ 109.358611][ T6590] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 109.386159][ T6590] netlink: 'syz.0.507': attribute type 3 has an invalid length. [ 109.575633][ T6600] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 109.870212][ T6612] sctp: [Deprecated]: syz.4.514 (pid 6612) Use of int in max_burst socket option deprecated. [ 109.870212][ T6612] Use struct sctp_assoc_value instead [ 110.309982][ T6640] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 110.803046][ T6667] netlink: 'syz.3.537': attribute type 64 has an invalid length. [ 111.026777][ T6682] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 111.128655][ T6682] bond1: entered promiscuous mode [ 111.155499][ T6685] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 111.393880][ T6701] __nla_validate_parse: 9 callbacks suppressed [ 111.393900][ T6701] netlink: 88 bytes leftover after parsing attributes in process `syz.0.548'. [ 111.443999][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 111.503157][ T6711] FAULT_INJECTION: forcing a failure. [ 111.503157][ T6711] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.538496][ T6711] CPU: 1 PID: 6711 Comm: syz.4.549 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 111.548538][ T6711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 111.559066][ T6711] Call Trace: [ 111.562375][ T6711] [ 111.565340][ T6711] dump_stack_lvl+0x241/0x360 [ 111.570059][ T6711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.575305][ T6711] ? __pfx__printk+0x10/0x10 [ 111.579930][ T6711] ? __pfx_lock_release+0x10/0x10 [ 111.584996][ T6711] should_fail_ex+0x3b0/0x4e0 [ 111.589723][ T6711] _copy_from_user+0x2f/0xe0 [ 111.594340][ T6711] rfcomm_dev_ioctl+0x187/0x21b0 [ 111.599319][ T6711] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.605336][ T6711] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 111.610751][ T6711] ? __local_bh_enable_ip+0x168/0x200 [ 111.616159][ T6711] ? __local_bh_enable_ip+0x168/0x200 [ 111.621562][ T6711] ? rfcomm_sock_ioctl+0x78/0xd0 [ 111.626546][ T6711] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 111.632292][ T6711] ? do_raw_spin_unlock+0x13c/0x8b0 [ 111.637563][ T6711] rfcomm_sock_ioctl+0x86/0xd0 [ 111.642379][ T6711] sock_do_ioctl+0x158/0x460 [ 111.647030][ T6711] ? __pfx_sock_do_ioctl+0x10/0x10 [ 111.652207][ T6711] sock_ioctl+0x629/0x8e0 [ 111.656564][ T6711] ? __pfx_sock_ioctl+0x10/0x10 [ 111.661434][ T6711] ? __fget_files+0x29/0x470 [ 111.666054][ T6711] ? __fget_files+0x3f6/0x470 [ 111.670749][ T6711] ? __fget_files+0x29/0x470 [ 111.675366][ T6711] ? bpf_lsm_file_ioctl+0x9/0x10 [ 111.680315][ T6711] ? security_file_ioctl+0x87/0xb0 [ 111.685436][ T6711] ? __pfx_sock_ioctl+0x10/0x10 [ 111.690306][ T6711] __se_sys_ioctl+0xfc/0x170 [ 111.694903][ T6711] do_syscall_64+0xf3/0x230 [ 111.699421][ T6711] ? clear_bhb_loop+0x35/0x90 [ 111.704107][ T6711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.710006][ T6711] RIP: 0033:0x7f6630d75bd9 [ 111.714436][ T6711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.734047][ T6711] RSP: 002b:00007f6631bdf048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.742466][ T6711] RAX: ffffffffffffffda RBX: 00007f6630f04038 RCX: 00007f6630d75bd9 [ 111.750470][ T6711] RDX: 0000000020000100 RSI: 00000000400452c9 RDI: 0000000000000007 [ 111.758442][ T6711] RBP: 00007f6631bdf0a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.766407][ T6711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.774404][ T6711] R13: 000000000000006e R14: 00007f6630f04038 R15: 00007ffe5694a938 [ 111.782390][ T6711] [ 111.950728][ T6715] netlink: 12 bytes leftover after parsing attributes in process `syz.3.552'. [ 111.974503][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 112.359898][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'. [ 112.453679][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.566'. [ 112.790095][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.568'. [ 112.831403][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 112.865465][ T6772] FAULT_INJECTION: forcing a failure. [ 112.865465][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 112.876903][ T6776] netlink: 20 bytes leftover after parsing attributes in process `syz.3.574'. [ 112.911346][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 112.915401][ T6772] CPU: 1 PID: 6772 Comm: syz.1.572 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 112.930334][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 112.940441][ T6772] Call Trace: [ 112.943753][ T6772] [ 112.946715][ T6772] dump_stack_lvl+0x241/0x360 [ 112.951448][ T6772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.956699][ T6772] ? __pfx__printk+0x10/0x10 [ 112.961340][ T6772] ? __lock_acquire+0x1346/0x1fd0 [ 112.966407][ T6772] should_fail_ex+0x3b0/0x4e0 [ 112.971132][ T6772] ? ieee80211_ibss_build_presp+0x10b/0x18f0 [ 112.977160][ T6772] should_failslab+0x9/0x20 [ 112.981698][ T6772] __kmalloc_noprof+0xd8/0x400 [ 112.986511][ T6772] ieee80211_ibss_build_presp+0x10b/0x18f0 [ 112.992368][ T6772] ? ieee80211_ibss_csa_beacon+0x416/0x6e0 [ 112.998209][ T6772] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.004574][ T6772] ? __local_bh_enable_ip+0x168/0x200 [ 113.009984][ T6772] ? lockdep_hardirqs_on+0x99/0x150 [ 113.015221][ T6772] ? __local_bh_enable_ip+0x168/0x200 [ 113.020625][ T6772] ? __pfx_ieee80211_ibss_build_presp+0x10/0x10 [ 113.026913][ T6772] ? ieee80211_ibss_csa_beacon+0x416/0x6e0 [ 113.032759][ T6772] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 113.038504][ T6772] ? ieee80211_ibss_csa_beacon+0x416/0x6e0 [ 113.044364][ T6772] ieee80211_ibss_csa_beacon+0x51c/0x6e0 [ 113.050062][ T6772] ieee80211_set_csa_beacon+0x88a/0xb60 [ 113.055688][ T6772] ? __pfx_ieee80211_check_combinations+0x10/0x10 [ 113.062169][ T6772] ? __pfx_ieee80211_set_csa_beacon+0x10/0x10 [ 113.068281][ T6772] ? trace_drv_return_int+0x8b/0x220 [ 113.073610][ T6772] ? drv_pre_channel_switch+0x2ba/0x560 [ 113.079194][ T6772] ieee80211_channel_switch+0x953/0xe40 [ 113.084784][ T6772] ? __pfx_ieee80211_channel_switch+0x10/0x10 [ 113.090915][ T6772] rdev_channel_switch+0x10d/0x2a0 [ 113.096187][ T6772] nl80211_channel_switch+0x9ed/0xed0 [ 113.101623][ T6772] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 113.107607][ T6772] ? __nla_parse+0x40/0x60 [ 113.112082][ T6772] genl_rcv_msg+0xb14/0xec0 [ 113.116613][ T6772] ? mark_lock+0x9a/0x350 [ 113.120995][ T6772] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.126074][ T6772] ? __pfx_lock_acquire+0x10/0x10 [ 113.131126][ T6772] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 113.136546][ T6772] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 113.142476][ T6772] ? __pfx_nl80211_post_doit+0x10/0x10 [ 113.147972][ T6772] ? __pfx___might_resched+0x10/0x10 [ 113.153277][ T6772] netlink_rcv_skb+0x1e3/0x430 [ 113.158047][ T6772] ? __pfx_genl_rcv_msg+0x10/0x10 [ 113.163076][ T6772] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 113.168380][ T6772] ? __netlink_deliver_tap+0x77e/0x7c0 [ 113.173856][ T6772] genl_rcv+0x28/0x40 [ 113.177834][ T6772] netlink_unicast+0x7ea/0x980 [ 113.182608][ T6772] ? __pfx_netlink_unicast+0x10/0x10 [ 113.187892][ T6772] ? __virt_addr_valid+0x183/0x520 [ 113.193024][ T6772] ? __check_object_size+0x49c/0x900 [ 113.198314][ T6772] ? bpf_lsm_netlink_send+0x9/0x10 [ 113.203455][ T6772] netlink_sendmsg+0x8db/0xcb0 [ 113.208240][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.213621][ T6772] ? __import_iovec+0x536/0x820 [ 113.218484][ T6772] ? aa_sock_msg_perm+0x91/0x160 [ 113.223453][ T6772] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 113.228736][ T6772] ? security_socket_sendmsg+0x87/0xb0 [ 113.234195][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.239503][ T6772] __sock_sendmsg+0x221/0x270 [ 113.244202][ T6772] ____sys_sendmsg+0x525/0x7d0 [ 113.248990][ T6772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 113.254325][ T6772] __sys_sendmsg+0x2b0/0x3a0 [ 113.258939][ T6772] ? __pfx___sys_sendmsg+0x10/0x10 [ 113.264084][ T6772] ? vfs_write+0x7c4/0xc90 [ 113.268572][ T6772] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 113.274916][ T6772] ? do_syscall_64+0x100/0x230 [ 113.279697][ T6772] ? do_syscall_64+0xb6/0x230 [ 113.284395][ T6772] do_syscall_64+0xf3/0x230 [ 113.288929][ T6772] ? clear_bhb_loop+0x35/0x90 [ 113.293617][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.299514][ T6772] RIP: 0033:0x7f285df75bd9 [ 113.303932][ T6772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.323542][ T6772] RSP: 002b:00007f285ed1c048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.331959][ T6772] RAX: ffffffffffffffda RBX: 00007f285e103f60 RCX: 00007f285df75bd9 [ 113.339934][ T6772] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000005 [ 113.347908][ T6772] RBP: 00007f285ed1c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 113.355881][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.363899][ T6772] R13: 000000000000000b R14: 00007f285e103f60 R15: 00007ffdb6832ff8 [ 113.371908][ T6772] [ 113.450319][ T6781] netlink: 'syz.0.576': attribute type 21 has an invalid length. [ 113.943812][ T6802] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 114.045496][ T6809] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 114.159944][ T6814] macvtap0: entered promiscuous mode [ 114.175659][ T6814] macvtap0: entered allmulticast mode [ 114.195422][ T6814] veth0_macvtap: entered allmulticast mode [ 114.442729][ T6826] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 115.007455][ T6853] Bluetooth: MGMT ver 1.22 [ 115.240738][ T6866] netlink: 'syz.4.608': attribute type 180 has an invalid length. [ 115.258270][ T6861] netlink: 'syz.1.607': attribute type 4 has an invalid length. [ 115.291987][ T6867] netlink: 'syz.1.607': attribute type 4 has an invalid length. [ 115.910613][ T6895] netlink: 'syz.1.618': attribute type 26 has an invalid length. [ 116.304994][ T6924] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.495524][ T6931] __nla_validate_parse: 7 callbacks suppressed [ 116.495543][ T6931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 116.556672][ T6935] netlink: 'syz.4.629': attribute type 8 has an invalid length. [ 116.564550][ T6935] netlink: 224 bytes leftover after parsing attributes in process `syz.4.629'. [ 116.843714][ T6958] netlink: 'syz.1.637': attribute type 1 has an invalid length. [ 117.042705][ T6964] x_tables: duplicate underflow at hook 1 [ 117.059633][ T6961] netlink: 'syz.1.639': attribute type 1 has an invalid length. [ 117.106213][ T6961] netlink: 'syz.1.639': attribute type 2 has an invalid length. [ 117.142122][ T6967] netlink: 20 bytes leftover after parsing attributes in process `syz.3.641'. [ 117.172915][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 117.223274][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.641'. [ 117.279947][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.644'. [ 117.386699][ T6976] team0: Port device macvlan2 added [ 117.416196][ T6981] IPVS: set_ctl: invalid protocol: 0 172.20.20.0:0 [ 117.628682][ T6993] dccp_invalid_packet: P.Data Offset(132) too large [ 117.646430][ T6989] dccp_invalid_packet: P.Data Offset(0) too small [ 117.905062][ T7007] pim6reg1: entered promiscuous mode [ 117.930086][ T7007] pim6reg1: entered allmulticast mode [ 119.031639][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 119.195959][ T7052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 119.323044][ T7065] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 119.365545][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.680'. [ 119.425529][ T7066] dccp_v6_rcv: dropped packet with invalid checksum [ 119.517660][ T7075] netlink: 'syz.0.683': attribute type 3 has an invalid length. [ 119.675779][ T7083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.687'. [ 119.743853][ T7081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.016233][ T7098] netlink: 'syz.2.692': attribute type 10 has an invalid length. [ 120.077315][ T7098] bond0: (slave dummy0): Releasing backup interface [ 120.126523][ T7098] bridge0: port 3(dummy0) entered blocking state [ 120.143308][ T7098] bridge0: port 3(dummy0) entered disabled state [ 120.156544][ T7098] dummy0: entered allmulticast mode [ 120.163493][ T7098] dummy0: entered promiscuous mode [ 120.178514][ T7109] FAULT_INJECTION: forcing a failure. [ 120.178514][ T7109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.192058][ T7109] CPU: 1 PID: 7109 Comm: syz.4.697 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 120.202104][ T7109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 120.212214][ T7109] Call Trace: [ 120.215515][ T7109] [ 120.218461][ T7109] dump_stack_lvl+0x241/0x360 [ 120.223158][ T7109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.228369][ T7109] ? __pfx__printk+0x10/0x10 [ 120.232975][ T7109] ? vfs_write+0x7c4/0xc90 [ 120.237490][ T7109] should_fail_ex+0x3b0/0x4e0 [ 120.242207][ T7109] _copy_from_user+0x2f/0xe0 [ 120.247011][ T7109] move_addr_to_kernel+0x82/0x150 [ 120.252103][ T7109] __sys_connect+0xc1/0x310 [ 120.256641][ T7109] ? __pfx___sys_connect+0x10/0x10 [ 120.261773][ T7109] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.268108][ T7109] ? do_syscall_64+0x100/0x230 [ 120.272912][ T7109] __x64_sys_connect+0x7a/0x90 [ 120.277677][ T7109] do_syscall_64+0xf3/0x230 [ 120.282198][ T7109] ? clear_bhb_loop+0x35/0x90 [ 120.286923][ T7109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.292826][ T7109] RIP: 0033:0x7f6630d75bd9 [ 120.297247][ T7109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.316874][ T7109] RSP: 002b:00007f6631c00048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 120.325309][ T7109] RAX: ffffffffffffffda RBX: 00007f6630f03f60 RCX: 00007f6630d75bd9 [ 120.333308][ T7109] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000003 [ 120.341300][ T7109] RBP: 00007f6631c000a0 R08: 0000000000000000 R09: 0000000000000000 [ 120.349306][ T7109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.357292][ T7109] R13: 000000000000000b R14: 00007f6630f03f60 R15: 00007ffe5694a938 [ 120.365295][ T7109] [ 120.381691][ T7102] team2: Mode changed to "broadcast" [ 120.449819][ T7098] tunl0: entered promiscuous mode [ 120.470892][ T7098] netlink: 'syz.2.692': attribute type 3 has an invalid length. [ 120.503049][ T7114] tipc: Started in network mode [ 120.515916][ T7114] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 120.556336][ T7114] tipc: Enabled bearer , priority 10 [ 120.590577][ T7114] tipc: Resetting bearer [ 120.709108][ T7114] tipc: Disabling bearer [ 121.264583][ T7147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.427038][ T7157] macvlan2: entered promiscuous mode [ 121.432459][ T7157] vlan1: entered promiscuous mode [ 121.438256][ T7157] macvlan2: entered allmulticast mode [ 121.454119][ T7157] vlan1: entered allmulticast mode [ 121.462018][ T7157] veth0_vlan: entered allmulticast mode [ 121.754062][ T7178] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 121.785100][ T7178] __nla_validate_parse: 5 callbacks suppressed [ 121.785120][ T7178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.717'. [ 121.856292][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.718'. [ 122.122604][ T7197] netlink: 'syz.0.725': attribute type 10 has an invalid length. [ 122.212156][ T7197] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 122.246261][ T7207] netlink: 'syz.2.727': attribute type 10 has an invalid length. [ 122.484726][ T7216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.529450][ T7219] netlink: 'syz.1.733': attribute type 11 has an invalid length. [ 122.895395][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.738'. [ 122.942579][ T7233] netlink: 48 bytes leftover after parsing attributes in process `syz.3.738'. [ 123.164075][ T7237] netlink: 'syz.4.740': attribute type 10 has an invalid length. [ 123.280875][ T7237] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 123.330648][ T7252] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.744'. [ 123.403170][ T7252] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 123.423922][ T7252] CPU: 0 PID: 7252 Comm: syz.3.744 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 123.433974][ T7252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 123.444047][ T7252] Call Trace: [ 123.447329][ T7252] [ 123.450270][ T7252] dump_stack_lvl+0x241/0x360 [ 123.454992][ T7252] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.460199][ T7252] ? __pfx__printk+0x10/0x10 [ 123.464804][ T7252] ? sysfs_warn_dup+0x51/0xa0 [ 123.469485][ T7252] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 123.474892][ T7252] sysfs_warn_dup+0x8e/0xa0 [ 123.479429][ T7252] sysfs_do_create_link_sd+0xbe/0x110 [ 123.484814][ T7252] device_add_class_symlinks+0x1c5/0x250 [ 123.490470][ T7252] device_add+0x553/0xbf0 [ 123.494824][ T7252] wiphy_register+0x1d3f/0x2b30 [ 123.499701][ T7252] ? __pfx_wiphy_register+0x10/0x10 [ 123.504910][ T7252] ? minstrel_ht_alloc+0x72b/0x860 [ 123.510034][ T7252] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 123.516121][ T7252] ieee80211_register_hw+0x3098/0x3d80 [ 123.521615][ T7252] ? ieee80211_register_hw+0x11b1/0x3d80 [ 123.527302][ T7252] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 123.533156][ T7252] ? __asan_memset+0x23/0x50 [ 123.537748][ T7252] ? __hrtimer_init+0x170/0x250 [ 123.542614][ T7252] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 123.548369][ T7252] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 123.554452][ T7252] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 123.560894][ T7252] ? kstrndup+0x5c/0xb0 [ 123.565074][ T7252] ? __asan_memcpy+0x40/0x70 [ 123.569666][ T7252] hwsim_new_radio_nl+0xe4c/0x21d0 [ 123.574804][ T7252] ? __pfx___nla_validate_parse+0x10/0x10 [ 123.580526][ T7252] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 123.586105][ T7252] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 123.592442][ T7252] genl_rcv_msg+0xb14/0xec0 [ 123.596945][ T7252] ? mark_lock+0x9a/0x350 [ 123.601283][ T7252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.606335][ T7252] ? __pfx_lock_acquire+0x10/0x10 [ 123.611363][ T7252] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 123.616915][ T7252] ? __pfx___might_resched+0x10/0x10 [ 123.622207][ T7252] netlink_rcv_skb+0x1e3/0x430 [ 123.626995][ T7252] ? __pfx_genl_rcv_msg+0x10/0x10 [ 123.632031][ T7252] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 123.637347][ T7252] ? __netlink_deliver_tap+0x77e/0x7c0 [ 123.642835][ T7252] genl_rcv+0x28/0x40 [ 123.646828][ T7252] netlink_unicast+0x7ea/0x980 [ 123.651609][ T7252] ? __pfx_netlink_unicast+0x10/0x10 [ 123.656897][ T7252] ? __virt_addr_valid+0x183/0x520 [ 123.662030][ T7252] ? __check_object_size+0x49c/0x900 [ 123.667352][ T7252] ? bpf_lsm_netlink_send+0x9/0x10 [ 123.672476][ T7252] netlink_sendmsg+0x8db/0xcb0 [ 123.677276][ T7252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.682605][ T7252] ? __import_iovec+0x536/0x820 [ 123.687463][ T7252] ? aa_sock_msg_perm+0x91/0x160 [ 123.692424][ T7252] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 123.697733][ T7252] ? security_socket_sendmsg+0x87/0xb0 [ 123.703220][ T7252] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.708508][ T7252] __sock_sendmsg+0x221/0x270 [ 123.713201][ T7252] ____sys_sendmsg+0x525/0x7d0 [ 123.717987][ T7252] ? __pfx_____sys_sendmsg+0x10/0x10 [ 123.723408][ T7252] __sys_sendmsg+0x2b0/0x3a0 [ 123.728016][ T7252] ? __pfx___sys_sendmsg+0x10/0x10 [ 123.733205][ T7252] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.739536][ T7252] ? do_syscall_64+0x100/0x230 [ 123.744311][ T7252] ? do_syscall_64+0xb6/0x230 [ 123.749017][ T7252] do_syscall_64+0xf3/0x230 [ 123.753549][ T7252] ? clear_bhb_loop+0x35/0x90 [ 123.758274][ T7252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.764207][ T7252] RIP: 0033:0x7fa149d75bd9 [ 123.769082][ T7252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.788706][ T7252] RSP: 002b:00007fa14ac19048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.797129][ T7252] RAX: ffffffffffffffda RBX: 00007fa149f03f60 RCX: 00007fa149d75bd9 [ 123.805111][ T7252] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 123.813087][ T7252] RBP: 00007fa149de4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 123.821061][ T7252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.829036][ T7252] R13: 000000000000000b R14: 00007fa149f03f60 R15: 00007ffef18435d8 [ 123.837031][ T7252] [ 123.864385][ T7241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.742'. [ 123.887435][ T7254] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 124.169789][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.751'. [ 124.239103][ T7265] vlan3: entered promiscuous mode [ 124.244292][ T7265] dummy0: entered promiscuous mode [ 124.281564][ T7265] dummy0: left promiscuous mode [ 124.295452][ T7270] netlink: 32 bytes leftover after parsing attributes in process `syz.3.753'. [ 124.387787][ T7270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 124.412622][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.757'. [ 124.670645][ T7297] xt_hashlimit: max too large, truncated to 1048576 [ 124.699742][ T7297] xt_hashlimit: overflow, try lower: 0/0 [ 124.712114][ T7301] netlink: 'syz.2.760': attribute type 30 has an invalid length. [ 124.753528][ T7301] netlink: 'syz.2.760': attribute type 62 has an invalid length. [ 124.796302][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.853546][ T7301] hsr0: entered promiscuous mode [ 124.919262][ T7308] hsr_slave_0: left promiscuous mode [ 124.960522][ T7308] hsr_slave_1: left promiscuous mode [ 125.014959][ T7308] hsr0 (unregistering): left promiscuous mode [ 125.040403][ T7316] netlink: 'syz.1.771': attribute type 3 has an invalid length. [ 125.119785][ T7318] ip6t_srh: unknown srh invflags A757 [ 125.153879][ T7320] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 125.192813][ T7320] netlink: 'syz.0.773': attribute type 1 has an invalid length. [ 125.302564][ T7324] vlan0: entered promiscuous mode [ 125.317374][ T7324] dummy0: entered promiscuous mode [ 125.323378][ T7328] FAULT_INJECTION: forcing a failure. [ 125.323378][ T7328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.351779][ T7328] CPU: 0 PID: 7328 Comm: syz.0.777 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 125.361827][ T7328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 125.371919][ T7328] Call Trace: [ 125.375231][ T7328] [ 125.378181][ T7328] dump_stack_lvl+0x241/0x360 [ 125.382942][ T7328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.388178][ T7328] ? __pfx__printk+0x10/0x10 [ 125.392811][ T7328] ? __pfx_lock_release+0x10/0x10 [ 125.397874][ T7328] should_fail_ex+0x3b0/0x4e0 [ 125.402593][ T7328] _copy_from_user+0x2f/0xe0 [ 125.407234][ T7328] copy_msghdr_from_user+0xae/0x680 [ 125.412469][ T7328] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 125.418300][ T7328] __sys_sendmsg+0x23d/0x3a0 [ 125.422898][ T7328] ? __pfx___sys_sendmsg+0x10/0x10 [ 125.428013][ T7328] ? vfs_write+0x7c4/0xc90 [ 125.432471][ T7328] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.438847][ T7328] ? do_syscall_64+0x100/0x230 [ 125.443640][ T7328] ? do_syscall_64+0xb6/0x230 [ 125.448346][ T7328] do_syscall_64+0xf3/0x230 [ 125.452877][ T7328] ? clear_bhb_loop+0x35/0x90 [ 125.457736][ T7328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.463711][ T7328] RIP: 0033:0x7fc5bc375bd9 [ 125.468172][ T7328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.487786][ T7328] RSP: 002b:00007fc5bbdff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.496210][ T7328] RAX: ffffffffffffffda RBX: 00007fc5bc503f60 RCX: 00007fc5bc375bd9 [ 125.504177][ T7328] RDX: 0000000000004011 RSI: 00000000200005c0 RDI: 0000000000000003 [ 125.512168][ T7328] RBP: 00007fc5bbdff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.520140][ T7328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.528109][ T7328] R13: 000000000000000b R14: 00007fc5bc503f60 R15: 00007fffdc991268 [ 125.536094][ T7328] [ 125.542114][ T7324] dummy0: left promiscuous mode [ 125.964621][ T7348] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 125.973943][ T7348] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 126.033730][ T7348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.143575][ T7365] tipc: Started in network mode [ 126.167085][ T7365] tipc: Node identity ac1414aa, cluster identity 4711 [ 126.189830][ T7365] tipc: Enabled bearer , priority 10 [ 126.212594][ T7369] tipc: Disabling bearer [ 126.245585][ T7360] sctp: [Deprecated]: syz.3.788 (pid 7360) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.245585][ T7360] Use struct sctp_sack_info instead [ 126.926406][ T7405] __nla_validate_parse: 10 callbacks suppressed [ 126.926445][ T7405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.804'. [ 127.030739][ T7405] geneve2: entered promiscuous mode [ 127.049266][ T7405] geneve2: entered allmulticast mode [ 127.222141][ T7407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'. [ 127.248416][ T7422] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.503401][ T7433] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 127.553551][ T7437] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 127.587906][ T7437] netlink: 68 bytes leftover after parsing attributes in process `syz.3.817'. [ 127.780699][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.820'. [ 127.828496][ T7447] netlink: 24 bytes leftover after parsing attributes in process `syz.3.820'. [ 128.161601][ T7466] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 128.163477][ T7454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.824'. [ 128.198884][ T7466] netlink: 68 bytes leftover after parsing attributes in process `syz.2.828'. [ 128.216596][ T7454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.824'. [ 128.275728][ T7466] vlan0: entered promiscuous mode [ 128.638863][ T7498] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 128.674508][ T7493] netlink: 'syz.2.840': attribute type 1 has an invalid length. [ 128.715309][ T7481] netlink: 28 bytes leftover after parsing attributes in process `syz.3.835'. [ 128.785850][ T7503] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 129.038611][ T7521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.357774][ T7535] netlink: 'syz.1.853': attribute type 21 has an invalid length. [ 129.373289][ T7535] netlink: 100 bytes leftover after parsing attributes in process `syz.1.853'. [ 129.547363][ T7545] macvlan2: entered promiscuous mode [ 129.565386][ T7545] macvlan2: entered allmulticast mode [ 129.571249][ T7545] bridge0: entered promiscuous mode [ 129.603208][ T7545] bridge0: entered allmulticast mode [ 129.634704][ T7545] team0: Port device macvlan2 added [ 130.377730][ T7566] vlan0: entered promiscuous mode [ 130.453103][ T7571] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 130.502221][ T7571] netlink: 'syz.0.864': attribute type 1 has an invalid length. [ 130.707973][ T7582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.921460][ T7592] dccp_invalid_packet: P.Data Offset(0) too small [ 131.362520][ T7614] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 131.731342][ T7638] netlink: 'syz.4.889': attribute type 9 has an invalid length. [ 131.940014][ T7643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.057436][ T7651] __nla_validate_parse: 3 callbacks suppressed [ 132.057455][ T7651] netlink: 100 bytes leftover after parsing attributes in process `syz.0.895'. [ 132.077404][ T7653] netlink: 'syz.3.896': attribute type 3 has an invalid length. [ 132.623679][ T7679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.902'. [ 132.853572][ T7693] @ÿ: renamed from veth0_vlan (while UP) [ 132.944974][ T7691] Bluetooth: MGMT ver 1.22 [ 133.098993][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.183492][ T7704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.310507][ T7708] veth0_vlan: left allmulticast mode [ 133.326686][ T7708] veth0_vlan: left promiscuous mode [ 133.416117][ T7708] vlan1 (unregistering): left allmulticast mode [ 133.441292][ T7708] vlan1 (unregistering): left promiscuous mode [ 133.674231][ T7707] delete_channel: no stack [ 133.957950][ T7739] netlink: 'syz.4.926': attribute type 15 has an invalid length. [ 134.041023][ T7743] SET target dimension over the limit! [ 134.151112][ T7747] netlink: 'syz.3.929': attribute type 8 has an invalid length. [ 134.166377][ T7747] netlink: 'syz.3.929': attribute type 7 has an invalid length. [ 134.174715][ T7747] netlink: 187184 bytes leftover after parsing attributes in process `syz.3.929'. [ 134.183248][ T7750] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.930'. [ 134.509895][ T7767] netlink: 'syz.3.937': attribute type 1 has an invalid length. [ 134.536675][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 134.568599][ T7768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.937'. [ 135.736216][ T7823] veth1_macvtap: left promiscuous mode [ 135.859139][ T7836] ipt_REJECT: TCP_RESET invalid for non-tcp [ 135.898468][ T7836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.966'. [ 136.018856][ T7840] nbd: couldn't find device at index -1 [ 136.086316][ T7847] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 136.254235][ T7858] x_tables: duplicate underflow at hook 1 [ 136.264730][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.0.974'. [ 136.672584][ T7880] bond0: entered promiscuous mode [ 136.721899][ T7880] bond_slave_0: entered promiscuous mode [ 136.751151][ T7880] bond_slave_1: entered promiscuous mode [ 136.930489][ T7882] netlink: 191384 bytes leftover after parsing attributes in process `syz.4.984'. [ 136.972275][ T7882] netlink: 8446 bytes leftover after parsing attributes in process `syz.4.984'. [ 137.532602][ T7929] dccp_invalid_packet: P.Data Offset(172) too large [ 137.657908][ T7936] netlink: 'syz.0.1003': attribute type 3 has an invalid length. [ 138.262219][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 138.296446][ T7972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1014'. [ 138.478945][ T7987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1017'. [ 138.568978][ T7992] vlan0: entered promiscuous mode [ 138.574142][ T7992] ip6gretap0: entered promiscuous mode [ 138.580651][ T7992] vlan0: entered allmulticast mode [ 138.586326][ T7992] ip6gretap0: entered allmulticast mode [ 138.809662][ T8003] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1026'. [ 138.820660][ T8003] netlink: 'syz.3.1026': attribute type 2 has an invalid length. [ 138.829854][ T8003] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1026'. [ 139.640977][ T8039] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1041'. [ 139.678832][ T8039] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 139.836240][ T8056] xt_HMARK: spi-set and port-set can't be combined [ 139.993296][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.000608][ T8065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.014565][ T8065] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 140.164850][ T8071] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1056'. [ 140.201196][ T8071] netlink: 'syz.0.1056': attribute type 2 has an invalid length. [ 140.223137][ T8071] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1056'. [ 140.577418][ T8098] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 140.697007][ T8106] macvlan4: entered promiscuous mode [ 140.702367][ T8106] macvlan4: entered allmulticast mode [ 140.712097][ T8106] team0: Port device macvlan4 added [ 140.769082][ T8098] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 140.780341][ T8098] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 140.800034][ T8098] bond1: (slave gre1): making interface the new active one [ 140.808702][ T8098] bond1: (slave gre1): Enslaving as an active interface with an up link [ 140.817670][ T8107] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1068'. [ 140.926376][ T8109] bridge_slave_1: left allmulticast mode [ 140.945117][ T8109] bridge_slave_1: left promiscuous mode [ 140.957833][ T8109] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.993711][ T8109] bridge3: port 1(bridge_slave_1) entered blocking state [ 141.016491][ T8109] bridge3: port 1(bridge_slave_1) entered disabled state [ 141.036038][ T8109] bridge_slave_1: entered allmulticast mode [ 141.044076][ T8109] bridge_slave_1: entered promiscuous mode [ 141.055425][ T8109] bridge3: port 1(bridge_slave_1) entered blocking state [ 141.063301][ T8109] bridge3: port 1(bridge_slave_1) entered forwarding state [ 141.073363][ T8113] bridge3: port 2(veth1_to_bond) entered blocking state [ 141.092018][ T8113] bridge3: port 2(veth1_to_bond) entered disabled state [ 141.110455][ T8113] veth1_to_bond: entered allmulticast mode [ 141.120898][ T8113] veth1_to_bond: entered promiscuous mode [ 141.128619][ T8113] bridge3: port 2(veth1_to_bond) entered blocking state [ 141.135788][ T8113] bridge3: port 2(veth1_to_bond) entered forwarding state [ 141.176894][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1075'. [ 142.064105][ T8180] nbd: couldn't find device at index 0 [ 142.090592][ T8183] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 142.164221][ T8185] pim6reg1: entered promiscuous mode [ 142.174716][ T8185] pim6reg1: entered allmulticast mode [ 142.427590][ T8197] tipc: Enabled bearer , priority 10 [ 142.499248][ T8199] tipc: Enabling of bearer rejected, already enabled [ 142.980969][ T8174] syz.3.1098 (8174) used greatest stack depth: 18608 bytes left [ 143.062912][ T8223] netlink: 'syz.2.1116': attribute type 9 has an invalid length. [ 143.281170][ T8235] __nla_validate_parse: 9 callbacks suppressed [ 143.281193][ T8235] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1121'. [ 143.357445][ T8235] netlink: 'syz.2.1121': attribute type 1 has an invalid length. [ 143.472347][ T8245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1124'. [ 143.546234][ T4874] tipc: Node number set to 2886997162 [ 143.785874][ T8264] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1130'. [ 143.814570][ T8264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 143.839547][ T8264] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1130'. [ 143.859222][ T8264] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1130'. [ 143.951848][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 143.973503][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 144.009015][ T8257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1130'. [ 144.183635][ T8276] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1138'. [ 144.598539][ T8299] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 144.874415][ T8313] netlink: 'syz.0.1148': attribute type 3 has an invalid length. [ 144.913167][ T8313] netlink: 'syz.0.1148': attribute type 11 has an invalid length. [ 144.949667][ T8317] macvlan2: entered promiscuous mode [ 144.964451][ T8317] macvlan2: entered allmulticast mode [ 144.972625][ T8317] bridge0: entered allmulticast mode [ 144.978227][ T8317] bridge0: entered promiscuous mode [ 144.988962][ T8317] team0: Port device macvlan2 added [ 145.413384][ T8336] team_slave_0: entered promiscuous mode [ 145.419555][ T8336] team_slave_1: entered promiscuous mode [ 145.439098][ T8337] netlink: 'syz.0.1159': attribute type 2 has an invalid length. [ 145.447706][ T8336] vlan1: entered promiscuous mode [ 145.465476][ T8336] team0: entered promiscuous mode [ 145.505461][ T8336] team0: Device vlan1 is already an upper device of the team interface [ 145.531943][ T8336] team0: left promiscuous mode [ 145.552903][ T8336] team_slave_0: left promiscuous mode [ 145.558485][ T8336] team_slave_1: left promiscuous mode [ 146.243326][ T8361] FAULT_INJECTION: forcing a failure. [ 146.243326][ T8361] name failslab, interval 1, probability 0, space 0, times 0 [ 146.331763][ T8361] CPU: 0 PID: 8361 Comm: syz.4.1171 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 146.341907][ T8361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 146.352011][ T8361] Call Trace: [ 146.355326][ T8361] [ 146.358285][ T8361] dump_stack_lvl+0x241/0x360 [ 146.363013][ T8361] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.368255][ T8361] ? __pfx__printk+0x10/0x10 [ 146.372902][ T8361] should_fail_ex+0x3b0/0x4e0 [ 146.377636][ T8361] ? rtnl_newlink+0xf2/0x20a0 [ 146.382360][ T8361] should_failslab+0x9/0x20 [ 146.386923][ T8361] kmalloc_trace_noprof+0x6c/0x2c0 [ 146.392112][ T8361] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.397191][ T8361] rtnl_newlink+0xf2/0x20a0 [ 146.401741][ T8361] ? __kernel_text_address+0xd/0x40 [ 146.407027][ T8361] ? __mutex_trylock_common+0x183/0x2e0 [ 146.412619][ T8361] ? __pfx___might_resched+0x10/0x10 [ 146.417948][ T8361] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.423030][ T8361] ? __pfx___mutex_trylock_common+0x10/0x10 [ 146.428989][ T8361] ? rcu_is_watching+0x15/0xb0 [ 146.433794][ T8361] ? trace_contention_end+0x3c/0x120 [ 146.439131][ T8361] ? __mutex_lock+0x2ef/0xd70 [ 146.443853][ T8361] ? rcu_read_unlock+0x87/0xa0 [ 146.448678][ T8361] ? rtnetlink_rcv_msg+0x842/0x1180 [ 146.453934][ T8361] ? __pfx_lock_release+0x10/0x10 [ 146.459007][ T8361] ? __pfx___mutex_lock+0x10/0x10 [ 146.464094][ T8361] ? __pfx_rtnl_newlink+0x10/0x10 [ 146.469167][ T8361] rtnetlink_rcv_msg+0x89b/0x1180 [ 146.474258][ T8361] ? rtnetlink_rcv_msg+0x208/0x1180 [ 146.479518][ T8361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.485023][ T8361] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 146.491048][ T8361] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.497462][ T8361] ? __local_bh_enable_ip+0x168/0x200 [ 146.502958][ T8361] ? lockdep_hardirqs_on+0x99/0x150 [ 146.508199][ T8361] ? __local_bh_enable_ip+0x168/0x200 [ 146.513610][ T8361] ? dev_hard_start_xmit+0x773/0x7e0 [ 146.518948][ T8361] ? __dev_queue_xmit+0x2d2/0x3d30 [ 146.524095][ T8361] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 146.529853][ T8361] ? __dev_queue_xmit+0x2d2/0x3d30 [ 146.535004][ T8361] ? __dev_queue_xmit+0x16c9/0x3d30 [ 146.540259][ T8361] ? __dev_queue_xmit+0x2d2/0x3d30 [ 146.545421][ T8361] ? ref_tracker_free+0x643/0x7e0 [ 146.550504][ T8361] netlink_rcv_skb+0x1e3/0x430 [ 146.555315][ T8361] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 146.560841][ T8361] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 146.566209][ T8361] ? netlink_deliver_tap+0x2e/0x1b0 [ 146.571463][ T8361] netlink_unicast+0x7ea/0x980 [ 146.576285][ T8361] ? __pfx_netlink_unicast+0x10/0x10 [ 146.581607][ T8361] ? __virt_addr_valid+0x183/0x520 [ 146.586762][ T8361] ? __check_object_size+0x49c/0x900 [ 146.592091][ T8361] ? bpf_lsm_netlink_send+0x9/0x10 [ 146.597257][ T8361] netlink_sendmsg+0x8db/0xcb0 [ 146.602076][ T8361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.607403][ T8361] ? __import_iovec+0x536/0x820 [ 146.612285][ T8361] ? aa_sock_msg_perm+0x91/0x160 [ 146.617270][ T8361] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 146.622595][ T8361] ? security_socket_sendmsg+0x87/0xb0 [ 146.628089][ T8361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.633412][ T8361] __sock_sendmsg+0x221/0x270 [ 146.638140][ T8361] ____sys_sendmsg+0x525/0x7d0 [ 146.642953][ T8361] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.648302][ T8361] __sys_sendmsg+0x2b0/0x3a0 [ 146.652943][ T8361] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.658088][ T8361] ? vfs_write+0x7c4/0xc90 [ 146.662592][ T8361] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 146.668957][ T8361] ? do_syscall_64+0x100/0x230 [ 146.673768][ T8361] ? do_syscall_64+0xb6/0x230 [ 146.678492][ T8361] do_syscall_64+0xf3/0x230 [ 146.683036][ T8361] ? clear_bhb_loop+0x35/0x90 [ 146.687763][ T8361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.693703][ T8361] RIP: 0033:0x7f6630d75bd9 [ 146.698165][ T8361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.717820][ T8361] RSP: 002b:00007f6631c00048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.726284][ T8361] RAX: ffffffffffffffda RBX: 00007f6630f03f60 RCX: 00007f6630d75bd9 [ 146.734285][ T8361] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 146.742298][ T8361] RBP: 00007f6631c000a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.750310][ T8361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.758315][ T8361] R13: 000000000000000b R14: 00007f6630f03f60 R15: 00007ffe5694a938 [ 146.766346][ T8361] [ 148.564485][ T8403] team_slave_0: entered promiscuous mode [ 148.570292][ T8403] team_slave_1: entered promiscuous mode [ 148.614364][ T8403] vlan2: entered promiscuous mode [ 148.634673][ T8403] team0: entered promiscuous mode [ 148.664522][ T8403] team0: Device vlan2 is already an upper device of the team interface [ 148.696387][ T8403] team0: left promiscuous mode [ 148.702880][ T8403] team_slave_0: left promiscuous mode [ 148.708398][ T8403] team_slave_1: left promiscuous mode [ 149.274335][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802aa7e800: rx timeout, send abort [ 149.439374][ T8444] SET target dimension over the limit! [ 149.589498][ T8457] __nla_validate_parse: 4 callbacks suppressed [ 149.589520][ T8457] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1210'. [ 149.784016][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802aa7e800: abort rx timeout. Force session deactivation [ 149.797997][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 150.416192][ T8491] syzkaller0: entered promiscuous mode [ 150.432892][ T8491] syzkaller0: entered allmulticast mode [ 150.508165][ T8483] syzkaller0: create flow: hash 1173865800 index 1 [ 150.679647][ T8482] syzkaller0: delete flow: hash 1173865800 index 1 [ 151.303032][ T8531] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1236'. [ 152.224943][ T8514] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1231'. [ 152.243492][ T8519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1231'. [ 152.427090][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1238'. [ 152.474894][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.511873][ T8546] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1241'. [ 152.562304][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 152.595809][ T8551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1240'. [ 152.801305][ T8560] x_tables: duplicate underflow at hook 2 [ 152.863907][ T8571] ip6tnl1: entered promiscuous mode [ 152.886024][ T8571] ip6tnl1: entered allmulticast mode [ 153.254636][ T8591] netlink: 'syz.0.1253': attribute type 10 has an invalid length. [ 153.275761][ T8590] nbd: socks must be embedded in a SOCK_ITEM attr [ 153.453554][ T8599] netlink: 816 bytes leftover after parsing attributes in process `syz.3.1256'. [ 154.612538][ T8661] netlink: 'syz.2.1280': attribute type 10 has an invalid length. [ 154.834543][ T8667] __nla_validate_parse: 4 callbacks suppressed [ 154.834564][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 154.941160][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1283'. [ 154.978498][ T8683] netlink: 'syz.2.1284': attribute type 1 has an invalid length. [ 155.343187][ T8695] x_tables: duplicate underflow at hook 1 [ 155.463322][ T8697] macvlan2: entered allmulticast mode [ 155.836063][ T8716] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1295'. [ 155.873568][ T8723] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1297'. [ 155.964842][ T8723] Êü: entered promiscuous mode [ 156.175845][ T8739] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1305'. [ 156.209945][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 156.620407][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1311'. [ 156.779650][ T8777] x_tables: duplicate underflow at hook 1 [ 156.984997][ T8793] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1320'. [ 157.006231][ T8793] openvswitch: netlink: Message has 32 unknown bytes. [ 157.043266][ T8797] vlan2: entered allmulticast mode [ 157.049053][ T8797] geneve0: entered allmulticast mode [ 157.057019][ T8797] bridge0: port 2(vlan2) entered blocking state [ 157.063827][ T8797] bridge0: port 2(vlan2) entered disabled state [ 157.075664][ T8797] vlan2: entered promiscuous mode [ 157.081031][ T8797] geneve0: entered promiscuous mode [ 157.098589][ T8797] bridge0: port 2(vlan2) entered blocking state [ 157.105328][ T8797] bridge0: port 2(vlan2) entered forwarding state [ 157.114170][ T8799] netlink: 'syz.0.1322': attribute type 3 has an invalid length. [ 157.131018][ T8799] netlink: 'syz.0.1322': attribute type 4 has an invalid length. [ 157.180568][ T8799] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1322'. [ 157.323262][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1325'. [ 157.343941][ T8806] netlink: 'syz.0.1325': attribute type 7 has an invalid length. [ 157.385953][ T8809] netlink: 'syz.2.1327': attribute type 4 has an invalid length. [ 157.507164][ T8813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1328'. [ 157.645523][ T8820] netlink: 'syz.1.1331': attribute type 1 has an invalid length. [ 157.816521][ T8830] netlink: 'syz.1.1336': attribute type 10 has an invalid length. [ 157.849442][ T8830] netlink: 'syz.1.1336': attribute type 3 has an invalid length. [ 157.891808][ T8829] can: request_module (can-proto-0) failed. [ 158.105585][ T8843] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 158.144317][ T8848] x_tables: duplicate underflow at hook 1 [ 158.484630][ T8868] netlink: 'syz.3.1346': attribute type 23 has an invalid length. [ 158.522138][ T8868] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.530211][ T8868] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.572952][ T8868] bridge0: entered promiscuous mode [ 158.906435][ T8887] xt_ecn: cannot match TCP bits for non-tcp packets [ 159.306339][ T8908] netlink: 'syz.1.1363': attribute type 1 has an invalid length. [ 159.378267][ T8908] bond2: entered promiscuous mode [ 159.436528][ T8908] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 159.577504][ T8926] FAULT_INJECTION: forcing a failure. [ 159.577504][ T8926] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.625619][ T8926] CPU: 1 PID: 8926 Comm: syz.3.1369 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 159.635834][ T8926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 159.645926][ T8926] Call Trace: [ 159.649246][ T8926] [ 159.652226][ T8926] dump_stack_lvl+0x241/0x360 [ 159.656962][ T8926] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.662223][ T8926] ? __pfx__printk+0x10/0x10 [ 159.666858][ T8926] ? snprintf+0xda/0x120 [ 159.671141][ T8926] should_fail_ex+0x3b0/0x4e0 [ 159.675874][ T8926] _copy_to_user+0x2f/0xb0 [ 159.680342][ T8926] simple_read_from_buffer+0xca/0x150 [ 159.685765][ T8926] proc_fail_nth_read+0x1e9/0x250 [ 159.690827][ T8926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.696415][ T8926] ? rw_verify_area+0x520/0x6b0 [ 159.701309][ T8926] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 159.706910][ T8926] vfs_read+0x204/0xbc0 [ 159.711153][ T8926] ? __pfx_lock_release+0x10/0x10 [ 159.716261][ T8926] ? __pfx_vfs_read+0x10/0x10 [ 159.721008][ T8926] ? __fget_files+0x29/0x470 [ 159.725645][ T8926] ? __fget_files+0x3f6/0x470 [ 159.730383][ T8926] ksys_read+0x1a0/0x2c0 [ 159.734688][ T8926] ? __pfx_ksys_read+0x10/0x10 [ 159.739495][ T8926] ? do_syscall_64+0x100/0x230 [ 159.744308][ T8926] ? do_syscall_64+0xb6/0x230 [ 159.749038][ T8926] do_syscall_64+0xf3/0x230 [ 159.753589][ T8926] ? clear_bhb_loop+0x35/0x90 [ 159.758317][ T8926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.764276][ T8926] RIP: 0033:0x7fa149d746bc [ 159.768727][ T8926] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 159.788375][ T8926] RSP: 002b:00007fa14abf8040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 159.796855][ T8926] RAX: ffffffffffffffda RBX: 00007fa149f04038 RCX: 00007fa149d746bc [ 159.804873][ T8926] RDX: 000000000000000f RSI: 00007fa14abf80b0 RDI: 0000000000000006 [ 159.812886][ T8926] RBP: 00007fa14abf80a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.820901][ T8926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.828923][ T8926] R13: 000000000000006e R14: 00007fa149f04038 R15: 00007ffef18435d8 [ 159.836952][ T8926] [ 159.866873][ T8939] FAULT_INJECTION: forcing a failure. [ 159.866873][ T8939] name failslab, interval 1, probability 0, space 0, times 0 [ 159.890028][ T8939] CPU: 1 PID: 8939 Comm: syz.2.1374 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 159.900150][ T8939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 159.910240][ T8939] Call Trace: [ 159.913557][ T8939] [ 159.916511][ T8939] dump_stack_lvl+0x241/0x360 [ 159.921241][ T8939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.926486][ T8939] ? __pfx__printk+0x10/0x10 [ 159.931125][ T8939] ? ref_tracker_alloc+0x332/0x490 [ 159.936284][ T8939] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 159.941794][ T8939] should_fail_ex+0x3b0/0x4e0 [ 159.946538][ T8939] ? skb_clone+0x20c/0x390 [ 159.951023][ T8939] should_failslab+0x9/0x20 [ 159.955575][ T8939] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 159.961014][ T8939] skb_clone+0x20c/0x390 [ 159.965305][ T8939] __netlink_deliver_tap+0x3cc/0x7c0 [ 159.970625][ T8939] ? netlink_deliver_tap+0x2e/0x1b0 [ 159.975835][ T8939] netlink_deliver_tap+0x19d/0x1b0 [ 159.980976][ T8939] netlink_sendskb+0x68/0x140 [ 159.985670][ T8939] netlink_unicast+0x39d/0x980 [ 159.990439][ T8939] ? __asan_memcpy+0x40/0x70 [ 159.995058][ T8939] ? __pfx_netlink_unicast+0x10/0x10 [ 160.000366][ T8939] netlink_rcv_skb+0x262/0x430 [ 160.005134][ T8939] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 160.010640][ T8939] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 160.015957][ T8939] ? apparmor_capable+0x138/0x1b0 [ 160.021015][ T8939] ? bpf_lsm_capable+0x9/0x10 [ 160.025706][ T8939] ? security_capable+0x90/0xb0 [ 160.030574][ T8939] nfnetlink_rcv+0x297/0x2a80 [ 160.035271][ T8939] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.041644][ T8939] ? __local_bh_enable_ip+0x168/0x200 [ 160.047027][ T8939] ? lockdep_hardirqs_on+0x99/0x150 [ 160.052240][ T8939] ? __local_bh_enable_ip+0x168/0x200 [ 160.057705][ T8939] ? dev_hard_start_xmit+0x773/0x7e0 [ 160.063081][ T8939] ? __dev_queue_xmit+0x2d2/0x3d30 [ 160.068199][ T8939] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 160.073927][ T8939] ? __dev_queue_xmit+0x2d2/0x3d30 [ 160.079064][ T8939] ? __dev_queue_xmit+0x16c9/0x3d30 [ 160.084271][ T8939] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 160.089412][ T8939] ? __dev_queue_xmit+0x2d2/0x3d30 [ 160.094551][ T8939] ? ref_tracker_free+0x643/0x7e0 [ 160.099589][ T8939] ? __asan_memcpy+0x40/0x70 [ 160.104184][ T8939] ? __pfx_ref_tracker_free+0x10/0x10 [ 160.109587][ T8939] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.114813][ T8939] ? skb_clone+0x240/0x390 [ 160.119235][ T8939] ? __pfx_lock_release+0x10/0x10 [ 160.124264][ T8939] ? __netlink_deliver_tap+0x77e/0x7c0 [ 160.129749][ T8939] ? netlink_deliver_tap+0x2e/0x1b0 [ 160.134967][ T8939] netlink_unicast+0x7ea/0x980 [ 160.139768][ T8939] ? __pfx_netlink_unicast+0x10/0x10 [ 160.145056][ T8939] ? __virt_addr_valid+0x183/0x520 [ 160.150179][ T8939] ? __check_object_size+0x49c/0x900 [ 160.155482][ T8939] ? bpf_lsm_netlink_send+0x9/0x10 [ 160.160615][ T8939] netlink_sendmsg+0x8db/0xcb0 [ 160.165405][ T8939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.170722][ T8939] ? __import_iovec+0x536/0x820 [ 160.175583][ T8939] ? aa_sock_msg_perm+0x91/0x160 [ 160.180531][ T8939] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 160.185822][ T8939] ? security_socket_sendmsg+0x87/0xb0 [ 160.191294][ T8939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.196594][ T8939] __sock_sendmsg+0x221/0x270 [ 160.201320][ T8939] ____sys_sendmsg+0x525/0x7d0 [ 160.206101][ T8939] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.211423][ T8939] __sys_sendmsg+0x2b0/0x3a0 [ 160.216040][ T8939] ? __pfx___sys_sendmsg+0x10/0x10 [ 160.221168][ T8939] ? vfs_write+0x7c4/0xc90 [ 160.225636][ T8939] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 160.231985][ T8939] ? do_syscall_64+0x100/0x230 [ 160.236779][ T8939] ? do_syscall_64+0xb6/0x230 [ 160.241474][ T8939] do_syscall_64+0xf3/0x230 [ 160.245998][ T8939] ? clear_bhb_loop+0x35/0x90 [ 160.250711][ T8939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.256623][ T8939] RIP: 0033:0x7f0849175bd9 [ 160.261053][ T8939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.280671][ T8939] RSP: 002b:00007f084a01b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.289093][ T8939] RAX: ffffffffffffffda RBX: 00007f0849303f60 RCX: 00007f0849175bd9 [ 160.297065][ T8939] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 160.305046][ T8939] RBP: 00007f084a01b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 160.313016][ T8939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.321026][ T8939] R13: 000000000000000b R14: 00007f0849303f60 R15: 00007ffe2b147a58 [ 160.329017][ T8939] [ 161.083253][ T8983] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 161.182024][ T8984] dccp_invalid_packet: P.CsCov 11 exceeds packet length 256 [ 161.342312][ T9000] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 161.382646][ T9000] dccp_xmit_packet: Payload too large (65475) for featneg. [ 161.394963][ T9000] dccp_close: ABORT with 65475 bytes unread [ 180.513940][ T9018] tipc: Enabling of bearer rejected, failed to enable media [ 180.578013][ T9027] __nla_validate_parse: 14 callbacks suppressed [ 180.578033][ T9027] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1408'. [ 180.877594][ T9041] dccp_invalid_packet: P.CsCov 11 exceeds packet length 256 [ 180.906734][ T9044] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1415'. [ 180.927523][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1415'. [ 180.972931][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1415'. [ 181.350075][ T9067] sock: sock_timestamping_bind_phc: sock not bind to device [ 181.529698][ T9077] vlan3: entered allmulticast mode [ 181.537900][ T9077] geneve0: entered allmulticast mode [ 181.544830][ T9077] bridge0: port 3(vlan3) entered blocking state [ 181.571997][ T9077] bridge0: port 3(vlan3) entered disabled state [ 181.582628][ T9077] vlan3: entered promiscuous mode [ 181.589315][ T9077] geneve0: entered promiscuous mode [ 181.600770][ T9077] bridge0: port 3(vlan3) entered blocking state [ 181.607282][ T9077] bridge0: port 3(vlan3) entered forwarding state [ 181.616523][ T9081] netlink: 'syz.3.1428': attribute type 3 has an invalid length. [ 181.635404][ T9084] netlink: 'syz.4.1427': attribute type 10 has an invalid length. [ 181.972733][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1434'. [ 182.269183][ T9118] hsr0: entered promiscuous mode [ 182.323118][ T9123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.397272][ T9123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 182.678855][ T9144] FAULT_INJECTION: forcing a failure. [ 182.678855][ T9144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.730607][ T9144] CPU: 0 PID: 9144 Comm: syz.2.1448 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 182.740744][ T9144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 182.750839][ T9144] Call Trace: [ 182.754150][ T9144] [ 182.757113][ T9144] dump_stack_lvl+0x241/0x360 [ 182.761845][ T9144] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.767087][ T9144] ? __pfx__printk+0x10/0x10 [ 182.771728][ T9144] ? snprintf+0xda/0x120 [ 182.776011][ T9144] should_fail_ex+0x3b0/0x4e0 [ 182.780733][ T9144] _copy_to_user+0x2f/0xb0 [ 182.785189][ T9144] simple_read_from_buffer+0xca/0x150 [ 182.790604][ T9144] proc_fail_nth_read+0x1e9/0x250 [ 182.795758][ T9144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.800928][ T9149] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 182.801336][ T9144] ? rw_verify_area+0x520/0x6b0 [ 182.813385][ T9144] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.818959][ T9144] vfs_read+0x204/0xbc0 [ 182.823155][ T9144] ? __pfx_lock_release+0x10/0x10 [ 182.828219][ T9144] ? __pfx_vfs_read+0x10/0x10 [ 182.832928][ T9144] ? __fget_files+0x29/0x470 [ 182.837548][ T9144] ? __fget_files+0x3f6/0x470 [ 182.842269][ T9144] ksys_read+0x1a0/0x2c0 [ 182.846555][ T9144] ? __pfx_ksys_read+0x10/0x10 [ 182.851353][ T9144] ? do_syscall_64+0x100/0x230 [ 182.856162][ T9144] ? do_syscall_64+0xb6/0x230 [ 182.860874][ T9144] do_syscall_64+0xf3/0x230 [ 182.865416][ T9144] ? clear_bhb_loop+0x35/0x90 [ 182.870150][ T9144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.876091][ T9144] RIP: 0033:0x7f08491746bc [ 182.880541][ T9144] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 182.900186][ T9144] RSP: 002b:00007f084a01b040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.908641][ T9144] RAX: ffffffffffffffda RBX: 00007f0849303f60 RCX: 00007f08491746bc [ 182.916645][ T9144] RDX: 000000000000000f RSI: 00007f084a01b0b0 RDI: 0000000000000005 [ 182.924651][ T9144] RBP: 00007f084a01b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.932659][ T9144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.940665][ T9144] R13: 000000000000000b R14: 00007f0849303f60 R15: 00007ffe2b147a58 [ 182.948693][ T9144] [ 183.114585][ T9155] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1450'. [ 183.138598][ T9158] netlink: 'syz.4.1451': attribute type 3 has an invalid length. [ 183.153438][ T9158] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.1451'. [ 183.501980][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1461'. [ 183.598098][ T9182] SET target dimension over the limit! [ 183.853204][ T9196] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 183.872950][ T9196] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.1468'. [ 183.895900][ T9196] netlink: 'syz.3.1468': attribute type 1 has an invalid length. [ 183.920511][ T9204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.948587][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 183.960940][ T9196] netlink: 'syz.3.1468': attribute type 8 has an invalid length. [ 184.337222][ T9223] xt_bpf: check failed: parse error [ 184.698668][ T9241] netlink: 'syz.3.1485': attribute type 5 has an invalid length. [ 184.708210][ T9241] netlink: 'syz.3.1485': attribute type 11 has an invalid length. [ 184.743474][ T9241] bridge3: entered promiscuous mode [ 185.350242][ T9279] sit0: entered promiscuous mode [ 185.361275][ T9279] sit0: entered allmulticast mode [ 185.380382][ T9276] FAULT_INJECTION: forcing a failure. [ 185.380382][ T9276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.395525][ T9276] CPU: 0 PID: 9276 Comm: syz.0.1497 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 185.405646][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 185.415718][ T9276] Call Trace: [ 185.419001][ T9276] [ 185.421946][ T9276] dump_stack_lvl+0x241/0x360 [ 185.426655][ T9276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.431897][ T9276] ? __pfx__printk+0x10/0x10 [ 185.436531][ T9276] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 185.442815][ T9276] ? __pfx_lock_release+0x10/0x10 [ 185.447944][ T9276] ? ktime_get_ts64+0xa8/0x2b0 [ 185.452755][ T9276] should_fail_ex+0x3b0/0x4e0 [ 185.457558][ T9276] _copy_from_user+0x2f/0xe0 [ 185.462181][ T9276] copy_msghdr_from_user+0xae/0x680 [ 185.467405][ T9276] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 185.473222][ T9276] ? set_normalized_timespec64+0x160/0x1e0 [ 185.479039][ T9276] ? __might_fault+0xaa/0x120 [ 185.483742][ T9276] do_recvmmsg+0x40f/0xae0 [ 185.488169][ T9276] ? mark_lock+0x9a/0x350 [ 185.492513][ T9276] ? __pfx_do_recvmmsg+0x10/0x10 [ 185.497501][ T9276] ? __pfx___might_resched+0x10/0x10 [ 185.502793][ T9276] ? __might_fault+0xaa/0x120 [ 185.507487][ T9276] ? __pfx_lock_release+0x10/0x10 [ 185.512529][ T9276] ? vfs_write+0x7c4/0xc90 [ 185.516994][ T9276] ? get_timespec64+0x19c/0x280 [ 185.521876][ T9276] __x64_sys_recvmmsg+0x1b8/0x250 [ 185.526917][ T9276] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 185.532471][ T9276] ? do_syscall_64+0x100/0x230 [ 185.537257][ T9276] ? do_syscall_64+0xb6/0x230 [ 185.541947][ T9276] do_syscall_64+0xf3/0x230 [ 185.546472][ T9276] ? clear_bhb_loop+0x35/0x90 [ 185.551163][ T9276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.557074][ T9276] RIP: 0033:0x7fc5bc375bd9 [ 185.561498][ T9276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.581112][ T9276] RSP: 002b:00007fc5bbdff048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 185.589538][ T9276] RAX: ffffffffffffffda RBX: 00007fc5bc503f60 RCX: 00007fc5bc375bd9 [ 185.597532][ T9276] RDX: 00000000000006f5 RSI: 0000000020000440 RDI: 0000000000000003 [ 185.605516][ T9276] RBP: 00007fc5bbdff0a0 R08: 0000000020000480 R09: 0000000000000000 [ 185.613503][ T9276] R10: 0000002000000022 R11: 0000000000000246 R12: 0000000000000002 [ 185.621518][ T9276] R13: 000000000000000b R14: 00007fc5bc503f60 R15: 00007fffdc991268 [ 185.629512][ T9276] [ 185.740220][ T9284] __nla_validate_parse: 5 callbacks suppressed [ 185.740241][ T9284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1502'. [ 185.764776][ T9284] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1502'. [ 185.827724][ T9288] ipt_REJECT: TCP_RESET invalid for non-tcp [ 185.878185][ T9288] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1503'. [ 185.995605][ T9288] nbd: couldn't find device at index -1 [ 186.259311][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'. [ 186.290621][ C0] TCP: MD5 Hash mismatch for [::1].2->[::1].2 [.]L3 index 0 [ 186.298989][ C0] TCP: MD5 Hash mismatch for [::1].2->[::1].2 [P.]L3 index 0 [ 186.574427][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1519'. [ 186.594313][ T9331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1519'. [ 186.653037][ T9336] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1521'. [ 187.583799][ T9355] syz.2.1526[9355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.583949][ T9355] syz.2.1526[9355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.634280][ T9355] syz.2.1526[9355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.670663][ T9355] syz.2.1526[9355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.791380][ T9359] bond_slave_0: entered promiscuous mode [ 187.808886][ T9359] bond_slave_1: entered promiscuous mode [ 187.829962][ T9358] bond_slave_0: left promiscuous mode [ 187.835758][ T9358] bond_slave_1: left promiscuous mode [ 188.171513][ C1] TCP: MD5 Hash mismatch for [::1].2->[::1].2 [.]L3 index 0 [ 188.179294][ C1] TCP: MD5 Hash mismatch for [::1].2->[::1].2 [P.]L3 index 0 [ 188.296141][ T9392] netlink: 'syz.0.1538': attribute type 1 has an invalid length. [ 188.304174][ T9392] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1538'. [ 188.369490][ T9394] sit0: left promiscuous mode [ 188.390477][ T9394] sit0: left allmulticast mode [ 188.403862][ T9392] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1538'. [ 188.534489][ T9399] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1539'. [ 188.658017][ C1] TCP: MD5 Hash mismatch for [::1].2->[::1].2 [.]L3 index 0 [ 188.665717][ C1] TCP: MD5 Hash mismatch for [::1].2->[::1].2 [P.]L3 index 0 [ 189.088665][ T9428] [ 189.091063][ T9428] ====================================================== [ 189.098103][ T9428] WARNING: possible circular locking dependency detected [ 189.105139][ T9428] 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 Not tainted [ 189.112260][ T9428] ------------------------------------------------------ [ 189.119311][ T9428] syz.4.1548/9428 is trying to acquire lock: [ 189.125306][ T9428] ffff888067f30218 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{2:2}, at: __dev_queue_xmit+0x22f5/0x3d30 [ 189.137550][ T9428] [ 189.137550][ T9428] but task is already holding lock: [ 189.144981][ T9428] ffff88806600b0d8 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 189.154889][ T9428] [ 189.154889][ T9428] which lock already depends on the new lock. [ 189.154889][ T9428] [ 189.165341][ T9428] [ 189.165341][ T9428] the existing dependency chain (in reverse order) is: [ 189.174381][ T9428] [ 189.174381][ T9428] -> #1 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}: [ 189.182703][ T9428] lock_acquire+0x1ed/0x550 [ 189.187783][ T9428] _raw_spin_lock+0x2e/0x40 [ 189.192852][ T9428] sch_direct_xmit+0x1c4/0x5f0 [ 189.198184][ T9428] __dev_queue_xmit+0x1a24/0x3d30 [ 189.203750][ T9428] ip6_finish_output2+0xff8/0x1670 [ 189.209394][ T9428] ip6_finish_output+0x41e/0x810 [ 189.214885][ T9428] NF_HOOK+0x9e/0x430 [ 189.219389][ T9428] mld_sendpack+0x838/0xda0 [ 189.224429][ T9428] mld_ifc_work+0x7d6/0xd90 [ 189.229468][ T9428] process_scheduled_works+0xa2c/0x1830 [ 189.235548][ T9428] worker_thread+0x86d/0xd50 [ 189.240665][ T9428] kthread+0x2f0/0x390 [ 189.245262][ T9428] ret_from_fork+0x4b/0x80 [ 189.250206][ T9428] ret_from_fork_asm+0x1a/0x30 [ 189.255497][ T9428] [ 189.255497][ T9428] -> #0 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2){+...}-{2:2}: [ 189.265845][ T9428] validate_chain+0x18e0/0x5900 [ 189.271226][ T9428] __lock_acquire+0x1346/0x1fd0 [ 189.276608][ T9428] lock_acquire+0x1ed/0x550 [ 189.281634][ T9428] _raw_spin_lock+0x2e/0x40 [ 189.286672][ T9428] __dev_queue_xmit+0x22f5/0x3d30 [ 189.292241][ T9428] ip6_finish_output2+0xff8/0x1670 [ 189.297889][ T9428] ip6_finish_output+0x41e/0x810 [ 189.303542][ T9428] ndisc_send_skb+0xab0/0x1380 [ 189.308837][ T9428] ndisc_solicit+0x493/0x6a0 [ 189.313953][ T9428] __neigh_event_send+0xec8/0x15a0 [ 189.319593][ T9428] neigh_resolve_output+0x1b5/0x740 [ 189.325322][ T9428] ip6_finish_output2+0xff8/0x1670 [ 189.330978][ T9428] ip6_finish_output+0x41e/0x810 [ 189.336452][ T9428] ip6_send_skb+0x112/0x230 [ 189.341492][ T9428] icmp6_send+0x15fc/0x2070 [ 189.346549][ T9428] ip6_link_failure+0x3c/0x4f0 [ 189.351849][ T9428] ip_tunnel_xmit+0x164f/0x2940 [ 189.357236][ T9428] __gre_xmit+0x1cf/0x260 [ 189.362097][ T9428] erspan_xmit+0xaba/0x1310 [ 189.367139][ T9428] dev_hard_start_xmit+0x27a/0x7e0 [ 189.372793][ T9428] sch_direct_xmit+0x2b6/0x5f0 [ 189.378093][ T9428] __qdisc_run+0xbfd/0x2170 [ 189.383126][ T9428] __dev_queue_xmit+0x14f0/0x3d30 [ 189.388686][ T9428] ip6_finish_output2+0xff8/0x1670 [ 189.394694][ T9428] ip6_finish_output+0x41e/0x810 [ 189.400182][ T9428] rawv6_send_hdrinc+0xb79/0x1610 [ 189.405744][ T9428] rawv6_sendmsg+0x1962/0x23c0 [ 189.411055][ T9428] __sock_sendmsg+0x1a6/0x270 [ 189.416372][ T9428] ____sys_sendmsg+0x525/0x7d0 [ 189.416499][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.421668][ T9428] __sys_sendmsg+0x2b0/0x3a0 [ 189.437978][ T9428] do_syscall_64+0xf3/0x230 [ 189.443013][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.449434][ T9428] [ 189.449434][ T9428] other info that might help us debug this: [ 189.449434][ T9428] [ 189.459678][ T9428] Possible unsafe locking scenario: [ 189.459678][ T9428] [ 189.467568][ T9428] CPU0 CPU1 [ 189.472937][ T9428] ---- ---- [ 189.478313][ T9428] lock(&qdisc_xmit_lock_key#3); [ 189.483353][ T9428] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 189.492989][ T9428] lock(&qdisc_xmit_lock_key#3); [ 189.500540][ T9428] lock(dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#2); [ 189.507659][ T9428] [ 189.507659][ T9428] *** DEADLOCK *** [ 189.507659][ T9428] [ 189.515803][ T9428] 10 locks held by syz.4.1548/9428: [ 189.521017][ T9428] #0: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: rawv6_send_hdrinc+0x9df/0x1610 [ 189.530782][ T9428] #1: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1670 [ 189.540629][ T9428] #2: ffffffff8e333f80 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d2/0x3d30 [ 189.550593][ T9428] #3: ffff88806600b0d8 (&qdisc_xmit_lock_key#3){+.-.}-{2:2}, at: sch_direct_xmit+0x1c4/0x5f0 [ 189.560888][ T9428] #4: ffff888029f68918 (k-slock-AF_INET6){+.-.}-{2:2}, at: icmp6_send+0xc45/0x2070 [ 189.570323][ T9428] #5: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: icmp6_send+0xba4/0x2070 [ 189.579474][ T9428] #6: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1670 [ 189.589322][ T9428] #7: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: ndisc_send_skb+0x572/0x1380 [ 189.598815][ T9428] #8: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: ip6_finish_output2+0x712/0x1670 [ 189.608653][ T9428] #9: ffffffff8e333f80 (rcu_read_lock_bh){....}-{1:2}, at: __dev_queue_xmit+0x2d2/0x3d30 [ 189.618597][ T9428] [ 189.618597][ T9428] stack backtrace: [ 189.624478][ T9428] CPU: 1 PID: 9428 Comm: syz.4.1548 Not tainted 6.10.0-rc6-syzkaller-00165-g0ec986ed7bab #0 [ 189.634575][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 189.644677][ T9428] Call Trace: [ 189.647970][ T9428] [ 189.650905][ T9428] dump_stack_lvl+0x241/0x360 [ 189.655625][ T9428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.660847][ T9428] ? print_circular_bug+0x130/0x1a0 [ 189.666063][ T9428] check_noncircular+0x36a/0x4a0 [ 189.671015][ T9428] ? __pfx_check_noncircular+0x10/0x10 [ 189.676482][ T9428] ? __bfs+0x368/0x6f0 [ 189.680549][ T9428] ? __pfx_usage_skip+0x10/0x10 [ 189.685412][ T9428] validate_chain+0x18e0/0x5900 [ 189.690292][ T9428] ? __pfx_validate_chain+0x10/0x10 [ 189.695490][ T9428] ? __pfx_validate_chain+0x10/0x10 [ 189.700710][ T9428] ? register_lock_class+0x102/0x980 [ 189.706000][ T9428] ? __pfx_register_lock_class+0x10/0x10 [ 189.711634][ T9428] ? mark_lock+0x9a/0x350 [ 189.715974][ T9428] __lock_acquire+0x1346/0x1fd0 [ 189.720838][ T9428] lock_acquire+0x1ed/0x550 [ 189.725347][ T9428] ? __dev_queue_xmit+0x22f5/0x3d30 [ 189.730569][ T9428] ? __pfx_lock_acquire+0x10/0x10 [ 189.735597][ T9428] ? __pfx_lock_acquire+0x10/0x10 [ 189.740713][ T9428] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 189.746879][ T9428] ? rcu_read_lock_bh_held+0x7e/0x120 [ 189.752263][ T9428] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 189.758080][ T9428] _raw_spin_lock+0x2e/0x40 [ 189.762600][ T9428] ? __dev_queue_xmit+0x22f5/0x3d30 [ 189.767834][ T9428] __dev_queue_xmit+0x22f5/0x3d30 [ 189.772880][ T9428] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 189.779213][ T9428] ? read_seqbegin+0x157/0x2b0 [ 189.783980][ T9428] ? __dev_queue_xmit+0x2d2/0x3d30 [ 189.789094][ T9428] ? read_seqbegin+0x208/0x2b0 [ 189.793865][ T9428] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.799674][ T9428] ? neigh_resolve_output+0x2e5/0x740 [ 189.805050][ T9428] ? eth_header+0x11c/0x1f0 [ 189.809552][ T9428] ? __asan_memcpy+0x40/0x70 [ 189.814139][ T9428] ? eth_header+0x11c/0x1f0 [ 189.818639][ T9428] ? __pfx_eth_header+0x10/0x10 [ 189.823487][ T9428] ? neigh_resolve_output+0x61f/0x740 [ 189.828866][ T9428] ip6_finish_output2+0xff8/0x1670 [ 189.833979][ T9428] ? ip6_finish_output2+0x712/0x1670 [ 189.839266][ T9428] ? nf_hook+0x9e/0x450 [ 189.843440][ T9428] ? __pfx_ip6_finish_output2+0x10/0x10 [ 189.849005][ T9428] ? ip6_mtu+0x81/0x3f0 [ 189.853178][ T9428] ip6_finish_output+0x41e/0x810 [ 189.858129][ T9428] ndisc_send_skb+0xab0/0x1380 [ 189.862897][ T9428] ? ndisc_send_skb+0x572/0x1380 [ 189.867840][ T9428] ? __pfx_ndisc_send_skb+0x10/0x10 [ 189.873038][ T9428] ? __pfx_dst_output+0x10/0x10 [ 189.877900][ T9428] ? __asan_memcpy+0x40/0x70 [ 189.882494][ T9428] ? __pfx_ndisc_ns_create+0x10/0x10 [ 189.887789][ T9428] ? ipv6_get_lladdr+0x35a/0x3d0 [ 189.892728][ T9428] ? ipv6_get_lladdr+0x2c/0x3d0 [ 189.897581][ T9428] ndisc_solicit+0x493/0x6a0 [ 189.902183][ T9428] ? __pfx_ndisc_solicit+0x10/0x10 [ 189.907305][ T9428] ? __skb_clone+0x454/0x6c0 [ 189.911907][ T9428] ? __pfx_ndisc_solicit+0x10/0x10 [ 189.917027][ T9428] __neigh_event_send+0xec8/0x15a0 [ 189.922154][ T9428] neigh_resolve_output+0x1b5/0x740 [ 189.927386][ T9428] ? __ipv6_neigh_lookup_noref+0x533/0x730 [ 189.933197][ T9428] ip6_finish_output2+0xff8/0x1670 [ 189.938311][ T9428] ? ip6_finish_output2+0x712/0x1670 [ 189.943594][ T9428] ? nf_hook+0x9e/0x450 [ 189.947756][ T9428] ? __pfx_ip6_finish_output2+0x10/0x10 [ 189.953306][ T9428] ? ip6_mtu+0x81/0x3f0 [ 189.957469][ T9428] ip6_finish_output+0x41e/0x810 [ 189.962427][ T9428] ip6_send_skb+0x112/0x230 [ 189.966936][ T9428] ? icmp6_send+0xba4/0x2070 [ 189.971529][ T9428] icmp6_send+0x15fc/0x2070 [ 189.976053][ T9428] ? icmp6_send+0xba4/0x2070 [ 189.980655][ T9428] ? __pfx_icmp6_send+0x10/0x10 [ 189.985509][ T9428] ? inet6_set_link_af+0xc30/0xc80 [ 189.990641][ T9428] ? __pfx_lock_release+0x10/0x10 [ 189.995673][ T9428] ? ip6_neigh_lookup+0x44b/0x580 [ 190.000704][ T9428] ? __pfx_ip6_neigh_lookup+0x10/0x10 [ 190.006082][ T9428] ? do_syscall_64+0xf3/0x230 [ 190.010781][ T9428] ip6_link_failure+0x3c/0x4f0 [ 190.015648][ T9428] ? dst_link_failure+0x107/0x160 [ 190.020687][ T9428] ip_tunnel_xmit+0x164f/0x2940 [ 190.025573][ T9428] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 190.030796][ T9428] ? gre_build_header+0x341/0xb30 [ 190.035828][ T9428] ? skb_release_data+0x2b5/0x880 [ 190.040879][ T9428] ? __pfx_gre_build_header+0x10/0x10 [ 190.046294][ T9428] ? pskb_expand_head+0xc89/0x1390 [ 190.051447][ T9428] __gre_xmit+0x1cf/0x260 [ 190.055814][ T9428] ? __pfx___gre_xmit+0x10/0x10 [ 190.060704][ T9428] ? iptunnel_handle_offloads+0x31b/0x650 [ 190.066463][ T9428] erspan_xmit+0xaba/0x1310 [ 190.071010][ T9428] ? __pfx_erspan_xmit+0x10/0x10 [ 190.075968][ T9428] ? dev_queue_xmit_nit+0x2b/0xc10 [ 190.081100][ T9428] dev_hard_start_xmit+0x27a/0x7e0 [ 190.086253][ T9428] sch_direct_xmit+0x2b6/0x5f0 [ 190.091038][ T9428] ? __pfx_sch_direct_xmit+0x10/0x10 [ 190.096339][ T9428] __qdisc_run+0xbfd/0x2170 [ 190.100846][ T9428] ? do_raw_spin_lock+0x14f/0x370 [ 190.105874][ T9428] ? skbprio_enqueue+0x72f/0x1130 [ 190.110913][ T9428] __dev_queue_xmit+0x14f0/0x3d30 [ 190.115951][ T9428] ? read_seqbegin+0x157/0x2b0 [ 190.120720][ T9428] ? __dev_queue_xmit+0x2d2/0x3d30 [ 190.125838][ T9428] ? read_seqbegin+0x208/0x2b0 [ 190.130609][ T9428] ? __pfx___dev_queue_xmit+0x10/0x10 [ 190.135992][ T9428] ? neigh_resolve_output+0x2e5/0x740 [ 190.141369][ T9428] ? eth_header+0x11c/0x1f0 [ 190.145882][ T9428] ? __asan_memcpy+0x40/0x70 [ 190.150482][ T9428] ? eth_header+0x11c/0x1f0 [ 190.154991][ T9428] ? __pfx_eth_header+0x10/0x10 [ 190.159851][ T9428] ? neigh_resolve_output+0x61f/0x740 [ 190.165246][ T9428] ip6_finish_output2+0xff8/0x1670 [ 190.170366][ T9428] ? ip6_finish_output2+0x712/0x1670 [ 190.175652][ T9428] ? nf_hook+0x9e/0x450 [ 190.179813][ T9428] ? __pfx_ip6_finish_output2+0x10/0x10 [ 190.185368][ T9428] ? ip6_mtu+0x81/0x3f0 [ 190.189544][ T9428] ip6_finish_output+0x41e/0x810 [ 190.194525][ T9428] ? rawv6_send_hdrinc+0x9df/0x1610 [ 190.199727][ T9428] rawv6_send_hdrinc+0xb79/0x1610 [ 190.204763][ T9428] ? __pfx_rawv6_send_hdrinc+0x10/0x10 [ 190.210223][ T9428] ? ip6_dst_lookup_flow+0x13e/0x180 [ 190.215509][ T9428] ? __pfx_dst_output+0x10/0x10 [ 190.220361][ T9428] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 190.225988][ T9428] ? aa_label_sk_perm+0x4f0/0x6d0 [ 190.231034][ T9428] ? rawv6_sendmsg+0xef9/0x23c0 [ 190.235893][ T9428] rawv6_sendmsg+0x1962/0x23c0 [ 190.240692][ T9428] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 190.245813][ T9428] ? aa_sk_perm+0x967/0xab0 [ 190.250343][ T9428] ? inet_sendmsg+0x330/0x390 [ 190.255024][ T9428] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 190.260311][ T9428] ? security_socket_sendmsg+0x87/0xb0 [ 190.265775][ T9428] __sock_sendmsg+0x1a6/0x270 [ 190.270465][ T9428] ____sys_sendmsg+0x525/0x7d0 [ 190.275250][ T9428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.280555][ T9428] __sys_sendmsg+0x2b0/0x3a0 [ 190.285153][ T9428] ? __pfx___sys_sendmsg+0x10/0x10 [ 190.290265][ T9428] ? rawv6_setsockopt+0x432/0x740 [ 190.295307][ T9428] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 190.302190][ T9428] ? do_syscall_64+0x100/0x230 [ 190.306969][ T9428] ? do_syscall_64+0xb6/0x230 [ 190.311660][ T9428] do_syscall_64+0xf3/0x230 [ 190.316179][ T9428] ? clear_bhb_loop+0x35/0x90 [ 190.320867][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.326767][ T9428] RIP: 0033:0x7f6630d75bd9 [ 190.331179][ T9428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.350801][ T9428] RSP: 002b:00007f6631c00048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.359225][ T9428] RAX: ffffffffffffffda RBX: 00007f6630f03f60 RCX: 00007f6630d75bd9 [ 190.367205][ T9428] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 000000000000000b [ 190.375190][ T9428] RBP: 00007f6630de4aa1 R08: 0000000000000000 R09: 0000000000000000 [ 190.383165][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.391137][ T9428] R13: 000000000000000b R14: 00007f6630f03f60 R15: 00007ffe5694a938 [ 190.399121][ T9428] [ 190.437185][ T9428] syz.4.1548 (9428) used greatest stack depth: 17680 bytes left [ 194.531317][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.605284][ T5111] Bluetooth: hci2: command 0x0406 tx timeout [ 196.606699][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 196.611400][ T5111] Bluetooth: hci3: command 0x0406 tx timeout [ 196.617666][ T5110] Bluetooth: hci0: command 0x0406 tx timeout