last executing test programs: 2.833155476s ago: executing program 1 (id=383): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x17, 0x0, 0x0, @prog_fd}, 0x20) r1 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r1, 0x114, 0x2716, 0x0, 0x20000008) socket$alg(0x26, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001b40)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2037d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}, @IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}}, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000580)={0x0, 0x3, 0x1}, 0x8) 2.713364004s ago: executing program 2 (id=384): unshare(0x24020400) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) write$binfmt_misc(r1, 0x0, 0xfffffc8f) splice(r0, 0x0, r3, 0x0, 0x1800, 0x0) 2.522406169s ago: executing program 2 (id=385): r0 = socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000000600050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.358813957s ago: executing program 2 (id=387): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000053000000180100002020692500000000002020207b1af8ff0000000fbfa110000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) 2.251560132s ago: executing program 0 (id=390): socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x90) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0xeb, 0x2, 0xc4d, 0x44, @empty, @private1, 0x7800, 0x10, 0x2b4, 0xb}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f0000000740)=""/224, 0xe0, 0x0, &(0x7f0000000840)=""/253, 0xfd}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6_vti0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x3, 0x2, 0x18]}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1c, 0x9d, 0x10001, 0x0, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x10000000}, 0x48) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "865703b7e43b34e4"}, 0x28) write$binfmt_script(r6, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfccf}, &(0x7f0000000240)=0x40) writev(r6, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0xfd88}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) 2.21943543s ago: executing program 2 (id=391): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb50600b458fd35039c7d81e9ab07f2fb4dad4dace0f5319b54c74a12e4569e47b69ad0fde963e84da549", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000700)="e2", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000000d00)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)="53fb7ce9bca5b4c6c82fb997acc6b0361e5c15be43144f1d9cb2f738c0dcd881c2bd734b3a0d325847ea3aa2d8ef64bfd77363d3ee", 0x35}, {&(0x7f0000000640)="1bd811741a607159fda051b57d4c01e9986c2e65426807ac72604e001af6eba2fedb368d816a109958c47842f8f56a1c6fe296617bede164ba1802cd81f0d41cc77aadb91f6de5a0d05e3edd3b260afc80732ab70609c96107211530a57108325d22154b5a20a367309333edfcb7f835cae30f79c907071410", 0x79}, {&(0x7f0000000580)="5de3b88de49e7b7cfec66d713c7a722698e1e8e8c77c37434d96d6f3b2f33ec2a47ba0ce18c4c391142b75b191f13f5fd350b22e27369d79c8dcc5a6b74df2f0fbfe676e05df80acc754928b4e1cd39112", 0x51}, {&(0x7f0000001e40)="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", 0x800}], 0x4, &(0x7f0000000a40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xd}}], 0x60}}], 0x1, 0x20000800) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x23, 0x0, "093f38050b94725997f7ff898a3f9ab16a8731bf2ce9e46bca4cef5a7c35015b7a97f697e89d86377518bf274943a186c89a051c531b5ad251ff1e26b7fe42b3eb4ddd4dc049ad87c56cd0c3628976cc"}, 0xd8) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000006800e9780000000000000054ac1c07000000040004000c"], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000001dc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) 2.029074513s ago: executing program 4 (id=394): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) 1.884501268s ago: executing program 1 (id=395): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x4c, &(0x7f000002eff0)={0x20000000000003da, &(0x7f0000000000)=[{}]}, 0x10) (async) sendto(r2, 0x0, 0x34000, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001800)={'wlan0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) (async) recvmmsg(r4, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0x2b0}}, 0x1) (async) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=r5, @ANYBLOB="c960041b817e12997763c37d4093927bfb6a0043e9311ee13fff50d2"], 0x1c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=ANY=[@ANYBLOB="54010000", @ANYRES16=r11, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r12, @ANYBLOB="38013300800000000802110000010802110000010000000000000000000000000000000064001280010005fe008000022917f98d42300d8f6852717c3605586a9b864f5e9291b20f037b9e462a96635d3844d6940b97e512269dd8e90df796b0d965377eef7e1c5aab4f0568697bb06a01f66b68593eba618a892f3ba0e6a8f732580055efca65745a226a18f93c94db8f162a4a16c9032d55ba34ba66f62507ec693d7e0187928ab2f2a07983db0d01909b05d298f77ffca5e5bcb7ccec057a99784d9840accadf23e93047d3232776d0106a8bc969385c2481384bb6e8445023847d53812f77dda60fda2648cabd719fdcf12b81d50958f2cd4f6653d3aa9fd4f6a87db1ff427cc9da08a36c0b1bec76d05ae7eac8e59c280b41862f2fb73527c07a959336f7044a733c040000000076061000000000009ccec8898814e65c7c978daba659951ea2b2b9a867e458df08691cc8ac"], 0x154}}, 0x4004050) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000039000000d577a2040000005151e8150300c22af3018ae241f3ed92c221e2d41c3b103539db7b26fa25c1e3873bb3ab99e40201c71b469c3affe210122d3dff084859b027bf2bad0418f709ac85e1202bcd64746007890821e3f45bd910d5b24c5d7b9290395b4b7552f6c377bea59fa7857f7d5e3cb3e3102286532a60f5101881", @ANYRES32=r8, @ANYBLOB="0c005a800300038004000400"], 0x28}}, 0x0) (async) r13 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x70bd2a, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000100039040000000800000000000000e4", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100736974001400028008000300ac14140006000d004be60000"], 0x40}}, 0x0) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r13) sendmsg$IPVS_CMD_GET_INFO(r14, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010029bd7000fcdbdf250f000000080004000100008008000400530d0000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4010) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) 1.882986545s ago: executing program 4 (id=397): r0 = socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000000600050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 1.789427632s ago: executing program 0 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r2) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000006c0)={0x518, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x78}}}}, [@NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x354, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe8}]}, {0x4}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5a}]}, {0x314, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x64}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x284, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xfff, 0x3, 0x89b, 0x5, 0xa5, 0x1000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x3, 0x3}, {0x6}, {0x0, 0xa}, {0x7, 0x6}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x18}, {0x6, 0x2}, {0x5, 0x7}, {0x6, 0x8}, {0x7, 0x1}, {0x6, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x491, 0x4, 0x1, 0x80, 0x4901, 0x4, 0x1d66]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x31b, 0x3, 0x2, 0x7, 0x13, 0x4, 0xaa7, 0xf]}}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0x7}, {0x5}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x5}, {0x3, 0x8}, {0x6, 0x3}, {0x3, 0x4}, {0x2, 0x5}, {0x0, 0x1}, {0x3, 0x1}]}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x5, 0x2}, {0x6, 0x9}, {0x6, 0x4}, {0x7}, {0x1, 0x5}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x7}, {0x4, 0x5}, {0x1, 0x9}, {0x1, 0x3}, {0x4, 0x9}, {0x6, 0x9}, {0x6, 0x8}, {0x3, 0x6}, {0x0, 0x2}, {0x1, 0xa}, {0x4, 0x6}, {0x2, 0x1}, {0x7, 0x1}, {0x3}, {0x6, 0x5}, {0x3, 0x6}, {0x0, 0x4}, {0x5, 0x9}, {0x1, 0x7}, {0x5, 0x1}, {0x6}, {0x4, 0x2}, {0x1, 0x2}, {0x7, 0x5}, {0x1, 0x7}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x1}, {0x0, 0xa}, {0x0, 0x9}, {0x3}, {0x5}, {0x7, 0x9}, {0x3, 0x2}, {0x7, 0x9}, {0x6, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x5, 0x6}, {0x6, 0x8}, {0x6, 0xa}, {0x1, 0x5}, {0x1, 0x3}, {0x7, 0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x6, 0x12, 0x5, 0x12, 0x16, 0x6, 0x3, 0x6c, 0x9, 0x2, 0x18, 0xb, 0x6, 0x16, 0x6, 0x12]}]}, @NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x7, 0x9}, {0x6, 0x1}, {0x1, 0x2}, {0x1, 0x8}, {0x0, 0x9}, {0x5, 0x3}, {0x2, 0xa}, {0x6, 0xa}, {0x0, 0x7}, {0x0, 0x2}, {0x5, 0x2}, {0x3, 0x4}, {0x6, 0x6}, {0x7, 0x4}, {0x3, 0x7}, {0x6, 0x7}, {0x4, 0x9}, {0x4}, {0x2}, {0x7, 0x9}, {0x1, 0x5}, {0x6, 0x5}, {0x4, 0x5}, {0x3, 0x3}, {0x6, 0x6}, {0x7, 0x7}, {0x5, 0xa}, {0x0, 0x8}, {0x1, 0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x0, 0x3}, {0x7, 0x4}, {0x4, 0x4}, {0x1, 0x3}, {0x3, 0x6}, {0x5, 0x1}, {0x6, 0xa}, {0x0, 0x9}, {0x0, 0x9}, {0x2, 0x7}, {0x0, 0x2}, {0x3, 0x3}, {0x7, 0xa}, {0x3}, {0x0, 0x3}, {0x1, 0x2}, {0x2, 0x8}, {0x0, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x0, 0x9}, {0x5, 0x5}, {0x1, 0x3}, {0x4, 0x1}, {0x1}, {0x0, 0x8}, {0x6, 0x7}, {0x4, 0x4}, {0x5, 0x3}, {0x6, 0x9}, {0x6, 0x8}, {0x5, 0x3}, {0x5, 0x7}, {0x6, 0x8}, {0x0, 0x5}, {0x0, 0x2}, {0x6, 0x5}, {0x4, 0x1}, {0x4}, {0x2, 0x2}, {0x7, 0x5}, {0x1, 0x8}, {0x1, 0x4}, {0x3, 0x7}, {0x7, 0x7}, {0x2, 0x6}, {0x1, 0xa}, {0x2, 0x3}, {0x5, 0x9}, {0x7, 0x9}, {0x3, 0x3}, {0x0, 0x4}, {0x2}, {0x7, 0x2}, {0x5, 0x9}, {0x0, 0x2}, {0x5, 0x2}, {0x1, 0x1}, {0x3, 0x5}, {0x5, 0x4}, {0x0, 0xa}, {0x2, 0x4}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x2, 0xa}, {0x0, 0x6}, {0x2, 0x2}, {0x0, 0x5}, {0x7, 0x3}, {0x0, 0x2}, {0x2, 0x9}, {0x0, 0x1}, {0x1}, {}, {0x7, 0x3}, {0x2, 0xa}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x9}, {0x2, 0x3}, {0x4}, {0x7, 0x5}, {0x2, 0x6}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x400, 0x7ff, 0xfff, 0x0, 0x4, 0x1, 0xa1]}}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x1, 0x9, 0xff01, 0x0, 0x3, 0x7ff, 0x400]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x5, 0x2}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0x3}, {0x7, 0x6}, {}, {0x6, 0x2}, {0x4, 0x6}, {0x0, 0x9}, {0x4, 0x8}, {0x7, 0x2}, {0x5, 0xa}, {0x6, 0x9}, {0x2, 0x3}, {0x0, 0x3}, {0x5, 0x6}, {0x1, 0x4}, {0x6, 0x7}, {0x7, 0x5}, {0x1, 0x1}, {0x1, 0x3}, {0x2, 0x2}, {0x5, 0x2}, {0x3}, {0x2, 0xa}, {0x1, 0x9}, {0x5, 0x5}, {0x5, 0x6}, {0x5}, {0x1, 0x4}, {0x7, 0x7}, {0x1, 0xa}, {0x7, 0x2}, {0x3}, {0x1}, {0x1, 0x7}, {0x3, 0x8}, {0x3, 0x8}, {0x6, 0x1}, {0x1, 0x9}, {0x7, 0x8}, {0x2, 0x3}, {0x3, 0x2}, {0x1, 0x5}, {0x0, 0x3}, {0x4, 0x7}, {0x0, 0x5}, {0x0, 0x6}, {0x6, 0x2}, {0x7, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x3, 0x7, 0x4, 0x78, 0x5, 0x1, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0x30, 0x1b, 0x6, 0x2b, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd80, 0x971, 0x9, 0x8, 0xa5, 0x5, 0x0, 0x10]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x6fc08101b61829d9, 0x63, 0x6c, 0x18, 0x9, 0x856f54a8d4af3d2f, 0xb, 0x11, 0x1b, 0x1b, 0x5, 0x2, 0x2e, 0x6c, 0x18, 0x2, 0x9, 0x1b, 0xc, 0x1b, 0x36, 0x12, 0x24, 0x18, 0x5, 0x1, 0x77, 0x60, 0x1, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xc77, 0x7c1, 0x7, 0x40, 0x7, 0x6, 0x9, 0x7fff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xffff, 0x1, 0xb, 0x5, 0x800, 0x5, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x50}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x60, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x6, 0x530d, 0x1, 0x81, 0x90f, 0x69, 0x400]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0xb, 0x16, 0x5, 0x9, 0x16, 0x6, 0x5, 0x60, 0xb, 0x1b, 0x4, 0x18, 0x18, 0x36, 0xb, 0x24, 0x18, 0x12, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x12, 0x2, 0x9, 0x12, 0x6c, 0x3, 0x6c, 0x2, 0x60, 0x3, 0x16, 0x12, 0x12, 0x6c, 0x6c, 0x36, 0x48]}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xec, 0x11d, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x10, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb3}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x2}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfc}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfb}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}]}]}, @NL80211_ATTR_TID_CONFIG={0x74, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xdb}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffe01}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x40}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xeb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xcb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0x518}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFLA_IPTUN_PMTUDISC={0x5}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x48}}, 0x0) 1.758126922s ago: executing program 4 (id=399): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_virt_wifi\x00', 0x10) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000600)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec8c7a63c3e471f000140060404000d0484009bbc7a46e398826f9c00000000000068fec6019500100009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 1.690584196s ago: executing program 1 (id=400): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x5, 0x0, '\x00', [{0x1, 0x4, 0x0, 0x73f3, 0x1}, {0x1, 0xf4c9, 0xc5ca, 0xff, 0x6, 0xa52}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7, 0x1, 0x5, 0x8001}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4000091) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a00)=""/190, 0xbe}, {0x0}], 0x2}}], 0x2, 0x40000121, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="660a00000000000040b9a20346c613acedbfcb475150b6f769107200b71dbbe59500000000000000076801f0c38bb4c44b91a14382b2acfdecb0e0cab0eb4513af916f9f77cdb4799825b7e6ddbdf95148d8b716511b96fa86f6de31f92f73bffedfe0a51285390b1752bbeb8273e4093a7955fcd45e2eb7703517b73999db50fc67dc231d7d8bcc9514997c8644e4fed351c63eec66c6c7805331510e3d1e93e2e97094b896102c649f1c"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="7f000001ac1415bb0000000073410000e0000002ac1414aaac1414bb"], 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x20, &(0x7f0000000080)={&(0x7f0000001040)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8949, &(0x7f0000000040)={'sit0\x00', @local}) 1.612784927s ago: executing program 0 (id=401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000200)=0x8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1.61108579s ago: executing program 3 (id=402): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) (fail_nth: 1) 1.344530986s ago: executing program 4 (id=403): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x7c, &(0x7f0000000800)=@assoc_value, &(0x7f0000000740)=0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0xf) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r3, &(0x7f00000008c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, 0x0, 0x300, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1000c804}, 0x8000005) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/721], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe40, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b686dd", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r8, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00040000000000000000060000000800030001536e51117684aebbaed85d9fffa8d6b4caeb0bf8f55f2e64e84dff645bb88bd4333856bc5473663f1f6466a67f6dc4fa582080b272917974ceca99974044a94a64f27281c19dcb29d1d338478a64e17caf4808b6444b3e78910795eb4836fbf1686f4d2602bd05ab9dd26ea945de31378b53edf185e869c4f506e205efdf2f149ca9e5dbe9ba5e3d83cbc0a7a8b460046f17dc00b7c6c8fe585298531b4e28c58d76177a2fda829637d4c4d1bf2882726f273f0d7a8ca951cc191fa8455bc914a65d1ab0721d6a5b4aba74bd9ccc4cff951c7c26453c92f60a0dc8c0a7b25c010000000000000089954242862d839c461119f27205e2f935467638faf7fbfd3978a1dfc1d4422c6eb838913ce9e5240c47cc6a817b987c9758a19e3069c245514bc9f1c599ce8da86508f50ffc1678cf1c26991ca79fd1dfc8", @ANYRES32=0x0, @ANYBLOB="0c00990007000000310000000800050002000000"], 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=0x0, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800b959b6680000080026006c090000"], 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000005c0)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x9}, @device_a, @device_b, @initial, {0x2}}, 0x8, 0xa, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x16, 0x1}, {0x1}, {0x12}, {0x9, 0x1}, {0x16, 0x1}]}, @val={0x2d, 0x1a, {0x8, 0x1, 0x2, 0x0, {0xf, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x400, 0x8, 0x8}}, [{0xdd, 0xfffffffffffffe97, "ec0f000000f91b8270dba345a6202e2cd9e5f46882db6fd338b0915d165a2ffdbc18f19a47a893feb036fc677c4a22f4be0bdcca8bfe6eabffafd9e6e384d64ea9b934d3e5e92c6d9744046053d378b1953bb2808b421837e1fe4ec1ef22c2524796e1045e22060fa431c830331daec36243c964d495d866c6bf71eef2b018a9ada0593d55"}, {0xdd, 0x1b, "d22cdeae9120c232e3987aa4e5e6c9bacf243c519bc02ba3dc3ce0"}]}, 0xeb) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000000008020900000010000000060000000000000020"], 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000a40)=ANY=[@ANYBLOB="10000000080211000001080211a75971a7700b20e6002000010000000100010782049c605fe8113f4eb939ea090000000000004a7f9ba4b6ab9d27baca95575fd81669f83f2c3dbeacdd66d17cdda2ce188a0e4bee2c3b3e4d9c1f417a76e6ed47b2127fda417d0c88be0e9161314df70d239c3aad4e39d3aca38f03ca3038bd2c92e192aae952d7f23a95d0ef3b2b9fa498ebb838bb88983441d79f7023e73fd5ebcc00000000000000000000000000000000000000000000200000"], 0x27) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) 1.304569079s ago: executing program 3 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x2000000, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_PROTO={0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.27299317s ago: executing program 0 (id=405): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) socket(0x2, 0x1, 0x4ef) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20000854, 0x0, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000580)={0x2, 0x0, @remote}, 0x10) listen(r2, 0x8) r3 = accept4(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000240)=ANY=[], 0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000001d40)={0x0, 0x0, 0x806}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000300)={0x0, 0x4}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x82802, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x19) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) 1.267471004s ago: executing program 1 (id=406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffad, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x0, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x64}}, 0x0) 1.213886405s ago: executing program 2 (id=407): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc8f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0xffffffffffffff3c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x80000001, '\x00', r1}, 0x48) (async) unshare(0x68040200) (async) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x438, 0x0, 0x208, 0x0, 0xf8, 0x508, 0x508, 0x508, 0x508, 0x508, 0x6, 0x0, {[{{@uncond, 0x2ac, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @local, [], [], 'veth0_to_bond\x00', 'ip6tnl0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@mcast1}}}, {{@ipv6={@mcast2, @loopback, [], [], 'ip6gretap0\x00', 'bridge_slave_0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@mcast2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async) connect$l2tp6(r5, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback, 0x7700}, 0x20) (async) r6 = socket$alg(0x26, 0x5, 0x0) socket(0x11, 0x800000003, 0x0) (async) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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", @ANYRES64=r2], 0x60}], 0x1, 0x24048019) (async) sendmsg$unix(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="8cc0013f79467b5665d82d9912c5e55c69915f61e41f2fa9d9f9093740d676c8ce7f7c63648977aa3218d86d63145b8f3aba8efb", 0x34}], 0x1}, 0x0) (async) recvmmsg(r7, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) (async) recvmmsg(r7, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000580)=""/137, 0x89}], 0x1}}], 0x2, 0x0, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@deltclass={0x40, 0x29, 0x8, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff3}, {0x8, 0x4}, {0xfff2, 0xfffc}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x2}, @TCA_QFQ_LMAX={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x5, 0x4, 0x40000011, 0x240, r10, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x400, 0x5}, 0x48) setsockopt$inet6_int(r5, 0x29, 0x21, &(0x7f00000002c0)=0x46, 0x4) getpeername$l2tp6(r5, 0x0, &(0x7f00000000c0)) (async) ioctl$sock_SIOCSIFBR(r4, 0x8941, &(0x7f0000000440)=@get={0x1, &(0x7f0000000380)=""/117, 0x4}) 1.090279922s ago: executing program 1 (id=408): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f00000008c0)='fib6_table_lookup\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000780)="f1", 0x1}], 0x1}, 0x40080c0) 1.089587202s ago: executing program 3 (id=409): r0 = socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="4dcdc7d96a760000000600050000000000060000", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) 969.254003ms ago: executing program 3 (id=410): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a"], 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000400000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000e2ffffffffffffff000000000000000000000000000000000000000000000300000000000000000040"], 0xb8}}, 0x0) 957.65851ms ago: executing program 1 (id=411): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 725.613849ms ago: executing program 3 (id=412): socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) recvmmsg(r0, 0x0, 0x0, 0x40010062, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x18) (async) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x18) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x4) (async) ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000180)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x0, 0x4) (async) r2 = socket$kcm(0x10, 0x0, 0x4) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="e8030000160001000000000000000000fe8000000000000000000000000000aa2001000000000000000000000000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x3e8}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendfile(r2, 0xffffffffffffffff, &(0x7f0000000080)=0x1, 0x81) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x48, 0x30, 0x51b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x48}}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000300)) socket$inet_dccp(0x2, 0x6, 0x0) (async) r6 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) unshare(0x6020400) (async) unshare(0x6020400) socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r7}], 0x46, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f0000000000)=[{r7}], 0x46, 0x0, 0x0, 0x0) socket(0x11, 0x80a, 0x0) 688.550845ms ago: executing program 0 (id=413): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000010000000000000000000000005000600000000000a00000000000000fc02000000000000000000040000000000000000000000000200010000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000100140000000000010015"], 0x80}, 0x1, 0x7}, 0x0) 602.973399ms ago: executing program 3 (id=414): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) unshare(0x6a040000) (rerun: 32) mmap(&(0x7f00008dd000/0x4000)=nil, 0x4000, 0x1, 0x12, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x2f, 0x81, 0x3, 0x2, 0x68, @local, @loopback, 0x7800, 0x7f08, 0x3, 0xd34}}) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x18, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x40, 0x20, 0x6, 0x1, {{0xf, 0x4, 0x2, 0x1f, 0x3c, 0x64, 0x0, 0x4, 0x4, 0x0, @empty, @loopback, {[@lsrr={0x83, 0x27, 0xe4, [@broadcast, @loopback, @multicast2, @loopback, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty]}]}}}}}) (async, rerun: 64) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000005c0), 0x10) (async) recvmmsg(r5, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000004780)=""/12, 0xc}, {0x0}], 0x2}}], 0x1, 0x0, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r5, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "400000008b20aaf0"}, 0x10}}, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x1, 0x700, 0xfffffff9, 0xb, {{0x12, 0x4, 0x3, 0x7, 0x48, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @dev={0xac, 0x14, 0x14, 0x28}, {[@generic={0x7, 0xe, "6e1250f14df2e953175668d1"}, @end, @generic={0x86, 0x5, "e1c52a"}, @timestamp_addr={0x44, 0x4, 0x7, 0x1, 0x9}, @ra={0x94, 0x4}, @rr={0x7, 0x17, 0xcd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @multicast1, @broadcast]}]}}}}}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000400)={@rand_addr, 0x0}, &(0x7f0000000440)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="48010000", @ANYRES16=0x0, @ANYBLOB="00012ebd7000fddbdf251500000014000180080003000200000008000100", @ANYRES32=r2, @ANYBLOB="300001801400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r4, @ANYBLOB="080003000100000058ff0300000000080001000000000000000093230fd05086000000000000e059715c381c8895448152f5a4830bde91aa71b4c2e0f58324f5aaebe117a2cf5f4df856e5f8632931570606864b896e527b49107a6589364252c14edd4cc607", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020067656e65766530000000000000000000080003000300000008000300010000001400020076657468315f746f5f7465616d000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="240001800800030002000000080003000200000008000100", @ANYRES32=r9, @ANYBLOB="080003000200000050000180080003000100000008000100", @ANYRES32=r10, @ANYBLOB="080003000100000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="140002006261746164765f736c6176655f310000080003000200000008000100", @ANYRES32=r13, @ANYBLOB="18000180140002006261746164765f736c6176655f300000"], 0x148}, 0x1, 0x0, 0x0, 0x400c050}, 0x20004030) (async, rerun: 64) socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r14, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @loopback}, {0x2, 0x0, @empty}, 0x236}) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff03c}, {0x6}]}, 0x10) 462.328303ms ago: executing program 0 (id=415): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001300), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001340)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x0) (fail_nth: 2) 461.605692ms ago: executing program 4 (id=416): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @loopback}}, 0xaa, 0x0, 0x43, 0x0, "9e62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000180)={0x18, 0x0, {0x0, @random="d1b4954600", 'vlan1\x00'}}, 0xffffffffffffffa5) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), r4) close(r3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='1-2:5/', @ANYRESDEC], 0xa) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000700)='tasks\x00', 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e1f, @private=0xa010102}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000009c0)={@in6={{0xa, 0x4e24, 0x7, @local, 0x3}}, 0x0, 0x0, 0x4, 0x0, "e91b1dc5727500bb1f86bee48ec8d8126ddc3ecd08e785ac1c2662df00256b8c01f0a6f5a70b899d4161c64eed7a8ff52095bd39c3a708b1649892c15bb15773fa3293578178b3541200"}, 0xd8) r5 = openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x2000c084}, 0x40) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x16) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="58e9e898d01e02714f7e00", @ANYRES16=r8, @ANYBLOB="110000000000000000002500000008000300", @ANYRES32=r9, @ANYBLOB="0a00340002020202020200000500080000000000080035000000000008003700020000000a000600080211000001000004000b000800260000000000"], 0x58}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r12, @ANYBLOB="0a000610000000000000000030005080110001004abee339084eeef16f162471f4000000050009000100000005000200000000000800030005ac0f"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r6, &(0x7f0000000380)={&(0x7f00000005c0), 0xc, &(0x7f0000000780)={&(0x7f00000008c0)=ANY=[@ANYRESOCT=r8, @ANYRES16=r8, @ANYBLOB="537d206aaf62f98c39e76f74ae6c9715398b4cae5edeb30e56eecc4061f2ae04b0805a48ef0776a8b7004c31c7ad88ddb9383128e6db0938999708809fc246cb49da3bf0681891a6b925f5477c6da283b3cc152ce12213f7202e7bb6561885e0ac0008", @ANYRESDEC, @ANYBLOB="0c009900ff0700004700000006009500070000000600950008000000060095000500000006009500c20000000600950003000000060095000100000006009500070000000600950005000000"], 0x68}}, 0x2001c801) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_BSS(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000740)=ANY=[@ANYRESOCT, @ANYRES16=r7, @ANYRESDEC=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x804) 68.121253ms ago: executing program 2 (id=417): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000180)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb50600b458fd35039c7d81e9ab07f2fb4dad4dace0f5319b54c74a12e4569e47b69ad0fde963e84da549", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000700)="e2", 0x1}], 0x1}}], 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000000d00)=[{{&(0x7f0000000340)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000004c0)="53fb7ce9bca5b4c6c82fb997acc6b0361e5c15be43144f1d9cb2f738c0dcd881c2bd734b3a0d325847ea3aa2d8ef64bfd77363d3ee", 0x35}, {&(0x7f0000000640)="1bd811741a607159fda051b57d4c01e9986c2e65426807ac72604e001af6eba2fedb368d816a109958c47842f8f56a1c6fe296617bede164ba1802cd81f0d41cc77aadb91f6de5a0d05e3edd3b260afc80732ab70609c96107211530a57108325d22154b5a20a367309333edfcb7f835cae30f79c907071410", 0x79}, {&(0x7f0000000580)="5de3b88de49e7b7cfec66d713c7a722698e1e8e8c77c37434d96d6f3b2f33ec2a47ba0ce18c4c391142b75b191f13f5fd350b22e27369d79c8dcc5a6b74df2f0fbfe676e05df80acc754928b4e1cd39112", 0x51}, {&(0x7f0000001e40)="a4c237fe1e955e0b4d62d671e290ed757b3bd16bc22c8d5f7382616cf3d8285ced401cd0b6eafd0067ae8231b3946c49935d657c5b6cd0cdd3b2a16361798d72b0dfdf40a0f52f35edfbd2c71b98556bb7f278d91a81969882139ddfd9e2545f1ac87cbf596ba24df1652d6a7b66d7f60bfce17090e35aec34c994d838f15cd3f25a5f06cbe86ca048c8b55e7386eeeeb3caa85ae9d8020f7e3aeca070bb35737728ef0cf9027ee56784c9cbd7c69bd73179aa323b9ebde9619f97ccb01ab6993194625b137f83400dae9ef708e298afcad6d9c2e4631fe3347c5b09e57eedf757081a963ea1ffa481dded5d96ea0d1914db375a44169fc7483091391a7c5f9e69d01b68a09f9048efe9989c1907e71bb447dc7f2d217bf3222273f03f4c5c525021ee1b9818368f7e3a769c083bb6240d16861f3023dc0226844678e2abb6ca0cca77b0093256f917679d1de293fb3748d7e0fbeda37d67618a61dd00ed66315724bf9dbf458604c1234c40f694444f52d0d5f947290e94ca48d21254bec4e3d21a45d09d945ed73a9baf23a805ee75ea0240be8a3a243153b2cd8f70cbeec4cadbedf130a58294eba1a183bac2a3a5a84c48b8d7578f243a5e9c5cb5ca07fe9dc9f91a71c8612d809986d3ab370b2760cc31e4854bc09e840ad324cbffabc059498923428ad1c1771074d445638bfa77816bbb9a36271fb333b3e6767d476afdcd691cf8c0929e8eb6a1ceb48ca3f77f52b8e3e4d7e3dedfc5dd4a8f57ca8c965516f444f0b2901e97d304e27fac2fa3025016513591ff6c44e12deafb2cb12375858cffb0cfa456b90f9595b53dc9eb3c16aafc1252d87464dbb7c5724da0fa80d6ff914cafcbca37fb446eee62e16c288f82ca4ca4fa8722903f181ef132906ea08be4442a75434d7a86a6c00757413897a13c6d613289dcfe119d36789e55ca42e0b3ba70122c257ae927c636a6b743b40772c73e04a788817a650f21bd6d250ca22479a5818968c917c38cc113fb7e398afeccb595f71571bec5080bfd82c0d3fdccf1eb0866396946aabaee5f8b01a473fc459a4ffc63b1e5907ad70322678e65be181c8ea37dfe8aac125478e4a8ffa4bab6a9f43e258251e86b26d58ce2adcb626718f08d7dbde52d270794626f17fb5763d4e70d79a1b983d0760338be998fb750d913dc59a17717f715408d5bcfcaa29f7818d5e8f22a11f453a79a06a4b7498d5a42c20c00f4bfad8d02e8d6ff03200d3fd1ed3d283a91ca41b2035b44289a00db2335fdbf997bce43fe48168ed1aec14651f98ac65c325d8a1422b8e8a0d39367799927fae1a4996dc07636c630843122d19c8e037bd68ef78eca76e1734df9ccff27f4c8770faa5e738e431f53cc330e70ca5c7a1dd68770942e404ed71e5ca3f031a7391ac4b37df600c27f5e38f1223ebb34c9d912997eb83a79f3d4187fd985f09de66ba7331f7f4f6b2065bc4d3d56ed3fd9b355b411f241ddc2716c1be32a8dc4f92e89f39287a1bdc6321622069cfa61a189e5d9e860deec935a8528254bf8814ee61c0fcaee85a47a33c5de708d468f3f18f45e62120df777c78a353e06ce76b7a7b7b4ebd3fa53e9888e2d6c39079f57904c89392457feca44f4d39d5d69c1420bba3dfae5b55471955e2c004767172ba994a8806773cda28d827e659d0a091f5b12702776503862e5b3256bdbdd74dec053f23968414c35577c33fdec0997d37169387063b659f9abc0f1f35322b834e19600dceee22fce0397f6a851bd44e320dddedfb1ccc6e28b45808e2dcc2fb9d6513c52d3c043a33219a8034f64361df09f483f35fcef81659c5783810e71184b7ac9f08da45b0d45df61cfc7beb6579c4017c70c707b68c13d21b1db3fff83bf3694f1144875bb9324022b6dd664a84c43d3387462825f909f207821aea967df61f412ed561309384ce16c130a451aeb2a49d747bb0d9c327e34297c2c51c8a012dd8a78b5a71e4bf0a71df9b7c58584b7531d9c946efa22a7c8bbaad70a7bc5db304132a34ee328e6383fdca1098e42a1a9e80ec24297452cfa963a86fd34304f6517c17cf4efac730e682ee7de699e6de1f4223e41505664bb05eb2a31d2653babeb73bffb8293ac9c152951e251afafdafe240571007dc5de47a2dc83a1157e68f2016ab466b51eacf92754c7115e6fbffcc809867328643b79a0de67b1f47f96d70aacdd63ce5f6857ab75d7e927f6d83d7fd0c3afda78edd2992439d32d24b1abf64dbf53861de111e282781a4772b48bf1d7c7d4f3844741e6a19f3dbae5c28c73ed5557780f79a669bf95140f12817362587678c58689385a52e4f9709f3b3b19257e7e094e615eb641257f5293a5642c357cda356ef643185a594e6b5ea0b4fc8828c97f4bcc14b32c25f097d4a51ec6d71e81a90656c5856ce02183a104bcf6053a0a217a6a0165b13da4ebe53b391214667d7ed9df486fce3f6eb527a7054b210985452902196eac6c3d8ca23690a0c73090e0c0ace47d407c8ce557304172f1a7fe82fc2b7c52acfbdeb385a5de4339cd9a1adb8a87d69c33886550a8273e153fdef05c61288238b1d91b2ceffa8e63a58823c052bb7963a9b87f28d2c720ae9fc746d1203f8fde075ab10c036377bc2f4a9806ab0fde123b4e6b83c4874b347bf9ed9b8896a51dbf90dd0325f888626ebbf3cf93fab4dad7e18fd8030e18bd66bc57275650f711a9803a886748ac948d3fbc2a003d9db6c5e4b6e785baaca1f10fff3899631a7c02a5923e9714167ee8b869a0c3eec35d9404518ce79375dae056ce8a736ad0cb87cc4ccd784b7704a16d8856a3e72db67addb7c96fb3efb933b16e25f7d9ff3553c42509454399ba1b2b2d0ee4adf079273218bde46834", 0x800}], 0x4, &(0x7f0000000a40)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @mark={{0x14, 0x1, 0x24, 0xd}}], 0x60}}], 0x1, 0x20000800) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x23, 0x0, "093f38050b94725997f7ff898a3f9ab16a8731bf2ce9e46bca4cef5a7c35015b7a97f697e89d86377518bf274943a186c89a051c531b5ad251ff1e26b7fe42b3eb4ddd4dc049ad87c56cd0c3628976cc"}, 0xd8) sendto$inet(r1, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000006800e9780000000000000054ac1c07000000040004000c"], 0x28}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000001dc0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000000c0)=0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x20, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) 0s ago: executing program 4 (id=418): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0xc0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @null}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) connect$netrom(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.17' (ED25519) to the list of known hosts. [ 52.861860][ T5214] cgroup: Unknown subsys name 'net' [ 53.092320][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.496820][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.055709][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.067263][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.076636][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.084473][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.093252][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.100937][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.108237][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.116125][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.116788][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.123785][ T5235] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.132469][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.139320][ T5235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.144657][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.153268][ T5235] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.158525][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.166299][ T5235] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.227611][ T5235] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.249468][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.255520][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.264637][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.273001][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.273326][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.287877][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.288347][ T5230] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.306190][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.313597][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.321849][ T5235] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.330356][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.338766][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.348077][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.721871][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 58.784808][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 58.908731][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 59.004305][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.012071][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.020218][ T5225] bridge_slave_0: entered allmulticast mode [ 59.027280][ T5225] bridge_slave_0: entered promiscuous mode [ 59.077559][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 59.089201][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.096435][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.103659][ T5225] bridge_slave_1: entered allmulticast mode [ 59.111181][ T5225] bridge_slave_1: entered promiscuous mode [ 59.118506][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.126113][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.133254][ T5224] bridge_slave_0: entered allmulticast mode [ 59.140142][ T5224] bridge_slave_0: entered promiscuous mode [ 59.172250][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.179649][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.186867][ T5224] bridge_slave_1: entered allmulticast mode [ 59.193613][ T5224] bridge_slave_1: entered promiscuous mode [ 59.278631][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.297110][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.304306][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.311592][ T5233] bridge_slave_0: entered allmulticast mode [ 59.318990][ T5233] bridge_slave_0: entered promiscuous mode [ 59.326381][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.333475][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.340922][ T5233] bridge_slave_1: entered allmulticast mode [ 59.347721][ T5233] bridge_slave_1: entered promiscuous mode [ 59.355393][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 59.380435][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.391904][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.425952][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.447251][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.480079][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.556663][ T5225] team0: Port device team_slave_0 added [ 59.567461][ T5233] team0: Port device team_slave_0 added [ 59.577706][ T5224] team0: Port device team_slave_0 added [ 59.597093][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.604269][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.611706][ T5239] bridge_slave_0: entered allmulticast mode [ 59.618812][ T5239] bridge_slave_0: entered promiscuous mode [ 59.629827][ T5225] team0: Port device team_slave_1 added [ 59.637876][ T5233] team0: Port device team_slave_1 added [ 59.645889][ T5224] team0: Port device team_slave_1 added [ 59.680055][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.687286][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.698372][ T5239] bridge_slave_1: entered allmulticast mode [ 59.705612][ T5239] bridge_slave_1: entered promiscuous mode [ 59.744764][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.751714][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.778095][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.829462][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.839760][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.866527][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.888309][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.895869][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.903013][ T5237] bridge_slave_0: entered allmulticast mode [ 59.910771][ T5237] bridge_slave_0: entered promiscuous mode [ 59.928549][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.937677][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.964056][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.975914][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.982880][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.009757][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.028433][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.035702][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.042849][ T5237] bridge_slave_1: entered allmulticast mode [ 60.050492][ T5237] bridge_slave_1: entered promiscuous mode [ 60.059363][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.073147][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.082960][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.090331][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.116265][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.128298][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.135666][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.162190][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.265400][ T5232] Bluetooth: hci2: command tx timeout [ 60.270680][ T5228] Bluetooth: hci1: command tx timeout [ 60.291012][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.303165][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.314311][ T5239] team0: Port device team_slave_0 added [ 60.345984][ T5224] hsr_slave_0: entered promiscuous mode [ 60.354298][ T5224] hsr_slave_1: entered promiscuous mode [ 60.366435][ T5225] hsr_slave_0: entered promiscuous mode [ 60.372927][ T5225] hsr_slave_1: entered promiscuous mode [ 60.379353][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.387405][ T5225] Cannot create hsr debugfs directory [ 60.407621][ T5239] team0: Port device team_slave_1 added [ 60.414628][ T5228] Bluetooth: hci4: command tx timeout [ 60.418869][ T5232] Bluetooth: hci0: command tx timeout [ 60.420173][ T5238] Bluetooth: hci3: command tx timeout [ 60.450965][ T5237] team0: Port device team_slave_0 added [ 60.461034][ T5233] hsr_slave_0: entered promiscuous mode [ 60.467932][ T5233] hsr_slave_1: entered promiscuous mode [ 60.474203][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.482756][ T5233] Cannot create hsr debugfs directory [ 60.520764][ T5237] team0: Port device team_slave_1 added [ 60.577999][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.585040][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.611020][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.654246][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.661711][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.688061][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.704209][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.711687][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.738729][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.810796][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.818036][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.843990][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.886502][ T5239] hsr_slave_0: entered promiscuous mode [ 60.893008][ T5239] hsr_slave_1: entered promiscuous mode [ 60.899209][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.906848][ T5239] Cannot create hsr debugfs directory [ 60.995474][ T5237] hsr_slave_0: entered promiscuous mode [ 61.001666][ T5237] hsr_slave_1: entered promiscuous mode [ 61.008312][ T5237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.015998][ T5237] Cannot create hsr debugfs directory [ 61.285211][ T5225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.297116][ T5225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.324921][ T5225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.335673][ T5225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.408736][ T5233] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.438225][ T5233] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.447906][ T5233] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.469253][ T5233] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.522964][ T5239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.534006][ T5239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.556397][ T5239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.586133][ T5239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.673193][ T5224] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.709636][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.726373][ T5224] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.739280][ T5224] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.750099][ T5224] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.806225][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.849646][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.856978][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.868227][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.875505][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.890248][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.900306][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.911476][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.928743][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.946528][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.011274][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.076198][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.083311][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.115170][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.122260][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.232422][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.335294][ T5238] Bluetooth: hci1: command tx timeout [ 62.340776][ T5228] Bluetooth: hci2: command tx timeout [ 62.342834][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.390062][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.422684][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.429923][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.449379][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.456622][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.495282][ T5238] Bluetooth: hci3: command tx timeout [ 62.500740][ T5228] Bluetooth: hci4: command tx timeout [ 62.500749][ T5232] Bluetooth: hci0: command tx timeout [ 62.506236][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.531721][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.550253][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.557460][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.571264][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.578376][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.633400][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.650293][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.664089][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.709116][ T5277] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.716325][ T5277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.739080][ T5277] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.746294][ T5277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.988711][ T5225] veth0_vlan: entered promiscuous mode [ 63.078003][ T5225] veth1_vlan: entered promiscuous mode [ 63.304039][ T5225] veth0_macvtap: entered promiscuous mode [ 63.317978][ T5233] veth0_vlan: entered promiscuous mode [ 63.337084][ T5225] veth1_macvtap: entered promiscuous mode [ 63.362647][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.382389][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.402220][ T5233] veth1_vlan: entered promiscuous mode [ 63.413113][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.431996][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.477887][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.490536][ T5225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.500253][ T5225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.509767][ T5225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.518849][ T5225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.631893][ T5237] veth0_vlan: entered promiscuous mode [ 63.673728][ T5233] veth0_macvtap: entered promiscuous mode [ 63.690296][ T5237] veth1_vlan: entered promiscuous mode [ 63.705993][ T5224] veth0_vlan: entered promiscuous mode [ 63.728987][ T5233] veth1_macvtap: entered promiscuous mode [ 63.760168][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.778806][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.808559][ T5224] veth1_vlan: entered promiscuous mode [ 63.819606][ T5239] veth0_vlan: entered promiscuous mode [ 63.850598][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.860103][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.869557][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.883124][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.894207][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.903188][ T5239] veth1_vlan: entered promiscuous mode [ 63.940618][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.958820][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.970946][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.982463][ T5233] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.991939][ T5233] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.002165][ T5233] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.010988][ T5233] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.049550][ T5224] veth0_macvtap: entered promiscuous mode [ 64.086574][ T5237] veth0_macvtap: entered promiscuous mode [ 64.118797][ T5224] veth1_macvtap: entered promiscuous mode [ 64.135142][ T5237] veth1_macvtap: entered promiscuous mode [ 64.166852][ T5239] veth0_macvtap: entered promiscuous mode [ 64.220515][ T5239] veth1_macvtap: entered promiscuous mode [ 64.239075][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.251146][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.262848][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.274528][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.287250][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.319652][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.331153][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.343306][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.357981][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.368262][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.380460][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.396361][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.414985][ T5238] Bluetooth: hci2: command tx timeout [ 64.420485][ T5228] Bluetooth: hci1: command tx timeout [ 64.454026][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.470538][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.476548][ T5312] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.484854][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.508889][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.521547][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.563022][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.576648][ T5238] Bluetooth: hci3: command tx timeout [ 64.582154][ T5228] Bluetooth: hci4: command tx timeout [ 64.587638][ T5238] Bluetooth: hci0: command tx timeout [ 64.602679][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.612976][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.623981][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.634246][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.642918][ T5318] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7'. [ 64.645407][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.665757][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.676332][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.690062][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.698595][ T5224] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.710592][ T5224] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.719793][ T5224] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.729316][ T5224] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.740673][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.752042][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.762256][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.772924][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.784398][ T5237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.795690][ T5237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.807256][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.827924][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.839671][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.849677][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.860149][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.870281][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.880893][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.892124][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.903368][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.915571][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.929794][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.939969][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.950329][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.959723][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.968605][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.977465][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.993974][ T5239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.003393][ T5239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.012209][ T5239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.021893][ T5239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.170811][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.184984][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.264901][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.285780][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.409417][ T2576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.440723][ T2576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.446376][ T5327] syz.3.9 uses obsolete (PF_INET,SOCK_PACKET) [ 65.520733][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.530084][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.582868][ T2576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.603438][ T2576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.677780][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.694580][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.735582][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.743452][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.279092][ T5349] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.502722][ T5238] Bluetooth: hci1: command tx timeout [ 66.502744][ T5228] Bluetooth: hci2: command tx timeout [ 66.655731][ T5238] Bluetooth: hci4: command tx timeout [ 66.661224][ T5238] Bluetooth: hci3: command tx timeout [ 66.664453][ T5228] Bluetooth: hci0: command tx timeout [ 67.526982][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 67.798334][ T5403] FAULT_INJECTION: forcing a failure. [ 67.798334][ T5403] name failslab, interval 1, probability 0, space 0, times 1 [ 67.819681][ T5403] CPU: 0 UID: 0 PID: 5403 Comm: syz.2.30 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 67.830251][ T5403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 67.840334][ T5403] Call Trace: [ 67.843637][ T5403] [ 67.846595][ T5403] dump_stack_lvl+0x241/0x360 [ 67.851331][ T5403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.856564][ T5403] ? __pfx__printk+0x10/0x10 [ 67.861183][ T5403] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 67.867187][ T5403] ? __pfx___might_resched+0x10/0x10 [ 67.872499][ T5403] ? __lock_acquire+0x137a/0x2040 [ 67.877556][ T5403] should_fail_ex+0x3b0/0x4e0 [ 67.882355][ T5403] should_failslab+0xac/0x100 [ 67.887058][ T5403] ? __alloc_skb+0x1c3/0x440 [ 67.891674][ T5403] kmem_cache_alloc_node_noprof+0x71/0x320 [ 67.897505][ T5403] __alloc_skb+0x1c3/0x440 [ 67.901944][ T5403] ? irqentry_exit+0x63/0x90 [ 67.906559][ T5403] ? lockdep_hardirqs_on+0x99/0x150 [ 67.911786][ T5403] ? __pfx___alloc_skb+0x10/0x10 [ 67.916756][ T5403] ? tipc_msg_build+0x12b/0x1070 [ 67.921727][ T5403] tipc_buf_acquire+0x2b/0xe0 [ 67.926437][ T5403] tipc_msg_build+0x693/0x1070 [ 67.931235][ T5403] ? net_generic+0x1f/0x240 [ 67.935758][ T5403] ? __pfx_tipc_msg_build+0x10/0x10 [ 67.940961][ T5403] ? tipc_group_bc_cong+0x1d0/0x290 [ 67.946186][ T5403] tipc_send_group_bcast+0x889/0xbd0 [ 67.951488][ T5403] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 67.957341][ T5403] ? __pfx_woken_wake_function+0x10/0x10 [ 67.962975][ T5403] ? __pfx_hlock_conflict+0x10/0x10 [ 67.968169][ T5403] ? deref_stack_reg+0x1c7/0x260 [ 67.973110][ T5403] __tipc_sendmsg+0x363/0x35f0 [ 67.977880][ T5403] ? check_path+0x21/0x40 [ 67.982202][ T5403] ? check_noncircular+0x259/0x4a0 [ 67.987313][ T5403] ? __pfx___tipc_sendmsg+0x10/0x10 [ 67.992504][ T5403] ? lockdep_unlock+0x16a/0x300 [ 67.997349][ T5403] ? unwind_get_return_address+0x91/0xc0 [ 68.002974][ T5403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.009037][ T5403] ? __pfx_validate_chain+0x10/0x10 [ 68.014221][ T5403] ? aa_label_sk_perm+0x4f0/0x6d0 [ 68.019237][ T5403] ? mark_lock+0x9a/0x350 [ 68.023564][ T5403] ? __lock_acquire+0x137a/0x2040 [ 68.028600][ T5403] ? mark_lock+0x9a/0x350 [ 68.032931][ T5403] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 68.038908][ T5403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.045234][ T5403] ? __local_bh_enable_ip+0x168/0x200 [ 68.050598][ T5403] ? tipc_sendmsg+0x47/0x70 [ 68.055100][ T5403] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 68.060816][ T5403] ? do_raw_spin_unlock+0x13c/0x8b0 [ 68.066017][ T5403] ? __pfx_tipc_sendmsg+0x10/0x10 [ 68.071034][ T5403] tipc_sendmsg+0x55/0x70 [ 68.075361][ T5403] __sock_sendmsg+0x221/0x270 [ 68.080041][ T5403] ____sys_sendmsg+0x525/0x7d0 [ 68.084802][ T5403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.090088][ T5403] __sys_sendmmsg+0x3b2/0x740 [ 68.094761][ T5403] ? __pfx___sys_sendmmsg+0x10/0x10 [ 68.099975][ T5403] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 68.105865][ T5403] ? ksys_write+0x23e/0x2c0 [ 68.110361][ T5403] ? __pfx_lock_release+0x10/0x10 [ 68.115384][ T5403] ? vfs_write+0x7c4/0xc90 [ 68.119794][ T5403] ? __mutex_unlock_slowpath+0x21d/0x750 [ 68.125425][ T5403] ? __pfx_vfs_write+0x10/0x10 [ 68.130198][ T5403] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 68.136174][ T5403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.142495][ T5403] ? do_syscall_64+0x100/0x230 [ 68.147256][ T5403] __x64_sys_sendmmsg+0xa0/0xb0 [ 68.152100][ T5403] do_syscall_64+0xf3/0x230 [ 68.156605][ T5403] ? clear_bhb_loop+0x35/0x90 [ 68.161280][ T5403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.167183][ T5403] RIP: 0033:0x7fca205779f9 [ 68.171594][ T5403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.191390][ T5403] RSP: 002b:00007fca212b3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 68.199811][ T5403] RAX: ffffffffffffffda RBX: 00007fca20705f80 RCX: 00007fca205779f9 [ 68.207788][ T5403] RDX: 0400000000000181 RSI: 00000000200030c0 RDI: 0000000000000003 [ 68.215750][ T5403] RBP: 00007fca212b30a0 R08: 0000000000000000 R09: 0000000000000000 [ 68.223710][ T5403] R10: 9200000000000d50 R11: 0000000000000246 R12: 0000000000000001 [ 68.231670][ T5403] R13: 000000000000000b R14: 00007fca20705f80 R15: 00007ffcee284cf8 [ 68.239646][ T5403] [ 68.363242][ T5410] netlink: 12 bytes leftover after parsing attributes in process `syz.3.33'. [ 68.622024][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.2.37'. [ 68.672780][ T5416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 69.047452][ T5437] netlink: 47 bytes leftover after parsing attributes in process `syz.4.45'. [ 69.178430][ T5445] FAULT_INJECTION: forcing a failure. [ 69.178430][ T5445] name failslab, interval 1, probability 0, space 0, times 0 [ 69.239174][ T5445] CPU: 0 UID: 0 PID: 5445 Comm: syz.2.48 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 69.243019][ T5447] netlink: 32 bytes leftover after parsing attributes in process `syz.4.49'. [ 69.249714][ T5445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 69.249729][ T5445] Call Trace: [ 69.249737][ T5445] [ 69.249745][ T5445] dump_stack_lvl+0x241/0x360 [ 69.249776][ T5445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.249798][ T5445] ? __pfx__printk+0x10/0x10 [ 69.289207][ T5445] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 69.295202][ T5445] ? __pfx___might_resched+0x10/0x10 [ 69.300507][ T5445] should_fail_ex+0x3b0/0x4e0 [ 69.305282][ T5445] should_failslab+0xac/0x100 [ 69.309958][ T5445] ? __alloc_skb+0x1c3/0x440 [ 69.314549][ T5445] kmem_cache_alloc_node_noprof+0x71/0x320 [ 69.320349][ T5445] __alloc_skb+0x1c3/0x440 [ 69.324763][ T5445] ? __pfx___alloc_skb+0x10/0x10 [ 69.329699][ T5445] alloc_skb_with_frags+0xc3/0x770 [ 69.334816][ T5445] sock_alloc_send_pskb+0x91a/0xa60 [ 69.340021][ T5445] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 69.345742][ T5445] __ip_append_data+0x2c55/0x40b0 [ 69.350769][ T5445] ? lockdep_hardirqs_on+0x99/0x150 [ 69.355961][ T5445] ? __local_bh_enable_ip+0x168/0x200 [ 69.361328][ T5445] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 69.366873][ T5445] ? __pfx___ip_append_data+0x10/0x10 [ 69.372236][ T5445] ? ipv4_mtu+0x2bc/0x3d0 [ 69.376563][ T5445] ? ip_setup_cork+0x4ae/0x8b0 [ 69.381319][ T5445] ip_make_skb+0x198/0x420 [ 69.385731][ T5445] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 69.391270][ T5445] ? __pfx_ip_make_skb+0x10/0x10 [ 69.396249][ T5445] udp_sendmsg+0x1bef/0x2a60 [ 69.400851][ T5445] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 69.406392][ T5445] ? __pfx_udp_sendmsg+0x10/0x10 [ 69.411324][ T5445] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.417648][ T5445] ? __local_bh_enable_ip+0x168/0x200 [ 69.423018][ T5445] ? inet_sendmsg+0x16b/0x390 [ 69.427682][ T5445] ? do_raw_spin_unlock+0x13c/0x8b0 [ 69.432876][ T5445] ? inet_sendmsg+0x2ba/0x390 [ 69.437549][ T5445] __sock_sendmsg+0x1a6/0x270 [ 69.442221][ T5445] ____sys_sendmsg+0x525/0x7d0 [ 69.446984][ T5445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.452269][ T5445] __sys_sendmmsg+0x3b2/0x740 [ 69.456946][ T5445] ? __pfx___sys_sendmmsg+0x10/0x10 [ 69.462161][ T5445] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 69.468051][ T5445] ? ksys_write+0x23e/0x2c0 [ 69.472544][ T5445] ? __pfx_lock_release+0x10/0x10 [ 69.477564][ T5445] ? vfs_write+0x7c4/0xc90 [ 69.481975][ T5445] ? __mutex_unlock_slowpath+0x21d/0x750 [ 69.487600][ T5445] ? __pfx_vfs_write+0x10/0x10 [ 69.492374][ T5445] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 69.498358][ T5445] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.504689][ T5445] ? do_syscall_64+0x100/0x230 [ 69.509460][ T5445] __x64_sys_sendmmsg+0xa0/0xb0 [ 69.514305][ T5445] do_syscall_64+0xf3/0x230 [ 69.518805][ T5445] ? clear_bhb_loop+0x35/0x90 [ 69.523470][ T5445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.529359][ T5445] RIP: 0033:0x7fca205779f9 [ 69.533765][ T5445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.553364][ T5445] RSP: 002b:00007fca212b3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 69.561777][ T5445] RAX: ffffffffffffffda RBX: 00007fca20705f80 RCX: 00007fca205779f9 [ 69.569739][ T5445] RDX: 0000000000000001 RSI: 0000000020000e00 RDI: 0000000000000003 [ 69.577707][ T5445] RBP: 00007fca212b30a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.585667][ T5445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.593630][ T5445] R13: 000000000000000b R14: 00007fca20705f80 R15: 00007ffcee284cf8 [ 69.601619][ T5445] [ 69.826542][ T5458] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 70.599030][ T5497] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 70.640738][ T5499] FAULT_INJECTION: forcing a failure. [ 70.640738][ T5499] name failslab, interval 1, probability 0, space 0, times 0 [ 70.674678][ T5499] CPU: 0 UID: 0 PID: 5499 Comm: syz.4.70 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 70.685235][ T5499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 70.695316][ T5499] Call Trace: [ 70.698604][ T5499] [ 70.701537][ T5499] dump_stack_lvl+0x241/0x360 [ 70.706223][ T5499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.711450][ T5499] ? __pfx__printk+0x10/0x10 [ 70.716078][ T5499] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 70.722108][ T5499] ? __pfx___might_resched+0x10/0x10 [ 70.727436][ T5499] should_fail_ex+0x3b0/0x4e0 [ 70.732164][ T5499] should_failslab+0xac/0x100 [ 70.736870][ T5499] ? __alloc_skb+0x1c3/0x440 [ 70.741488][ T5499] kmem_cache_alloc_node_noprof+0x71/0x320 [ 70.743687][ T5501] FAULT_INJECTION: forcing a failure. [ 70.743687][ T5501] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 70.747298][ T5499] __alloc_skb+0x1c3/0x440 [ 70.747351][ T5499] ? __pfx___alloc_skb+0x10/0x10 [ 70.747375][ T5499] ? __virt_addr_valid+0x183/0x530 [ 70.774956][ T5499] ? __virt_addr_valid+0x183/0x530 [ 70.780081][ T5499] tipc_buf_acquire+0x2b/0xe0 [ 70.784780][ T5499] tipc_msg_build+0x8dd/0x1070 [ 70.789579][ T5499] ? __pfx_tipc_msg_build+0x10/0x10 [ 70.794790][ T5499] ? tipc_group_bc_cong+0x1d0/0x290 [ 70.800025][ T5499] tipc_send_group_bcast+0x889/0xbd0 [ 70.805339][ T5499] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 70.811167][ T5499] ? __pfx_woken_wake_function+0x10/0x10 [ 70.816807][ T5499] ? process_measurement+0x793/0x1fb0 [ 70.822200][ T5499] __tipc_sendmsg+0x363/0x35f0 [ 70.826986][ T5499] ? __lock_acquire+0x137a/0x2040 [ 70.832044][ T5499] ? __pfx___tipc_sendmsg+0x10/0x10 [ 70.837259][ T5499] ? mark_lock+0x9a/0x350 [ 70.841609][ T5499] ? __lock_acquire+0x137a/0x2040 [ 70.846642][ T5499] ? __pfx_validate_chain+0x10/0x10 [ 70.851844][ T5499] ? aa_label_sk_perm+0x4f0/0x6d0 [ 70.856876][ T5499] ? mark_lock+0x9a/0x350 [ 70.861217][ T5499] ? __lock_acquire+0x137a/0x2040 [ 70.866273][ T5499] ? mark_lock+0x9a/0x350 [ 70.870622][ T5499] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.876617][ T5499] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.883056][ T5499] ? __local_bh_enable_ip+0x168/0x200 [ 70.888442][ T5499] ? tipc_sendmsg+0x47/0x70 [ 70.892962][ T5499] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 70.898691][ T5499] ? do_raw_spin_unlock+0x13c/0x8b0 [ 70.903900][ T5499] ? __pfx_tipc_sendmsg+0x10/0x10 [ 70.908935][ T5499] tipc_sendmsg+0x55/0x70 [ 70.913292][ T5499] __sock_sendmsg+0x221/0x270 [ 70.917989][ T5499] ____sys_sendmsg+0x525/0x7d0 [ 70.922766][ T5499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.928078][ T5499] __sys_sendmmsg+0x3b2/0x740 [ 70.932783][ T5499] ? __pfx___sys_sendmmsg+0x10/0x10 [ 70.938035][ T5499] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 70.943957][ T5499] ? ksys_write+0x23e/0x2c0 [ 70.948483][ T5499] ? __pfx_lock_release+0x10/0x10 [ 70.953536][ T5499] ? vfs_write+0x7c4/0xc90 [ 70.957978][ T5499] ? __mutex_unlock_slowpath+0x21d/0x750 [ 70.963639][ T5499] ? __pfx_vfs_write+0x10/0x10 [ 70.968449][ T5499] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 70.974454][ T5499] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.980800][ T5499] ? do_syscall_64+0x100/0x230 [ 70.985595][ T5499] __x64_sys_sendmmsg+0xa0/0xb0 [ 70.990472][ T5499] do_syscall_64+0xf3/0x230 [ 70.994993][ T5499] ? clear_bhb_loop+0x35/0x90 [ 70.999690][ T5499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.005606][ T5499] RIP: 0033:0x7fa8907779f9 [ 71.010036][ T5499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.029662][ T5499] RSP: 002b:00007fa891501048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 71.038107][ T5499] RAX: ffffffffffffffda RBX: 00007fa890905f80 RCX: 00007fa8907779f9 [ 71.046106][ T5499] RDX: 0400000000000181 RSI: 00000000200030c0 RDI: 0000000000000003 [ 71.054099][ T5499] RBP: 00007fa8915010a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.062089][ T5499] R10: 9200000000000d50 R11: 0000000000000246 R12: 0000000000000001 [ 71.070152][ T5499] R13: 000000000000000b R14: 00007fa890905f80 R15: 00007ffc135afad8 [ 71.078153][ T5499] [ 71.082373][ T5501] CPU: 1 UID: 0 PID: 5501 Comm: syz.2.71 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 71.092996][ T5501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 71.103062][ T5501] Call Trace: [ 71.106341][ T5501] [ 71.109284][ T5501] dump_stack_lvl+0x241/0x360 [ 71.113965][ T5501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.119155][ T5501] ? __pfx__printk+0x10/0x10 [ 71.123737][ T5501] ? __pfx_lock_release+0x10/0x10 [ 71.128761][ T5501] should_fail_ex+0x3b0/0x4e0 [ 71.133443][ T5501] _copy_from_iter+0x1f6/0x1960 [ 71.138295][ T5501] ? __virt_addr_valid+0x183/0x530 [ 71.143404][ T5501] ? __pfx_lock_release+0x10/0x10 [ 71.148430][ T5501] ? __pfx__copy_from_iter+0x10/0x10 [ 71.153709][ T5501] ? __virt_addr_valid+0x183/0x530 [ 71.158809][ T5501] ? __virt_addr_valid+0x183/0x530 [ 71.163908][ T5501] ? __virt_addr_valid+0x45f/0x530 [ 71.169015][ T5501] ? __check_object_size+0x49c/0x900 [ 71.174295][ T5501] kernfs_fop_write_iter+0x1aa/0x500 [ 71.179593][ T5501] vfs_write+0xa72/0xc90 [ 71.183834][ T5501] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 71.189636][ T5501] ? __pfx_vfs_write+0x10/0x10 [ 71.194430][ T5501] ksys_write+0x1a0/0x2c0 [ 71.198767][ T5501] ? __pfx_ksys_write+0x10/0x10 [ 71.203609][ T5501] ? do_syscall_64+0x100/0x230 [ 71.208368][ T5501] ? do_syscall_64+0xb6/0x230 [ 71.213040][ T5501] do_syscall_64+0xf3/0x230 [ 71.217542][ T5501] ? clear_bhb_loop+0x35/0x90 [ 71.222216][ T5501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.228107][ T5501] RIP: 0033:0x7fca205779f9 [ 71.232515][ T5501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.252115][ T5501] RSP: 002b:00007fca212b3048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.260524][ T5501] RAX: ffffffffffffffda RBX: 00007fca20705f80 RCX: 00007fca205779f9 [ 71.268573][ T5501] RDX: 000000000000000a RSI: 0000000020000140 RDI: 0000000000000004 [ 71.276533][ T5501] RBP: 00007fca212b30a0 R08: 0000000000000000 R09: 0000000000000000 [ 71.284493][ T5501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.292448][ T5501] R13: 000000000000000b R14: 00007fca20705f80 R15: 00007ffcee284cf8 [ 71.300432][ T5501] [ 71.672117][ T5514] syzkaller0: entered promiscuous mode [ 71.702802][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.704857][ T5514] syzkaller0: entered allmulticast mode [ 71.709616][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.159870][ T5541] FAULT_INJECTION: forcing a failure. [ 72.159870][ T5541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.244107][ T5541] CPU: 0 UID: 0 PID: 5541 Comm: syz.4.87 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 72.254665][ T5541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 72.264741][ T5541] Call Trace: [ 72.268043][ T5541] [ 72.270995][ T5541] dump_stack_lvl+0x241/0x360 [ 72.275710][ T5541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.280938][ T5541] ? __pfx__printk+0x10/0x10 [ 72.285648][ T5541] ? snprintf+0xda/0x120 [ 72.289924][ T5541] should_fail_ex+0x3b0/0x4e0 [ 72.294639][ T5541] _copy_to_user+0x2f/0xb0 [ 72.299091][ T5541] simple_read_from_buffer+0xca/0x150 [ 72.304491][ T5541] proc_fail_nth_read+0x1e9/0x250 [ 72.309539][ T5541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.315093][ T5541] ? rw_verify_area+0x520/0x6b0 [ 72.319943][ T5541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 72.325484][ T5541] vfs_read+0x204/0xbc0 [ 72.329633][ T5541] ? __pfx_lock_release+0x10/0x10 [ 72.334657][ T5541] ? __pfx_vfs_read+0x10/0x10 [ 72.339326][ T5541] ? __fget_files+0x29/0x470 [ 72.343913][ T5541] ? __fget_files+0x3f6/0x470 [ 72.348604][ T5541] ksys_read+0x1a0/0x2c0 [ 72.352859][ T5541] ? __pfx_ksys_read+0x10/0x10 [ 72.357625][ T5541] ? do_syscall_64+0x100/0x230 [ 72.362390][ T5541] ? do_syscall_64+0xb6/0x230 [ 72.367069][ T5541] do_syscall_64+0xf3/0x230 [ 72.371569][ T5541] ? clear_bhb_loop+0x35/0x90 [ 72.376240][ T5541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.382132][ T5541] RIP: 0033:0x7fa89077643c [ 72.386538][ T5541] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 72.406133][ T5541] RSP: 002b:00007fa891501040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 72.414537][ T5541] RAX: ffffffffffffffda RBX: 00007fa890905f80 RCX: 00007fa89077643c [ 72.422585][ T5541] RDX: 000000000000000f RSI: 00007fa8915010b0 RDI: 0000000000000005 [ 72.430545][ T5541] RBP: 00007fa8915010a0 R08: 0000000000000000 R09: 0000000000000000 [ 72.438503][ T5541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.446465][ T5541] R13: 000000000000000b R14: 00007fa890905f80 R15: 00007ffc135afad8 [ 72.454440][ T5541] [ 72.688650][ T5557] netlink: 248 bytes leftover after parsing attributes in process `syz.0.91'. [ 72.722243][ T5551] Bluetooth: MGMT ver 1.23 [ 73.210652][ T5575] netlink: 'syz.1.100': attribute type 5 has an invalid length. [ 73.237089][ T5575] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 73.287590][ T5575] netlink: 'syz.1.100': attribute type 4 has an invalid length. [ 73.856024][ T5603] netlink: 'syz.3.108': attribute type 2 has an invalid length. [ 73.904817][ T5603] netlink: 128 bytes leftover after parsing attributes in process `syz.3.108'. [ 73.976775][ T5604] ip6_vti0: Master is either lo or non-ether device [ 74.679635][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.758946][ T5657] netlink: 'syz.3.120': attribute type 11 has an invalid length. [ 75.044936][ T5672] Zero length message leads to an empty skb [ 75.399066][ T5694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 76.114205][ T5732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.139'. [ 76.164717][ T5737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.140'. [ 76.553787][ T5754] FAULT_INJECTION: forcing a failure. [ 76.553787][ T5754] name failslab, interval 1, probability 0, space 0, times 0 [ 76.587510][ T5754] CPU: 0 UID: 0 PID: 5754 Comm: syz.3.144 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 76.598161][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 76.608234][ T5754] Call Trace: [ 76.611529][ T5754] [ 76.614472][ T5754] dump_stack_lvl+0x241/0x360 [ 76.619180][ T5754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.624396][ T5754] ? __pfx__printk+0x10/0x10 [ 76.629015][ T5754] ? ref_tracker_alloc+0x332/0x490 [ 76.634147][ T5754] should_fail_ex+0x3b0/0x4e0 [ 76.638856][ T5754] ? skb_clone+0x20c/0x390 [ 76.643293][ T5754] should_failslab+0xac/0x100 [ 76.647999][ T5754] ? skb_clone+0x20c/0x390 [ 76.652434][ T5754] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 76.657825][ T5754] skb_clone+0x20c/0x390 [ 76.662160][ T5754] __netlink_deliver_tap+0x3cc/0x7c0 [ 76.667456][ T5754] ? netlink_deliver_tap+0x2e/0x1b0 [ 76.672649][ T5754] netlink_deliver_tap+0x19d/0x1b0 [ 76.677754][ T5754] netlink_sendskb+0x68/0x140 [ 76.682430][ T5754] netlink_unicast+0x39d/0x990 [ 76.687182][ T5754] ? __asan_memcpy+0x40/0x70 [ 76.691768][ T5754] ? __pfx_netlink_unicast+0x10/0x10 [ 76.697054][ T5754] netlink_rcv_skb+0x262/0x430 [ 76.701812][ T5754] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.706825][ T5754] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.712110][ T5754] ? __netlink_deliver_tap+0x77e/0x7c0 [ 76.717571][ T5754] genl_rcv+0x28/0x40 [ 76.721545][ T5754] netlink_unicast+0x7f0/0x990 [ 76.726393][ T5754] ? __pfx_netlink_unicast+0x10/0x10 [ 76.731665][ T5754] ? __virt_addr_valid+0x183/0x530 [ 76.736767][ T5754] ? __check_object_size+0x49c/0x900 [ 76.742038][ T5754] ? bpf_lsm_netlink_send+0x9/0x10 [ 76.747145][ T5754] netlink_sendmsg+0x8e4/0xcb0 [ 76.751911][ T5754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.757190][ T5754] ? aa_sock_msg_perm+0x91/0x160 [ 76.762130][ T5754] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 76.767430][ T5754] ? security_socket_sendmsg+0x87/0xb0 [ 76.772886][ T5754] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.778172][ T5754] __sock_sendmsg+0x221/0x270 [ 76.782847][ T5754] __sys_sendto+0x3a4/0x4f0 [ 76.787350][ T5754] ? __pfx___sys_sendto+0x10/0x10 [ 76.792387][ T5754] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 76.798372][ T5754] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.804714][ T5754] __x64_sys_sendto+0xde/0x100 [ 76.809477][ T5754] do_syscall_64+0xf3/0x230 [ 76.813973][ T5754] ? clear_bhb_loop+0x35/0x90 [ 76.818640][ T5754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.824528][ T5754] RIP: 0033:0x7f2d5a37978c [ 76.828933][ T5754] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 76.848539][ T5754] RSP: 002b:00007f2d5b0deed0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 76.856974][ T5754] RAX: ffffffffffffffda RBX: 00007f2d5b0defd0 RCX: 00007f2d5a37978c [ 76.864942][ T5754] RDX: 0000000000000020 RSI: 00007f2d5b0df020 RDI: 0000000000000007 [ 76.872902][ T5754] RBP: 0000000000000000 R08: 00007f2d5b0def24 R09: 000000000000000c [ 76.880865][ T5754] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000007 [ 76.888827][ T5754] R13: 00007f2d5b0def78 R14: 00007f2d5b0df020 R15: 0000000000000000 [ 76.896811][ T5754] [ 77.058126][ T57] cfg80211: failed to load regulatory.db [ 78.535629][ T5798] warning: `syz.4.154' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.823110][ T5810] trusted_key: syz.3.159 sent an empty control message without MSG_MORE. [ 78.870568][ T5810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.159'. [ 78.893504][ T5810] nbd: couldn't find device at index 24 [ 79.625982][ T5832] Driver unsupported XDP return value 0 on prog (id 42) dev N/A, expect packet loss! [ 80.868586][ T5872] netlink: 172 bytes leftover after parsing attributes in process `syz.3.186'. [ 80.899948][ T5882] FAULT_INJECTION: forcing a failure. [ 80.899948][ T5882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 80.937921][ T5880] netlink: 'syz.2.188': attribute type 10 has an invalid length. [ 80.954510][ T5882] CPU: 0 UID: 0 PID: 5882 Comm: syz.4.189 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 80.965146][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 80.975285][ T5882] Call Trace: [ 80.978555][ T5882] [ 80.981476][ T5882] dump_stack_lvl+0x241/0x360 [ 80.986192][ T5882] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.991408][ T5882] ? __pfx__printk+0x10/0x10 [ 80.996017][ T5882] ? __pfx_lock_release+0x10/0x10 [ 81.001050][ T5882] should_fail_ex+0x3b0/0x4e0 [ 81.005736][ T5882] _copy_from_iter+0x1f6/0x1960 [ 81.010585][ T5882] ? __virt_addr_valid+0x183/0x530 [ 81.015707][ T5882] ? __pfx_lock_release+0x10/0x10 [ 81.020738][ T5882] ? __pfx__copy_from_iter+0x10/0x10 [ 81.026018][ T5882] ? __virt_addr_valid+0x183/0x530 [ 81.031122][ T5882] ? __virt_addr_valid+0x183/0x530 [ 81.036220][ T5882] ? __virt_addr_valid+0x45f/0x530 [ 81.041323][ T5882] ? __check_object_size+0x49c/0x900 [ 81.046600][ T5882] tipc_msg_build+0x87c/0x1070 [ 81.051376][ T5882] ? __pfx_tipc_msg_build+0x10/0x10 [ 81.056569][ T5882] ? tipc_group_bc_cong+0x1d0/0x290 [ 81.061785][ T5882] tipc_send_group_bcast+0x889/0xbd0 [ 81.067088][ T5882] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 81.072912][ T5882] ? __pfx_woken_wake_function+0x10/0x10 [ 81.078546][ T5882] ? process_measurement+0x793/0x1fb0 [ 81.083918][ T5882] __tipc_sendmsg+0x363/0x35f0 [ 81.088681][ T5882] ? up_write+0x1a9/0x590 [ 81.093004][ T5882] ? __pfx_validate_chain+0x10/0x10 [ 81.098188][ T5882] ? ima_get_action+0x75/0xb0 [ 81.102853][ T5882] ? __pfx___tipc_sendmsg+0x10/0x10 [ 81.108047][ T5882] ? process_measurement+0x1af3/0x1fb0 [ 81.113495][ T5882] ? __pfx_validate_chain+0x10/0x10 [ 81.118680][ T5882] ? aa_label_sk_perm+0x4f0/0x6d0 [ 81.123695][ T5882] ? mark_lock+0x9a/0x350 [ 81.128024][ T5882] ? __lock_acquire+0x137a/0x2040 [ 81.133056][ T5882] ? mark_lock+0x9a/0x350 [ 81.137384][ T5882] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.143360][ T5882] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.149686][ T5882] ? __local_bh_enable_ip+0x168/0x200 [ 81.155052][ T5882] ? tipc_sendmsg+0x47/0x70 [ 81.159550][ T5882] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 81.165263][ T5882] ? do_raw_spin_unlock+0x13c/0x8b0 [ 81.170457][ T5882] ? __pfx_tipc_sendmsg+0x10/0x10 [ 81.175477][ T5882] tipc_sendmsg+0x55/0x70 [ 81.179803][ T5882] __sock_sendmsg+0x221/0x270 [ 81.184480][ T5882] ____sys_sendmsg+0x525/0x7d0 [ 81.189252][ T5882] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.194544][ T5882] __sys_sendmmsg+0x3b2/0x740 [ 81.199217][ T5882] ? __pfx___sys_sendmmsg+0x10/0x10 [ 81.204435][ T5882] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 81.210326][ T5882] ? ksys_write+0x23e/0x2c0 [ 81.214823][ T5882] ? __pfx_lock_release+0x10/0x10 [ 81.219848][ T5882] ? vfs_write+0x7c4/0xc90 [ 81.224264][ T5882] ? __mutex_unlock_slowpath+0x21d/0x750 [ 81.229891][ T5882] ? __pfx_vfs_write+0x10/0x10 [ 81.234665][ T5882] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 81.240642][ T5882] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.246964][ T5882] ? do_syscall_64+0x100/0x230 [ 81.251724][ T5882] __x64_sys_sendmmsg+0xa0/0xb0 [ 81.256567][ T5882] do_syscall_64+0xf3/0x230 [ 81.261062][ T5882] ? clear_bhb_loop+0x35/0x90 [ 81.265731][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.271619][ T5882] RIP: 0033:0x7fa8907779f9 [ 81.276028][ T5882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.295884][ T5882] RSP: 002b:00007fa891501048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 81.304293][ T5882] RAX: ffffffffffffffda RBX: 00007fa890905f80 RCX: 00007fa8907779f9 [ 81.312266][ T5882] RDX: 0400000000000181 RSI: 00000000200030c0 RDI: 0000000000000003 [ 81.320237][ T5882] RBP: 00007fa8915010a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.328209][ T5882] R10: 9200000000000d50 R11: 0000000000000246 R12: 0000000000000002 [ 81.336273][ T5882] R13: 000000000000000b R14: 00007fa890905f80 R15: 00007ffc135afad8 [ 81.344254][ T5882] [ 81.490042][ T5880] batman_adv: batadv0: Adding interface: team0 [ 81.528847][ T5880] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.638113][ T5880] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 81.673232][ T5883] netlink: 'syz.2.188': attribute type 10 has an invalid length. [ 81.722990][ T5883] netlink: 2 bytes leftover after parsing attributes in process `syz.2.188'. [ 81.753336][ T5883] team0: entered promiscuous mode [ 81.770056][ T5883] team_slave_0: entered promiscuous mode [ 81.797653][ T5883] team_slave_1: entered promiscuous mode [ 81.818901][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.839032][ T5883] batman_adv: batadv0: Interface activated: team0 [ 81.868324][ T5883] batman_adv: batadv0: Interface deactivated: team0 [ 81.888057][ T5883] batman_adv: batadv0: Removing interface: team0 [ 81.921103][ T5883] bridge0: port 3(team0) entered blocking state [ 81.932481][ T5883] bridge0: port 3(team0) entered disabled state [ 81.944728][ T5883] team0: entered allmulticast mode [ 81.949892][ T5883] team_slave_0: entered allmulticast mode [ 81.966365][ T5883] team_slave_1: entered allmulticast mode [ 81.978975][ T5883] bridge0: port 3(team0) entered blocking state [ 81.985656][ T5883] bridge0: port 3(team0) entered forwarding state [ 81.998793][ T5912] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 82.308880][ T5924] FAULT_INJECTION: forcing a failure. [ 82.308880][ T5924] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.324873][ T5924] CPU: 1 UID: 0 PID: 5924 Comm: syz.4.203 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 82.335516][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 82.345678][ T5924] Call Trace: [ 82.348979][ T5924] [ 82.351921][ T5924] dump_stack_lvl+0x241/0x360 [ 82.356612][ T5924] ? __pfx_dump_stack_lvl+0x10/0x10 [ 82.361808][ T5924] ? __pfx__printk+0x10/0x10 [ 82.366396][ T5924] ? __pfx_lock_release+0x10/0x10 [ 82.371420][ T5924] should_fail_ex+0x3b0/0x4e0 [ 82.376105][ T5924] _copy_from_iter+0x1f6/0x1960 [ 82.380948][ T5924] ? __virt_addr_valid+0x183/0x530 [ 82.386050][ T5924] ? __pfx_lock_release+0x10/0x10 [ 82.391086][ T5924] ? __pfx__copy_from_iter+0x10/0x10 [ 82.396367][ T5924] ? __virt_addr_valid+0x183/0x530 [ 82.401469][ T5924] ? __virt_addr_valid+0x183/0x530 [ 82.406572][ T5924] ? __virt_addr_valid+0x45f/0x530 [ 82.411670][ T5924] ? __check_object_size+0x49c/0x900 [ 82.416948][ T5924] tipc_msg_build+0x87c/0x1070 [ 82.421719][ T5924] ? __pfx_tipc_msg_build+0x10/0x10 [ 82.426910][ T5924] ? tipc_group_bc_cong+0x1d0/0x290 [ 82.432109][ T5924] tipc_send_group_bcast+0x889/0xbd0 [ 82.437402][ T5924] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 82.443212][ T5924] ? __pfx_woken_wake_function+0x10/0x10 [ 82.448838][ T5924] ? process_measurement+0x793/0x1fb0 [ 82.454210][ T5924] __tipc_sendmsg+0x363/0x35f0 [ 82.458974][ T5924] ? up_write+0x1a9/0x590 [ 82.463298][ T5924] ? __pfx_validate_chain+0x10/0x10 [ 82.468484][ T5924] ? ima_get_action+0x75/0xb0 [ 82.473150][ T5924] ? __pfx___tipc_sendmsg+0x10/0x10 [ 82.478347][ T5924] ? process_measurement+0x1af3/0x1fb0 [ 82.483795][ T5924] ? __pfx_validate_chain+0x10/0x10 [ 82.488979][ T5924] ? aa_label_sk_perm+0x4f0/0x6d0 [ 82.493993][ T5924] ? mark_lock+0x9a/0x350 [ 82.498321][ T5924] ? __lock_acquire+0x137a/0x2040 [ 82.503354][ T5924] ? mark_lock+0x9a/0x350 [ 82.507681][ T5924] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.513654][ T5924] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.519981][ T5924] ? __local_bh_enable_ip+0x168/0x200 [ 82.525348][ T5924] ? tipc_sendmsg+0x47/0x70 [ 82.529844][ T5924] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 82.535556][ T5924] ? do_raw_spin_unlock+0x13c/0x8b0 [ 82.540750][ T5924] ? __pfx_tipc_sendmsg+0x10/0x10 [ 82.545766][ T5924] tipc_sendmsg+0x55/0x70 [ 82.550117][ T5924] __sock_sendmsg+0x221/0x270 [ 82.554812][ T5924] ____sys_sendmsg+0x525/0x7d0 [ 82.559606][ T5924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 82.564902][ T5924] __sys_sendmmsg+0x3b2/0x740 [ 82.569580][ T5924] ? __pfx___sys_sendmmsg+0x10/0x10 [ 82.574800][ T5924] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 82.580703][ T5924] ? ksys_write+0x23e/0x2c0 [ 82.585199][ T5924] ? __pfx_lock_release+0x10/0x10 [ 82.590224][ T5924] ? vfs_write+0x7c4/0xc90 [ 82.594643][ T5924] ? __mutex_unlock_slowpath+0x21d/0x750 [ 82.600273][ T5924] ? __pfx_vfs_write+0x10/0x10 [ 82.605050][ T5924] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 82.611033][ T5924] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 82.617363][ T5924] ? do_syscall_64+0x100/0x230 [ 82.622122][ T5924] __x64_sys_sendmmsg+0xa0/0xb0 [ 82.626968][ T5924] do_syscall_64+0xf3/0x230 [ 82.631461][ T5924] ? clear_bhb_loop+0x35/0x90 [ 82.636129][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.642015][ T5924] RIP: 0033:0x7fa8907779f9 [ 82.646422][ T5924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.666020][ T5924] RSP: 002b:00007fa891501048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 82.674432][ T5924] RAX: ffffffffffffffda RBX: 00007fa890905f80 RCX: 00007fa8907779f9 [ 82.682390][ T5924] RDX: 0400000000000181 RSI: 00000000200030c0 RDI: 0000000000000003 [ 82.690349][ T5924] RBP: 00007fa8915010a0 R08: 0000000000000000 R09: 0000000000000000 [ 82.698308][ T5924] R10: 9200000000000d50 R11: 0000000000000246 R12: 0000000000000002 [ 82.706271][ T5924] R13: 000000000000000b R14: 00007fa890905f80 R15: 00007ffc135afad8 [ 82.714263][ T5924] [ 82.747569][ T5914] netlink: 'syz.1.199': attribute type 10 has an invalid length. [ 82.758947][ T5914] netlink: 24 bytes leftover after parsing attributes in process `syz.1.199'. [ 83.469958][ T5947] team0: Port device team_slave_0 removed [ 83.515980][ T5947] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 86.141271][ T6033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.244'. [ 86.366326][ T6040] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.375509][ T6040] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.384224][ T6040] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.393250][ T6040] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.422866][ T6040] vxlan0: entered promiscuous mode [ 86.482930][ T6040] vxlan0: entered allmulticast mode [ 86.554774][ T6040] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.563729][ T6040] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.572762][ T6040] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.581752][ T6040] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.729813][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 86.739854][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 86.748071][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 86.757126][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 86.769051][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 86.776680][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 86.879207][ T6048] hsr0: entered promiscuous mode [ 86.909162][ T1862] IPVS: starting estimator thread 0... [ 86.916223][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.251'. [ 87.024551][ T6060] IPVS: using max 23 ests per chain, 55200 per kthread [ 87.045276][ T6051] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 87.463052][ T6076] macvlan0: entered allmulticast mode [ 87.483680][ T6076] veth1_vlan: entered allmulticast mode [ 87.501865][ T6076] netlink: 'syz.1.256': attribute type 1 has an invalid length. [ 87.545540][ T6076] netlink: 512 bytes leftover after parsing attributes in process `syz.1.256'. [ 87.659927][ T6076] macvlan0: left allmulticast mode [ 87.681823][ T6076] veth1_vlan: left allmulticast mode [ 87.849451][ T6055] chnl_net:caif_netlink_parms(): no params data found [ 88.081401][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 88.260686][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.290507][ T6055] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.310033][ T6055] bridge_slave_0: entered allmulticast mode [ 88.320794][ T6055] bridge_slave_0: entered promiscuous mode [ 88.348419][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.359905][ T6055] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.370926][ T6055] bridge_slave_1: entered allmulticast mode [ 88.381502][ T6055] bridge_slave_1: entered promiscuous mode [ 88.597359][ T6117] dccp_invalid_packet: P.Data Offset(0) too small [ 88.638180][ T6055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.691098][ T6055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.815566][ T5228] Bluetooth: hci5: command tx timeout [ 88.941582][ T6130] netlink: 248 bytes leftover after parsing attributes in process `syz.1.271'. [ 88.953763][ T6055] team0: Port device team_slave_0 added [ 88.972517][ T6055] team0: Port device team_slave_1 added [ 89.082000][ T6139] sctp: [Deprecated]: syz.3.272 (pid 6139) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.082000][ T6139] Use struct sctp_sack_info instead [ 89.134050][ T6135] sctp: [Deprecated]: syz.3.272 (pid 6135) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.134050][ T6135] Use struct sctp_sack_info instead [ 89.209164][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.259058][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.266444][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.293509][ T6055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.308971][ T6055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.316495][ T6055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.342680][ T6055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.392579][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.446877][ T6147] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 89.501320][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.554738][ T6149] netlink: 'syz.4.275': attribute type 4 has an invalid length. [ 89.592758][ T6055] hsr_slave_0: entered promiscuous mode [ 89.625161][ T6055] hsr_slave_1: entered promiscuous mode [ 89.651237][ T6055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.659808][ T6055] Cannot create hsr debugfs directory [ 89.707634][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.824065][ T6133] syz.3.272 (6133) used greatest stack depth: 19288 bytes left [ 90.225180][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 90.297920][ T6171] netlink: 20 bytes leftover after parsing attributes in process `syz.1.283'. [ 90.312678][ T12] bridge_slave_1: left allmulticast mode [ 90.321356][ T12] bridge_slave_1: left promiscuous mode [ 90.347499][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.373711][ T12] bridge_slave_0: left allmulticast mode [ 90.384076][ T12] bridge_slave_0: left promiscuous mode [ 90.393520][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.854111][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.866279][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.880304][ T12] bond0 (unregistering): Released all slaves [ 90.896676][ T5228] Bluetooth: hci5: command tx timeout [ 91.909074][ T12] hsr_slave_0: left promiscuous mode [ 91.950663][ T12] hsr_slave_1: left promiscuous mode [ 91.975060][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.996808][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.043193][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.068870][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.094118][ T12] veth1_macvtap: left promiscuous mode [ 92.100496][ T12] veth0_macvtap: left promiscuous mode [ 92.108348][ T12] veth1_vlan: left promiscuous mode [ 92.115724][ T12] veth0_vlan: left promiscuous mode [ 92.542320][ T12] team0 (unregistering): Port device team_slave_1 removed [ 92.578652][ T12] team0 (unregistering): Port device team_slave_0 removed [ 92.974673][ T5228] Bluetooth: hci5: command tx timeout [ 93.116721][ T6055] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.182483][ T6055] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.272527][ T6055] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.318180][ T6255] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 93.375100][ T6055] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.402639][ T6255] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.536264][ T6273] netlink: 48 bytes leftover after parsing attributes in process `syz.2.305'. [ 93.597748][ T6273] netlink: 20 bytes leftover after parsing attributes in process `syz.2.305'. [ 93.634573][ T6273] netlink: 48 bytes leftover after parsing attributes in process `syz.2.305'. [ 93.846796][ T6055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.963695][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.010935][ T1862] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.018140][ T1862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.063364][ T1862] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.070581][ T1862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.259121][ T6055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.781460][ T6318] netlink: 248 bytes leftover after parsing attributes in process `syz.3.317'. [ 94.813402][ T6319] syz.4.316 (6319) used greatest stack depth: 18496 bytes left [ 94.864496][ T6325] lo: Caught tx_queue_len zero misconfig [ 94.870317][ T6325] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 94.925243][ T6055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.043204][ T6329] netlink: 104 bytes leftover after parsing attributes in process `syz.4.321'. [ 95.055123][ T5228] Bluetooth: hci5: command tx timeout [ 95.074074][ T6055] veth0_vlan: entered promiscuous mode [ 95.077461][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.321'. [ 95.088031][ T6055] veth1_vlan: entered promiscuous mode [ 95.157349][ T6055] veth0_macvtap: entered promiscuous mode [ 95.181346][ T6055] veth1_macvtap: entered promiscuous mode [ 95.240733][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.274423][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.304529][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.342751][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.382550][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.401018][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.441085][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.461147][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.489480][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.552160][ T29] audit: type=1107 audit(1722926419.372:2): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':Y$nJ5 9Icc}֨ V}L(ΤO*?S\HSsdLY۞D|Us;=' [ 95.592405][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.648270][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.681025][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.693122][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.706971][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.717554][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.727739][ T6055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.738791][ T6055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.763113][ T6055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.788955][ T6357] bridge0: port 3(team0) entered disabled state [ 95.795596][ T6357] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.804842][ T6357] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.846344][ T6369] ip_vti0: entered promiscuous mode [ 95.851777][ T6369] ip_vti0: entered allmulticast mode [ 95.866942][ T6357] netlink: 24 bytes leftover after parsing attributes in process `syz.2.328'. [ 95.885053][ T6055] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.911718][ T6055] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.923768][ T6055] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.937922][ T6363] Cannot find add_set index 0 as target [ 95.943636][ T6055] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.183172][ T6377] netlink: 'syz.1.333': attribute type 64 has an invalid length. [ 96.193710][ T6377] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 96.239203][ T6382] netlink: 20 bytes leftover after parsing attributes in process `syz.4.334'. [ 96.252261][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.272515][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.292481][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 96.322738][ T6382] netlink: 'syz.4.334': attribute type 11 has an invalid length. [ 96.332708][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.354179][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.560999][ T6392] netlink: 'syz.2.338': attribute type 13 has an invalid length. [ 96.948950][ T6413] netlink: 'syz.2.343': attribute type 16 has an invalid length. [ 96.970403][ T6413] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.343'. [ 97.115987][ T6417] netlink: 'syz.4.345': attribute type 27 has an invalid length. [ 98.237078][ T6458] FAULT_INJECTION: forcing a failure. [ 98.237078][ T6458] name failslab, interval 1, probability 0, space 0, times 0 [ 98.271644][ T6458] CPU: 0 UID: 0 PID: 6458 Comm: syz.3.358 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 98.282286][ T6458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 98.292362][ T6458] Call Trace: [ 98.295661][ T6458] [ 98.298607][ T6458] dump_stack_lvl+0x241/0x360 [ 98.303315][ T6458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.308541][ T6458] ? __pfx__printk+0x10/0x10 [ 98.313160][ T6458] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 98.319186][ T6458] ? __pfx___might_resched+0x10/0x10 [ 98.324511][ T6458] should_fail_ex+0x3b0/0x4e0 [ 98.329232][ T6458] should_failslab+0xac/0x100 [ 98.333940][ T6458] ? __alloc_skb+0x1c3/0x440 [ 98.338537][ T6458] kmem_cache_alloc_node_noprof+0x71/0x320 [ 98.344344][ T6458] __alloc_skb+0x1c3/0x440 [ 98.348764][ T6458] ? __pfx___alloc_skb+0x10/0x10 [ 98.353700][ T6458] ? __virt_addr_valid+0x183/0x530 [ 98.358803][ T6458] ? __virt_addr_valid+0x183/0x530 [ 98.363909][ T6458] tipc_buf_acquire+0x2b/0xe0 [ 98.368584][ T6458] tipc_msg_build+0x8dd/0x1070 [ 98.373360][ T6458] ? __pfx_tipc_msg_build+0x10/0x10 [ 98.378563][ T6458] ? tipc_group_bc_cong+0x1d0/0x290 [ 98.383767][ T6458] tipc_send_group_bcast+0x889/0xbd0 [ 98.389062][ T6458] ? __pfx_tipc_send_group_bcast+0x10/0x10 [ 98.394873][ T6458] ? __pfx_woken_wake_function+0x10/0x10 [ 98.400499][ T6458] ? process_measurement+0x793/0x1fb0 [ 98.405869][ T6458] __tipc_sendmsg+0x363/0x35f0 [ 98.410632][ T6458] ? up_write+0x1a9/0x590 [ 98.414957][ T6458] ? __pfx_validate_chain+0x10/0x10 [ 98.420142][ T6458] ? ima_get_action+0x75/0xb0 [ 98.424812][ T6458] ? __pfx___tipc_sendmsg+0x10/0x10 [ 98.430012][ T6458] ? process_measurement+0x1af3/0x1fb0 [ 98.435462][ T6458] ? __pfx_validate_chain+0x10/0x10 [ 98.440647][ T6458] ? aa_label_sk_perm+0x4f0/0x6d0 [ 98.445662][ T6458] ? mark_lock+0x9a/0x350 [ 98.449989][ T6458] ? __lock_acquire+0x137a/0x2040 [ 98.455022][ T6458] ? mark_lock+0x9a/0x350 [ 98.459350][ T6458] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.465326][ T6458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.471655][ T6458] ? __local_bh_enable_ip+0x168/0x200 [ 98.477025][ T6458] ? tipc_sendmsg+0x47/0x70 [ 98.481526][ T6458] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 98.487240][ T6458] ? do_raw_spin_unlock+0x13c/0x8b0 [ 98.492442][ T6458] ? __pfx_tipc_sendmsg+0x10/0x10 [ 98.497463][ T6458] tipc_sendmsg+0x55/0x70 [ 98.501788][ T6458] __sock_sendmsg+0x221/0x270 [ 98.506460][ T6458] ____sys_sendmsg+0x525/0x7d0 [ 98.511219][ T6458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.516505][ T6458] __sys_sendmmsg+0x3b2/0x740 [ 98.521178][ T6458] ? __pfx___sys_sendmmsg+0x10/0x10 [ 98.526395][ T6458] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 98.532289][ T6458] ? ksys_write+0x23e/0x2c0 [ 98.536787][ T6458] ? __pfx_lock_release+0x10/0x10 [ 98.541813][ T6458] ? vfs_write+0x7c4/0xc90 [ 98.546227][ T6458] ? __mutex_unlock_slowpath+0x21d/0x750 [ 98.551851][ T6458] ? __pfx_vfs_write+0x10/0x10 [ 98.556624][ T6458] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.562600][ T6458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.568920][ T6458] ? do_syscall_64+0x100/0x230 [ 98.573682][ T6458] __x64_sys_sendmmsg+0xa0/0xb0 [ 98.578536][ T6458] do_syscall_64+0xf3/0x230 [ 98.583036][ T6458] ? clear_bhb_loop+0x35/0x90 [ 98.587704][ T6458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.593596][ T6458] RIP: 0033:0x7f2d5a3779f9 [ 98.598007][ T6458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.617602][ T6458] RSP: 002b:00007f2d5b0e0048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 98.626007][ T6458] RAX: ffffffffffffffda RBX: 00007f2d5a505f80 RCX: 00007f2d5a3779f9 [ 98.634052][ T6458] RDX: 0400000000000181 RSI: 00000000200030c0 RDI: 0000000000000003 [ 98.642012][ T6458] RBP: 00007f2d5b0e00a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.650059][ T6458] R10: 9200000000000d50 R11: 0000000000000246 R12: 0000000000000002 [ 98.658018][ T6458] R13: 000000000000004d R14: 00007f2d5a505f80 R15: 00007ffe86603658 [ 98.665993][ T6458] [ 98.986342][ T6478] netlink: 'syz.1.365': attribute type 33 has an invalid length. [ 99.023151][ T6478] xt_l2tp: v2 sid > 0xffff: 16777216 [ 99.139011][ T6478] vlan2: entered promiscuous mode [ 99.155100][ T6478] team0: Device vlan2 is already an upper device of the team interface [ 99.193978][ T6490] syzkaller1: entered promiscuous mode [ 99.201045][ T6490] syzkaller1: entered allmulticast mode [ 99.573983][ T6508] netlink: 16 bytes leftover after parsing attributes in process `syz.4.374'. [ 99.589157][ T6508] netlink: 12 bytes leftover after parsing attributes in process `syz.4.374'. [ 99.617558][ T6507] netlink: 68 bytes leftover after parsing attributes in process `syz.1.373'. [ 100.168114][ T6527] ipvlan2: entered promiscuous mode [ 100.173390][ T6527] ipvlan2: entered allmulticast mode [ 100.198429][ T6527] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 100.477264][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 100.546075][ T6543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 100.818913][ T6556] Cannot find add_set index 0 as target [ 101.183790][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 101.212771][ T6580] IPv6: sit1: Disabled Multicast RS [ 101.359215][ T6588] FAULT_INJECTION: forcing a failure. [ 101.359215][ T6588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.385383][ T6588] CPU: 1 UID: 0 PID: 6588 Comm: syz.3.402 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 101.396022][ T6588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 101.406097][ T6588] Call Trace: [ 101.409385][ T6588] [ 101.412323][ T6588] dump_stack_lvl+0x241/0x360 [ 101.417027][ T6588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.422253][ T6588] ? __pfx__printk+0x10/0x10 [ 101.424034][ T6593] syz.4.403 uses old SIOCAX25GETINFO [ 101.426849][ T6588] ? __pfx_lock_release+0x10/0x10 [ 101.426886][ T6588] should_fail_ex+0x3b0/0x4e0 [ 101.426917][ T6588] _copy_from_user+0x2f/0xe0 [ 101.426940][ T6588] copy_msghdr_from_user+0xae/0x680 [ 101.426970][ T6588] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 101.427008][ T6588] __sys_sendmsg+0x23d/0x3a0 [ 101.427030][ T6588] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.427047][ T6588] ? vfs_write+0x7c4/0xc90 [ 101.427105][ T6588] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.478135][ T6588] ? do_syscall_64+0x100/0x230 [ 101.482902][ T6588] ? do_syscall_64+0xb6/0x230 [ 101.487574][ T6588] do_syscall_64+0xf3/0x230 [ 101.492096][ T6588] ? clear_bhb_loop+0x35/0x90 [ 101.496788][ T6588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.502694][ T6588] RIP: 0033:0x7f2d5a3779f9 [ 101.507104][ T6588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.526790][ T6588] RSP: 002b:00007f2d5b0e0048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.535197][ T6588] RAX: ffffffffffffffda RBX: 00007f2d5a505f80 RCX: 00007f2d5a3779f9 [ 101.543176][ T6588] RDX: 0000000000000000 RSI: 0000000020001400 RDI: 0000000000000004 [ 101.551139][ T6588] RBP: 00007f2d5b0e00a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.559105][ T6588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.567088][ T6588] R13: 000000000000004d R14: 00007f2d5a505f80 R15: 00007ffe86603658 [ 101.575063][ T6588] [ 101.694855][ T6593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.721936][ T6597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.406'. [ 101.779979][ T6594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.814283][ T6601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.405'. [ 101.831207][ T6593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.837761][ T6604] xt_TPROXY: Can be used only with -p tcp or -p udp [ 102.214024][ T6624] netlink: 480 bytes leftover after parsing attributes in process `syz.3.412'. [ 102.498294][ T6635] FAULT_INJECTION: forcing a failure. [ 102.498294][ T6635] name failslab, interval 1, probability 0, space 0, times 0 [ 102.517385][ T6635] CPU: 1 UID: 0 PID: 6635 Comm: syz.0.415 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 102.528116][ T6635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 102.538629][ T6635] Call Trace: [ 102.541967][ T6635] [ 102.544921][ T6635] dump_stack_lvl+0x241/0x360 [ 102.549602][ T6635] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.554795][ T6635] ? __pfx__printk+0x10/0x10 [ 102.559380][ T6635] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 102.565352][ T6635] ? __pfx___might_resched+0x10/0x10 [ 102.570639][ T6635] should_fail_ex+0x3b0/0x4e0 [ 102.575321][ T6635] should_failslab+0xac/0x100 [ 102.580000][ T6635] ? __alloc_skb+0x1c3/0x440 [ 102.584588][ T6635] kmem_cache_alloc_node_noprof+0x71/0x320 [ 102.590387][ T6635] __alloc_skb+0x1c3/0x440 [ 102.594797][ T6635] ? __pfx___might_resched+0x10/0x10 [ 102.600079][ T6635] ? __pfx___alloc_skb+0x10/0x10 [ 102.605015][ T6635] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 102.611097][ T6635] ? security_socket_getpeersec_dgram+0x88/0xb0 [ 102.617334][ T6635] netlink_sendmsg+0x638/0xcb0 [ 102.622100][ T6635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.627377][ T6635] ? __import_iovec+0x536/0x820 [ 102.632217][ T6635] ? aa_sock_msg_perm+0x91/0x160 [ 102.637148][ T6635] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 102.642423][ T6635] ? security_socket_sendmsg+0x87/0xb0 [ 102.647876][ T6635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.653151][ T6635] __sock_sendmsg+0x221/0x270 [ 102.657823][ T6635] ____sys_sendmsg+0x525/0x7d0 [ 102.662583][ T6635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.667914][ T6635] __sys_sendmsg+0x2b0/0x3a0 [ 102.672495][ T6635] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.677597][ T6635] ? vfs_write+0x7c4/0xc90 [ 102.682044][ T6635] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.688367][ T6635] ? do_syscall_64+0x100/0x230 [ 102.693124][ T6635] ? do_syscall_64+0xb6/0x230 [ 102.697794][ T6635] do_syscall_64+0xf3/0x230 [ 102.702294][ T6635] ? clear_bhb_loop+0x35/0x90 [ 102.706986][ T6635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.712908][ T6635] RIP: 0033:0x7f19f39779f9 [ 102.717328][ T6635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.736929][ T6635] RSP: 002b:00007f19f4739048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.745340][ T6635] RAX: ffffffffffffffda RBX: 00007f19f3b05f80 RCX: 00007f19f39779f9 [ 102.753300][ T6635] RDX: 0000000000000000 RSI: 0000000020001400 RDI: 0000000000000004 [ 102.761261][ T6635] RBP: 00007f19f47390a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.769229][ T6635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.777192][ T6635] R13: 000000000000000b R14: 00007f19f3b05f80 R15: 00007ffcd0d0f628 [ 102.785167][ T6635] [ 102.845308][ T944] jump_label: Fatal kernel bug, unexpected op at tcp_inbound_hash+0x476/0x9d0 [ffffffff8a188466] (e9 e1 02 00 00 != 0f 1f 44 00 00)) size:5 type:1 [ 102.909898][ T944] ------------[ cut here ]------------ [ 102.915541][ T944] kernel BUG at arch/x86/kernel/jump_label.c:73! [ 102.943604][ T944] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 102.950583][ T944] CPU: 0 UID: 0 PID: 944 Comm: kworker/0:3 Not tainted 6.11.0-rc1-syzkaller-00261-geec9de035410 #0 [ 102.961270][ T944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 102.971427][ T944] Workqueue: events jump_label_update_timeout [ 102.977525][ T944] RIP: 0010:__jump_label_patch+0x463/0x490 [ 102.983357][ T944] Code: e8 22 82 5f 00 48 c7 c7 60 4f 05 8c 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 a2 90 7e 0a 48 83 c4 08 90 <0f> 0b e8 c6 8f 81 0a e8 f1 81 5f 00 90 0f 0b e8 e9 81 5f 00 90 0f [ 103.002979][ T944] RSP: 0018:ffffc90003d5f920 EFLAGS: 00010292 [ 103.009063][ T944] RAX: 0000000000000090 RBX: 00000000000000da RCX: f3d942ab4f929900 [ 103.017048][ T944] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 103.025029][ T944] RBP: ffffc90003d5fa48 R08: ffffffff8173dfac R09: 1ffff920007abec4 [ 103.032992][ T944] R10: dffffc0000000000 R11: fffff520007abec5 R12: 0000000000000001 [ 103.040950][ T944] R13: ffffffff8c056d8a R14: ffffffff931088c0 R15: ffffffff8c056d8a [ 103.048921][ T944] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 103.057834][ T944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.064401][ T944] CR2: 00007fa8914356c0 CR3: 0000000049c14000 CR4: 00000000003506f0 [ 103.072358][ T944] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.080328][ T944] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.088284][ T944] Call Trace: [ 103.091546][ T944] [ 103.094469][ T944] ? __die_body+0x88/0xe0 [ 103.098808][ T944] ? die+0xcf/0x110 [ 103.102605][ T944] ? do_trap+0x15a/0x3a0 [ 103.106835][ T944] ? __jump_label_patch+0x463/0x490 [ 103.112018][ T944] ? do_error_trap+0x1dc/0x2c0 [ 103.116765][ T944] ? __jump_label_patch+0x463/0x490 [ 103.121950][ T944] ? __pfx_do_error_trap+0x10/0x10 [ 103.127063][ T944] ? report_bug+0x3e8/0x500 [ 103.131551][ T944] ? handle_invalid_op+0x34/0x40 [ 103.136470][ T944] ? __jump_label_patch+0x463/0x490 [ 103.141652][ T944] ? exc_invalid_op+0x38/0x50 [ 103.146315][ T944] ? asm_exc_invalid_op+0x1a/0x20 [ 103.151327][ T944] ? __wake_up_klogd+0xcc/0x110 [ 103.156160][ T944] ? __jump_label_patch+0x463/0x490 [ 103.161342][ T944] ? tcp_inbound_hash+0x476/0x9d0 [ 103.166347][ T944] ? __pfx___jump_label_patch+0x10/0x10 [ 103.171884][ T944] ? tcp_inbound_hash+0x476/0x9d0 [ 103.176889][ T944] ? tcp_inbound_hash+0x485/0x9d0 [ 103.181901][ T944] ? tcp_inbound_hash+0x47b/0x9d0 [ 103.186916][ T944] ? __static_key_slow_dec_cpuslocked+0x21c/0x410 [ 103.193319][ T944] ? __pfx___mutex_lock+0x10/0x10 [ 103.198341][ T944] arch_jump_label_transform_queue+0x68/0x100 [ 103.204396][ T944] __jump_label_update+0x177/0x3a0 [ 103.209499][ T944] __static_key_slow_dec_cpuslocked+0x250/0x410 [ 103.215732][ T944] ? __pfx___static_key_slow_dec_cpuslocked+0x10/0x10 [ 103.222480][ T944] ? process_scheduled_works+0x945/0x1830 [ 103.228183][ T944] jump_label_update_timeout+0x1e/0x30 [ 103.233625][ T944] process_scheduled_works+0xa2c/0x1830 [ 103.239162][ T944] ? __pfx_process_scheduled_works+0x10/0x10 [ 103.245138][ T944] ? assign_work+0x364/0x3d0 [ 103.249731][ T944] worker_thread+0x86d/0xd40 [ 103.254313][ T944] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 103.260287][ T944] ? __kthread_parkme+0x169/0x1d0 [ 103.265295][ T944] ? __pfx_worker_thread+0x10/0x10 [ 103.270389][ T944] kthread+0x2f0/0x390 [ 103.274440][ T944] ? __pfx_worker_thread+0x10/0x10 [ 103.279534][ T944] ? __pfx_kthread+0x10/0x10 [ 103.284108][ T944] ret_from_fork+0x4b/0x80 [ 103.288513][ T944] ? __pfx_kthread+0x10/0x10 [ 103.293084][ T944] ret_from_fork_asm+0x1a/0x30 [ 103.297847][ T944] [ 103.300850][ T944] Modules linked in: [ 103.312484][ T944] ---[ end trace 0000000000000000 ]--- [ 103.318554][ T944] RIP: 0010:__jump_label_patch+0x463/0x490 [ 103.324568][ T944] Code: e8 22 82 5f 00 48 c7 c7 60 4f 05 8c 48 8b 0c 24 48 89 ce 48 89 ca 4d 89 e8 4c 8b 4c 24 08 41 54 e8 a2 90 7e 0a 48 83 c4 08 90 <0f> 0b e8 c6 8f 81 0a e8 f1 81 5f 00 90 0f 0b e8 e9 81 5f 00 90 0f [ 103.344434][ T944] RSP: 0018:ffffc90003d5f920 EFLAGS: 00010292 [ 103.350692][ T944] RAX: 0000000000000090 RBX: 00000000000000da RCX: f3d942ab4f929900 [ 103.358948][ T944] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 103.367874][ T944] RBP: ffffc90003d5fa48 R08: ffffffff8173dfac R09: 1ffff920007abec4 [ 103.376063][ T944] R10: dffffc0000000000 R11: fffff520007abec5 R12: 0000000000000001 [ 103.384155][ T944] R13: ffffffff8c056d8a R14: ffffffff931088c0 R15: ffffffff8c056d8a [ 103.392639][ T944] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 103.401716][ T944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 103.408424][ T944] CR2: 00007fca21270fa8 CR3: 0000000049c14000 CR4: 00000000003506f0 [ 103.421083][ T944] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 103.429207][ T944] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 103.437233][ T944] Kernel panic - not syncing: Fatal exception [ 103.443513][ T944] Kernel Offset: disabled [ 103.447824][ T944] Rebooting in 86400 seconds..