last executing test programs: 36.845231076s ago: executing program 2 (id=5233): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/33, @ANYRES32], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001400010000000000000000ffffffffffffff00"/36], 0xb8}}, 0x0) 36.664089005s ago: executing program 2 (id=5236): socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2}, 0x10) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r7, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}}, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x50}}, 0x0) 36.364622703s ago: executing program 2 (id=5240): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0xffff8000}, 0x90) 35.959701409s ago: executing program 2 (id=5245): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0x1c0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x73]}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 25.982058303s ago: executing program 2 (id=5245): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0x1c0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x73]}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 22.657768862s ago: executing program 0 (id=5394): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000006000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0xf9, &(0x7f0000000600)=""/249}, 0x90) 22.532100967s ago: executing program 0 (id=5396): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) read(r0, &(0x7f00000001c0)=""/2, 0x2) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x47, 0x10001, 0x0, 0x1}, 0x48) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e87020001001000000000090002000000000500050000000000"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400008a, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000640)="18", &(0x7f0000000180)=""/109}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 21.669564058s ago: executing program 0 (id=5402): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) unshare(0x20000000) unshare(0x4040880) unshare(0xc020600) 21.452832354s ago: executing program 0 (id=5406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x70bd28}, 0x1c}}, 0x0) sendto(r0, &(0x7f0000000240)="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", 0x1000, 0x24044000, &(0x7f0000001240)=@llc={0x1a, 0x313, 0x8, 0x8, 0x1a, 0x8, @remote}, 0x80) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000040a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000030000000060a010400000000000000000100000008000b400000000008000a40000000000900010073797a3000d74974ebc5cb5c6f65f651acd3000000140000001100010000000000000000000000000af67a9d1259e8767be47eb51cedcebad698cdd5cca302a5b01d18f053cdf0c14f7fec34f2191848c789823dcaf1a7ad8334d21e52ed2f3ef9ad848c1ee7d22644bfee6007db8e1bc465895a7c3f86b070249f67e4ef00040e26e79ef65400550529ec1f0917f6444900db0f352d"], 0xa4}}, 0x0) 19.9549517s ago: executing program 0 (id=5408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000700", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000"], 0x2c}}, 0x0) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="4f7d81c93360"}]}, 0x40}}, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x810) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async, rerun: 64) gettid() (rerun: 64) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000040000000000000000000002000000000000a9a42ec85f0000000000000000000000000000000000c71fa385c0e8df1d8842260a2906f2"], 0x0, 0x38}, 0x20) 7.952903413s ago: executing program 2 (id=5245): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0x1c0, 0x1c0, 0x1c0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x73]}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00'}}, @common=@socket0={{0x20}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) 6.456275924s ago: executing program 0 (id=5408): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000700", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800020000000000"], 0x2c}}, 0x0) (async) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid_for_children\x00') (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @random="4f7d81c93360"}]}, 0x40}}, 0x0) (async, rerun: 64) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x2c, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x810) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async, rerun: 64) gettid() (rerun: 64) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000280)=0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000040000000000000000000002000000000000a9a42ec85f0000000000000000000000000000000000c71fa385c0e8df1d8842260a2906f2"], 0x0, 0x38}, 0x20) 1.497523001s ago: executing program 3 (id=5546): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000800)={'filter\x00', 0x28, "2cda0a4dd270ff22296cb598cf6992938de04a024d16b96843d25f9401ac7747315690eafa94544e"}, &(0x7f0000000880)=0x4c) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x1c, r4, 0x1, 0x0, 0x0, {0xf}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d98", 0xe}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0) ppoll(&(0x7f0000001240)=[{r5}], 0x1, 0x0, &(0x7f00000012c0), 0x8) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@nested={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r7, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)='%pI4 \x00'}, 0x20) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f00000006c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x7c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x84}, 0x4800) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @call={0x85, 0x0, 0x0, 0x9b}, @jmp={0x5, 0x0, 0x7, 0x4, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_val={0x18, 0x4, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x38}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/275], 0x114}], 0x1}, 0x0) 1.397156448s ago: executing program 1 (id=5547): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000000000000000000018bd85000000ba000000950000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.193963276s ago: executing program 1 (id=5549): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc}]}}}]}]}], {0x14}}, 0x80}}, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000400)={0x4, 0x204, 0x8000, 0x1, r3}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000180)={r4, 0x8591}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={r5, @in={{0x2, 0x4e24, @multicast2}}, 0x6, 0x4, 0x9, 0x100, 0xc, 0x5, 0x1}, &(0x7f00000001c0)=0x9c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x20, 0x10, 0x503}, 0x20}}, 0x0) 1.192963173s ago: executing program 3 (id=5550): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 1.08884213s ago: executing program 4 (id=5551): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(0xffffffffffffffff, 0x40049421, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x139677ef}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000600)="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", 0x0, 0x8, 0x60000000, 0x104, 0x0, &(0x7f0000000840)="77f475acef57a0054791d09ad84dcd65b8439ca6626a3b1fc4a8f237a958f94762b7857f5837634d0a830d0dff7ca7219753cdb404c5f5452bfc6b6cd939ffb8a6a7085245b714ca7e092ec24ed25209694377de82ce31483a25c736dac314cf91bdfdead8aa67ffcc82f220e6fec935db2aea15672c93b68bb96e6e93e8a24158e001441d01d2a142a60b49b78a64e68091b441ec0f143c42ae3a319836724374663cf22ab811174f60beb16ebbb360be7d25499bbe0d1640325ca57b06b9c4de78b5a24511806f3edb87a5b9eb6d9ba053e2a1d2031970145845aa46d3f8a2230826d75d2dbc9da43bf73a57b26c895eb0221bc2b3d31f89080853adc492c18f995229", &(0x7f0000000000), 0x0, 0x0, 0x9}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[], 0x88}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0xdc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRESDEC=r0], 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x90) socket$netlink(0x10, 0x3, 0x4) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="020300000e000000000000000000000005000600000000000a000000000000fbff00000000000000000000000000000100000000000000000200010000000000000000060000000005000500000000000a00000000000000d21c66e8d63c36e1c155355d9e200000002307000000000000000000000100000000000000008fb04d13e25770f7eb9350a0e18d499525808474dd9256899760c81354688fd193653766f7fe3f0eb2f14e5e5a848672f1552d97e5d5ebf18814252c12a985eab02a8d8dc1c6c18dfb123e8dccef2e658f3887137f08c8abf26f79b7a2de20cccd8339826094dc8162dc72d9a881cc87776c492474cafa995eb23b5bea034c60c203197a934525721806ed5db0b2048cc302b97d28f19660a7603dcb9e52bc525d1be2456d755d", @ANYRESHEX=r4], 0x70}, 0x1, 0x7}, 0x0) 1.073608106s ago: executing program 3 (id=5552): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00200000000000004c001280110001006272696467655f736c6176650000000034000580050019"], 0x98}}, 0x0) 975.948234ms ago: executing program 1 (id=5553): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005f80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800f3ffffff00ffffc026ffffff7f0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x82, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x8) 920.846776ms ago: executing program 4 (id=5554): socket$inet6(0xa, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1f8, 0x240, 0x240, 0x1f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x0, 0x0, 0x0, 0xed, 0x7, 0x0, 0x80}}}, @common=@unspec=@cluster={{0x30}}]}, @unspec=@TRACE={0x20}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x42, 0x0, 0x0, 0x0, 0x511, &(0x7f0000000000)='veth1_to_bridge\x00', 0x2, 0xffffffffffffffff, 0x3}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r3) sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r5, 0x800, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x4}, 0x4) 870.042267ms ago: executing program 1 (id=5555): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) listen(0xffffffffffffffff, 0x200) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd) r3 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1c, 0x0, &(0x7f0000000000)) epoll_create1(0x0) accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x0, 0x0) splice(r3, &(0x7f00000016c0)=0x1, 0xffffffffffffffff, &(0x7f0000001700)=0x8, 0x40, 0x6) r4 = socket(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000001680)={0x1f, 0x0, 0x6, 0x7f, 0x4, 0x20, 0x9e, 0x2, 0x2, 0x3, 0x4, 0x8, 0x9}, 0xe) accept$phonet_pipe(r4, 0x0, &(0x7f0000000180)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="5803cfbeb1c5b8ff66b48eea37d5d175142830fec4d07b4470784b53ccf28d1a69a3fc4419bbbb3d2da2eae5249f258286b232dd2f6189dfb1f45ed27f77eb926faba1143099cbe7cefbb71bdd0a2440c82f77301547213089a228b6b05fdbee68c198f890b8bb405004248e97505b362b7e325c023339828732addd14053135824ef8abe1ad", 0x86}, {&(0x7f0000000280)="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", 0xf7a}, {&(0x7f0000001740)="b3a3e3c8f856fcd0a9ce774245f94a3d5edc6fb37c728283d8ee8d9c2903e62f11c0ad0bf75a0abd3f55e59207d730ca52373644bf395ad77db9396ecbe541e6e3872fa4ecadedd624bebfed35f5a8", 0x4f}, {&(0x7f0000001340)="ee8c197bfa51d5a5856c17b4878f185a929ae8ed9ed6f73ed6d7f216bcd85130d3f20dedcd2c34ea871116f653c12fb2568bdc5b4b25e448de60d60cbf2adec21f4278bc0c5d3f254e37860f32ac553c7390619d099f3b9dcf6767c999", 0x5d}], 0x4}, 0x8805) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000018c0)={0x0, 0x2}, &(0x7f0000001900)=0x8) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000002a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x900024}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="380000000201010300000000000000000000000924000e601400b03f6a6a785c2de36666a99d450180080001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4140) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001540)) socket$kcm(0x29, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001580)={"6a6b48289c1a64103e48671e8b80414c", 0x0, 0x0, {0x1}, {0x10000000000, 0x4}, 0x8, [0x3, 0x0, 0x367, 0xbe, 0x0, 0x2, 0x0, 0x9, 0x800000000000100, 0x9, 0x18, 0x1ff, 0x3, 0xc5]}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none, 0x9, 0x2}, 0xe) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002cc0)={'wlan1\x00', 0x2000}) 673.072729ms ago: executing program 3 (id=5556): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x34, 0xa, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_LINENO={0x8}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000058100000", @ANYRES32=r2, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_opts(r5, 0x0, 0x14, &(0x7f00000004c0)=""/3, &(0x7f0000000500)=0x3) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x0, 0x1, 0x0, 0x5, 0x20, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x700, 0x7, 0x4, 0x4}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000007c0)=[0x0], 0x0, 0xc7, &(0x7f0000000800)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000ac0)='io.stat\x00', 0x0, 0x0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x5f, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0x26, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@generic={0x7, 0x4, 0xf, 0xf, 0xcfd}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @generic={0x3, 0x1, 0x8, 0xa38, 0x1}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @generic={0x7, 0x9, 0x8, 0x2, 0x81}, @jmp={0x5, 0x1, 0xc, 0x9, 0x7, 0xffffffffffffffff, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa614}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x377b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000100)='GPL\x00', 0xfffffffd, 0xe3, &(0x7f0000000640)=""/227, 0x41100, 0x48, '\x00', r6, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xc, 0x9, 0x8}, 0x10, r7, 0xffffffffffffffff, 0x6, &(0x7f0000000b80)=[r8, r9, r11], &(0x7f0000000bc0)=[{0x4, 0x3, 0xa, 0x6}, {0x5, 0x3, 0x10, 0x6}, {0x2, 0x2, 0xc, 0x1}, {0x5, 0x1, 0x0, 0x5}, {0x0, 0x2, 0xb, 0x4}, {0x4, 0x1, 0x8, 0xd}], 0x10, 0x2}, 0x90) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000009000000070000000000008c000000000000000000000006040000000000000000000061"], 0x0, 0x39}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x18, &(0x7f0000000300)=ANY=[@ANYRES64, @ANYRES8=r12], 0x0, 0x10000000, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, 0xf, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x48, 0x0, 0x0, 0x0, 0x7eb19d1c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r13}, 0x10) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r14, 0x37, 0x0, 0x0, @prog_fd}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0xa, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0x2, 0x40, 0x6}, 0x10, r7, r13, 0x0, &(0x7f0000000100)=[0xffffffffffffffff, r14], 0x0, 0x10, 0xa7}, 0x90) 596.965958ms ago: executing program 4 (id=5557): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 557.340593ms ago: executing program 4 (id=5558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000000000000030011000000"], 0x24}}, 0x0) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYRES32=r1, @ANYBLOB="0092b703228c798a86faf67c8500000000de5e5e3c09990085000000ba000000b700000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x8, 0x9, 0xfffffffd, 0x300, r1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0xa}, 0x48) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000001900)="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", 0xf91, 0x80, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc000000850000000500000095"], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x180, 0x111, 0x4b4, 0x8, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x284}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@mcast1, @empty, [], [], 'xfrm0\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) socket(0x2c, 0x800000003, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0xd) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000018000100000000000000000003000000000000050000000006001500020000000c0016800800060000000000"], 0x30}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4004001}, 0x20000001) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xe11, 0x484ee3dd, 0x200, 0x20, 0xffffffffffffffff, 0x23656c36, '\x00', r4, r2, 0x2, 0x4, 0x5, 0xa}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r8}, 0x38) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r8, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000500), &(0x7f0000000540)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000ffffffff00000000ffff000018640000090000007b353d5f81bb9d06de16f1b8498d066c0000000003000000850000008b000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500eeec1a277f4827003f5924badd78c9b3ddd158000600000018300000036f9583a96fa5d25989c58ca5b75f55582abd3bdad4fa10087b98fd5c750f5fc0021e09b71e45025491329d871ce22f91a45d36792bbc6e78dc4597b712bd4a094fddcae434a4244bdc"], &(0x7f00000002c0)='syzkaller\x00', 0x9, 0x15, &(0x7f00000004c0)=""/21, 0x41000, 0x4c, '\x00', r4, 0x23, r2, 0x8, &(0x7f0000000580)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000005c0)=[{0x4, 0x5, 0x4}, {0x1, 0x8, 0x8, 0x3}, {0x4, 0x3, 0x6, 0x2}, {0x3, 0x5, 0x7, 0x6}], 0x10, 0xc}, 0x90) (async) close(r2) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) 535.97564ms ago: executing program 3 (id=5559): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r2, @ANYBLOB="24003080200001800800010003"], 0x40}, 0x1, 0x900}, 0x0) 471.83154ms ago: executing program 1 (id=5560): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000bc0)}, 0x90) (async) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000040), 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) (async) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f911240685", 0x14}], 0x1}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000008c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x1c, 0x0, 0x5, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x38, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x1c, 0x2c, 0x0, 0x1, [{0x8}, {0x8}, {0x8}]}]}, 0x38}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x14, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000031eb439ca360e15f0000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000006000f"], 0x0}, 0x90) socket$kcm(0x10, 0x2, 0x10) 228.777526ms ago: executing program 4 (id=5561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000480)={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, {0x0, @remote}, 0x2, {}, 'veth1_to_bridge\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SECURITY(r5, 0x112, 0x4, &(0x7f0000000040)={0x37}, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r8, r9, 0x4}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000100)={0x5}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r8, r10, 0xe, 0x0, 0x0, @prog_fd=r9}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r8, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r7}, 0x20) close(r7) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[], 0x20}}, 0x24010) 227.239681ms ago: executing program 3 (id=5562): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x10, 0x20}, [@FRA_SRC={0x8, 0x2, @empty}]}, 0x24}}, 0x0) syz_emit_ethernet(0x293, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "8a7863", 0x25d, 0x87, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[@fragment={0x67, 0x0, 0x0, 0x1, 0x0, 0x8, 0x68}, @hopopts={0xff, 0xa, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0xff, [0x5b6, 0x7fff, 0x7]}}, @pad1, @generic={0x8, 0x23, "76d471c557ac333b9883df918708453ce837c54abb97903c9e3a4d65b16a49616db3c2"}, @jumbo={0xc2, 0x4, 0x200}]}, @fragment={0x67, 0x0, 0x8, 0x0, 0x0, 0x1, 0x68}, @srh={0x3b, 0x2, 0x4, 0x1, 0x3, 0x20, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}]}, @hopopts={0x87, 0xd, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0xc, 0x8, [0x7f5c, 0xfffffffffffffffb]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x20, {0x1, 0x6, 0x43, 0x1d6b, [0x800, 0x7ff, 0x5786]}}, @jumbo={0xc2, 0x4, 0x81}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0x715}]}, @dstopts={0x11, 0x1, '\x00', [@ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x4}]}, @dstopts={0x3c, 0x9, '\x00', [@calipso={0x7, 0x48, {0x0, 0x10, 0x5, 0xc7, [0x1, 0x6, 0x101, 0x100000001, 0xcf, 0xa934, 0x8, 0x9]}}, @ra={0x5, 0x2, 0x9}]}, @dstopts={0x6, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x8}, @generic={0x5, 0xb0, "862deefb2bc70e8d43416cfb56e807e04530c87a99730ae13f54bfca9d60f19c6d74fa56fc52593d66a4fed229c08cf9612929edcef24a093683216f4d2605e03d4c751d9333f99696da32eeff6e9160f4f808ff86ee8567cc682c4b391fa49190ecfff239a095857aef30447789a01b59de3a95e5413f9509d22629b878cb7461f8ad16e53e8b69db1d176c5bada8383cc9aaf7313ebed53d2315d4412b92d0c745e25b4ee6bd883ef891138d166ba6"}]}, @fragment={0x5e, 0x0, 0xe8, 0x1, 0x0, 0x10, 0x68}], "1d9ed66e03d933c30ec3c2114f61d22ad105904057ec0fb5cd24b7eab6"}}}}}, 0x0) syz_emit_ethernet(0xf4, &(0x7f00000002c0)={@local, @broadcast, @void, {@llc_tr={0x11, {@snap={0xab, 0x1, "29f5", '3j]', 0xe867, "cc4e0d457c79d011480f96a2610e0991a940517a6508108acba972e5b0571e6b3f1751e138b8d0b73a9af95cf6210d42bee1754998ac4fa4933d18f8449c4b66730f9f9cde14b713174f6edcfed7209491880ad9eabc37b98470a234af974104a8e6c93c8b31f99029ef55850254cbe1f245af9cfe5c1722827579a5bb824a46f0bc239ac6578d4a24bd60dce9de24a85d0919d98e54f2c508c0895eb8037cacc5ba3bb81c768e06944122f6fb90b0aa6e4812bbf6ae752fa9ec5cb495d3b8229fdc26e3d0d254c2be28ad4b47551c512dd248c1ab53789212840bb438"}}}}}, 0x0) socket(0xa, 0x3, 0x3a) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x27, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, "0bc0f7", 0x0, "de9560"}}}}}}, 0x0) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)="a4", 0x1}], 0x1}}], 0x2, 0x2008800) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r3, 0x0, r5, 0x0, 0x4ffe6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x2008084}, 0x0) 104.20305ms ago: executing program 1 (id=5563): syz_80211_inject_frame(0x0, 0x0, 0x47) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x54583}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003480)={0x11, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x59}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300766972745f776966693000000000000008000a00", @ANYRES32=r5, @ANYBLOB="9fc54b54a45baf9899359166947c997ed25673486fd7a4c2673334bf44cd9b10b119dfea52e60421bd76e04ed1b574fa8cbfefbab7e974f56c2c84c7441a308a163d0d86483b0d731a8682a3338a3a8ddfbf2c06f3e33ada5755e4050ce38acbf77af712b7097943ac43c71dcd1b3e44ce95e7ec2ff05c5ecedf1c4104fb5e045b4346ca3789942f3936c983f601b8865845cc3073ff2b61a2a9a34ab8bc6301671b742c67fd119a22b66c34f4f904637cf552cafe8c88e7e8eaf855797fdc6b14eba5ea601f3e9351bc87afc2440eff7126cbf1be516a2565713927cc3e283f9e8f43c2e68738089433"], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x0) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f00000007c0)=[{{&(0x7f0000000080)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{0x0}], 0x1}}, {{&(0x7f00000022c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000600)}}, {{&(0x7f00000003c0)={0x2, 0x0, @private=0xa010103}, 0x10, &(0x7f0000000780)=[{&(0x7f00000006c0)='o', 0x1}], 0x1}}], 0x3, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x76, &(0x7f0000000140)=@assoc_value={r8}, 0x8) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=5564): socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) listen(0xffffffffffffffff, 0x200) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007"], 0xd) r3 = socket$pptp(0x18, 0x1, 0x2) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x1c, 0x0, &(0x7f0000000000)) epoll_create1(0x0) accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x0, 0x0) splice(r3, &(0x7f00000016c0)=0x1, 0xffffffffffffffff, &(0x7f0000001700)=0x8, 0x40, 0x6) r4 = socket(0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000001680)={0x1f, 0x0, 0x6, 0x7f, 0x4, 0x20, 0x9e, 0x2, 0x2, 0x3, 0x4, 0x8, 0x9}, 0xe) accept$phonet_pipe(r4, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000018c0)={0x0, 0x2}, &(0x7f0000001900)=0x8) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000002a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x900024}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)=ANY=[@ANYBLOB="380000000201010300000000000000000000000924000e601400b03f6a6a785c2de36666a99d450180080001"], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4140) getsockopt$sock_buf(r0, 0x1, 0x1f, 0x0, &(0x7f0000001540)) socket$kcm(0x29, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001580)={"6a6b48289c1a64103e48671e8b80414c", 0x0, 0x0, {0x1}, {0x10000000000, 0x4}, 0x8, [0x3, 0x0, 0x367, 0xbe, 0x0, 0x2, 0x0, 0x9, 0x800000000000100, 0x9, 0x18, 0x1ff, 0x3, 0xc5]}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none, 0x9, 0x2}, 0xe) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000002cc0)={'wlan1\x00', 0x2000}) kernel console output (not intermixed with test programs): 45919][T17760] warn_alloc+0x278/0x410 [ 357.245946][T17760] ? __pfx_warn_alloc+0x10/0x10 [ 357.245971][T17760] ? __get_vm_area_node+0x113/0x270 [ 357.246000][T17760] ? __get_vm_area_node+0x261/0x270 [ 357.246032][T17760] __vmalloc_node_range_noprof+0x3e0/0x1460 [ 357.246051][T17760] ? mark_lock+0x9a/0x350 [ 357.246087][T17760] ? aa_get_newest_label+0xff/0x6f0 [ 357.312613][T17760] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 357.318950][T17760] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 357.324494][T17760] __vmalloc_noprof+0x79/0x90 [ 357.329159][T17760] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 357.334697][T17760] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 357.340059][T17760] ? bpf_prog_alloc+0x28/0x1b0 [ 357.344819][T17760] bpf_prog_alloc+0x3a/0x1b0 [ 357.349404][T17760] bpf_prog_load+0x7f7/0x20f0 [ 357.354085][T17760] ? __pfx_bpf_prog_load+0x10/0x10 [ 357.359190][T17760] ? __pfx___might_resched+0x10/0x10 [ 357.364486][T17760] ? __might_fault+0xc6/0x120 [ 357.369156][T17760] ? bpf_lsm_bpf+0x9/0x10 [ 357.373473][T17760] ? security_bpf+0x87/0xb0 [ 357.377967][T17760] __sys_bpf+0x4ee/0x810 [ 357.382240][T17760] ? __pfx___sys_bpf+0x10/0x10 [ 357.387007][T17760] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 357.393522][T17760] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 357.399869][T17760] ? do_syscall_64+0x100/0x230 [ 357.404636][T17760] __x64_sys_bpf+0x7c/0x90 [ 357.409056][T17760] do_syscall_64+0xf3/0x230 [ 357.413566][T17760] ? clear_bhb_loop+0x35/0x90 [ 357.418249][T17760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.424153][T17760] RIP: 0033:0x7f592dd779f9 [ 357.428565][T17760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.448165][T17760] RSP: 002b:00007f592eba3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.456571][T17760] RAX: ffffffffffffffda RBX: 00007f592df05f80 RCX: 00007f592dd779f9 [ 357.464533][T17760] RDX: 0000000000000090 RSI: 0000000020000400 RDI: 0000000000000005 [ 357.472498][T17760] RBP: 00007f592eba3090 R08: 0000000000000000 R09: 0000000000000000 [ 357.480464][T17760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.488444][T17760] R13: 0000000000000000 R14: 00007f592df05f80 R15: 00007ffd3a750838 [ 357.496440][T17760] [ 357.511859][T17760] Mem-Info: [ 357.519850][T17760] active_anon:2897 inactive_anon:0 isolated_anon:0 [ 357.519850][T17760] active_file:2307 inactive_file:38268 isolated_file:0 [ 357.519850][T17760] unevictable:768 dirty:143 writeback:0 [ 357.519850][T17760] slab_reclaimable:9816 slab_unreclaimable:113016 [ 357.519850][T17760] mapped:28749 shmem:1258 pagetables:707 [ 357.519850][T17760] sec_pagetables:0 bounce:0 [ 357.519850][T17760] kernel_misc_reclaimable:0 [ 357.519850][T17760] free:1353842 free_pcp:3449 free_cma:0 [ 357.594712][T17760] Node 0 active_anon:11688kB inactive_anon:0kB active_file:9228kB inactive_file:152988kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114996kB dirty:568kB writeback:0kB shmem:3496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11660kB pagetables:2828kB sec_pagetables:0kB all_unreclaimable? no [ 357.683471][T17771] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4205'. [ 357.686705][T17760] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 357.729821][T17771] ÊügáG: entered promiscuous mode [ 357.740366][T17783] x_tables: duplicate underflow at hook 2 [ 357.747966][T17782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4209'. [ 357.760653][T17782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4209'. [ 357.787138][T17760] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 357.787713][T17783] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4208'. [ 357.884417][T17760] lowmem_reserve[]: 0 2561 2562 0 0 [ 357.889718][T17760] Node 0 DMA32 free:1461044kB boost:0kB min:35020kB low:43772kB high:52524kB reserved_highatomic:0KB active_anon:11744kB inactive_anon:0kB active_file:9228kB inactive_file:151668kB unevictable:1536kB writepending:564kB present:3129332kB managed:2651252kB mlocked:0kB bounce:0kB free_pcp:1636kB local_pcp:756kB free_cma:0kB [ 357.972108][T17760] lowmem_reserve[]: 0 0 1 0 0 [ 357.988346][T17785] tipc: Invalid UDP bearer configuration [ 357.988396][T17785] tipc: Enabling of bearer rejected, failed to enable media [ 358.013037][T17760] Node 0 Normal free:4kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1320kB unevictable:0kB writepending:4kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 358.083484][T17760] lowmem_reserve[]: 0 0 0 0 0 [ 358.112490][T17760] Node 1 Normal free:3948232kB boost:0kB min:54864kB low:68580kB high:82296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3020kB local_pcp:3020kB free_cma:0kB [ 358.162811][T17760] lowmem_reserve[]: 0 0 0 0 0 [ 358.193507][T17760] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 358.224370][T17760] Node 0 DMA32: 1*4kB (U) 31*8kB (ME) 205*16kB (UME) 171*32kB (UME) 119*64kB (UME) 50*128kB (UME) 30*256kB (UME) 13*512kB (UM) 8*1024kB (UM) 5*2048kB (UM) 343*4096kB (UM) = 1460716kB [ 358.251649][T17760] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 358.265152][T17760] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 0*64kB 1*128kB (U) 2*256kB (UM) 2*512kB (UM) 2*1024kB (U) 4*2048kB (U) 961*4096kB (M) = 3948232kB [ 358.312138][T17760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.332314][T17760] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 358.352391][T17760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 358.374692][T17760] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 358.385510][T17760] 41849 total pagecache pages [ 358.390868][T17760] 0 pages in swap cache [ 358.395850][T17760] Free swap = 124996kB [ 358.400896][T17760] Total swap = 124996kB [ 358.411003][T17760] 2097051 pages RAM [ 358.431193][T17760] 0 pages HighMem/MovableOnly [ 358.443518][T17760] 402772 pages reserved [ 358.451876][T17760] 0 pages cma reserved [ 359.064133][T17855] x_tables: duplicate underflow at hook 2 [ 359.465743][ T46] IPVS: starting estimator thread 0... [ 359.554584][T17883] IPVS: using max 20 ests per chain, 48000 per kthread [ 359.738814][T17898] netlink: 'syz.3.4245': attribute type 1 has an invalid length. [ 360.696914][T17936] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.383936][T17969] __nla_validate_parse: 12 callbacks suppressed [ 361.383956][T17969] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4270'. [ 361.593998][T17978] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4275'. [ 361.610029][T17974] sctp: [Deprecated]: syz.4.4273 (pid 17974) Use of int in max_burst socket option. [ 361.610029][T17974] Use struct sctp_assoc_value instead [ 361.634770][T17978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4275'. [ 361.842392][T17994] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4276'. [ 362.121964][T18012] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.308877][T18021] netlink: 'syz.4.4288': attribute type 1 has an invalid length. [ 362.378776][T18021] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4288'. [ 362.405998][T18021] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.450764][T18021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.460707][T18021] bond2: (slave batadv0): Enslaving as a backup interface with an up link [ 362.506061][ T1107] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 362.609364][T18039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4294'. [ 362.676801][ T1107] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 362.702648][T18044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4297'. [ 362.752702][T18049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4299'. [ 363.168127][T18075] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.273984][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4311'. [ 364.422604][T18126] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4324'. [ 364.920247][T18143] ebtables: ebtables: counters copy to user failed while replacing table [ 366.003708][T18200] x_tables: ip_tables: ah match: only valid for protocol 51 [ 366.951348][T18233] __nla_validate_parse: 5 callbacks suppressed [ 366.951368][T18233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4359'. [ 366.951754][T18230] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4361'. [ 367.309162][T18239] netlink: 'syz.3.4362': attribute type 4 has an invalid length. [ 367.409792][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4362'. [ 367.717903][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4373'. [ 367.845296][T18279] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4374'. [ 367.960251][T18286] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4378'. [ 368.525111][T18311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4383'. [ 368.634994][T18314] x_tables: ip_tables: ah match: only valid for protocol 51 [ 368.926489][T18323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4387'. [ 369.201226][T18330] gretap0: entered promiscuous mode [ 369.239979][T18324] tap0: tun_chr_ioctl cmd 1074025677 [ 369.246664][T18324] tap0: linktype set to 825 [ 369.694066][T18359] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4399'. [ 370.068809][T18381] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4410'. [ 370.088165][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.095396][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.283184][T18392] x_tables: duplicate underflow at hook 2 [ 370.306210][T18392] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.334891][T18392] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.342116][T18392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.958081][T18416] ebtables: ebtables: counters copy to user failed while replacing table [ 371.267164][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.274460][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.528493][T18454] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.667155][T18460] 8021q: adding VLAN 0 to HW filter on device bond2 [ 371.685333][T18465] x_tables: duplicate underflow at hook 2 [ 371.694051][T18460] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 371.720494][T18460] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 371.771239][T18465] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.784997][T18465] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.792250][T18465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.810591][ T46] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 372.023804][T18476] Bluetooth: hci3: unsupported parameter 64512 [ 372.042220][T18476] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 372.112467][T18471] ebtables: ebtables: counters copy to user failed while replacing table [ 372.175813][T18483] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 372.216567][T18483] veth0_to_bridge: entered promiscuous mode [ 372.224694][ T25] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 372.238413][T18482] veth0_to_bridge: left promiscuous mode [ 372.334572][T18491] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 372.380699][T18490] tap0: tun_chr_ioctl cmd 1074025677 [ 372.403309][T18490] tap0: linktype set to 825 [ 372.725210][T18510] __nla_validate_parse: 13 callbacks suppressed [ 372.725233][T18510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4460'. [ 372.818590][T18514] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4462'. [ 373.020165][T18522] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4465'. [ 373.038628][T18522] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4465'. [ 373.054500][T18524] x_tables: ip_tables: ah match: only valid for protocol 51 [ 373.144939][T18528] gretap0: entered promiscuous mode [ 373.480216][T18535] tap0: tun_chr_ioctl cmd 1074025677 [ 373.502529][T18535] tap0: linktype set to 825 [ 373.838220][T18561] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 373.988297][T18569] netlink: 'syz.0.4485': attribute type 4 has an invalid length. [ 374.038924][T18573] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4484'. [ 374.056541][T18569] netlink: 'syz.0.4485': attribute type 4 has an invalid length. [ 374.123682][T18579] netlink: 'syz.4.4484': attribute type 4 has an invalid length. [ 374.433633][T18592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4493'. [ 374.442396][T18594] dccp_v4_rcv: dropped packet with invalid checksum [ 374.500584][T18597] sock: sock_set_timeout: `syz.1.4493' (pid 18597) tries to set negative timeout [ 374.514069][T18596] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 374.594732][T18599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4496'. [ 374.930854][T18614] SET target dimension over the limit! [ 375.079172][T18622] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 375.119525][T18620] tap0: tun_chr_ioctl cmd 1074025677 [ 375.134862][T18620] tap0: linktype set to 825 [ 375.400008][T18641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4514'. [ 375.417353][T18641] xfrm1: entered promiscuous mode [ 375.422601][T18641] xfrm1: entered allmulticast mode [ 375.546926][T18648] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4516'. [ 375.588278][T18649] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4518'. [ 375.647098][T18653] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 375.755545][T18660] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 375.811959][T18663] macvlan0: entered allmulticast mode [ 375.824562][T18663] veth1_vlan: entered allmulticast mode [ 375.840604][T18662] pim6reg: entered allmulticast mode [ 376.121850][T18686] netlink: 'syz.1.4531': attribute type 1 has an invalid length. [ 376.143965][T18687] netlink: 'syz.2.4532': attribute type 4 has an invalid length. [ 376.234243][T18692] netlink: 'syz.2.4532': attribute type 4 has an invalid length. [ 376.342396][T18687] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 376.484049][T18704] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 376.503684][T18704] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 376.531039][ T7738] tipc: Subscription rejected, illegal request [ 376.957071][T18736] netem: unknown loss type 13 [ 377.004215][T18736] netem: change failed [ 377.010072][T18733] syz.4.4545[18733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.010217][T18733] syz.4.4545[18733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 377.264920][T18751] netlink: 'syz.1.4550': attribute type 4 has an invalid length. [ 377.335434][T18747] netlink: 'syz.1.4550': attribute type 4 has an invalid length. [ 377.616563][T18757] ebtables: ebtables: counters copy to user failed while replacing table [ 377.749014][T18769] tap0: tun_chr_ioctl cmd 1074025677 [ 377.764789][T18769] tap0: linktype set to 769 [ 378.032608][T18787] __nla_validate_parse: 8 callbacks suppressed [ 378.032629][T18787] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4566'. [ 378.077544][T18791] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4564'. [ 378.300349][T18803] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4571'. [ 378.325954][T18798] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.342433][T18805] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4572'. [ 378.351916][T18805] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4572'. [ 378.370844][T18805] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.390253][T18806] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4570'. [ 378.430105][T18803] wg2: entered promiscuous mode [ 378.444985][T18803] wg2: entered allmulticast mode [ 378.659910][T18819] x_tables: duplicate underflow at hook 2 [ 378.726806][T18822] bond0: entered promiscuous mode [ 378.732319][T18822] bond_slave_0: entered promiscuous mode [ 378.751563][T18822] bond_slave_1: entered promiscuous mode [ 378.771424][T18822] team0: entered promiscuous mode [ 378.790010][T18822] team_slave_0: entered promiscuous mode [ 378.798611][T18822] team_slave_1: entered promiscuous mode [ 378.807144][T18822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.815963][T18822] Cannot create hsr debugfs directory [ 379.042355][T18838] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4580'. [ 379.151080][T18841] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4581'. [ 379.279776][T18847] netlink: 'syz.3.4584': attribute type 1 has an invalid length. [ 379.463114][T18856] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4587'. [ 379.785053][T18872] tipc: Enabling of bearer rejected, failed to enable media [ 379.883574][T18881] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4596'. [ 380.069289][T18890] Can't find ip_set type bitmap:i‡ [ 380.337071][T18912] x_tables: ip_tables: ah match: only valid for protocol 51 [ 381.015509][ T5240] Bluetooth: hci1: command 0x0406 tx timeout [ 381.015609][ T5245] Bluetooth: hci2: command 0x040f tx timeout [ 382.569348][T19006] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 383.187291][T19022] ebtables: ebtables: counters copy to user failed while replacing table [ 383.704798][T19067] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 383.750923][T19070] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 383.817775][T19070] syzkaller0: entered promiscuous mode [ 383.823490][T19070] syzkaller0: entered allmulticast mode [ 383.965323][T19080] SET target dimension over the limit! [ 384.153794][T19088] FAULT_INJECTION: forcing a failure. [ 384.153794][T19088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.183207][T19088] CPU: 0 UID: 0 PID: 19088 Comm: syz.1.4666 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 384.194056][T19088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 384.204159][T19088] Call Trace: [ 384.207450][T19088] [ 384.210397][T19088] dump_stack_lvl+0x241/0x360 [ 384.215103][T19088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.220337][T19088] ? __pfx__printk+0x10/0x10 [ 384.224951][T19088] ? __pfx_lock_release+0x10/0x10 [ 384.230014][T19088] should_fail_ex+0x3b0/0x4e0 [ 384.234721][T19088] _copy_from_user+0x2f/0xe0 [ 384.239338][T19088] copy_msghdr_from_user+0xae/0x680 [ 384.244567][T19088] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 384.250498][T19088] __sys_sendmsg+0x23d/0x3a0 [ 384.255125][T19088] ? __pfx___sys_sendmsg+0x10/0x10 [ 384.260252][T19088] ? vfs_write+0x7c4/0xc90 [ 384.264729][T19088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 384.271087][T19088] ? do_syscall_64+0x100/0x230 [ 384.275882][T19088] ? do_syscall_64+0xb6/0x230 [ 384.280578][T19088] do_syscall_64+0xf3/0x230 [ 384.285191][T19088] ? clear_bhb_loop+0x35/0x90 [ 384.289888][T19088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.295813][T19088] RIP: 0033:0x7f579c3779f9 [ 384.300245][T19088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.319879][T19088] RSP: 002b:00007f579d1b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.328356][T19088] RAX: ffffffffffffffda RBX: 00007f579c505f80 RCX: 00007f579c3779f9 [ 384.336356][T19088] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 384.344361][T19088] RBP: 00007f579d1b9090 R08: 0000000000000000 R09: 0000000000000000 [ 384.347117][T19093] __nla_validate_parse: 13 callbacks suppressed [ 384.347136][T19093] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4669'. [ 384.352350][T19088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.352382][T19088] R13: 0000000000000000 R14: 00007f579c505f80 R15: 00007fff7e2f1648 [ 384.352410][T19088] [ 386.680227][T19096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4670'. [ 386.698418][T19096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4670'. [ 386.976811][T19128] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.105397][T19136] dccp_v4_rcv: dropped packet with invalid checksum [ 387.172264][T19131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4683'. [ 387.196883][T19131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4683'. [ 387.206417][T19132] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4683'. [ 387.219949][T19132] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4683'. [ 387.431168][T19146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 387.450222][T19148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 387.664230][T19157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4692'. [ 387.694828][T19157] IPv6: NLM_F_REPLACE set, but no existing node found! [ 387.936222][T19172] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4698'. [ 387.964992][T19172] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4698'. [ 388.025264][T19174] tap0: tun_chr_ioctl cmd 1074025677 [ 388.042180][T19174] tap0: linktype set to 825 [ 388.092636][T19177] SET target dimension over the limit! [ 388.393157][T19195] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.778147][T19214] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 389.229144][T19233] netlink: 'syz.1.4726': attribute type 1 has an invalid length. [ 389.242965][T19231] batadv_slave_0: entered allmulticast mode [ 389.497960][T19249] __nla_validate_parse: 6 callbacks suppressed [ 389.497980][T19249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4724'. [ 390.012092][ T7731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.023970][ T7731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.036579][ T7731] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 390.048297][ T7731] bond0 (unregistering): Released all slaves [ 390.065600][T19245] tipc: Started in network mode [ 390.070949][T19245] tipc: Node identity , cluster identity 4711 [ 390.077559][T19245] tipc: Failed to set node id, please configure manually [ 390.084956][T19245] tipc: Enabling of bearer rejected, failed to enable media [ 390.094119][T19246] pim6reg: left allmulticast mode [ 390.102250][T19246] macvlan0: left allmulticast mode [ 390.108349][T19246] veth1_vlan: left allmulticast mode [ 390.113925][T19246] batadv_slave_0: left allmulticast mode [ 390.183526][T19262] tap0: tun_chr_ioctl cmd 1074025677 [ 390.198145][T19262] tap0: linktype set to 825 [ 390.254066][ T7731] tipc: Left network mode [ 390.444230][T19271] netlink: 'syz.0.4734': attribute type 1 has an invalid length. [ 390.564701][T19279] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4738'. [ 390.577353][T19283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.653725][ T7731] hsr_slave_0: left promiscuous mode [ 390.690289][ T7731] 0·: left promiscuous mode [ 390.739009][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.757833][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.796182][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.811424][ T7731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.881044][ T7731] veth1_macvtap: left promiscuous mode [ 390.893794][ T7731] veth0_macvtap: left promiscuous mode [ 390.908145][ T7731] veth1_vlan: left promiscuous mode [ 390.919407][ T7731] veth0_vlan: left promiscuous mode [ 391.980575][ T7731] team_slave_1 (unregistering): left promiscuous mode [ 391.996187][ T7731] team0 (unregistering): Port device team_slave_1 removed [ 392.042072][ T7731] team_slave_0 (unregistering): left promiscuous mode [ 392.052564][ T7731] team0 (unregistering): Port device team_slave_0 removed [ 392.781456][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4751'. [ 393.052675][T19336] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 393.103467][T19335] ebtables: ebtables: counters copy to user failed while replacing table [ 393.114916][T19336] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 393.465330][T19353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.515863][T19349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4757'. [ 393.625208][T19359] FAULT_INJECTION: forcing a failure. [ 393.625208][T19359] name failslab, interval 1, probability 0, space 0, times 0 [ 393.634931][T19361] dccp_v4_rcv: dropped packet with invalid checksum [ 393.655466][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4749'. [ 393.662907][T19359] CPU: 1 UID: 0 PID: 19359 Comm: syz.3.4760 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 393.675097][T19359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 393.685172][T19359] Call Trace: [ 393.688468][T19359] [ 393.691409][T19359] dump_stack_lvl+0x241/0x360 [ 393.696112][T19359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.701331][T19359] ? __pfx__printk+0x10/0x10 [ 393.705948][T19359] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 393.711953][T19359] ? __pfx___might_resched+0x10/0x10 [ 393.717269][T19359] should_fail_ex+0x3b0/0x4e0 [ 393.722007][T19359] should_failslab+0xac/0x100 [ 393.726801][T19359] ? __alloc_skb+0x1c3/0x440 [ 393.731424][T19359] kmem_cache_alloc_node_noprof+0x71/0x320 [ 393.737261][T19359] __alloc_skb+0x1c3/0x440 [ 393.741707][T19359] ? __pfx___alloc_skb+0x10/0x10 [ 393.746671][T19359] ? netlink_autobind+0xd6/0x2f0 [ 393.751643][T19359] ? netlink_autobind+0x2b0/0x2f0 [ 393.756699][T19359] netlink_sendmsg+0x638/0xcb0 [ 393.761493][T19359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.766809][T19359] ? __import_iovec+0x536/0x820 [ 393.771680][T19359] ? aa_sock_msg_perm+0x91/0x160 [ 393.776642][T19359] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 393.781953][T19359] ? security_socket_sendmsg+0x87/0xb0 [ 393.784104][T19366] dccp_invalid_packet: P.Data Offset(172) too large [ 393.787418][T19359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.787445][T19359] __sock_sendmsg+0x221/0x270 [ 393.787472][T19359] ____sys_sendmsg+0x525/0x7d0 [ 393.808787][T19359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.814216][T19359] __sys_sendmsg+0x2b0/0x3a0 [ 393.818844][T19359] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.823978][T19359] ? vfs_write+0x7c4/0xc90 [ 393.828891][T19359] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.835241][T19359] ? do_syscall_64+0x100/0x230 [ 393.840047][T19359] ? do_syscall_64+0xb6/0x230 [ 393.844752][T19359] do_syscall_64+0xf3/0x230 [ 393.849280][T19359] ? clear_bhb_loop+0x35/0x90 [ 393.853979][T19359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.859895][T19359] RIP: 0033:0x7fb7935779f9 [ 393.864322][T19359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.883949][T19359] RSP: 002b:00007fb79442b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.892387][T19359] RAX: ffffffffffffffda RBX: 00007fb793705f80 RCX: 00007fb7935779f9 [ 393.900390][T19359] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 393.908385][T19359] RBP: 00007fb79442b090 R08: 0000000000000000 R09: 0000000000000000 [ 393.916371][T19359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.924353][T19359] R13: 0000000000000000 R14: 00007fb793705f80 R15: 00007ffed1796fb8 [ 393.932357][T19359] [ 394.063473][T19378] x_tables: ip_tables: ah match: only valid for protocol 51 [ 394.163672][T19384] netlink: 'syz.3.4767': attribute type 1 has an invalid length. [ 394.326781][T19386] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4769'. [ 394.409713][T19394] dccp_v4_rcv: dropped packet with invalid checksum [ 394.602714][T19402] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4774'. [ 394.676971][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4777'. [ 394.708055][T19406] netlink: 'syz.1.4777': attribute type 1 has an invalid length. [ 394.725441][T19406] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4777'. [ 394.751492][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4777'. [ 394.810942][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4779'. [ 394.850797][T19416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4778'. [ 394.917340][T19422] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4780'. [ 395.078678][T19430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4783'. [ 395.099534][T19431] netlink: 'syz.4.4781': attribute type 13 has an invalid length. [ 395.126328][T19434] x_tables: duplicate underflow at hook 2 [ 395.313058][T19442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4787'. [ 395.463785][T19455] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4791'. [ 396.083876][T19491] lo: entered promiscuous mode [ 396.089206][T19489] netlink: 'syz.1.4801': attribute type 9 has an invalid length. [ 396.094112][T19491] lo: entered allmulticast mode [ 396.110998][T19489] netlink: 'syz.1.4801': attribute type 6 has an invalid length. [ 396.118596][T19491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 396.277234][T19500] x_tables: ip_tables: ah match: only valid for protocol 51 [ 396.318523][T19499] netlink: 'syz.1.4806': attribute type 33 has an invalid length. [ 396.355710][T19499] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 396.572358][T19507] ebtables: ebtables: counters copy to user failed while replacing table [ 396.612843][T19517] dccp_v4_rcv: dropped packet with invalid checksum [ 396.701267][T19521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.898682][T19534] cannot load conntrack support for proto=3 [ 396.992861][T19533] veth1_macvtap: left promiscuous mode [ 397.000203][T19533] macsec0: entered promiscuous mode [ 397.021408][T19536] veth1_macvtap: entered promiscuous mode [ 397.046792][T19536] macsec0: left promiscuous mode [ 397.052169][T19536] macsec0: entered allmulticast mode [ 397.060668][T19536] veth1_macvtap: entered allmulticast mode [ 397.191886][T19543] SET target dimension over the limit! [ 397.527328][T19563] netlink: 'syz.3.4826': attribute type 29 has an invalid length. [ 397.543860][T19563] netlink: 'syz.3.4826': attribute type 29 has an invalid length. [ 397.559009][T19563] netlink: 'syz.3.4826': attribute type 29 has an invalid length. [ 398.023973][T19591] netlink: 'syz.4.4842': attribute type 4 has an invalid length. [ 398.031930][T19594] FAULT_INJECTION: forcing a failure. [ 398.031930][T19594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.061209][T19594] CPU: 1 UID: 0 PID: 19594 Comm: syz.1.4841 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 398.072111][T19594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 398.082185][T19594] Call Trace: [ 398.085482][T19594] [ 398.088434][T19594] dump_stack_lvl+0x241/0x360 [ 398.093143][T19594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 398.098371][T19594] ? __pfx__printk+0x10/0x10 [ 398.102987][T19594] ? __pfx_lock_release+0x10/0x10 [ 398.108044][T19594] should_fail_ex+0x3b0/0x4e0 [ 398.112752][T19594] _copy_from_iter+0x1f6/0x1960 [ 398.117623][T19594] ? __virt_addr_valid+0x183/0x530 [ 398.122935][T19594] ? __pfx_lock_release+0x10/0x10 [ 398.127982][T19594] ? __alloc_skb+0x28f/0x440 [ 398.132581][T19594] ? __pfx__copy_from_iter+0x10/0x10 [ 398.137879][T19594] ? __virt_addr_valid+0x183/0x530 [ 398.143027][T19594] ? __virt_addr_valid+0x183/0x530 [ 398.148153][T19594] ? __virt_addr_valid+0x45f/0x530 [ 398.153287][T19594] ? __check_object_size+0x49c/0x900 [ 398.158595][T19594] netlink_sendmsg+0x73d/0xcb0 [ 398.163395][T19594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.168715][T19594] ? __import_iovec+0x536/0x820 [ 398.173583][T19594] ? aa_sock_msg_perm+0x91/0x160 [ 398.178539][T19594] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 398.183841][T19594] ? security_socket_sendmsg+0x87/0xb0 [ 398.189327][T19594] ? __pfx_netlink_sendmsg+0x10/0x10 [ 398.194633][T19594] __sock_sendmsg+0x221/0x270 [ 398.199334][T19594] ____sys_sendmsg+0x525/0x7d0 [ 398.204124][T19594] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.209451][T19594] __sys_sendmsg+0x2b0/0x3a0 [ 398.214066][T19594] ? __pfx___sys_sendmsg+0x10/0x10 [ 398.219223][T19594] ? vfs_write+0x7c4/0xc90 [ 398.223692][T19594] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 398.230037][T19594] ? do_syscall_64+0x100/0x230 [ 398.234825][T19594] ? do_syscall_64+0xb6/0x230 [ 398.239531][T19594] do_syscall_64+0xf3/0x230 [ 398.244054][T19594] ? clear_bhb_loop+0x35/0x90 [ 398.248747][T19594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.254674][T19594] RIP: 0033:0x7f579c3779f9 [ 398.259101][T19594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 398.278735][T19594] RSP: 002b:00007f579d1b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.287262][T19594] RAX: ffffffffffffffda RBX: 00007f579c505f80 RCX: 00007f579c3779f9 [ 398.295347][T19594] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 398.303343][T19594] RBP: 00007f579d1b9090 R08: 0000000000000000 R09: 0000000000000000 [ 398.311335][T19594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.319328][T19594] R13: 0000000000000000 R14: 00007f579c505f80 R15: 00007fff7e2f1648 [ 398.327339][T19594] [ 398.679779][T19618] ebtables: ebtables: counters copy to user failed while replacing table [ 398.740277][T19625] SET target dimension over the limit! [ 399.277774][T19653] FAULT_INJECTION: forcing a failure. [ 399.277774][T19653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 399.294834][T19653] CPU: 0 UID: 0 PID: 19653 Comm: syz.3.4860 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 399.305641][T19653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 399.315715][T19653] Call Trace: [ 399.319014][T19653] [ 399.321961][T19653] dump_stack_lvl+0x241/0x360 [ 399.326668][T19653] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.331888][T19653] ? __pfx__printk+0x10/0x10 [ 399.336498][T19653] ? __pfx_lock_release+0x10/0x10 [ 399.341539][T19653] should_fail_ex+0x3b0/0x4e0 [ 399.346222][T19653] _copy_from_user+0x2f/0xe0 [ 399.350807][T19653] copy_msghdr_from_user+0xae/0x680 [ 399.356005][T19653] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 399.361819][T19653] __sys_sendmsg+0x23d/0x3a0 [ 399.366401][T19653] ? __pfx___sys_sendmsg+0x10/0x10 [ 399.371503][T19653] ? vfs_write+0x7c4/0xc90 [ 399.375944][T19653] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 399.382267][T19653] ? do_syscall_64+0x100/0x230 [ 399.387036][T19653] ? do_syscall_64+0xb6/0x230 [ 399.391708][T19653] do_syscall_64+0xf3/0x230 [ 399.396210][T19653] ? clear_bhb_loop+0x35/0x90 [ 399.400883][T19653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.406774][T19653] RIP: 0033:0x7fb7935779f9 [ 399.411182][T19653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.430792][T19653] RSP: 002b:00007fb79442b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.439205][T19653] RAX: ffffffffffffffda RBX: 00007fb793705f80 RCX: 00007fb7935779f9 [ 399.447165][T19653] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 399.455126][T19653] RBP: 00007fb79442b090 R08: 0000000000000000 R09: 0000000000000000 [ 399.463171][T19653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.471131][T19653] R13: 0000000000000000 R14: 00007fb793705f80 R15: 00007ffed1796fb8 [ 399.479105][T19653] [ 399.535456][T19656] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.553379][T19656] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.560676][T19656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.858725][T19681] tipc: Enabled bearer , priority 10 [ 399.872314][T19683] FAULT_INJECTION: forcing a failure. [ 399.872314][T19683] name failslab, interval 1, probability 0, space 0, times 0 [ 399.903316][T19683] CPU: 1 UID: 0 PID: 19683 Comm: syz.3.4868 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 399.914221][T19683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 399.924302][T19683] Call Trace: [ 399.927588][T19683] [ 399.930502][T19683] dump_stack_lvl+0x241/0x360 [ 399.935185][T19683] ? __pfx_dump_stack_lvl+0x10/0x10 [ 399.940407][T19683] ? __pfx__printk+0x10/0x10 [ 399.945026][T19683] ? ref_tracker_alloc+0x332/0x490 [ 399.950157][T19683] should_fail_ex+0x3b0/0x4e0 [ 399.954866][T19683] ? skb_clone+0x20c/0x390 [ 399.959304][T19683] should_failslab+0xac/0x100 [ 399.964463][T19683] ? skb_clone+0x20c/0x390 [ 399.969487][T19683] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 399.975054][T19683] skb_clone+0x20c/0x390 [ 399.979495][T19683] __netlink_deliver_tap+0x3cc/0x7c0 [ 399.984837][T19683] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.990046][T19683] netlink_deliver_tap+0x19d/0x1b0 [ 399.995168][T19683] netlink_unicast+0x7be/0x990 [ 399.999938][T19683] ? __pfx_netlink_unicast+0x10/0x10 [ 400.005253][T19683] ? __virt_addr_valid+0x183/0x530 [ 400.010366][T19683] ? __check_object_size+0x49c/0x900 [ 400.015646][T19683] ? bpf_lsm_netlink_send+0x9/0x10 [ 400.020754][T19683] netlink_sendmsg+0x8e4/0xcb0 [ 400.025523][T19683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.030814][T19683] ? __import_iovec+0x536/0x820 [ 400.035656][T19683] ? aa_sock_msg_perm+0x91/0x160 [ 400.040582][T19683] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 400.045861][T19683] ? security_socket_sendmsg+0x87/0xb0 [ 400.051314][T19683] ? __pfx_netlink_sendmsg+0x10/0x10 [ 400.056593][T19683] __sock_sendmsg+0x221/0x270 [ 400.061265][T19683] ____sys_sendmsg+0x525/0x7d0 [ 400.066024][T19683] ? __pfx_____sys_sendmsg+0x10/0x10 [ 400.071312][T19683] __sys_sendmsg+0x2b0/0x3a0 [ 400.075893][T19683] ? __pfx___sys_sendmsg+0x10/0x10 [ 400.080992][T19683] ? vfs_write+0x7c4/0xc90 [ 400.086042][T19683] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 400.092551][T19683] ? do_syscall_64+0x100/0x230 [ 400.097307][T19683] ? do_syscall_64+0xb6/0x230 [ 400.101979][T19683] do_syscall_64+0xf3/0x230 [ 400.106485][T19683] ? clear_bhb_loop+0x35/0x90 [ 400.111154][T19683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.117130][T19683] RIP: 0033:0x7fb7935779f9 [ 400.121534][T19683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 400.141225][T19683] RSP: 002b:00007fb79442b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 400.149630][T19683] RAX: ffffffffffffffda RBX: 00007fb793705f80 RCX: 00007fb7935779f9 [ 400.157766][T19683] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 400.165730][T19683] RBP: 00007fb79442b090 R08: 0000000000000000 R09: 0000000000000000 [ 400.173689][T19683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.181649][T19683] R13: 0000000000000000 R14: 00007fb793705f80 R15: 00007ffed1796fb8 [ 400.189626][T19683] [ 400.253853][T19683] __nla_validate_parse: 17 callbacks suppressed [ 400.253873][T19683] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4868'. [ 400.254678][T19690] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4871'. [ 400.263654][T19683] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4868'. [ 400.292662][T19692] dccp_v4_rcv: dropped packet with invalid checksum [ 400.507432][T19704] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4875'. [ 400.721800][T19709] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4877'. [ 400.754419][T19709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4877'. [ 400.802220][T19709] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.862893][T19709] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.923634][T19713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4879'. [ 401.504687][T19735] dccp_v4_rcv: dropped packet with invalid checksum [ 401.869729][T19746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.927976][T19750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.994743][T19756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4889'. [ 402.229645][T19769] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4894'. [ 402.338654][T19775] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4896'. [ 402.347832][T19774] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 402.941533][T19804] x_tables: ip_tables: ah match: only valid for protocol 51 [ 403.103149][T19806] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 403.171689][T19812] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 403.404947][T19829] dccp_v4_rcv: dropped packet with invalid checksum [ 403.500913][T19822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.844727][T19853] netlink: 'syz.2.4925': attribute type 1 has an invalid length. [ 404.000794][T19866] x_tables: ip_tables: ah match: only valid for protocol 51 [ 404.012682][T19867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.106431][T19870] dccp_v4_rcv: dropped packet with invalid checksum [ 404.328933][T19884] SET target dimension over the limit! [ 404.385728][T19886] xt_NFQUEUE: number of total queues is 0 [ 404.535120][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 404.625433][T19900] dccp_v4_rcv: dropped packet with invalid checksum [ 405.147961][T19934] netlink: 'syz.2.4954': attribute type 1 has an invalid length. [ 405.157222][T19938] dccp_v4_rcv: dropped packet with invalid checksum [ 405.499766][T19956] __nla_validate_parse: 9 callbacks suppressed [ 405.499790][T19956] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4962'. [ 405.546756][T19958] SET target dimension over the limit! [ 405.830473][T19973] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4970'. [ 405.871747][T19973] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4970'. [ 405.910473][T19976] netlink: 'syz.0.4971': attribute type 2 has an invalid length. [ 405.961802][T19976] netlink: 'syz.0.4971': attribute type 1 has an invalid length. [ 406.125883][T19987] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4974'. [ 406.321569][T20002] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4977'. [ 406.970656][T20029] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4988'. [ 407.007330][T20030] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4987'. [ 407.253745][T20044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4991'. [ 407.339524][T20049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4991'. [ 407.379657][T20052] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 407.868683][T20077] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5001'. [ 408.734719][T20103] ebtables: ebtables: counters copy to user failed while replacing table [ 408.799097][T20113] x_tables: duplicate underflow at hook 2 [ 409.153412][T20130] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 409.175878][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 409.306788][T20141] (unnamed net_device) (uninitialized): option ad_select: invalid value (36) [ 409.512523][T20153] FAULT_INJECTION: forcing a failure. [ 409.512523][T20153] name failslab, interval 1, probability 0, space 0, times 0 [ 409.542110][T20153] CPU: 0 UID: 0 PID: 20153 Comm: syz.1.5027 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 409.552935][T20153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 409.563277][T20153] Call Trace: [ 409.566586][T20153] [ 409.569535][T20153] dump_stack_lvl+0x241/0x360 [ 409.574253][T20153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.579467][T20153] ? __pfx__printk+0x10/0x10 [ 409.584058][T20153] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 409.589519][T20153] ? __pfx___might_resched+0x10/0x10 [ 409.594807][T20153] should_fail_ex+0x3b0/0x4e0 [ 409.599535][T20153] should_failslab+0xac/0x100 [ 409.604219][T20153] ? netlbl_mgmt_add_common+0x57/0x1320 [ 409.609758][T20153] __kmalloc_cache_noprof+0x6c/0x2c0 [ 409.615044][T20153] netlbl_mgmt_add_common+0x57/0x1320 [ 409.620415][T20153] ? apparmor_current_getsecid_subj+0xde/0x1b0 [ 409.626562][T20153] ? end_current_label_crit_section+0x14e/0x180 [ 409.632798][T20153] netlbl_mgmt_adddef+0x2e2/0x370 [ 409.637833][T20153] ? __nla_parse+0x40/0x60 [ 409.642244][T20153] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 409.647801][T20153] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 409.654176][T20153] genl_rcv_msg+0xb14/0xec0 [ 409.658686][T20153] ? mark_lock+0x9a/0x350 [ 409.663052][T20153] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.668121][T20153] ? __pfx_lock_acquire+0x10/0x10 [ 409.673168][T20153] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 409.678716][T20153] ? __pfx___might_resched+0x10/0x10 [ 409.684015][T20153] netlink_rcv_skb+0x1e3/0x430 [ 409.688782][T20153] ? __pfx_genl_rcv_msg+0x10/0x10 [ 409.693805][T20153] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 409.699117][T20153] genl_rcv+0x28/0x40 [ 409.703111][T20153] netlink_unicast+0x7f0/0x990 [ 409.707895][T20153] ? __pfx_netlink_unicast+0x10/0x10 [ 409.713185][T20153] ? __virt_addr_valid+0x183/0x530 [ 409.718331][T20153] ? __check_object_size+0x49c/0x900 [ 409.723652][T20153] ? bpf_lsm_netlink_send+0x9/0x10 [ 409.728776][T20153] netlink_sendmsg+0x8e4/0xcb0 [ 409.733564][T20153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.738881][T20153] ? __import_iovec+0x536/0x820 [ 409.743735][T20153] ? aa_sock_msg_perm+0x91/0x160 [ 409.748671][T20153] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 409.753962][T20153] ? security_socket_sendmsg+0x87/0xb0 [ 409.759425][T20153] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.764710][T20153] __sock_sendmsg+0x221/0x270 [ 409.769389][T20153] ____sys_sendmsg+0x525/0x7d0 [ 409.774154][T20153] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.779445][T20153] __sys_sendmsg+0x2b0/0x3a0 [ 409.784028][T20153] ? __pfx___sys_sendmsg+0x10/0x10 [ 409.789216][T20153] ? vfs_write+0x7c4/0xc90 [ 409.793677][T20153] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 409.800014][T20153] ? do_syscall_64+0x100/0x230 [ 409.804783][T20153] ? do_syscall_64+0xb6/0x230 [ 409.809460][T20153] do_syscall_64+0xf3/0x230 [ 409.814046][T20153] ? clear_bhb_loop+0x35/0x90 [ 409.818739][T20153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.824641][T20153] RIP: 0033:0x7f579c3779f9 [ 409.830111][T20153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.849759][T20153] RSP: 002b:00007f579d1b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.858177][T20153] RAX: ffffffffffffffda RBX: 00007f579c505f80 RCX: 00007f579c3779f9 [ 409.866145][T20153] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 409.874194][T20153] RBP: 00007f579d1b9090 R08: 0000000000000000 R09: 0000000000000000 [ 409.882157][T20153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.890205][T20153] R13: 0000000000000000 R14: 00007f579c505f80 R15: 00007fff7e2f1648 [ 409.898464][T20153] [ 409.974185][ T5284] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 410.156314][T20174] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:19996 [ 410.204750][T20174] netlink: 'syz.4.5032': attribute type 1 has an invalid length. [ 410.372914][T20191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.648779][T20202] pim6reg1: entered promiscuous mode [ 410.655052][T20202] pim6reg1: entered allmulticast mode [ 410.681179][T20208] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 410.694929][T20202] __nla_validate_parse: 17 callbacks suppressed [ 410.694951][T20202] netlink: 165 bytes leftover after parsing attributes in process `syz.3.5040'. [ 410.728331][T20209] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5045'. [ 410.767384][T20209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5045'. [ 410.784566][T20209] FAULT_INJECTION: forcing a failure. [ 410.784566][T20209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.800503][T20209] CPU: 0 UID: 0 PID: 20209 Comm: syz.2.5045 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 410.811310][T20209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 410.821393][T20209] Call Trace: [ 410.824689][T20209] [ 410.827656][T20209] dump_stack_lvl+0x241/0x360 [ 410.832368][T20209] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.838209][T20209] ? __pfx__printk+0x10/0x10 [ 410.842841][T20209] ? __pfx_lock_release+0x10/0x10 [ 410.847906][T20209] ? __lock_acquire+0x137a/0x2040 [ 410.852974][T20209] should_fail_ex+0x3b0/0x4e0 [ 410.857688][T20209] _copy_from_user+0x2f/0xe0 [ 410.862303][T20209] kstrtouint_from_user+0xc6/0x190 [ 410.867446][T20209] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 410.873195][T20209] ? __pfx_lock_acquire+0x10/0x10 [ 410.878252][T20209] proc_fail_nth_write+0xaa/0x2d0 [ 410.883299][T20209] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 410.889218][T20209] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 410.894891][T20209] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 410.900652][T20209] vfs_write+0x2a2/0xc90 [ 410.904940][T20209] ? __pfx_vfs_write+0x10/0x10 [ 410.909814][T20209] ? __fget_files+0x29/0x470 [ 410.914445][T20209] ? __fget_files+0x3f6/0x470 [ 410.919165][T20209] ksys_write+0x1a0/0x2c0 [ 410.923529][T20209] ? __pfx_ksys_write+0x10/0x10 [ 410.928403][T20209] ? do_syscall_64+0x100/0x230 [ 410.933191][T20209] ? do_syscall_64+0xb6/0x230 [ 410.937895][T20209] do_syscall_64+0xf3/0x230 [ 410.942511][T20209] ? clear_bhb_loop+0x35/0x90 [ 410.947207][T20209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.953133][T20209] RIP: 0033:0x7f7e483764df [ 410.957643][T20209] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8d 02 00 48 [ 410.978314][T20209] RSP: 002b:00007f7e491d0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 410.987366][T20209] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7e483764df [ 410.995359][T20209] RDX: 0000000000000001 RSI: 00007f7e491d00a0 RDI: 0000000000000007 [ 411.003432][T20209] RBP: 00007f7e491d0090 R08: 0000000000000000 R09: 0000000000000000 [ 411.011612][T20209] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 411.019691][T20209] R13: 0000000000000000 R14: 00007f7e48505f80 R15: 00007ffde124bab8 [ 411.027703][T20209] [ 411.366319][T20224] ebtables: ebtables: counters copy to user failed while replacing table [ 411.465321][T20235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5052'. [ 411.928151][T20248] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5057'. [ 411.987380][ T5234] Bluetooth: hci4: command 0x0406 tx timeout [ 412.113490][T20261] macvlan0: entered allmulticast mode [ 412.124961][T20261] veth1_vlan: entered allmulticast mode [ 412.204812][T20261] veth1_vlan: left allmulticast mode [ 412.263863][T20269] netlink: 'syz.1.5062': attribute type 16 has an invalid length. [ 412.281675][T20269] netlink: 'syz.1.5062': attribute type 3 has an invalid length. [ 412.313418][T20269] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.5062'. [ 412.366428][T20261] macvlan0 (unregistering): left allmulticast mode [ 412.569927][T20288] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5073'. [ 412.584419][T20288] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5073'. [ 412.626481][T20293] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5072'. [ 412.661183][T20294] netlink: 'syz.1.5075': attribute type 1 has an invalid length. [ 412.749869][T20301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5077'. [ 412.888510][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 413.395997][T20334] IPVS: length: 178 != 8 [ 413.857935][T20355] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 413.900241][T20355] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 414.438090][T20376] block nbd0: not configured, cannot reconfigure [ 414.566755][T20382] tap0: tun_chr_ioctl cmd 1074025677 [ 414.572515][T20382] tap0: linktype set to 825 [ 414.582967][T20384] tap0: tun_chr_ioctl cmd 1074025681 [ 414.600110][T20387] SET target dimension over the limit! [ 414.615579][T20384] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 414.709142][T20391] lo: entered promiscuous mode [ 414.718583][T20391] lo: entered allmulticast mode [ 414.727586][T20391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 414.758870][T20396] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 414.862094][T20400] bridge0: port 2(bridge_slave_1) entered listening state [ 414.891851][T20398] x_tables: duplicate underflow at hook 2 [ 415.370183][T20428] dccp_v4_rcv: dropped packet with invalid checksum [ 415.717301][T20448] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.748196][T20448] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.755408][T20448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.798809][T20455] __nla_validate_parse: 15 callbacks suppressed [ 415.798829][T20455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5138'. [ 416.013322][T20462] bridge_slave_0: entered allmulticast mode [ 416.039376][T20467] bridge_slave_0: left allmulticast mode [ 416.170520][T20462] netlink: 'syz.0.5141': attribute type 2 has an invalid length. [ 416.287769][T20470] netlink: 'syz.3.5144': attribute type 3 has an invalid length. [ 416.297846][T20470] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5144'. [ 416.301246][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5145'. [ 416.331601][T20473] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5142'. [ 416.655846][T20496] FAULT_INJECTION: forcing a failure. [ 416.655846][T20496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.689583][T20496] CPU: 1 UID: 0 PID: 20496 Comm: syz.0.5151 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 416.700394][T20496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 416.711516][T20496] Call Trace: [ 416.714815][T20496] [ 416.717763][T20496] dump_stack_lvl+0x241/0x360 [ 416.722478][T20496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.727708][T20496] ? __pfx__printk+0x10/0x10 [ 416.732322][T20496] ? __pfx_lock_release+0x10/0x10 [ 416.737395][T20496] should_fail_ex+0x3b0/0x4e0 [ 416.742095][T20496] _copy_from_iter+0x1f6/0x1960 [ 416.746961][T20496] ? __virt_addr_valid+0x183/0x530 [ 416.752097][T20496] ? __pfx_lock_release+0x10/0x10 [ 416.757157][T20496] ? __alloc_skb+0x28f/0x440 [ 416.761771][T20496] ? __pfx__copy_from_iter+0x10/0x10 [ 416.767086][T20496] ? __virt_addr_valid+0x183/0x530 [ 416.772226][T20496] ? __virt_addr_valid+0x183/0x530 [ 416.777352][T20496] ? __virt_addr_valid+0x45f/0x530 [ 416.782500][T20496] ? __check_object_size+0x49c/0x900 [ 416.787805][T20496] netlink_sendmsg+0x73d/0xcb0 [ 416.792609][T20496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.797895][T20496] ? __import_iovec+0x536/0x820 [ 416.802754][T20496] ? aa_sock_msg_perm+0x91/0x160 [ 416.807707][T20496] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 416.813000][T20496] ? security_socket_sendmsg+0x87/0xb0 [ 416.818469][T20496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.823755][T20496] __sock_sendmsg+0x221/0x270 [ 416.829239][T20496] ____sys_sendmsg+0x525/0x7d0 [ 416.834208][T20496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.839511][T20496] __sys_sendmsg+0x2b0/0x3a0 [ 416.844128][T20496] ? __pfx___sys_sendmsg+0x10/0x10 [ 416.849244][T20496] ? vfs_write+0x7c4/0xc90 [ 416.853700][T20496] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 416.860032][T20496] ? do_syscall_64+0x100/0x230 [ 416.864797][T20496] ? do_syscall_64+0xb6/0x230 [ 416.869573][T20496] do_syscall_64+0xf3/0x230 [ 416.874090][T20496] ? clear_bhb_loop+0x35/0x90 [ 416.878772][T20496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.884673][T20496] RIP: 0033:0x7f60c63779f9 [ 416.889100][T20496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.908704][T20496] RSP: 002b:00007f60c7120038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.917378][T20496] RAX: ffffffffffffffda RBX: 00007f60c6505f80 RCX: 00007f60c63779f9 [ 416.925342][T20496] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 416.933300][T20496] RBP: 00007f60c7120090 R08: 0000000000000000 R09: 0000000000000000 [ 416.941273][T20496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.949333][T20496] R13: 0000000000000000 R14: 00007f60c6505f80 R15: 00007ffd8f2fcb68 [ 416.957327][T20496] [ 417.152830][T20513] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.161687][T20513] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.170446][T20513] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.179214][T20513] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.232450][T20513] vxlan0: entered promiscuous mode [ 417.237701][T20513] vxlan0: entered allmulticast mode [ 417.321091][T20513] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.330791][T20513] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.340130][T20513] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.349090][T20513] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.385072][T20520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5161'. [ 417.550165][T20527] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.559463][T20527] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.568757][T20527] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.579582][T20527] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.607394][T20527] vxlan0: entered promiscuous mode [ 417.614631][T20527] vxlan0: entered allmulticast mode [ 417.667976][T20530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5164'. [ 417.818185][T20545] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5171'. [ 417.849465][T20545] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5171'. [ 417.874907][T20548] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 417.890168][T20545] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.972459][T20544] ebtables: ebtables: counters copy to user failed while replacing table [ 417.981554][T20552] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5173'. [ 417.981582][T20552] netlink: 'syz.3.5173': attribute type 1 has an invalid length. [ 417.981596][T20552] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5173'. [ 418.189765][T20566] FAULT_INJECTION: forcing a failure. [ 418.189765][T20566] name failslab, interval 1, probability 0, space 0, times 0 [ 418.205733][T20566] CPU: 0 UID: 0 PID: 20566 Comm: syz.0.5179 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 418.216533][T20566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 418.226613][T20566] Call Trace: [ 418.229901][T20566] [ 418.232828][T20566] dump_stack_lvl+0x241/0x360 [ 418.237518][T20566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.242718][T20566] ? __pfx__printk+0x10/0x10 [ 418.247309][T20566] ? ref_tracker_alloc+0x332/0x490 [ 418.252443][T20566] should_fail_ex+0x3b0/0x4e0 [ 418.257125][T20566] ? skb_clone+0x20c/0x390 [ 418.261538][T20566] should_failslab+0xac/0x100 [ 418.266233][T20566] ? skb_clone+0x20c/0x390 [ 418.270641][T20566] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 418.276009][T20566] skb_clone+0x20c/0x390 [ 418.280249][T20566] __netlink_deliver_tap+0x3cc/0x7c0 [ 418.285543][T20566] ? netlink_deliver_tap+0x2e/0x1b0 [ 418.290738][T20566] netlink_deliver_tap+0x19d/0x1b0 [ 418.295846][T20566] netlink_unicast+0x7be/0x990 [ 418.300613][T20566] ? __pfx_netlink_unicast+0x10/0x10 [ 418.305891][T20566] ? __virt_addr_valid+0x183/0x530 [ 418.310994][T20566] ? __check_object_size+0x49c/0x900 [ 418.316270][T20566] ? bpf_lsm_netlink_send+0x9/0x10 [ 418.321380][T20566] netlink_sendmsg+0x8e4/0xcb0 [ 418.326158][T20566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.331441][T20566] ? __import_iovec+0x536/0x820 [ 418.336285][T20566] ? aa_sock_msg_perm+0x91/0x160 [ 418.341217][T20566] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 418.346499][T20566] ? security_socket_sendmsg+0x87/0xb0 [ 418.351957][T20566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.357238][T20566] __sock_sendmsg+0x221/0x270 [ 418.361914][T20566] ____sys_sendmsg+0x525/0x7d0 [ 418.366677][T20566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.371964][T20566] __sys_sendmsg+0x2b0/0x3a0 [ 418.376549][T20566] ? __pfx___sys_sendmsg+0x10/0x10 [ 418.381959][T20566] ? vfs_write+0x7c4/0xc90 [ 418.386408][T20566] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 418.392732][T20566] ? do_syscall_64+0x100/0x230 [ 418.397495][T20566] ? do_syscall_64+0xb6/0x230 [ 418.402170][T20566] do_syscall_64+0xf3/0x230 [ 418.406669][T20566] ? clear_bhb_loop+0x35/0x90 [ 418.411336][T20566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.417226][T20566] RIP: 0033:0x7f60c63779f9 [ 418.421632][T20566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.441230][T20566] RSP: 002b:00007f60c7120038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.449641][T20566] RAX: ffffffffffffffda RBX: 00007f60c6505f80 RCX: 00007f60c63779f9 [ 418.457608][T20566] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 418.465572][T20566] RBP: 00007f60c7120090 R08: 0000000000000000 R09: 0000000000000000 [ 418.473530][T20566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.481500][T20566] R13: 0000000000000000 R14: 00007f60c6505f80 R15: 00007ffd8f2fcb68 [ 418.489475][T20566] [ 418.784500][T20581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.862040][T20582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.885579][T20582] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 418.967784][T20595] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 419.260682][T20602] ebtables: ebtables: counters copy to user failed while replacing table [ 419.806995][T20641] netlink: 'syz.0.5203': attribute type 10 has an invalid length. [ 419.831973][T20641] team0: Device ipvlan1 failed to register rx_handler [ 420.106625][T20657] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 420.120524][T20658] SET target dimension over the limit! [ 420.167658][T20660] sctp: [Deprecated]: syz.1.5209 (pid 20660) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.167658][T20660] Use struct sctp_sack_info instead [ 420.259187][T20667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.269805][T20669] lo: left promiscuous mode [ 420.278118][T20670] netlink: 'syz.0.5211': attribute type 1 has an invalid length. [ 420.286794][T20669] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.654019][T20678] ebtables: ebtables: counters copy to user failed while replacing table [ 420.856056][T20691] netlink: 'syz.4.5217': attribute type 30 has an invalid length. [ 420.884067][T20691] __nla_validate_parse: 8 callbacks suppressed [ 420.884088][T20691] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5217'. [ 421.161060][T20709] netlink: 'syz.2.5224': attribute type 6 has an invalid length. [ 421.425833][T20725] SET target dimension over the limit! [ 421.527967][T20729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.634986][T20736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5232'. [ 421.640124][T20737] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5233'. [ 421.877846][T20744] netlink: 'syz.2.5236': attribute type 1 has an invalid length. [ 421.953396][T20744] 8021q: adding VLAN 0 to HW filter on device bond1 [ 421.971826][T20745] vlan4: entered promiscuous mode [ 421.977176][T20745] bond1: entered promiscuous mode [ 421.982601][T20745] vlan4: entered allmulticast mode [ 421.988181][T20745] bond1: entered allmulticast mode [ 422.001866][T20750] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5238'. [ 422.041663][T20750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5238'. [ 422.123083][T20755] netlink: 'syz.4.5239': attribute type 6 has an invalid length. [ 422.368068][T20765] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 422.641258][T20773] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5246'. [ 422.663383][T20773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5246'. [ 422.937299][T20779] netlink: 188 bytes leftover after parsing attributes in process `syz.3.5249'. [ 422.984425][T20779] netlink: 'syz.3.5249': attribute type 1 has an invalid length. [ 423.016686][T20779] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5249'. [ 423.024954][T20781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5248'. [ 423.515805][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 423.539248][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 423.557314][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 423.567919][T20811] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:19996 [ 423.580606][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 423.607173][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 423.616289][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 424.212411][T20807] chnl_net:caif_netlink_parms(): no params data found [ 424.453509][T20846] IPVS: persistence engine module ip_vs_pe_si not found [ 424.473703][T20807] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.489995][T20807] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.503847][T20807] bridge_slave_0: entered allmulticast mode [ 424.515200][T20807] bridge_slave_0: entered promiscuous mode [ 424.533396][T20807] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.564664][T20807] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.572570][T20807] bridge_slave_1: entered allmulticast mode [ 424.594086][T20807] bridge_slave_1: entered promiscuous mode [ 424.623984][T20853] ebtables: ebtables: counters copy to user failed while replacing table [ 424.652709][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.659958][ T25] bridge0: port 2(bridge_slave_1) entered listening state [ 424.758887][T20807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 424.800627][T20807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.922652][T20807] team0: Port device team_slave_0 added [ 424.968733][T20807] team0: Port device team_slave_1 added [ 425.260844][T20807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.294421][T20807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.357104][T20807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.392847][T20807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.426102][T20807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.466401][T20895] netlink: 'syz.0.5281': attribute type 1 has an invalid length. [ 425.508070][T20807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.654770][ T5234] Bluetooth: hci5: command tx timeout [ 425.665518][T20906] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 425.669748][T20807] hsr_slave_0: entered promiscuous mode [ 425.694003][T20807] hsr_slave_1: entered promiscuous mode [ 425.711832][T20902] ebtables: ebtables: counters copy to user failed while replacing table [ 425.721214][T20807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.746238][T20807] Cannot create hsr debugfs directory [ 426.045135][T20916] __nla_validate_parse: 9 callbacks suppressed [ 426.045153][T20916] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5286'. [ 426.261978][T20920] netlink: 'syz.4.5288': attribute type 1 has an invalid length. [ 426.276933][T20807] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.532698][T20807] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.727472][T20807] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.892460][T20807] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.147265][T20807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.177702][T20807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 427.223784][T20807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.253328][T20807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 427.546559][T20807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.557945][T20950] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 427.600345][T20807] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.641461][T20950] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5294'. [ 427.673943][ T5313] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.681170][ T5313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.715505][ T5313] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.722698][ T5313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.735519][ T5234] Bluetooth: hci5: command tx timeout [ 427.879609][T20962] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5298'. [ 427.904686][T20962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5298'. [ 427.995995][T20953] tap0: tun_chr_ioctl cmd 1074025677 [ 428.001556][T20953] tap0: linktype set to 825 [ 428.421883][T20986] netlink: 'syz.4.5304': attribute type 10 has an invalid length. [ 428.464923][T20986] veth1_vlan: left allmulticast mode [ 428.549322][T20807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.589165][T20990] syzkaller1: entered promiscuous mode [ 428.602231][T20995] xt_socket: unknown flags 0x8 [ 428.618482][T20990] syzkaller1: entered allmulticast mode [ 428.803910][T21003] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5308'. [ 428.840737][T20807] veth0_vlan: entered promiscuous mode [ 428.881350][T20807] veth1_vlan: entered promiscuous mode [ 428.998253][T21008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5310'. [ 429.018579][T20807] veth0_macvtap: entered promiscuous mode [ 429.046852][T21009] netlink: 'syz.4.5311': attribute type 6 has an invalid length. [ 429.082678][T20807] veth1_macvtap: entered promiscuous mode [ 429.159702][T21016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5314'. [ 429.175247][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.195711][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.220388][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.256869][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.284631][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.307939][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.321964][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.333526][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.343655][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.354704][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.365416][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.387905][T21022] x_tables: duplicate underflow at hook 2 [ 429.395363][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.408247][T20807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.430674][T21022] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5316'. [ 429.447326][T21026] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5318'. [ 429.461694][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.500409][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.525173][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.548222][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.559494][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.570733][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.602558][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.613928][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.625119][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.636241][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.647308][T20807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.658936][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.671676][T20807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.680841][T21032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5321'. [ 429.699878][T20807] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.727536][T20807] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.757733][T20807] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.769652][T20807] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.815080][ T5234] Bluetooth: hci5: command tx timeout [ 429.833898][T21037] netlink: 'syz.3.5324': attribute type 1 has an invalid length. [ 429.908629][T21041] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:19996 [ 429.967269][T21041] netlink: 'syz.1.5325': attribute type 1 has an invalid length. [ 429.996781][ T7727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.025753][ T7727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.025903][T21045] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:19996 [ 430.074050][T20807] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: syzkaller0 [ 430.114188][T20807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.130975][T21045] netlink: 'syz.4.5326': attribute type 1 has an invalid length. [ 430.151611][T10101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.166800][T10101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.561100][T21052] netlink: 'syz.1.5329': attribute type 10 has an invalid length. [ 430.603867][T21052] team0: Failed to send options change via netlink (err -105) [ 430.622816][T21052] team0: Port device netdevsim0 added [ 430.864810][T21060] lo: entered allmulticast mode [ 430.869873][T21060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 431.568339][T21085] netlink: 'syz.1.5339': attribute type 6 has an invalid length. [ 431.632007][T21087] __nla_validate_parse: 4 callbacks suppressed [ 431.632028][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5340'. [ 431.947616][T21097] tap0: tun_chr_ioctl cmd 1074025677 [ 431.953790][T21097] tap0: linktype set to 825 [ 432.182471][T21101] wg2: entered promiscuous mode [ 432.191615][T21101] wg2: entered allmulticast mode [ 432.483807][T21117] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5352'. [ 432.562009][ T7727] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.581453][T21120] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 432.925240][T21129] netlink: 'syz.4.5357': attribute type 7 has an invalid length. [ 433.119650][T21138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5360'. [ 433.131991][T21140] bridge0: entered promiscuous mode [ 433.403429][T21154] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5365'. [ 433.414035][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 433.425499][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 433.435440][ T5241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 433.443529][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 433.452063][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 433.459509][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 433.521764][T21158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.844425][T21177] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5373'. [ 433.850038][ T7727] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.047620][ T7727] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.072538][T21139] bridge0: left promiscuous mode [ 434.278240][ T7727] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.340991][T21201] netlink: 'syz.3.5381': attribute type 1 has an invalid length. [ 434.366746][T21201] netlink: 'syz.3.5381': attribute type 1 has an invalid length. [ 434.367616][T21203] netlink: 'syz.4.5379': attribute type 6 has an invalid length. [ 434.385269][T21201] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.5381'. [ 434.408584][T21201] netlink: 'syz.3.5381': attribute type 1 has an invalid length. [ 434.573014][T21151] chnl_net:caif_netlink_parms(): no params data found [ 434.603309][T21216] IPVS: sh: TCP 172.20.20.170:0 - no destination available [ 434.703267][ T7727] bridge_slave_1: left allmulticast mode [ 434.727978][ T7727] bridge_slave_1: left promiscuous mode [ 434.746355][ T7727] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.770095][ T7727] bridge_slave_0: left allmulticast mode [ 434.786297][ T7727] bridge_slave_0: left promiscuous mode [ 434.801328][ T7727] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.827727][T21224] netlink: 'syz.1.5385': attribute type 20 has an invalid length. [ 434.844678][T21224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5385'. [ 434.933791][T21227] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5386'. [ 435.498933][ T5241] Bluetooth: hci5: command tx timeout [ 435.532203][ T7727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 435.545937][ T7727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 435.558206][ T7727] bond0 (unregistering): Released all slaves [ 435.583185][T21224] netlink: 'syz.1.5385': attribute type 7 has an invalid length. [ 435.591866][T21224] netlink: 'syz.1.5385': attribute type 39 has an invalid length. [ 435.636478][T21234] bridge0: port 3(batadv0) entered blocking state [ 435.657449][T21234] bridge0: port 3(batadv0) entered disabled state [ 435.677297][T21234] batadv0: entered allmulticast mode [ 435.928440][T21151] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.944889][T21151] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.966414][T21151] bridge_slave_0: entered allmulticast mode [ 435.974171][T21151] bridge_slave_0: entered promiscuous mode [ 436.000968][T21151] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.024825][T21151] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.040429][T21151] bridge_slave_1: entered allmulticast mode [ 436.055760][T21151] bridge_slave_1: entered promiscuous mode [ 436.103755][T10101] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 436.120213][T10101] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 436.149383][T21270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5397'. [ 436.236431][T21281] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.278112][T21151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.329267][T21151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.358964][ T7727] hsr_slave_0: left promiscuous mode [ 436.367213][ T7727] hsr_slave_1: left promiscuous mode [ 436.373358][ T7727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.388791][ T7727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.397444][ T7727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.404997][ T7727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.435485][ T7727] veth1_macvtap: left promiscuous mode [ 436.441028][ T7727] veth0_macvtap: left promiscuous mode [ 436.446863][ T7727] veth1_vlan: left promiscuous mode [ 436.452205][ T7727] veth0_vlan: left promiscuous mode [ 437.574855][ T5241] Bluetooth: hci5: command tx timeout [ 437.912154][ T7727] team0 (unregistering): Port device team_slave_1 removed [ 437.957157][ T7727] team0 (unregistering): Port device team_slave_0 removed [ 438.570559][T21294] 8021q: adding VLAN 0 to HW filter on device  [ 438.582019][T21294] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 438.661378][T21151] team0: Port device team_slave_0 added [ 438.673171][T21301] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5409'. [ 438.722981][T21151] team0: Port device team_slave_1 added [ 438.876132][T21151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.896398][T21151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.948588][T21151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.969932][T21151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.984153][T21151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.010950][T21151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.210227][T21310] mac80211_hwsim hwsim18 wlan0 (unregistering): left allmulticast mode [ 439.225762][T21310] team0: Failed to send port change of device macvlan2 via netlink (err -105) [ 439.281083][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 439.292578][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 439.302768][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 439.312782][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 439.321084][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 439.328717][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 439.349398][T21310] team0: Failed to send options change via netlink (err -105) [ 439.357608][T21310] team0: Failed to send port change of device macvlan2 via netlink (err -105) [ 439.367717][T21310] team0: Port device macvlan2 removed [ 439.401240][T21316] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5413'. [ 439.614038][T21329] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5415'. [ 439.649600][T21151] hsr_slave_0: entered promiscuous mode [ 439.655040][ T5234] Bluetooth: hci5: command tx timeout [ 439.665065][T21151] hsr_slave_1: entered promiscuous mode [ 439.677620][T21151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.696176][T21330] netlink: 'syz.3.5416': attribute type 1 has an invalid length. [ 439.701585][T21151] Cannot create hsr debugfs directory [ 439.714131][T21330] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5416'. [ 439.736144][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 439.997808][ T7727] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.025431][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5418'. [ 440.120840][ T7727] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.272219][ T7727] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.441869][ T7727] bond0: (slave netdevsim0): Releasing backup interface [ 440.471085][ T7727] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.528574][T21352] SET target dimension over the limit! [ 440.625747][T21357] sctp: [Deprecated]: syz.4.5421 (pid 21357) Use of int in maxseg socket option. [ 440.625747][T21357] Use struct sctp_assoc_value instead [ 440.647049][T21361] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5424'. [ 440.778000][T21368] netlink: 'syz.1.5426': attribute type 6 has an invalid length. [ 440.899984][T21320] chnl_net:caif_netlink_parms(): no params data found [ 441.083046][T21377] netlink: 'syz.3.5427': attribute type 1 has an invalid length. [ 441.091506][T21377] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5427'. [ 441.418417][ T5234] Bluetooth: hci6: command tx timeout [ 441.734514][ T5234] Bluetooth: hci5: command tx timeout [ 442.287161][ T7727] team0: Port device bond0 removed [ 442.293888][ T7727] bond0 (unregistering): Released all slaves [ 442.368156][T21393] tap0: tun_chr_ioctl cmd 1074025677 [ 442.384857][T21393] tap0: linktype set to 825 [ 442.402993][T21320] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.427891][T21320] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.462891][T21320] bridge_slave_0: entered allmulticast mode [ 442.482695][T21320] bridge_slave_0: entered promiscuous mode [ 442.566218][T21411] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5435'. [ 442.575945][T21320] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.583480][T21320] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.593746][T21320] bridge_slave_1: entered allmulticast mode [ 442.602969][T21320] bridge_slave_1: entered promiscuous mode [ 442.729621][T21415] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5436'. [ 442.796774][T21320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.969394][T21430] netlink: 'syz.1.5440': attribute type 1 has an invalid length. [ 442.984693][T21429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.013613][T21320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.067851][T21432] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5441'. [ 443.142279][T21320] team0: Port device team_slave_0 added [ 443.171991][T21151] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 443.201457][T21151] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 443.227796][T21320] team0: Port device team_slave_1 added [ 443.255745][ T7727] hsr_slave_0: left promiscuous mode [ 443.270204][ T7727] hsr_slave_1: left promiscuous mode [ 443.328233][ T7727] veth1_macvtap: left promiscuous mode [ 443.344604][ T7727] veth0_macvtap: left promiscuous mode [ 443.351469][ T7727] veth1_vlan: left promiscuous mode [ 443.362447][ T7727] veth0_vlan: left promiscuous mode [ 443.370328][T21435] ebtables: ebtables: counters copy to user failed while replacing table [ 443.494916][ T5234] Bluetooth: hci6: command tx timeout [ 444.703668][T21151] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.770289][T21151] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.838946][T21320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.874493][T21320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.929380][T21320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.948372][T21453] __nla_validate_parse: 1 callbacks suppressed [ 444.948393][T21453] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5446'. [ 444.988414][T21320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.009166][T21320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.052799][T21320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.069241][T21461] netlink: 'syz.3.5448': attribute type 1 has an invalid length. [ 445.078329][T21461] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5448'. [ 445.200300][T21320] hsr_slave_0: entered promiscuous mode [ 445.229024][T21320] hsr_slave_1: entered promiscuous mode [ 445.248516][T21465] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 445.453050][ T7727] IPVS: stop unused estimator thread 0... [ 445.477245][T21471] ebtables: ebtables: counters copy to user failed while replacing table [ 445.576461][ T5234] Bluetooth: hci6: command tx timeout [ 445.711226][T21479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5453'. [ 445.775852][T21482] x_tables: duplicate underflow at hook 2 [ 445.806906][T21482] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5454'. [ 445.840471][T21482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5454'. [ 445.940198][T21151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.075035][T21151] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.119103][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.126316][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.181992][T21494] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5459'. [ 446.218887][ T5313] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.226113][ T5313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.547250][T21508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5462'. [ 446.567514][T21504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.569216][T21510] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5460'. [ 446.601877][T21509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5462'. [ 446.753038][T21320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 446.764414][T21320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 446.777798][T21320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 446.789950][T21320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.859389][T21151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.963218][T21151] veth0_vlan: entered promiscuous mode [ 446.986476][T21151] veth1_vlan: entered promiscuous mode [ 447.014802][T21320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.055317][T21320] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.073972][T21151] veth0_macvtap: entered promiscuous mode [ 447.091218][ T5284] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.098408][ T5284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.123739][ T5313] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.130901][ T5313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.140855][T21151] veth1_macvtap: entered promiscuous mode [ 447.213075][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.241580][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.266317][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.286933][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.300123][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.311682][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.322723][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.333478][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.358253][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.396343][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.406522][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.425355][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.437354][T21151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.482221][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.502807][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.522324][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.535126][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.545356][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.558082][T21526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5465'. [ 447.563464][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.583845][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.594505][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.604926][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.615469][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.626026][T21151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.642661][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.654837][ T5234] Bluetooth: hci6: command tx timeout [ 447.663120][T21151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.682509][T21526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.704586][T21526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.712653][T21526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.720860][T21526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.790609][T21151] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.811048][T21151] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.839042][T21151] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.857780][T21151] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.957370][T21320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.029225][T21539] SET target dimension over the limit! [ 448.163432][ T7742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.209415][ T7742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.255879][T21151] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: syzkaller0 [ 448.285204][T21151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 448.326234][ T7742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.337096][ T7742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.433771][T21320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.515857][T21558] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.631502][T21560] FAULT_INJECTION: forcing a failure. [ 448.631502][T21560] name failslab, interval 1, probability 0, space 0, times 0 [ 448.682731][T21560] CPU: 1 UID: 0 PID: 21560 Comm: syz.1.5477 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 448.693542][T21560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 448.703624][T21560] Call Trace: [ 448.706917][T21560] [ 448.709851][T21560] dump_stack_lvl+0x241/0x360 [ 448.714541][T21560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 448.719741][T21560] ? __pfx__printk+0x10/0x10 [ 448.724335][T21560] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 448.730848][T21560] ? __pfx___might_resched+0x10/0x10 [ 448.736144][T21560] should_fail_ex+0x3b0/0x4e0 [ 448.740907][T21560] should_failslab+0xac/0x100 [ 448.745586][T21560] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 448.751907][T21560] ? alloc_vfsmnt+0xeb/0x4d0 [ 448.756498][T21560] kstrdup+0x3a/0x80 [ 448.760392][T21560] alloc_vfsmnt+0xeb/0x4d0 [ 448.764805][T21560] clone_mnt+0x6b/0xc80 [ 448.768953][T21560] ? do_raw_spin_unlock+0x13c/0x8b0 [ 448.774144][T21560] ? attach_mnt+0x4ed/0x600 [ 448.778642][T21560] copy_tree+0x3f5/0x830 [ 448.782884][T21560] ? copy_mnt_ns+0x178/0x840 [ 448.787472][T21560] copy_mnt_ns+0x178/0x840 [ 448.791970][T21560] ? create_new_namespaces+0x34/0x7b0 [ 448.797423][T21560] ? rcu_is_watching+0x15/0xb0 [ 448.802189][T21560] ? create_new_namespaces+0x34/0x7b0 [ 448.807568][T21560] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 448.813202][T21560] create_new_namespaces+0xd3/0x7b0 [ 448.818403][T21560] ? bpf_lsm_capable+0x9/0x10 [ 448.823077][T21560] ? security_capable+0x90/0xb0 [ 448.828992][T21560] unshare_nsproxy_namespaces+0x124/0x180 [ 448.834728][T21560] ksys_unshare+0x619/0xc10 [ 448.839254][T21560] ? __pfx_ksys_unshare+0x10/0x10 [ 448.844281][T21560] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 448.850278][T21560] ? do_syscall_64+0x100/0x230 [ 448.855058][T21560] __x64_sys_unshare+0x38/0x40 [ 448.859836][T21560] do_syscall_64+0xf3/0x230 [ 448.864354][T21560] ? clear_bhb_loop+0x35/0x90 [ 448.869060][T21560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.874967][T21560] RIP: 0033:0x7f579c3779f9 [ 448.879378][T21560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.898980][T21560] RSP: 002b:00007f579d1b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 448.907394][T21560] RAX: ffffffffffffffda RBX: 00007f579c505f80 RCX: 00007f579c3779f9 [ 448.915361][T21560] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c020400 [ 448.923407][T21560] RBP: 00007f579d1b9090 R08: 0000000000000000 R09: 0000000000000000 [ 448.931395][T21560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 448.939382][T21560] R13: 0000000000000000 R14: 00007f579c505f80 R15: 00007fff7e2f1648 [ 448.948434][T21560] [ 449.062074][T21320] veth0_vlan: entered promiscuous mode [ 449.121076][T21571] netlink: 'syz.1.5481': attribute type 1 has an invalid length. [ 449.133742][T21320] veth1_vlan: entered promiscuous mode [ 449.243939][T21320] veth0_macvtap: entered promiscuous mode [ 449.282885][T21320] veth1_macvtap: entered promiscuous mode [ 449.347015][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.359485][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.371237][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.391956][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.422573][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.440178][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.450311][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.461118][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.476381][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.487254][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.497319][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.508344][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.540334][T21591] x_tables: duplicate underflow at hook 2 [ 449.559087][T21320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.612451][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.654837][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.674709][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.699134][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.715423][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.746616][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.771265][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.804203][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.820993][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.856669][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.894765][T21320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.906028][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.917373][T21320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.942926][T21320] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.966990][T21320] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.977707][T21320] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.988375][T21320] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.115458][T21607] SET target dimension over the limit! [ 450.128958][ T7742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.152491][ T7742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.202305][T21320] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: syzkaller0 [ 450.244543][T21320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.285371][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.294207][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.318092][T21616] __nla_validate_parse: 10 callbacks suppressed [ 450.318114][T21616] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5492'. [ 450.598206][T21628] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5496'. [ 450.782361][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.287002][ T5241] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 451.297478][ T5241] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 451.306862][ T5241] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 451.338886][ T5241] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 451.347737][ T5241] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 451.360971][ T5241] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 451.438760][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.553735][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.634661][T21658] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5506'. [ 451.676709][T21669] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5510'. [ 451.713635][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.749720][T21672] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5511'. [ 451.952581][T21680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5512'. [ 451.966518][T21677] netlink: 'syz.3.5513': attribute type 1 has an invalid length. [ 451.992985][T21680] gtp1: entered promiscuous mode [ 452.004493][T21677] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5513'. [ 452.026435][T21680] gtp1: entered allmulticast mode [ 452.060133][ T11] bridge_slave_1: left allmulticast mode [ 452.075953][ T11] bridge_slave_1: left promiscuous mode [ 452.081733][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.139554][ T11] bridge_slave_0: left allmulticast mode [ 452.159005][ T11] bridge_slave_0: left promiscuous mode [ 452.176203][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.286320][T21686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5516'. [ 452.607563][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 452.622323][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 452.632149][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 452.671588][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 452.682124][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 452.689765][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 452.908811][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.921719][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.932938][ T11] bond0 (unregistering): Released all slaves [ 452.954927][T21684] lo: left allmulticast mode [ 452.960041][T21684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.983814][T21696] tap0: tun_chr_ioctl cmd 1074025677 [ 452.994401][T21696] tap0: linktype set to 825 [ 453.318939][T21710] FAULT_INJECTION: forcing a failure. [ 453.318939][T21710] name failslab, interval 1, probability 0, space 0, times 0 [ 453.337507][T21710] CPU: 0 UID: 0 PID: 21710 Comm: syz.1.5522 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 453.348310][T21710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 453.358393][T21710] Call Trace: [ 453.361699][T21710] [ 453.364644][T21710] dump_stack_lvl+0x241/0x360 [ 453.369347][T21710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.374573][T21710] ? __pfx__printk+0x10/0x10 [ 453.379190][T21710] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 453.385764][T21710] ? __pfx___might_resched+0x10/0x10 [ 453.391083][T21710] should_fail_ex+0x3b0/0x4e0 [ 453.395800][T21710] should_failslab+0xac/0x100 [ 453.400515][T21710] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 453.406872][T21710] ? alloc_vfsmnt+0xeb/0x4d0 [ 453.411498][T21710] kstrdup+0x3a/0x80 [ 453.415515][T21710] alloc_vfsmnt+0xeb/0x4d0 [ 453.419964][T21710] clone_mnt+0x6b/0xc80 [ 453.423393][T21713] netlink: 324 bytes leftover after parsing attributes in process `syz.3.5520'. [ 453.424125][T21710] ? do_raw_spin_unlock+0x13c/0x8b0 [ 453.438374][T21710] ? attach_mnt+0x4ed/0x600 [ 453.442914][T21710] copy_tree+0x3f5/0x830 [ 453.447188][T21710] ? copy_mnt_ns+0x178/0x840 [ 453.451809][T21710] copy_mnt_ns+0x178/0x840 [ 453.456247][T21710] ? create_new_namespaces+0x34/0x7b0 [ 453.461625][T21710] ? rcu_is_watching+0x15/0xb0 [ 453.466401][T21710] ? create_new_namespaces+0x34/0x7b0 [ 453.471782][T21710] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 453.478130][T21710] create_new_namespaces+0xd3/0x7b0 [ 453.483436][T21710] ? bpf_lsm_capable+0x9/0x10 [ 453.488202][T21710] ? security_capable+0x90/0xb0 [ 453.493060][T21710] unshare_nsproxy_namespaces+0x124/0x180 [ 453.498782][T21710] ksys_unshare+0x619/0xc10 [ 453.503296][T21710] ? __pfx_ksys_unshare+0x10/0x10 [ 453.508321][T21710] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 453.514314][T21710] ? do_syscall_64+0x100/0x230 [ 453.519083][T21710] __x64_sys_unshare+0x38/0x40 [ 453.523842][T21710] do_syscall_64+0xf3/0x230 [ 453.528428][T21710] ? clear_bhb_loop+0x35/0x90 [ 453.533103][T21710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.538993][T21710] RIP: 0033:0x7f579c3779f9 [ 453.543492][T21710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.563202][T21710] RSP: 002b:00007f579d1b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 453.571655][T21710] RAX: ffffffffffffffda RBX: 00007f579c505f80 RCX: 00007f579c3779f9 [ 453.579647][T21710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c020400 [ 453.587633][T21710] RBP: 00007f579d1b9090 R08: 0000000000000000 R09: 0000000000000000 [ 453.595619][T21710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.603591][T21710] R13: 0000000000000000 R14: 00007f579c505f80 R15: 00007fff7e2f1648 [ 453.611572][T21710] [ 453.624958][ T5241] Bluetooth: hci5: command tx timeout [ 453.633423][T21708] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5521'. [ 453.733689][T21653] chnl_net:caif_netlink_parms(): no params data found [ 453.935860][T21691] chnl_net:caif_netlink_parms(): no params data found [ 454.003861][T21725] netlink: 'syz.3.5526': attribute type 1 has an invalid length. [ 454.195959][T21741] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 454.311875][ T11] hsr_slave_0: left promiscuous mode [ 454.325041][ T11] hsr_slave_1: left promiscuous mode [ 454.335766][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.352039][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.361124][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.368740][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.397323][ T11] veth1_macvtap: left promiscuous mode [ 454.402913][ T11] veth0_macvtap: left promiscuous mode [ 454.409028][ T11] veth1_vlan: left promiscuous mode [ 454.414644][ T11] veth0_vlan: left promiscuous mode [ 454.776324][ T5234] Bluetooth: hci6: command tx timeout [ 455.021697][ T11] team0 (unregistering): Port device team_slave_1 removed [ 455.069815][ T11] team0 (unregistering): Port device team_slave_0 removed [ 455.096044][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.103306][ C1] bridge0: topology change detected, propagating [ 455.589437][T21653] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.598373][T21653] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.606800][T21653] bridge_slave_0: entered allmulticast mode [ 455.622921][T21653] bridge_slave_0: entered promiscuous mode [ 455.654955][ T5234] Bluetooth: hci5: command tx timeout [ 455.685368][T21653] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.692519][T21653] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.719079][T21653] bridge_slave_1: entered allmulticast mode [ 455.727410][T21653] bridge_slave_1: entered promiscuous mode [ 455.828986][T21691] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.848027][T21691] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.867265][T21763] __nla_validate_parse: 4 callbacks suppressed [ 455.867289][T21763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5535'. [ 455.882870][T21691] bridge_slave_0: entered allmulticast mode [ 455.892230][T21691] bridge_slave_0: entered promiscuous mode [ 455.989620][T21691] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.999872][T21691] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.007539][T21691] bridge_slave_1: entered allmulticast mode [ 456.015105][T21691] bridge_slave_1: entered promiscuous mode [ 456.091806][T21653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.178030][T21653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.209747][T21691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.359662][T21691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.388555][T21653] team0: Port device team_slave_0 added [ 456.398830][T21653] team0: Port device team_slave_1 added [ 456.440374][T21783] FAULT_INJECTION: forcing a failure. [ 456.440374][T21783] name failslab, interval 1, probability 0, space 0, times 0 [ 456.464410][T21783] CPU: 1 UID: 0 PID: 21783 Comm: syz.1.5540 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 456.475219][T21783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 456.485271][T21783] Call Trace: [ 456.488542][T21783] [ 456.491469][T21783] dump_stack_lvl+0x241/0x360 [ 456.496149][T21783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.501343][T21783] ? __pfx__printk+0x10/0x10 [ 456.505929][T21783] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 456.512427][T21783] ? __pfx___might_resched+0x10/0x10 [ 456.517711][T21783] should_fail_ex+0x3b0/0x4e0 [ 456.522390][T21783] should_failslab+0xac/0x100 [ 456.527073][T21783] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 456.533396][T21783] ? alloc_vfsmnt+0xeb/0x4d0 [ 456.537991][T21783] kstrdup+0x3a/0x80 [ 456.541889][T21783] alloc_vfsmnt+0xeb/0x4d0 [ 456.546306][T21783] clone_mnt+0x6b/0xc80 [ 456.550542][T21783] ? do_raw_spin_unlock+0x13c/0x8b0 [ 456.555824][T21783] ? attach_mnt+0x4ed/0x600 [ 456.560323][T21783] copy_tree+0x3f5/0x830 [ 456.564566][T21783] ? copy_mnt_ns+0x178/0x840 [ 456.569156][T21783] copy_mnt_ns+0x178/0x840 [ 456.573578][T21783] ? create_new_namespaces+0x34/0x7b0 [ 456.578945][T21783] ? rcu_is_watching+0x15/0xb0 [ 456.583703][T21783] ? create_new_namespaces+0x34/0x7b0 [ 456.589071][T21783] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 456.594699][T21783] create_new_namespaces+0xd3/0x7b0 [ 456.599895][T21783] ? bpf_lsm_capable+0x9/0x10 [ 456.604565][T21783] ? security_capable+0x90/0xb0 [ 456.609413][T21783] unshare_nsproxy_namespaces+0x124/0x180 [ 456.615130][T21783] ksys_unshare+0x619/0xc10 [ 456.619638][T21783] ? __pfx_ksys_unshare+0x10/0x10 [ 456.624656][T21783] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 456.630637][T21783] ? do_syscall_64+0x100/0x230 [ 456.635414][T21783] __x64_sys_unshare+0x38/0x40 [ 456.640187][T21783] do_syscall_64+0xf3/0x230 [ 456.644691][T21783] ? clear_bhb_loop+0x35/0x90 [ 456.649361][T21783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.655252][T21783] RIP: 0033:0x7f579c3779f9 [ 456.659658][T21783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.679263][T21783] RSP: 002b:00007f579d1b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 456.687674][T21783] RAX: ffffffffffffffda RBX: 00007f579c505f80 RCX: 00007f579c3779f9 [ 456.695638][T21783] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c020400 [ 456.703599][T21783] RBP: 00007f579d1b9090 R08: 0000000000000000 R09: 0000000000000000 [ 456.711562][T21783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 456.719525][T21783] R13: 0000000000000000 R14: 00007f579c505f80 R15: 00007fff7e2f1648 [ 456.727507][T21783] [ 456.857489][ T5234] Bluetooth: hci6: command tx timeout [ 456.869392][T21691] team0: Port device team_slave_0 added [ 456.905984][T21691] team0: Port device team_slave_1 added [ 456.912686][T21653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.924999][T21653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.925127][T21789] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5543'. [ 457.009197][T21653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.088790][T21653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.091065][T21796] netlink: 'syz.3.5546': attribute type 1 has an invalid length. [ 457.109418][T21653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.111327][T21796] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5546'. [ 457.146743][T21653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.189280][T21691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.196785][T21691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.227495][T21801] netlink: 'syz.4.5548': attribute type 1 has an invalid length. [ 457.238668][T21691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.302138][T21691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.324476][T21691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.357720][T21691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.563464][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.600001][T21653] hsr_slave_0: entered promiscuous mode [ 457.607005][T21653] hsr_slave_1: entered promiscuous mode [ 457.616344][T21653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.625395][T21653] Cannot create hsr debugfs directory [ 457.655980][T21812] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5552'. [ 457.668518][T21812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5552'. [ 457.694014][T21812] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.745296][ T5234] Bluetooth: hci5: command tx timeout [ 457.842202][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.928664][T21828] Timeout policy `syz0' can only be used by L3 protocol number 34887 [ 457.972805][T21691] hsr_slave_0: entered promiscuous mode [ 457.994982][T21691] hsr_slave_1: entered promiscuous mode [ 458.024964][T21691] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 458.032590][T21691] Cannot create hsr debugfs directory [ 458.098975][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.233241][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.405578][T21850] [ 458.407943][T21850] ====================================================== [ 458.414974][T21850] WARNING: possible circular locking dependency detected [ 458.422004][T21850] 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 Not tainted [ 458.429119][T21850] ------------------------------------------------------ [ 458.436142][T21850] syz.1.5563/21850 is trying to acquire lock: [ 458.442203][T21850] ffff888023006768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_netdev_notifier_call+0x308/0x1490 [ 458.452825][T21850] [ 458.452825][T21850] but task is already holding lock: [ 458.460182][T21850] ffff888057d68d40 (team->team_lock_key#7){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 458.469850][T21850] [ 458.469850][T21850] which lock already depends on the new lock. [ 458.469850][T21850] [ 458.480253][T21850] [ 458.480253][T21850] the existing dependency chain (in reverse order) is: [ 458.489300][T21850] [ 458.489300][T21850] -> #1 (team->team_lock_key#7){+.+.}-{3:3}: [ 458.497468][T21850] lock_acquire+0x1ed/0x550 [ 458.502489][T21850] __mutex_lock+0x136/0xd70 [ 458.507510][T21850] team_port_change_check+0x51/0x1e0 [ 458.513306][T21850] team_device_event+0x161/0x5b0 [ 458.518762][T21850] notifier_call_chain+0x19f/0x3e0 [ 458.524388][T21850] dev_close_many+0x33c/0x4c0 [ 458.529578][T21850] unregister_netdevice_many_notify+0x50b/0x1c40 [ 458.536416][T21850] macvlan_device_event+0x7e0/0x870 [ 458.542128][T21850] notifier_call_chain+0x19f/0x3e0 [ 458.548813][T21850] unregister_netdevice_many_notify+0xd81/0x1c40 [ 458.555674][T21850] unregister_netdevice_queue+0x303/0x370 [ 458.561931][T21850] _cfg80211_unregister_wdev+0x162/0x560 [ 458.568079][T21850] ieee80211_if_remove+0x25d/0x3a0 [ 458.573704][T21850] ieee80211_del_iface+0x19/0x30 [ 458.579172][T21850] cfg80211_remove_virtual_intf+0x23f/0x410 [ 458.585583][T21850] genl_rcv_msg+0xb14/0xec0 [ 458.590596][T21850] netlink_rcv_skb+0x1e3/0x430 [ 458.595870][T21850] genl_rcv+0x28/0x40 [ 458.600358][T21850] netlink_unicast+0x7f0/0x990 [ 458.605630][T21850] netlink_sendmsg+0x8e4/0xcb0 [ 458.610905][T21850] __sock_sendmsg+0x221/0x270 [ 458.616097][T21850] ____sys_sendmsg+0x525/0x7d0 [ 458.621369][T21850] __sys_sendmsg+0x2b0/0x3a0 [ 458.626467][T21850] do_syscall_64+0xf3/0x230 [ 458.631482][T21850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.637893][T21850] [ 458.637893][T21850] -> #0 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 458.645617][T21850] validate_chain+0x18e0/0x5900 [ 458.651065][T21850] __lock_acquire+0x137a/0x2040 [ 458.656427][T21850] lock_acquire+0x1ed/0x550 [ 458.661439][T21850] __mutex_lock+0x136/0xd70 [ 458.666453][T21850] cfg80211_netdev_notifier_call+0x308/0x1490 [ 458.673030][T21850] notifier_call_chain+0x19f/0x3e0 [ 458.678660][T21850] dev_open+0x13a/0x1b0 [ 458.683331][T21850] team_add_slave+0x9c8/0x2760 [ 458.688702][T21850] do_setlink+0xe70/0x41f0 [ 458.693628][T21850] rtnl_newlink+0x180d/0x20a0 [ 458.698811][T21850] rtnetlink_rcv_msg+0x73f/0xcf0 [ 458.704268][T21850] netlink_rcv_skb+0x1e3/0x430 [ 458.709544][T21850] netlink_unicast+0x7f0/0x990 [ 458.714817][T21850] netlink_sendmsg+0x8e4/0xcb0 [ 458.720098][T21850] __sock_sendmsg+0x221/0x270 [ 458.725302][T21850] ____sys_sendmsg+0x525/0x7d0 [ 458.730590][T21850] __sys_sendmsg+0x2b0/0x3a0 [ 458.735694][T21850] do_syscall_64+0xf3/0x230 [ 458.740710][T21850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.747118][T21850] [ 458.747118][T21850] other info that might help us debug this: [ 458.747118][T21850] [ 458.757342][T21850] Possible unsafe locking scenario: [ 458.757342][T21850] [ 458.764792][T21850] CPU0 CPU1 [ 458.770155][T21850] ---- ---- [ 458.775512][T21850] lock(team->team_lock_key#7); [ 458.780450][T21850] lock(&rdev->wiphy.mtx); [ 458.787465][T21850] lock(team->team_lock_key#7); [ 458.794916][T21850] lock(&rdev->wiphy.mtx); [ 458.799411][T21850] [ 458.799411][T21850] *** DEADLOCK *** [ 458.799411][T21850] [ 458.807538][T21850] 2 locks held by syz.1.5563/21850: [ 458.812735][T21850] #0: ffffffff8fc80188 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 458.822148][T21850] #1: ffff888057d68d40 (team->team_lock_key#7){+.+.}-{3:3}, at: team_add_slave+0xad/0x2760 [ 458.832269][T21850] [ 458.832269][T21850] stack backtrace: [ 458.838149][T21850] CPU: 1 UID: 0 PID: 21850 Comm: syz.1.5563 Not tainted 6.11.0-rc1-syzkaller-00300-ge66f33bdf0c3 #0 [ 458.848894][T21850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 458.858938][T21850] Call Trace: [ 458.862207][T21850] [ 458.865135][T21850] dump_stack_lvl+0x241/0x360 [ 458.869813][T21850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 458.875012][T21850] ? print_circular_bug+0x130/0x1a0 [ 458.880206][T21850] check_noncircular+0x36a/0x4a0 [ 458.885571][T21850] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 458.891722][T21850] ? __pfx_check_noncircular+0x10/0x10 [ 458.897185][T21850] ? lockdep_lock+0x123/0x2b0 [ 458.901867][T21850] ? _find_first_zero_bit+0xd3/0x100 [ 458.907148][T21850] validate_chain+0x18e0/0x5900 [ 458.911987][T21850] ? mark_lock+0x9a/0x350 [ 458.916322][T21850] ? __pfx_stack_trace_save+0x10/0x10 [ 458.921708][T21850] ? __pfx_validate_chain+0x10/0x10 [ 458.926911][T21850] ? mark_lock+0x9a/0x350 [ 458.931243][T21850] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 458.937242][T21850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 458.943671][T21850] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 458.949661][T21850] ? lockdep_hardirqs_on+0x99/0x150 [ 458.954872][T21850] ? mark_lock+0x9a/0x350 [ 458.959213][T21850] __lock_acquire+0x137a/0x2040 [ 458.964177][T21850] lock_acquire+0x1ed/0x550 [ 458.969249][T21850] ? cfg80211_netdev_notifier_call+0x308/0x1490 [ 458.976737][T21850] ? __pfx_lock_acquire+0x10/0x10 [ 458.982009][T21850] ? __pfx___might_resched+0x10/0x10 [ 458.987312][T21850] ? rtmsg_fib+0x3a3/0x630 [ 458.991733][T21850] __mutex_lock+0x136/0xd70 [ 458.996238][T21850] ? cfg80211_netdev_notifier_call+0x308/0x1490 [ 459.002476][T21850] ? __lock_acquire+0x137a/0x2040 [ 459.007496][T21850] ? cfg80211_netdev_notifier_call+0x308/0x1490 [ 459.013812][T21850] ? __pfx___mutex_lock+0x10/0x10 [ 459.018840][T21850] cfg80211_netdev_notifier_call+0x308/0x1490 [ 459.024905][T21850] ? __pfx_lock_release+0x10/0x10 [ 459.029922][T21850] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 459.036416][T21850] ? __pfx_arp_key_eq+0x10/0x10 [ 459.041257][T21850] ? neigh_lookup+0x417/0x500 [ 459.045927][T21850] ? __pfx_fib_magic+0x10/0x10 [ 459.050678][T21850] ? neigh_lookup+0xb1/0x500 [ 459.055256][T21850] ? __pfx_neigh_lookup+0x10/0x10 [ 459.060268][T21850] ? fib_rebalance+0x8e/0xed0 [ 459.064949][T21850] ? dev_get_flags+0x147/0x1d0 [ 459.069714][T21850] ? fib_sync_up+0x74b/0x7d0 [ 459.074300][T21850] ? igmp_netdev_event+0x7c/0x770 [ 459.079316][T21850] notifier_call_chain+0x19f/0x3e0 [ 459.084511][T21850] dev_open+0x13a/0x1b0 [ 459.088663][T21850] ? __pfx_dev_open+0x10/0x10 [ 459.093331][T21850] ? team_add_slave+0x69e/0x2760 [ 459.098265][T21850] ? team_add_slave+0x69e/0x2760 [ 459.103189][T21850] ? team_add_slave+0x8b5/0x2760 [ 459.108113][T21850] team_add_slave+0x9c8/0x2760 [ 459.112890][T21850] ? deref_stack_reg+0x1c7/0x260 [ 459.117837][T21850] ? __pfx_team_add_slave+0x10/0x10 [ 459.123034][T21850] ? 0xffffffffa00007d8 [ 459.127180][T21850] ? 0xffffffffa00007d8 [ 459.131320][T21850] ? is_bpf_text_address+0x285/0x2a0 [ 459.136599][T21850] ? is_bpf_text_address+0x26/0x2a0 [ 459.141791][T21850] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 459.148028][T21850] ? kernel_text_address+0xa7/0xe0 [ 459.153129][T21850] ? nla_strscpy+0x100/0x180 [ 459.157710][T21850] ? mutex_is_locked+0x12/0x50 [ 459.162463][T21850] do_setlink+0xe70/0x41f0 [ 459.166879][T21850] ? stack_trace_save+0x118/0x1d0 [ 459.171894][T21850] ? __lock_acquire+0x137a/0x2040 [ 459.177064][T21850] ? __pfx_stack_trace_save+0x10/0x10 [ 459.182435][T21850] ? __pfx_do_setlink+0x10/0x10 [ 459.187281][T21850] ? __nla_validate_parse+0x26ce/0x3090 [ 459.192815][T21850] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 459.198367][T21850] ? rtnl_newlink+0xf2/0x20a0 [ 459.203042][T21850] ? __pfx___nla_validate_parse+0x10/0x10 [ 459.208774][T21850] ? nla_strscpy+0x100/0x180 [ 459.213357][T21850] ? full_name_hash+0x93/0xe0 [ 459.218574][T21850] ? validate_linkmsg+0x71e/0x900 [ 459.223608][T21850] rtnl_newlink+0x180d/0x20a0 [ 459.228379][T21850] ? rtnl_newlink+0x4e1/0x20a0 [ 459.233156][T21850] ? __pfx_rtnl_newlink+0x10/0x10 [ 459.238201][T21850] ? do_raw_spin_unlock+0x13c/0x8b0 [ 459.243410][T21850] ? __mutex_lock+0x527/0xd70 [ 459.248116][T21850] ? __pfx_rtnl_newlink+0x10/0x10 [ 459.253136][T21850] rtnetlink_rcv_msg+0x73f/0xcf0 [ 459.258066][T21850] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 459.263173][T21850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.268627][T21850] ? ref_tracker_free+0x643/0x7e0 [ 459.273664][T21850] netlink_rcv_skb+0x1e3/0x430 [ 459.278438][T21850] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 459.283907][T21850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.289201][T21850] ? netlink_deliver_tap+0x2e/0x1b0 [ 459.294536][T21850] netlink_unicast+0x7f0/0x990 [ 459.299317][T21850] ? __pfx_netlink_unicast+0x10/0x10 [ 459.304614][T21850] ? __virt_addr_valid+0x183/0x530 [ 459.309732][T21850] ? __check_object_size+0x49c/0x900 [ 459.315028][T21850] ? bpf_lsm_netlink_send+0x9/0x10 [ 459.320149][T21850] netlink_sendmsg+0x8e4/0xcb0 [ 459.324920][T21850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.330207][T21850] ? __import_iovec+0x536/0x820 [ 459.335063][T21850] ? aa_sock_msg_perm+0x91/0x160 [ 459.340015][T21850] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 459.345303][T21850] ? security_socket_sendmsg+0x87/0xb0 [ 459.350957][T21850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.356248][T21850] __sock_sendmsg+0x221/0x270 [ 459.361184][T21850] ____sys_sendmsg+0x525/0x7d0 [ 459.365940][T21850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.371222][T21850] __sys_sendmsg+0x2b0/0x3a0 [ 459.375815][T21850] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.380955][T21850] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 459.387288][T21850] ? do_syscall_64+0x100/0x230 [ 459.392050][T21850] ? do_syscall_64+0xb6/0x230 [ 459.396896][T21850] do_syscall_64+0xf3/0x230 [ 459.401397][T21850] ? clear_bhb_loop+0x35/0x90 [ 459.406163][T21850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.412761][T21850] RIP: 0033:0x7f579c3779f9 [ 459.417534][T21850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.438635][T21850] RSP: 002b:00007f579d1b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.447043][T21850] RAX: ffffffffffffffda RBX: 00007f579c505f80 RCX: 00007f579c3779f9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 459.455003][T21850] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 000000000000000a [ 459.462970][T21850] RBP: 00007f579c3e58ee R08: 0000000000000000 R09: 0000000000000000 [ 459.471019][T21850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.479087][T21850] R13: 0000000000000000 R14: 00007f579c505f80 R15: 00007fff7e2f1648 [ 459.487065][T21850] [ 459.501325][ T5234] Bluetooth: hci6: command tx timeout [ 459.530387][T21850] team0: Port device virt_wifi0 added [ 459.559863][T21849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.626416][T21851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5562'. [ 459.739000][ T11] bridge_slave_1: left allmulticast mode [ 459.749659][ T11] bridge_slave_1: left promiscuous mode [ 459.779893][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.817863][ T5234] Bluetooth: hci5: command tx timeout [ 459.898804][ T11] bridge_slave_0: left allmulticast mode [ 459.905008][ T11] bridge_slave_0: left promiscuous mode [ 459.910747][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.249949][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.261141][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.272767][ T11] bond0 (unregistering): Released all slaves [ 460.553583][ T11] hsr_slave_0: left promiscuous mode [ 460.559876][ T11] hsr_slave_1: left promiscuous mode [ 460.573253][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.580955][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.591163][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.601947][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 460.611415][ T11] veth1_macvtap: left promiscuous mode [ 460.617984][ T11] veth0_macvtap: left promiscuous mode [ 460.623566][ T11] veth1_vlan: left promiscuous mode [ 460.629462][ T11] veth0_vlan: left promiscuous mode [ 460.803975][ T11] team0 (unregistering): Port device team_slave_1 removed [ 460.839604][ T11] team0 (unregistering): Port device team_slave_0 removed [ 461.262652][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.339485][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.390044][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.433990][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.499593][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.559861][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.608730][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.660496][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.726021][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.736602][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.779452][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.789902][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.839347][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.850224][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.917278][ T11] team0: Port device netdevsim0 removed [ 461.923720][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.934690][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.003262][ T11] ªªªªª: left allmulticast mode [ 462.008229][ T11] team_slave_0: left allmulticast mode [ 462.013666][ T11] team_slave_1: left allmulticast mode [ 462.019421][ T11] bridge0: port 3(ªªªªª) entered disabled state [ 462.028294][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.037036][ T11] bridge_slave_0: left allmulticast mode [ 462.042668][ T11] bridge_slave_0: left promiscuous mode [ 462.048772][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.061314][ T11] batadv0: left allmulticast mode [ 462.067733][ T11] bridge0: port 3(batadv0) entered disabled state [ 462.075508][ T11] bridge_slave_1: left allmulticast mode [ 462.081132][ T11] bridge_slave_1: left promiscuous mode [ 462.086895][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.098595][ T11] bridge_slave_0: left allmulticast mode [ 462.104242][ T11] bridge_slave_0: left promiscuous mode [ 462.109958][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.122331][ T11] bridge_slave_1: left allmulticast mode [ 462.128079][ T11] bridge_slave_1: left promiscuous mode [ 462.133721][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.143155][ T11] bridge_slave_0: left allmulticast mode [ 462.149039][ T11] bridge_slave_0: left promiscuous mode [ 462.155016][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.163500][ T11] bridge_slave_1: left allmulticast mode [ 462.169881][ T11] bridge_slave_1: left promiscuous mode [ 462.175660][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.183561][ T11] bridge_slave_0: left allmulticast mode [ 462.189234][ T11] bridge_slave_0: left promiscuous mode [ 462.195243][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.203754][ T11] bridge_slave_1: left allmulticast mode [ 462.209613][ T11] bridge_slave_1: left promiscuous mode [ 462.215368][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.223463][ T11] bridge_slave_0: left allmulticast mode [ 462.229248][ T11] bridge_slave_0: left promiscuous mode [ 462.235925][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.381058][ T11] bond1 (unregistering): (slave ip6gre2): Releasing backup interface [ 462.589802][ T11] team0: Port device geneve1 removed [ 463.741818][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.754398][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.764432][ T11] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 463.773229][ T11] bond0 (unregistering): Released all slaves [ 463.872117][ T11] bond1 (unregistering): Released all slaves [ 463.888719][ T11] bond2 (unregistering): (slave batadv0): Removing an active aggregator [ 463.897908][ T11] bond2 (unregistering): (slave batadv0): Releasing backup interface [ 463.907609][ T11] bond2 (unregistering): Released all slaves [ 463.921666][ T11] bond0 (unregistering): left promiscuous mode [ 463.930419][ T11] bond_slave_0: left promiscuous mode [ 463.937862][ T11] bond_slave_1: left promiscuous mode [ 463.944171][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.960219][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 463.970523][ T11] bond0 (unregistering): Released all slaves [ 463.979934][ T11] bond1 (unregistering): Released all slaves [ 464.079513][ T11] bond2 (unregistering): Released all slaves [ 464.089461][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.099552][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.109243][ T11] bond0 (unregistering): Released all slaves [ 464.120586][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.130521][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.141829][ T11] bond0 (unregistering): Released all slaves [ 464.238569][ T11]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.248672][ T11]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.258190][ T11]  (unregistering): Released all slaves [ 464.323735][ T11] tipc: Disabling bearer [ 464.336837][ T11] tipc: Left network mode [ 464.363645][ T11] tipc: Disabling bearer [ 464.376835][ T11] tipc: Left network mode [ 464.521477][ T11] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 464.540747][ T11] batman_adv: batadv0: Removing interface: syzkaller0 [ 464.600106][ T11] hsr_slave_0: left promiscuous mode [ 464.607198][ T11] hsr_slave_1: left promiscuous mode [ 464.612969][ T11] team0: left promiscuous mode [ 464.620449][ T11] team_slave_0: left promiscuous mode [ 464.626545][ T11] team_slave_1: left promiscuous mode [ 464.636426][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.643920][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.651747][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.659379][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.669599][ T11] hsr_slave_0: left promiscuous mode [ 464.675503][ T11] hsr_slave_1: left promiscuous mode [ 464.681300][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.688932][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.708695][ T11] hsr_slave_0: left promiscuous mode [ 464.714806][ T11] hsr_slave_1: left promiscuous mode [ 464.720565][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.728796][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.739448][ T11] hsr_slave_0: left promiscuous mode [ 464.745415][ T11] hsr_slave_1: left promiscuous mode [ 464.756735][ T11] veth1_macvtap: left promiscuous mode [ 464.762244][ T11] veth0_macvtap: left promiscuous mode [ 464.768184][ T11] veth1_vlan: left promiscuous mode [ 464.773406][ T11] veth0_vlan: left promiscuous mode [ 464.780232][ T11] veth1_macvtap: left promiscuous mode [ 464.785873][ T11] veth0_macvtap: left promiscuous mode [ 464.791580][ T11] veth1_vlan: left promiscuous mode [ 464.797995][ T11] veth1_macvtap: left allmulticast mode [ 464.803543][ T11] veth1_macvtap: left promiscuous mode [ 464.809078][ T11] veth0_macvtap: left promiscuous mode [ 464.814999][ T11] veth1_vlan: left promiscuous mode [ 464.820247][ T11] veth0_vlan: left promiscuous mode [ 465.100805][ T11] team_slave_1 (unregistering): left promiscuous mode [ 465.109485][ T11] ªªªªª (unregistering): Port device team_slave_1 removed [ 465.132514][ T11] team_slave_0 (unregistering): left promiscuous mode [ 465.140188][ T11] ªªªªª (unregistering): Port device team_slave_0 removed [ 465.511007][ T11] team0 (unregistering): Port device team_slave_1 removed [ 465.522501][ T11] team0 (unregistering): Port device team_slave_0 removed [ 465.804982][ T11] team0 (unregistering): Port device team_slave_1 removed [ 465.818346][ T11] team0 (unregistering): Port device team_slave_0 removed [ 466.010493][ T11] team0 (unregistering): Port device team_slave_1 removed [ 466.036657][ T11] team0 (unregistering): Port device team_slave_0 removed [ 466.183935][ T11] team0 (unregistering): Port device virt_wifi0 removed [ 466.261710][ T11] team0 (unregistering): Port device team_slave_1 removed [ 466.289682][ T11] team0 (unregistering): Port device team_slave_0 removed [ 467.372744][ T11] IPVS: stop unused estimator thread 0...