last executing test programs: 45.676407533s ago: executing program 0 (id=977): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x2, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT_ADD_VIF(r2, 0xff000000, 0xca, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) 45.552243769s ago: executing program 0 (id=980): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@int=0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000340)={0x0, 0x5}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x44}}, 0x0) getpeername$netlink(r2, &(0x7f00000001c0), &(0x7f0000000200)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x4ffe6, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x6}, 0xffffffffffffff3d) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r6, 0x2, 0x0, 0x4000}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r8 = socket$inet6(0xa, 0x3, 0x20) getsockopt$inet6_int(r8, 0x29, 0x50, 0x0, &(0x7f0000000240)) sendto$inet6(r8, &(0x7f0000000380)="374df863516a39d603c1243301143d2f9f74164cd4c8b66fa6c849ebab8430ca873627c744718f2eb92c6890c69b26c37806ade364a442d236620f787870e0d002223584d51b96d3ba1c4a1292043bb4b4ff4ff14bc2e927fe589016293102d5763b5415202eefc9e6ebdb7ad9fa6bc2ccdb64bcc89d5508316dc54b400c04c112043c3546242f3cd44c55beb557606d4a4085bfbe23a59653c2450f2c702b18cef4c57cb4", 0xfffffffffffffd1b, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) 44.531646225s ago: executing program 0 (id=986): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000010095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)}], 0x1}}], 0x1, 0x9200000000000000) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x10, 0x0, 0x0, 0xd28, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 44.351625695s ago: executing program 0 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x81, 0x1ff}, 0x100, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0xbc6e9f9f84050bc0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 27.813408599s ago: executing program 0 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x81, 0x1ff}, 0x100, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0xbc6e9f9f84050bc0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 13.206625644s ago: executing program 0 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000240)={{0x81, 0x1ff}, 0x100, './file0\x00'}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000200)={0x0, 0xbc6e9f9f84050bc0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r1, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.859378416s ago: executing program 2 (id=1249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x300}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) 3.72431082s ago: executing program 2 (id=1252): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x50, 0x12, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}, @IFLA_EXT_MASK={0x8}]}, 0x50}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xfffffff7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x900, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000010000ac"], 0x28}}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}, 0x1c) 3.597703404s ago: executing program 2 (id=1254): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x9a, &(0x7f0000000000), &(0x7f0000000080)=0x4) 3.487255268s ago: executing program 2 (id=1255): syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004d0000480000000000069078ac141400ac1e0001830bdfac1414aa00000000440c050300000006000000008606000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50d7200090780000"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140)=0x2958, 0x4) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x293, 0x0, 0xffffffff}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5c, 0x2, [@TCA_CGROUP_ACT={0x58}]}}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xbdcf62110a6cbb4f, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6b9, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x35740b07}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0x8, 0xe2, &(0x7f0000000340)=""/226, 0x41100, 0x22, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000900)=[{0x4, 0x2, 0xe, 0x8}, {0x0, 0x2, 0xe, 0x5}], 0x10, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x12, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x0, 0x3, 0x4, 0x9, 0x2, 0x10, 0x1}, @ldst={0x2, 0x2, 0x1, 0x1, 0x2, 0xffffffffffffffe0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1, 0x0, 0x4, 0x6, 0x9, 0x40, 0xfffffffffffffffc}], &(0x7f0000000300)='GPL\x00', 0xffffea5b, 0x1000, &(0x7f0000001640)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r3, r3, r3, r3], 0x0, 0x10, 0x80000001}, 0x90) sendto$packet(0xffffffffffffffff, &(0x7f0000001580)="0d6e7a5da30ad545ed65a5f481ccc2ab10e0d582cf26b512a7ce135c57225700e559dd2a34473e7b54a90246ec0892e0a007279abc8e304d3a2cc5c22e13e0cb69ec5f644575addebbca7cdfc350db1ee3cc73994dc19cf8a434faa48b73e53d0b56a28b2d76140d4567ef826bc05f9a27ce2fb122aabdbbb08258984be58ac8b61fde06101a62154093c927ff89578b9a69ddf1467fe09976968adc0f226b20773ba9dd087f25fd42a27a609fb46d98043eef3db5fdfb54a206", 0xba, 0x0, &(0x7f00000014c0)={0x11, 0xc, 0x0, 0x1, 0x7f, 0x6, @remote}, 0x14) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0800040064010101140003006d6163766c616e310000000000000000140006000000000014000000030000000800000008000a00020000001400030076657468315f6d616376746170000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000080}, 0x884) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000012c0)={@ipv4={""/10, ""/2, @empty}}, &(0x7f0000001300)=0x14) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000001240)={0x0, 0x6}, 0x4) 3.258638011s ago: executing program 2 (id=1258): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x7}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x3, {0x0, "0003000000000102030003030004ffff"}}}]}, 0x48}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, &(0x7f0000000240)) socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="034886dd040027000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701009f00be60a4276a980008000000b70300000000000085000000060000001500000000000000b707b8777b8c29bb58cac1f6314680490a97dc1564cbd53a4427655f826ca2ec167be1568d719f375665e3dca3da18cff755ea3266f5e22c44a781e27fbb21df1da511f7d5bddf11f74120fb238e83003cd44a2b3693fa0b620f8872c66920ec81ba274e2ce2eb2b349a3de9f75ff4d848d86c58cfb80700"/207], &(0x7f0000000000)='GPL\x00', 0x8, 0x17, &(0x7f0000000080)=""/23, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000240), 0x10, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{}, {0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}]}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000140)=0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000340)=0xff, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3.114933082s ago: executing program 2 (id=1261): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3f0, 0x0, 0x0, 0x100, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xd8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r1 = socket(0xf, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000507000004000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@delchain={0x2c, 0x5f, 0x400, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffb}]}, 0x2c}}, 0x4004000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0xfd, 0x200, 0x61, @dev={0xfe, 0x80, '\x00', 0x22}, @private0, 0x20, 0x8000, 0x6, 0x9}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x8, [@union={0x0, 0x2, 0x0, 0x5, 0x0, 0x0, [{0x7, 0x0, 0x8}, {0xf, 0x0, 0xdac}]}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x53, 0x0, 0x61}, @int={0x100f, 0x0, 0x0, 0x1, 0x0, 0x4a, 0x0, 0x70, 0x1}, @fwd={0xd}, @var={0x20e, 0x0, 0x0, 0xe, 0x5}, @restrict={0x2, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f, 0x2e, 0x61, 0x0, 0x2e, 0x30]}}, &(0x7f0000000340)=""/65, 0x8c, 0x41}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0x15, &(0x7f0000000900)=ANY=[@ANYRESDEC, @ANYBLOB="6d72ecb4b95d2acb5d9449e53ba616a827eb34152541166065367aea09178bf9e76b4876be07409e4eba9e8cfb25e3a8f7b6ff002544efd778e3414d22d970e65d2d0bd385ec832a5e74404ea2ba4672c2ab468ef09d346a2fd7d90f0728c8907bb8f2c053d3ac308ff3844b5b119795e3a30b3a53297405f93aae19413f75830971082a2120d855d236d8155f85c43dadeea2b17cdbce4b05f981634f36726550d0cb1f1410d3431a2ca965cff79e37825dc1295cc766c3e66359274c052da44a577f06d2b7df44b8b6f83987c931d863e8", @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90) r5 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x29) unshare(0x62040200) syz_80211_inject_frame(&(0x7f0000000180), &(0x7f00000004c0)=ANY=[@ANYBLOB="98bf0800080211000000080211000000ffffffffffff0100ffffffffffff331cf0f38c80080211000000ffffffffffff1d0042d1cd781ba200ef1469f2768ee78fe60cc3058437e3bc6737236c90fb000802110000010802110000013b003ef24095b1880eb535a949ffe60cf47c9b82874eff2015d3566ca4ca54fd0775cb557237b38268ec2eea33c754acf21e3459a4dcde2f1d5e4d42800000000802110000010802110000007c00390f2f55d514c3a1f1b28827381ac5ee2ce3ceae4e3687b9dfb9cf2a45ffedf594b848a1513c20a15e52a4054ad677451027f3d6486bf5987437aa24ed89ad0f064fa1b9ef111a394284f5a013bd939efc79007613ba92ad4c632f3c686ec4f9cc007e7278bf9f602afc9846481bdc4c996468d2c738c8be8ebf53330000ffffffffffff080211000001e1008a1df6476938f682910d1a0c0274cac69caa973d17623c2c0e9a6a1b69a4e048130faa19c21a5169fc5a09f426dbab4c7b5596c0bba1bd36217ec16b029e8bd12175e3f5efcdf7e59da89fda3f45fa5e03f1909d27b892599e8eaee0c3b8cc2ff3c60cbdb48869759d2e95495509fe9b6c58bf13d77feed141f81a04485ca0327a59e34c294f572670b2c15dff13e3ab41d8b5dc4a657928fd3c944e736444ff9a6549b5e14f7a010d771c4c91c31bf70d598a7e0db983779a2bbb10bddf8ab05b3ad57ee3e44f2cb4ba71f45bc9d19d5b0efaedc9ad2b474960e30c989f5f9a9f00ffffffffffff080211000001670079af984821242f25e66669ae869848266a499b9f7a0964c809859fd1efe4ba86448d71f797d3e9f7ba694d61d106316d897bcbea2313f6344e27c8f9bbf37efd4118d49c339a2a35bd8468d99e652f8fb56cfda41ef461587ada3cb4fbcbeb86000000"], 0x290) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x58618000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd70000010200014000000080001000300e4ff1300030088b2c5ed48ded3a69c04a0bb556bd0499bc30b770e6e28f3c811427bc8c529af42a927b089042e5a00001b0000000000000000", @ANYRES32=0x0, @ANYBLOB="0c000600020000000000000008001c00", @ANYRES32=0x0, @ANYBLOB], 0x38}}, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bind$isdn_base(r6, 0x0, 0x0) 3.112618315s ago: executing program 3 (id=1262): socket$inet_udplite(0x2, 0x2, 0x88) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x0, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0x70, 0xb8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}, {0x40000, 0x80000}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x1d, 0x2, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000d00)=@newtclass={0x90, 0x28, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x5, 0x10}, {0xe}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x4}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x20}}}, @c_atm={{0x8}, {0x34, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x7}}, @TCA_ATM_HDR={0x5, 0x3, "d2"}, @TCA_ATM_HDR={0x1f, 0x3, "ab110e2217750e93d12719034d0c42145f1b9a5b636e6fdc4a8cb8"}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008005}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x8040) 2.827561274s ago: executing program 1 (id=1264): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)=ANY=[]) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002000f5c300000000000000000a00000001000001010000020800000000140011000000eec8a5316afa53a747e7befe23ec"], 0x38}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000000)={{}, "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"}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@getstats={0x1c, 0x5e, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2}}, 0x1c}, 0x1, 0xba01}, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1, 0x0, 0x0, 0x4000}}], 0x1003, 0x0, 0x0) 2.516466328s ago: executing program 1 (id=1267): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x80005, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000040400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d"], 0x0, 0x5a}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtfilter={0x2c, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xc}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xc4}}]}, 0x2c}, 0x1, 0xf0ffffffffffff}, 0x0) 2.267078711s ago: executing program 4 (id=1268): syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004d0000480000000000069078ac141400ac1e0001830bdfac1414aa00000000440c050300000006000000008606000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50d7200090780000"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140)=0x2958, 0x4) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x293, 0x0, 0xffffffff}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5c, 0x2, [@TCA_CGROUP_ACT={0x58}]}}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xbdcf62110a6cbb4f, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6b9, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x35740b07}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0x8, 0xe2, &(0x7f0000000340)=""/226, 0x41100, 0x22, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000900)=[{0x4, 0x2, 0xe, 0x8}, {0x0, 0x2, 0xe, 0x5}], 0x10, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x12, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x0, 0x3, 0x4, 0x9, 0x2, 0x10, 0x1}, @ldst={0x2, 0x2, 0x1, 0x1, 0x2, 0xffffffffffffffe0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1, 0x0, 0x4, 0x6, 0x9, 0x40, 0xfffffffffffffffc}], &(0x7f0000000300)='GPL\x00', 0xffffea5b, 0x1000, &(0x7f0000001640)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r3, r3, r3, r3], 0x0, 0x10, 0x80000001}, 0x90) sendto$packet(0xffffffffffffffff, &(0x7f0000001580)="0d6e7a5da30ad545ed65a5f481ccc2ab10e0d582cf26b512a7ce135c57225700e559dd2a34473e7b54a90246ec0892e0a007279abc8e304d3a2cc5c22e13e0cb69ec5f644575addebbca7cdfc350db1ee3cc73994dc19cf8a434faa48b73e53d0b56a28b2d76140d4567ef826bc05f9a27ce2fb122aabdbbb08258984be58ac8b61fde06101a62154093c927ff89578b9a69ddf1467fe09976968adc0f226b20773ba9dd087f25fd42a27a609fb46d98043eef3db5fdfb54a206", 0xba, 0x0, &(0x7f00000014c0)={0x11, 0xc, 0x0, 0x1, 0x7f, 0x6, @remote}, 0x14) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0800040064010101140003006d6163766c616e310000000000000000140006000000000014000000030000000800000008000a00020000001400030076657468315f6d616376746170000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000080}, 0x884) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000012c0)={@ipv4={""/10, ""/2, @empty}}, &(0x7f0000001300)=0x14) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000001240)={0x0, 0x6}, 0x4) 2.213319931s ago: executing program 1 (id=1269): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="620ac4000000800000000000000000009500000000000000"], 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xfffffffffffffffc, &(0x7f0000003a40)) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002000010300000000000000000200"/36], 0x24}}, 0x0) 1.951477135s ago: executing program 1 (id=1270): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x54, r1, 0x135, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0x22, 0xc7, {[{0x81, 0x7}, {0x0, 0xff}, {0x6, 0x7}, {0x80, 0x7}, {}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x4}, {}], "040ded930dde6d5a"}}, @NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{}, {0x5}, {}, {}], "7ecbad144922f925"}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 1.92119457s ago: executing program 4 (id=1271): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)'], 0x28}}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x7}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x3, {0x0, "0003000000000102030003030004ffff"}}}]}, 0x48}}, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, 0x0, &(0x7f0000000240)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="034886dd040027000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff02000000000000000000000000000112"], 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1a, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000018010000756c6c2500000000002020207b1af8ff00000000bfa10000000000000701009f00be60a4276a980008000000b70300000000000085000000060000001500000000000000b707b8777b8c29bb58cac1f6314680490a97dc1564cbd53a4427655f826ca2ec167be1568d719f375665e3dca3da18cff755ea3266f5e22c44a781e27fbb21df1da511f7d5bddf11f74120fb238e83003cd44a2b3693fa0b620f8872c66920ec81ba274e2ce2eb2b349a3de9f75ff4d848d86c58cfb80700"/207], &(0x7f0000000000)='GPL\x00', 0x8, 0x17, &(0x7f0000000080)=""/23, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x8, 0x10, &(0x7f0000000240), 0x10, 0x0, 0x0, 0x9, &(0x7f0000000540)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{}, {0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}]}, 0x90) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000140)=0x10) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000340)=0xff, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.863636509s ago: executing program 3 (id=1272): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00'], 0x24}}, 0x0) 1.72467452s ago: executing program 3 (id=1273): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58eeff0a000000000000004000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036746e6c00002000028014000300ff02000000000000000000000000000105000600e500000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x58}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r6, &(0x7f0000003340)={0x0, 0x0, 0x0}, 0x41) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000600)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}, 0x1c) sendmsg$IEEE802154_SET_MACPARAMS(r7, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000001740)=ANY=[@ANYBLOB=' \t\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000230000000a0001007770616e300000"], 0x20}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r9, 0x301, 0x2, 0x0, {0x5}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000140)={'wpan4\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x44}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@newneigh={0x30, 0x1c, 0x413, 0x0, 0x0, {0xa, 0x0, 0x0, r1, 0x95}, [@NDA_DST_IPV6={0x14, 0x1, @private2}]}, 0x30}}, 0x0) 1.672104542s ago: executing program 4 (id=1274): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0x10, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"/424]}, 0x220) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x89}}]}, 0x78}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x80, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x1e02, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x10}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}, 0x1, 0x600}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000001300)={0xa98, r8, 0x5, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xa1c, 0x8, 0x0, 0x1, [{0xe4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e"}]}, {0x4}, {0x64, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a549"}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}]}, {0x82c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2d}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x47c, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5, 0x3, 0x10}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x6}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x14}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "55fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x6}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}]}, 0xa98}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000000040)=0x0) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x23c, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x211, 0x10f, 0x0, 0x1, [@typed={0xd, 0xee, 0x0, 0x0, @str='{\n\xbb%//.&\x00'}, @typed={0x103, 0x2c, 0x0, 0x0, @binary="3b60216e7cf0b505f293302bb531f477be768424729752a8b420cb4094fc74c84503552d4e0566c38a35dfb50da119733fb6e4f9e6b66f1e6f0ee25cc7d26f126b5e1c265a1be20ea2e7d01b9a971437a39fd339187bcb88edb6edbd317070aab6a647556bcebe7eb1e26f5ca92a3c6c89bf83230db8d4b57c1e39522a765f19ea5e5c9f0e0725614ac3d79c4bfda9cff7878478476f3c34367d709a8f788c34d7709e93181ca9418fe9c152be1a431732065fb65bdbce966a43e9d8e3f05f5f361943aaa4fb99c418aad37fb2935051ab0a06c39dce47482731121a1569e746b0f984f2cfc6c731d2f082c7ca8cb801b362c67a79bd123b6d1cc440b93c9e"}, @generic="a350802ebd801b05922afd536933789d32426590128f98aeefe5e589b3d3e78456cb76304a22f248d2210ae08e1ba2223b79440f669d46f0e08547c8f4f04c82ee2c5ee44782cce9036fc404eb66a30d6296e9b8388178dbfe534b385c28eaebeb55967853b80f87835e979c763b6f0bb5386ecbd0a16292a28b21f40cb530ee080bd737aa9a3774074987f04337f95c7c2010a24c13faa936f3470216dba5c0abaee856eda64d6d09643e3c7bc8bc4445699f4e00bb178f5daba6c9c898f02a73ac27901f02b30346a22f77a56df33fe88a138163cdec0b7c9adf99f3810c8bdc241c6181371177cda74f7e5106022e2d", @typed={0x8, 0x6c, 0x0, 0x0, @pid=r13}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\b\x06'}]}, @typed={0x8, 0x8f, 0x0, 0x0, @fd=r11}]}, 0x23c}}, 0x200008c1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x0, 0x5f, 0x30, 0x2e]}}, 0x0, 0x3a}, 0x20) recvmmsg(r11, &(0x7f00000015c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001300)=""/166, 0xa6}, {&(0x7f0000000500)=""/183, 0xb7}, {&(0x7f00000043c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/91, 0x5b}, {&(0x7f00000007c0)=""/211, 0xd3}], 0x5}}], 0x1, 0x0, 0x0) 1.531242127s ago: executing program 1 (id=1275): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xf6e7, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1b, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x2000000}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair(0x2c, 0x4, 0x5, &(0x7f0000000040)={0x0, 0x0}) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = epoll_create(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) epoll_wait(r2, &(0x7f0000001d00)=[{}], 0x1, 0x80000000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaabb000002000400d8928afb7028000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r5], 0x74}}, 0x0) socketpair(0x9, 0x4, 0x1000, &(0x7f0000000040)) 1.258190388s ago: executing program 3 (id=1276): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6(0xa, 0x80001, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x1f5c, 0x6}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x91, @local}, 0x10) 690.915526ms ago: executing program 4 (id=1277): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0x541b, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000140)) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000040)=ANY=[]) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x1a, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002000f5c300000000000000000a00000001000001010000020800000000140011000000eec8a5316afa53a747e7befe23ec"], 0x38}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r2, 0x5000940e, &(0x7f0000000000)={{}, "f350dbb72108e65adbb79c78fc802cf3faa81da340d7c2739f6ab73a0c72fc741fddd9d677e04a56c062dff5e0892ede7ce60701d2d463ef968190b1e069279077c55040fd3af32fdddc5b38f427d9be0ef8dc80d6a29dc88f552cd4ed87c4ece9155c3bbf79d8c01ec3c6767a8f9c0a58d433f69c01a1d386db8e292a6380e5549913241e1e7c4ff80e46007bb2ef93c6f4e5b135d5271ac3b3efe18d417cfbd56ed33e13345bf28d2a5a615d3d16cd070ae299a3fb64bde2493e38c5939a79c2f22fd79d58bfdf506fd3c5710c9e68918b72b2a48c65d553e2c3f198c222595c8694b4b415df87b61ccaa7e7c8ee8d08d76c163ba2c47ef0d14e46e59a3a16b66d1fd0ff65f0e201f5e104c3611aaecff5ef7631fa5a63cadd53adfc766af2697520d5fa336c7b38797d69a2b7f3e99752db8fcc4704d1c79078c9b3654fa17e6b1110eff6edd6a28bfe87e73a7672e35ff3523e0f663acff349779a2942585160e7c34d56377bc51c4f8b48aa43c3c1d6c0932f89501564a30ccfe4e7a163d617361fe7f76efc83b127d9c55b8671faf9808dc12b74a53602a0f9babcc25d814097b49304f215a23cba1411662511c12ba4ce478eb55a7621fc032dfbbc3e4a7c3be25795e5c1e331835dea06f216bda138d0b2e98e26b34e7dc4974d43e35c4c8f00a654d40f021ec0158a8c3504c9f3bf423be2999be447a7bc649afe855a75c0ce86742e7cd2dbdd0a4960272d99d3b186582439077a3b069bea8db8f0a12b0b72c91635bb13d2f168c3e3d9b420515444059ad48a0c8b821f47bb8690251b600b634b51de6c6c12e913ae3d5d0de435ada69bc52a90b8f55cd62aec69c3be17155a256a41f26c6c45f7c61c3c006f04289b0fc9d6e57d565cfe451f63a09aac377379df10774498ec5812c51e4add1908f44ae6047d13630742ecebfd374b3a7dc7b55b5182923a9420947bd0565dc16d5730cc816acf10a89cd5520e271d666448204fd41e3d977793ca0615137e72d7e3f8696c9d725badc06aec47b0d0c556ee2e398735f94ff87787e009d841fdc5d5cd6e98c3f1004d5706870a739d31d37697d426c63fa905f97a6805903c0f64caea3110c51014a39ee4dae91fc9ab4fdf170489764e0178a888f6497c13deafff2fec889ed6c4892be63d353ab505095ae4228ba6d6326ae736498e6891329bad27ca42afbab3f7844ec5f3cb2cb43512977dc71f72bcb8bef0d8bb5eb2354810b489341e461969bc62b985b12144ff5c078b014f63e6f813f12fb7b57c2a797f784aa7a1ef0d4c52a8b343895ced09ffe12089907b9a4a41b95fcf5d2b9d788d2df02a45cb09d4bd63edcc303d210ec48eac919eb95b5952e09814e4e7b095ed9935b3772b0d7c5e342ddd2d499e59cf52f4ec1ec44b200846dbe640305d878163d37089d5f30ab539e5624a70f691c9c8e211d47d0611b37c184936176c79612cf24b48c242d600b6b8b381cc1e66fab0ac1542486dfeaa90fb978a57995d386d3db7d8f41399c5eb6c53960c148404d43eeea75eec4e1560eb0729faf741ecf48006d24d939605e6bca3042860b80fdca39c1d8cc5fd57ab7b5fc77cb30d594b9ff702260da74676e07ae76a25ff5f45709c070faedd4c9516d9d606664a9a3091978cd2832db4998154d215888dc5d056b613b3d921fb9006c128be0994a4c40bb14185d871752e23228e7540f79ef76ee396b111019bd9a0ee3b3566bc1e8d65920ef415599e724439af911f240fcda9adf70f18668e245277ba475292a3b656720081cc8e0df44413317aae243dddb45502c469139f30093bbf0bde4dc2954a4de1e526a3e7068a40669c7bb49ab1001088e03ad6a107cbcb31f4a4025e631c49879df62e6896d8ac6750ae888b72f572b128ec8a21a6f5459494d1ea52736c01e0a7ac43559d6a5ea55bcd6ed8c01b46457c528d116dec4cdf138c2aa341ed69ad313063e231949a2873cb92245dd51646049eb62f3cc05d8dc51a252e4bcd0e73cb98d9c38acb518fdb10c02fbcbb386ebf3d6b63fd28eae605b136b48f120571c7ab5d6fc183d2eddcf31b2b218b2b23fe3e96614de981d4c3bd50ac272c8d2ab01acd64545f520f8034c2c3a98eb5f5f5ed294ace29f9b6d90a9e9c59744b9d055c6a0e4267dbd3a8505173c43fe6ee9bcc0e476cc3a23ecef33b522d07fa210c9926778cfc3a79e119a2dc6e27e8073c3e78837f1a6f281732694ecf64773b965c980acee4f915cf4e7354534f3a0ed2befe75447c19dcc5d730eb5fe27e48a433a1c306093fb58b269ab23584407fe7b960c06ee6a07511d52e9acb0c630988535343ca206e18fe7986db4f562fb11b2fdaf4dec91ff2c1d004006215ae0a599d64a19c8f5669a24a1ef96c3a756d5f1aae3aae91f44b871cfcb5afc38e86015542521fa12c1246bdc112582c309236c50209ea204b4ea1e94c67ca198e5131a5840c42c7d1ecfac21d961cc4339dd88d67637a2e365876cacef355411b887922a1c2cc22fc0f3e66cf6ff31088fe772657fb15038f99dc3df4167f76806cc60c413c6a8f51177ec69233c1119eab330d3400177a386fe09e372f410035dc1d95ddebc8b9c900473c4136f77d5c8753fcebbc5c469f406861f129aac550bcda61cbf3b957ae948aea140d9fb5e543b1b8d2d1cd42c84a93d8e82ffc826626a68aa0674bae4d3df1c66fdf9adb9543435ef45b0f965263bc00d8e9f798decca7499870cd8a316fa0495c77f5d5c6d6f7e3be0b96e124eb3a8c9d91656e1a1c19a3704ba50d365019f5f5bdd0f6090ad98f66b03e6c81409f716002ffc1d962c39aa7349d8548be1a330eaa3de06092f0e7d5c0cda05597061ff068642b38ff36b251f12fccbd116937fa8aaf8dafdac5e4869febb70901c1741b5f82f8824fa9d595187ee7f16c8df86816a1aa997faa5d6e8f26ec6415d5cf72b95f4e3b4fc601718960698ab8a3a361e1bef7f62aca46e0ac14c16fa30be6d99baa421a61e3be0a2d24381a4791b9d5b66891b4eb88e9a838b65c957c87c63c42159ad7f1dcd82f5fce07bcaa6435b55756e58aa2651e0e2081bad765705a143f4411172ba0dc69c23f09ab21b12f552b3932a7b18aa6bedcede666f647d034bb59741d6b0a98a7c514d696af11d43fd216a6ee02d67a63de32468247254790c0c93300915e2cd330d1ad847fba264cb0592f73f5919d8f85fdbd77098f1f3370c0ebeab930548971502409f8e125185da2d9989819e4edff832318452e65eca94d3e13b1300836a64018c950bf8286738bb28bb914acde8038ca369256da60333030fccb242e69b157f7d85ed7f2658e7e93eb14dc2d64ecb796c201837296b722da7f6f4d6c09adcf10d1ad09da55ccac324191883ab92031b4d2f78586cf542ce9fd7bf8ca2512c70874144219fafd53b4450aff11d847da06769c489c65f7578cc1a738420ad6d94bbb1ea1b1900cbca1986b278b99c609de491383a359fff18aee8112569978339b7af1e15bded4713fb7ce23dc6a7408dd212a88fa043c557ccc948c76e1ae8d8083740e94272a9c5e7743f05287e3c6231041809210444837fb1b3e2a0e5c0f2e2d1853eb96294687c2e19dee5f2053740f44847fb67dccbdf6b23b8930920db974313a2422bca05649ec4097b97512c15869c12084863565144e53bce07c05808951c664849d1390c2ecb3f9ef3751ad8edf7dc85bc9bab69221c72d1f93b975a82b387dfc4545d1b44553d40bf564d8129222253ad7c52e81eb661e53380723215fefed9c71ffc668a8d867594bfe2b1d49e3b5d35a4c8e030c0b709a39b065bf193faa7e24ee4db78bee19ef1e9848efc6057b4d3a4ed7037c2a32b9befe2326dbcd5859c291a676776aba8e50d4c91801b81d9ef36e483094a7533b397bc48785603d515b21e01f31b39b97636964e5f3cf22d46c3cb48a17205a14c7ec7245c170d5be4a77efe886c2fc06fc42762574e988a7f09d63f2cc7a44b474f6ea242119c451cd24bbbfcc2c9f6762d88f019979cae5ecf0a0e8a71914c78a229741138f0ed0deb5a85aa6ebe241de397d8a1870fad54589fe49f2413c6b405b5ba570049626fea2524eab06b42da2b7d2bad69024274a845983e54d8a7a4c0d2e28d114a999c68a50e79697459e8b033db677395020cca1fb928dd74219b043d789f53c484452ed38a2df3a705d51cf7366428cd661a0fe6ebd05f8f8c6be2f6af6f8a15a47f96d90698bb6e452eb72d01aab619cad86ab8f216f4190cc565848dd5b1bb21bf1a7b4522fa5809a1540f161cf22c535a8e7e3875774bd7270af248387a55f2e910dd51fb1a2b9201ea53686c964cad5afd46671fadd5b753a98bc6806d0c75c182f553216a9e5b9bd511714ac1b1d00a749f0504c430e4df5e25c040f2ea1f5824a67e4d9f9a1f78eae33d8c2a59f531915b1c499d0fa3e510d6796de0306231bcc4ce0e7e1a15cbeb46b9f2aefba14f2bc98058a3536463a5c2b03f4fbb3e1c7a1cd46c37c07ff8d0e6597eaf1992fce2b9e9e3b5278c1a40c8c8e7cdcbeed345c63e84587c7796a5dd2b607bd9812fe08805a690d590417c6779e9ec0881ca772b3b310d903ed2b9641fc181ddb320c27ef7bcfaa091c5a0e942f0a99fd0eac4c1437f9d69adccb817692c110ef0c6780abc05ea040b94b7aff0ba17aa0e923f69f6f767063dc0bb99eeb8802f29a7d68105149e35b771e41cb115322be8c67554adddcb46cac4904b0be20246ebbcb6160ead96ae41e3482d89d75ea6c782187682103e8da71b759c850d332020d3136d57f05330e68e401f4f5499763e9ca08fd388696d7f681c733db7f66abf7c17fbf195b2c961553a8d98cb8ee418738ae7c6531299c991eca5dc57dbfe19fd1688a745fd8449121244f7826f8c177e57786458a1e9456fb2297a4ff77b1037732a6562982f207d4c50342ba9de397b450572c601e3bfcbbe9804e2fc3e7d3a000f598019a5450fa59be1211c2b6a2bc5c0f86121448952097c50b695ab9caafa8dfa20f3bf04b1fa20b6bcf0a5441faa0238afacefe9288bee0429777db41e892b3a4676e37210b75b0978ce349ec080dd19c082d3646eaef5b7772f0cf4437f677b91f6d81c20592e10cdad34060637fb48f905a05fa5e26e3a8c03b1f1560050fc096c15a4b20dbdd4ff53360931a06558621be532c0e1a87be59136d13bd307af815e20b128e3e303aac47c3c32617b2d6c240e553666abd86a8d5efe8d128fec8a94077927b7bce6cf31eb463ea394d636d01cfd24055fc121ec64bda8d973b1f16845de56462b875a8069bcdd0c3128e37cadfb1bb3f652d3275b1d6534d56e16196647559e7ed7549e2a5af756d46b9140899e15e60f1a804abf285cd5bfb4bd88ad6eda2ac2642e82748ee2713902429d6b55aa9f2591328671c534a7afa8d9854d21558ff5d7f02209483b39b46c47e6a5c62b84d72c9b468155614f788a146124a90557e1f651070fe7c914c2e7090ba494d447b25a31ccadfa8e00e401230d01350755e3285226025430cff748531f99e6604bec66651e8cddefc2a579f6a7d36726dda2cdae0189fd469080e57ad818e55163ffc505e1a038e2586018c41a75f1ad53f083270154e11703a4a02b183b12eec44cba29ef52be699bfb852977c6ab3d3344a45a982af16e38bd0c2b6ed7bdead973e38db53fd5c4d90dc6dbacddf325994cc1d1c73fde984cfb3870afe2f8340b6ac6a352b827718ffe1a6"}) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a40)=@getstats={0x1c, 0x5e, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x2}}, 0x1c}, 0x1, 0xba01}, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1, 0x0, 0x0, 0x4000}}], 0x1003, 0x0, 0x0) 628.148561ms ago: executing program 1 (id=1278): r0 = socket(0x0, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xf, 0x0, 0x20}, 0xc) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x5, 0x8}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f00000003c0)=""/42, 0x2a, 0x0, &(0x7f0000000400)=""/142, 0x8e}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b7020000910c0000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000e7ffffff2d640500000000006504040001000101040400001d000000b7030000010000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000000000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc0b80e80eae8f5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d186fc108a1aae7207c3103790863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1c6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492a210e00d2bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e210dac7818b0804f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca6fd52875ed20fdecb2717e21f8f187b1866108b6e8c71e2603c176066599783568628f0309c3a01716d3706e1fa89917e131f4034a8383e99c3568fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f87b039d5430b3c6643e9146d2478ce31344b554aca78a0000eb1278c108d0747543189307e6628ef46af6792f182c06085796b4a014a912553ade941a9fa2e8f41f0bf70f165211dc714377d6d5c4ba3da5535bfeb1bba43964c8caffbd01ccf00c5be447d5dddd5640294d4d4d237a33430f5097c3c8f075e99ca30578548d78348670bd504c1baa7480ab50a8fb0bd32cd771c2aa598784b9a7ccd21f2156224cf641c3dc15fdfb0ecde6ec785ac33a030dcaa07c99f6082edac614c6963ec0f72e4fa1e4474faf47924ffd6adf612dbe4d82722c8a89f4af79fef43f3a28f55b18f44ce9a4e996bb5063e07c08b5540d4bf5f54545b048ec97ae17a6c8bfe0288b6735b394d33892799263d35f88de155340da0ef8bed60bb396510d7b6195f42d4a3fe52a41957a55d08150afe7df313f240e780f99ef5203b9061b77df8e696c54e0d7e7883288cb9b0aaf4ec027662c4f06146fdc27b9e79aa9648d13a55a668cebc1515ebb4c4f5d1b850000000000007f70284468a76ab526d9f8159dd34fe76bf6a06207dba0d137a84da4127dd1c6e281afb2c455daa87397f3a64f40605fc49538364aea133f985041489ba97d56a7a3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x1f2f, 0xd, 0x0, &(0x7f00000007c0)="9f44948721919580684010a486", 0x0, 0x161, 0x0, 0x0, 0x0, &(0x7f0000000700)}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x12, &(0x7f00000001c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0x26}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}], &(0x7f0000000100)='syzkaller\x00', 0x0, 0xda, &(0x7f0000000280)=""/218, 0x41000, 0x10, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0x1, 0x0, 0x1f}, 0x10, 0x0, r5, 0x2, &(0x7f0000000600)=[r6], &(0x7f0000000640)=[{0x2, 0x3, 0xb}, {0x5, 0x2, 0x0, 0x5}]}, 0x90) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000020240), 0x10010) r9 = socket(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0xb, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r8, 0x0) r11 = epoll_create(0x7) r12 = epoll_create1(0x0) r13 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r12, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r7, &(0x7f0000000000)) 307.984547ms ago: executing program 3 (id=1279): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1e, 0x80005, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000040400000000000000000000010500000008000000000000000000000300000000020000000200000000000000000000000000000d"], 0x0, 0x5a}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newtfilter={0x2c, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0xc}, {0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x1, 0xc4}}]}, 0x2c}, 0x1, 0xf0ffffffffffff}, 0x0) 241.121275ms ago: executing program 4 (id=1280): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x44b, 0x10101, 0x0) socket$alg(0x26, 0x5, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) bind$inet(0xffffffffffffffff, 0x0, 0x0) 51.493004ms ago: executing program 3 (id=1281): syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004d0000480000000000069078ac141400ac1e0001830bdfac1414aa00000000440c050300000006000000008606000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50d7200090780000"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140)=0x2958, 0x4) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x293, 0x0, 0xffffffff}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5c, 0x2, [@TCA_CGROUP_ACT={0x58}]}}]}, 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xbdcf62110a6cbb4f, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6b9, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x35740b07}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0x8, 0xe2, &(0x7f0000000340)=""/226, 0x41100, 0x22, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000900)=[{0x4, 0x2, 0xe, 0x8}, {0x0, 0x2, 0xe, 0x5}], 0x10, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0x12, &(0x7f0000000240)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x0, 0x3, 0x4, 0x9, 0x2, 0x10, 0x1}, @ldst={0x2, 0x2, 0x1, 0x1, 0x2, 0xffffffffffffffe0, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x1, 0x0, 0x4, 0x6, 0x9, 0x40, 0xfffffffffffffffc}], &(0x7f0000000300)='GPL\x00', 0xffffea5b, 0x1000, &(0x7f0000001640)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x8, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000780)=[r3, r3, r3, r3], 0x0, 0x10, 0x80000001}, 0x90) sendto$packet(0xffffffffffffffff, &(0x7f0000001580)="0d6e7a5da30ad545ed65a5f481ccc2ab10e0d582cf26b512a7ce135c57225700e559dd2a34473e7b54a90246ec0892e0a007279abc8e304d3a2cc5c22e13e0cb69ec5f644575addebbca7cdfc350db1ee3cc73994dc19cf8a434faa48b73e53d0b56a28b2d76140d4567ef826bc05f9a27ce2fb122aabdbbb08258984be58ac8b61fde06101a62154093c927ff89578b9a69ddf1467fe09976968adc0f226b20773ba9dd087f25fd42a27a609fb46d98043eef3db5fdfb54a206", 0xba, 0x0, &(0x7f00000014c0)={0x11, 0xc, 0x0, 0x1, 0x7f, 0x6, @remote}, 0x14) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000000800)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="0800040064010101140003006d6163766c616e310000000000000000140006000000000014000000030000000800000008000a00020000001400030076657468315f6d616376746170000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000080}, 0x884) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000012c0)={@ipv4={""/10, ""/2, @empty}}, &(0x7f0000001300)=0x14) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000001240)={0x0, 0x6}, 0x4) 0s ago: executing program 4 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400fff01800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}}, 0x0) kernel console output (not intermixed with test programs): nsions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.281649][ T5673] caif0 speed is unknown, defaulting to 1000 [ 83.294701][ T5791] __nla_validate_parse: 6 callbacks suppressed [ 83.294720][ T5791] netlink: 72 bytes leftover after parsing attributes in process `syz.3.207'. [ 83.763891][ T5804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.209'. [ 83.968166][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 84.437783][ T5834] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 84.791953][ T5850] netlink: 830 bytes leftover after parsing attributes in process `syz.0.227'. [ 84.879982][ T5856] tipc: Started in network mode [ 84.885025][ T5856] tipc: Node identity 0a2eab7267eb, cluster identity 4711 [ 84.904689][ T5850] netlink: 'syz.0.227': attribute type 3 has an invalid length. [ 84.910664][ T5856] tipc: Enabled bearer , priority 0 [ 85.024090][ T5854] tipc: Disabling bearer [ 85.175766][ T5868] tunl0: entered promiscuous mode [ 85.273752][ T5868] netlink: 'syz.0.232': attribute type 4 has an invalid length. [ 85.304231][ T5868] netlink: 9 bytes leftover after parsing attributes in process `syz.0.232'. [ 85.340943][ T5870] netlink: 24 bytes leftover after parsing attributes in process `syz.4.233'. [ 85.466898][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'. [ 85.562803][ T5880] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 85.586659][ T5880] Bluetooth: MGMT ver 1.23 [ 85.598784][ T5880] Bluetooth: hci3: invalid len left 7, exp >= 46 [ 86.055970][ T5886] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 86.440784][ T5904] xt_NFQUEUE: number of total queues is 0 [ 86.506314][ T5906] tunl0: entered promiscuous mode [ 86.526214][ T5906] netlink: 'syz.1.245': attribute type 4 has an invalid length. [ 86.545316][ T5906] netlink: 9 bytes leftover after parsing attributes in process `syz.1.245'. [ 86.622305][ T5908] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 86.849139][ T5912] caif0 speed is unknown, defaulting to 1000 [ 86.995384][ T5920] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 88.179862][ T5958] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 88.311935][ T5960] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 88.620731][ T5968] tunl0: entered promiscuous mode [ 88.700425][ T5968] netlink: 'syz.4.264': attribute type 4 has an invalid length. [ 88.708138][ T5968] netlink: 9 bytes leftover after parsing attributes in process `syz.4.264'. [ 88.771071][ T5977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.977989][ T5981] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 89.268204][ T5992] caif0 speed is unknown, defaulting to 1000 [ 90.049671][ T6003] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 90.459063][ T6023] netlink: 16 bytes leftover after parsing attributes in process `syz.4.283'. [ 90.538688][ T6022] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 90.820250][ T6040] netlink: 'syz.1.290': attribute type 3 has an invalid length. [ 90.857704][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.289'. [ 90.881487][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 91.102121][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 91.132095][ T6054] netlink: 20 bytes leftover after parsing attributes in process `syz.3.295'. [ 91.237866][ T6059] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'. [ 91.252081][ T6057] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 91.330017][ T6063] netlink: 3 bytes leftover after parsing attributes in process `syz.3.299'. [ 91.430701][ T6067] xt_CT: You must specify a L4 protocol and not use inversions on it [ 91.566197][ T6063] netlink: 'syz.3.299': attribute type 1 has an invalid length. [ 91.583571][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.299'. [ 91.604056][ T6076] FAULT_INJECTION: forcing a failure. [ 91.604056][ T6076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.621182][ T6076] CPU: 1 PID: 6076 Comm: syz.2.303 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 91.631225][ T6076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 91.637245][ T6063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.299'. [ 91.641280][ T6076] Call Trace: [ 91.641324][ T6076] [ 91.641334][ T6076] dump_stack_lvl+0x241/0x360 [ 91.641365][ T6076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.641386][ T6076] ? __pfx__printk+0x10/0x10 [ 91.641414][ T6076] ? snprintf+0xda/0x120 [ 91.641434][ T6076] should_fail_ex+0x3b0/0x4e0 [ 91.641465][ T6076] _copy_to_user+0x2f/0xb0 [ 91.641488][ T6076] simple_read_from_buffer+0xca/0x150 [ 91.641514][ T6076] proc_fail_nth_read+0x1e9/0x250 [ 91.641539][ T6076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.641562][ T6076] ? rw_verify_area+0x520/0x6b0 [ 91.641580][ T6076] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.641600][ T6076] vfs_read+0x204/0xbc0 [ 91.715088][ T6076] ? __pfx_lock_release+0x10/0x10 [ 91.720130][ T6076] ? __pfx_vfs_read+0x10/0x10 [ 91.724805][ T6076] ? __fget_files+0x29/0x470 [ 91.729393][ T6076] ? __fget_files+0x3f6/0x470 [ 91.734072][ T6076] ksys_read+0x1a0/0x2c0 [ 91.738311][ T6076] ? __pfx_bpf_trace_run2+0x10/0x10 [ 91.743514][ T6076] ? __pfx_ksys_read+0x10/0x10 [ 91.748270][ T6076] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 91.754343][ T6076] ? rcu_is_watching+0x15/0xb0 [ 91.759104][ T6076] ? trace_sys_enter+0x1f/0xd0 [ 91.763870][ T6076] do_syscall_64+0xf3/0x230 [ 91.768370][ T6076] ? clear_bhb_loop+0x35/0x90 [ 91.773063][ T6076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.778967][ T6076] RIP: 0033:0x7f3ca01744fc [ 91.783378][ T6076] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 91.802979][ T6076] RSP: 002b:00007f3ca0f64040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.811397][ T6076] RAX: ffffffffffffffda RBX: 00007f3ca0303f60 RCX: 00007f3ca01744fc [ 91.819365][ T6076] RDX: 000000000000000f RSI: 00007f3ca0f640b0 RDI: 0000000000000004 [ 91.827330][ T6076] RBP: 00007f3ca0f640a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.835294][ T6076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.843259][ T6076] R13: 000000000000004d R14: 00007f3ca0303f60 R15: 00007ffce6f556b8 [ 91.851238][ T6076] [ 92.504502][ T6095] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 92.532190][ T6106] unsupported nlmsg_type 40 [ 92.764591][ T6114] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.818109][ T6114] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 92.986583][ T6121] bridge0: entered promiscuous mode [ 92.994184][ T6121] macvtap1: entered promiscuous mode [ 93.005282][ T6121] macvtap1: entered allmulticast mode [ 93.019021][ T6121] bridge0: entered allmulticast mode [ 93.065194][ T6129] bridge0: left allmulticast mode [ 93.085518][ T6129] bridge0: left promiscuous mode [ 93.127176][ T6129] macvtap1: left promiscuous mode [ 93.153635][ T6129] macvtap1: left allmulticast mode [ 93.450162][ T6142] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 93.698012][ T6156] bridge0: entered promiscuous mode [ 93.717037][ T6156] macvtap2: entered promiscuous mode [ 93.724855][ T6156] macvtap2: entered allmulticast mode [ 93.736523][ T6156] bridge0: entered allmulticast mode [ 93.744789][ T6163] __nla_validate_parse: 12 callbacks suppressed [ 93.744808][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.336'. [ 93.805111][ T6163] bridge0: entered promiscuous mode [ 93.823863][ T6163] macvtap1: entered promiscuous mode [ 93.850675][ T6163] macvtap1: entered allmulticast mode [ 93.875228][ T6163] bridge0: entered allmulticast mode [ 93.897724][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.334'. [ 93.925010][ T6164] bridge0: left allmulticast mode [ 93.931119][ T6164] bridge0: left promiscuous mode [ 93.952943][ T6164] macvtap2: left promiscuous mode [ 93.960631][ T6164] macvtap2: left allmulticast mode [ 93.987131][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.336'. [ 94.041321][ T6166] bridge0: left allmulticast mode [ 94.078143][ T6166] bridge0: left promiscuous mode [ 94.102127][ T6166] macvtap1: left promiscuous mode [ 94.107224][ T6166] macvtap1: left allmulticast mode [ 94.315037][ T6187] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 94.324666][ T6195] netlink: 184 bytes leftover after parsing attributes in process `syz.3.347'. [ 94.357881][ T6195] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 94.940940][ T6226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 94.978706][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'. [ 94.996176][ T6232] netlink: 256 bytes leftover after parsing attributes in process `syz.1.358'. [ 95.008208][ T6226] bridge0: entered promiscuous mode [ 95.015113][ T6226] macvtap1: entered promiscuous mode [ 95.021078][ T6226] macvtap1: entered allmulticast mode [ 95.026461][ T6226] bridge0: entered allmulticast mode [ 95.034148][ T6236] netlink: 44 bytes leftover after parsing attributes in process `syz.3.356'. [ 95.039213][ T6234] netlink: 'syz.4.359': attribute type 16 has an invalid length. [ 95.054656][ T6234] netlink: 'syz.4.359': attribute type 17 has an invalid length. [ 95.075892][ T6234] tunl0: left promiscuous mode [ 95.088166][ T6238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.116255][ T6238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.381523][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.390177][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.783725][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.825917][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.139900][ T6234] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.149079][ T6234] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.158213][ T6234] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.167970][ T6234] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.268153][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.355'. [ 96.284952][ T6235] bridge0: left allmulticast mode [ 96.290875][ T6235] bridge0: left promiscuous mode [ 96.295966][ T6235] macvtap1: left promiscuous mode [ 96.306851][ T6235] macvtap1: left allmulticast mode [ 96.533991][ T6210] delete_channel: no stack [ 96.625333][ T6260] syzkaller1: entered promiscuous mode [ 96.668007][ T6260] syzkaller1: entered allmulticast mode [ 96.951326][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 96.977441][ T6281] bridge0: entered promiscuous mode [ 96.989335][ T6281] macvtap2: entered promiscuous mode [ 97.003545][ T6281] macvtap2: entered allmulticast mode [ 97.009959][ T6281] bridge0: entered allmulticast mode [ 97.017664][ T6285] bridge0: left allmulticast mode [ 97.049363][ T6285] bridge0: left promiscuous mode [ 97.066179][ T6287] netlink: 'syz.1.373': attribute type 3 has an invalid length. [ 97.078003][ T6285] macvtap2: left promiscuous mode [ 97.092907][ T6285] macvtap2: left allmulticast mode [ 97.127937][ T6289] FAULT_INJECTION: forcing a failure. [ 97.127937][ T6289] name failslab, interval 1, probability 0, space 0, times 0 [ 97.198707][ T6289] CPU: 0 PID: 6289 Comm: syz.3.374 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 97.208750][ T6289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.218827][ T6289] Call Trace: [ 97.222130][ T6289] [ 97.225083][ T6289] dump_stack_lvl+0x241/0x360 [ 97.229792][ T6289] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.235020][ T6289] ? __pfx__printk+0x10/0x10 [ 97.239651][ T6289] ? tcp_established_options+0x3c1/0x800 [ 97.245369][ T6289] should_fail_ex+0x3b0/0x4e0 [ 97.250090][ T6289] ? __alloc_skb+0x1c3/0x440 [ 97.254715][ T6289] should_failslab+0x9/0x20 [ 97.259248][ T6289] kmem_cache_alloc_node_noprof+0x71/0x320 [ 97.265095][ T6289] ? tcp_current_mss+0x29b/0x4d0 [ 97.270063][ T6289] __alloc_skb+0x1c3/0x440 [ 97.274517][ T6289] ? __pfx___alloc_skb+0x10/0x10 [ 97.279500][ T6289] tcp_stream_alloc_skb+0x3d/0x310 [ 97.284657][ T6289] tcp_sendmsg_locked+0xd6a/0x4e10 [ 97.289813][ T6289] ? __lock_acquire+0x1346/0x1fd0 [ 97.294890][ T6289] ? mark_lock+0x9a/0x350 [ 97.299266][ T6289] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 97.304846][ T6289] ? __local_bh_enable_ip+0x168/0x200 [ 97.310250][ T6289] ? do_raw_spin_unlock+0x13c/0x8b0 [ 97.315497][ T6289] tcp_sendmsg+0x30/0x50 [ 97.319779][ T6289] __sock_sendmsg+0x1a6/0x270 [ 97.324498][ T6289] ____sys_sendmsg+0x525/0x7d0 [ 97.329310][ T6289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.334649][ T6289] __sys_sendmmsg+0x3b2/0x740 [ 97.339371][ T6289] ? __pfx___sys_sendmmsg+0x10/0x10 [ 97.344645][ T6289] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 97.350584][ T6289] ? ksys_write+0x23e/0x2c0 [ 97.355120][ T6289] ? __pfx_lock_release+0x10/0x10 [ 97.360202][ T6289] ? vfs_write+0x7c4/0xc90 [ 97.364655][ T6289] ? __mutex_unlock_slowpath+0x21d/0x750 [ 97.370320][ T6289] ? __pfx_vfs_write+0x10/0x10 [ 97.375144][ T6289] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.381190][ T6289] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.387554][ T6289] ? do_syscall_64+0x100/0x230 [ 97.392355][ T6289] __x64_sys_sendmmsg+0xa0/0xb0 [ 97.397247][ T6289] do_syscall_64+0xf3/0x230 [ 97.401783][ T6289] ? clear_bhb_loop+0x35/0x90 [ 97.406488][ T6289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.412418][ T6289] RIP: 0033:0x7fc3fcd75a19 [ 97.417043][ T6289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.436682][ T6289] RSP: 002b:00007fc3fdab7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 97.445130][ T6289] RAX: ffffffffffffffda RBX: 00007fc3fcf03f60 RCX: 00007fc3fcd75a19 [ 97.453131][ T6289] RDX: 0000000000000001 RSI: 0000000020003400 RDI: 0000000000000003 [ 97.461131][ T6289] RBP: 00007fc3fdab70a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.469135][ T6289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.477134][ T6289] R13: 000000000000000b R14: 00007fc3fcf03f60 R15: 00007ffef6f55c88 [ 97.485152][ T6289] [ 97.667094][ T6308] FAULT_INJECTION: forcing a failure. [ 97.667094][ T6308] name failslab, interval 1, probability 0, space 0, times 0 [ 97.686796][ T6308] CPU: 1 PID: 6308 Comm: syz.1.381 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 97.696846][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 97.706928][ T6308] Call Trace: [ 97.710230][ T6308] [ 97.713192][ T6308] dump_stack_lvl+0x241/0x360 [ 97.717910][ T6308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.723148][ T6308] ? __pfx__printk+0x10/0x10 [ 97.727779][ T6308] ? __pfx___might_resched+0x10/0x10 [ 97.733102][ T6308] ? validate_chain+0x11e/0x5900 [ 97.738085][ T6308] should_fail_ex+0x3b0/0x4e0 [ 97.742811][ T6308] should_failslab+0x9/0x20 [ 97.747341][ T6308] kmalloc_node_trace_noprof+0x74/0x300 [ 97.752897][ T6308] ? __get_vm_area_node+0x113/0x270 [ 97.758107][ T6308] __get_vm_area_node+0x113/0x270 [ 97.763160][ T6308] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 97.769101][ T6308] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 97.774683][ T6308] ? mark_lock+0x9a/0x350 [ 97.779061][ T6308] ? aa_get_newest_label+0xff/0x6f0 [ 97.784294][ T6308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 97.790652][ T6308] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 97.796199][ T6308] __vmalloc_noprof+0x79/0x90 [ 97.800883][ T6308] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 97.806426][ T6308] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 97.811793][ T6308] ? bpf_prog_alloc+0x28/0x1b0 [ 97.816553][ T6308] bpf_prog_alloc+0x3a/0x1b0 [ 97.821144][ T6308] bpf_prog_load+0x7f7/0x20f0 [ 97.825827][ T6308] ? __pfx_bpf_prog_load+0x10/0x10 [ 97.830933][ T6308] ? __pfx___might_resched+0x10/0x10 [ 97.836225][ T6308] ? __might_fault+0xc6/0x120 [ 97.840899][ T6308] ? bpf_lsm_bpf+0x9/0x10 [ 97.845223][ T6308] ? security_bpf+0x87/0xb0 [ 97.849724][ T6308] __sys_bpf+0x4ee/0x810 [ 97.853968][ T6308] ? __pfx___sys_bpf+0x10/0x10 [ 97.858740][ T6308] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 97.864718][ T6308] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.871126][ T6308] ? do_syscall_64+0x100/0x230 [ 97.875895][ T6308] __x64_sys_bpf+0x7c/0x90 [ 97.880333][ T6308] do_syscall_64+0xf3/0x230 [ 97.884835][ T6308] ? clear_bhb_loop+0x35/0x90 [ 97.889511][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.895410][ T6308] RIP: 0033:0x7f574e175a19 [ 97.899835][ T6308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.919437][ T6308] RSP: 002b:00007f574f00b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 97.927849][ T6308] RAX: ffffffffffffffda RBX: 00007f574e303f60 RCX: 00007f574e175a19 [ 97.935818][ T6308] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 97.943783][ T6308] RBP: 00007f574f00b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.951749][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.959820][ T6308] R13: 000000000000004d R14: 00007f574e303f60 R15: 00007fff171a6258 [ 97.967813][ T6308] [ 97.982537][ T6308] syz.1.381: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 98.033984][ T6308] CPU: 1 PID: 6308 Comm: syz.1.381 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 98.044025][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.054108][ T6308] Call Trace: [ 98.057421][ T6308] [ 98.060381][ T6308] dump_stack_lvl+0x241/0x360 [ 98.065108][ T6308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.070344][ T6308] ? __pfx__printk+0x10/0x10 [ 98.074989][ T6308] ? __rcu_read_unlock+0xa1/0x110 [ 98.080061][ T6308] warn_alloc+0x278/0x410 [ 98.084450][ T6308] ? __pfx_warn_alloc+0x10/0x10 [ 98.089314][ T6308] ? __get_vm_area_node+0x113/0x270 [ 98.094530][ T6308] ? __get_vm_area_node+0x261/0x270 [ 98.099727][ T6308] __vmalloc_node_range_noprof+0x3e0/0x1460 [ 98.105644][ T6308] ? mark_lock+0x9a/0x350 [ 98.109981][ T6308] ? aa_get_newest_label+0xff/0x6f0 [ 98.115194][ T6308] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 98.121542][ T6308] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 98.127076][ T6308] __vmalloc_noprof+0x79/0x90 [ 98.131780][ T6308] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 98.137319][ T6308] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 98.142687][ T6308] ? bpf_prog_alloc+0x28/0x1b0 [ 98.147471][ T6308] bpf_prog_alloc+0x3a/0x1b0 [ 98.152072][ T6308] bpf_prog_load+0x7f7/0x20f0 [ 98.156765][ T6308] ? __pfx_bpf_prog_load+0x10/0x10 [ 98.161869][ T6308] ? __pfx___might_resched+0x10/0x10 [ 98.167159][ T6308] ? __might_fault+0xc6/0x120 [ 98.171844][ T6308] ? bpf_lsm_bpf+0x9/0x10 [ 98.176195][ T6308] ? security_bpf+0x87/0xb0 [ 98.180696][ T6308] __sys_bpf+0x4ee/0x810 [ 98.184942][ T6308] ? __pfx___sys_bpf+0x10/0x10 [ 98.189710][ T6308] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 98.195707][ T6308] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.202061][ T6308] ? do_syscall_64+0x100/0x230 [ 98.206829][ T6308] __x64_sys_bpf+0x7c/0x90 [ 98.211247][ T6308] do_syscall_64+0xf3/0x230 [ 98.215767][ T6308] ? clear_bhb_loop+0x35/0x90 [ 98.220436][ T6308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.226329][ T6308] RIP: 0033:0x7f574e175a19 [ 98.230739][ T6308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.250346][ T6308] RSP: 002b:00007f574f00b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 98.258806][ T6308] RAX: ffffffffffffffda RBX: 00007f574e303f60 RCX: 00007f574e175a19 [ 98.266773][ T6308] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 98.274737][ T6308] RBP: 00007f574f00b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.282703][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.290673][ T6308] R13: 000000000000004d R14: 00007f574e303f60 R15: 00007fff171a6258 [ 98.298663][ T6308] [ 98.326863][ T6308] Mem-Info: [ 98.338207][ T6308] active_anon:4209 inactive_anon:0 isolated_anon:0 [ 98.338207][ T6308] active_file:1639 inactive_file:38144 isolated_file:0 [ 98.338207][ T6308] unevictable:768 dirty:266 writeback:0 [ 98.338207][ T6308] slab_reclaimable:8734 slab_unreclaimable:97848 [ 98.338207][ T6308] mapped:13533 shmem:1256 pagetables:737 [ 98.338207][ T6308] sec_pagetables:0 bounce:0 [ 98.338207][ T6308] kernel_misc_reclaimable:0 [ 98.338207][ T6308] free:1406029 free_pcp:1105 free_cma:0 [ 98.404584][ T6308] Node 0 active_anon:16736kB inactive_anon:0kB active_file:6556kB inactive_file:152500kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:54132kB dirty:1064kB writeback:0kB shmem:3488kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10248kB pagetables:2948kB sec_pagetables:0kB all_unreclaimable? no [ 98.461303][ T6308] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 98.493960][ T6308] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 98.529505][ T6308] lowmem_reserve[]: 0 2571 2571 0 0 [ 98.537841][ T6308] Node 0 DMA32 free:1658956kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:16840kB inactive_anon:0kB active_file:6556kB inactive_file:152192kB unevictable:1536kB writepending:1080kB present:3129332kB managed:2659832kB mlocked:0kB bounce:0kB free_pcp:1300kB local_pcp:372kB free_cma:0kB [ 98.587634][ T6308] lowmem_reserve[]: 0 0 0 0 0 [ 98.598076][ T6308] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 98.644580][ T6308] lowmem_reserve[]: 0 0 0 0 0 [ 98.661626][ T6325] bridge0: entered promiscuous mode [ 98.667186][ T6308] Node 1 Normal free:3949580kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:2188kB local_pcp:0kB free_cma:0kB [ 98.707170][ T6325] macvtap2: entered promiscuous mode [ 98.715762][ T6325] macvtap2: entered allmulticast mode [ 98.724891][ T6325] bridge0: entered allmulticast mode [ 98.733415][ T6308] lowmem_reserve[]: 0 0 0 0 0 [ 98.734985][ T6332] sctp: [Deprecated]: syz.3.387 (pid 6332) Use of int in maxseg socket option. [ 98.734985][ T6332] Use struct sctp_assoc_value instead [ 98.740975][ T6308] Node 0 [ 98.764345][ T6331] bridge0: left allmulticast mode [ 98.776548][ T6308] DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 98.790515][ T6331] bridge0: left promiscuous mode [ 98.801641][ T6331] macvtap2: left promiscuous mode [ 98.807464][ T6331] macvtap2: left allmulticast mode [ 98.815317][ T6308] Node 0 DMA32: 1*4kB (M) 12*8kB (UME) 64*16kB (UME) 48*32kB (UME) 133*64kB (UME) 66*128kB (UME) 32*256kB (UME) 4*512kB (ME) 2*1024kB (UM) 0*2048kB 397*4096kB (M) = 1658020kB [ 98.846468][ T6335] tipc: Enabled bearer , priority 10 [ 98.866780][ T6337] __nla_validate_parse: 7 callbacks suppressed [ 98.866802][ T6337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.390'. [ 98.873732][ T6308] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 98.940961][ T6337] bridge0: entered promiscuous mode [ 98.946562][ T6337] macvtap3: entered promiscuous mode [ 98.956844][ T6308] Node 1 Normal: 1*4kB (M) 1*8kB (U) 4*16kB (U) 6*32kB (U) 2*64kB (UM) 1*128kB (U) 4*256kB (U) 3*512kB (UM) 2*1024kB (U) 2*2048kB (U) 962*4096kB (UM) = 3949580kB [ 98.988713][ T6337] macvtap3: entered allmulticast mode [ 98.995472][ T6337] bridge0: entered allmulticast mode [ 99.003733][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.390'. [ 99.012935][ T6308] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.012959][ T6308] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.012974][ T6308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 99.012990][ T6308] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 99.057102][ T6346] bridge0: left allmulticast mode [ 99.077571][ T6346] bridge0: left promiscuous mode [ 99.079889][ T6308] 41043 total pagecache pages [ 99.093846][ T6346] macvtap3: left promiscuous mode [ 99.095890][ T6308] 0 pages in swap cache [ 99.106076][ T6346] macvtap3: left allmulticast mode [ 99.133446][ T6308] Free swap = 124996kB [ 99.152316][ T6308] Total swap = 124996kB [ 99.165063][ T6308] 2097051 pages RAM [ 99.172471][ T6308] 0 pages HighMem/MovableOnly [ 99.204231][ T6308] 400883 pages reserved [ 99.218959][ T6308] 0 pages cma reserved [ 99.699485][ T6373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 99.770650][ T6373] bridge0: entered promiscuous mode [ 99.776498][ T6373] macvtap1: entered promiscuous mode [ 99.830779][ T6373] macvtap1: entered allmulticast mode [ 99.856570][ T6373] bridge0: entered allmulticast mode [ 99.878604][ T6375] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 99.886697][ T6379] xt_ecn: cannot match TCP bits for non-tcp packets [ 99.920328][ T6375] bridge0: left allmulticast mode [ 99.931513][ T6375] bridge0: left promiscuous mode [ 99.937272][ T6375] macvtap1: left promiscuous mode [ 99.942699][ T6375] macvtap1: left allmulticast mode [ 99.981811][ T5142] tipc: Node number set to 1881674233 [ 100.086718][ T6389] netlink: 56 bytes leftover after parsing attributes in process `syz.2.407'. [ 100.116139][ T6388] netlink: 56 bytes leftover after parsing attributes in process `syz.2.407'. [ 100.254819][ T6397] netlink: 'syz.4.412': attribute type 10 has an invalid length. [ 100.321137][ T6397] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.360746][ T6397] bond0: (slave team0): Enslaving as an active interface with an up link [ 100.649498][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 100.686534][ T6417] bridge0: entered promiscuous mode [ 100.711193][ T6417] macvtap4: entered promiscuous mode [ 100.716851][ T6417] macvtap4: entered allmulticast mode [ 100.756810][ T6417] bridge0: entered allmulticast mode [ 100.771293][ T6424] netlink: 12 bytes leftover after parsing attributes in process `syz.3.418'. [ 100.794170][ T6424] bridge0: left allmulticast mode [ 100.803291][ T6424] bridge0: left promiscuous mode [ 100.827702][ T6424] macvtap4: left promiscuous mode [ 100.842607][ T6424] macvtap4: left allmulticast mode [ 100.879274][ T6429] FAULT_INJECTION: forcing a failure. [ 100.879274][ T6429] name failslab, interval 1, probability 0, space 0, times 0 [ 100.909038][ T6429] CPU: 0 PID: 6429 Comm: syz.2.421 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 100.919082][ T6429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 100.929158][ T6429] Call Trace: [ 100.932439][ T6429] [ 100.935357][ T6429] dump_stack_lvl+0x241/0x360 [ 100.940043][ T6429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.945287][ T6429] ? __pfx__printk+0x10/0x10 [ 100.949926][ T6429] ? __pfx___might_resched+0x10/0x10 [ 100.955256][ T6429] should_fail_ex+0x3b0/0x4e0 [ 100.959977][ T6429] should_failslab+0x9/0x20 [ 100.964508][ T6429] __kmalloc_node_noprof+0xdf/0x440 [ 100.969735][ T6429] ? kvmalloc_node_noprof+0x72/0x190 [ 100.975060][ T6429] kvmalloc_node_noprof+0x72/0x190 [ 100.980212][ T6429] alloc_netdev_mqs+0x8ab/0x1000 [ 100.985187][ T6429] ip6_tnl_locate+0x607/0x820 [ 100.989904][ T6429] ? __pfx_ip6_tnl_locate+0x10/0x10 [ 100.995145][ T6429] ? __might_fault+0xc6/0x120 [ 100.999853][ T6429] ? ip6_tnl_siocdevprivate+0x9c3/0x1700 [ 101.005537][ T6429] ip6_tnl_siocdevprivate+0x9e9/0x1700 [ 101.011059][ T6429] ? __pfx_ip6_tnl_siocdevprivate+0x10/0x10 [ 101.017261][ T6429] ? do_raw_spin_unlock+0x13c/0x8b0 [ 101.022514][ T6429] ? full_name_hash+0x93/0xe0 [ 101.027231][ T6429] dev_ifsioc+0xaec/0xe70 [ 101.031599][ T6429] ? __pfx_dev_ifsioc+0x10/0x10 [ 101.036488][ T6429] ? dev_load+0x21/0x1f0 [ 101.040770][ T6429] dev_ioctl+0x881/0x1340 [ 101.045142][ T6429] sock_ioctl+0x7f2/0x8e0 [ 101.049509][ T6429] ? __pfx_sock_ioctl+0x10/0x10 [ 101.054386][ T6429] ? __fget_files+0x3f6/0x470 [ 101.059074][ T6429] ? __fget_files+0x29/0x470 [ 101.063667][ T6429] ? bpf_lsm_file_ioctl+0x9/0x10 [ 101.068605][ T6429] ? security_file_ioctl+0x87/0xb0 [ 101.073724][ T6429] ? __pfx_sock_ioctl+0x10/0x10 [ 101.078575][ T6429] __se_sys_ioctl+0xfc/0x170 [ 101.083165][ T6429] do_syscall_64+0xf3/0x230 [ 101.087667][ T6429] ? clear_bhb_loop+0x35/0x90 [ 101.092688][ T6429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.098582][ T6429] RIP: 0033:0x7f3ca0175a19 [ 101.102992][ T6429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.122601][ T6429] RSP: 002b:00007f3ca0f43048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.131028][ T6429] RAX: ffffffffffffffda RBX: 00007f3ca0304038 RCX: 00007f3ca0175a19 [ 101.139005][ T6429] RDX: 0000000020000200 RSI: 00000000000089f1 RDI: 0000000000000008 [ 101.146977][ T6429] RBP: 00007f3ca0f430a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.154954][ T6429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.162919][ T6429] R13: 000000000000006e R14: 00007f3ca0304038 R15: 00007ffce6f556b8 [ 101.170904][ T6429] [ 101.268001][ T6439] ip6t_srh: unknown srh match flags 5294 [ 101.514991][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 101.575903][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.432'. [ 101.608251][ T6455] bridge0: entered promiscuous mode [ 101.634663][ T6455] macvtap5: entered promiscuous mode [ 101.643123][ T6455] macvtap5: entered allmulticast mode [ 101.661655][ T6455] bridge0: entered allmulticast mode [ 101.671452][ T6459] bridge0: left allmulticast mode [ 101.678135][ T6459] bridge0: left promiscuous mode [ 101.730781][ T6459] macvtap5: left promiscuous mode [ 101.745884][ T6459] macvtap5: left allmulticast mode [ 101.827243][ T6457] caif0 speed is unknown, defaulting to 1000 [ 102.205014][ T6474] FAULT_INJECTION: forcing a failure. [ 102.205014][ T6474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.260936][ T6474] CPU: 0 PID: 6474 Comm: syz.3.437 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 102.271066][ T6474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 102.281147][ T6474] Call Trace: [ 102.284445][ T6474] [ 102.287389][ T6474] dump_stack_lvl+0x241/0x360 [ 102.292091][ T6474] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.297316][ T6474] ? __pfx__printk+0x10/0x10 [ 102.301933][ T6474] ? __pfx_lock_release+0x10/0x10 [ 102.306983][ T6474] should_fail_ex+0x3b0/0x4e0 [ 102.311697][ T6474] _copy_from_user+0x2f/0xe0 [ 102.316331][ T6474] generic_map_update_batch+0x567/0x900 [ 102.321933][ T6474] ? __pfx_generic_map_update_batch+0x10/0x10 [ 102.328048][ T6474] ? __pfx_generic_map_update_batch+0x10/0x10 [ 102.334160][ T6474] bpf_map_do_batch+0x3e0/0x690 [ 102.339046][ T6474] __sys_bpf+0x377/0x810 [ 102.343330][ T6474] ? __pfx___sys_bpf+0x10/0x10 [ 102.348136][ T6474] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.354150][ T6474] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.360516][ T6474] ? do_syscall_64+0x100/0x230 [ 102.365301][ T6474] __x64_sys_bpf+0x7c/0x90 [ 102.369731][ T6474] do_syscall_64+0xf3/0x230 [ 102.374325][ T6474] ? clear_bhb_loop+0x35/0x90 [ 102.378997][ T6474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.384887][ T6474] RIP: 0033:0x7fc3fcd75a19 [ 102.389293][ T6474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.408893][ T6474] RSP: 002b:00007fc3fdab7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.417307][ T6474] RAX: ffffffffffffffda RBX: 00007fc3fcf03f60 RCX: 00007fc3fcd75a19 [ 102.425274][ T6474] RDX: 0000000000000038 RSI: 0000000020000200 RDI: 000000000000001a [ 102.433241][ T6474] RBP: 00007fc3fdab70a0 R08: 0000000000000000 R09: 0000000000000000 [ 102.441204][ T6474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.449167][ T6474] R13: 000000000000000b R14: 00007fc3fcf03f60 R15: 00007ffef6f55c88 [ 102.457146][ T6474] [ 102.528694][ T6478] netlink: 'syz.1.439': attribute type 10 has an invalid length. [ 102.616547][ T6478] batman_adv: batadv0: Adding interface: team0 [ 102.637946][ T6478] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.683761][ T6478] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 102.790726][ T6488] netlink: 'syz.3.443': attribute type 10 has an invalid length. [ 102.860200][ T6488] team0: Device ipvlan1 failed to register rx_handler [ 103.006813][ T6494] bridge0: entered promiscuous mode [ 103.016112][ T5111] block nbd64: NBD_DISCONNECT [ 103.056765][ T6494] macvtap3: entered promiscuous mode [ 103.088838][ T6494] macvtap3: entered allmulticast mode [ 103.100979][ T6494] bridge0: entered allmulticast mode [ 103.150567][ T6514] Cannot find map_set index 0 as target [ 103.292566][ T6517] netlink: 'syz.2.452': attribute type 1 has an invalid length. [ 103.342092][ T6522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.896584][ T6546] __nla_validate_parse: 7 callbacks suppressed [ 103.896606][ T6546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 103.923121][ T6546] macvtap4: entered promiscuous mode [ 103.949610][ T6546] macvtap4: entered allmulticast mode [ 104.044494][ T6546] netlink: 12 bytes leftover after parsing attributes in process `syz.2.462'. [ 104.071255][ T6546] macvtap4: left promiscuous mode [ 104.088723][ T6546] macvtap4: left allmulticast mode [ 104.132528][ T6556] FAULT_INJECTION: forcing a failure. [ 104.132528][ T6556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.163687][ T6556] CPU: 0 PID: 6556 Comm: syz.4.467 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 104.173736][ T6556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 104.183824][ T6556] Call Trace: [ 104.187125][ T6556] [ 104.190079][ T6556] dump_stack_lvl+0x241/0x360 [ 104.194807][ T6556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.200052][ T6556] ? __pfx__printk+0x10/0x10 [ 104.204672][ T6556] ? __pfx_lock_release+0x10/0x10 [ 104.209730][ T6556] ? rcu_is_watching+0x15/0xb0 [ 104.214560][ T6556] should_fail_ex+0x3b0/0x4e0 [ 104.219312][ T6556] _copy_from_iter+0x1f6/0x1960 [ 104.224210][ T6556] ? alloc_pages_mpol_noprof+0x417/0x680 [ 104.229883][ T6556] ? __pfx__copy_from_iter+0x10/0x10 [ 104.235211][ T6556] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 104.241332][ T6556] ? alloc_pages_noprof+0xef/0x170 [ 104.246487][ T6556] ? page_copy_sane+0x46/0x260 [ 104.251290][ T6556] copy_page_from_iter+0x7a/0x100 [ 104.256431][ T6556] tun_get_user+0x1f7d/0x4720 [ 104.261141][ T6556] ? tun_get_user+0x871/0x4720 [ 104.265944][ T6556] ? __lock_acquire+0x1346/0x1fd0 [ 104.271008][ T6556] ? __pfx_tun_get_user+0x10/0x10 [ 104.276086][ T6556] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 104.281578][ T6556] ? tun_get+0x1e/0x2f0 [ 104.285787][ T6556] ? __pfx_lock_release+0x10/0x10 [ 104.290863][ T6556] ? tun_get+0x1e/0x2f0 [ 104.295073][ T6556] ? tun_get+0x27d/0x2f0 [ 104.299347][ T6556] tun_chr_write_iter+0x113/0x1f0 [ 104.304385][ T6556] vfs_write+0xa72/0xc90 [ 104.308645][ T6556] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 104.314225][ T6556] ? __pfx_vfs_write+0x10/0x10 [ 104.319042][ T6556] ksys_write+0x1a0/0x2c0 [ 104.323416][ T6556] ? __pfx_ksys_write+0x10/0x10 [ 104.328306][ T6556] ? do_syscall_64+0x100/0x230 [ 104.333112][ T6556] ? do_syscall_64+0xb6/0x230 [ 104.337830][ T6556] do_syscall_64+0xf3/0x230 [ 104.342373][ T6556] ? clear_bhb_loop+0x35/0x90 [ 104.347089][ T6556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.353020][ T6556] RIP: 0033:0x7fa50097459f [ 104.357465][ T6556] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 104.377100][ T6556] RSP: 002b:00007fa5017ae010 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 104.385537][ T6556] RAX: ffffffffffffffda RBX: 00007fa500b03f60 RCX: 00007fa50097459f [ 104.393508][ T6556] RDX: 000000000000008a RSI: 0000000020000140 RDI: 00000000000000c8 [ 104.401475][ T6556] RBP: 00007fa5017ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.409440][ T6556] R10: 000000000000008a R11: 0000000000000293 R12: 0000000000000001 [ 104.417406][ T6556] R13: 000000000000000b R14: 00007fa500b03f60 R15: 00007fff4018aa18 [ 104.425387][ T6556] [ 104.518607][ T6570] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 104.841177][ T6584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 105.130898][ T6596] IPVS: length: 24 != 36888 [ 105.136886][ T6591] caif0 speed is unknown, defaulting to 1000 [ 105.163801][ T6600] pimreg: entered allmulticast mode [ 105.374009][ T6610] netlink: 'syz.3.489': attribute type 3 has an invalid length. [ 105.393029][ T6610] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.489'. [ 105.509703][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.491'. [ 105.690727][ T5105] Bluetooth: hci4: link tx timeout [ 105.696440][ T5105] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.707076][ T5100] Bluetooth: hci4: link tx timeout [ 105.723523][ T5100] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.731670][ T5100] Bluetooth: hci4: link tx timeout [ 105.737060][ T5100] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 105.951727][ T6633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.131043][ T6645] netlink: 'syz.2.501': attribute type 10 has an invalid length. [ 106.229158][ T6645] team0: Port device netdevsim0 added [ 106.235160][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 106.485817][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.506'. [ 106.534667][ T6664] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 106.583115][ T6666] netlink: 'syz.0.505': attribute type 11 has an invalid length. [ 106.595469][ T6667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.506'. [ 107.123574][ T6684] FAULT_INJECTION: forcing a failure. [ 107.123574][ T6684] name failslab, interval 1, probability 0, space 0, times 0 [ 107.143859][ T6684] CPU: 0 PID: 6684 Comm: syz.0.512 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 107.153907][ T6684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 107.163985][ T6684] Call Trace: [ 107.167288][ T6684] [ 107.170244][ T6684] dump_stack_lvl+0x241/0x360 [ 107.174960][ T6684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.180202][ T6684] ? __pfx__printk+0x10/0x10 [ 107.184841][ T6684] should_fail_ex+0x3b0/0x4e0 [ 107.186901][ T6689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.513'. [ 107.189541][ T6684] ? __xdp_reg_mem_model+0x1e3/0x620 [ 107.189576][ T6684] should_failslab+0x9/0x20 [ 107.189593][ T6684] kmalloc_trace_noprof+0x6c/0x2c0 [ 107.213345][ T6684] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 107.219359][ T6684] __xdp_reg_mem_model+0x1e3/0x620 [ 107.224522][ T6684] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 107.230199][ T6684] ? page_pool_list+0x232/0x280 [ 107.235073][ T6684] xdp_reg_mem_model+0x22/0x40 [ 107.239836][ T6684] bpf_test_run_xdp_live+0x31e/0x2110 [ 107.245209][ T6684] ? arch_stack_walk+0x16d/0x1b0 [ 107.250186][ T6684] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 107.256021][ T6684] ? mark_lock+0x9a/0x350 [ 107.260374][ T6684] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 107.266268][ T6684] ? __might_fault+0xaa/0x120 [ 107.270941][ T6684] ? __might_fault+0xc6/0x120 [ 107.275645][ T6684] ? _copy_from_user+0xa6/0xe0 [ 107.280442][ T6684] ? bpf_test_init+0x15a/0x180 [ 107.285277][ T6684] ? xdp_convert_md_to_buff+0x5b/0x330 [ 107.290768][ T6684] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 107.296142][ T6684] ? __pfx_lock_release+0x10/0x10 [ 107.301175][ T6684] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 107.307018][ T6684] ? __fget_files+0x29/0x470 [ 107.311611][ T6684] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 107.317412][ T6684] bpf_prog_test_run+0x33a/0x3b0 [ 107.322381][ T6684] __sys_bpf+0x48d/0x810 [ 107.326633][ T6684] ? __pfx___sys_bpf+0x10/0x10 [ 107.331417][ T6684] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.336409][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.516'. [ 107.337391][ T6684] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.337422][ T6684] ? do_syscall_64+0x100/0x230 [ 107.348010][ T6695] netlink: 'syz.4.516': attribute type 10 has an invalid length. [ 107.352491][ T6684] __x64_sys_bpf+0x7c/0x90 [ 107.352529][ T6684] do_syscall_64+0xf3/0x230 [ 107.352551][ T6684] ? clear_bhb_loop+0x35/0x90 [ 107.352569][ T6684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.352593][ T6684] RIP: 0033:0x7fbb41175a19 [ 107.352610][ T6684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.352623][ T6684] RSP: 002b:00007fbb41f41048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.352644][ T6684] RAX: ffffffffffffffda RBX: 00007fbb41303f60 RCX: 00007fbb41175a19 [ 107.352658][ T6684] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 107.352669][ T6684] RBP: 00007fbb41f410a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.352679][ T6684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.352689][ T6684] R13: 000000000000004d R14: 00007fbb41303f60 R15: 00007fff6eef2a68 [ 107.352715][ T6684] [ 107.391327][ T6693] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 107.485590][ T6695] bond0: (slave bond_slave_0): Releasing backup interface [ 107.627248][ T6702] netlink: 'syz.3.519': attribute type 11 has an invalid length. [ 107.768971][ T5100] Bluetooth: hci4: command 0x0405 tx timeout [ 108.244747][ T6737] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 108.253119][ T6738] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 108.942467][ T6762] netlink: 'syz.1.535': attribute type 3 has an invalid length. [ 109.307678][ T6755] __nla_validate_parse: 11 callbacks suppressed [ 109.307700][ T6755] netlink: 830 bytes leftover after parsing attributes in process `syz.1.535'. [ 109.477810][ T6768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.539'. [ 109.737519][ T6786] netlink: 32 bytes leftover after parsing attributes in process `syz.2.548'. [ 109.759459][ T6783] netlink: 'syz.0.545': attribute type 27 has an invalid length. [ 109.922339][ T6797] netlink: 5056 bytes leftover after parsing attributes in process `syz.2.548'. [ 109.954086][ T6797] netlink: 32 bytes leftover after parsing attributes in process `syz.2.548'. [ 109.975208][ T6797] netlink: 5056 bytes leftover after parsing attributes in process `syz.2.548'. [ 110.263858][ T6816] FAULT_INJECTION: forcing a failure. [ 110.263858][ T6816] name failslab, interval 1, probability 0, space 0, times 0 [ 110.277042][ T6816] CPU: 0 PID: 6816 Comm: syz.1.557 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 110.287055][ T6816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 110.297145][ T6816] Call Trace: [ 110.300451][ T6816] [ 110.303420][ T6816] dump_stack_lvl+0x241/0x360 [ 110.308136][ T6816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.313374][ T6816] ? __pfx__printk+0x10/0x10 [ 110.318015][ T6816] ? __asan_memset+0x23/0x50 [ 110.322659][ T6816] should_fail_ex+0x3b0/0x4e0 [ 110.327387][ T6816] should_failslab+0x9/0x20 [ 110.331923][ T6816] kmalloc_node_track_caller_noprof+0xda/0x440 [ 110.338110][ T6816] ? nf_ct_ext_add+0x1a2/0x3e0 [ 110.342906][ T6816] krealloc_noprof+0x7d/0x120 [ 110.347626][ T6816] nf_ct_ext_add+0x1a2/0x3e0 [ 110.352265][ T6816] init_conntrack+0x8bf/0x1310 [ 110.357086][ T6816] ? __pfx_init_conntrack+0x10/0x10 [ 110.362332][ T6816] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 110.368351][ T6816] ? __local_bh_enable_ip+0x168/0x200 [ 110.373772][ T6816] nf_conntrack_in+0xd59/0x1880 [ 110.378690][ T6816] ? __pfx_nf_conntrack_in+0x10/0x10 [ 110.384014][ T6816] ? ipt_do_table+0x312/0x1860 [ 110.388812][ T6816] ? __pfx_ipt_do_table+0x10/0x10 [ 110.393904][ T6816] ? ipv4_conntrack_defrag+0x2a2/0x5a0 [ 110.399398][ T6816] ? ip_sabotage_in+0x55/0x290 [ 110.404223][ T6816] ? __pfx_ipv4_conntrack_in+0x10/0x10 [ 110.409719][ T6816] nf_hook_slow+0xc3/0x220 [ 110.414178][ T6816] nf_hook_slow_list+0x1f8/0x460 [ 110.419161][ T6816] ? packet_rcv+0x16e/0x13e0 [ 110.423796][ T6816] ? __pfx_nf_hook_slow_list+0x10/0x10 [ 110.429305][ T6816] ? ip_sublist_rcv+0x7bd/0xab0 [ 110.434196][ T6816] ip_sublist_rcv+0x9a4/0xab0 [ 110.438909][ T6816] ? pskb_trim_rcsum_slow+0x31a/0x520 [ 110.444324][ T6816] ? __lock_acquire+0x1346/0x1fd0 [ 110.449388][ T6816] ? __pfx_pskb_trim_rcsum_slow+0x10/0x10 [ 110.455151][ T6816] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 110.460393][ T6816] ? skb_orphan+0xae/0xd0 [ 110.464466][ T6827] netlink: 104 bytes leftover after parsing attributes in process `syz.4.563'. [ 110.464733][ T6816] ? __pfx_ip_rcv_finish+0x10/0x10 [ 110.478016][ T6827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.563'. [ 110.478759][ T6816] ip_list_rcv+0x42b/0x480 [ 110.478797][ T6816] ? __pfx_ip_list_rcv+0x10/0x10 [ 110.478820][ T6816] ? __pfx_ip_list_rcv+0x10/0x10 [ 110.478839][ T6816] __netif_receive_skb_list_core+0x95a/0x980 [ 110.478872][ T6816] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 110.478900][ T6816] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 110.478924][ T6816] ? timekeeping_get_ns+0x2c0/0x420 [ 110.478960][ T6816] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 110.478984][ T6816] netif_receive_skb_list_internal+0xa51/0xe30 [ 110.479012][ T6816] ? netif_receive_skb_list_internal+0x4e8/0xe30 [ 110.479036][ T6816] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 110.479063][ T6816] ? eth_type_trans+0x3d1/0x7a0 [ 110.479098][ T6816] napi_complete_done+0x310/0x8e0 [ 110.479124][ T6816] ? __pfx_napi_complete_done+0x10/0x10 [ 110.479145][ T6816] ? napi_gro_frags+0x9c9/0x12a0 [ 110.479173][ T6816] ? tun_get_user+0x2a78/0x4720 [ 110.479202][ T6816] tun_get_user+0x2d56/0x4720 [ 110.479226][ T6816] ? tun_get_user+0x2a78/0x4720 [ 110.587121][ T6816] ? __lock_acquire+0x1346/0x1fd0 [ 110.592193][ T6816] ? __pfx_tun_get_user+0x10/0x10 [ 110.597279][ T6816] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 110.602772][ T6816] ? tun_get+0x1e/0x2f0 [ 110.606968][ T6816] ? __pfx_lock_release+0x10/0x10 [ 110.612041][ T6816] ? tun_get+0x1e/0x2f0 [ 110.616238][ T6816] ? tun_get+0x27d/0x2f0 [ 110.620521][ T6816] tun_chr_write_iter+0x113/0x1f0 [ 110.625575][ T6816] vfs_write+0xa72/0xc90 [ 110.629833][ T6816] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 110.635387][ T6816] ? __pfx_vfs_write+0x10/0x10 [ 110.640167][ T6816] ksys_write+0x1a0/0x2c0 [ 110.644500][ T6816] ? __pfx_ksys_write+0x10/0x10 [ 110.649350][ T6816] ? do_syscall_64+0x100/0x230 [ 110.654118][ T6816] ? do_syscall_64+0xb6/0x230 [ 110.658795][ T6816] do_syscall_64+0xf3/0x230 [ 110.663294][ T6816] ? clear_bhb_loop+0x35/0x90 [ 110.667964][ T6816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.673871][ T6816] RIP: 0033:0x7f574e175a19 [ 110.678287][ T6816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.697895][ T6816] RSP: 002b:00007f574f00b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 110.706312][ T6816] RAX: ffffffffffffffda RBX: 00007f574e303f60 RCX: 00007f574e175a19 [ 110.714280][ T6816] RDX: 000000000000fdef RSI: 0000000020000440 RDI: 0000000000000003 [ 110.722276][ T6816] RBP: 00007f574f00b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.730258][ T6816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.738229][ T6816] R13: 000000000000004d R14: 00007f574e303f60 R15: 00007fff171a6258 [ 110.746208][ T6816] [ 110.865500][ T6835] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 110.946794][ T6835] netlink: 12 bytes leftover after parsing attributes in process `syz.0.567'. [ 110.963706][ T6835] netlink: 36 bytes leftover after parsing attributes in process `syz.0.567'. [ 111.360442][ T6862] netlink: 'syz.4.579': attribute type 3 has an invalid length. [ 111.484612][ T6867] netlink: 'syz.0.581': attribute type 2 has an invalid length. [ 111.518699][ T6873] netlink: 'syz.4.583': attribute type 3 has an invalid length. [ 111.579569][ T1793] IPVS: starting estimator thread 0... [ 111.689537][ T6877] IPVS: using max 22 ests per chain, 52800 per kthread [ 111.860713][ T6890] can: request_module (can-proto-0) failed. [ 111.901427][ T6897] tipc: Started in network mode [ 111.907918][ T6897] tipc: Node identity 1, cluster identity 4711 [ 111.914706][ T6897] tipc: Node number set to 1 [ 111.920634][ T6897] tipc: Cannot configure node identity twice [ 111.947469][ T6903] netlink: 'syz.0.593': attribute type 5 has an invalid length. [ 112.622119][ T6937] batadv0: entered promiscuous mode [ 113.477904][ T6969] netlink: 'syz.1.617': attribute type 3 has an invalid length. [ 113.544407][ T784] IPVS: starting estimator thread 0... [ 113.654095][ T6975] IPVS: using max 23 ests per chain, 55200 per kthread [ 114.192664][ T7017] FAULT_INJECTION: forcing a failure. [ 114.192664][ T7017] name failslab, interval 1, probability 0, space 0, times 0 [ 114.227537][ T7017] CPU: 0 PID: 7017 Comm: syz.3.631 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 114.237587][ T7017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 114.247671][ T7017] Call Trace: [ 114.250974][ T7017] [ 114.253919][ T7017] dump_stack_lvl+0x241/0x360 [ 114.258622][ T7017] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.263856][ T7017] ? __pfx__printk+0x10/0x10 [ 114.268477][ T7017] should_fail_ex+0x3b0/0x4e0 [ 114.273188][ T7017] ? security_file_alloc+0x28/0x130 [ 114.278404][ T7017] should_failslab+0x9/0x20 [ 114.282907][ T7017] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 114.288303][ T7017] security_file_alloc+0x28/0x130 [ 114.293330][ T7017] init_file+0x99/0x200 [ 114.297491][ T7017] alloc_empty_file+0xb8/0x1d0 [ 114.302384][ T7017] alloc_file_pseudo+0x1da/0x290 [ 114.307340][ T7017] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 114.312836][ T7017] ? alloc_fd+0x5a1/0x640 [ 114.317193][ T7017] sock_alloc_file+0xb8/0x290 [ 114.321876][ T7017] __sys_socket+0x1dd/0x3c0 [ 114.326386][ T7017] ? __pfx___sys_socket+0x10/0x10 [ 114.331435][ T7017] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.337770][ T7017] ? do_syscall_64+0x100/0x230 [ 114.342540][ T7017] __x64_sys_socket+0x7a/0x90 [ 114.347222][ T7017] do_syscall_64+0xf3/0x230 [ 114.351727][ T7017] ? clear_bhb_loop+0x35/0x90 [ 114.356405][ T7017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.362299][ T7017] RIP: 0033:0x7fc3fcd75a19 [ 114.366712][ T7017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.386315][ T7017] RSP: 002b:00007fc3fdab7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 114.394728][ T7017] RAX: ffffffffffffffda RBX: 00007fc3fcf03f60 RCX: 00007fc3fcd75a19 [ 114.402697][ T7017] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000022 [ 114.410660][ T7017] RBP: 00007fc3fdab70a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.418623][ T7017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.426589][ T7017] R13: 000000000000000b R14: 00007fc3fcf03f60 R15: 00007ffef6f55c88 [ 114.434569][ T7017] [ 114.615628][ T7024] netlink: 'syz.4.635': attribute type 3 has an invalid length. [ 114.644700][ T7024] __nla_validate_parse: 8 callbacks suppressed [ 114.644720][ T7024] netlink: 44 bytes leftover after parsing attributes in process `syz.4.635'. [ 114.904415][ T7046] hsr_slave_0: left promiscuous mode [ 114.930301][ T7046] hsr_slave_1: left promiscuous mode [ 115.945611][ T7105] batman_adv: batadv0: Adding interface: ipvlan2 [ 115.994028][ T7105] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.047810][ T7112] netlink: 'syz.0.657': attribute type 3 has an invalid length. [ 116.063651][ T7105] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 116.067300][ T7112] netlink: 8 bytes leftover after parsing attributes in process `syz.0.657'. [ 116.271362][ T7124] Bluetooth: MGMT ver 1.23 [ 116.293704][ T7128] netlink: 236 bytes leftover after parsing attributes in process `syz.3.663'. [ 116.788152][ T7154] FAULT_INJECTION: forcing a failure. [ 116.788152][ T7154] name failslab, interval 1, probability 0, space 0, times 0 [ 116.814632][ T7154] CPU: 0 PID: 7154 Comm: syz.4.673 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 116.819146][ T7148] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.824654][ T7154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 116.824674][ T7154] Call Trace: [ 116.824683][ T7154] [ 116.824691][ T7154] dump_stack_lvl+0x241/0x360 [ 116.824723][ T7154] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.832391][ T7148] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.841775][ T7154] ? __pfx__printk+0x10/0x10 [ 116.841806][ T7154] ? __pfx___might_resched+0x10/0x10 [ 116.841832][ T7154] should_fail_ex+0x3b0/0x4e0 [ 116.841862][ T7154] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 116.885714][ T7154] should_failslab+0x9/0x20 [ 116.890217][ T7154] __kmalloc_noprof+0xd8/0x400 [ 116.894975][ T7154] ? __asan_memcpy+0x40/0x70 [ 116.899565][ T7154] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 116.905631][ T7154] genl_rcv_msg+0x802/0xec0 [ 116.910157][ T7154] ? mark_lock+0x9a/0x350 [ 116.914491][ T7154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.919533][ T7154] ? __pfx_lock_acquire+0x10/0x10 [ 116.924570][ T7154] ? __pfx_devlink_nl_notify_filter_set_doit+0x10/0x10 [ 116.931417][ T7154] ? __pfx___might_resched+0x10/0x10 [ 116.936706][ T7154] netlink_rcv_skb+0x1e3/0x430 [ 116.941469][ T7154] ? __pfx_genl_rcv_msg+0x10/0x10 [ 116.946487][ T7154] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 116.951793][ T7154] genl_rcv+0x28/0x40 [ 116.955769][ T7154] netlink_unicast+0x7f0/0x990 [ 116.960536][ T7154] ? __pfx_netlink_unicast+0x10/0x10 [ 116.965814][ T7154] ? __virt_addr_valid+0x183/0x530 [ 116.970930][ T7154] ? __check_object_size+0x49c/0x900 [ 116.976208][ T7154] ? bpf_lsm_netlink_send+0x9/0x10 [ 116.981319][ T7154] netlink_sendmsg+0x8e4/0xcb0 [ 116.986090][ T7154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 116.991375][ T7154] ? __import_iovec+0x536/0x820 [ 116.996224][ T7154] ? aa_sock_msg_perm+0x91/0x160 [ 117.001167][ T7154] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 117.006466][ T7154] ? security_socket_sendmsg+0x87/0xb0 [ 117.011924][ T7154] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.017206][ T7154] __sock_sendmsg+0x221/0x270 [ 117.021886][ T7154] ____sys_sendmsg+0x525/0x7d0 [ 117.026651][ T7154] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.031945][ T7154] __sys_sendmsg+0x2b0/0x3a0 [ 117.036552][ T7154] ? __pfx___sys_sendmsg+0x10/0x10 [ 117.041656][ T7154] ? vfs_write+0x7c4/0xc90 [ 117.046104][ T7154] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 117.052427][ T7154] ? do_syscall_64+0x100/0x230 [ 117.057281][ T7154] ? do_syscall_64+0xb6/0x230 [ 117.061957][ T7154] do_syscall_64+0xf3/0x230 [ 117.066455][ T7154] ? clear_bhb_loop+0x35/0x90 [ 117.071219][ T7154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.077121][ T7154] RIP: 0033:0x7fa500975a19 [ 117.081533][ T7154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.101152][ T7154] RSP: 002b:00007fa5017ae048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.109569][ T7154] RAX: ffffffffffffffda RBX: 00007fa500b03f60 RCX: 00007fa500975a19 [ 117.117538][ T7154] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000005 [ 117.125505][ T7154] RBP: 00007fa5017ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 117.133467][ T7154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.141430][ T7154] R13: 000000000000000b R14: 00007fa500b03f60 R15: 00007fff4018aa18 [ 117.149409][ T7154] [ 117.590958][ T7171] netlink: 172 bytes leftover after parsing attributes in process `syz.1.681'. [ 117.840650][ T7185] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.848942][ T7185] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.855666][ T7185] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.862229][ T7185] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.868820][ T7185] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.875540][ T7185] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.883050][ T7185] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.889625][ T7185] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 117.896187][ T7185] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 117.902754][ T7185] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 118.199035][ T7204] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.223965][ T7204] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 118.507027][ T7208] netlink: 172 bytes leftover after parsing attributes in process `syz.2.695'. [ 118.587606][ T7216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.609709][ T7216] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.315355][ T7257] netlink: 'syz.2.711': attribute type 3 has an invalid length. [ 119.513507][ T7255] netlink: 172 bytes leftover after parsing attributes in process `syz.0.713'. [ 119.534512][ T7264] netlink: 'syz.2.715': attribute type 22 has an invalid length. [ 119.751826][ T7271] netlink: 32 bytes leftover after parsing attributes in process `syz.3.719'. [ 120.172758][ T7294] bridge0: port 3(bond0) entered disabled state [ 120.180112][ T7294] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.187739][ T7294] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.279373][ T7298] netlink: 172 bytes leftover after parsing attributes in process `syz.0.732'. [ 120.307363][ T7300] netlink: 44 bytes leftover after parsing attributes in process `syz.4.733'. [ 120.456211][ T7309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.735'. [ 120.516351][ T7314] netlink: 16 bytes leftover after parsing attributes in process `syz.0.738'. [ 120.526913][ T7314] netlink: 64 bytes leftover after parsing attributes in process `syz.0.738'. [ 120.536185][ T7314] tipc: Invalid UDP bearer configuration [ 120.536236][ T7314] tipc: Enabling of bearer rejected, failed to enable media [ 120.565222][ T7314] tipc: Enabling of bearer rejected, failed to enable media [ 120.748068][ T7322] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.742'. [ 121.062095][ T7338] netlink: 48 bytes leftover after parsing attributes in process `syz.1.748'. [ 121.143065][ T7341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.185847][ T7341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.250100][ T7380] netlink: 'syz.4.764': attribute type 4 has an invalid length. [ 122.261265][ T7380] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.764'. [ 122.262103][ T7374] netlink: 830 bytes leftover after parsing attributes in process `syz.0.763'. [ 122.287577][ T7374] netlink: 'syz.0.763': attribute type 3 has an invalid length. [ 122.426593][ T7385] 8021q: adding VLAN 0 to HW filter on device bond1 [ 122.561485][ T7390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.683787][ T7390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.843912][ T7390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.015079][ T7390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.227242][ T7390] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.288412][ T7390] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.355697][ T7390] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.391038][ T7390] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.721245][ T7451] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 123.738204][ T7452] netlink: 'syz.0.789': attribute type 1 has an invalid length. [ 124.727315][ T7510] netlink: 'syz.3.813': attribute type 4 has an invalid length. [ 124.903946][ T7521] __nla_validate_parse: 11 callbacks suppressed [ 124.903970][ T7521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.814'. [ 125.115344][ T7530] netlink: 40 bytes leftover after parsing attributes in process `syz.1.821'. [ 126.104596][ T7557] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.272411][ T7571] x_tables: duplicate underflow at hook 2 [ 126.346736][ T7575] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.837'. [ 126.418987][ T7580] netlink: 132 bytes leftover after parsing attributes in process `syz.3.840'. [ 126.508819][ T7584] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 126.978194][ T7598] netlink: 84 bytes leftover after parsing attributes in process `syz.2.844'. [ 127.012408][ T7594] tipc: Enabling of bearer rejected, failed to enable media [ 127.119588][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.845'. [ 127.141502][ T7603] netlink: 752 bytes leftover after parsing attributes in process `syz.3.846'. [ 127.143830][ T7601] netlink: 108 bytes leftover after parsing attributes in process `syz.2.845'. [ 127.208111][ T7603] bond0: option mode: unable to set because the bond device has slaves [ 127.243982][ T7605] FAULT_INJECTION: forcing a failure. [ 127.243982][ T7605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.278766][ T7605] CPU: 0 PID: 7605 Comm: syz.4.847 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 127.288808][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 127.298892][ T7605] Call Trace: [ 127.302192][ T7605] [ 127.305145][ T7605] dump_stack_lvl+0x241/0x360 [ 127.309860][ T7605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 127.315096][ T7605] ? __pfx__printk+0x10/0x10 [ 127.319828][ T7605] ? __pfx_lock_release+0x10/0x10 [ 127.324926][ T7605] should_fail_ex+0x3b0/0x4e0 [ 127.329644][ T7605] _copy_from_iter+0x1f6/0x1960 [ 127.334543][ T7605] ? __virt_addr_valid+0x183/0x530 [ 127.339697][ T7605] ? __pfx_lock_release+0x10/0x10 [ 127.344760][ T7605] ? __alloc_skb+0x28f/0x440 [ 127.349385][ T7605] ? __pfx__copy_from_iter+0x10/0x10 [ 127.354710][ T7605] ? __virt_addr_valid+0x183/0x530 [ 127.356902][ T7609] x_tables: duplicate underflow at hook 2 [ 127.359838][ T7605] ? __virt_addr_valid+0x183/0x530 [ 127.359871][ T7605] ? __virt_addr_valid+0x45f/0x530 [ 127.359893][ T7605] ? __check_object_size+0x49c/0x900 [ 127.359916][ T7605] netlink_sendmsg+0x73d/0xcb0 [ 127.385893][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.391220][ T7605] ? __import_iovec+0x536/0x820 [ 127.396111][ T7605] ? aa_sock_msg_perm+0x91/0x160 [ 127.401068][ T7605] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 127.406357][ T7605] ? security_socket_sendmsg+0x87/0xb0 [ 127.411813][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.417185][ T7605] __sock_sendmsg+0x221/0x270 [ 127.421962][ T7605] ____sys_sendmsg+0x525/0x7d0 [ 127.426747][ T7605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 127.432091][ T7605] __sys_sendmsg+0x2b0/0x3a0 [ 127.436689][ T7605] ? __pfx___sys_sendmsg+0x10/0x10 [ 127.441813][ T7605] ? vfs_write+0x7c4/0xc90 [ 127.446247][ T7605] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 127.452566][ T7605] ? do_syscall_64+0x100/0x230 [ 127.457325][ T7605] ? do_syscall_64+0xb6/0x230 [ 127.462089][ T7605] do_syscall_64+0xf3/0x230 [ 127.466613][ T7605] ? clear_bhb_loop+0x35/0x90 [ 127.471368][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.477266][ T7605] RIP: 0033:0x7fa500975a19 [ 127.481690][ T7605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.501341][ T7605] RSP: 002b:00007fa5017ae048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.509766][ T7605] RAX: ffffffffffffffda RBX: 00007fa500b03f60 RCX: 00007fa500975a19 [ 127.517756][ T7605] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000006 [ 127.525856][ T7605] RBP: 00007fa5017ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.533849][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.541849][ T7605] R13: 000000000000000b R14: 00007fa500b03f60 R15: 00007fff4018aa18 [ 127.549971][ T7605] [ 127.589494][ T7611] bond0: option mode: unable to set because the bond device has slaves [ 127.923795][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.856'. [ 128.159900][ T7647] x_tables: duplicate underflow at hook 2 [ 128.576545][ T5105] Bluetooth: hci0: command tx timeout [ 128.677541][ T7621] delete_channel: no stack [ 128.887904][ T7667] netlink: 'syz.4.867': attribute type 33 has an invalid length. [ 128.947750][ T7671] FAULT_INJECTION: forcing a failure. [ 128.947750][ T7671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.967098][ T7671] CPU: 0 PID: 7671 Comm: syz.2.871 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 128.977135][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 128.987215][ T7671] Call Trace: [ 128.990521][ T7671] [ 128.993479][ T7671] dump_stack_lvl+0x241/0x360 [ 128.998200][ T7671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.003436][ T7671] ? __pfx__printk+0x10/0x10 [ 129.008067][ T7671] ? __pfx_lock_release+0x10/0x10 [ 129.013139][ T7671] ? __lock_acquire+0x1346/0x1fd0 [ 129.018208][ T7671] should_fail_ex+0x3b0/0x4e0 [ 129.022934][ T7671] _copy_from_user+0x2f/0xe0 [ 129.027561][ T7671] kstrtouint_from_user+0xc6/0x190 [ 129.032715][ T7671] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 129.038475][ T7671] ? __pfx_lock_acquire+0x10/0x10 [ 129.043543][ T7671] proc_fail_nth_write+0xaa/0x2d0 [ 129.048604][ T7671] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 129.054531][ T7671] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 129.060199][ T7671] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 129.065858][ T7671] vfs_write+0x2a2/0xc90 [ 129.070142][ T7671] ? __pfx_vfs_write+0x10/0x10 [ 129.074930][ T7671] ? __fget_files+0x29/0x470 [ 129.079552][ T7671] ? __fget_files+0x3f6/0x470 [ 129.084276][ T7671] ksys_write+0x1a0/0x2c0 [ 129.088644][ T7671] ? __pfx_ksys_write+0x10/0x10 [ 129.093529][ T7671] ? do_syscall_64+0x100/0x230 [ 129.098348][ T7671] ? do_syscall_64+0xb6/0x230 [ 129.101064][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.4.873'. [ 129.103036][ T7671] do_syscall_64+0xf3/0x230 [ 129.116436][ T7671] ? clear_bhb_loop+0x35/0x90 [ 129.121145][ T7671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.127085][ T7671] RIP: 0033:0x7f3ca017459f [ 129.131531][ T7671] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 129.151169][ T7671] RSP: 002b:00007f3ca0f64040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 129.159616][ T7671] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ca017459f [ 129.167614][ T7671] RDX: 0000000000000001 RSI: 00007f3ca0f640b0 RDI: 0000000000000004 [ 129.175610][ T7671] RBP: 00007f3ca0f640a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.183605][ T7671] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 129.191602][ T7671] R13: 000000000000004d R14: 00007f3ca0303f60 R15: 00007ffce6f556b8 [ 129.199620][ T7671] [ 129.270385][ T7683] netlink: 'syz.0.872': attribute type 3 has an invalid length. [ 129.943821][ T7708] __nla_validate_parse: 3 callbacks suppressed [ 129.943845][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.880'. [ 129.966292][ T7708] netlink: 'syz.1.880': attribute type 15 has an invalid length. [ 130.017117][ T7708] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 65023 - 0 [ 130.026793][ T7708] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 65023 - 0 [ 130.035784][ T7708] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 65023 - 0 [ 130.044691][ T7708] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 65023 - 0 [ 130.071393][ T7708] vxlan0: entered promiscuous mode [ 130.178673][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.884'. [ 130.502691][ T7731] netlink: 'syz.2.888': attribute type 2 has an invalid length. [ 130.520242][ T7731] netlink: 24 bytes leftover after parsing attributes in process `syz.2.888'. [ 130.633429][ T1793] IPVS: starting estimator thread 0... [ 130.705923][ T7738] netlink: 'syz.0.891': attribute type 3 has an invalid length. [ 130.729560][ T7736] IPVS: using max 19 ests per chain, 45600 per kthread [ 130.783768][ T7742] tipc: Enabling of bearer rejected, already enabled [ 130.843838][ T7746] netlink: 28 bytes leftover after parsing attributes in process `syz.1.894'. [ 130.858013][ T7746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 131.623533][ T7781] netlink: 'syz.3.905': attribute type 3 has an invalid length. [ 131.728123][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.906'. [ 131.789645][ T7788] caif0 speed is unknown, defaulting to 1000 [ 131.973436][ T7799] netlink: 'syz.3.910': attribute type 4 has an invalid length. [ 132.280209][ T7817] netlink: 'syz.4.917': attribute type 10 has an invalid length. [ 132.283633][ T7810] netlink: 'syz.0.915': attribute type 2 has an invalid length. [ 132.313554][ T7817] team0: Port device netdevsim0 added [ 132.327138][ T7810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.915'. [ 132.431270][ T6241] IPVS: starting estimator thread 0... [ 132.529561][ T7828] IPVS: using max 21 ests per chain, 50400 per kthread [ 132.614697][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.4.921'. [ 132.873687][ T7846] netlink: 24 bytes leftover after parsing attributes in process `syz.4.924'. [ 133.085758][ T7857] netlink: 60 bytes leftover after parsing attributes in process `syz.4.928'. [ 133.375212][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.381905][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.896881][ T7894] netlink: 'syz.2.940': attribute type 2 has an invalid length. [ 135.057262][ T7934] __nla_validate_parse: 3 callbacks suppressed [ 135.057282][ T7934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.953'. [ 135.134338][ T7934] bond_slave_0: entered promiscuous mode [ 135.140574][ T7934] bond_slave_1: entered promiscuous mode [ 135.156262][ T7934] macvtap5: entered promiscuous mode [ 135.162307][ T7934] bond0: entered promiscuous mode [ 135.175395][ T7934] macvtap5: entered allmulticast mode [ 135.183518][ T7934] bond0: entered allmulticast mode [ 135.189451][ T7934] bond_slave_0: entered allmulticast mode [ 135.195612][ T7934] bond_slave_1: entered allmulticast mode [ 135.212204][ T7934] 8021q: adding VLAN 0 to HW filter on device macvtap5 [ 135.237096][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.953'. [ 135.419034][ T7943] syzkaller1: entered promiscuous mode [ 135.439227][ T7943] syzkaller1: entered allmulticast mode [ 135.774255][ T7968] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 135.797019][ T7969] netlink: 'syz.4.963': attribute type 2 has an invalid length. [ 135.820120][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.963'. [ 136.036872][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'. [ 136.051984][ T7983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.967'. [ 136.293226][ T7991] netlink: 56 bytes leftover after parsing attributes in process `syz.1.971'. [ 136.359915][ T7951] delete_channel: no stack [ 136.642747][ T8008] netlink: 16 bytes leftover after parsing attributes in process `syz.2.976'. [ 136.685903][ T8008] netlink: 176 bytes leftover after parsing attributes in process `syz.2.976'. [ 136.790185][ T8015] netlink: 376 bytes leftover after parsing attributes in process `syz.2.976'. [ 136.809754][ T8014] netlink: 'syz.3.979': attribute type 3 has an invalid length. [ 136.844694][ T8020] sctp: [Deprecated]: syz.0.980 (pid 8020) Use of int in max_burst socket option deprecated. [ 136.844694][ T8020] Use struct sctp_assoc_value instead [ 136.858094][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.3.979'. [ 137.024392][ T8029] netlink: 'syz.0.980': attribute type 6 has an invalid length. [ 137.044610][ T8029] netlink: 'syz.0.980': attribute type 5 has an invalid length. [ 137.093977][ T8029] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.102514][ T8029] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.111405][ T8029] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.119688][ T8029] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 137.139167][ T8029] vxlan0: entered promiscuous mode [ 137.317057][ T8033] macvtap2: entered promiscuous mode [ 137.326062][ T8033] bond0: entered promiscuous mode [ 137.336672][ T8033] bond_slave_1: entered promiscuous mode [ 137.347859][ T8033] team0: entered promiscuous mode [ 137.365314][ T8033] team_slave_0: entered promiscuous mode [ 137.394461][ T8033] team_slave_1: entered promiscuous mode [ 137.406999][ T8033] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 137.438185][ T8033] macvtap2: entered allmulticast mode [ 137.457385][ T8033] bond0: entered allmulticast mode [ 137.477451][ T8033] bond_slave_1: entered allmulticast mode [ 137.498421][ T8033] team0: entered allmulticast mode [ 137.521498][ T8033] team_slave_0: entered allmulticast mode [ 137.543214][ T8033] team_slave_1: entered allmulticast mode [ 137.565118][ T8033] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 137.592663][ T8033] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 138.000258][ T2871] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.028949][ T2871] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.185192][ T2871] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.226599][ T2871] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.371794][ T2871] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.404577][ T2871] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.448701][ T8057] netlink: 'syz.4.994': attribute type 3 has an invalid length. [ 138.520617][ T2871] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.568348][ T2871] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.668323][ T5100] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 138.684675][ T5100] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 138.694478][ T5100] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 138.710144][ T5100] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 138.724387][ T5100] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 138.738768][ T5100] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 138.902397][ T8071] net_ratelimit: 46 callbacks suppressed [ 138.902416][ T8071] batadv_slave_0: mtu less than device minimum [ 138.959010][ T8064] caif0 speed is unknown, defaulting to 1000 [ 139.171406][ T2871] bridge_slave_1: left allmulticast mode [ 139.187596][ T2871] bridge_slave_1: left promiscuous mode [ 139.220581][ T2871] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.317288][ T2871] bridge_slave_0: left allmulticast mode [ 139.329222][ T2871] bridge_slave_0: left promiscuous mode [ 139.335057][ T2871] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.546573][ T2871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.561911][ T2871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.589032][ T2871] bond0 (unregistering): (slave team0): Releasing backup interface [ 140.602925][ T2871] bond0 (unregistering): Released all slaves [ 140.723026][ T2871] bond1 (unregistering): Released all slaves [ 140.756514][ T8093] netlink: 'syz.4.1008': attribute type 10 has an invalid length. [ 140.777562][ T8099] __nla_validate_parse: 6 callbacks suppressed [ 140.777582][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1009'. [ 140.827754][ T5100] Bluetooth: hci0: command tx timeout [ 140.851774][ T8103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1009'. [ 141.028820][ T8110] ÿÿÿ: renamed from vlan1 [ 141.476878][ T8141] netlink: 'syz.1.1019': attribute type 3 has an invalid length. [ 141.486212][ T8141] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1019'. [ 141.604750][ T8142] smc: net device pimreg applied user defined pnetid SYZ1 [ 141.724525][ T8064] chnl_net:caif_netlink_parms(): no params data found [ 142.107132][ T8159] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1023'. [ 142.135000][ T8159] bond_slave_0: entered promiscuous mode [ 142.141147][ T8159] bond_slave_1: entered promiscuous mode [ 142.147110][ T8159] team_slave_0: entered promiscuous mode [ 142.153159][ T8159] team_slave_1: entered promiscuous mode [ 142.192165][ T8159] macvtap6: entered promiscuous mode [ 142.219471][ T8159] bond0: entered promiscuous mode [ 142.247537][ T8159] team0: entered promiscuous mode [ 142.265318][ T8159] macvtap6: entered allmulticast mode [ 142.277113][ T8159] bond0: entered allmulticast mode [ 142.283096][ T8159] bond_slave_0: entered allmulticast mode [ 142.289881][ T8159] bond_slave_1: entered allmulticast mode [ 142.302829][ T8159] team0: entered allmulticast mode [ 142.318619][ T8159] team_slave_0: entered allmulticast mode [ 142.324706][ T8159] team_slave_1: entered allmulticast mode [ 142.342411][ T8159] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 142.359773][ T8166] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1023'. [ 142.541455][ T2871] hsr_slave_0: left promiscuous mode [ 142.564179][ T2871] hsr_slave_1: left promiscuous mode [ 142.624054][ T2871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.632013][ T2871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.735045][ T2871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.756605][ T2871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.862980][ T2871] veth1_macvtap: left promiscuous mode [ 142.874394][ T2871] veth0_macvtap: left promiscuous mode [ 142.881957][ T2871] veth1_vlan: left promiscuous mode [ 142.889416][ T5100] Bluetooth: hci0: command tx timeout [ 142.897723][ T2871] veth0_vlan: left promiscuous mode [ 143.000688][ T8184] netlink: 448 bytes leftover after parsing attributes in process `syz.3.1030'. [ 143.134489][ T8186] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1031'. [ 143.555610][ T2871] team0 (unregistering): Port device team_slave_1 removed [ 143.597470][ T2871] team0 (unregistering): Port device team_slave_0 removed [ 144.210138][ T8064] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.235564][ T8064] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.263565][ T8064] bridge_slave_0: entered allmulticast mode [ 144.275343][ T8064] bridge_slave_0: entered promiscuous mode [ 144.304479][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 144.350085][ T8202] macvtap6: entered promiscuous mode [ 144.353833][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1038'. [ 144.366572][ T8202] macvtap6: entered allmulticast mode [ 144.375748][ T8202] 8021q: adding VLAN 0 to HW filter on device macvtap6 [ 144.390473][ T8199] caif0 speed is unknown, defaulting to 1000 [ 144.391144][ T8208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1035'. [ 144.407486][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.418049][ T8064] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.447666][ T8064] bridge_slave_1: entered allmulticast mode [ 144.472446][ T8064] bridge_slave_1: entered promiscuous mode [ 144.480793][ T8218] netlink: 'syz.4.1036': attribute type 3 has an invalid length. [ 144.623488][ T8064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.659080][ T8064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.673604][ T8224] netlink: 'syz.3.1040': attribute type 3 has an invalid length. [ 144.700242][ T8223] netlink: 'syz.2.1039': attribute type 1 has an invalid length. [ 144.796211][ T8064] team0: Port device team_slave_0 added [ 144.846768][ T8064] team0: Port device team_slave_1 added [ 144.882072][ T2871] IPVS: stop unused estimator thread 0... [ 144.978736][ T5100] Bluetooth: hci0: command tx timeout [ 145.355226][ T8246] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.364745][ T8246] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.373643][ T8246] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.382479][ T8246] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.612195][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.628751][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.698681][ T8064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.725088][ T8252] pimreg: entered allmulticast mode [ 145.785310][ T8256] lo speed is unknown, defaulting to 1000 [ 145.819556][ T8064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.830609][ T8064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.864673][ T8064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.891965][ T8257] __nla_validate_parse: 3 callbacks suppressed [ 145.891984][ T8257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 145.957240][ T8256] lo speed is unknown, defaulting to 1000 [ 145.990810][ T8064] hsr_slave_0: entered promiscuous mode [ 146.004367][ T8064] hsr_slave_1: entered promiscuous mode [ 146.015552][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1049'. [ 146.035837][ T8256] lo speed is unknown, defaulting to 1000 [ 146.043871][ T8268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 146.748238][ T8256] infiniband syz0: set active [ 146.764352][ T8256] infiniband syz0: added lo [ 146.777768][ T8256] syz0: rxe_create_cq: returned err = -12 [ 146.792821][ T8256] infiniband syz0: Couldn't create ib_mad CQ [ 146.808234][ T8256] infiniband syz0: Couldn't open port 1 [ 146.886456][ T8256] RDS/IB: syz0: added [ 146.910897][ T8256] smc: adding ib device syz0 with port count 1 [ 146.917232][ T8256] smc: ib device syz0 port 1 has pnetid [ 147.048640][ T5100] Bluetooth: hci0: command tx timeout [ 147.550857][ T5147] lo speed is unknown, defaulting to 1000 [ 147.558343][ T6241] lo speed is unknown, defaulting to 1000 [ 147.581138][ T8256] lo speed is unknown, defaulting to 1000 [ 147.810869][ T8307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1060'. [ 147.834917][ T8314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1063'. [ 147.888757][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1063'. [ 148.004161][ T8322] netlink: 'syz.3.1064': attribute type 13 has an invalid length. [ 148.023265][ T8256] lo speed is unknown, defaulting to 1000 [ 148.155905][ T8330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1066'. [ 148.472408][ T8064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.521790][ T8064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.544793][ T8256] lo speed is unknown, defaulting to 1000 [ 148.558088][ T8064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.603127][ T8064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 148.722622][ T8351] FAULT_INJECTION: forcing a failure. [ 148.722622][ T8351] name failslab, interval 1, probability 0, space 0, times 0 [ 148.767224][ T8351] CPU: 0 PID: 8351 Comm: syz.4.1068 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 148.777359][ T8351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 148.787449][ T8351] Call Trace: [ 148.790755][ T8351] [ 148.793772][ T8351] dump_stack_lvl+0x241/0x360 [ 148.798494][ T8351] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.803737][ T8351] ? __pfx__printk+0x10/0x10 [ 148.808373][ T8351] ? __pfx___might_resched+0x10/0x10 [ 148.813713][ T8351] ? __lock_acquire+0x1346/0x1fd0 [ 148.818782][ T8351] should_fail_ex+0x3b0/0x4e0 [ 148.820807][ T8354] ip6t_REJECT: ECHOREPLY is not supported [ 148.823481][ T8351] ? bpf_test_init+0xe1/0x180 [ 148.833884][ T8351] should_failslab+0x9/0x20 [ 148.838427][ T8351] __kmalloc_noprof+0xd8/0x400 [ 148.843229][ T8351] bpf_test_init+0xe1/0x180 [ 148.847771][ T8351] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 148.853180][ T8351] ? __pfx_lock_acquire+0x10/0x10 [ 148.858232][ T8351] ? __pfx_lock_release+0x10/0x10 [ 148.863294][ T8351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 148.869142][ T8351] ? __fget_files+0x29/0x470 [ 148.873867][ T8351] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 148.879722][ T8351] bpf_prog_test_run+0x33a/0x3b0 [ 148.884694][ T8351] __sys_bpf+0x48d/0x810 [ 148.888976][ T8351] ? __pfx___sys_bpf+0x10/0x10 [ 148.893794][ T8351] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.899805][ T8351] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.902667][ T8064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.906137][ T8351] ? do_syscall_64+0x100/0x230 [ 148.917516][ T8351] __x64_sys_bpf+0x7c/0x90 [ 148.921976][ T8351] do_syscall_64+0xf3/0x230 [ 148.926521][ T8351] ? clear_bhb_loop+0x35/0x90 [ 148.931236][ T8351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.937167][ T8351] RIP: 0033:0x7fa500975a19 [ 148.941954][ T8351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.961586][ T8351] RSP: 002b:00007fa5017ae048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.962096][ T8064] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.970000][ T8351] RAX: ffffffffffffffda RBX: 00007fa500b03f60 RCX: 00007fa500975a19 [ 148.970015][ T8351] RDX: 0000000000000057 RSI: 0000000020000240 RDI: 000000000000000a [ 148.970026][ T8351] RBP: 00007fa5017ae0a0 R08: 0000000000000000 R09: 0000000000000000 [ 148.970036][ T8351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.970046][ T8351] R13: 000000000000004d R14: 00007fa500b03f60 R15: 00007fff4018aa18 [ 148.970102][ T8351] [ 150.579927][ T8256] lo speed is unknown, defaulting to 1000 [ 150.621549][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.628777][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.648163][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.656561][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.738205][ T8373] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 150.870600][ T8064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.889178][ T5105] Bluetooth: hci0: command 0x0405 tx timeout [ 150.955857][ T8256] lo speed is unknown, defaulting to 1000 [ 151.323924][ T8064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.475253][ T8064] veth0_vlan: entered promiscuous mode [ 151.551768][ T8064] veth1_vlan: entered promiscuous mode [ 151.645795][ T8064] veth0_macvtap: entered promiscuous mode [ 151.722175][ T8064] veth1_macvtap: entered promiscuous mode [ 151.794431][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.833173][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.854771][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.877212][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.887602][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.898908][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.911270][ T8064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.599895][ T8424] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.607653][ T8424] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.694538][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.721684][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.738126][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.754380][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.781945][ T8064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.820234][ T8064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.838349][ T8064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.883892][ T8064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.925140][ T8064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.939087][ T8064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.987450][ T8064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.277374][ T2871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.298207][ T2871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.341805][ T2871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.356772][ T2871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.370956][ T8479] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 153.397851][ T8485] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.960570][ T8500] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 154.476447][ T8523] caif0 speed is unknown, defaulting to 1000 [ 154.921435][ T2871] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.210872][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1111'. [ 155.299356][ T8545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1111'. [ 155.434217][ T2871] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.573562][ T8523] lo speed is unknown, defaulting to 1000 [ 155.596616][ T5105] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.609548][ T5105] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.626974][ T5105] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.649807][ T5105] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.657703][ T5105] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.666562][ T5105] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.734520][ T2871] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.924467][ T8557] caif0 speed is unknown, defaulting to 1000 [ 155.932258][ T8564] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 156.010071][ T2871] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.310804][ T2871] bridge_slave_1: left allmulticast mode [ 156.339548][ T2871] bridge_slave_1: left promiscuous mode [ 156.345437][ T2871] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.395400][ T2871] bridge_slave_0: left allmulticast mode [ 156.403589][ T2871] bridge_slave_0: left promiscuous mode [ 156.410237][ T2871] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.937669][ T2871] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.951353][ T2871] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.964211][ T2871] bond0 (unregistering): Released all slaves [ 157.016425][ T8557] lo speed is unknown, defaulting to 1000 [ 157.768798][ T5105] Bluetooth: hci0: command tx timeout [ 158.561913][ T8607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1124'. [ 158.767104][ T8609] bridge_slave_1: left allmulticast mode [ 158.782807][ T8609] bridge_slave_1: left promiscuous mode [ 158.800557][ T8609] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.832894][ T8609] bridge2: port 1(bridge_slave_1) entered blocking state [ 158.848721][ T8609] bridge2: port 1(bridge_slave_1) entered disabled state [ 158.862833][ T8609] bridge_slave_1: entered allmulticast mode [ 158.900071][ T8609] bridge_slave_1: entered promiscuous mode [ 158.920753][ T8609] bridge2: port 1(bridge_slave_1) entered blocking state [ 158.928007][ T8609] bridge2: port 1(bridge_slave_1) entered forwarding state [ 158.945434][ T8611] bridge2: port 2(veth1_to_bond) entered blocking state [ 158.966993][ T8611] bridge2: port 2(veth1_to_bond) entered disabled state [ 158.978850][ T8611] veth1_to_bond: entered allmulticast mode [ 158.986656][ T8611] veth1_to_bond: entered promiscuous mode [ 158.994044][ T8611] bridge2: port 2(veth1_to_bond) entered blocking state [ 159.001212][ T8611] bridge2: port 2(veth1_to_bond) entered forwarding state [ 159.117501][ T2871] hsr_slave_0: left promiscuous mode [ 159.135875][ T2871] hsr_slave_1: left promiscuous mode [ 159.153875][ T2871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.168208][ T8617] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 159.179463][ T2871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.189166][ T2871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.196621][ T2871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.235600][ T2871] veth1_macvtap: left promiscuous mode [ 159.245151][ T2871] veth0_macvtap: left promiscuous mode [ 159.256588][ T2871] veth1_vlan: left promiscuous mode [ 159.264038][ T2871] veth0_vlan: left promiscuous mode [ 159.815196][ T2871] team0 (unregistering): Port device team_slave_1 removed [ 159.852174][ T5105] Bluetooth: hci0: command tx timeout [ 159.867690][ T2871] team0 (unregistering): Port device team_slave_0 removed [ 160.285583][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 160.423361][ T8557] chnl_net:caif_netlink_parms(): no params data found [ 160.822030][ T8649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1134'. [ 160.845587][ T8655] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.072442][ T8557] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.110654][ T8557] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.117961][ T8557] bridge_slave_0: entered allmulticast mode [ 161.143465][ T8557] bridge_slave_0: entered promiscuous mode [ 161.166016][ T8557] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.176018][ T8557] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.199270][ T8557] bridge_slave_1: entered allmulticast mode [ 161.206644][ T8557] bridge_slave_1: entered promiscuous mode [ 161.362978][ T8666] syzkaller1: entered promiscuous mode [ 161.370190][ T8666] syzkaller1: entered allmulticast mode [ 161.411904][ T8557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.452224][ T8557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.567188][ T8680] vlan1: entered promiscuous mode [ 161.774468][ T8557] team0: Port device team_slave_0 added [ 161.791961][ T8557] team0: Port device team_slave_1 added [ 161.923618][ T8696] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1141'. [ 161.938914][ T5105] Bluetooth: hci0: command tx timeout [ 162.010235][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.046935][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.106325][ T8557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.149955][ T8557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.169247][ T8557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.226995][ T8557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.247836][ T8703] netlink: 'syz.4.1144': attribute type 29 has an invalid length. [ 162.256838][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1144'. [ 162.472387][ T8557] hsr_slave_0: entered promiscuous mode [ 162.524060][ T8557] hsr_slave_1: entered promiscuous mode [ 162.622856][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1146'. [ 162.696558][ T8717] xt_NFQUEUE: number of total queues is 0 [ 163.898042][ T8557] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.948248][ T8557] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.998228][ T8557] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 164.009478][ T5105] Bluetooth: hci0: command tx timeout [ 164.031584][ T8745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1151'. [ 164.068957][ T8557] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 164.159501][ T8758] syzkaller1: entered promiscuous mode [ 164.165016][ T8758] syzkaller1: entered allmulticast mode [ 164.565122][ T8557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.734566][ T8557] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.028240][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.035484][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.138192][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.145449][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.249822][ T8778] netlink: 'syz.1.1157': attribute type 29 has an invalid length. [ 165.279762][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1157'. [ 165.578394][ T8795] netlink: 'syz.2.1160': attribute type 23 has an invalid length. [ 166.207264][ T8557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.376466][ T8557] veth0_vlan: entered promiscuous mode [ 166.460190][ T8557] veth1_vlan: entered promiscuous mode [ 166.605406][ T8557] veth0_macvtap: entered promiscuous mode [ 166.650598][ T8557] veth1_macvtap: entered promiscuous mode [ 166.774681][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.820765][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.848586][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.878869][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.918503][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.948562][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.961512][ T8841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1168'. [ 166.981063][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.990149][ T8834] caif0 speed is unknown, defaulting to 1000 [ 167.013255][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.044180][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.076955][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.108109][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.138796][ T8557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.168601][ T8557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.200334][ T8557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.302612][ T8557] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.345373][ T8557] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.398226][ T8557] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.417432][ T8557] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.786764][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.843410][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.938275][ T8834] lo speed is unknown, defaulting to 1000 [ 167.946374][ T2871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.967820][ T2871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.168201][ T8872] xt_TCPMSS: Only works on TCP SYN packets [ 168.714925][ T8902] ieee802154 phy0 wpan0: encryption failed: -22 [ 168.877172][ T5105] Bluetooth: hci4: link tx timeout [ 168.882811][ T5105] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 168.903632][ T5105] Bluetooth: hci4: link tx timeout [ 168.913457][ T5105] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 168.923075][ T5105] Bluetooth: hci4: link tx timeout [ 168.930520][ T5105] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 168.938410][ T5105] Bluetooth: hci4: link tx timeout [ 168.943939][ T5105] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 168.956489][ T5105] Bluetooth: hci4: link tx timeout [ 168.962432][ T5105] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 168.971695][ T5105] Bluetooth: hci4: link tx timeout [ 168.976850][ T5105] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 168.997731][ T5105] Bluetooth: hci4: link tx timeout [ 169.003383][ T5105] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 169.532128][ T5097] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.551733][ T5097] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.565490][ T5097] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.576163][ T5097] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.593548][ T5097] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.605916][ T5097] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.772257][ T8909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 170.945508][ T66] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.970704][ T5105] Bluetooth: hci4: command 0x0405 tx timeout [ 170.980707][ T8935] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1185'. [ 171.138178][ T8933] bond0: (slave team0): Releasing backup interface [ 171.182382][ T8933] team0: left promiscuous mode [ 171.213574][ T8933] team_slave_0: left promiscuous mode [ 171.227112][ T8933] team_slave_1: left promiscuous mode [ 171.233350][ T8933] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 171.248422][ T8933] team0: left allmulticast mode [ 171.253610][ T8933] team_slave_0: left allmulticast mode [ 171.264767][ T8933] team_slave_1: left allmulticast mode [ 171.270624][ T8933] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 171.314975][ T8933] bridge_slave_0: left allmulticast mode [ 171.321040][ T8933] bridge_slave_0: left promiscuous mode [ 171.328180][ T8933] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.362492][ T8933] bridge_slave_1: left allmulticast mode [ 171.373413][ T8933] bridge_slave_1: left promiscuous mode [ 171.383200][ T8933] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.393759][ T8933] bond0: (slave bond_slave_1): Releasing backup interface [ 171.410211][ T8933] bond_slave_1: left promiscuous mode [ 171.415796][ T8933] bond_slave_1: left allmulticast mode [ 171.429966][ T8933] team0: Port device team_slave_0 removed [ 171.437420][ T8933] team0: Port device team_slave_1 removed [ 171.450136][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.458088][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.467815][ T8933] team0: Port device netdevsim0 removed [ 171.485932][ T8937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.492892][ T8937] team0: Device bond0 failed to register rx_handler [ 171.525993][ T8924] caif0 speed is unknown, defaulting to 1000 [ 171.617659][ T66] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.659494][ T8941] netlink: 'syz.3.1188': attribute type 29 has an invalid length. [ 171.669103][ T8942] netlink: 'syz.3.1188': attribute type 29 has an invalid length. [ 171.677349][ T8943] netlink: 'syz.3.1188': attribute type 29 has an invalid length. [ 171.696264][ T5100] Bluetooth: hci0: command tx timeout [ 171.805126][ T66] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.857810][ T8924] lo speed is unknown, defaulting to 1000 [ 171.940794][ T66] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.999409][ T8959] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 172.054639][ T8962] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.062906][ T8962] bond2: entered promiscuous mode [ 172.068381][ T8962] bond2: entered allmulticast mode [ 172.075257][ T8962] bond0: (slave bond2): Enslaving as an active interface with an up link [ 172.199105][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1195'. [ 172.419687][ T66] bridge_slave_1: left allmulticast mode [ 172.447251][ T66] bridge_slave_1: left promiscuous mode [ 172.453483][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.472286][ T66] bridge_slave_0: left allmulticast mode [ 172.495328][ T66] bridge_slave_0: left promiscuous mode [ 172.503605][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.919830][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.931993][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.944955][ T66] bond0 (unregistering): Released all slaves [ 172.972295][ T8976] bond0: left allmulticast mode [ 172.977246][ T8976] bond_slave_0: left allmulticast mode [ 172.988156][ T8976] bond_slave_1: left allmulticast mode [ 172.993907][ T8976] bond0: left promiscuous mode [ 173.012158][ T8976] bond_slave_0: left promiscuous mode [ 173.017944][ T8976] bond_slave_1: left promiscuous mode [ 173.028527][ T8976] bridge0: port 3(bond0) entered disabled state [ 173.057482][ T8976] batman_adv: batadv0: Removing interface: team0 [ 173.083920][ T8976] bridge_slave_0: left allmulticast mode [ 173.097858][ T8976] bridge_slave_0: left promiscuous mode [ 173.104946][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.115828][ T8976] bridge_slave_1: left allmulticast mode [ 173.121808][ T8976] bridge_slave_1: left promiscuous mode [ 173.127598][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.141091][ T8976] bond0: (slave bond_slave_0): Releasing backup interface [ 173.157605][ T8976] bond0: (slave bond_slave_1): Releasing backup interface [ 173.201297][ T8976] team0: Port device team_slave_0 removed [ 173.221576][ T8976] team0: Port device team_slave_1 removed [ 173.228001][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.240244][ T8976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.249616][ T8976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.257110][ T8976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.273098][ T8976] batman_adv: batadv0: Removing interface: ipvlan2 [ 173.319558][ T8980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.334354][ T8980] team0: Port device bond0 added [ 173.527389][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1203'. [ 173.541148][ T8995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1205'. [ 173.773125][ T5100] Bluetooth: hci0: command tx timeout [ 174.013428][ T9017] team0: entered promiscuous mode [ 174.136932][ T9023] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 174.229535][ T9036] FAULT_INJECTION: forcing a failure. [ 174.229535][ T9036] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 174.243341][ T9036] CPU: 1 PID: 9036 Comm: syz.3.1214 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 174.253443][ T9036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 174.263524][ T9036] Call Trace: [ 174.266826][ T9036] [ 174.269754][ T9036] dump_stack_lvl+0x241/0x360 [ 174.274439][ T9036] ? __pfx_dump_stack_lvl+0x10/0x10 [ 174.279660][ T9036] ? __pfx__printk+0x10/0x10 [ 174.284260][ T9036] should_fail_ex+0x3b0/0x4e0 [ 174.288945][ T9036] prepare_alloc_pages+0x1da/0x5d0 [ 174.294062][ T9036] __alloc_pages_noprof+0x166/0x6c0 [ 174.299260][ T9036] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 174.304985][ T9036] ? __pfx_validate_chain+0x10/0x10 [ 174.310185][ T9036] alloc_pages_mpol_noprof+0x3e8/0x680 [ 174.315660][ T9036] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 174.321650][ T9036] vma_alloc_folio_noprof+0xf3/0x1f0 [ 174.326936][ T9036] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 174.332849][ T9036] ? __lock_acquire+0x1346/0x1fd0 [ 174.337881][ T9036] folio_prealloc+0x31/0x170 [ 174.342471][ T9036] handle_pte_fault+0x257b/0x7090 [ 174.347506][ T9036] ? __pfx_lock_acquire+0x10/0x10 [ 174.352531][ T9036] ? __pfx_handle_pte_fault+0x10/0x10 [ 174.357898][ T9036] ? do_raw_spin_lock+0x14f/0x370 [ 174.362937][ T9036] ? follow_page_pte+0x29a/0x1ee0 [ 174.367969][ T9036] ? follow_page_pte+0x83f/0x1ee0 [ 174.373078][ T9036] ? __pfx_lock_release+0x10/0x10 [ 174.378103][ T9036] ? do_raw_spin_unlock+0x13c/0x8b0 [ 174.383310][ T9036] handle_mm_fault+0x10df/0x1ba0 [ 174.388267][ T9036] ? __pfx_handle_mm_fault+0x10/0x10 [ 174.393580][ T9036] ? __pfx_find_vma+0x10/0x10 [ 174.398258][ T9036] ? vma_is_secretmem+0xd/0x50 [ 174.403049][ T9036] ? check_vma_flags+0x531/0x5a0 [ 174.407994][ T9036] __get_user_pages+0x6ec/0x16a0 [ 174.412960][ T9036] ? __pfx___get_user_pages+0x10/0x10 [ 174.418343][ T9036] ? __pfx_lock_acquire+0x10/0x10 [ 174.423364][ T9036] __gup_longterm_locked+0x1ff6/0x2a80 [ 174.428852][ T9036] ? __pfx___gup_longterm_locked+0x10/0x10 [ 174.434657][ T9036] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 174.440637][ T9036] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 174.446656][ T9036] gup_fast_fallback+0x2742/0x2b50 [ 174.451791][ T9036] ? __pfx_gup_fast_fallback+0x10/0x10 [ 174.457245][ T9036] ? __sys_getsockopt+0x271/0x330 [ 174.462291][ T9036] ? do_syscall_64+0xf3/0x230 [ 174.466966][ T9036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.473062][ T9036] ? is_valid_gup_args+0x124/0x200 [ 174.478174][ T9036] pin_user_pages_fast+0xcc/0x160 [ 174.483198][ T9036] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 174.488846][ T9036] ? rds_info_getsockopt+0x20c/0x600 [ 174.494139][ T9036] ? rds_info_getsockopt+0x20c/0x600 [ 174.499418][ T9036] ? __kmalloc_noprof+0x217/0x400 [ 174.504448][ T9036] rds_info_getsockopt+0x22e/0x600 [ 174.509556][ T9036] ? __might_fault+0xaa/0x120 [ 174.514236][ T9036] ? __pfx_lock_release+0x10/0x10 [ 174.519261][ T9036] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 174.524899][ T9036] ? __might_fault+0xc6/0x120 [ 174.529579][ T9036] ? rds_getsockopt+0x177/0x530 [ 174.534434][ T9036] ? __pfx_rds_getsockopt+0x10/0x10 [ 174.539632][ T9036] do_sock_getsockopt+0x373/0x850 [ 174.544658][ T9036] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 174.550286][ T9036] ? __fget_files+0x3f6/0x470 [ 174.554970][ T9036] __sys_getsockopt+0x271/0x330 [ 174.559821][ T9036] ? __pfx___sys_getsockopt+0x10/0x10 [ 174.565191][ T9036] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.571522][ T9036] ? do_syscall_64+0x100/0x230 [ 174.576291][ T9036] __x64_sys_getsockopt+0xb5/0xd0 [ 174.581319][ T9036] do_syscall_64+0xf3/0x230 [ 174.585824][ T9036] ? clear_bhb_loop+0x35/0x90 [ 174.590499][ T9036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.596391][ T9036] RIP: 0033:0x7fc3fcd75a19 [ 174.600801][ T9036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.620406][ T9036] RSP: 002b:00007fc3fdab7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 174.628820][ T9036] RAX: ffffffffffffffda RBX: 00007fc3fcf03f60 RCX: 00007fc3fcd75a19 [ 174.636790][ T9036] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000008 [ 174.644758][ T9036] RBP: 00007fc3fdab70a0 R08: 0000000020000000 R09: 0000000000000000 [ 174.652727][ T9036] R10: 0000000020000580 R11: 0000000000000246 R12: 0000000000000002 [ 174.661133][ T9036] R13: 000000000000004d R14: 00007fc3fcf03f60 R15: 00007ffef6f55c88 [ 174.669130][ T9036] [ 175.045162][ T9014] team0: left promiscuous mode [ 175.256652][ T66] hsr_slave_0: left promiscuous mode [ 175.266855][ T66] hsr_slave_1: left promiscuous mode [ 175.278061][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.299529][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.307725][ T9060] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1218'. [ 175.321962][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.331591][ T9060] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 175.340751][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.370598][ T66] veth1_macvtap: left promiscuous mode [ 175.376180][ T66] veth0_macvtap: left promiscuous mode [ 175.384724][ T66] veth1_vlan: left promiscuous mode [ 175.390452][ T66] veth0_vlan: left promiscuous mode [ 175.848624][ T5100] Bluetooth: hci0: command tx timeout [ 175.906844][ T66] team0 (unregistering): Port device team_slave_1 removed [ 175.954986][ T66] team0 (unregistering): Port device team_slave_0 removed [ 176.357410][ T8924] chnl_net:caif_netlink_parms(): no params data found [ 176.422352][ T9050] ɶƣ0GC¦: entered promiscuous mode [ 176.662436][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.671487][ T9082] netlink: 'syz.4.1225': attribute type 3 has an invalid length. [ 176.689100][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.696585][ T8924] bridge_slave_0: entered allmulticast mode [ 176.711572][ T8924] bridge_slave_0: entered promiscuous mode [ 176.735447][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.764784][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.794414][ T9081] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 176.808776][ T8924] bridge_slave_1: entered allmulticast mode [ 176.856776][ T8924] bridge_slave_1: entered promiscuous mode [ 176.963997][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.006361][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.145977][ T9098] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 177.219899][ T9098] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 177.253223][ T9098] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 177.314428][ T9098] team0: Port device netdevsim0 added [ 177.351751][ T8924] team0: Port device team_slave_0 added [ 177.390717][ T8924] team0: Port device team_slave_1 added [ 177.524419][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.549111][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.614297][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.679560][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.687480][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.735583][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.820038][ T9128] netlink: 'syz.2.1237': attribute type 10 has an invalid length. [ 177.929688][ T5100] Bluetooth: hci0: command tx timeout [ 177.966513][ T8924] hsr_slave_0: entered promiscuous mode [ 177.983274][ T8924] hsr_slave_1: entered promiscuous mode [ 178.037952][ T9138] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 178.116082][ T9145] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 178.239614][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1244'. [ 178.462313][ T9162] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1248'. [ 178.655686][ T9174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1253'. [ 178.718117][ T9178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1251'. [ 178.833292][ T9188] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 178.915825][ T9187] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 179.363051][ T8924] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.393387][ T8924] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.417859][ T8924] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.432943][ T9211] caif0 speed is unknown, defaulting to 1000 [ 179.433466][ T8924] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.455047][ T9206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.502808][ T9215] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1264'. [ 179.725749][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.836138][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.888157][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.895409][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.933752][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.941084][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.965679][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1267'. [ 180.023069][ T9229] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1267'. [ 180.197779][ T9235] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 180.263469][ T9241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1269'. [ 180.467331][ T8924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.520742][ T9211] lo speed is unknown, defaulting to 1000 [ 180.681407][ T8924] veth0_vlan: entered promiscuous mode [ 180.697385][ T8924] veth1_vlan: entered promiscuous mode [ 180.821406][ T8924] veth0_macvtap: entered promiscuous mode [ 180.843934][ T9267] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 180.907899][ T9268] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1274'. [ 180.949603][ T8924] veth1_macvtap: entered promiscuous mode [ 181.051107][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.079557][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.099359][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.122468][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.136243][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.194794][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.224411][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.236913][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.254069][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.266190][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.323886][ T8924] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.340692][ T8924] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.349771][ T8924] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.359514][ T8924] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.709466][ T2879] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.738362][ T2879] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.755059][ T9292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1277'. [ 181.903019][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.936330][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.985081][ T9298] pim6reg: entered allmulticast mode [ 182.270399][ T9310] ------------[ cut here ]------------ [ 182.276324][ T9310] WARNING: CPU: 0 PID: 9310 at kernel/workqueue.c:2282 __queue_work+0xc5e/0xee0 [ 182.285396][ T9310] Modules linked in: [ 182.289324][ T9310] CPU: 0 PID: 9310 Comm: syz.3.1281 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 182.299416][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 182.309512][ T9310] RIP: 0010:__queue_work+0xc5e/0xee0 [ 182.314834][ T9310] Code: ff e8 36 83 36 00 90 0f 0b 90 e9 20 fd ff ff e8 28 83 36 00 eb 13 e8 21 83 36 00 eb 0c e8 1a 83 36 00 eb 05 e8 13 83 36 00 90 <0f> 0b 90 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 182.334469][ T9310] RSP: 0018:ffffc90013bf74b0 EFLAGS: 00010087 [ 182.340543][ T9310] RAX: ffffffff815fa3df RBX: ffff88801e678000 RCX: 0000000000040000 [ 182.348514][ T9310] RDX: ffffc9000a281000 RSI: 000000000000034f RDI: 0000000000000350 [ 182.356482][ T9310] RBP: 0000000000000000 R08: ffffffff815f98b3 R09: 0000000000000000 [ 182.364446][ T9310] R10: ffffc90013bf7580 R11: fffff5200277eeb1 R12: ffff88802aaa71c0 [ 182.372435][ T9310] R13: dffffc0000000000 R14: ffff88802aaa7000 R15: 0000000000000008 [ 182.380411][ T9310] FS: 00007fc3fdab76c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 182.389430][ T9310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.396010][ T9310] CR2: 0000001b32afbb00 CR3: 00000000679d6000 CR4: 00000000003506f0 [ 182.403983][ T9310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.411958][ T9310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.419927][ T9310] Call Trace: [ 182.423203][ T9310] [ 182.426129][ T9310] ? __warn+0x163/0x4e0 [ 182.430296][ T9310] ? __queue_work+0xc5e/0xee0 [ 182.434992][ T9310] ? report_bug+0x2b3/0x500 [ 182.439502][ T9310] ? __queue_work+0xc5e/0xee0 [ 182.444183][ T9310] ? handle_bug+0x3e/0x70 [ 182.448516][ T9310] ? exc_invalid_op+0x1a/0x50 [ 182.453193][ T9310] ? asm_exc_invalid_op+0x1a/0x20 [ 182.458228][ T9310] ? __queue_work+0x123/0xee0 [ 182.462900][ T9310] ? __queue_work+0xc4f/0xee0 [ 182.467575][ T9310] ? __queue_work+0xc5e/0xee0 [ 182.472251][ T9310] ? lockdep_hardirqs_on+0x99/0x150 [ 182.477458][ T9310] queue_work_on+0x1c2/0x380 [ 182.482055][ T9310] ? __pfx_queue_work_on+0x10/0x10 [ 182.487174][ T9310] ? l2cap_do_send+0x155/0x2c0 [ 182.491935][ T9310] l2cap_chan_send+0x3d6/0x2690 [ 182.496787][ T9310] ? trace_contention_end+0x3c/0x120 [ 182.502075][ T9310] ? __mutex_lock+0x2ef/0xd70 [ 182.506775][ T9310] ? __pfx_l2cap_chan_send+0x10/0x10 [ 182.512066][ T9310] ? do_raw_spin_unlock+0x13c/0x8b0 [ 182.517274][ T9310] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 182.522336][ T9310] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 182.527896][ T9310] __sock_sendmsg+0x221/0x270 [ 182.532589][ T9310] ____sys_sendmsg+0x525/0x7d0 [ 182.537370][ T9310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.542669][ T9310] __sys_sendmmsg+0x3b2/0x740 [ 182.547353][ T9310] ? __pfx___sys_sendmmsg+0x10/0x10 [ 182.552573][ T9310] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 182.558904][ T9310] ? __send_signal_locked+0xb44/0xdc0 [ 182.564283][ T9310] ? futex_wait+0x285/0x360 [ 182.568806][ T9310] ? __pfx_futex_wait+0x10/0x10 [ 182.573676][ T9310] ? bpf_trace_run2+0x1fc/0x540 [ 182.578535][ T9310] ? bpf_send_signal_common+0x2dd/0x430 [ 182.584083][ T9310] ? do_futex+0x33b/0x560 [ 182.588424][ T9310] ? bpf_trace_run2+0x1fc/0x540 [ 182.593289][ T9310] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 182.599269][ T9310] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 182.605599][ T9310] ? do_syscall_64+0x100/0x230 [ 182.610367][ T9310] __x64_sys_sendmmsg+0xa0/0xb0 [ 182.615221][ T9310] do_syscall_64+0xf3/0x230 [ 182.619729][ T9310] ? clear_bhb_loop+0x35/0x90 [ 182.624404][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.630303][ T9310] RIP: 0033:0x7fc3fcd75a19 [ 182.634891][ T9310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.654509][ T9310] RSP: 002b:00007fc3fdab7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 182.662959][ T9310] RAX: ffffffffffffffda RBX: 00007fc3fcf03f60 RCX: 00007fc3fcd75a19 [ 182.670940][ T9310] RDX: 00000000ffffff80 RSI: 0000000020004100 RDI: 0000000000000004 [ 182.678911][ T9310] RBP: 00007fc3fcde4e49 R08: 0000000000000000 R09: 0000000000000000 [ 182.686877][ T9310] R10: 0000000000010040 R11: 0000000000000246 R12: 0000000000000000 [ 182.694845][ T9310] R13: 000000000000004d R14: 00007fc3fcf03f60 R15: 00007ffef6f55c88 [ 182.702835][ T9310] [ 182.705852][ T9310] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.713150][ T9310] CPU: 0 PID: 9310 Comm: syz.3.1281 Not tainted 6.10.0-rc7-syzkaller-02016-g77ae5e5b0072 #0 [ 182.723219][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 182.733271][ T9310] Call Trace: [ 182.736548][ T9310] [ 182.739483][ T9310] dump_stack_lvl+0x241/0x360 [ 182.744175][ T9310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.749372][ T9310] ? __pfx__printk+0x10/0x10 [ 182.753956][ T9310] ? _printk+0xd5/0x120 [ 182.758114][ T9310] ? vscnprintf+0x5d/0x90 [ 182.762438][ T9310] panic+0x349/0x860 [ 182.766339][ T9310] ? __warn+0x172/0x4e0 [ 182.770499][ T9310] ? __pfx_panic+0x10/0x10 [ 182.774913][ T9310] ? show_trace_log_lvl+0x4e6/0x520 [ 182.780127][ T9310] __warn+0x346/0x4e0 [ 182.784108][ T9310] ? __queue_work+0xc5e/0xee0 [ 182.788959][ T9310] report_bug+0x2b3/0x500 [ 182.793290][ T9310] ? __queue_work+0xc5e/0xee0 [ 182.797998][ T9310] handle_bug+0x3e/0x70 [ 182.802200][ T9310] exc_invalid_op+0x1a/0x50 [ 182.806774][ T9310] asm_exc_invalid_op+0x1a/0x20 [ 182.811683][ T9310] RIP: 0010:__queue_work+0xc5e/0xee0 [ 182.816987][ T9310] Code: ff e8 36 83 36 00 90 0f 0b 90 e9 20 fd ff ff e8 28 83 36 00 eb 13 e8 21 83 36 00 eb 0c e8 1a 83 36 00 eb 05 e8 13 83 36 00 90 <0f> 0b 90 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 182.836598][ T9310] RSP: 0018:ffffc90013bf74b0 EFLAGS: 00010087 [ 182.842674][ T9310] RAX: ffffffff815fa3df RBX: ffff88801e678000 RCX: 0000000000040000 [ 182.850646][ T9310] RDX: ffffc9000a281000 RSI: 000000000000034f RDI: 0000000000000350 [ 182.858610][ T9310] RBP: 0000000000000000 R08: ffffffff815f98b3 R09: 0000000000000000 [ 182.866574][ T9310] R10: ffffc90013bf7580 R11: fffff5200277eeb1 R12: ffff88802aaa71c0 [ 182.874543][ T9310] R13: dffffc0000000000 R14: ffff88802aaa7000 R15: 0000000000000008 [ 182.882519][ T9310] ? __queue_work+0x123/0xee0 [ 182.887196][ T9310] ? __queue_work+0xc4f/0xee0 [ 182.891874][ T9310] ? lockdep_hardirqs_on+0x99/0x150 [ 182.897080][ T9310] queue_work_on+0x1c2/0x380 [ 182.901670][ T9310] ? __pfx_queue_work_on+0x10/0x10 [ 182.906786][ T9310] ? l2cap_do_send+0x155/0x2c0 [ 182.911547][ T9310] l2cap_chan_send+0x3d6/0x2690 [ 182.916397][ T9310] ? trace_contention_end+0x3c/0x120 [ 182.921680][ T9310] ? __mutex_lock+0x2ef/0xd70 [ 182.926358][ T9310] ? __pfx_l2cap_chan_send+0x10/0x10 [ 182.931642][ T9310] ? do_raw_spin_unlock+0x13c/0x8b0 [ 182.936847][ T9310] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 182.941881][ T9310] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 182.947440][ T9310] __sock_sendmsg+0x221/0x270 [ 182.952154][ T9310] ____sys_sendmsg+0x525/0x7d0 [ 182.956925][ T9310] ? __pfx_____sys_sendmsg+0x10/0x10 [ 182.962221][ T9310] __sys_sendmmsg+0x3b2/0x740 [ 182.966910][ T9310] ? __pfx___sys_sendmmsg+0x10/0x10 [ 182.972124][ T9310] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 182.978468][ T9310] ? __send_signal_locked+0xb44/0xdc0 [ 182.983846][ T9310] ? futex_wait+0x285/0x360 [ 182.988348][ T9310] ? __pfx_futex_wait+0x10/0x10 [ 182.993207][ T9310] ? bpf_trace_run2+0x1fc/0x540 [ 182.998056][ T9310] ? bpf_send_signal_common+0x2dd/0x430 [ 183.003603][ T9310] ? do_futex+0x33b/0x560 [ 183.007982][ T9310] ? bpf_trace_run2+0x1fc/0x540 [ 183.012845][ T9310] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 183.018828][ T9310] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.025155][ T9310] ? do_syscall_64+0x100/0x230 [ 183.029921][ T9310] __x64_sys_sendmmsg+0xa0/0xb0 [ 183.034771][ T9310] do_syscall_64+0xf3/0x230 [ 183.039284][ T9310] ? clear_bhb_loop+0x35/0x90 [ 183.043996][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.049908][ T9310] RIP: 0033:0x7fc3fcd75a19 [ 183.054326][ T9310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.073934][ T9310] RSP: 002b:00007fc3fdab7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 183.082352][ T9310] RAX: ffffffffffffffda RBX: 00007fc3fcf03f60 RCX: 00007fc3fcd75a19 [ 183.090315][ T9310] RDX: 00000000ffffff80 RSI: 0000000020004100 RDI: 0000000000000004 [ 183.098282][ T9310] RBP: 00007fc3fcde4e49 R08: 0000000000000000 R09: 0000000000000000 [ 183.106247][ T9310] R10: 0000000000010040 R11: 0000000000000246 R12: 0000000000000000 [ 183.114218][ T9310] R13: 000000000000004d R14: 00007fc3fcf03f60 R15: 00007ffef6f55c88 [ 183.122199][ T9310] [ 183.125442][ T9310] Kernel Offset: disabled [ 183.129849][ T9310] Rebooting in 86400 seconds..