last executing test programs: 15.389832769s ago: executing program 2 (id=704): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) 15.26056135s ago: executing program 2 (id=706): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='2?W', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="0c4009fcbb992e736987e198ecf88846e822e15ebcc597a4a67042b40517213af2527246b7e5fd8e1d65d7c9ac5a3525f781eb93925c80471509724559469cfc80f724b11a278ed4ceca6efb179f23db0f6c2ef863f436c4e23f6c7a03ab510c47993717a0690cba7c6cd07d87b16725765ea02f7c12f2e4adb60f346afc84abba91fa5b902f5782d54cf4087a3a868edb1e72811becd251aa1aa3f58017363a472272a70651668a5e20586c90492d39f7cc11b72328cc909192e0dfed95801cf044d8ad37e0d347a3553eab2a2c2791644d4c18a7e1fc8e1e7ea5374428f4fe6ad79d221731ddf35f70f4e48b9b", 0xee}, {&(0x7f0000000480)="b795e567d51431928542b22770f586719481d86e9fe9f668a00070421fd3ef5ce74fbbb43eb751fe1e1f262ee7cb45947724b53f8f07d64d5d91d1ed7489da846db3f12454a528fb934e8861e0f023aa86811a73a870ea4ce9470c93fa852e3b533a9de104a2cd66943580e4de1f08857eb145e7f6c634a8686e64af4386d559cab5d3acec5d8d885b8ada133e562f257f4551", 0x93}, {&(0x7f0000000540)="a5e7a551bcb22d7941634f9680bab30e81b7be02444f72a2e3fe84e02db35185cfce0e82f786dbf13eadd224ebcd37fad11aac71e914e33cc0f1bef80c8bd655f921cad414f10199d6092bd804d9432323e0cf18a29096e044f003aa63df59e74d608ef770b01e9acbc60c", 0x6b}, {&(0x7f0000000640)="7b90267c3f6e3108da1b942e0abd5572f16149ac84effa9e30b1f258892d7639d4bf8aaa27aa5c3980d07d7f286ca688e6eeb1d74c72bbabea7d193054b3a556cc933a16a4265aa558cfbac83c8c15", 0x4f}, {&(0x7f0000000740)="03001a42823fff2b64df913f4ecab671618d8b9b4d6b0fe9916e444ff63610770c55482d21796d24072b67dc6d0b7f9b6da4ea1c747bd07e7828cc106cb8aa7b7af36024373448634db11012d8aebb9081ae5aebab024e2af9398800b1a84987dd4b25ba1ae4734eb1502c7c4322ea15670f3b8886a2d7e738d7e4e9c555d9f1763eea2af89b7b08b21f92ed751f7dbb02b030fe3f1176ad53670486693331c5f96fd4d893dd1625bb636385c550b2aa926804847788e759e2ee38b41951b506ef47", 0xc2}], 0x5}}], 0x2, 0x8855) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000003640)={0x328, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{}, {}, {}, {}, {}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x328}}, 0x0) 15.070273663s ago: executing program 2 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="140004006e7363766630000000000001010000000800050006000000180017800400040004"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r3, 0xffffffffffffffff, 0x2, 0x0, 0x4000}, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="140004006e7363766630000000000001010000000800050006000000180017800400040004"], 0x50}}, 0x0) (async) 14.768017331s ago: executing program 2 (id=711): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000200), 0x0, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x68}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0x30}}], 0x1, 0x0) 14.435997968s ago: executing program 2 (id=715): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) 5.029684472s ago: executing program 2 (id=715): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) 4.249943873s ago: executing program 1 (id=833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffad, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 4.129847095s ago: executing program 1 (id=836): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe220000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r1) (async, rerun: 64) r4 = socket(0x1, 0x803, 0x0) (rerun: 64) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c000000100001040000e488f4f9b37258820000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) 3.373707763s ago: executing program 1 (id=842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) r1 = socket$kcm(0x2, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x64, "f91ca7f8b144b3fc9e89e52253d66e18b5322576bd4f988f1bf7b82e4383efc6c1a626348827ce21f8d9b8aa09089e47aad79de543542e6c6689f62a0d468be7a179a5045c8bf607960df052adf4cab8d08b05872cddc637663b485c56881cf32815d35e"}, &(0x7f00000001c0)=0x6c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x1000, 0x40, 0x9, 0x4, 0x20, 0xb5b, 0x3, 0x81, r2}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7800, 0x8, 0x81, 0xfffffff5, {{0x5, 0x4, 0x2, 0x25, 0x14, 0x66, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010100, @broadcast}}}}) r5 = socket(0x10, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r6, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="34000000100081eeb149d8836acdaaa1bba20000", @ANYRES32, @ANYRES8=r0], 0x34}}, 0x1) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="480000001400b59500000000002e34000a000000", @ANYRES32, @ANYBLOB="14000100e100000000000000000000000000000014000200fe8000000000000000000000000000aa"], 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0904fbff000000000000020000000900020073797a32000000000900010073797a3000000000340004803000018008000100636d7000240002800800014000005f12100003800c0001004e36f8689c9b7e7f080002"], 0x88}}, 0x0) getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001500b59500000000000000000a000000", @ANYBLOB="04000200fe8000000000000000000000000000aa"], 0x2c}}, 0x0) r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x80, 0x8, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r8, 0x0, &(0x7f0000000200)=@tcp6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r8, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={0xffffffffffffffff, r8}, 0xc) sendto$packet(r5, &(0x7f00000003c0)="ef7c0abeaa3df02e959f349c2ca9c091a9ae1fc1c511f11e92cb9aad86fc3eea0016efad0495988817d1b2b26b1960835676db57ffa84c091c77dbaaed56812bb9f7acfbbd176bd9df9c458dd046becaf331c5b5ff728d80be5ac9f5078ed191908d5de046ae84d312688a0f1ba82243f72c0cef1913ec74bf2bf500575af2377e244163acaf7c00fcd7aa53097160bf149dd5008e9ba1a8092de8794c708e24448148e1d469844aed2b6ce0c20b79532aefa56e777ee0a7e79817981446a712c83c5039dec740692700"/215, 0xd7, 0x4048008, &(0x7f0000000380)={0x11, 0x1b, r4, 0x1, 0x1f, 0x6, @broadcast}, 0x14) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000080)) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) 2.297776814s ago: executing program 4 (id=850): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='2?W', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="0c4009fcbb992e736987e198ecf88846e822e15ebcc597a4a67042b40517213af2527246b7e5fd8e1d65d7c9ac5a3525f781eb93925c80471509724559469cfc80f724b11a278ed4ceca6efb179f23db0f6c2ef863f436c4e23f6c7a03ab510c47993717a0690cba7c6cd07d87b16725765ea02f7c12f2e4adb60f346afc84abba91fa5b902f5782d54cf4087a3a868edb1e72811becd251aa1aa3f58017363a472272a70651668a5e20586c90492d39f7cc11b72328cc909192e0dfed95801cf044d8ad37e0d347a3553eab2a2c2791644d4c18a7e1fc8e1e7ea5374428f4fe6ad79d221731ddf35f70f4e48b9b", 0xee}, {&(0x7f0000000480)="b795e567d51431928542b22770f586719481d86e9fe9f668a00070421fd3ef5ce74fbbb43eb751fe1e1f262ee7cb45947724b53f8f07d64d5d91d1ed7489da846db3f12454a528fb934e8861e0f023aa86811a73a870ea4ce9470c93fa852e3b533a9de104a2cd66943580e4de1f08857eb145e7f6c634a8686e64af4386d559cab5d3acec5d8d885b8ada133e562f257f4551", 0x93}, {&(0x7f0000000540)="a5e7a551bcb22d7941634f9680bab30e81b7be02444f72a2e3fe84e02db35185cfce0e82f786dbf13eadd224ebcd37fad11aac71e914e33cc0f1bef80c8bd655f921cad414f10199d6092bd804d9432323e0cf18a29096e044f003aa63df59e74d608ef770b01e9acbc60c", 0x6b}, {&(0x7f0000000640)="7b90267c3f6e3108da1b942e0abd5572f16149ac84effa9e30b1f258892d7639d4bf8aaa27aa5c3980d07d7f286ca688e6eeb1d74c72bbabea7d193054b3a556cc933a16a4265aa558cfbac83c8c15", 0x4f}, {&(0x7f0000000740)="03001a42823fff2b64df913f4ecab671618d8b9b4d6b0fe9916e444ff63610770c55482d21796d24072b67dc6d0b7f9b6da4ea1c747bd07e7828cc106cb8aa7b7af36024373448634db11012d8aebb9081ae5aebab024e2af9398800b1a84987dd4b25ba1ae4734eb1502c7c4322ea15670f3b8886a2d7e738d7e4e9c555d9f1763eea2af89b7b08b21f92ed751f7dbb02b030fe3f1176ad53670486693331c5f96fd4d893dd1625bb636385c550b2aa926804847788e759e2ee38b41951b506ef47", 0xc2}], 0x5}}], 0x2, 0x8855) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000003640)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x4}}, {{0x8}, {0x4}}]}, 0x2c}}, 0x0) 2.297263935s ago: executing program 1 (id=851): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='2?W', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="0c4009fcbb992e736987e198ecf88846e822e15ebcc597a4a67042b40517213af2527246b7e5fd8e1d65d7c9ac5a3525f781eb93925c80471509724559469cfc80f724b11a278ed4ceca6efb179f23db0f6c2ef863f436c4e23f6c7a03ab510c47993717a0690cba7c6cd07d87b16725765ea02f7c12f2e4adb60f346afc84abba91fa5b902f5782d54cf4087a3a868edb1e72811becd251aa1aa3f58017363a472272a70651668a5e20586c90492d39f7cc11b72328cc909192e0dfed95801cf044d8ad37e0d347a3553eab2a2c2791644d4c18a7e1fc8e1e7ea5374428f4fe6ad79d221731ddf35f70f4e48b9b", 0xee}, {&(0x7f0000000480)="b795e567d51431928542b22770f586719481d86e9fe9f668a00070421fd3ef5ce74fbbb43eb751fe1e1f262ee7cb45947724b53f8f07d64d5d91d1ed7489da846db3f12454a528fb934e8861e0f023aa86811a73a870ea4ce9470c93fa852e3b533a9de104a2cd66943580e4de1f08857eb145e7f6c634a8686e64af4386d559cab5d3acec5d8d885b8ada133e562f257f4551", 0x93}, {&(0x7f0000000540)="a5e7a551bcb22d7941634f9680bab30e81b7be02444f72a2e3fe84e02db35185cfce0e82f786dbf13eadd224ebcd37fad11aac71e914e33cc0f1bef80c", 0x3d}], 0x3}}], 0x2, 0x8855) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000003640)={0x218, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{}, {}, {}, {}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x218}}, 0x0) 2.22932008s ago: executing program 0 (id=852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x20004044) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xdd010000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000140)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '#! =t\xe0,R\x17\xd3\xb6\xd6\xb8\xec\x9f\x7f\xf0\x94\xa5\xa4\xa7\x92\x1c\xbf\xab\x8a\xe7\xa4\f\xbe\x0e\x19:ps\x12:\xd9B\xde\xe9\x1c\xd1\xfb\xc5\x87%\xb4\xbf+m~\xc5c\x85`<\xea\xac\x88>\xf5\x17\x945G\xb5\xa72z\xd3f%O\x9e\xcf\xc5\xdf\xe3 0#\x01=\xe0\n\xd2y\xf2\xa6\xd8\x97\x02\x00\x00\x00\x00\x00\x00\x00\xb8\xf0\xf5_\xbcl5\x19\xf6\xe3\\\xa4U\xa5\x86\x1dxW\xc4\x0e\xed\xaa\x89m\xb3\xa0\xf4%F\x0ebM\xa74\xcd\xea\xbb\xc1\xcb\x1f\xedE4\\\xcb\xae\x95\xdf\x14\x03\x81|gSTW\xddc\x125\b|\xce\xcen$\xc8'}, {0x20, '\x00'}, {}, {0x20, '+\xcc[-%\xfe$%\xdb]'}, {0x20, '\x00'}, {0x20, '\x00'}]}, 0xcd) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x9, [@int={0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x80000}]}, @var]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x75}, 0x20) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r11, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001c00)=ANY=[@ANYBLOB="c85e0400000000000000130000", @ANYRES16=r11, @ANYBLOB="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"], 0x1370}, 0x1, 0x0, 0x0, 0x800}, 0x20000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socket$inet(0x2, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001000)={@multicast, @random="bf7d132b5a64", @val={@void, {0x8100, 0x0, 0x0, 0xffc}}, {@canfd={0xd, {{}, 0x3f, 0x2, 0x0, 0x0, "ee06524b8733639fd73c0006c05fffbac84ba06db20d908e147d15eae54d1dfc6bd8b250e54f5550738978015869466c93909e997f6a07c51f136239aaa7ba36"}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) 2.134942689s ago: executing program 4 (id=853): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x35}, 0x90) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @empty}, 0x10) getsockopt$inet_int(r2, 0x10d, 0xfe, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f00000000c0)=0x2, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)="6b093db1947bc296cf697e335c7aa0e9afc07b5f0c819e3522eaad2a74224b7a5bed182fec91c96271033eec5d14ede20a6d1c36c3e7a445ccb5b158ffaec30b8b846de0d5b327a6b1d322a80d00b5c08428fb6ef0d6bdfef436fd9a0027a7cce11f65f633449199149e065a48b3f6bb51b5e305aa20ec347027ace732178271cb92f3e4bdda6732a10715efe7a7eae23413207a9cd1c24ea5ad8f333bfedf8e93e880fc51fb9051917d5488a13c22f1a575b1767424074c84444b29becb98de0e479ae50c12711cc5e26973d496458de4969e51dd5aee7ae9ca5da879f96737d626b447cdf675bc4af3e1ffec688c6945d0786b8ff146cab2e441e3438f3ddd2832b9ac4c9693141785b844f706c8137d0ebf12347ee82f9bd1968c51803a81998a149178952f712f57c09038a8f8a2e871a1f3b026ec617a77cb2163cea2164504b5ae989034b7ceb91545c2d968b9852181505afb7422606d1db2982240a7583260c32f5e3ea677edfeffc6cb30ef79c96938f7b571a3747042c4db17296ea799f65205b5cc2bf60f5921db65d28ae0a3ce76601fb0dfc04c7fa3900aff36af6c018df195fe6e97e6aa3a81c06130489c24b82c920681d3efb1fc33c73f8645ff0baa0be3a9a92b601f9602a2ef119e527c156bd8d8c91ec92baed92c43bc153fb5c7a5b08f8c8c03b0d266bcadbb061ae5e0f15eab9ba116923a27d961377383fae7b837a448e786371140ee20733f1fc82b565f4f1dc3859c49c5e9e18180e8511ddf854609ed7fcb50ca1c43934883488c9689e0de4f05ee35a254c900b2dee53673e959ae5adbc3f793917ad556654e4df993f2bbd4b9b9259efdcbd3c3c2d315cb1c92438cdea1792c390cef68d3926d44cd9361912518732211458bdc92f855c9c018e3a7b35da0d8c8f934dbc3cfba39a9fa99e1a76759d09e705e0e4d84a32987c661b2e3f58ca446ca835fabdaf163ae94f2a59481ab62298d4350ae9358fdbd2b1b20da4afaaf2982903c2805b6caf71719d0d74852ae8414baa491363af0d20a7ad133b81356c30e77d036ba519867fe35391c36ecd0464b40a3871637dc81af3c19f59f347749cb07ac25f96e0cbf84288d32aff6dcd9cd2ebbd905d53dc87b14002cf971df0b76c5171e392f78cd002fd34a28454a32531ab9fccb16820b462bd13005da9d2fbd0ed02a4a7527b9b40b939bbf0686d16fa3070f129ae48da709408dfdb12c661148e282d50794b34b2e15236bf2f967bba67a7c650a02743ec3b852b5511c1ab32efc7d85a97bb622935b72d5c06e7bde3f389172684a6e61c852f6ec2a323858f67f8f9dde9f9eaa26cfcf958dafe5ed23b6c06f094fa1550ce0a39447769218060cb9e78a0e6f61a08b629e2512d8972a2a337b0b6b97220d292af823b8800ef45e72089659a0b1cbc750d6491d55f9bde4d1c4abe796d6951be456b8ad327794ddc74042c9e303832ccbf2d2fcb6d01007b8cf0552b568af89adc9b198cbea6b8137ef70ad16919ade2bdbd29d23c78c04cce6dedf07598d33841d8f02f7ed5a349fddbc742ea7e742636a2cb4ff663192cb1102adcc019b92caac00f5a644afc2d03b68f933aa6b8eddd6c39a0de8913034a0b48ddabd39aee173350f3dfa0329c308fb94e3528e", 0x498}, {&(0x7f00000001c0)="e4d561e97441d69db45de9b4ec081c8eb4534bc5a9284f843e2bc71745", 0x1d}, {&(0x7f0000000300)="d05d67afc746cff8fa10e483e9eaae867d31e22831b4bea09d2b9e867d06ab0eccd98dee45bbd11af441dc93334d0270f6527428cf0d1bef4f5789bf5acf2e44d415c2e774b8af25275915bdd38fe5a74b87a4d9a1848ed513f92bb0672d88425bcf9fdc7b07cdeb96451ccf522215e76dae12391d3fc0258ca86ea22eb857bfc7f9dc565f3e2dd7412060421997bb92", 0xfffffc37}, {&(0x7f0000000980)="21e35e62c07eb3b95754d4c8ae60419349648a512aab6c478d95c5f71f25ceb5079ce5da8adbc54a10dcc07e36d67d4b880ae396b5c3de2ab65094fa", 0x3c}], 0x4}}], 0x1, 0x0) write$binfmt_misc(r4, 0x0, 0xbf) shutdown(r4, 0x1) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 2.106109635s ago: executing program 1 (id=854): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0104000000000000000002000000300004802c0001800c00010062697477697365001c0002800800024000000000080003400000000008000140000000000900010073797a30000000000900020073797a320000000005000740a9000000140000001100010000000000000000000000000abaf7159329d5b7df72049d7a770e368626883f88622a2321f525d41c685fba8e1c580cf10f4f025a5911d0ac4f4b5d790a39c2b94e8b7a9f1fff219db4881eaa3aa0cbeaf2dd9c4b21cb583c26b748485ccd0fead55a7045038c10ec666e9c43e83586e1bb74cc0bbb"], 0x8c}}, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1800040, 0xffffffff, 0x3, 0x204, r1, 0x201, '\x00', 0x0, r1, 0x2, 0x0, 0x5, 0x2}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x1800040, 0xffffffff, 0x3, 0x204, r1, 0x201, '\x00', 0x0, r1, 0x2, 0x0, 0x5, 0x2}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f00000000c0), 0x0}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r3, &(0x7f00000000c0), 0x0}, 0x20) socket$inet6(0xa, 0x80002, 0x0) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000240)=ANY=[@ANYRESHEX=0x0]) sendto$inet6(r4, &(0x7f0000000600)="2501f71d330b07000000000000002bbe9196e06d9bd46973ff740219a971634887b4", 0x22, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000600)="2501f71d330b07000000000000002bbe9196e06d9bd46973ff740219a971634887b4", 0x22, 0x0, 0x0, 0x0) recvfrom$inet6(r4, 0x0, 0x0, 0x2003, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB]) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) (async) r5 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000340)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRESDEC], 0x31) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="98144a211d7df1904a7918eaf7ffde71420b5d79a9f5fa85c5405275025f7c9660c68fa52741c20710c197cacb0b2da7675ab24850fdf78ab549ba6a66b3363430dd4cef87f25d8cc97684e46a460b0147df728b0b7b7c50cf250fe27594f692cbb0c7e3cffc3d87fa4456"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x18}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="98144a211d7df1904a7918eaf7ffde71420b5d79a9f5fa85c5405275025f7c9660c68fa52741c20710c197cacb0b2da7675ab24850fdf78ab549ba6a66b3363430dd4cef87f25d8cc97684e46a460b0147df728b0b7b7c50cf250fe27594f692cbb0c7e3cffc3d87fa4456"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x18}, 0x90) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x0, {0x2, @broadcast, 'veth0_macvtap\x00'}}, 0x1e) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000001c0)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0xfffffd96) close(r7) 1.837150039s ago: executing program 0 (id=856): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@x}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e1452fd30b640000000200000000000000000000004000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1.754810581s ago: executing program 3 (id=857): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0xfffc, 0x0, @loopback}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x27}}], 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) sendmmsg$inet6(r2, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) 1.689606907s ago: executing program 0 (id=858): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000100)={{}, "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"}) socket$isdn_base(0x22, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000000c0)=0x7ff, 0x4) connect$x25(r1, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f00000016c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x18}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000480), 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r5 = bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r5) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x4) 1.515369103s ago: executing program 0 (id=859): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff3, 0x4}}}, 0x24}}, 0x20000000) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r2, 0x0, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x20002, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20048005, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc000000000000000000000000000000000b000000000005000000000000008107e0b6d0c935bb00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019"], 0x120}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='cpuacct.usage_sys\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000001c0)={'#! ', './file0', [{0x20, '\x00'}, {0x20, '\xff\xff'}, {0x20, '\x00'}, {0x20, 'ipvlan0\x00'}, {0x20, '\\'}]}, 0x1d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'gre0\x00'}) bind$packet(r7, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x60, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="0201130010"], 0x3000}], 0x1}, 0x0) sendfile(r7, r6, 0x0, 0x80004700) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, 0x0, 0x0) bind$inet(r8, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r7) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\b', @ANYRES16=r9, @ANYBLOB="00032bbd7000fbdbdf2587000000060048002300000006004800320000000a000600080211000000000006004800160000000600480015000000"], 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x41) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) 1.425511655s ago: executing program 0 (id=860): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x38}}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r7 = socket(0x0, 0xa, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x10, &(0x7f00000077c0)={r6}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x10, &(0x7f00000077c0)={r6}, 0x8) 825.717184ms ago: executing program 3 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f000000bd80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f000000bdc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f000000bf00)={0x0, 0x0, &(0x7f000000bec0)={&(0x7f000000be00)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}]}]}, 0x28}}, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0xc0, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x90, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x80, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x2}}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa54, 0x18}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x6a}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x95ee}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xb22}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xae81, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80}}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0xc0}, 0x1, 0xba01}, 0x810) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x70, 0x30, 0x9, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x4}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6, 0xa}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x70}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) (rerun: 32) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x0) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000380), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x13, r11, 0x0) (async) ioctl$FS_IOC_RESVSP(r11, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x800, 0x10000}) getsockopt$inet6_buf(r10, 0x6, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) (async) mmap(&(0x7f0000b15000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 581.648652ms ago: executing program 0 (id=862): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="4005001c", @ANYRES16=r1, @ANYBLOB="000800000000030000000400000008000c00010000001400060000000000000000000000ffffe000000108000800ac1e01010800040000000000"], 0x40}, 0x1, 0x0, 0x0, 0x48101}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000051a00010000000000000000001c1400000002000000000008"], 0x1c}}, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0xe0, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xffffffffffffffd4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x154}}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket(0x2, 0x1, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x8, &(0x7f00000000c0), 0x8) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$kcm(r6, &(0x7f00000025c0)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448ca, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) openat$cgroup_ro(r3, &(0x7f00000004c0)='cgroup.kill\x00', 0x275a, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@can_newroute={0x14, 0x18, 0x1}, 0x14}}, 0x4004001) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) 574.431176ms ago: executing program 3 (id=863): r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$inet6(0xa, 0xa, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}}, 0x1c) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = socket$nl_crypto(0x10, 0x3, 0x15) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00+\x00', @ANYRES16=r6, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="0c00238006001b0000000000"], 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="0c009900360000000500000018005080050002000400000009000100e59e75e84c000000"], 0x40}, 0x1, 0x0, 0x0, 0x400c031}, 0x0) (async) sendmsg$netlink(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001ec0)=ANY=[@ANYBLOB="d000000010000b050100000000000000a8000d80140012000000000000000000000000d3899c015a089f96f6c86a9b63c2a171bcff284e9e6d782aeddbe4c7ad086c9927c2fa4e41b695a7de9cb6d65407ba8589f155db825600364dd2fc7f1571a4f342fec892204c5c5557339a980d8d12a34a50d06204b03cff8660bd4db59dd7c75af5d8c84c097c585135c804ede261ef8e45dc7add9a83f19ff759f038f1214a723b76828dc0080055000000000000", @ANYRES32=0x0, @ANYBLOB="04004b8011000780a64a6f891101397ba323a96d75000000"], 0xd0}], 0x1}, 0x0) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x90) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000380), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r9, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRESOCT=r7, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r10 = socket(0x40000000015, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2717, &(0x7f00000198c0)=""/102393, &(0x7f0000000240)=0x18ff9) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x30}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@ipv6_delrule={0x1c, 0x21, 0x1}, 0x1c}}, 0x0) (async) accept(0xffffffffffffffff, 0x0, 0x0) 517.798473ms ago: executing program 4 (id=864): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)='2?W', 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="0c4009fcbb992e736987e198ecf88846e822e15ebcc597a4a67042b40517213af2527246b7e5fd8e1d65d7c9ac5a3525f781eb93925c80471509724559469cfc80f724b11a278ed4ceca6efb179f23db0f6c2ef863f436c4e23f6c7a03ab510c47993717a0690cba7c6cd07d87b16725765ea02f7c12f2e4adb60f346afc84abba91fa5b902f5782d54cf4087a3a868edb1e72811becd251aa1aa3f58017363a472272a70651668a5e20586c90492d39f7cc11b72328cc909192e0dfed95801cf044d8ad37e0d347a3553eab2a2c2791644d4c18a7e1fc8e1e7ea5374428f4fe6ad79d221731ddf35f70f4e48b9b", 0xee}, {&(0x7f0000000480)="b795e567d51431928542b22770f586719481d86e9fe9f668a00070421fd3ef5ce74fbbb43eb751fe1e1f262ee7cb45947724b53f8f07d64d5d91d1ed7489da846db3f12454a528fb934e8861e0f023aa86811a73a870ea4ce9470c93fa852e3b533a9de104a2cd66943580e4de1f08857eb145e7f6c634a8686e64af4386d559cab5d3acec5d8d885b8ada133e562f257f4551", 0x93}, {&(0x7f0000000540)="a5e7a551bcb22d7941634f9680bab30e81b7be02444f72a2e3fe84e02db35185cfce0e82f786dbf13eadd224ebcd37fad11aac71e914e33cc0f1bef80c", 0x3d}], 0x3}}], 0x2, 0x8855) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000004300)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000003640)={0x210, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x134, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{}, {}, {}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x210}}, 0x0) 474.742778ms ago: executing program 1 (id=865): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x9, 0x33, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x0, 0x1}, 0x48) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f00000001c0)={&(0x7f00000003c0)=@id, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000940)="5763f922081ae50887ede09da114c1daa077f9611f8aa81d1b6fa5f806897377d6aa8524a8b1d8c81597ae6a3411d62b43ead10f470c911e8223cee2d6745ff65b450f8b0b46f900c910f852", 0x4c}, {&(0x7f0000000280)="b57af26468ffde59db204ffaa467c0af523b9e6d93dd62dad3d2f90b45e80eb530982e2a1a0b9ebc2c7113d4f93982f87d0ced6312bdcaa996c13c02d027870ae0bdbed8b104a10605ae3939cfa8e7d4ae5e2f97b5958bed4a4430c01d04f980fac5e88de756ec949e14a35bfb3f32197c05b451", 0x74}, {&(0x7f00000009c0)="3d408cd47846fd99d1d1a4df38e0afdd03a817bf3b4673e575b2c253bae12d98c4d5e4e6d317ba457f2d0de6e1fbc5a43bae0d257cda31fb579139135de49db225bf75a3dea059b4a7a9808dd72eb1bd84d0cf9959907ad6b1e1ec718aa8d5004fd0acd19045d8d6e0f04b6b4497bb3126e4ad0d033ef175a58f55d0993d32bb3a10246c0e9ed8956592d6b51d4c1b3d35b68e6a354f5bdddcb0c943411abe361cd03acfa5d2f09a07700d9ce62314a233dc06de1a", 0xb5}, {&(0x7f0000000540)="a840c8a67da22f1b2c4e068bb1ad9c499f093b4480b55eb7b9408f5400cc74932ab986ca937640a84378eb6446626516e84b0055936bb61fac109e2624e86903d729b0b10b4f16db7da1fa3aaa808fe333de0c9316c2412cb9ed2d604f8b3fa52416302221487c294ae9dc54783573eb5e7c1027fc39fa60c39afee14fb7cf3e6ef0041470dfd6a4a356a1d7e20a437bcadc7f0b5afa9f9d68bccd88", 0x9c}, {&(0x7f0000000600)="c016c55101fc98bba00b0c2946a2b285871ce0494875c9d8979d34a99a409dcb328a6ff1e31414ec38af8d9348d49550faf55f18c1d9f281054ffbe9a13132e9a05e0542a376762a4d799b6b4f0311f62189f67e7708285a203492767e25e6bc4d28d6d3f8d9f50c2660483f8f942ecb733e84f8619101c2ec2ec357bec450d092e6068a319a9f761d766e6ac151f3f3cb790dda0a6dbc381be1a87e4d992bc55e39f166e65d1a5997bc4d255f00c45f6264f7b459ce6fc78a91f8935fa3aa5fe8be532e06387d82f07e", 0xca}, {&(0x7f0000000700)="f32ced1978f6103c6709573259e317066e84d42f18d090e52035bcf2ddcf8761f30c8179d42f2d06e49766e18561147a88e7ab4a817816b9da02e1744bc7eb653eb04ab70b5bf5111e01923c9bd0f4b72df99f19253083a444b5fbf214a2e9fbbc352a08731643692912aebd09546ccb28837254a30d1e53084dd7f6b7114fa3825fcbae9443ec15fb31bca97a87824d4bc8b632cf971bfb523a", 0x9a}], 0x6, &(0x7f0000000840)="a6d462c399e20d9d7ab19933a9b3d0e1d617be45eb50440e1e51f20cd773cd1b34e2669a511f6292d81a777376560dc1daae580d2419af271bdd485f32ddaa3679178bcbe6ff6f5d5d758535afbe2a930342eaa16108a32d9d31fbfe8bf4d89784440c3ff3fef2f998aebc9634", 0x6d}, 0x80) close(r4) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0xfffffffffffffe25}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x15, 0x0, 0x6, 0xfb, 0x0, 0x1}, 0x48) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18d8000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf98000000000000560900000000001449f790ca681e0100b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0xffffffffffffffac, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="1880000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'veth1_to_bridge\x00'}) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETOFFLOAD(r7, 0x40047451, 0x2000000c) close(r6) 375.340832ms ago: executing program 4 (id=866): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1083}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:apt_var_cache_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bridge0\x00'}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x40000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) (async) r3 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000340)) connect$unix(r3, &(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e) (async) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000440), r1) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r4, 0x209, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x48850) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000540)={'veth1_to_bridge\x00', 0x6}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000640)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r5, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x64, r2, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0xc404}, 0x800) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20040010) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000f80)={@private0, 0x0}, &(0x7f0000000fc0)=0x14) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000028c0)={'ip_vti0\x00', &(0x7f00000027c0)={'syztnl0\x00', 0x0, 0x8000, 0x80, 0x2f74, 0x0, {{0x31, 0x4, 0x0, 0x1c, 0xc4, 0x65, 0x0, 0xff, 0x2f, 0x0, @loopback, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0xe7, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x17}, 0xb1}, {@multicast2, 0x5}, {@private=0xa010101, 0xfffffff7}]}, @timestamp_addr={0x44, 0xc, 0xbe, 0x1, 0x3, [{@dev={0xac, 0x14, 0x14, 0x1c}, 0x984}]}, @timestamp_prespec={0x44, 0x44, 0xe7, 0x3, 0x2, [{@multicast2, 0xfffffffe}, {@empty, 0x5}, {@multicast1, 0xfffffffb}, {@loopback, 0xa9}, {@dev={0xac, 0x14, 0x14, 0x22}}, {@rand_addr=0x64010100, 0xf}, {@private=0xa010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xf}]}, @timestamp_prespec={0x44, 0x3c, 0xe5, 0x3, 0x5, [{@multicast1, 0x4}, {@private=0xa010100, 0x8a4}, {@private=0xa010100, 0x6}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x8}, {@loopback, 0xa8fe}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20000000}, {@remote, 0x4b}]}, @end, @ssrr={0x89, 0x7, 0x94, [@broadcast]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002980)={'ip_vti0\x00', &(0x7f0000002900)={'erspan0\x00', 0x0, 0x8000, 0x7800, 0x6, 0x2, {{0xc, 0x4, 0x2, 0x33, 0x30, 0x66, 0x0, 0x5, 0x2f, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0xc, 0x23, 0x3, 0x3, [{@private=0xa010100, 0x8}]}, @timestamp={0x44, 0x10, 0x7d, 0x0, 0x1, [0x5, 0x7, 0x48]}]}}}}}) sendmmsg$inet6(r9, &(0x7f0000002ec0)=[{{&(0x7f0000000880)={0xa, 0x4e20, 0x5, @local, 0x85}, 0x1c, &(0x7f0000000900)=[{&(0x7f00000008c0)}], 0x1, &(0x7f0000000940)=[@rthdr={{0x18, 0x29, 0x39, {0x8, 0x0, 0x2, 0xff}}}, @dstopts_2292={{0x68, 0x29, 0x4, {0x2b, 0x9, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x49, 0x1ff, [0x9, 0x5, 0x1, 0xc74, 0x101]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x32, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @loopback}]}}}, @rthdrdstopts={{0x98, 0x29, 0x37, {0x1, 0xf, '\x00', [@padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @generic={0x2, 0x65, "1df85620321efbdf3be721caaf2f45f1fdfb2989e75230addd92048b35794a1726ea17b0b4f92dfa2ab95e83533076f168630967f6d053ab9bf92c406f8cddf19209e2c7df8ffc1488305dcd2fbf814730b8c64e32b56513e7de128bae39b33f2fd061f86c"}]}}}], 0x148}}, {{&(0x7f0000000ac0)={0xa, 0x4e23, 0x6, @loopback, 0x27c}, 0x1c, &(0x7f0000000ec0)=[{&(0x7f0000000b00)="5646f218d2d2adb84003cfad6bd83e272f7b79f9d6cd983ce57b9b7123948b2d45dfd62db94f6639", 0x28}, {&(0x7f0000000b40)="3bd55f50f30a6700500117de6321ff8d171f736bf87a370c1f9c3a03ba8d9629d9cf8b787f067366860bd40f3b9d5217570a70db5d945598ad4c46d7b69619e492f61b5e6d6f2ddbd6c603e2a5d317eeb742cae79278c2c176934396a99baab01242092ec37108b0e566d32b3f93401a2269fa5e9e2c57cb4985d4b228bbac4305329f7affd6dc4b8af59ab2943b353753137173617a16586f2e31ed96a79368508e2ec6d9d684b2b2014e49e342ac001ee2e13fec215da288d52e84e2484f513eff57329b25b366f5722fbc", 0xcc}, {&(0x7f0000000c40)="771c768d1edc6d3e94e7926e0e770156102dcdcb3bb7530ef9a1c808f46c81ac222ee4c95b08f36b09edd7d9e61e104647c6d5e221dbc09a05943d7f5afa7dd6fdbdcf41cc6f8e1e8ff44b21b3e3dbe2919d112a12141abeebdfea631ac1327e70589d0b953ac564da027c0c64e80b3c180ff38aad94795cf7bd451d75917cb9b026f5d772c15f776f77586aa1a186451837a40133ba87c55ed3212c87af48bbbf93e49e0a58c0da14c13692c57e9f1d4dd23feecf049b6540edd3f575e134da9a91aa0d5fa902834ad210076a9aa977c9a5", 0xd2}, {&(0x7f0000000d40)="929e6f095bf87febc54fe6ab15384d93e3d12ca5e5d0fd2e84cb6376af4e28d33de84ae789da05dc61754cdb87b8496f58863d641beea02ae7fc9655cb4ded7e873f76a58ab8e61aaa702d977fbaabbdcdc135d6d830c41c7c9cde7951ee66108bc0b9b93ba33cedcefc23d1f6ff892151ac21937246f438", 0x78}, {&(0x7f0000000dc0)="6aa46239b4baa29fc73f7722983eecd71ef2dd6352685a0cd6beb2981c5bc5012bdb31db32c4b53e5eb0cf14494964a7ae3ca47eb8f2734f89b00dab566c9249f4858545ca7c2860c7708f36cdc3a1145d37aa10faaef294e4fb0d24e7144571958e1e5d1e10cb2760209645cd62d0b67558431b4c645a34128d34aaac0bfa196c91ac087aced7dd5910d5f3ad3db1972e0c7001e0f15560e59c9e8f288670fff8ed1e661005ec81110bb8fb3dc1c5e685e0aaadc60094b3936c5d8d2e980eb9510d2733484535d1c759b5a034651d34e9693dc14ef99d98e5d4bca57dc2", 0xde}], 0x5, &(0x7f0000001000)=[@rthdr={{0x38, 0x29, 0x39, {0x87, 0x4, 0x0, 0x3, 0x0, [@mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hopopts={{0x50, 0x29, 0x36, {0x33, 0x6, '\x00', [@pad1, @generic={0xe, 0x5, "a103377019"}, @calipso={0x7, 0x18, {0x1, 0x4, 0xf2, 0x1, [0x7fffffffffffffff, 0x4]}}, @hao={0xc9, 0x10, @private0}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@local, r10}}}, @hoplimit={{0x14, 0x29, 0x34, 0xc035}}, @dstopts_2292={{0x28, 0x29, 0x4, {0x2f, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2, r11}}}], 0x118}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001140)="28c5aa3f61681fc9da454655b27b77943483c9cfd30da4bb68b6b33306c9253e70422f93dd8c29bed1df0143489d7e7adcdf12b8c5ce7ab16265d5a1", 0x3c}, {&(0x7f0000001180)="6e6372a84afc1a86dc4ac97fa3d861203adddde6d903b6b653ed69a6f3de53a76bcca8e9eeb773416455bff859b8d555fe73c19f4c4b85066b3a7cd0ec1c9447889482f8d61a1abe8baa85692d05a5ccea34066f3948ceb00855989dc13f40c8300ac72c7bbe967be6dcdb4e2bde63e323a17c82391e76b518a4dfe9fbce7177842f7d60a36d0d4117069a20eb2abb68af9cb3ad3469fe7b0b57f762f7cb362a810680c3258fd2b4267f21439c26677b83ab1bbe91fb0ecc784d22d456f9f1764392804d256ae79ae323144a02fe030115cf", 0xd2}, {&(0x7f0000001280)="c5a7339cf23a0db7e4e8493a3549e10079e40852aefc9bae412bb03a84e2d7beb13aaa398af84022d98d6be14a93546a", 0x30}, {&(0x7f00000012c0)="de0c977762d5120dde697cdf3af7059554b428239079cb0f5dec", 0x1a}, {&(0x7f0000001300)="4a0597a7a84e4f43926d7b2edccca1d70d1d834651d6d10412b41317c359477ff6f84b06ffee103c4aa9c3df974dd406fd4d6203c07c4cc3e2a6da310768f0d877091daaa5ed7e717ee5be8b6ee3465129401a0f3850c32652580b414b3d79de6c4cc9e80107207865f690ada27edf31f29f32881c18b1268d2ef3d9c80aae8e65ea139c038d7ebca551d0c4160384afe3a8ed5a9ed3cfe263cd6c198c934ccf3687f2f1a80c4e09e1af24d0d23eedd245304113709df8113266aad6585f797ef7175b8b37aa8e214a2703f2e068fb506337091dbf8b706b0d6912cacd3aac0a5765d18eaf30211d50d3bb4380345abd4dec", 0xf2}, {&(0x7f0000001400)="5e89cf0c7e4e36a413bc41a316cf6f9afb7dd50bf06044e1b544e000efc0ff5e5c81550cb7aceb700b5f7e6336dc5526521a19a2912ef0f6d6120d4e70aaae6bd48f779e1d1826523f98d021832aadcd3f20242502e1b70fee42f38e2d5d0a134be05cc425508a3358d2fdc46ba470cf31aa7bfca8567f03eb8ac46473b80364d1f33d0dac7f252f9b54f94bb02add0d8546b7cb591828e03743f75c16f369", 0x9f}, {&(0x7f00000014c0)="befd6e82da8c427f43465f8ec936ecffae4546f00d950ecc6a45eca096d091071d7b5934534e33e25be0864747ae918823cc9b1646890593e27c7222b2839aa25a5775a80972a48d8b22175d893f02", 0x4f}, {&(0x7f0000001540)="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", 0x1000}], 0x8, &(0x7f00000025c0)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x16, 0x6, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x6, 0x8, [0x4]}}, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0x8}]}}}, @hoplimit={{0x14}}], 0x80}}, {{&(0x7f0000002640)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ebf}, 0x1c, &(0x7f0000002780)=[{&(0x7f0000002680)="5d01c86371b17bcc45fd8938e2bf35d4359cf3a660009997535a5e50262bcfb8ac58c5f721b7efa5a77d72493f0a67a5be5bbd14b3268449f43fbc45e0959228cf6a274a58e95da33b32941ed24fd65d052a2b9eca22dc57dca68230bc652f246367accfb5e00814c7f5d4aedd525262a8112b5f2e52231e0d1ae54dff753cc7bd5c9b4b099d4fd9200eeed76f8aa1863a3046faccbbe0ea9a162ba77e3a760af17c6f67801cb6d26674dd6767fc23", 0xaf}, {&(0x7f0000002740)="f2fb3c3624639cda94a299aa4581836344902b191e500e78e2d611587b939418e2fdf961c2364de32c5b983a0db5a57c53384b354d85f13b80a39936e3f1c3", 0x3f}], 0x2, &(0x7f00000029c0)=[@dstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0x87, 0x6, '\x00', [@ra={0x5, 0x2, 0x176a}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x6}, @calipso={0x7, 0x10, {0x3, 0x2, 0x51, 0x4, [0x4]}}, @jumbo]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote, r12}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r13}}}, @rthdr={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x1, 0x1, 0x0, [@mcast1, @mcast2]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xb20}}, @hopopts_2292={{0x98, 0x29, 0x36, {0x88, 0xf, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x5, 0xffff, [0x8000, 0x1000, 0x4, 0x6952, 0x6, 0x3ff, 0xd]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x10}}, @enc_lim={0x4, 0x1, 0x8}, @jumbo={0xc2, 0x4, 0x40}, @ra={0x5, 0x2, 0x6}, @pad1, @ra={0x5, 0x2, 0x14}, @hao={0xc9, 0x10, @loopback}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x1, 0x2, '\x00', [@hao={0xc9, 0x10, @remote}]}}}], 0x1f8}}, {{&(0x7f0000002bc0)={0xa, 0x4e21, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}, 0x1c, &(0x7f0000002dc0)=[{&(0x7f0000002c00)="35d9dc3387e1b25babc2502c3cd7414933568467ae", 0x15}, {&(0x7f0000002c40)="3ed316e7afdd638f9fb1e3115beab71cdd10440d5b42719c442b1a70f68067a2e6b2a9dabe6fa8d5c17db71cd1560875a698d950ffac7f876dd2848dc5e27cde099509ceed14fe7ffa7148b9d3bfe89dfd1786ff54ef52ef49ea", 0x5a}, {&(0x7f0000002cc0)="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", 0xfa}], 0x3, &(0x7f0000002e00)=[@flowinfo={{0x14, 0x29, 0xb, 0x80}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @hopopts_2292={{0x50, 0x29, 0x36, {0x62, 0x6, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x64, 0x934, [0xa, 0x401, 0x81, 0x6, 0x5]}}]}}}], 0xa0}}], 0x5, 0x810) (async) getsockopt$IP6T_SO_GET_REVISION_MATCH(r9, 0x29, 0x44, &(0x7f0000003000)={'ipvs\x00'}, &(0x7f0000003040)=0x1e) (async) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f00000030c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000003200)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000031c0)={&(0x7f0000003100)={0x9c, r14, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1e}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x9c}}, 0x20040040) r15 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000003280), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000033c0)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0xc10041}, 0xc, &(0x7f0000003380)={&(0x7f00000032c0)={0xb0, r15, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x9c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3a77d248}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x13e05cda}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b0a0276}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5d2eb9c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57c8857d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8046}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3535}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x28f1b813}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x22bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4965}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f3cae00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x66ec}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x46cb6a69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc7ac}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1d6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x39ad}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9ac5}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x20004090) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003480)={{r9}, &(0x7f0000003400), &(0x7f0000003440)='%pB \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000034c0)={'wlan0\x00'}) 277.861705ms ago: executing program 3 (id=867): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x8efe) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 198.122473ms ago: executing program 4 (id=868): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@x}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e1452fd30b640000000200000000000040000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 178.983592ms ago: executing program 3 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002a00090000000000000000000b"], 0x18}, 0x1, 0x3000000}, 0x0) 5.046699ms ago: executing program 4 (id=870): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) epoll_create1(0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) 0s ago: executing program 3 (id=871): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0xfffc, 0x0, @loopback}], 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x27}}], 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) sendmmsg$inet6(r3, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r1, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 8 64 89 01 48 [ 96.037687][ T5637] RSP: 002b:00007ff876913fb8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 96.046112][ T5637] RAX: ffffffffffffffda RBX: 00007ff875d05f60 RCX: 00007ff875b77d37 [ 96.054096][ T5637] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 96.062089][ T5637] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 96.070066][ T5637] R10: 0000000020000200 R11: 0000000000000286 R12: 0000000000000001 [ 96.078040][ T5637] R13: 000000000000000b R14: 00007ff875d05f60 R15: 00007ffc01ebbc98 [ 96.086054][ T5637] [ 96.154422][ T5641] netlink: 16 bytes leftover after parsing attributes in process `syz.4.110'. [ 97.020560][ T5668] netlink: 'syz.3.112': attribute type 10 has an invalid length. [ 97.355235][ T5331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.411149][ T5331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.483410][ T5699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.117'. [ 97.549258][ T5699] bond0: option arp_all_targets: invalid value (116) [ 97.568817][ T5331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.674261][ T5331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.722791][ T5709] FAULT_INJECTION: forcing a failure. [ 97.722791][ T5709] name failslab, interval 1, probability 0, space 0, times 0 [ 97.772102][ T5709] CPU: 0 PID: 5709 Comm: syz.2.120 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 97.781810][ T5709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 97.791928][ T5709] Call Trace: [ 97.795243][ T5709] [ 97.798210][ T5709] dump_stack_lvl+0x241/0x360 [ 97.802933][ T5709] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.808208][ T5709] ? __pfx__printk+0x10/0x10 [ 97.812853][ T5709] ? __pfx___might_resched+0x10/0x10 [ 97.818184][ T5709] should_fail_ex+0x3b0/0x4e0 [ 97.822892][ T5709] ? apparmor_sk_alloc_security+0x77/0x100 [ 97.828822][ T5709] should_failslab+0x9/0x20 [ 97.833359][ T5709] __kmalloc_cache_noprof+0x6c/0x2c0 [ 97.838708][ T5709] apparmor_sk_alloc_security+0x77/0x100 [ 97.844374][ T5709] security_sk_alloc+0x75/0xb0 [ 97.849171][ T5709] sk_prot_alloc+0xfa/0x210 [ 97.853711][ T5709] ? sk_alloc+0x26/0x370 [ 97.858000][ T5709] sk_alloc+0x38/0x370 [ 97.862098][ T5709] ? __pfx_genl_release+0x10/0x10 [ 97.867143][ T5709] __netlink_create+0x65/0x260 [ 97.871926][ T5709] ? __pfx_genl_release+0x10/0x10 [ 97.876963][ T5709] netlink_create+0x3ab/0x560 [ 97.881659][ T5709] ? __pfx_genl_unbind+0x10/0x10 [ 97.886609][ T5709] ? __pfx_genl_bind+0x10/0x10 [ 97.891393][ T5709] ? __sock_create+0x337/0x920 [ 97.896173][ T5709] __sock_create+0x490/0x920 [ 97.900786][ T5709] __sys_socket+0x150/0x3c0 [ 97.905298][ T5709] ? __pfx___sys_socket+0x10/0x10 [ 97.910327][ T5709] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.916666][ T5709] ? exc_page_fault+0x590/0x8c0 [ 97.921535][ T5709] __x64_sys_socket+0x7a/0x90 [ 97.926236][ T5709] do_syscall_64+0xf3/0x230 [ 97.930756][ T5709] ? clear_bhb_loop+0x35/0x90 [ 97.935452][ T5709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.941359][ T5709] RIP: 0033:0x7febfa777d37 [ 97.945779][ T5709] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.965411][ T5709] RSP: 002b:00007febfb49dfb8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 97.973833][ T5709] RAX: ffffffffffffffda RBX: 00007febfa905f60 RCX: 00007febfa777d37 [ 97.981808][ T5709] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 97.989782][ T5709] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 97.997759][ T5709] R10: 0000000020000200 R11: 0000000000000286 R12: 0000000000000001 [ 98.005735][ T5709] R13: 000000000000000b R14: 00007febfa905f60 R15: 00007ffcbb156598 [ 98.013725][ T5709] [ 98.184734][ C0] eth0: bad gso: type: 1, size: 1408 [ 98.296384][ T5722] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 98.397134][ T5331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.515685][ T5331] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.530503][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.537710][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.619644][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.626929][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.724584][ T5705] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 99.484650][ T5331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.570696][ T5764] x_tables: ip_tables: osf match: only valid for protocol 6 [ 99.682105][ T5767] Bluetooth: MGMT ver 1.23 [ 99.714119][ T5331] veth0_vlan: entered promiscuous mode [ 99.787279][ T5331] veth1_vlan: entered promiscuous mode [ 99.935531][ T5331] veth0_macvtap: entered promiscuous mode [ 99.947387][ T5781] IPv6: addrconf: prefix option has invalid lifetime [ 99.988936][ T5779] netlink: 'syz.3.134': attribute type 10 has an invalid length. [ 100.054135][ T5779] team0: Device ipvlan1 failed to register rx_handler [ 100.153272][ T5331] veth1_macvtap: entered promiscuous mode [ 100.301603][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.318097][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.335169][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.346897][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.363619][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.374633][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.393418][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.406969][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.428227][ T5331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.458255][ T5799] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 100.501665][ T5800] netlink: 'syz.0.140': attribute type 29 has an invalid length. [ 100.517326][ T5802] netlink: 'syz.0.140': attribute type 29 has an invalid length. [ 100.548004][ T5800] netlink: 'syz.0.140': attribute type 29 has an invalid length. [ 100.557038][ T5800] netlink: 'syz.0.140': attribute type 29 has an invalid length. [ 100.583417][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.597277][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.610547][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.621342][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.632403][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.645384][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.655836][ T5331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.666899][ T5331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.680947][ T5331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.694664][ T5800] netlink: 'syz.0.140': attribute type 29 has an invalid length. [ 100.733366][ T5802] netlink: 'syz.0.140': attribute type 29 has an invalid length. [ 100.748919][ T5331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.789376][ T5331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.835118][ T5331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.869281][ T5331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.123785][ T5824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.144'. [ 101.318180][ T5831] netlink: 'syz.4.145': attribute type 5 has an invalid length. [ 101.549494][ T5837] netlink: 72 bytes leftover after parsing attributes in process `syz.2.147'. [ 101.600713][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.649493][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.782327][ T5848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 101.798623][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.826207][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.289021][ T5873] netlink: 'syz.1.157': attribute type 64 has an invalid length. [ 102.363333][ T5879] netlink: 24 bytes leftover after parsing attributes in process `syz.4.156'. [ 103.797961][ T5933] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 104.071043][ T5936] netlink: 'syz.3.169': attribute type 1 has an invalid length. [ 104.214645][ T5948] netlink: 12 bytes leftover after parsing attributes in process `syz.2.170'. [ 104.507234][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.170'. [ 104.627918][ C0] eth0: bad gso: type: 1, size: 1408 [ 104.858113][ T5970] FAULT_INJECTION: forcing a failure. [ 104.858113][ T5970] name failslab, interval 1, probability 0, space 0, times 0 [ 104.948990][ T5970] CPU: 1 PID: 5970 Comm: syz.4.174 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 104.958773][ T5970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 104.968865][ T5970] Call Trace: [ 104.972176][ T5970] [ 104.975145][ T5970] dump_stack_lvl+0x241/0x360 [ 104.979861][ T5970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.985094][ T5970] ? __pfx__printk+0x10/0x10 [ 104.989726][ T5970] ? netlink_insert+0x10b7/0x14b0 [ 104.994791][ T5970] should_fail_ex+0x3b0/0x4e0 [ 104.999501][ T5970] ? __alloc_skb+0x1c3/0x440 [ 105.004215][ T5970] should_failslab+0x9/0x20 [ 105.008749][ T5970] kmem_cache_alloc_node_noprof+0x71/0x320 [ 105.014681][ T5970] __alloc_skb+0x1c3/0x440 [ 105.019134][ T5970] ? __pfx___alloc_skb+0x10/0x10 [ 105.024113][ T5970] ? netlink_autobind+0xd6/0x2f0 [ 105.029182][ T5970] ? netlink_autobind+0x2b0/0x2f0 [ 105.034254][ T5970] netlink_sendmsg+0x638/0xcb0 [ 105.039065][ T5970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.044388][ T5970] ? aa_sock_msg_perm+0x91/0x160 [ 105.049363][ T5970] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 105.054697][ T5970] ? security_socket_sendmsg+0x87/0xb0 [ 105.060213][ T5970] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.065536][ T5970] __sock_sendmsg+0x221/0x270 [ 105.070297][ T5970] __sys_sendto+0x3a4/0x4f0 [ 105.074847][ T5970] ? __pfx___sys_sendto+0x10/0x10 [ 105.079942][ T5970] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.085964][ T5970] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.092345][ T5970] ? exc_page_fault+0x590/0x8c0 [ 105.097230][ T5970] __x64_sys_sendto+0xde/0x100 [ 105.102044][ T5970] do_syscall_64+0xf3/0x230 [ 105.106583][ T5970] ? clear_bhb_loop+0x35/0x90 [ 105.111306][ T5970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.117246][ T5970] RIP: 0033:0x7f6dd9777cac [ 105.121875][ T5970] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 105.141609][ T5970] RSP: 002b:00007f6dda51aed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 105.150066][ T5970] RAX: ffffffffffffffda RBX: 00007f6dda51afd0 RCX: 00007f6dd9777cac [ 105.158088][ T5970] RDX: 0000000000000020 RSI: 00007f6dda51b020 RDI: 0000000000000005 [ 105.166096][ T5970] RBP: 0000000000000000 R08: 00007f6dda51af24 R09: 000000000000000c [ 105.174101][ T5970] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 105.182106][ T5970] R13: 00007f6dda51af78 R14: 00007f6dda51b020 R15: 0000000000000000 [ 105.190128][ T5970] [ 105.667736][ T5987] netlink: 'syz.1.179': attribute type 2 has an invalid length. [ 105.750997][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 105.836420][ T6003] bond0: entered promiscuous mode [ 105.849810][ T6003] bond_slave_0: entered promiscuous mode [ 105.856444][ T6003] bond_slave_1: entered promiscuous mode [ 106.114574][ T6021] pimreg: entered allmulticast mode [ 106.146063][ T6025] netlink: 256 bytes leftover after parsing attributes in process `syz.4.189'. [ 106.168469][ T6021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.187'. [ 106.182865][ T6024] netlink: 256 bytes leftover after parsing attributes in process `syz.4.189'. [ 106.187128][ T6021] netlink: 188 bytes leftover after parsing attributes in process `syz.2.187'. [ 106.317580][ T6033] sch_tbf: peakrate 7462380593465401512 is lower than or equals to rate 18428595723600419182 ! [ 106.426492][ T6038] xt_hashlimit: max too large, truncated to 1048576 [ 106.953488][ T6074] FAULT_INJECTION: forcing a failure. [ 106.953488][ T6074] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.010542][ T6074] CPU: 1 PID: 6074 Comm: syz.3.201 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 107.020249][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 107.030340][ T6074] Call Trace: [ 107.033656][ T6074] [ 107.036621][ T6074] dump_stack_lvl+0x241/0x360 [ 107.041350][ T6074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.046595][ T6074] ? __pfx__printk+0x10/0x10 [ 107.051235][ T6074] ? __pfx_lock_release+0x10/0x10 [ 107.056898][ T6074] should_fail_ex+0x3b0/0x4e0 [ 107.061631][ T6074] _copy_from_iter+0x1f6/0x1960 [ 107.066537][ T6074] ? __virt_addr_valid+0x183/0x530 [ 107.071790][ T6074] ? __pfx_lock_release+0x10/0x10 [ 107.076882][ T6074] ? __alloc_skb+0x28f/0x440 [ 107.081514][ T6074] ? __pfx__copy_from_iter+0x10/0x10 [ 107.086840][ T6074] ? __virt_addr_valid+0x183/0x530 [ 107.092005][ T6074] ? __virt_addr_valid+0x183/0x530 [ 107.097173][ T6074] ? __virt_addr_valid+0x45f/0x530 [ 107.102342][ T6074] ? __check_object_size+0x49c/0x900 [ 107.107677][ T6074] netlink_sendmsg+0x73d/0xcb0 [ 107.112503][ T6074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.117840][ T6074] ? aa_sock_msg_perm+0x91/0x160 [ 107.122826][ T6074] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 107.128336][ T6074] ? security_socket_sendmsg+0x87/0xb0 [ 107.133850][ T6074] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.139183][ T6074] __sock_sendmsg+0x221/0x270 [ 107.143925][ T6074] __sys_sendto+0x3a4/0x4f0 [ 107.148488][ T6074] ? __pfx___sys_sendto+0x10/0x10 [ 107.153594][ T6074] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.159642][ T6074] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.166018][ T6074] ? exc_page_fault+0x590/0x8c0 [ 107.170924][ T6074] __x64_sys_sendto+0xde/0x100 [ 107.175741][ T6074] do_syscall_64+0xf3/0x230 [ 107.180291][ T6074] ? clear_bhb_loop+0x35/0x90 [ 107.185011][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.190952][ T6074] RIP: 0033:0x7f2c00d77cac [ 107.195406][ T6074] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 107.215060][ T6074] RSP: 002b:00007f2c01a9eed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 107.223534][ T6074] RAX: ffffffffffffffda RBX: 00007f2c01a9efd0 RCX: 00007f2c00d77cac [ 107.231559][ T6074] RDX: 0000000000000020 RSI: 00007f2c01a9f020 RDI: 0000000000000005 [ 107.239578][ T6074] RBP: 0000000000000000 R08: 00007f2c01a9ef24 R09: 000000000000000c [ 107.247594][ T6074] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 107.255608][ T6074] R13: 00007f2c01a9ef78 R14: 00007f2c01a9f020 R15: 0000000000000000 [ 107.263638][ T6074] [ 107.425703][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 107.470894][ T6094] netlink: 'syz.2.205': attribute type 2 has an invalid length. [ 107.611008][ T6105] xt_HMARK: spi-set and port-set can't be combined [ 107.652564][ T6105] xt_HMARK: spi-set and port-set can't be combined [ 107.668729][ T6107] netlink: 'syz.0.210': attribute type 2 has an invalid length. [ 108.045266][ C0] eth0: bad gso: type: 1, size: 1408 [ 108.058658][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.212'. [ 108.417526][ T6141] FAULT_INJECTION: forcing a failure. [ 108.417526][ T6141] name failslab, interval 1, probability 0, space 0, times 0 [ 108.459292][ T6141] CPU: 1 PID: 6141 Comm: syz.0.218 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 108.468997][ T6141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 108.479178][ T6141] Call Trace: [ 108.482865][ T6141] [ 108.485871][ T6141] dump_stack_lvl+0x241/0x360 [ 108.490610][ T6141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.495859][ T6141] ? __pfx__printk+0x10/0x10 [ 108.500501][ T6141] ? ref_tracker_alloc+0x332/0x490 [ 108.505662][ T6141] should_fail_ex+0x3b0/0x4e0 [ 108.510391][ T6141] ? skb_clone+0x20c/0x390 [ 108.514844][ T6141] should_failslab+0x9/0x20 [ 108.519408][ T6141] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 108.524823][ T6141] skb_clone+0x20c/0x390 [ 108.529354][ T6141] __netlink_deliver_tap+0x3cc/0x7c0 [ 108.534669][ T6141] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.539975][ T6141] netlink_deliver_tap+0x19d/0x1b0 [ 108.545125][ T6141] netlink_unicast+0x7be/0x990 [ 108.549919][ T6141] ? __pfx_netlink_unicast+0x10/0x10 [ 108.555215][ T6141] ? __virt_addr_valid+0x183/0x530 [ 108.560351][ T6141] ? __check_object_size+0x49c/0x900 [ 108.565656][ T6141] ? bpf_lsm_netlink_send+0x9/0x10 [ 108.570793][ T6141] netlink_sendmsg+0x8e4/0xcb0 [ 108.575594][ T6141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.580905][ T6141] ? aa_sock_msg_perm+0x91/0x160 [ 108.585864][ T6141] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 108.591170][ T6141] ? security_socket_sendmsg+0x87/0xb0 [ 108.596653][ T6141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.601954][ T6141] __sock_sendmsg+0x221/0x270 [ 108.606648][ T6141] __sys_sendto+0x3a4/0x4f0 [ 108.611173][ T6141] ? __pfx___sys_sendto+0x10/0x10 [ 108.616238][ T6141] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.622234][ T6141] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.628578][ T6141] ? exc_page_fault+0x590/0x8c0 [ 108.633442][ T6141] __x64_sys_sendto+0xde/0x100 [ 108.638224][ T6141] do_syscall_64+0xf3/0x230 [ 108.642744][ T6141] ? clear_bhb_loop+0x35/0x90 [ 108.647439][ T6141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.653345][ T6141] RIP: 0033:0x7ff875b77cac [ 108.657770][ T6141] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 108.677397][ T6141] RSP: 002b:00007ff876913ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 108.685840][ T6141] RAX: ffffffffffffffda RBX: 00007ff876913fd0 RCX: 00007ff875b77cac [ 108.693847][ T6141] RDX: 0000000000000020 RSI: 00007ff876914020 RDI: 0000000000000005 [ 108.701836][ T6141] RBP: 0000000000000000 R08: 00007ff876913f24 R09: 000000000000000c [ 108.709849][ T6141] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 108.717825][ T6141] R13: 00007ff876913f78 R14: 00007ff876914020 R15: 0000000000000000 [ 108.725827][ T6141] [ 108.943682][ T6155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.222'. [ 109.360943][ T6173] IPv6: addrconf: prefix option has invalid lifetime [ 109.465315][ T6181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.230'. [ 109.497077][ T6181] Bluetooth: MGMT ver 1.23 [ 109.503279][ T6181] Bluetooth: hci3: invalid len left 7, exp >= 195 [ 109.640918][ T6189] FAULT_INJECTION: forcing a failure. [ 109.640918][ T6189] name failslab, interval 1, probability 0, space 0, times 0 [ 109.654009][ T6189] CPU: 1 PID: 6189 Comm: syz.1.232 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 109.663714][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 109.673917][ T6189] Call Trace: [ 109.677226][ T6189] [ 109.680193][ T6189] dump_stack_lvl+0x241/0x360 [ 109.684922][ T6189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.690189][ T6189] ? __pfx__printk+0x10/0x10 [ 109.694839][ T6189] should_fail_ex+0x3b0/0x4e0 [ 109.699561][ T6189] ? skb_clone+0x20c/0x390 [ 109.704015][ T6189] should_failslab+0x9/0x20 [ 109.708552][ T6189] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 109.713967][ T6189] skb_clone+0x20c/0x390 [ 109.718241][ T6189] ? dev_queue_xmit_nit+0x220/0xc10 [ 109.722456][ T6192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 109.723463][ T6189] dev_queue_xmit_nit+0x419/0xc10 [ 109.737369][ T6189] ? dev_queue_xmit_nit+0x2b/0xc10 [ 109.742532][ T6189] ? validate_xmit_skb+0x9f9/0x1120 [ 109.747791][ T6189] dev_hard_start_xmit+0x15f/0x7e0 [ 109.752956][ T6189] ? __pfx_validate_xmit_skb+0x10/0x10 [ 109.758477][ T6189] __dev_queue_xmit+0x1b63/0x3e90 [ 109.763538][ T6189] ? kasan_save_track+0x51/0x80 [ 109.768482][ T6189] ? do_syscall_64+0xf3/0x230 [ 109.773176][ T6189] ? __dev_queue_xmit+0x2da/0x3e90 [ 109.778381][ T6189] ? __pfx___dev_queue_xmit+0x10/0x10 [ 109.783808][ T6189] ? __copy_skb_header+0x437/0x5b0 [ 109.788944][ T6189] ? __asan_memcpy+0x40/0x70 [ 109.793565][ T6189] ? __copy_skb_header+0x437/0x5b0 [ 109.798708][ T6189] ? __skb_clone+0x454/0x6c0 [ 109.803336][ T6189] ? skb_clone+0x240/0x390 [ 109.807774][ T6189] __netlink_deliver_tap+0x54d/0x7c0 [ 109.813099][ T6189] ? netlink_deliver_tap+0x2e/0x1b0 [ 109.818338][ T6189] netlink_deliver_tap+0x19d/0x1b0 [ 109.823486][ T6189] netlink_unicast+0x7be/0x990 [ 109.828283][ T6189] ? __pfx_netlink_unicast+0x10/0x10 [ 109.833581][ T6189] ? __virt_addr_valid+0x183/0x530 [ 109.838722][ T6189] ? __check_object_size+0x49c/0x900 [ 109.844031][ T6189] ? bpf_lsm_netlink_send+0x9/0x10 [ 109.849158][ T6189] netlink_sendmsg+0x8e4/0xcb0 [ 109.853961][ T6189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.859270][ T6189] ? aa_sock_msg_perm+0x91/0x160 [ 109.864234][ T6189] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 109.869539][ T6189] ? security_socket_sendmsg+0x87/0xb0 [ 109.875020][ T6189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.880368][ T6189] __sock_sendmsg+0x221/0x270 [ 109.885065][ T6189] __sys_sendto+0x3a4/0x4f0 [ 109.889595][ T6189] ? __pfx___sys_sendto+0x10/0x10 [ 109.894753][ T6189] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 109.900766][ T6189] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.907108][ T6189] ? exc_page_fault+0x590/0x8c0 [ 109.912063][ T6189] __x64_sys_sendto+0xde/0x100 [ 109.916854][ T6189] do_syscall_64+0xf3/0x230 [ 109.921380][ T6189] ? clear_bhb_loop+0x35/0x90 [ 109.926083][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.931996][ T6189] RIP: 0033:0x7f2815777cac [ 109.936420][ T6189] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 109.956037][ T6189] RSP: 002b:00007f2816557ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 109.964464][ T6189] RAX: ffffffffffffffda RBX: 00007f2816557fd0 RCX: 00007f2815777cac [ 109.972454][ T6189] RDX: 0000000000000020 RSI: 00007f2816558020 RDI: 0000000000000005 [ 109.980619][ T6189] RBP: 0000000000000000 R08: 00007f2816557f24 R09: 000000000000000c [ 109.988599][ T6189] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 109.996870][ T6189] R13: 00007f2816557f78 R14: 00007f2816558020 R15: 0000000000000000 [ 110.004866][ T6189] [ 110.207095][ C0] eth0: bad gso: type: 1, size: 1408 [ 110.264943][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.237'. [ 110.346400][ T6215] netlink: 28 bytes leftover after parsing attributes in process `syz.0.238'. [ 110.645988][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.239'. [ 110.876739][ T6236] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 111.006344][ C0] eth0: bad gso: type: 1, size: 1408 [ 111.012307][ C0] eth0: bad gso: type: 1, size: 1408 [ 111.031209][ T6258] FAULT_INJECTION: forcing a failure. [ 111.031209][ T6258] name failslab, interval 1, probability 0, space 0, times 0 [ 111.044035][ T6258] CPU: 0 PID: 6258 Comm: syz.3.248 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 111.053702][ T6258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 111.063794][ T6258] Call Trace: [ 111.067085][ T6258] [ 111.070027][ T6258] dump_stack_lvl+0x241/0x360 [ 111.074719][ T6258] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.079922][ T6258] ? __pfx__printk+0x10/0x10 [ 111.084528][ T6258] should_fail_ex+0x3b0/0x4e0 [ 111.089220][ T6258] ? skb_clone+0x20c/0x390 [ 111.093643][ T6258] should_failslab+0x9/0x20 [ 111.098157][ T6258] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 111.103546][ T6258] skb_clone+0x20c/0x390 [ 111.107798][ T6258] ? dev_queue_xmit_nit+0x220/0xc10 [ 111.113030][ T6258] dev_queue_xmit_nit+0x419/0xc10 [ 111.118064][ T6258] ? dev_queue_xmit_nit+0x2b/0xc10 [ 111.123192][ T6258] ? validate_xmit_skb+0x9f9/0x1120 [ 111.128423][ T6258] dev_hard_start_xmit+0x15f/0x7e0 [ 111.133559][ T6258] ? __pfx_validate_xmit_skb+0x10/0x10 [ 111.139062][ T6258] __dev_queue_xmit+0x1b63/0x3e90 [ 111.144123][ T6258] ? kasan_save_track+0x51/0x80 [ 111.149026][ T6258] ? do_syscall_64+0xf3/0x230 [ 111.153735][ T6258] ? __dev_queue_xmit+0x2da/0x3e90 [ 111.158900][ T6258] ? __pfx___dev_queue_xmit+0x10/0x10 [ 111.164331][ T6258] ? __copy_skb_header+0x437/0x5b0 [ 111.169463][ T6258] ? __asan_memcpy+0x40/0x70 [ 111.174096][ T6258] ? __copy_skb_header+0x437/0x5b0 [ 111.179227][ T6258] ? __skb_clone+0x454/0x6c0 [ 111.183840][ T6258] ? skb_clone+0x240/0x390 [ 111.188270][ T6258] __netlink_deliver_tap+0x54d/0x7c0 [ 111.193584][ T6258] ? netlink_deliver_tap+0x2e/0x1b0 [ 111.198800][ T6258] netlink_deliver_tap+0x19d/0x1b0 [ 111.203944][ T6258] netlink_unicast+0x7be/0x990 [ 111.208732][ T6258] ? __pfx_netlink_unicast+0x10/0x10 [ 111.214034][ T6258] ? __virt_addr_valid+0x183/0x530 [ 111.219168][ T6258] ? __check_object_size+0x49c/0x900 [ 111.224474][ T6258] ? bpf_lsm_netlink_send+0x9/0x10 [ 111.229597][ T6258] netlink_sendmsg+0x8e4/0xcb0 [ 111.234401][ T6258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.239702][ T6258] ? aa_sock_msg_perm+0x91/0x160 [ 111.244668][ T6258] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 111.249971][ T6258] ? security_socket_sendmsg+0x87/0xb0 [ 111.255454][ T6258] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.260755][ T6258] __sock_sendmsg+0x221/0x270 [ 111.265452][ T6258] __sys_sendto+0x3a4/0x4f0 [ 111.269977][ T6258] ? __pfx___sys_sendto+0x10/0x10 [ 111.275066][ T6258] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.281149][ T6258] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.287502][ T6258] ? exc_page_fault+0x590/0x8c0 [ 111.292374][ T6258] __x64_sys_sendto+0xde/0x100 [ 111.297161][ T6258] do_syscall_64+0xf3/0x230 [ 111.301682][ T6258] ? clear_bhb_loop+0x35/0x90 [ 111.306382][ T6258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.312293][ T6258] RIP: 0033:0x7f2c00d77cac [ 111.316730][ T6258] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 111.336367][ T6258] RSP: 002b:00007f2c01a9eed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 111.344797][ T6258] RAX: ffffffffffffffda RBX: 00007f2c01a9efd0 RCX: 00007f2c00d77cac [ 111.352782][ T6258] RDX: 0000000000000020 RSI: 00007f2c01a9f020 RDI: 0000000000000005 [ 111.360769][ T6258] RBP: 0000000000000000 R08: 00007f2c01a9ef24 R09: 000000000000000c [ 111.368764][ T6258] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 111.376750][ T6258] R13: 00007f2c01a9ef78 R14: 00007f2c01a9f020 R15: 0000000000000000 [ 111.384761][ T6258] [ 111.531427][ T6260] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 111.730653][ T6276] netlink: 'syz.4.254': attribute type 11 has an invalid length. [ 111.744391][ T6276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.254'. [ 111.790664][ T6272] netlink: 20 bytes leftover after parsing attributes in process `syz.3.253'. [ 111.846412][ T6272] bond0: entered promiscuous mode [ 111.858711][ T6272] bond_slave_0: entered promiscuous mode [ 111.867714][ T6272] bond_slave_1: entered promiscuous mode [ 111.959521][ T6281] xt_HMARK: proto mask must be zero with L3 mode [ 112.342605][ T6302] FAULT_INJECTION: forcing a failure. [ 112.342605][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 112.374429][ T6302] CPU: 0 PID: 6302 Comm: syz.1.260 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 112.384238][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 112.394343][ T6302] Call Trace: [ 112.397659][ T6302] [ 112.400623][ T6302] dump_stack_lvl+0x241/0x360 [ 112.405351][ T6302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 112.410595][ T6302] ? __pfx__printk+0x10/0x10 [ 112.415250][ T6302] should_fail_ex+0x3b0/0x4e0 [ 112.419965][ T6302] ? __alloc_skb+0x1c3/0x440 [ 112.424579][ T6302] should_failslab+0x9/0x20 [ 112.429095][ T6302] kmem_cache_alloc_node_noprof+0x71/0x320 [ 112.434932][ T6302] ? idr_get_next+0x3c6/0x4a0 [ 112.439622][ T6302] __alloc_skb+0x1c3/0x440 [ 112.444066][ T6302] ? __pfx___alloc_skb+0x10/0x10 [ 112.449032][ T6302] ctrl_getfamily+0x48c/0x6b0 [ 112.453753][ T6302] ? __pfx_ctrl_getfamily+0x10/0x10 [ 112.458981][ T6302] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 112.465329][ T6302] genl_rcv_msg+0xb14/0xec0 [ 112.469855][ T6302] ? mark_lock+0x9a/0x350 [ 112.474225][ T6302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.479323][ T6302] ? __pfx_lock_acquire+0x10/0x10 [ 112.484378][ T6302] ? __pfx_ctrl_getfamily+0x10/0x10 [ 112.489602][ T6302] ? __pfx___might_resched+0x10/0x10 [ 112.494908][ T6302] netlink_rcv_skb+0x1e3/0x430 [ 112.499691][ T6302] ? __pfx_genl_rcv_msg+0x10/0x10 [ 112.504742][ T6302] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 112.510059][ T6302] ? __netlink_deliver_tap+0x77e/0x7c0 [ 112.515548][ T6302] genl_rcv+0x28/0x40 [ 112.519551][ T6302] netlink_unicast+0x7f0/0x990 [ 112.524334][ T6302] ? __pfx_netlink_unicast+0x10/0x10 [ 112.529642][ T6302] ? __virt_addr_valid+0x183/0x530 [ 112.534784][ T6302] ? __check_object_size+0x49c/0x900 [ 112.540079][ T6302] ? bpf_lsm_netlink_send+0x9/0x10 [ 112.545228][ T6302] netlink_sendmsg+0x8e4/0xcb0 [ 112.550033][ T6302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.555343][ T6302] ? aa_sock_msg_perm+0x91/0x160 [ 112.560324][ T6302] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 112.565636][ T6302] ? security_socket_sendmsg+0x87/0xb0 [ 112.571128][ T6302] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.576449][ T6302] __sock_sendmsg+0x221/0x270 [ 112.581160][ T6302] __sys_sendto+0x3a4/0x4f0 [ 112.585693][ T6302] ? __pfx___sys_sendto+0x10/0x10 [ 112.590758][ T6302] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 112.596755][ T6302] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 112.603097][ T6302] ? exc_page_fault+0x590/0x8c0 [ 112.607963][ T6302] __x64_sys_sendto+0xde/0x100 [ 112.612752][ T6302] do_syscall_64+0xf3/0x230 [ 112.617361][ T6302] ? clear_bhb_loop+0x35/0x90 [ 112.622058][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.627985][ T6302] RIP: 0033:0x7f2815777cac [ 112.632410][ T6302] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 112.652125][ T6302] RSP: 002b:00007f2816557ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 112.660554][ T6302] RAX: ffffffffffffffda RBX: 00007f2816557fd0 RCX: 00007f2815777cac [ 112.668533][ T6302] RDX: 0000000000000020 RSI: 00007f2816558020 RDI: 0000000000000005 [ 112.676520][ T6302] RBP: 0000000000000000 R08: 00007f2816557f24 R09: 000000000000000c [ 112.684503][ T6302] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 112.692581][ T6302] R13: 00007f2816557f78 R14: 00007f2816558020 R15: 0000000000000000 [ 112.700585][ T6302] [ 113.145276][ T6336] __nla_validate_parse: 1 callbacks suppressed [ 113.145295][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.271'. [ 113.181004][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.271'. [ 113.225296][ T6341] trusted_key: syz.2.270 sent an empty control message without MSG_MORE. [ 113.577212][ T6361] netlink: 'syz.4.275': attribute type 21 has an invalid length. [ 113.585870][ T6361] netlink: 'syz.4.275': attribute type 20 has an invalid length. [ 113.594354][ T6361] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 113.618051][ T6361] IPv6: NLM_F_CREATE should be specified when creating new route [ 114.049545][ T6378] netlink: 36 bytes leftover after parsing attributes in process `syz.3.281'. [ 114.095665][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.283'. [ 114.615863][ T6420] netlink: 'syz.4.290': attribute type 21 has an invalid length. [ 114.659458][ T6420] netlink: 'syz.4.290': attribute type 20 has an invalid length. [ 114.675431][ T6420] netlink: 'syz.4.290': attribute type 4 has an invalid length. [ 114.904656][ T6441] netlink: 6 bytes leftover after parsing attributes in process `syz.4.295'. [ 114.933337][ T6441] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 115.111726][ T6451] netlink: 'syz.0.297': attribute type 16 has an invalid length. [ 115.112246][ C0] eth0: bad gso: type: 1, size: 1408 [ 115.121981][ T6451] netlink: 'syz.0.297': attribute type 3 has an invalid length. [ 115.133020][ T6451] netlink: 41414 bytes leftover after parsing attributes in process `syz.0.297'. [ 115.295652][ T6460] FAULT_INJECTION: forcing a failure. [ 115.295652][ T6460] name failslab, interval 1, probability 0, space 0, times 0 [ 115.322760][ T6460] CPU: 0 PID: 6460 Comm: syz.4.301 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 115.332457][ T6460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 115.342547][ T6460] Call Trace: [ 115.345854][ T6460] [ 115.348817][ T6460] dump_stack_lvl+0x241/0x360 [ 115.353546][ T6460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.358791][ T6460] ? __pfx__printk+0x10/0x10 [ 115.363435][ T6460] ? ref_tracker_alloc+0x332/0x490 [ 115.368600][ T6460] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 115.374090][ T6460] should_fail_ex+0x3b0/0x4e0 [ 115.378779][ T6460] ? skb_clone+0x20c/0x390 [ 115.383199][ T6460] should_failslab+0x9/0x20 [ 115.387713][ T6460] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 115.393104][ T6460] skb_clone+0x20c/0x390 [ 115.397359][ T6460] __netlink_deliver_tap+0x3cc/0x7c0 [ 115.402668][ T6460] ? netlink_deliver_tap+0x2e/0x1b0 [ 115.407874][ T6460] netlink_deliver_tap+0x19d/0x1b0 [ 115.412989][ T6460] netlink_sendskb+0x68/0x140 [ 115.417666][ T6460] netlink_unicast+0x39d/0x990 [ 115.422441][ T6460] ? __pfx_netlink_unicast+0x10/0x10 [ 115.427746][ T6460] ctrl_getfamily+0x57a/0x6b0 [ 115.432437][ T6460] ? __pfx_ctrl_getfamily+0x10/0x10 [ 115.437643][ T6460] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 115.443992][ T6460] genl_rcv_msg+0xb14/0xec0 [ 115.448510][ T6460] ? mark_lock+0x9a/0x350 [ 115.452862][ T6460] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.457980][ T6460] ? __pfx_lock_acquire+0x10/0x10 [ 115.463079][ T6460] ? __pfx_ctrl_getfamily+0x10/0x10 [ 115.468310][ T6460] ? __pfx___might_resched+0x10/0x10 [ 115.473620][ T6460] netlink_rcv_skb+0x1e3/0x430 [ 115.478409][ T6460] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.483447][ T6460] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.488752][ T6460] ? __netlink_deliver_tap+0x77e/0x7c0 [ 115.494237][ T6460] genl_rcv+0x28/0x40 [ 115.498271][ T6460] netlink_unicast+0x7f0/0x990 [ 115.503052][ T6460] ? __pfx_netlink_unicast+0x10/0x10 [ 115.508346][ T6460] ? __virt_addr_valid+0x183/0x530 [ 115.513511][ T6460] ? __check_object_size+0x49c/0x900 [ 115.518830][ T6460] ? bpf_lsm_netlink_send+0x9/0x10 [ 115.523972][ T6460] netlink_sendmsg+0x8e4/0xcb0 [ 115.528773][ T6460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.534102][ T6460] ? aa_sock_msg_perm+0x91/0x160 [ 115.539056][ T6460] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 115.544353][ T6460] ? security_socket_sendmsg+0x87/0xb0 [ 115.549850][ T6460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.555168][ T6460] __sock_sendmsg+0x221/0x270 [ 115.559873][ T6460] __sys_sendto+0x3a4/0x4f0 [ 115.564495][ T6460] ? __pfx___sys_sendto+0x10/0x10 [ 115.569560][ T6460] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 115.575557][ T6460] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 115.581898][ T6460] ? exc_page_fault+0x590/0x8c0 [ 115.586763][ T6460] __x64_sys_sendto+0xde/0x100 [ 115.591546][ T6460] do_syscall_64+0xf3/0x230 [ 115.596064][ T6460] ? clear_bhb_loop+0x35/0x90 [ 115.600755][ T6460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.606661][ T6460] RIP: 0033:0x7f6dd9777cac [ 115.611088][ T6460] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 115.630704][ T6460] RSP: 002b:00007f6dda51aed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 115.639123][ T6460] RAX: ffffffffffffffda RBX: 00007f6dda51afd0 RCX: 00007f6dd9777cac [ 115.647107][ T6460] RDX: 0000000000000020 RSI: 00007f6dda51b020 RDI: 0000000000000005 [ 115.655090][ T6460] RBP: 0000000000000000 R08: 00007f6dda51af24 R09: 000000000000000c [ 115.663072][ T6460] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 115.671218][ T6460] R13: 00007f6dda51af78 R14: 00007f6dda51b020 R15: 0000000000000000 [ 115.679219][ T6460] [ 115.967163][ T6472] netlink: 'syz.3.305': attribute type 21 has an invalid length. [ 115.989358][ T6472] netlink: 'syz.3.305': attribute type 20 has an invalid length. [ 115.997147][ T6472] IPv6: NLM_F_CREATE should be specified when creating new route [ 116.283325][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.309'. [ 116.612750][ C0] eth0: bad gso: type: 1, size: 1408 [ 116.916143][ T6518] FAULT_INJECTION: forcing a failure. [ 116.916143][ T6518] name failslab, interval 1, probability 0, space 0, times 0 [ 116.929055][ T6518] CPU: 1 PID: 6518 Comm: syz.2.317 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 116.929103][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 116.929116][ T6518] Call Trace: [ 116.929125][ T6518] [ 116.929135][ T6518] dump_stack_lvl+0x241/0x360 [ 116.929175][ T6518] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.929203][ T6518] ? __pfx__printk+0x10/0x10 [ 116.929243][ T6518] should_fail_ex+0x3b0/0x4e0 [ 116.929271][ T6518] ? skb_clone+0x20c/0x390 [ 116.929292][ T6518] should_failslab+0x9/0x20 [ 116.929318][ T6518] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 116.929352][ T6518] skb_clone+0x20c/0x390 [ 116.929371][ T6518] ? dev_queue_xmit_nit+0x220/0xc10 [ 116.929403][ T6518] dev_queue_xmit_nit+0x419/0xc10 [ 116.937310][ T6519] sctp: [Deprecated]: syz.0.312 (pid 6519) Use of int in max_burst socket option deprecated. [ 116.937310][ T6519] Use struct sctp_assoc_value instead [ 116.939113][ T6518] ? dev_queue_xmit_nit+0x2b/0xc10 [ 116.939152][ T6518] ? validate_xmit_skb+0x9f9/0x1120 [ 116.939190][ T6518] dev_hard_start_xmit+0x15f/0x7e0 [ 116.939224][ T6518] ? __pfx_validate_xmit_skb+0x10/0x10 [ 116.939267][ T6518] __dev_queue_xmit+0x1b63/0x3e90 [ 116.939297][ T6518] ? genl_rcv_msg+0xb14/0xec0 [ 116.939317][ T6518] ? netlink_unicast+0x7f0/0x990 [ 116.939341][ T6518] ? __sys_sendto+0x3a4/0x4f0 [ 116.939369][ T6518] ? __dev_queue_xmit+0x2da/0x3e90 [ 116.939387][ T6518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.939422][ T6518] ? __pfx___dev_queue_xmit+0x10/0x10 [ 116.939464][ T6518] ? __copy_skb_header+0x437/0x5b0 [ 116.939488][ T6518] ? __asan_memcpy+0x40/0x70 [ 116.939517][ T6518] ? __copy_skb_header+0x437/0x5b0 [ 116.956795][ T6513] syz.0.312 (6513) used greatest stack depth: 16976 bytes left [ 116.960621][ T6518] ? __skb_clone+0x454/0x6c0 [ 116.960661][ T6518] ? skb_clone+0x240/0x390 [ 116.960701][ T6518] __netlink_deliver_tap+0x54d/0x7c0 [ 116.960751][ T6518] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.117640][ T6518] netlink_deliver_tap+0x19d/0x1b0 [ 117.122766][ T6518] netlink_sendskb+0x68/0x140 [ 117.127449][ T6518] netlink_unicast+0x39d/0x990 [ 117.132245][ T6518] ? __pfx_netlink_unicast+0x10/0x10 [ 117.137574][ T6518] ctrl_getfamily+0x57a/0x6b0 [ 117.142260][ T6518] ? __pfx_ctrl_getfamily+0x10/0x10 [ 117.147465][ T6518] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 117.153816][ T6518] genl_rcv_msg+0xb14/0xec0 [ 117.158313][ T6518] ? mark_lock+0x9a/0x350 [ 117.162656][ T6518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.167730][ T6518] ? __pfx_lock_acquire+0x10/0x10 [ 117.172761][ T6518] ? __pfx_ctrl_getfamily+0x10/0x10 [ 117.177972][ T6518] ? __pfx___might_resched+0x10/0x10 [ 117.183267][ T6518] netlink_rcv_skb+0x1e3/0x430 [ 117.188045][ T6518] ? __pfx_genl_rcv_msg+0x10/0x10 [ 117.193177][ T6518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 117.198488][ T6518] ? __netlink_deliver_tap+0x77e/0x7c0 [ 117.203986][ T6518] genl_rcv+0x28/0x40 [ 117.207980][ T6518] netlink_unicast+0x7f0/0x990 [ 117.212752][ T6518] ? __pfx_netlink_unicast+0x10/0x10 [ 117.218040][ T6518] ? __virt_addr_valid+0x183/0x530 [ 117.223170][ T6518] ? __check_object_size+0x49c/0x900 [ 117.228460][ T6518] ? bpf_lsm_netlink_send+0x9/0x10 [ 117.233575][ T6518] netlink_sendmsg+0x8e4/0xcb0 [ 117.238356][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.243651][ T6518] ? aa_sock_msg_perm+0x91/0x160 [ 117.248600][ T6518] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 117.253892][ T6518] ? security_socket_sendmsg+0x87/0xb0 [ 117.259370][ T6518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.264675][ T6518] __sock_sendmsg+0x221/0x270 [ 117.269363][ T6518] __sys_sendto+0x3a4/0x4f0 [ 117.273877][ T6518] ? __pfx___sys_sendto+0x10/0x10 [ 117.278927][ T6518] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 117.284914][ T6518] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.291252][ T6518] ? exc_page_fault+0x590/0x8c0 [ 117.296114][ T6518] __x64_sys_sendto+0xde/0x100 [ 117.300892][ T6518] do_syscall_64+0xf3/0x230 [ 117.305408][ T6518] ? clear_bhb_loop+0x35/0x90 [ 117.310094][ T6518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.316011][ T6518] RIP: 0033:0x7febfa777cac [ 117.320439][ T6518] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 117.340050][ T6518] RSP: 002b:00007febfb49ded0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 117.348469][ T6518] RAX: ffffffffffffffda RBX: 00007febfb49dfd0 RCX: 00007febfa777cac [ 117.356445][ T6518] RDX: 0000000000000020 RSI: 00007febfb49e020 RDI: 0000000000000005 [ 117.364418][ T6518] RBP: 0000000000000000 R08: 00007febfb49df24 R09: 000000000000000c [ 117.372389][ T6518] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 117.380381][ T6518] R13: 00007febfb49df78 R14: 00007febfb49e020 R15: 0000000000000000 [ 117.388369][ T6518] [ 117.556834][ T6529] IPv6: NLM_F_CREATE should be specified when creating new route [ 117.730076][ T6549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.324'. [ 117.753257][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.324'. [ 117.856249][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.885900][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.906990][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.947979][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.952082][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.329'. [ 117.970375][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.978892][ T6552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.089628][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.266011][ T6579] FAULT_INJECTION: forcing a failure. [ 118.266011][ T6579] name failslab, interval 1, probability 0, space 0, times 0 [ 118.296745][ T6579] CPU: 0 PID: 6579 Comm: syz.0.336 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 118.306529][ T6579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 118.316624][ T6579] Call Trace: [ 118.319927][ T6579] [ 118.322882][ T6579] dump_stack_lvl+0x241/0x360 [ 118.327603][ T6579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.332833][ T6579] ? __pfx__printk+0x10/0x10 [ 118.337469][ T6579] should_fail_ex+0x3b0/0x4e0 [ 118.342177][ T6579] ? __alloc_skb+0x1c3/0x440 [ 118.346803][ T6579] should_failslab+0x9/0x20 [ 118.351339][ T6579] kmem_cache_alloc_node_noprof+0x71/0x320 [ 118.357183][ T6579] __alloc_skb+0x1c3/0x440 [ 118.361645][ T6579] ? __pfx___alloc_skb+0x10/0x10 [ 118.366629][ T6579] ? netlink_ack_tlv_len+0x6e/0x200 [ 118.371878][ T6579] netlink_ack+0x13f/0xa30 [ 118.376325][ T6579] ? __pfx_lock_acquire+0x10/0x10 [ 118.381434][ T6579] ? __pfx_ctrl_getfamily+0x10/0x10 [ 118.386693][ T6579] netlink_rcv_skb+0x262/0x430 [ 118.391497][ T6579] ? __pfx_genl_rcv_msg+0x10/0x10 [ 118.396655][ T6579] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 118.401988][ T6579] ? __netlink_deliver_tap+0x77e/0x7c0 [ 118.407501][ T6579] genl_rcv+0x28/0x40 [ 118.411586][ T6579] netlink_unicast+0x7f0/0x990 [ 118.416406][ T6579] ? __pfx_netlink_unicast+0x10/0x10 [ 118.421699][ T6579] ? __virt_addr_valid+0x183/0x530 [ 118.426823][ T6579] ? __check_object_size+0x49c/0x900 [ 118.432116][ T6579] ? bpf_lsm_netlink_send+0x9/0x10 [ 118.437243][ T6579] netlink_sendmsg+0x8e4/0xcb0 [ 118.442032][ T6579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.447329][ T6579] ? aa_sock_msg_perm+0x91/0x160 [ 118.452280][ T6579] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 118.457576][ T6579] ? security_socket_sendmsg+0x87/0xb0 [ 118.463056][ T6579] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.468445][ T6579] __sock_sendmsg+0x221/0x270 [ 118.473144][ T6579] __sys_sendto+0x3a4/0x4f0 [ 118.477680][ T6579] ? __pfx___sys_sendto+0x10/0x10 [ 118.482738][ T6579] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 118.488731][ T6579] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.495077][ T6579] ? exc_page_fault+0x590/0x8c0 [ 118.499943][ T6579] __x64_sys_sendto+0xde/0x100 [ 118.504825][ T6579] do_syscall_64+0xf3/0x230 [ 118.509521][ T6579] ? clear_bhb_loop+0x35/0x90 [ 118.514214][ T6579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.520125][ T6579] RIP: 0033:0x7ff875b77cac [ 118.524561][ T6579] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 118.544188][ T6579] RSP: 002b:00007ff876913ed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 118.552609][ T6579] RAX: ffffffffffffffda RBX: 00007ff876913fd0 RCX: 00007ff875b77cac [ 118.560590][ T6579] RDX: 0000000000000020 RSI: 00007ff876914020 RDI: 0000000000000005 [ 118.568574][ T6579] RBP: 0000000000000000 R08: 00007ff876913f24 R09: 000000000000000c [ 118.576553][ T6579] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 118.584537][ T6579] R13: 00007ff876913f78 R14: 00007ff876914020 R15: 0000000000000000 [ 118.592534][ T6579] [ 118.759375][ T6600] syz.0.341[6600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.759875][ T6600] syz.0.341[6600] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 118.793192][ T6595] validate_nla: 6 callbacks suppressed [ 118.793212][ T6595] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 118.833906][ T6595] __nla_validate_parse: 2 callbacks suppressed [ 118.833927][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.340'. [ 118.890039][ T6595] bridge0: port 3(syz_tun) entered blocking state [ 118.928285][ T6595] bridge0: port 3(syz_tun) entered disabled state [ 118.969482][ T6595] syz_tun: entered allmulticast mode [ 118.985863][ T6595] syz_tun: entered promiscuous mode [ 119.022282][ T6595] bridge0: port 3(syz_tun) entered blocking state [ 119.029073][ T6595] bridge0: port 3(syz_tun) entered forwarding state [ 119.054512][ T6617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.342'. [ 119.078567][ T6620] bridge0: port 3(syz_tun) entered disabled state [ 119.088060][ T6625] sctp: [Deprecated]: syz.2.344 (pid 6625) Use of int in maxseg socket option. [ 119.088060][ T6625] Use struct sctp_assoc_value instead [ 119.115894][ T6625] netlink: 184472 bytes leftover after parsing attributes in process `syz.2.344'. [ 119.135111][ T6620] syz_tun (unregistering): left allmulticast mode [ 119.147801][ T6620] syz_tun (unregistering): left promiscuous mode [ 119.158111][ T6620] bridge0: port 3(syz_tun) entered disabled state [ 119.176711][ T6607] netlink: 'syz.4.342': attribute type 10 has an invalid length. [ 119.196607][ T6607] team0: Port device dummy0 added [ 119.887691][ T6664] netlink: 20 bytes leftover after parsing attributes in process `syz.0.359'. [ 120.018825][ T5157] net_ratelimit: 9 callbacks suppressed [ 120.018842][ T5157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.096025][ T6680] netlink: 'syz.0.362': attribute type 32 has an invalid length. [ 120.118872][ T6682] FAULT_INJECTION: forcing a failure. [ 120.118872][ T6682] name failslab, interval 1, probability 0, space 0, times 0 [ 120.150555][ T6682] CPU: 0 PID: 6682 Comm: syz.3.364 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 120.160225][ T6682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 120.170323][ T6682] Call Trace: [ 120.173710][ T6682] [ 120.176642][ T6682] dump_stack_lvl+0x241/0x360 [ 120.181349][ T6682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.186577][ T6682] ? __pfx__printk+0x10/0x10 [ 120.191187][ T6682] ? ref_tracker_alloc+0x332/0x490 [ 120.196341][ T6682] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 120.201834][ T6682] should_fail_ex+0x3b0/0x4e0 [ 120.206526][ T6682] ? skb_clone+0x20c/0x390 [ 120.210955][ T6682] should_failslab+0x9/0x20 [ 120.215459][ T6682] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 120.220853][ T6682] skb_clone+0x20c/0x390 [ 120.225218][ T6682] __netlink_deliver_tap+0x3cc/0x7c0 [ 120.230539][ T6682] ? netlink_deliver_tap+0x2e/0x1b0 [ 120.235746][ T6682] netlink_deliver_tap+0x19d/0x1b0 [ 120.240955][ T6682] netlink_sendskb+0x68/0x140 [ 120.245656][ T6682] netlink_unicast+0x39d/0x990 [ 120.250444][ T6682] ? __asan_memcpy+0x40/0x70 [ 120.255077][ T6682] ? __pfx_netlink_unicast+0x10/0x10 [ 120.260376][ T6682] netlink_rcv_skb+0x262/0x430 [ 120.265173][ T6682] ? __pfx_genl_rcv_msg+0x10/0x10 [ 120.270238][ T6682] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 120.275560][ T6682] ? __netlink_deliver_tap+0x77e/0x7c0 [ 120.281043][ T6682] genl_rcv+0x28/0x40 [ 120.285041][ T6682] netlink_unicast+0x7f0/0x990 [ 120.289819][ T6682] ? __pfx_netlink_unicast+0x10/0x10 [ 120.295109][ T6682] ? __virt_addr_valid+0x183/0x530 [ 120.300243][ T6682] ? __check_object_size+0x49c/0x900 [ 120.305551][ T6682] ? bpf_lsm_netlink_send+0x9/0x10 [ 120.310679][ T6682] netlink_sendmsg+0x8e4/0xcb0 [ 120.315462][ T6682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.320754][ T6682] ? aa_sock_msg_perm+0x91/0x160 [ 120.325704][ T6682] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 120.331003][ T6682] ? security_socket_sendmsg+0x87/0xb0 [ 120.336476][ T6682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.341769][ T6682] __sock_sendmsg+0x221/0x270 [ 120.346458][ T6682] __sys_sendto+0x3a4/0x4f0 [ 120.350987][ T6682] ? __pfx___sys_sendto+0x10/0x10 [ 120.356071][ T6682] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 120.362085][ T6682] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.368433][ T6682] ? exc_page_fault+0x590/0x8c0 [ 120.373303][ T6682] __x64_sys_sendto+0xde/0x100 [ 120.378093][ T6682] do_syscall_64+0xf3/0x230 [ 120.382633][ T6682] ? clear_bhb_loop+0x35/0x90 [ 120.387349][ T6682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.393268][ T6682] RIP: 0033:0x7f2c00d77cac [ 120.397703][ T6682] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 120.417326][ T6682] RSP: 002b:00007f2c01a9eed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 120.425784][ T6682] RAX: ffffffffffffffda RBX: 00007f2c01a9efd0 RCX: 00007f2c00d77cac [ 120.433764][ T6682] RDX: 0000000000000020 RSI: 00007f2c01a9f020 RDI: 0000000000000005 [ 120.441956][ T6682] RBP: 0000000000000000 R08: 00007f2c01a9ef24 R09: 000000000000000c [ 120.449940][ T6682] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 120.458006][ T6682] R13: 00007f2c01a9ef78 R14: 00007f2c01a9f020 R15: 0000000000000000 [ 120.466001][ T6682] [ 120.976106][ T6715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.988346][ T6715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.004181][ T6715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.035184][ T6715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.052762][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.069585][ T6715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.087342][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.375'. [ 121.106804][ T6715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.119523][ T5155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.129469][ T6715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.133645][ T6712] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.145153][ T6712] IPv6: NLM_F_CREATE should be set when creating new route [ 121.164885][ T6727] FAULT_INJECTION: forcing a failure. [ 121.164885][ T6727] name failslab, interval 1, probability 0, space 0, times 0 [ 121.177970][ T6727] CPU: 1 PID: 6727 Comm: syz.3.379 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 121.187627][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 121.197703][ T6727] Call Trace: [ 121.201002][ T6727] [ 121.203967][ T6727] dump_stack_lvl+0x241/0x360 [ 121.208703][ T6727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.213934][ T6727] ? __pfx__printk+0x10/0x10 [ 121.218567][ T6727] should_fail_ex+0x3b0/0x4e0 [ 121.223288][ T6727] ? skb_clone+0x20c/0x390 [ 121.227731][ T6727] should_failslab+0x9/0x20 [ 121.232265][ T6727] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 121.237679][ T6727] skb_clone+0x20c/0x390 [ 121.241943][ T6727] ? dev_queue_xmit_nit+0x220/0xc10 [ 121.247179][ T6727] dev_queue_xmit_nit+0x419/0xc10 [ 121.252247][ T6727] ? dev_queue_xmit_nit+0x2b/0xc10 [ 121.257399][ T6727] ? validate_xmit_skb+0x9f9/0x1120 [ 121.262656][ T6727] dev_hard_start_xmit+0x15f/0x7e0 [ 121.267814][ T6727] ? __pfx_validate_xmit_skb+0x10/0x10 [ 121.273327][ T6727] __dev_queue_xmit+0x1b63/0x3e90 [ 121.278390][ T6727] ? genl_rcv+0x28/0x40 [ 121.282590][ T6727] ? __sock_sendmsg+0x221/0x270 [ 121.287484][ T6727] ? do_syscall_64+0xf3/0x230 [ 121.292207][ T6727] ? __dev_queue_xmit+0x2da/0x3e90 [ 121.297359][ T6727] ? __pfx___dev_queue_xmit+0x10/0x10 [ 121.302790][ T6727] ? __copy_skb_header+0x437/0x5b0 [ 121.307955][ T6727] ? __asan_memcpy+0x40/0x70 [ 121.312593][ T6727] ? __copy_skb_header+0x437/0x5b0 [ 121.317741][ T6727] ? __skb_clone+0x454/0x6c0 [ 121.322363][ T6727] ? skb_clone+0x240/0x390 [ 121.326815][ T6727] __netlink_deliver_tap+0x54d/0x7c0 [ 121.332151][ T6727] ? netlink_deliver_tap+0x2e/0x1b0 [ 121.337383][ T6727] netlink_deliver_tap+0x19d/0x1b0 [ 121.342549][ T6727] netlink_sendskb+0x68/0x140 [ 121.347275][ T6727] netlink_unicast+0x39d/0x990 [ 121.352071][ T6727] ? __asan_memcpy+0x40/0x70 [ 121.356712][ T6727] ? __pfx_netlink_unicast+0x10/0x10 [ 121.362044][ T6727] netlink_rcv_skb+0x262/0x430 [ 121.366841][ T6727] ? __pfx_genl_rcv_msg+0x10/0x10 [ 121.371920][ T6727] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 121.377271][ T6727] ? __netlink_deliver_tap+0x77e/0x7c0 [ 121.382781][ T6727] genl_rcv+0x28/0x40 [ 121.386802][ T6727] netlink_unicast+0x7f0/0x990 [ 121.391611][ T6727] ? __pfx_netlink_unicast+0x10/0x10 [ 121.396928][ T6727] ? __virt_addr_valid+0x183/0x530 [ 121.402180][ T6727] ? __check_object_size+0x49c/0x900 [ 121.407501][ T6727] ? bpf_lsm_netlink_send+0x9/0x10 [ 121.412660][ T6727] netlink_sendmsg+0x8e4/0xcb0 [ 121.417477][ T6727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.422819][ T6727] ? aa_sock_msg_perm+0x91/0x160 [ 121.427796][ T6727] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 121.433112][ T6727] ? security_socket_sendmsg+0x87/0xb0 [ 121.438615][ T6727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.443923][ T6727] __sock_sendmsg+0x221/0x270 [ 121.448633][ T6727] __sys_sendto+0x3a4/0x4f0 [ 121.453181][ T6727] ? __pfx___sys_sendto+0x10/0x10 [ 121.458276][ T6727] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 121.464294][ T6727] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.470648][ T6727] ? exc_page_fault+0x590/0x8c0 [ 121.475540][ T6727] __x64_sys_sendto+0xde/0x100 [ 121.480345][ T6727] do_syscall_64+0xf3/0x230 [ 121.484876][ T6727] ? clear_bhb_loop+0x35/0x90 [ 121.489587][ T6727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.495514][ T6727] RIP: 0033:0x7f2c00d77cac [ 121.499975][ T6727] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 121.519603][ T6727] RSP: 002b:00007f2c01a9eed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 121.528049][ T6727] RAX: ffffffffffffffda RBX: 00007f2c01a9efd0 RCX: 00007f2c00d77cac [ 121.536045][ T6727] RDX: 0000000000000020 RSI: 00007f2c01a9f020 RDI: 0000000000000005 [ 121.544033][ T6727] RBP: 0000000000000000 R08: 00007f2c01a9ef24 R09: 000000000000000c [ 121.552030][ T6727] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 121.560027][ T6727] R13: 00007f2c01a9ef78 R14: 00007f2c01a9f020 R15: 0000000000000000 [ 121.568044][ T6727] [ 121.830209][ T6748] netlink: 60 bytes leftover after parsing attributes in process `syz.4.383'. [ 122.065534][ T6765] netlink: 29 bytes leftover after parsing attributes in process `syz.4.388'. [ 122.279014][ T6777] FAULT_INJECTION: forcing a failure. [ 122.279014][ T6777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.329236][ T6777] CPU: 0 PID: 6777 Comm: syz.4.392 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 122.338930][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 122.349015][ T6777] Call Trace: [ 122.352326][ T6777] [ 122.355284][ T6777] dump_stack_lvl+0x241/0x360 [ 122.360010][ T6777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.365255][ T6777] ? __pfx__printk+0x10/0x10 [ 122.369886][ T6777] ? __pfx_lock_release+0x10/0x10 [ 122.374961][ T6777] should_fail_ex+0x3b0/0x4e0 [ 122.379683][ T6777] _copy_to_iter+0x1f6/0x1960 [ 122.384401][ T6777] ? __virt_addr_valid+0x183/0x530 [ 122.389548][ T6777] ? __pfx_lock_release+0x10/0x10 [ 122.394606][ T6777] ? __pfx__copy_to_iter+0x10/0x10 [ 122.399742][ T6777] ? __virt_addr_valid+0x183/0x530 [ 122.404884][ T6777] ? __virt_addr_valid+0x183/0x530 [ 122.410053][ T6777] ? __virt_addr_valid+0x45f/0x530 [ 122.415204][ T6777] ? __phys_addr_symbol+0x2f/0x70 [ 122.420283][ T6777] ? __check_object_size+0x49c/0x900 [ 122.425601][ T6777] __skb_datagram_iter+0x112/0x890 [ 122.430751][ T6777] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 122.436436][ T6777] skb_copy_datagram_iter+0xd1/0x250 [ 122.441762][ T6777] netlink_recvmsg+0x2d0/0x11d0 [ 122.446660][ T6777] ? __pfx_netlink_recvmsg+0x10/0x10 [ 122.452084][ T6777] ? __pfx_aa_sk_perm+0x10/0x10 [ 122.456973][ T6777] ? __fget_files+0x29/0x470 [ 122.461600][ T6777] ? aa_sock_msg_perm+0x91/0x160 [ 122.466578][ T6777] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 122.471897][ T6777] ? security_socket_recvmsg+0x90/0xb0 [ 122.477391][ T6777] ? __pfx_netlink_recvmsg+0x10/0x10 [ 122.482715][ T6777] sock_recvmsg+0x22f/0x280 [ 122.487250][ T6777] __sys_recvfrom+0x256/0x3e0 [ 122.491961][ T6777] ? __pfx___sys_recvfrom+0x10/0x10 [ 122.497224][ T6777] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 122.503247][ T6777] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.509612][ T6777] __x64_sys_recvfrom+0xde/0x100 [ 122.514591][ T6777] do_syscall_64+0xf3/0x230 [ 122.519127][ T6777] ? clear_bhb_loop+0x35/0x90 [ 122.523843][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.529767][ T6777] RIP: 0033:0x7f6dd9777be4 [ 122.534205][ T6777] Code: 89 4c 24 1c e8 ed 5a 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 5b 02 00 48 8b 04 [ 122.553916][ T6777] RSP: 002b:00007f6dda51aee0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 122.562357][ T6777] RAX: ffffffffffffffda RBX: 00007f6dda51afd0 RCX: 00007f6dd9777be4 [ 122.570356][ T6777] RDX: 0000000000001000 RSI: 00007f6dda51b020 RDI: 0000000000000005 [ 122.578359][ T6777] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 122.586363][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 122.594359][ T6777] R13: 00007f6dda51af78 R14: 00007f6dda51b020 R15: 0000000000000000 [ 122.602370][ T6777] [ 122.669106][ T6790] bridge0: port 3(vlan2) entered blocking state [ 122.695475][ T6790] bridge0: port 3(vlan2) entered disabled state [ 122.715589][ T6790] vlan2: entered allmulticast mode [ 122.716534][ T6793] netlink: 24 bytes leftover after parsing attributes in process `syz.2.394'. [ 122.741715][ T6790] vlan2: left allmulticast mode [ 123.163516][ T6812] netlink: 'syz.2.400': attribute type 126 has an invalid length. [ 123.259825][ T6821] x_tables: duplicate underflow at hook 1 [ 123.377388][ T6827] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 123.627295][ T6843] sctp: [Deprecated]: syz.1.409 (pid 6843) Use of int in maxseg socket option. [ 123.627295][ T6843] Use struct sctp_assoc_value instead [ 123.631475][ T6841] FAULT_INJECTION: forcing a failure. [ 123.631475][ T6841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 123.694384][ T6841] CPU: 1 PID: 6841 Comm: syz.4.408 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 123.704066][ T6841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 123.714149][ T6841] Call Trace: [ 123.717459][ T6841] [ 123.720430][ T6841] dump_stack_lvl+0x241/0x360 [ 123.725148][ T6841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.730384][ T6841] ? __pfx__printk+0x10/0x10 [ 123.735002][ T6841] ? __pfx_lock_release+0x10/0x10 [ 123.740067][ T6841] should_fail_ex+0x3b0/0x4e0 [ 123.744793][ T6841] _copy_to_iter+0x1f6/0x1960 [ 123.749501][ T6841] ? __virt_addr_valid+0x183/0x530 [ 123.754657][ T6841] ? __pfx_lock_release+0x10/0x10 [ 123.759712][ T6841] ? __pfx__copy_to_iter+0x10/0x10 [ 123.764834][ T6841] ? __virt_addr_valid+0x183/0x530 [ 123.769964][ T6841] ? __virt_addr_valid+0x183/0x530 [ 123.775081][ T6841] ? __virt_addr_valid+0x45f/0x530 [ 123.780203][ T6841] ? __phys_addr_symbol+0x2f/0x70 [ 123.785232][ T6841] ? __check_object_size+0x49c/0x900 [ 123.790525][ T6841] __skb_datagram_iter+0x112/0x890 [ 123.795637][ T6841] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 123.801274][ T6841] skb_copy_datagram_iter+0xd1/0x250 [ 123.806565][ T6841] netlink_recvmsg+0x2d0/0x11d0 [ 123.811434][ T6841] ? __pfx_netlink_recvmsg+0x10/0x10 [ 123.816734][ T6841] ? __pfx_aa_sk_perm+0x10/0x10 [ 123.821626][ T6841] ? __fget_files+0x29/0x470 [ 123.826215][ T6841] ? aa_sock_msg_perm+0x91/0x160 [ 123.831242][ T6841] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 123.836533][ T6841] ? security_socket_recvmsg+0x90/0xb0 [ 123.842014][ T6841] ? __pfx_netlink_recvmsg+0x10/0x10 [ 123.847311][ T6841] sock_recvmsg+0x22f/0x280 [ 123.851837][ T6841] __sys_recvfrom+0x256/0x3e0 [ 123.856528][ T6841] ? __pfx___sys_recvfrom+0x10/0x10 [ 123.861754][ T6841] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.867742][ T6841] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 123.874077][ T6841] __x64_sys_recvfrom+0xde/0x100 [ 123.879025][ T6841] do_syscall_64+0xf3/0x230 [ 123.883534][ T6841] ? clear_bhb_loop+0x35/0x90 [ 123.888228][ T6841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.894128][ T6841] RIP: 0033:0x7f6dd9777be4 [ 123.898551][ T6841] Code: 89 4c 24 1c e8 ed 5a 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 5b 02 00 48 8b 04 [ 123.918161][ T6841] RSP: 002b:00007f6dda51af40 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 123.926580][ T6841] RAX: ffffffffffffffda RBX: 0000000000000034 RCX: 00007f6dd9777be4 [ 123.934554][ T6841] RDX: 0000000000001000 RSI: 00007f6dda51b020 RDI: 0000000000000005 [ 123.942522][ T6841] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 123.950500][ T6841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000200 [ 123.958469][ T6841] R13: 00007f6dda51afd0 R14: 0000000000000009 R15: 0000000000000000 [ 123.966452][ T6841] [ 124.016087][ T6855] netlink: 84 bytes leftover after parsing attributes in process `syz.3.411'. [ 124.047795][ T6845] netlink: 256 bytes leftover after parsing attributes in process `syz.0.410'. [ 124.123405][ T6867] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.411'. [ 124.336590][ T6888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.419'. [ 124.360989][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 124.490399][ T6896] FAULT_INJECTION: forcing a failure. [ 124.490399][ T6896] name failslab, interval 1, probability 0, space 0, times 0 [ 124.536238][ T6896] CPU: 1 PID: 6896 Comm: syz.2.423 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 124.545931][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 124.556086][ T6896] Call Trace: [ 124.559379][ T6896] [ 124.562323][ T6896] dump_stack_lvl+0x241/0x360 [ 124.567018][ T6896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.572401][ T6896] ? __pfx__printk+0x10/0x10 [ 124.577011][ T6896] should_fail_ex+0x3b0/0x4e0 [ 124.581701][ T6896] ? nfc_genl_rcv_nl_event+0xa6/0x2b0 [ 124.587088][ T6896] should_failslab+0x9/0x20 [ 124.591603][ T6896] __kmalloc_cache_noprof+0x6c/0x2c0 [ 124.596911][ T6896] nfc_genl_rcv_nl_event+0xa6/0x2b0 [ 124.602130][ T6896] notifier_call_chain+0x19f/0x3e0 [ 124.607256][ T6896] blocking_notifier_call_chain+0x69/0x90 [ 124.613006][ T6896] netlink_release+0x11a6/0x1b10 [ 124.617960][ T6896] ? netlink_release+0x10d/0x1b10 [ 124.623005][ T6896] ? __pfx_netlink_release+0x10/0x10 [ 124.628386][ T6896] ? down_write+0x18c/0x220 [ 124.632892][ T6896] ? __pfx_down_write+0x10/0x10 [ 124.637751][ T6896] ? file_close_fd+0x67/0x80 [ 124.642340][ T6896] ? do_raw_spin_lock+0x14f/0x370 [ 124.647369][ T6896] sock_close+0xbc/0x240 [ 124.651617][ T6896] ? __pfx_sock_close+0x10/0x10 [ 124.656471][ T6896] __fput+0x24a/0x8a0 [ 124.660472][ T6896] __x64_sys_close+0x7f/0x110 [ 124.665153][ T6896] do_syscall_64+0xf3/0x230 [ 124.669663][ T6896] ? clear_bhb_loop+0x35/0x90 [ 124.674346][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.680336][ T6896] RIP: 0033:0x7febfa774c4a [ 124.684754][ T6896] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 73 8a 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 d3 8a 02 00 8b 44 24 [ 124.704364][ T6896] RSP: 002b:00007febfb49dfa0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 124.712782][ T6896] RAX: ffffffffffffffda RBX: 0000000000000034 RCX: 00007febfa774c4a [ 124.720752][ T6896] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 124.728720][ T6896] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 124.736693][ T6896] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 124.744667][ T6896] R13: 000000000000004d R14: 00007febfa905f60 R15: 00007ffcbb156598 [ 124.752837][ T6896] [ 124.874619][ T6900] veth0_vlan: left promiscuous mode [ 124.936182][ T6909] netlink: 14 bytes leftover after parsing attributes in process `syz.4.427'. [ 124.972907][ T6893] delete_channel: no stack [ 125.118423][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.1.431'. [ 125.134969][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 125.152058][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 125.201324][ T5158] net_ratelimit: 74 callbacks suppressed [ 125.201342][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.296300][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.617956][ T6953] FAULT_INJECTION: forcing a failure. [ 125.617956][ T6953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.640118][ T6953] CPU: 0 PID: 6953 Comm: syz.4.438 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 125.649889][ T6953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 125.659977][ T6953] Call Trace: [ 125.663281][ T6953] [ 125.666229][ T6953] dump_stack_lvl+0x241/0x360 [ 125.670955][ T6953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.676195][ T6953] ? __pfx__printk+0x10/0x10 [ 125.680819][ T6953] ? snprintf+0xda/0x120 [ 125.685101][ T6953] should_fail_ex+0x3b0/0x4e0 [ 125.689836][ T6953] _copy_to_user+0x2f/0xb0 [ 125.694299][ T6953] simple_read_from_buffer+0xca/0x150 [ 125.699717][ T6953] proc_fail_nth_read+0x1e9/0x250 [ 125.704787][ T6953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.710378][ T6953] ? rw_verify_area+0x520/0x6b0 [ 125.715444][ T6953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.721036][ T6953] vfs_read+0x204/0xbc0 [ 125.725234][ T6953] ? __pfx_lock_release+0x10/0x10 [ 125.730299][ T6953] ? __pfx_vfs_read+0x10/0x10 [ 125.735013][ T6953] ? __fget_files+0x29/0x470 [ 125.739647][ T6953] ? __fget_files+0x3f6/0x470 [ 125.744382][ T6953] ksys_read+0x1a0/0x2c0 [ 125.748653][ T6953] ? __pfx_ksys_read+0x10/0x10 [ 125.753437][ T6953] ? do_syscall_64+0x100/0x230 [ 125.758234][ T6953] ? do_syscall_64+0xb6/0x230 [ 125.762948][ T6953] do_syscall_64+0xf3/0x230 [ 125.767499][ T6953] ? clear_bhb_loop+0x35/0x90 [ 125.772236][ T6953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.778161][ T6953] RIP: 0033:0x7f6dd97749fc [ 125.782595][ T6953] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 125.802303][ T6953] RSP: 002b:00007f6dda51c040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.810753][ T6953] RAX: ffffffffffffffda RBX: 00007f6dd9905f60 RCX: 00007f6dd97749fc [ 125.818755][ T6953] RDX: 000000000000000f RSI: 00007f6dda51c0b0 RDI: 0000000000000004 [ 125.826774][ T6953] RBP: 00007f6dda51c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.834784][ T6953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 125.842781][ T6953] R13: 000000000000000b R14: 00007f6dd9905f60 R15: 00007ffc8a04ff18 [ 125.850797][ T6953] [ 126.016332][ T6969] netlink: 'syz.4.444': attribute type 33 has an invalid length. [ 126.034000][ T6968] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.042695][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.083370][ T6970] netlink: 24 bytes leftover after parsing attributes in process `syz.3.442'. [ 126.241846][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.359352][ T6987] raw_sendmsg: syz.4.447 forgot to set AF_INET. Fix it! [ 126.368927][ T6991] veth0_vlan: left allmulticast mode [ 126.390374][ T6991] vlan0: left promiscuous mode [ 126.409863][ T6991] vlan0: left allmulticast mode [ 126.471682][ T7001] pim6reg1: entered promiscuous mode [ 126.503776][ T7001] pim6reg1: entered allmulticast mode [ 126.852601][ C0] eth0: bad gso: type: 1, size: 1408 [ 126.862298][ T7016] xt_policy: too many policy elements [ 126.897240][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.923248][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.948260][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.974326][ T7018] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.083060][ T7067] netlink: 'syz.2.469': attribute type 6 has an invalid length. [ 128.095731][ T7067] netlink: 'syz.2.469': attribute type 5 has an invalid length. [ 129.044259][ T7115] __nla_validate_parse: 9 callbacks suppressed [ 129.044277][ T7115] netlink: 56 bytes leftover after parsing attributes in process `syz.0.483'. [ 129.591404][ T7138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.488'. [ 129.761337][ T7140] : renamed from bond0 [ 130.266579][ T7176] netlink: 44 bytes leftover after parsing attributes in process `syz.0.499'. [ 130.321307][ T7176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.399995][ T47] net_ratelimit: 120 callbacks suppressed [ 130.400030][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.585477][ T7192] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.592780][ T7192] IPv6: NLM_F_CREATE should be set when creating new route [ 130.600174][ T7192] IPv6: NLM_F_CREATE should be set when creating new route [ 130.789576][ T7201] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.505'. [ 130.800620][ T7199] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.505'. [ 131.150364][ T7220] Bluetooth: hci3: service_discovery: too big uuid_count value 65535 [ 131.162688][ T7214] netlink: 80 bytes leftover after parsing attributes in process `syz.0.509'. [ 131.177321][ T7214] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.185762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.205593][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.216618][ T7213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.227133][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.242001][ T7213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.360033][ T7227] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.368200][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.376359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.582344][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.604289][ T7236] netlink: 'syz.1.517': attribute type 8 has an invalid length. [ 131.612692][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'. [ 131.630042][ T7236] netlink: 'syz.1.517': attribute type 8 has an invalid length. [ 131.638526][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'. [ 131.648278][ T7236] netlink: 'syz.1.517': attribute type 8 has an invalid length. [ 131.655584][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.663258][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.1.517'. [ 131.680686][ T7233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.065361][ T7267] netlink: 'syz.1.524': attribute type 29 has an invalid length. [ 132.076923][ T7267] netlink: 'syz.1.524': attribute type 29 has an invalid length. [ 132.176563][ T7275] (unnamed net_device) (uninitialized): peer notification delay (4) is not a multiple of miimon (7), value rounded to 0 ms [ 132.304566][ T7279] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 132.620428][ T7299] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.629450][ T7299] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.638203][ T7299] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.647975][ T7299] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.735336][ T7299] netlink: 20 bytes leftover after parsing attributes in process `syz.1.534'. [ 132.808169][ T7302] netlink: 'syz.0.535': attribute type 10 has an invalid length. [ 132.883460][ T7302] team0: Device dummy0 failed to register rx_handler [ 132.978968][ T7310] netlink: 'syz.1.536': attribute type 29 has an invalid length. [ 132.996366][ T7310] netlink: 'syz.1.536': attribute type 29 has an invalid length. [ 133.123808][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130466][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.187960][ T7322] netlink: 'syz.1.538': attribute type 10 has an invalid length. [ 134.294819][ T7362] netlink: 'syz.2.549': attribute type 29 has an invalid length. [ 134.873416][ T7387] __nla_validate_parse: 5 callbacks suppressed [ 134.873435][ T7387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.557'. [ 135.017817][ T7397] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 135.552912][ T7420] net_ratelimit: 16 callbacks suppressed [ 135.552934][ T7420] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.721191][ T5157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.003042][ T7445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 136.073450][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 136.115648][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.573'. [ 136.147117][ C0] eth0: bad gso: type: 1, size: 1408 [ 136.188566][ T7452] netlink: 80 bytes leftover after parsing attributes in process `syz.2.574'. [ 136.263624][ T7457] netlink: 100 bytes leftover after parsing attributes in process `syz.2.575'. [ 136.329123][ T7465] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.576'. [ 136.341955][ T7464] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.576'. [ 136.405253][ T7467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.500132][ T7474] Driver unsupported XDP return value 0 on prog (id 294) dev N/A, expect packet loss! [ 136.821827][ T5157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.921004][ T7484] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.583'. [ 137.081119][ T7495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.095460][ T7490] sctp: [Deprecated]: syz.0.585 (pid 7490) Use of int in maxseg socket option. [ 137.095460][ T7490] Use struct sctp_assoc_value instead [ 137.441486][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.760029][ T7500] netlink: 84 bytes leftover after parsing attributes in process `syz.2.587'. [ 137.880271][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.247620][ T7511] tipc: Started in network mode [ 138.248228][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.252928][ T7511] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 138.262981][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.274973][ T7511] tipc: Enabling of bearer rejected, failed to enable media [ 138.277890][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.299032][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.308043][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.316664][ T5110] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 138.326787][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 138.400535][ C0] eth0: bad gso: type: 1, size: 1408 [ 138.548015][ T7520] Κό: entered promiscuous mode [ 138.636966][ T7514] chnl_net:caif_netlink_parms(): no params data found [ 138.639246][ C0] eth0: bad gso: type: 1, size: 1408 [ 138.870753][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.878092][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.913309][ T7514] bridge_slave_0: entered allmulticast mode [ 138.933421][ T7514] bridge_slave_0: entered promiscuous mode [ 138.942960][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.950971][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.958221][ T7514] bridge_slave_1: entered allmulticast mode [ 138.969001][ T7514] bridge_slave_1: entered promiscuous mode [ 139.030572][ T7514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.056221][ T7514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.085656][ T7555] (unnamed net_device) (uninitialized): option lp_interval: invalid value (18446744073709551614) [ 139.096609][ T7555] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 139.141365][ T7514] team0: Port device team_slave_0 added [ 139.178454][ T7514] team0: Port device team_slave_1 added [ 139.284271][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.294841][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.323192][ T7514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.336910][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.344381][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.372910][ T7514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.465780][ T7514] hsr_slave_0: entered promiscuous mode [ 139.478038][ T7514] hsr_slave_1: entered promiscuous mode [ 139.487158][ T7514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.503842][ T7514] Cannot create hsr debugfs directory [ 139.880860][ T7514] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.016074][ T7514] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.152524][ T7514] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.305446][ T7514] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.401617][ T5110] Bluetooth: hci5: command tx timeout [ 140.511990][ T7514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 140.527353][ T7514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 140.541948][ T7514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 140.555509][ T7514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 140.719762][ T7594] net_ratelimit: 3 callbacks suppressed [ 140.719782][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.728329][ T7514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.747759][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.761128][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.779299][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.788044][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.794261][ T7514] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.815645][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.818534][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.830953][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.834824][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.853844][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.874633][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.886794][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.894029][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.898609][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.210548][ T7514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.481654][ T7514] veth0_vlan: entered promiscuous mode [ 141.494677][ T7514] veth1_vlan: entered promiscuous mode [ 141.533611][ T7514] veth0_macvtap: entered promiscuous mode [ 141.545098][ T7514] veth1_macvtap: entered promiscuous mode [ 141.573760][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.585192][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.595363][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.619291][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.629309][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.639930][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.650033][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.661765][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.672609][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.684374][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.696204][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.716890][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.729042][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.739480][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.750204][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.761771][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.773026][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.784545][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.807493][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.817624][ T7514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.828265][ T7514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.840605][ T7514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.857931][ T7514] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.871230][ T7514] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.880575][ T7514] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.893516][ T7514] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.977549][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.009072][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.050826][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.077427][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.188159][ T7634] __nla_validate_parse: 4 callbacks suppressed [ 142.188179][ T7634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.620'. [ 142.223902][ T7634] netlink: 32 bytes leftover after parsing attributes in process `syz.2.620'. [ 142.251394][ T7630] validate_nla: 1 callbacks suppressed [ 142.251411][ T7630] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 142.283294][ T7630] netlink: 9236 bytes leftover after parsing attributes in process `syz.1.619'. [ 142.304913][ T7630] netlink: 'syz.1.619': attribute type 1 has an invalid length. [ 142.323650][ T7630] netlink: 'syz.1.619': attribute type 2 has an invalid length. [ 142.352541][ T7630] syzkaller1: entered promiscuous mode [ 142.367629][ T7630] syzkaller1: entered allmulticast mode [ 142.482034][ T5110] Bluetooth: hci5: command tx timeout [ 142.529459][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 142.667634][ T7659] netlink: 44 bytes leftover after parsing attributes in process `syz.2.626'. [ 142.798133][ T7668] bridge1: entered promiscuous mode [ 142.817747][ T7668] bridge1: entered allmulticast mode [ 142.845236][ T7669] netlink: 'syz.1.627': attribute type 10 has an invalid length. [ 142.894540][ T7669] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 142.909542][ T7668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.629'. [ 142.921151][ T7668] netlink: 4 bytes leftover after parsing attributes in process `syz.4.629'. [ 143.079783][ T7681] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 143.080462][ T7681] Cannot find add_set index 0 as target [ 143.723125][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.640'. [ 144.045455][ T7713] netlink: 96 bytes leftover after parsing attributes in process `syz.0.642'. [ 144.100083][ T7713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.642'. [ 144.262517][ T5119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 144.283439][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 144.307175][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 144.322033][ T5119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 144.333362][ T5119] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 144.341260][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 144.409503][ T7728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 144.416780][ T7728] IPv6: NLM_F_CREATE should be set when creating new route [ 144.559575][ T5110] Bluetooth: hci5: command tx timeout [ 144.815905][ T7721] chnl_net:caif_netlink_parms(): no params data found [ 145.083837][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.103095][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.115778][ T7721] bridge_slave_0: entered allmulticast mode [ 145.136471][ T7721] bridge_slave_0: entered promiscuous mode [ 145.156616][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.199680][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.227785][ T7721] bridge_slave_1: entered allmulticast mode [ 145.251098][ T7721] bridge_slave_1: entered promiscuous mode [ 145.397495][ T7721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.423446][ T7721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.567575][ T7721] team0: Port device team_slave_0 added [ 145.590093][ T7721] team0: Port device team_slave_1 added [ 145.678852][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.696576][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.741803][ T7721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.786373][ T7721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.804809][ T7721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.847880][ T7721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.998809][ T7721] hsr_slave_0: entered promiscuous mode [ 146.021208][ T7721] hsr_slave_1: entered promiscuous mode [ 146.038415][ T7721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.047717][ T7721] Cannot create hsr debugfs directory [ 146.243227][ T25] net_ratelimit: 1061 callbacks suppressed [ 146.243248][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.315453][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.325096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.373925][ T1102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.382580][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.400103][ T5110] Bluetooth: hci6: command tx timeout [ 146.418928][ T1102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.427398][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.467901][ T1102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.476435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.536553][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.631258][ T7721] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.640119][ T5110] Bluetooth: hci5: command tx timeout [ 146.801350][ T7721] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.921993][ T7721] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.967714][ T7864] veth0_macvtap: left promiscuous mode [ 147.043282][ T7721] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.364873][ T7721] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 147.391643][ T7721] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 147.415232][ T7721] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 147.433960][ T7721] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 147.712318][ T7721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.796635][ T7721] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.838690][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.845923][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.901975][ T5153] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.909192][ T5153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.093523][ T7914] __nla_validate_parse: 1 callbacks suppressed [ 148.093542][ T7914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 148.437273][ T7721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.481679][ T5110] Bluetooth: hci6: command tx timeout [ 148.573727][ T7721] veth0_vlan: entered promiscuous mode [ 148.601097][ T7721] veth1_vlan: entered promiscuous mode [ 148.695176][ T7721] veth0_macvtap: entered promiscuous mode [ 148.794541][ T7721] veth1_macvtap: entered promiscuous mode [ 148.855967][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.870659][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.884447][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.899279][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.916420][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.931093][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.953428][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.972361][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.982431][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.993095][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.003012][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.013476][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.025745][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.073144][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.088859][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.101159][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.112851][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.124130][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.136548][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.161831][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.177709][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.187839][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.206299][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.216285][ T7721] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.227086][ T7721] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.244180][ T7721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.325816][ T7721] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.353079][ T7721] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.368754][ T7721] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.381448][ T7721] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.392445][ T7964] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 149.456039][ T7964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.713'. [ 149.527425][ T7964] syz_tun: entered promiscuous mode [ 149.553657][ T7964] syz_tun: left promiscuous mode [ 149.915271][ T7960] bridge0: entered promiscuous mode [ 149.956848][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.969088][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.004247][ T7958] bridge0: left promiscuous mode [ 150.048309][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.100679][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.242521][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.271499][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.296140][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.308266][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.319954][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 150.327542][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.561145][ T5110] Bluetooth: hci6: command tx timeout [ 150.816801][ T7999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 150.835005][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.723'. [ 150.900185][ T8003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.724'. [ 150.984006][ T8003] netlink: 68 bytes leftover after parsing attributes in process `syz.1.724'. [ 151.018508][ T7983] chnl_net:caif_netlink_parms(): no params data found [ 151.206363][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 151.233981][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.254965][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.275535][ T7983] bridge_slave_0: entered allmulticast mode [ 151.285655][ T7983] bridge_slave_0: entered promiscuous mode [ 151.295698][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.304419][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.311739][ T7983] bridge_slave_1: entered allmulticast mode [ 151.319080][ T7983] bridge_slave_1: entered promiscuous mode [ 151.370555][ T5153] net_ratelimit: 26 callbacks suppressed [ 151.370604][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.428501][ T7983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.443269][ T7983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.449621][ T5103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.535699][ T7983] team0: Port device team_slave_0 added [ 151.548283][ T7983] team0: Port device team_slave_1 added [ 151.642437][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.666822][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.684738][ T8027] IPv6: addrconf: prefix option has invalid lifetime [ 151.699523][ T7983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.712881][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.729692][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.767286][ T7983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.937938][ T7983] hsr_slave_0: entered promiscuous mode [ 151.954908][ T7983] hsr_slave_1: entered promiscuous mode [ 151.961962][ T7983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.969861][ T7983] Cannot create hsr debugfs directory [ 151.975495][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 152.017649][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 152.027375][ T8042] gre1: entered allmulticast mode [ 152.150787][ T8045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 152.245865][ T7983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.256851][ T7983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.395136][ T7983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.399954][ T5110] Bluetooth: hci1: command tx timeout [ 152.428033][ T7983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.492639][ T5103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.523429][ T7983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.539441][ T7983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.602179][ T8059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.611674][ T8059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.634210][ T7983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 152.639645][ T5110] Bluetooth: hci6: command tx timeout [ 152.652650][ T7983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.687610][ T8059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.740340][ T8059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.748662][ T8059] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.871018][ T8069] IPv6: addrconf: prefix option has invalid lifetime [ 153.028176][ T7983] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 153.094844][ T7983] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 153.122035][ T7983] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 153.169110][ T7983] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 153.366660][ T7983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.388912][ T8106] __nla_validate_parse: 37 callbacks suppressed [ 153.388931][ T8106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.754'. [ 153.416893][ T7983] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.436812][ T5153] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.444003][ T5153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.461015][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.468175][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.822315][ T7983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.908994][ T7983] veth0_vlan: entered promiscuous mode [ 153.944862][ T7983] veth1_vlan: entered promiscuous mode [ 153.987781][ T8124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.759'. [ 154.034290][ T7983] veth0_macvtap: entered promiscuous mode [ 154.056375][ T7983] veth1_macvtap: entered promiscuous mode [ 154.117718][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.139414][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.189390][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.229343][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.289213][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.327312][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.348339][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.370954][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.389338][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.409199][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.419105][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.439368][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.451493][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.472030][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.480444][ T5110] Bluetooth: hci1: command tx timeout [ 154.501244][ T7983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.550977][ T8149] netlink: 24 bytes leftover after parsing attributes in process `syz.3.764'. [ 154.618696][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.645055][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.661466][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.679849][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.698902][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.718161][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.731675][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.748340][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.761691][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.774868][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.786035][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.797681][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.807810][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.818392][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.831044][ T7983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.838432][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 155.089270][ T8156] team0 (unregistering): Port device team_slave_0 removed [ 155.135998][ T8156] team0 (unregistering): Port device team_slave_1 removed [ 155.285530][ T7983] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.309855][ T7983] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.318718][ T7983] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.339316][ T7983] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.479412][ T8179] xt_TCPMSS: Only works on TCP SYN packets [ 155.516962][ T8179] rdma_op ffff88806882f9f0 conn xmit_rdma 0000000000000000 [ 155.576787][ T8179] netlink: 92 bytes leftover after parsing attributes in process `syz.4.771'. [ 155.595133][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.612946][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.764749][ T8196] netlink: 'syz.1.776': attribute type 29 has an invalid length. [ 155.815572][ T8193] netlink: 'syz.1.776': attribute type 12 has an invalid length. [ 155.833649][ T8193] netlink: 'syz.1.776': attribute type 29 has an invalid length. [ 155.844245][ T8193] netlink: 'syz.1.776': attribute type 2 has an invalid length. [ 155.852499][ T8193] netlink: 128 bytes leftover after parsing attributes in process `syz.1.776'. [ 155.860802][ T8196] sctp: [Deprecated]: syz.1.776 (pid 8196) Use of int in max_burst socket option. [ 155.860802][ T8196] Use struct sctp_assoc_value instead [ 155.864369][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.886130][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.223943][ T8213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.779'. [ 156.341730][ T8213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 156.720481][ T5103] net_ratelimit: 10 callbacks suppressed [ 156.720498][ T5103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.738774][ T8237] netlink: 'syz.4.787': attribute type 1 has an invalid length. [ 156.747063][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz.4.787'. [ 156.757710][ T8237] nbd: illegal input index -1 [ 156.761106][ T8240] netlink: 12 bytes leftover after parsing attributes in process `syz.0.788'. [ 156.936278][ T8251] sctp: [Deprecated]: syz.3.790 (pid 8251) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.936278][ T8251] Use struct sctp_sack_info instead [ 157.353691][ T8280] veth0_macvtap: left promiscuous mode [ 157.663423][ T8299] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 157.688632][ T8299] netlink: 'syz.4.802': attribute type 1 has an invalid length. [ 157.779591][ T5103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.968669][ T8317] IPv6: addrconf: prefix option has invalid lifetime [ 158.196118][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.204880][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.216831][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.225549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.234477][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.242816][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.275511][ T8327] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.413755][ T8343] syz.4.815[8343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.413922][ T8343] syz.4.815[8343] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.512055][ T8353] __nla_validate_parse: 6 callbacks suppressed [ 158.512079][ T8353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.817'. [ 158.731580][ T8364] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.740545][ T8364] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.749804][ T8364] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.758907][ T8364] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.923391][ T2866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.101417][ T8378] FAULT_INJECTION: forcing a failure. [ 159.101417][ T8378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.129421][ T8378] CPU: 0 PID: 8378 Comm: syz.0.825 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 159.139121][ T8378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 159.149199][ T8378] Call Trace: [ 159.152500][ T8378] [ 159.155449][ T8378] dump_stack_lvl+0x241/0x360 [ 159.160158][ T8378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 159.165383][ T8378] ? __pfx__printk+0x10/0x10 [ 159.170002][ T8378] ? __pfx_lock_release+0x10/0x10 [ 159.175055][ T8378] should_fail_ex+0x3b0/0x4e0 [ 159.179737][ T8378] _copy_from_user+0x2f/0xe0 [ 159.184340][ T8378] copy_msghdr_from_user+0xae/0x680 [ 159.189569][ T8378] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 159.195392][ T8378] do_recvmmsg+0x40f/0xae0 [ 159.199821][ T8378] ? __pfx_lock_release+0x10/0x10 [ 159.204849][ T8378] ? __pfx_do_recvmmsg+0x10/0x10 [ 159.209805][ T8378] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 159.215796][ T8378] ? ksys_write+0x23e/0x2c0 [ 159.220300][ T8378] ? __pfx_lock_release+0x10/0x10 [ 159.225328][ T8378] ? vfs_write+0x7c4/0xc90 [ 159.229755][ T8378] ? __mutex_unlock_slowpath+0x21d/0x750 [ 159.235394][ T8378] ? __fget_files+0x3f6/0x470 [ 159.240079][ T8378] __x64_sys_recvmmsg+0x199/0x250 [ 159.245115][ T8378] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 159.250662][ T8378] ? do_syscall_64+0x100/0x230 [ 159.255436][ T8378] ? do_syscall_64+0xb6/0x230 [ 159.260119][ T8378] do_syscall_64+0xf3/0x230 [ 159.264627][ T8378] ? clear_bhb_loop+0x35/0x90 [ 159.269325][ T8378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.275326][ T8378] RIP: 0033:0x7ff875b75f19 [ 159.279756][ T8378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.299392][ T8378] RSP: 002b:00007ff876915048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 159.307839][ T8378] RAX: ffffffffffffffda RBX: 00007ff875d05f60 RCX: 00007ff875b75f19 [ 159.315814][ T8378] RDX: 0000000000000001 RSI: 00000000200051c0 RDI: 0000000000000004 [ 159.323787][ T8378] RBP: 00007ff8769150a0 R08: 0000000000000000 R09: 0000000000000000 [ 159.331756][ T8378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.339728][ T8378] R13: 000000000000000b R14: 00007ff875d05f60 R15: 00007ffc01ebbc98 [ 159.347710][ T8378] [ 159.660645][ T8401] netlink: 80 bytes leftover after parsing attributes in process `syz.4.831'. [ 159.779694][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 159.799859][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 159.805676][ T2866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.821758][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 159.843378][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 159.851921][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 159.864192][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 159.875201][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.836'. [ 159.909454][ T8411] bond2: entered allmulticast mode [ 159.915263][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 159.939685][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 159.948929][ T8415] batadv1: entered allmulticast mode [ 159.954845][ T8415] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 160.028874][ T2866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.055207][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 160.065053][ T8421] smc: net device lo applied user defined pnetid SYZ2 [ 160.077404][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 160.096860][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 160.166610][ T2866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.185244][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 160.195729][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 160.214981][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.836'. [ 160.242946][ T8429] FAULT_INJECTION: forcing a failure. [ 160.242946][ T8429] name failslab, interval 1, probability 0, space 0, times 0 [ 160.269401][ T8429] CPU: 1 PID: 8429 Comm: syz.3.840 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 160.279096][ T8429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 160.289184][ T8429] Call Trace: [ 160.292500][ T8429] [ 160.295548][ T8429] dump_stack_lvl+0x241/0x360 [ 160.300275][ T8429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.305510][ T8429] ? __pfx__printk+0x10/0x10 [ 160.310138][ T8429] ? __pfx___might_resched+0x10/0x10 [ 160.315460][ T8429] ? af_alg_wait_for_data+0x6f8/0x7a0 [ 160.320879][ T8429] should_fail_ex+0x3b0/0x4e0 [ 160.325592][ T8429] ? sock_kmalloc+0xd7/0x160 [ 160.330206][ T8429] should_failslab+0x9/0x20 [ 160.334731][ T8429] __kmalloc_noprof+0xd8/0x400 [ 160.339531][ T8429] sock_kmalloc+0xd7/0x160 [ 160.343972][ T8429] af_alg_alloc_areq+0x90/0x260 [ 160.348939][ T8429] skcipher_recvmsg+0x382/0x1230 [ 160.353908][ T8429] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 160.359322][ T8429] ? aa_sock_msg_perm+0x91/0x160 [ 160.364291][ T8429] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 160.369605][ T8429] ? security_socket_recvmsg+0x90/0xb0 [ 160.375100][ T8429] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 160.380521][ T8429] sock_recvmsg+0x22f/0x280 [ 160.385062][ T8429] ____sys_recvmsg+0x1db/0x470 [ 160.389874][ T8429] ? __pfx_____sys_recvmsg+0x10/0x10 [ 160.395214][ T8429] do_recvmmsg+0x474/0xae0 [ 160.399664][ T8429] ? __pfx_lock_release+0x10/0x10 [ 160.404718][ T8429] ? __pfx_do_recvmmsg+0x10/0x10 [ 160.409702][ T8429] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 160.415636][ T8429] ? ksys_write+0x23e/0x2c0 [ 160.420178][ T8429] ? __pfx_lock_release+0x10/0x10 [ 160.425241][ T8429] ? vfs_write+0x7c4/0xc90 [ 160.429692][ T8429] ? __mutex_unlock_slowpath+0x21d/0x750 [ 160.435355][ T8429] ? __fget_files+0x3f6/0x470 [ 160.440066][ T8429] __x64_sys_recvmmsg+0x199/0x250 [ 160.445136][ T8429] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 160.450715][ T8429] ? do_syscall_64+0x100/0x230 [ 160.455525][ T8429] ? do_syscall_64+0xb6/0x230 [ 160.460247][ T8429] do_syscall_64+0xf3/0x230 [ 160.464792][ T8429] ? clear_bhb_loop+0x35/0x90 [ 160.469516][ T8429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.475449][ T8429] RIP: 0033:0x7f9998175f19 [ 160.479906][ T8429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.499542][ T8429] RSP: 002b:00007f9998fba048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 160.508000][ T8429] RAX: ffffffffffffffda RBX: 00007f9998305f60 RCX: 00007f9998175f19 [ 160.516006][ T8429] RDX: 0000000000000001 RSI: 00000000200051c0 RDI: 0000000000000004 [ 160.524008][ T8429] RBP: 00007f9998fba0a0 R08: 0000000000000000 R09: 0000000000000000 [ 160.532019][ T8429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.540017][ T8429] R13: 000000000000000b R14: 00007f9998305f60 R15: 00007ffe727e5428 [ 160.548038][ T8429] [ 160.731713][ T2866] bridge_slave_1: left allmulticast mode [ 160.741092][ T2866] bridge_slave_1: left promiscuous mode [ 160.761622][ T2866] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.821822][ T2866] bridge_slave_0: left allmulticast mode [ 160.827542][ T2866] bridge_slave_0: left promiscuous mode [ 160.855387][ T2866] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.374853][ T2866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.389642][ T2866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.400986][ T2866] bond0 (unregistering): Released all slaves [ 161.487595][ T8410] chnl_net:caif_netlink_parms(): no params data found [ 161.578413][ T8474] netlink: 'syz.0.849': attribute type 3 has an invalid length. [ 161.922037][ T5110] Bluetooth: hci1: command tx timeout [ 161.931714][ T5103] net_ratelimit: 39 callbacks suppressed [ 161.931732][ T5103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.985575][ T2866] hsr_slave_0: left promiscuous mode [ 162.011491][ T2866] hsr_slave_1: left promiscuous mode [ 162.024369][ T2866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.039714][ T2866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.065400][ T8501] netlink: 'syz.4.853': attribute type 1 has an invalid length. [ 162.073922][ T8502] IPv6: addrconf: prefix option has invalid lifetime [ 162.075296][ T2866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.099933][ T2866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.155891][ T2866] veth1_macvtap: left promiscuous mode [ 162.162566][ T2866] veth0_macvtap: left promiscuous mode [ 162.169140][ T2866] veth1_vlan: left promiscuous mode [ 162.174857][ T2866] veth0_vlan: left promiscuous mode [ 162.758140][ T2866] team0 (unregistering): Port device team_slave_1 removed [ 162.796999][ T2866] team0 (unregistering): Port device team_slave_0 removed [ 162.960181][ T5158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.299936][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.307208][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.363653][ T8410] bridge_slave_0: entered allmulticast mode [ 163.382663][ T8410] bridge_slave_0: entered promiscuous mode [ 163.410148][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.431333][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.446605][ T8410] bridge_slave_1: entered allmulticast mode [ 163.462474][ T8410] bridge_slave_1: entered promiscuous mode [ 163.782302][ T8555] __nla_validate_parse: 64 callbacks suppressed [ 163.782334][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.869'. [ 163.838403][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.869629][ T5155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.897714][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.954824][ T8560] batadv0: entered promiscuous mode [ 163.961500][ T8560] vlan2: entered promiscuous mode [ 163.975426][ T8560] batadv0: left promiscuous mode [ 163.999885][ T5110] Bluetooth: hci1: command tx timeout [ 164.011869][ T5157] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.091944][ T8410] team0: Port device team_slave_0 added [ 164.103819][ T8410] team0: Port device team_slave_1 added [ 164.164670][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.175052][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.204544][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active Connection to 10.128.1.74 closed by remote host. [ 164.226524][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.242567][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.302403][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.640842][ T5153] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.689365][ T5120] ================================================================== [ 164.697483][ T5120] BUG: KASAN: slab-use-after-free in mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 164.706222][ T5120] Read of size 8 at addr ffff88807c889818 by task kworker/u9:8/5120 [ 164.714214][ T5120] [ 164.716536][ T5120] CPU: 1 PID: 5120 Comm: kworker/u9:8 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 164.726422][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 164.736485][ T5120] Workqueue: hci0 hci_cmd_sync_work [ 164.741695][ T5120] Call Trace: [ 164.744970][ T5120] [ 164.747933][ T5120] dump_stack_lvl+0x241/0x360 [ 164.752616][ T5120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.757812][ T5120] ? __pfx__printk+0x10/0x10 [ 164.762402][ T5120] ? _printk+0xd5/0x120 [ 164.766553][ T5120] ? __virt_addr_valid+0x183/0x530 [ 164.771672][ T5120] ? __virt_addr_valid+0x183/0x530 [ 164.776792][ T5120] print_report+0x169/0x550 [ 164.781299][ T5120] ? __virt_addr_valid+0x183/0x530 [ 164.786419][ T5120] ? __virt_addr_valid+0x183/0x530 [ 164.791538][ T5120] ? __virt_addr_valid+0x45f/0x530 [ 164.796653][ T5120] ? __phys_addr+0xba/0x170 [ 164.801166][ T5120] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 164.807074][ T5120] kasan_report+0x143/0x180 [ 164.811599][ T5120] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 164.817515][ T5120] mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 164.823232][ T5120] ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10 [ 164.829641][ T5120] hci_cmd_sync_work+0x22b/0x400 [ 164.834578][ T5120] ? process_scheduled_works+0x945/0x1830 [ 164.840299][ T5120] process_scheduled_works+0xa2c/0x1830 [ 164.845860][ T5120] ? __pfx_process_scheduled_works+0x10/0x10 [ 164.851839][ T5120] ? assign_work+0x364/0x3d0 [ 164.856430][ T5120] worker_thread+0x86d/0xd40 [ 164.861033][ T5120] ? __kthread_parkme+0x169/0x1d0 [ 164.866083][ T5120] ? __pfx_worker_thread+0x10/0x10 [ 164.871193][ T5120] kthread+0x2f0/0x390 [ 164.875260][ T5120] ? __pfx_worker_thread+0x10/0x10 [ 164.880371][ T5120] ? __pfx_kthread+0x10/0x10 [ 164.884976][ T5120] ret_from_fork+0x4b/0x80 [ 164.889404][ T5120] ? __pfx_kthread+0x10/0x10 [ 164.894019][ T5120] ret_from_fork_asm+0x1a/0x30 [ 164.898794][ T5120] [ 164.901805][ T5120] [ 164.904123][ T5120] Allocated by task 7765: [ 164.908435][ T5120] kasan_save_track+0x3f/0x80 [ 164.913126][ T5120] __kasan_kmalloc+0x98/0xb0 [ 164.917709][ T5120] __kmalloc_cache_noprof+0x19c/0x2c0 [ 164.923078][ T5120] mgmt_pending_new+0x65/0x250 [ 164.927832][ T5120] mgmt_pending_add+0x36/0x120 [ 164.932585][ T5120] remove_adv_monitor+0x102/0x1b0 [ 164.937612][ T5120] hci_mgmt_cmd+0xc47/0x11d0 [ 164.942230][ T5120] hci_sock_sendmsg+0x7b8/0x11c0 [ 164.947164][ T5120] __sock_sendmsg+0x221/0x270 [ 164.951840][ T5120] sock_write_iter+0x2dd/0x400 [ 164.956600][ T5120] vfs_write+0xa72/0xc90 [ 164.960840][ T5120] ksys_write+0x1a0/0x2c0 [ 164.965162][ T5120] do_syscall_64+0xf3/0x230 [ 164.969662][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.975550][ T5120] [ 164.977864][ T5120] Freed by task 7027: [ 164.981934][ T5120] kasan_save_track+0x3f/0x80 [ 164.986629][ T5120] kasan_save_free_info+0x40/0x50 [ 164.991659][ T5120] poison_slab_object+0xe0/0x150 [ 164.996596][ T5120] __kasan_slab_free+0x37/0x60 [ 165.001354][ T5120] kfree+0x149/0x360 [ 165.005253][ T5120] mgmt_pending_foreach+0xd1/0x130 [ 165.010368][ T5120] __mgmt_power_off+0x187/0x420 [ 165.015212][ T5120] hci_dev_close_sync+0x665/0x11a0 [ 165.020321][ T5120] hci_dev_close+0x112/0x210 [ 165.024906][ T5120] sock_do_ioctl+0x158/0x460 [ 165.029488][ T5120] sock_ioctl+0x629/0x8e0 [ 165.033808][ T5120] __se_sys_ioctl+0xfc/0x170 [ 165.038396][ T5120] do_syscall_64+0xf3/0x230 [ 165.042892][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.048781][ T5120] [ 165.051101][ T5120] The buggy address belongs to the object at ffff88807c889800 [ 165.051101][ T5120] which belongs to the cache kmalloc-96 of size 96 [ 165.064975][ T5120] The buggy address is located 24 bytes inside of [ 165.064975][ T5120] freed 96-byte region [ffff88807c889800, ffff88807c889860) [ 165.078591][ T5120] [ 165.080909][ T5120] The buggy address belongs to the physical page: [ 165.087316][ T5120] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7c889 [ 165.096082][ T5120] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 165.103192][ T5120] page_type: 0xffffefff(slab) [ 165.107867][ T5120] raw: 00fff00000000000 ffff888015041280 ffffea0000b42140 dead000000000004 [ 165.116456][ T5120] raw: 0000000000000000 0000000000200020 00000001ffffefff 0000000000000000 [ 165.125033][ T5120] page dumped because: kasan: bad access detected [ 165.131451][ T5120] page_owner tracks the page as allocated [ 165.137156][ T5120] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x352800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL|__GFP_THISNODE), pid 5212, tgid 5212 (syz-executor), ts 82836469277, free_ts 82784625274 [ 165.157989][ T5120] post_alloc_hook+0x1f3/0x230 [ 165.162745][ T5120] get_page_from_freelist+0x2e4c/0x2f10 [ 165.168283][ T5120] __alloc_pages_noprof+0x256/0x6c0 [ 165.173495][ T5120] alloc_slab_page+0x5f/0x120 [ 165.178166][ T5120] allocate_slab+0x5a/0x2f0 [ 165.182663][ T5120] ___slab_alloc+0xcd1/0x14b0 [ 165.187346][ T5120] __slab_alloc+0x58/0xa0 [ 165.191679][ T5120] __kmalloc_node_noprof+0x286/0x440 [ 165.196963][ T5120] alloc_slab_obj_exts+0x3a/0xa0 [ 165.201898][ T5120] __memcg_slab_post_alloc_hook+0x31c/0x7e0 [ 165.207778][ T5120] kmem_cache_alloc_lru_noprof+0x1e6/0x2b0 [ 165.213576][ T5120] proc_alloc_inode+0x2a/0xc0 [ 165.218243][ T5120] new_inode+0x6e/0x310 [ 165.222402][ T5120] proc_pid_make_inode+0x1f/0x130 [ 165.227513][ T5120] proc_pid_instantiate+0x54/0x2b0 [ 165.232633][ T5120] proc_pid_lookup+0x31f/0x470 [ 165.237392][ T5120] page last free pid 5100 tgid 5100 stack trace: [ 165.243708][ T5120] free_unref_page+0xd22/0xea0 [ 165.248464][ T5120] __put_partials+0xeb/0x130 [ 165.253053][ T5120] put_cpu_partial+0x17c/0x250 [ 165.257804][ T5120] __slab_free+0x2ea/0x3d0 [ 165.262209][ T5120] qlist_free_all+0x9e/0x140 [ 165.266927][ T5120] kasan_quarantine_reduce+0x14f/0x170 [ 165.272388][ T5120] __kasan_slab_alloc+0x23/0x80 [ 165.277228][ T5120] __kmalloc_noprof+0x1a6/0x400 [ 165.282171][ T5120] tomoyo_realpath_from_path+0xcf/0x5e0 [ 165.287807][ T5120] tomoyo_path2_perm+0x3eb/0xbb0 [ 165.292739][ T5120] security_sb_pivotroot+0x6d/0xa0 [ 165.297849][ T5120] __se_sys_pivot_root+0x205/0x1650 [ 165.303044][ T5120] do_syscall_64+0xf3/0x230 [ 165.307545][ T5120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.313454][ T5120] [ 165.315787][ T5120] Memory state around the buggy address: [ 165.321408][ T5120] ffff88807c889700: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc [ 165.329457][ T5120] ffff88807c889780: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 165.337508][ T5120] >ffff88807c889800: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 165.345559][ T5120] ^ [ 165.350405][ T5120] ffff88807c889880: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 165.358452][ T5120] ffff88807c889900: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 165.366499][ T5120] ================================================================== [ 165.388639][ T5120] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.395864][ T5120] CPU: 1 PID: 5120 Comm: kworker/u9:8 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 165.405750][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 165.415804][ T5120] Workqueue: hci0 hci_cmd_sync_work [ 165.421018][ T5120] Call Trace: [ 165.424310][ T5120] [ 165.427248][ T5120] dump_stack_lvl+0x241/0x360 [ 165.431936][ T5120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.437140][ T5120] ? __pfx__printk+0x10/0x10 [ 165.441737][ T5120] ? preempt_schedule+0xe1/0xf0 [ 165.446600][ T5120] ? vscnprintf+0x5d/0x90 [ 165.450939][ T5120] panic+0x349/0x860 [ 165.454839][ T5120] ? check_panic_on_warn+0x21/0xb0 [ 165.459961][ T5120] ? __pfx_panic+0x10/0x10 [ 165.464385][ T5120] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 165.470373][ T5120] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 165.476706][ T5120] ? print_report+0x502/0x550 [ 165.481387][ T5120] check_panic_on_warn+0x86/0xb0 [ 165.486338][ T5120] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 165.492236][ T5120] end_report+0x77/0x160 [ 165.496483][ T5120] kasan_report+0x154/0x180 [ 165.500990][ T5120] ? mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 165.506893][ T5120] mgmt_remove_adv_monitor_sync+0x3a/0xd0 [ 165.512613][ T5120] ? __pfx_mgmt_remove_adv_monitor_sync+0x10/0x10 [ 165.519035][ T5120] hci_cmd_sync_work+0x22b/0x400 [ 165.523982][ T5120] ? process_scheduled_works+0x945/0x1830 [ 165.529706][ T5120] process_scheduled_works+0xa2c/0x1830 [ 165.535269][ T5120] ? __pfx_process_scheduled_works+0x10/0x10 [ 165.541263][ T5120] ? assign_work+0x364/0x3d0 [ 165.545867][ T5120] worker_thread+0x86d/0xd40 [ 165.550468][ T5120] ? __kthread_parkme+0x169/0x1d0 [ 165.555499][ T5120] ? __pfx_worker_thread+0x10/0x10 [ 165.560618][ T5120] kthread+0x2f0/0x390 [ 165.564694][ T5120] ? __pfx_worker_thread+0x10/0x10 [ 165.569806][ T5120] ? __pfx_kthread+0x10/0x10 [ 165.574399][ T5120] ret_from_fork+0x4b/0x80 [ 165.578819][ T5120] ? __pfx_kthread+0x10/0x10 [ 165.583409][ T5120] ret_from_fork_asm+0x1a/0x30 [ 165.588181][ T5120] [ 165.591533][ T5120] Kernel Offset: disabled [ 165.595854][ T5120] Rebooting in 86400 seconds..