last executing test programs: 6.942922642s ago: executing program 1 (id=1447): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x5, 0x12, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000090000ff0f000000aa0800001f1361c6cf74efaa8a9422470418110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="000000000000000085100000f9ffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x90) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9a316a0b01e8f7a9fb08682df779c820e43ff3bcd6cb856ec8a4e97428ba06224c16fbb801cbed761963aee39a1f088e46eeb36c2e51ce91ed1062c005a450f4ed90b98c51751f73d65d2da01577271aafbd56a0d0cc9677b4a82793ff6286fa9ffea1f205375c82277f80b96c1eaa26ede2097e95796696e5e47f5df4a45a43e3cdd3a1776a58cb9f0393fc1b4758e711331743061402e4026ec7b00a44eae6acf75eed2f650e32806b0d4e897f3fa179612855f946d0893bf1c8c7835bf5c9f3e596a321e9", @ANYRESHEX=r0, @ANYRES32=r1, @ANYRESHEX=r1], 0x10}}, 0x0) 5.954926159s ago: executing program 1 (id=1460): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xffffffffffff0000}, 0x800, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x1e, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@func, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x6, 0x0, 0x8}, @cb_func, @generic={0x0, 0x0, 0x0, 0xf}, @printk, @ringbuf_query, @printk={@s}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x10, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) setsockopt$inet6_int(r4, 0x29, 0x35, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r5, 0x0, 0x4080) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r8 = socket$rxrpc(0x21, 0x2, 0x2) sendto$rxrpc(r8, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r8, 0x110, 0x2, 0x0, 0x0) splice(r3, &(0x7f0000000180)=0x1, r1, &(0x7f0000000300)=0x7, 0x80000001, 0x0) bind$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 5.900391112s ago: executing program 2 (id=1462): unshare(0x26020480) unshare(0x2000400) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4008000) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x300, {[@mss={0x2, 0x4, 0xa005}, @nop]}}}}}}}, 0x0) 5.454486536s ago: executing program 2 (id=1464): socket$kcm(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c00028008000100080000000800", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 4.913749863s ago: executing program 2 (id=1466): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getpeername(r0, &(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000180)=0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r1, 0x3}, &(0x7f0000000300)=0x8) 4.872492889s ago: executing program 4 (id=1467): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e179931076b096c1d0000007aa60864160af36514001ac00800020004000200", 0x2c}, {&(0x7f0000000640)="febabcbc41192e21939792586e325578c36c791603e743f41d098f1f276a3961d81cc3ef7e37e1e24b795796752150e1", 0x30}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b03d25a806c8c6f94f90624fc601000127a0a000600093582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) recvmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 4.525857354s ago: executing program 2 (id=1468): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001a80)=""/18, 0x12}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xb, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f000009f000/0x800000)=nil, 0x800000, 0x0, 0x11, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5e, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 3.63711493s ago: executing program 2 (id=1473): syz_emit_ethernet(0x10a, &(0x7f0000000200)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x27, 0x4, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @timestamp={0x44, 0x8, 0x24, 0x0, 0x5, [0x3]}, @end, @noop, @cipso={0x86, 0x13, 0x0, [{0x0, 0x4, "19a9"}, {0x7, 0x4, "b119"}, {0x5, 0x5, "3fcaf8"}]}, @timestamp_addr={0x44, 0x2c, 0xf2, 0x1, 0x6, [{@remote, 0x9}, {@broadcast, 0x3}, {@multicast2, 0x9}, {@multicast1, 0xb48a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @timestamp_prespec={0x44, 0x1c, 0x1e, 0x3, 0x8, [{@multicast1, 0x5}, {@empty, 0x7b967811}, {@remote, 0x240000}]}, @generic={0x7, 0xe, "0a39b5626edc32a887feaf22"}, @cipso={0x86, 0x13, 0x3, [{0x0, 0x6, "abe26ecf"}, {0x7, 0x3, "e8"}, {0x5, 0x2}, {0x2, 0x2}]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @dev, {[@cipso={0x86, 0x42, 0x0, [{0x0, 0xd, "e200b28c599da0eb9cf1bd"}, {0x0, 0x2}, {0x0, 0x9, "789607671442eb"}, {0x0, 0x8, "e706d30bd224"}, {0x0, 0x2}, {0x0, 0x2}, {0x0, 0xe, "73bc2300ad9d19a300000000"}, {0x0, 0xa, "c8f46972e79e3fc7"}]}]}}}}}}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x1c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="0ef40100020075"], 0x8) 3.585662738s ago: executing program 4 (id=1474): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f00000003c0)=0x8001) connect$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000240)=""/39, 0x27}, {&(0x7f0000000480)=""/182, 0xb6}, {&(0x7f0000000540)=""/75, 0x4b}, {&(0x7f0000000340)=""/28, 0x1c}, {&(0x7f0000000e00)=""/121, 0x79}, {&(0x7f00000018c0)=""/4096, 0x1000}], 0x6, &(0x7f00000006c0)=""/213, 0xd5}}, {{&(0x7f00000007c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000840)=""/8, 0x8}, {&(0x7f0000000880)=""/78, 0x4e}], 0x2, &(0x7f0000000a40)=""/186, 0xba}}, {{&(0x7f0000000940)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000001c0)=""/45, 0x2d}, {&(0x7f0000000b40)=""/153, 0x99}], 0x2, &(0x7f0000000c40)=""/156, 0x9c}}], 0x4, 0x10002, 0x0) r2 = socket(0x1a, 0x3, 0xff) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000028c0)="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", 0x1000) recvfrom$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r4) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x1c, r5, 0x926fdb2c68a18847, 0x0, 0x0, {0x1c}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r5, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040040}, 0x24000810) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @private}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1=0xe0000002}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}]}, 0x34}, 0x2, 0x34005}, 0x0) 2.84278303s ago: executing program 4 (id=1476): socket$kcm(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$qrtr(0x2a, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c00028008000100080000000800", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x4c}}, 0x0) 2.683997805s ago: executing program 3 (id=1477): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000000c0)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x12000000}}, 0x10, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) 2.534001334s ago: executing program 0 (id=1478): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="540100001000330600000000000000000000000000ac1e000100000000000000000000000000000000000000000a00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000003200000020010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00040002"], 0x154}, 0x1, 0x0, 0x0, 0x4021}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000040)=0xe8) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000400)=@getae={0x268, 0x1f, 0x100, 0x70bd28, 0x25dfdbfd, {{@in6=@private1, 0x4d2, 0xa, 0x3c}, @in6=@empty, 0x2, 0x3501}, [@lastused={0xc, 0xf, 0x7ac9}, @algo_auth_trunc={0x5b, 0x14, {{'sha512-arm64\x00'}, 0x78, 0xc0, "8366569b89b5b6f959826eaecd1f86"}}, @user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@mcast2, 0x0, 0xa}}, @policy={0xac, 0x7, {{@in6=@dev={0xfe, 0x80, '\x00', 0x37}, @in=@remote, 0x4e21, 0x6, 0x4e21, 0x5, 0x2, 0x0, 0x180, 0x16, 0x0, r2}, {0x6, 0x7f, 0x8, 0x7, 0x79d, 0xffffffffffbffff8, 0x3, 0x8001}, {0x6, 0x5, 0x1, 0x7}, 0x7, 0x6e6bba, 0x2, 0x1, 0x1, 0x2}}, @coaddr={0x14, 0xe, @in6=@dev={0xfe, 0x80, '\x00', 0x35}}, @algo_auth_trunc={0xd2, 0x14, {{'xcbc-aes-neon\x00'}, 0x430, 0x200, "43f0a22d27b9accedcc6b84fcfe4dccd0b1288b42da55dfc68ffb34ba1f82f0f677f018d5e5d7069ca34267295a00766391274a7473cbadfb2f27e25b35e8acfe03fe508a67028a3dfce50d36ee030a9884a1c72adeaa99c5b7734a6029d62f430a451ecde825e9333a21dc4991bcd7871650ac67075301e943bc056b39a90899d052e8f231d"}}]}, 0x268}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x6, 0x0, 0x1ffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}}, 0x10) 2.262172624s ago: executing program 3 (id=1479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff00000000260000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}, 0x1, 0x300}, 0x0) 2.234875244s ago: executing program 1 (id=1480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8408cd712fe162b9}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x74, 0x3, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x24000000}, 0x4840) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x83, &(0x7f0000000000)={0x0, 0xffff}, 0x8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) 2.117764619s ago: executing program 0 (id=1481): r0 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) 2.096314677s ago: executing program 4 (id=1482): socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x42d, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='wake_reaper\x00', 0xffffffffffffffff, 0x0, 0xdad8}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000940)={'syztnl0\x00', &(0x7f00000008c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x7f, 0x6, 0x5a, @mcast2, @rand_addr=' \x01\x00', 0x1, 0x40, 0xffffff7c, 0x5}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'team_slave_0\x00'}) sendmsg$inet(r1, &(0x7f0000001bc0)={&(0x7f0000001300)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001b00)=[{&(0x7f0000001340)="91500895a61028e4e60155df746f7732affab19a253582283db27e2a643f1e8effb16957c840d50189feb8575457f5c8e2decc82d0bc3d00a775ee88ef367ac85cc1b4c70e88b0dbf5c1f43273a340fa394fbae49a429ec4b776554b578f53fea0058eaba597ba51c1b70c7ed36cc7c8940826b0129b5c2c070ca9f31e9b021361375bf71b62d7339c987742aee0214927a3fc09287255a1c5b744f0ebb1c709d0e98a8705038d94325b04fae58e8fb40d24c7680cf40be33f622b9858ce775222143b0e36a6a887de2d6dae1ee6b6235c4d5554e60af3bdaa113969b0c701d0b474afef", 0xe4}, {&(0x7f0000001440)="adf281e3672cd0eab719da47446b737c12806bdbf432c9258990701b51c08c4884fd9df6b7b5f0a0f4cf43c0ea122e3e1e14751d54da3ec7f8c48a279c5c950f23e198e9c0cd70a0614c526bfe3bbd046cc5688928ff6539eb3945708a899d3ba9edfd98fd556573d97ebeb38e5e99515ca3dac3113a1ebfa207546a91a9409dc15680939266aad81049591153d15a9a27a61528dfd8f5ef01c65d8d44cb2a234bb00dbfd59c57487f91972c9e7dac7b5cbfdfe503c48280e4319069a4fbc967d577d516b2d203f8e7654bc4f0dd20bee3510f7b00f2076811c890a04136e25b50477f1e9663c7ae86f338f16f14a7da03a40f960118d502dc9d", 0xfa}, {&(0x7f0000001540)="2ca4309add9282396b3a350552d6e88ed1bca0c9257ec0af0bcd4dac9c0e6832a1b0b4c321b4903a520ffc0d61f1acd3860a66d0fae65568458f30087c396074182d2d6b46095a3655fd5bbbb041ccb1d8fa", 0x52}, {&(0x7f00000015c0)="5e932d4de2fd9e4b39706f856dea12e053809cfbe3fe2bc744df852fb6395de826840842a64a052986535a9f877d375df8ba3781b2506e9cb8ee8fc62b69db73d5abf7d18439d7c2b2b1d994a65c23265e6d7c37cdbed2e093e05e01082acbc09e95ae0c1620a540465e3b272e88711eb41259a7047cb934ec7503e79a8e1f4bcc216e41260198ecf3f6698897717f9a5e8d4e6cb9cffc1aee40b3dd930f635cf0723d3266db0fbd4f300dd1ebdb779c1b5244e2391f2a80997c49c58245f55222826deb324406eedc5dee925e51d2242979a63d9b815bd164777426ad93f4264d4de909c9621f219dffe37a2e9145fe689473", 0xf3}, {&(0x7f00000016c0)="8d56d28e477e0bebd77c80730afe57ce10305f312afbd3a7158cd7c5c0fe38991678927edbe3027f6a7dbc48b365206c8e9be3969f11783b36fbdedd3af8e39b1948ea706688dea592ad7b4d957648ab15f9c4554b25d64e4b735d95786772e5852a2db0ec979812228cb0866ce170b9f717501d69fb3db118c8599beb147ff09e64f4d5bdd4788a2b4be1c64c7766a7830d9e7d1e44845be59fde5f871819364af2fe47c8c422bf1795c23e65445cbb965aa8", 0xb3}, {&(0x7f0000001780)="00debf711cc60f957be56ca6eaedadba4d489b56821e16c6621e51bae93e77132d58bdcb68d45471e319a951b3cd3a0e5041a3e29f296bada6ad49eb71a6ae5782fedb7345e4b1b1b7505557130d148b553236559469ac4852d850ff7725bbebaea5c969ffb9de45345c20e619ed02e79b9ccc944d86d18d4be43625e0c4208b98c6a11f0ef79ac2612ece8048b61caa7849351d504722ca29ec1752a85e8894b549ec9c07b1a392d1045b57c5762d4549e242a9078ae35b651030bf9b9d365981abf3750c4c814fe09b803cf6d64d20359a9a3e4d61de925e841925b8", 0xdd}, {&(0x7f0000001880)="52b0e824061948fec8d4433cfb2e444aae60cfba4ad6300c52f1f8fda3d7db6e2145e675023f7533022e9c2a3a06341508cb9e5e06cad226b62026b2052515db42be6650", 0x44}, {&(0x7f0000001900)="1a431b523d30ed2512a24ca48aecd6167a737c069d481d55d27fcfdc026fed96247da3c8382c25834167e55acce68216178cc70ea48721dfff66cccf51a7d94be6677c58ea7bc1eb3e31a4f7ebec6da4118a3a4bfd44078061396ec0f60df3c46c0fa6b69a9d55ebce1f8cecee6df7006424804f6c7f2b314b3cbe479eb1c4971e7db642eae1f0dd93808dc66c0f12b0fa60e134ba88f07101ed5f6f196fc7881cf47b88c33e768038d9eb28afbdbfb2a2bc6f3663d296e7c65b6c95791c875ac22d77cd0495", 0xc6}, {&(0x7f0000001a00)="e9e55d63729b8f90a9ddce089147541b99f9d42d50c33da3f1d81c26ae8f6e748143d297fc6e21e5ecfa45ec48a40271c62094f7faf2df521654841a88c2fa8e666e094816b5522cc2c728f1ba4f32aa6e87ec", 0x53}, {&(0x7f0000001a80)="ef2fb1bd6e04e510e1779297659f40d531f2e013fe706b3803842026567793f61791fcf86ef89235dc2c4701235170bea0ad04b8374228f3d41896ef6f60c040de882a348bfeca7f15d0a2dc505f2078a06a1a589228404bac6dccfb0031d21ea8b7b47ad8637a93b7867d72", 0x6c}], 0xa}, 0x20000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x28, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4040050) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r3}, &(0x7f0000001e40), &(0x7f0000001e80)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'wpan3\x00'}) getgid() setsockopt$inet_dccp_buf(r0, 0x21, 0x2, &(0x7f0000001f40)="5227c7e6b3e835347fc21e5f8559931d534cc3", 0x13) socket(0x2a, 0x80000, 0x2) 1.84971251s ago: executing program 3 (id=1483): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) recvmmsg(r1, 0x0, 0x0, 0x10122, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e24, @loopback}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000600)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004bc0)=[{{0x0, 0x6e00, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e7", 0xc5}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9", 0x1d}], 0x2}}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000014c0)="23004e4ee760d48ddc6b7a1ebfc6e0276028840fb20d5233e81c802684e8ac1dc195296ffaaeace75a07a652ee918f67beb970cd36769470f7acb5cd5becfa3839cec05a81f9488931e0a9ba9a246f45fee8b5240bd1e078539b56973bfbbee5a100668daf66ef25121ca65db1d172", 0x6f}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)="1ee88f78de7d57006d8ffa3f1d92c228a43f6c86558705d98691e6344fa3745cc92c1f80fc01a77c28bb77872f", 0x2d}, {&(0x7f0000001bc0)="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", 0x344}], 0x2}}], 0x3, 0x0) 1.612086072s ago: executing program 0 (id=1484): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r0, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001a80)=""/18, 0x12}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05000000270000000200000000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0xb, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f000009f000/0x800000)=nil, 0x800000, 0x0, 0x11, r1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5e, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) 1.529932842s ago: executing program 1 (id=1485): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0001000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) close(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.302430311s ago: executing program 3 (id=1486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0x6}, 0x4) sendto$inet6(r0, &(0x7f0000000a40)="e7", 0x1, 0x20004000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0xf5}}, 0x1c) 1.26905152s ago: executing program 1 (id=1487): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_LABEL={0x8}]}}}]}, 0x4c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x2e, 0x6, 0x0, 0xd, 0x100, 0x7, 0x7, 0x1, r4}, &(0x7f0000000140)=0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0xa, 0xa, 0x401}, 0x14}}, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x7fff, 0x40, 0x5, 0x0, 0x2c, 0x8, 0x6}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r6, 0xfffffff8}, 0x8) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000100000000000000000000850000009a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r7, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027"], 0x6c}}, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='freezer.state\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) 1.151602414s ago: executing program 3 (id=1488): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000880)="5ebb1aea90a829e8b6bc97f6082e754463a3963ebc2d3147817ee60782bfa23f90389c8e4eddabba690ab469f06bc64b1d245af78d12a5e73c2fbd61962331dfc336eedcb074c4d4bee3905ad45999b3a5e79a39911114e7", 0x58}], 0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NFT_BATCH(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x8}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x7}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x28, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x100}, 0x1, 0x0, 0x0, 0x10020}, 0x44) 1.11732275s ago: executing program 0 (id=1489): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) connect$llc(r5, &(0x7f0000000000)={0x1a, 0x108, 0x1d, 0x9, 0x2, 0x9b, @local}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@can_newroute={0x44, 0x18, 0x1, 0x70bd26, 0x25dfdbfe, {0x1d, 0x1, 0x5}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "b281d21cc76bfb78"}, 0x3}}, @CGW_MOD_OR={0x15, 0x2, {{{0x1, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "43d1e9c4484bd577"}, 0x3}}]}, 0x44}, 0x1, 0x0, 0x0, 0x7a44f454bf02e7f0}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x5}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}]}}]}, 0x40}}, 0x0) 822.92538ms ago: executing program 1 (id=1490): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000305000000030000000000000000", @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB="080004000001000008000a00", @ANYRES32=r2], 0x4c}}, 0x0) 721.071651ms ago: executing program 0 (id=1491): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001240)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0}}], 0x1, 0x4000090) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x3c, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000000c020101000000200000000000000000"], 0x14}}, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x0, 0x800}, 0x20) r7 = socket$netlink(0x10, 0x3, 0xc) unshare(0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000100)=""/255, &(0x7f0000000200)=0xff) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0xa4}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, 0x0, 0x0) 488.662206ms ago: executing program 4 (id=1492): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df4050d43d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0xa0}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0ed9a4", 0x1e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0xfff5) 137.056315ms ago: executing program 0 (id=1493): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet(0x2b, 0x801, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5f4ac7c4216632f8bdb81e2058edd7db", 0x10) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="5f4a57db0200002de7000008a800", 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_ext_remove_space\x00', r1}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01010000ffffffff8920", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r0, @ANYRES32=r6, @ANYRES8=r4, @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000085000000b70000000000000095", @ANYRES32=r5], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x9, 0xf3, 0xe034, 0x1, 0xdd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x5, 0x0, @value=r5, @void, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {0x85, 0x0, 0x0, 0x8b}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r7, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x12, 0xc, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r8, &(0x7f00000000c0), &(0x7f0000000000)=@udp6=r9}, 0x20) poll(&(0x7f00000025c0)=[{r9}], 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r11) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r13, @ANYBLOB], 0x1c}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=@mpls_getroute={0xc8, 0x1a, 0x800, 0x0, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x0, 0x1000}, [@RTA_VIA={0x14, 0x12, {0x25, "039badb077079499fdf58f0e49a7"}}, @RTA_MULTIPATH={0xc, 0x9, {0x7, 0x4, 0xd, r13}}, @RTA_NEWDST={0x84, 0x13, [{0xa, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xd368, 0x0, 0x1}, {0x49f9}, {0xff, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x6}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0xe509, 0x0, 0x1}, {0x5592}, {0x40, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0xc, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x3}, {0x0, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xa}, {0x7ff, 0x0, 0x1}, {0x6}, {0x1}, {0x8a, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0xe75}, {0xf}, {0xc}, {0xc, 0x0, 0x1}, {0xa88}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x2}]}, 0xc8}}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) 101.283319ms ago: executing program 2 (id=1494): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0xc2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "42c59c23cba5509acc1fcb978db9c707"}]}}}}}}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb0}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$tun(r3, &(0x7f0000000240)={@void, @void, @llc={@snap={0xaa, 0x1, "ec41", "db4379", 0x8914, "7710681734bae656783632cbb6e08efe3b9709c3dfd81a7d7d934a8a3e8363a2b3d9cca278d91340723fee7cac0a84823505b98925a05c3cdc9e2ff9dad2e37217754b74ddb3b206"}}}, 0x51) syz_emit_ethernet(0x14b, &(0x7f0000000440)={@local, @local, @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x135, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x13, 0x20, 0x10, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0x14, 0x0, 0x8, 0x0, 0x0, [0xec88]}, @mptcp=@syn={0x1e, 0xc}, @exp_smc={0xfe, 0x6}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}, {"0b11dae44c5cba4180ce77e96103f590c65b970cc2f0f742c50d10f4b71c1b9aec4a47e7e4fd47cb86038ad4f93bafaa431169ad873a2e599e3ab5c654e554a1eea9d1487e4a49198e7bc0d5db7717b72d5b57a38df04abafa8af4ecb333f7bb4ccdc222d44e6f7db913c0078e6545150737bc4683239e7b02f9a760e86e7fb5035c06bb91322b5da2554ee879e481d3bb07fbfe064117cdb58cdcbcf1bd09eb96c6376b99e532ac38daee85ddacdaa8aa6120ddd008920b699052089f289531437439529fd5a1d9724c224d1f7abc51bab0f6abb4"}}}}}}, 0x0) 85.279895ms ago: executing program 4 (id=1495): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000002000)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff71a4f0ff0000000025040000000000003d400300000000007504000001ed000079110000000000006c440000000000007a0ab0fe000000007b13000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af05000000f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a715bc5181554a090f32050e436fe2719fa6d5b8f51fc5a535daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128c4e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d0800af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8ea8fcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d390dd65be2467b373eafd9aa58f2077184b6a89adaf17b0a6041bdef728d236619074d6ebdf098bc908f523d228a40f9411fe9326a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c5da18ec0ae564162a27afea62d84f3a10746443d64364f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b93d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6ffc3a15d96c2ea3e2e04cfe0e669e51731b2875353193f82ade69d0540059fe6c7fe7cd86975023cb08cc7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b26f502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc988161000000000eb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c5538a294270a1ad10c80fef7c24c87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead35a655e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f05beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba5823a34a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27f2f9a6a8346962a350829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d0a874c74b777df005c55fc30511d00000000c85265b2bd83d64a532869d708000000000000007baa5b6a682b50f0937f778af083e055f6138a757ebd0ed91114a6b2974c1e5f743644f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a56edbd287eba77f35c35d91f3c62a0ca74836a640224de85f2b4a5fee500bbc584328a6a7a4628c46d8c9b71dff64075b74a740ebbdaa049f91e2c87dc6520ad0d2cccbcb08c0634ee74658d3e23bf511c8b2df1b69d2b3782b3f481c314e7bd4615dbbf24c06ac95bd639e68d0e6aa7f0d07bf69a93365f803f0144af37236ea133c2255b06138138a91d0ef4bf8ba1d538e06c2411e8d70053b712084fd0e313de9bb19266e49a3a2190cb039c6f89610acd896319b9c8d1b8aac2eaa5a4f8be7419a09e3fb5be3be2fcdadd2299839cc40e684e6e2b4e1385fde7a0babcb0be672110268a34dad364fddee69e564119cebb6940c6356ff83ca527c573d700000000000000c6299263e6d9097f225de969485bce3d7dc471c0669bb6a467cf0de54dfcc1857048fe22a19dbb1b3cb9babaa839f1f6e817a62d95a5b971ff96a5c66c338c6f2a2da4644519f40761402e9c81013d76c7152c95ba5efa24ce1930f23a2277f057ffb6b0144f3b434a2adc456ef4d2fbdf7c6238c2bb00ffcf2d23d68cb9b027f30146ec4e09b089f7956b66c5692b46ea03abb6a404c8ccceaa4ba4161409fcb54b86eaca26b255af219c5bdd7b4309b512b36abadc4a1fac48833de5ab4bb15fecb5c935c7bcae154cdc37934d7ef50d5d63d2f6a6f9878874b45811fdf812beec1ceac104aabc181d64711a8c48e1b57be04783c85da3a4709565778e4c7127a78d07ddb105e456251df0fbd2076f5b9fdd2908d7564fb868820000000439baaffb37a34e41fdcb15b4e653b22f61e5d27b28c194033f577074c807431c7ea67f620dad8ad30b8e72034fb645a3c999a8a20b9b5076329e69e4afd67d01cb18591a76f7f4296bea32dcf5bd9b1e14b7badcae4a5e5a9c8920c45086aa938a3a6191ab"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x128, 0xffffff80, 0x178, 0x0, 0x178, 0x218, 0x258, 0x230, 0x218, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0xa8, 0xd0, 0x340, {0x1e0002a8, 0x7203000000000000}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r3) sendmsg$NLBL_MGMT_C_PROTOCOLS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="0d03000000000000000003"], 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)={0x3c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$nfc_llcp(r6, 0x6, 0x21, 0x0, 0x2000e863) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x4}]}}}]}, 0x3c}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="200000000000000000003b00000008000300", @ANYRESDEC=r0, @ANYRES8=r12], 0xfc}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=r5, @ANYRES8=r2, @ANYRES16=r7, @ANYRES64=r3, @ANYRESOCT=r7], 0x48) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x874d, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000600)=[{0x0, 0x2, 0x0, 0x5}], 0x10, 0x8001, @void, @value}, 0x94) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r13}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r13}, 0x38) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r14, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r15) 0s ago: executing program 3 (id=1496): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003b00)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x0) (async) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)="08cc6c9ce466c22e1eec39a0ce755f74315fd0835e6dac41479b2b85976c6b80e74c449bf8cb6724fbdc02588b902959e0eaa4e277638445c339008514d429cb248029c0a0ce665d0ff70a5f3affa2f0737435237283ee4d418ae2086ef14d21326c10298dacc6632cc901ba1a62d76beaf4cea7bb50f11e5b8effb91f090f5357e50cb46c00000000000016147a69e17217263bb3dacfff41f693b94f9370ce92762da9a119fe34f108478132882819debe05bd70eb22ad1bf1e5", 0xbb}], 0x1}}], 0x1, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r2, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001d00)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x0, 0x0) r3 = epoll_create(0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000002c0)={0xb0000000}) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x4008801) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}}, 0x0) (async) close(r5) (async) r6 = socket$rds(0x15, 0x5, 0x0) (async) r7 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040)={0x6000000c}) (async) epoll_wait(r7, 0x0, 0x0, 0xd) (async) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000100), 0x4) (async) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x10000000}) (async) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000280)) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) setsockopt$TIPC_MCAST_REPLICAST(r9, 0x10f, 0x86) (async) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @multicast2}, 0x10) kernel console output (not intermixed with test programs): 0x10 [ 214.616858][ T8055] ? vfs_write+0x7c4/0xc90 [ 214.621305][ T8055] ? __mutex_unlock_slowpath+0x21d/0x750 [ 214.626964][ T8055] ? __pfx_vfs_write+0x10/0x10 [ 214.631938][ T8055] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 214.638035][ T8055] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.644407][ T8055] ? do_syscall_64+0x100/0x230 [ 214.649198][ T8055] __x64_sys_sendmmsg+0xa0/0xb0 [ 214.654153][ T8055] do_syscall_64+0xf3/0x230 [ 214.658682][ T8055] ? clear_bhb_loop+0x35/0x90 [ 214.663384][ T8055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.669373][ T8055] RIP: 0033:0x7f18fb37def9 [ 214.673884][ T8055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.693504][ T8055] RSP: 002b:00007f18fc23e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 214.701930][ T8055] RAX: ffffffffffffffda RBX: 00007f18fb535f80 RCX: 00007f18fb37def9 [ 214.709911][ T8055] RDX: 0000000000000001 RSI: 0000000020003c40 RDI: 0000000000000003 [ 214.717890][ T8055] RBP: 00007f18fc23e090 R08: 0000000000000000 R09: 0000000000000000 [ 214.725865][ T8055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.733872][ T8055] R13: 0000000000000000 R14: 00007f18fb535f80 R15: 00007ffc872af298 [ 214.741958][ T8055] [ 215.191669][ T8077] __nla_validate_parse: 2 callbacks suppressed [ 215.191693][ T8077] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.888'. [ 215.211477][ T8077] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.888'. [ 215.250906][ T8077] openvswitch: netlink: Missing key (keys=440, expected=200000) [ 215.433098][ T8084] bridge0: port 3(gretap0) entered blocking state [ 215.440405][ T8084] bridge0: port 3(gretap0) entered disabled state [ 215.447105][ T8084] gretap0: entered allmulticast mode [ 215.455016][ T8084] gretap0: entered promiscuous mode [ 215.468033][ T8084] bridge0: port 3(gretap0) entered blocking state [ 215.475080][ T8084] bridge0: port 3(gretap0) entered forwarding state [ 215.496356][ T8084] gretap0: left allmulticast mode [ 215.501956][ T8084] gretap0: left promiscuous mode [ 215.508529][ T8084] bridge0: port 3(gretap0) entered disabled state [ 215.697504][ T8088] openvswitch: netlink: Actions may not be safe on all matching packets [ 216.123731][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.897'. [ 216.337554][ T8107] xt_limit: Overflow, try lower: 0/0 [ 216.363362][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 216.402447][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.900'. [ 216.545245][ T8117] openvswitch: netlink: Actions may not be safe on all matching packets [ 216.555890][ T8120] FAULT_INJECTION: forcing a failure. [ 216.555890][ T8120] name failslab, interval 1, probability 0, space 0, times 0 [ 216.599622][ T8120] CPU: 0 UID: 0 PID: 8120 Comm: syz.3.905 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 216.610033][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 216.620131][ T8120] Call Trace: [ 216.623453][ T8120] [ 216.626424][ T8120] dump_stack_lvl+0x241/0x360 [ 216.631166][ T8120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.636436][ T8120] ? __pfx__printk+0x10/0x10 [ 216.641093][ T8120] ? ref_tracker_alloc+0x332/0x490 [ 216.646368][ T8120] should_fail_ex+0x3b0/0x4e0 [ 216.651109][ T8120] ? skb_clone+0x20c/0x390 [ 216.655574][ T8120] should_failslab+0xac/0x100 [ 216.660416][ T8120] ? skb_clone+0x20c/0x390 [ 216.664969][ T8120] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 216.670417][ T8120] skb_clone+0x20c/0x390 [ 216.673869][ T8122] netlink: 16 bytes leftover after parsing attributes in process `syz.2.903'. [ 216.674691][ T8120] __netlink_deliver_tap+0x3cc/0x7c0 [ 216.689034][ T8120] ? netlink_deliver_tap+0x2e/0x1b0 [ 216.694320][ T8120] netlink_deliver_tap+0x19d/0x1b0 [ 216.699502][ T8120] netlink_unicast+0x7c4/0x990 [ 216.704336][ T8120] ? __pfx_netlink_unicast+0x10/0x10 [ 216.709775][ T8120] ? __virt_addr_valid+0x183/0x530 [ 216.714946][ T8120] ? __check_object_size+0x49c/0x900 [ 216.720283][ T8120] ? bpf_lsm_netlink_send+0x9/0x10 [ 216.725459][ T8120] netlink_sendmsg+0x8e4/0xcb0 [ 216.730289][ T8120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.735637][ T8120] ? __import_iovec+0x536/0x820 [ 216.740542][ T8120] ? aa_sock_msg_perm+0x91/0x160 [ 216.745538][ T8120] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 216.750876][ T8120] ? security_socket_sendmsg+0x87/0xb0 [ 216.756554][ T8120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.762077][ T8120] __sock_sendmsg+0x221/0x270 [ 216.766906][ T8120] ____sys_sendmsg+0x525/0x7d0 [ 216.771736][ T8120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.777097][ T8120] __sys_sendmsg+0x2b0/0x3a0 [ 216.781760][ T8120] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.786921][ T8120] ? vfs_write+0x7c4/0xc90 [ 216.791470][ T8120] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.797857][ T8120] ? do_syscall_64+0x100/0x230 [ 216.802684][ T8120] ? do_syscall_64+0xb6/0x230 [ 216.807433][ T8120] do_syscall_64+0xf3/0x230 [ 216.812004][ T8120] ? clear_bhb_loop+0x35/0x90 [ 216.816744][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.822687][ T8120] RIP: 0033:0x7f0ce7b7def9 [ 216.827148][ T8120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.846810][ T8120] RSP: 002b:00007f0ce89f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.855277][ T8120] RAX: ffffffffffffffda RBX: 00007f0ce7d35f80 RCX: 00007f0ce7b7def9 [ 216.863296][ T8120] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 216.871349][ T8120] RBP: 00007f0ce89f7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.879369][ T8120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.887403][ T8120] R13: 0000000000000000 R14: 00007f0ce7d35f80 R15: 00007ffff06733d8 [ 216.895446][ T8120] [ 217.227868][ T8137] lo speed is unknown, defaulting to 1000 [ 217.321850][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 217.661852][ T8157] netlink: 44 bytes leftover after parsing attributes in process `syz.1.918'. [ 218.198377][ T8164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 218.258805][ T8164] netlink: 80 bytes leftover after parsing attributes in process `syz.4.921'. [ 218.442391][ T8177] pim6reg1: entered promiscuous mode [ 218.472548][ T8177] pim6reg1: entered allmulticast mode [ 219.771651][ T8221] bridge2: entered promiscuous mode [ 219.776958][ T8221] bridge2: entered allmulticast mode [ 219.827959][ T8221] team0: Port device bridge2 added [ 221.013807][ T8267] __nla_validate_parse: 3 callbacks suppressed [ 221.013831][ T8267] netlink: 44 bytes leftover after parsing attributes in process `syz.2.960'. [ 221.480295][ T8282] FAULT_INJECTION: forcing a failure. [ 221.480295][ T8282] name failslab, interval 1, probability 0, space 0, times 0 [ 221.494467][ T8282] CPU: 0 UID: 0 PID: 8282 Comm: syz.2.966 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 221.504850][ T8282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 221.514953][ T8282] Call Trace: [ 221.518263][ T8282] [ 221.521206][ T8282] dump_stack_lvl+0x241/0x360 [ 221.525910][ T8282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.531135][ T8282] ? __pfx__printk+0x10/0x10 [ 221.535754][ T8282] ? __kmalloc_node_noprof+0xb7/0x440 [ 221.541162][ T8282] ? __pfx___might_resched+0x10/0x10 [ 221.546461][ T8282] ? __asan_memset+0x23/0x50 [ 221.551068][ T8282] should_fail_ex+0x3b0/0x4e0 [ 221.555777][ T8282] should_failslab+0xac/0x100 [ 221.560478][ T8282] __kmalloc_node_noprof+0xdf/0x440 [ 221.565686][ T8282] ? __kvmalloc_node_noprof+0x72/0x190 [ 221.571164][ T8282] __kvmalloc_node_noprof+0x72/0x190 [ 221.576484][ T8282] alloc_netdev_mqs+0xa4a/0x1000 [ 221.581531][ T8282] rtnl_create_link+0x2f9/0xc20 [ 221.586400][ T8282] rtnl_newlink+0x1423/0x20a0 [ 221.591094][ T8282] ? rtnl_newlink+0xa81/0x20a0 [ 221.595979][ T8282] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.601139][ T8282] ? __pfx___mutex_trylock_common+0x10/0x10 [ 221.607235][ T8282] ? rcu_is_watching+0x15/0xb0 [ 221.612028][ T8282] ? trace_contention_end+0x3c/0x120 [ 221.617324][ T8282] ? __mutex_lock+0x2ef/0xd70 [ 221.622033][ T8282] ? __pfx_lock_release+0x10/0x10 [ 221.627100][ T8282] ? __pfx_rtnl_newlink+0x10/0x10 [ 221.632153][ T8282] rtnetlink_rcv_msg+0x73f/0xcf0 [ 221.637104][ T8282] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 221.642241][ T8282] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.647719][ T8282] ? ref_tracker_free+0x643/0x7e0 [ 221.652849][ T8282] netlink_rcv_skb+0x1e3/0x430 [ 221.657631][ T8282] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 221.663127][ T8282] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.668627][ T8282] ? netlink_deliver_tap+0x2e/0x1b0 [ 221.674109][ T8282] netlink_unicast+0x7f6/0x990 [ 221.678913][ T8282] ? __pfx_netlink_unicast+0x10/0x10 [ 221.684210][ T8282] ? __virt_addr_valid+0x183/0x530 [ 221.689356][ T8282] ? __check_object_size+0x49c/0x900 [ 221.694658][ T8282] ? bpf_lsm_netlink_send+0x9/0x10 [ 221.699784][ T8282] netlink_sendmsg+0x8e4/0xcb0 [ 221.704666][ T8282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.709972][ T8282] ? __import_iovec+0x536/0x820 [ 221.714840][ T8282] ? aa_sock_msg_perm+0x91/0x160 [ 221.719898][ T8282] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 221.725297][ T8282] ? security_socket_sendmsg+0x87/0xb0 [ 221.730775][ T8282] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.736076][ T8282] __sock_sendmsg+0x221/0x270 [ 221.740787][ T8282] ____sys_sendmsg+0x525/0x7d0 [ 221.745569][ T8282] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.750881][ T8282] __sys_sendmsg+0x2b0/0x3a0 [ 221.755744][ T8282] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.760866][ T8282] ? vfs_write+0x7c4/0xc90 [ 221.765335][ T8282] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.771680][ T8282] ? do_syscall_64+0x100/0x230 [ 221.776639][ T8282] ? do_syscall_64+0xb6/0x230 [ 221.781337][ T8282] do_syscall_64+0xf3/0x230 [ 221.785858][ T8282] ? clear_bhb_loop+0x35/0x90 [ 221.790560][ T8282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.796461][ T8282] RIP: 0033:0x7f128d17def9 [ 221.800893][ T8282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.820966][ T8282] RSP: 002b:00007f128dea4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.829394][ T8282] RAX: ffffffffffffffda RBX: 00007f128d335f80 RCX: 00007f128d17def9 [ 221.837373][ T8282] RDX: 0000000044000040 RSI: 00000000200000c0 RDI: 0000000000000003 [ 221.845353][ T8282] RBP: 00007f128dea4090 R08: 0000000000000000 R09: 0000000000000000 [ 221.853328][ T8282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 221.861315][ T8282] R13: 0000000000000000 R14: 00007f128d335f80 R15: 00007ffeb516fd38 [ 221.869309][ T8282] [ 222.115723][ T8287] netlink: 44 bytes leftover after parsing attributes in process `syz.1.971'. [ 222.266182][ T8291] netlink: 'syz.1.972': attribute type 10 has an invalid length. [ 222.277968][ T8291] netlink: 40 bytes leftover after parsing attributes in process `syz.1.972'. [ 222.314519][ T8291] ipvlan1: entered promiscuous mode [ 222.333549][ T8291] ipvlan1: entered allmulticast mode [ 222.338919][ T8291] veth0_vlan: entered allmulticast mode [ 222.359658][ T8291] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 222.776232][ T8315] sctp: [Deprecated]: syz.4.977 (pid 8315) Use of struct sctp_assoc_value in delayed_ack socket option. [ 222.776232][ T8315] Use struct sctp_sack_info instead [ 223.188260][ T8334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.982'. [ 223.692971][ T8349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.987'. [ 223.739378][ T8349] netlink: 'syz.3.987': attribute type 3 has an invalid length. [ 223.969216][ T8365] FAULT_INJECTION: forcing a failure. [ 223.969216][ T8365] name failslab, interval 1, probability 0, space 0, times 0 [ 224.023235][ T8365] CPU: 1 UID: 0 PID: 8365 Comm: syz.1.993 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 224.033548][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 224.043992][ T8365] Call Trace: [ 224.047310][ T8365] [ 224.050276][ T8365] dump_stack_lvl+0x241/0x360 [ 224.055025][ T8365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.060291][ T8365] ? __pfx__printk+0x10/0x10 [ 224.064949][ T8365] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 224.071070][ T8365] ? __pfx___might_resched+0x10/0x10 [ 224.076603][ T8365] should_fail_ex+0x3b0/0x4e0 [ 224.081334][ T8365] should_failslab+0xac/0x100 [ 224.086079][ T8365] ? __alloc_skb+0x1c3/0x440 [ 224.090726][ T8365] kmem_cache_alloc_node_noprof+0x71/0x320 [ 224.096621][ T8365] __alloc_skb+0x1c3/0x440 [ 224.101105][ T8365] ? __pfx___alloc_skb+0x10/0x10 [ 224.106099][ T8365] ? netlink_ack_tlv_len+0x6e/0x200 [ 224.111441][ T8365] netlink_ack+0x13f/0xa30 [ 224.115933][ T8365] ? __kasan_kmalloc+0x98/0xb0 [ 224.120762][ T8365] ? nfnetlink_rcv+0x1265/0x2ab0 [ 224.125743][ T8365] ? nfnetlink_rcv+0x12c6/0x2ab0 [ 224.130769][ T8365] nfnetlink_rcv+0x26b6/0x2ab0 [ 224.135621][ T8365] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 224.140861][ T8365] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 224.146921][ T8365] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 224.153596][ T8365] ? rcu_read_unlock_special+0x470/0x550 [ 224.159258][ T8365] ? skb_clone+0x240/0x390 [ 224.163743][ T8365] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 224.169752][ T8365] ? __rcu_read_unlock+0xa1/0x110 [ 224.174812][ T8365] netlink_unicast+0x7f6/0x990 [ 224.179606][ T8365] ? __pfx_netlink_unicast+0x10/0x10 [ 224.184933][ T8365] ? __virt_addr_valid+0x183/0x530 [ 224.190264][ T8365] ? __check_object_size+0x49c/0x900 [ 224.195586][ T8365] ? bpf_lsm_netlink_send+0x9/0x10 [ 224.200715][ T8365] netlink_sendmsg+0x8e4/0xcb0 [ 224.205527][ T8365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.210831][ T8365] ? __import_iovec+0x536/0x820 [ 224.215696][ T8365] ? aa_sock_msg_perm+0x91/0x160 [ 224.220644][ T8365] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 224.226029][ T8365] ? security_socket_sendmsg+0x87/0xb0 [ 224.231515][ T8365] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.236848][ T8365] __sock_sendmsg+0x221/0x270 [ 224.241572][ T8365] ____sys_sendmsg+0x525/0x7d0 [ 224.246351][ T8365] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.251768][ T8365] __sys_sendmsg+0x2b0/0x3a0 [ 224.256382][ T8365] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.261512][ T8365] ? vfs_write+0x7c4/0xc90 [ 224.265980][ T8365] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.272362][ T8365] ? do_syscall_64+0x100/0x230 [ 224.277165][ T8365] ? do_syscall_64+0xb6/0x230 [ 224.281894][ T8365] do_syscall_64+0xf3/0x230 [ 224.286452][ T8365] ? clear_bhb_loop+0x35/0x90 [ 224.291168][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.297089][ T8365] RIP: 0033:0x7ff48ef7def9 [ 224.301684][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.321316][ T8365] RSP: 002b:00007ff48fcba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.329923][ T8365] RAX: ffffffffffffffda RBX: 00007ff48f135f80 RCX: 00007ff48ef7def9 [ 224.337923][ T8365] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 224.345956][ T8365] RBP: 00007ff48fcba090 R08: 0000000000000000 R09: 0000000000000000 [ 224.353954][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.362040][ T8365] R13: 0000000000000000 R14: 00007ff48f135f80 R15: 00007ffd321ec848 [ 224.370039][ T8365] [ 224.896376][ T8388] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1000'. [ 224.962032][ T8393] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1002'. [ 224.987678][ T8393] syzkaller1: entered promiscuous mode [ 225.005101][ T8393] syzkaller1: entered allmulticast mode [ 225.038824][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1002'. [ 225.477381][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 225.717238][ T8419] team0: entered promiscuous mode [ 225.740228][ T8419] team_slave_0: entered promiscuous mode [ 225.746304][ T8419] team_slave_1: entered promiscuous mode [ 225.762280][ T8422] FAULT_INJECTION: forcing a failure. [ 225.762280][ T8422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.792034][ T8422] CPU: 0 UID: 0 PID: 8422 Comm: syz.1.1011 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 225.802608][ T8422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 225.812700][ T8422] Call Trace: [ 225.816017][ T8422] [ 225.818986][ T8422] dump_stack_lvl+0x241/0x360 [ 225.823723][ T8422] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.828964][ T8422] ? __pfx__printk+0x10/0x10 [ 225.833609][ T8422] should_fail_ex+0x3b0/0x4e0 [ 225.838335][ T8422] prepare_alloc_pages+0x1da/0x5d0 [ 225.843511][ T8422] __alloc_pages_noprof+0x166/0x6c0 [ 225.843782][ T8419] team0: left promiscuous mode [ 225.848785][ T8422] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 225.859315][ T8422] ? __pfx_validate_chain+0x10/0x10 [ 225.864561][ T8422] alloc_pages_mpol_noprof+0x3e8/0x680 [ 225.870081][ T8422] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 225.876113][ T8422] vma_alloc_folio_noprof+0x12e/0x230 [ 225.881519][ T8422] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 225.887446][ T8422] ? __lock_acquire+0x137a/0x2040 [ 225.892844][ T8422] folio_prealloc+0x31/0x170 [ 225.897544][ T8422] handle_pte_fault+0x255e/0x6fc0 [ 225.902599][ T8422] ? __pfx_lock_acquire+0x10/0x10 [ 225.907655][ T8422] ? __pfx_handle_pte_fault+0x10/0x10 [ 225.913042][ T8422] ? do_raw_spin_lock+0x14f/0x370 [ 225.918098][ T8422] ? follow_page_pte+0x29a/0x1ee0 [ 225.923141][ T8422] ? follow_page_pte+0x83f/0x1ee0 [ 225.928209][ T8422] ? __pfx_lock_release+0x10/0x10 [ 225.933255][ T8422] ? do_raw_spin_unlock+0x13c/0x8b0 [ 225.938473][ T8422] handle_mm_fault+0x1109/0x1bc0 [ 225.943551][ T8422] ? __pfx_handle_mm_fault+0x10/0x10 [ 225.948897][ T8422] ? __pfx_find_vma+0x10/0x10 [ 225.953853][ T8422] ? vma_is_secretmem+0xd/0x50 [ 225.958632][ T8422] ? check_vma_flags+0x531/0x5a0 [ 225.963606][ T8422] __get_user_pages+0x6ec/0x16a0 [ 225.968577][ T8422] ? __pfx___get_user_pages+0x10/0x10 [ 225.973979][ T8422] __gup_longterm_locked+0xed7/0x17d0 [ 225.979468][ T8422] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.985813][ T8422] ? sanity_check_pinned_pages+0x12c2/0x13c0 [ 225.991822][ T8422] ? gup_fast_fallback+0x221d/0x2b50 [ 225.997139][ T8422] gup_fast_fallback+0x2742/0x2b50 [ 226.002273][ T8422] ? stack_trace_save+0x118/0x1d0 [ 226.007596][ T8422] ? __pfx_stack_trace_save+0x10/0x10 [ 226.013030][ T8422] ? kasan_save_track+0x3f/0x80 [ 226.017984][ T8422] ? __kasan_kmalloc+0x98/0xb0 [ 226.022869][ T8422] ? __pfx_gup_fast_fallback+0x10/0x10 [ 226.028344][ T8422] ? __sys_getsockopt+0x271/0x330 [ 226.033379][ T8422] ? __x64_sys_getsockopt+0xb5/0xd0 [ 226.038585][ T8422] ? do_syscall_64+0xf3/0x230 [ 226.043369][ T8422] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.049577][ T8422] ? is_valid_gup_args+0x124/0x200 [ 226.054735][ T8422] pin_user_pages_fast+0xcc/0x160 [ 226.059897][ T8422] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 226.065720][ T8422] ? rds_info_getsockopt+0x20c/0x600 [ 226.071046][ T8422] ? rds_info_getsockopt+0x20c/0x600 [ 226.076601][ T8422] ? rds_info_getsockopt+0x20c/0x600 [ 226.081985][ T8422] ? __kmalloc_noprof+0x21a/0x400 [ 226.087021][ T8422] rds_info_getsockopt+0x22e/0x600 [ 226.092222][ T8422] ? __might_fault+0xaa/0x120 [ 226.096914][ T8422] ? __pfx_lock_release+0x10/0x10 [ 226.101979][ T8422] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 226.107647][ T8422] ? __might_fault+0xc6/0x120 [ 226.112358][ T8422] ? rds_getsockopt+0x177/0x530 [ 226.117405][ T8422] ? __pfx_rds_getsockopt+0x10/0x10 [ 226.122640][ T8422] do_sock_getsockopt+0x3c4/0x7e0 [ 226.127768][ T8422] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 226.133414][ T8422] ? __fget_files+0x3f6/0x470 [ 226.138205][ T8422] __sys_getsockopt+0x271/0x330 [ 226.143083][ T8422] ? __pfx___sys_getsockopt+0x10/0x10 [ 226.148557][ T8422] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.154905][ T8422] ? do_syscall_64+0x100/0x230 [ 226.159710][ T8422] __x64_sys_getsockopt+0xb5/0xd0 [ 226.164751][ T8422] do_syscall_64+0xf3/0x230 [ 226.169294][ T8422] ? clear_bhb_loop+0x35/0x90 [ 226.173989][ T8422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.179910][ T8422] RIP: 0033:0x7ff48ef7def9 [ 226.184461][ T8422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.204172][ T8422] RSP: 002b:00007ff48fcba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 226.212611][ T8422] RAX: ffffffffffffffda RBX: 00007ff48f135f80 RCX: 00007ff48ef7def9 [ 226.220596][ T8422] RDX: 000000000000271c RSI: 0000200000000114 RDI: 0000000000000003 [ 226.228576][ T8422] RBP: 00007ff48fcba090 R08: 0000000020000000 R09: 0000000000000000 [ 226.236561][ T8422] R10: 0000000020c35fff R11: 0000000000000246 R12: 0000000000000002 [ 226.244564][ T8422] R13: 0000000000000000 R14: 00007ff48f135f80 R15: 00007ffd321ec848 [ 226.252651][ T8422] [ 226.321559][ T8419] team_slave_0: left promiscuous mode [ 226.327348][ T8419] team_slave_1: left promiscuous mode [ 226.515983][ T8424] team0: entered promiscuous mode [ 226.537650][ T8424] team_slave_0: entered promiscuous mode [ 226.557314][ T8424] team_slave_1: entered promiscuous mode [ 226.777464][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1015'. [ 226.993008][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1010'. [ 227.016914][ T8419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1010'. [ 227.091585][ T8418] team0: left promiscuous mode [ 227.123059][ T8418] team_slave_0: left promiscuous mode [ 227.155746][ T8418] team_slave_1: left promiscuous mode [ 227.245188][ T8463] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1021'. [ 227.267983][ T8463] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 227.289309][ T8463] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 227.528936][ T8473] syz.3.1024[8473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.529105][ T8473] syz.3.1024[8473] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.646329][ T8473] xt_l2tp: unknown flags: 18 [ 227.827661][ T8481] SET target dimension over the limit! [ 228.396806][ T8500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1032'. [ 228.435038][ T8505] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1030'. [ 228.725467][ T8515] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1036'. [ 228.801333][ T8515] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1036'. [ 228.838983][ T8520] sctp: [Deprecated]: syz.3.1037 (pid 8520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.838983][ T8520] Use struct sctp_sack_info instead [ 228.953067][ T8523] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 229.000604][ T8523] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 229.020207][ T8523] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 229.035238][ T8530] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1040'. [ 229.378355][ T8538] FAULT_INJECTION: forcing a failure. [ 229.378355][ T8538] name failslab, interval 1, probability 0, space 0, times 0 [ 229.404000][ T8538] CPU: 0 UID: 0 PID: 8538 Comm: syz.1.1044 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 229.414489][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 229.424599][ T8538] Call Trace: [ 229.427931][ T8538] [ 229.430883][ T8538] dump_stack_lvl+0x241/0x360 [ 229.435604][ T8538] ? __pfx_dump_stack_lvl+0x10/0x10 [ 229.440842][ T8538] ? __pfx__printk+0x10/0x10 [ 229.445468][ T8538] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 229.450959][ T8538] ? __pfx___might_resched+0x10/0x10 [ 229.456304][ T8538] should_fail_ex+0x3b0/0x4e0 [ 229.461017][ T8538] should_failslab+0xac/0x100 [ 229.465735][ T8538] ? genl_start+0x1cb/0x6d0 [ 229.470281][ T8538] __kmalloc_cache_noprof+0x6c/0x2c0 [ 229.475630][ T8538] genl_start+0x1cb/0x6d0 [ 229.480024][ T8538] __netlink_dump_start+0x45c/0x790 [ 229.485297][ T8538] genl_rcv_msg+0x88c/0xec0 [ 229.489849][ T8538] ? mark_lock+0x9a/0x350 [ 229.494241][ T8538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.499318][ T8538] ? __pfx_genl_start+0x10/0x10 [ 229.504203][ T8538] ? __pfx_genl_dumpit+0x10/0x10 [ 229.509257][ T8538] ? __pfx_genl_done+0x10/0x10 [ 229.514076][ T8538] ? __pfx_lock_acquire+0x10/0x10 [ 229.519569][ T8538] ? __pfx_ethnl_default_start+0x10/0x10 [ 229.525249][ T8538] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 229.531021][ T8538] ? __pfx_ethnl_default_done+0x10/0x10 [ 229.536723][ T8538] ? __pfx___might_resched+0x10/0x10 [ 229.542076][ T8538] netlink_rcv_skb+0x1e3/0x430 [ 229.546910][ T8538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 229.551979][ T8538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 229.557334][ T8538] ? __netlink_deliver_tap+0x77e/0x7c0 [ 229.562947][ T8538] genl_rcv+0x28/0x40 [ 229.566978][ T8538] netlink_unicast+0x7f6/0x990 [ 229.571810][ T8538] ? __pfx_netlink_unicast+0x10/0x10 [ 229.577150][ T8538] ? __virt_addr_valid+0x183/0x530 [ 229.582311][ T8538] ? __check_object_size+0x49c/0x900 [ 229.587640][ T8538] ? bpf_lsm_netlink_send+0x9/0x10 [ 229.592801][ T8538] netlink_sendmsg+0x8e4/0xcb0 [ 229.597634][ T8538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.603093][ T8538] ? __import_iovec+0x536/0x820 [ 229.608086][ T8538] ? aa_sock_msg_perm+0x91/0x160 [ 229.613094][ T8538] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 229.618446][ T8538] ? security_socket_sendmsg+0x87/0xb0 [ 229.623991][ T8538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.629333][ T8538] __sock_sendmsg+0x221/0x270 [ 229.634080][ T8538] ____sys_sendmsg+0x525/0x7d0 [ 229.638904][ T8538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 229.644375][ T8538] __sys_sendmsg+0x2b0/0x3a0 [ 229.649022][ T8538] ? __pfx___sys_sendmsg+0x10/0x10 [ 229.654170][ T8538] ? vfs_write+0x7c4/0xc90 [ 229.658675][ T8538] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 229.665053][ T8538] ? do_syscall_64+0x100/0x230 [ 229.669882][ T8538] ? do_syscall_64+0xb6/0x230 [ 229.674637][ T8538] do_syscall_64+0xf3/0x230 [ 229.679195][ T8538] ? clear_bhb_loop+0x35/0x90 [ 229.683919][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.689945][ T8538] RIP: 0033:0x7ff48ef7def9 [ 229.694408][ T8538] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 229.714067][ T8538] RSP: 002b:00007ff48fcba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.722631][ T8538] RAX: ffffffffffffffda RBX: 00007ff48f135f80 RCX: 00007ff48ef7def9 [ 229.730649][ T8538] RDX: 0000000000000000 RSI: 0000000020000580 RDI: 0000000000000005 [ 229.738670][ T8538] RBP: 00007ff48fcba090 R08: 0000000000000000 R09: 0000000000000000 [ 229.746684][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.754784][ T8538] R13: 0000000000000000 R14: 00007ff48f135f80 R15: 00007ffd321ec848 [ 229.762829][ T8538] [ 229.818806][ T8546] lo speed is unknown, defaulting to 1000 [ 230.066980][ T8557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1051'. [ 230.644471][ T8580] bridge1: entered promiscuous mode [ 230.670283][ T8580] bridge1: entered allmulticast mode [ 230.702835][ T8580] team0: Port device bridge1 added [ 230.722902][ T8581] netlink: 'syz.4.1055': attribute type 10 has an invalid length. [ 230.795006][ T8581] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 230.861555][ T8580] bridge0: port 3(ip6gretap0) entered blocking state [ 230.868737][ T8580] bridge0: port 3(ip6gretap0) entered disabled state [ 230.897510][ T8580] ip6gretap0: entered allmulticast mode [ 231.090656][ T8580] ip6gretap0: entered promiscuous mode [ 231.107785][ T8580] bridge0: port 3(ip6gretap0) entered blocking state [ 231.114827][ T8580] bridge0: port 3(ip6gretap0) entered forwarding state [ 232.206278][ T8618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1068'. [ 232.403154][ T8626] netlink: 'syz.4.1071': attribute type 3 has an invalid length. [ 232.439104][ T8626] netlink: 'syz.4.1071': attribute type 3 has an invalid length. [ 232.518339][ T8626] tls_set_device_offload: netdev not found [ 233.100377][ T8648] netlink: 'syz.1.1076': attribute type 10 has an invalid length. [ 233.262880][ T8664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1081'. [ 233.360013][ T8667] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 233.461703][ T8664] netlink: 'syz.3.1081': attribute type 3 has an invalid length. [ 233.531605][ T8675] pim6reg1: entered promiscuous mode [ 233.539030][ T8675] pim6reg1: entered allmulticast mode [ 233.677373][ T8679] netpci0: renamed from team0 (while UP) [ 233.709568][ T8679] netpci0: Cannot enslave team device to itself [ 233.748329][ T8679] A link change request failed with some changes committed already. Interface netpci0 may have been left with an inconsistent configuration, please check. [ 234.251758][ T2635] IPVS: starting estimator thread 0... [ 234.371522][ T8701] IPVS: using max 15 ests per chain, 36000 per kthread [ 234.571066][ T8712] veth0_vlan: left promiscuous mode [ 234.608046][ T8718] FAULT_INJECTION: forcing a failure. [ 234.608046][ T8718] name failslab, interval 1, probability 0, space 0, times 0 [ 234.659082][ T8718] CPU: 0 UID: 0 PID: 8718 Comm: syz.2.1097 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 234.669490][ T8718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 234.679586][ T8718] Call Trace: [ 234.682903][ T8718] [ 234.685858][ T8718] dump_stack_lvl+0x241/0x360 [ 234.690596][ T8718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.695884][ T8718] ? __pfx__printk+0x10/0x10 [ 234.700635][ T8718] ? __ip_dev_find+0x532/0x610 [ 234.705540][ T8718] should_fail_ex+0x3b0/0x4e0 [ 234.710263][ T8718] ? dst_alloc+0x12b/0x190 [ 234.714733][ T8718] should_failslab+0xac/0x100 [ 234.719554][ T8718] ? dst_alloc+0x12b/0x190 [ 234.724090][ T8718] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 234.729522][ T8718] dst_alloc+0x12b/0x190 [ 234.733818][ T8718] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 234.739943][ T8718] ip_route_output_key_hash+0x193/0x2b0 [ 234.745543][ T8718] ? ip_route_output_key_hash+0xdf/0x2b0 [ 234.751195][ T8718] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 234.757297][ T8718] ip_route_output_flow+0x29/0x140 [ 234.762430][ T8718] udp_sendmsg+0x174a/0x2a60 [ 234.767061][ T8718] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 234.772639][ T8718] ? __pfx_udp_sendmsg+0x10/0x10 [ 234.777606][ T8718] ? aa_sk_perm+0x96d/0xab0 [ 234.782130][ T8718] ? __pfx_aa_sk_perm+0x10/0x10 [ 234.786990][ T8718] ? __mutex_trylock_common+0x183/0x2e0 [ 234.792544][ T8718] ? sock_rps_record_flow+0x1a/0x400 [ 234.797846][ T8718] ? inet_sendmsg+0x2ba/0x390 [ 234.802538][ T8718] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 234.807841][ T8718] ? security_socket_sendmsg+0x87/0xb0 [ 234.813327][ T8718] __sock_sendmsg+0x1a6/0x270 [ 234.818033][ T8718] sock_sendmsg+0x134/0x200 [ 234.822563][ T8718] ? __pfx_sock_sendmsg+0x10/0x10 [ 234.827626][ T8718] ? iov_iter_bvec+0x4e/0x180 [ 234.832404][ T8718] splice_to_socket+0xa13/0x10b0 [ 234.837361][ T8718] ? __pfx_lock_release+0x10/0x10 [ 234.842447][ T8718] ? __pfx_splice_to_socket+0x10/0x10 [ 234.847851][ T8718] ? __lock_acquire+0x137a/0x2040 [ 234.852903][ T8718] ? bpf_lsm_file_permission+0x9/0x10 [ 234.858291][ T8718] ? security_file_permission+0x7f/0xa0 [ 234.863944][ T8718] ? rw_verify_area+0x1d2/0x6b0 [ 234.868811][ T8718] ? __pfx_splice_to_socket+0x10/0x10 [ 234.874191][ T8718] do_splice+0xd77/0x1900 [ 234.878537][ T8718] ? __pfx_lock_release+0x10/0x10 [ 234.883579][ T8718] ? vfs_write+0x7c4/0xc90 [ 234.888010][ T8718] ? __mutex_unlock_slowpath+0x21d/0x750 [ 234.893657][ T8718] ? pipe_clear_nowait+0x196/0x220 [ 234.898811][ T8718] ? __pfx_do_splice+0x10/0x10 [ 234.903595][ T8718] __se_sys_splice+0x331/0x4a0 [ 234.908377][ T8718] ? __pfx___se_sys_splice+0x10/0x10 [ 234.913674][ T8718] ? do_syscall_64+0x100/0x230 [ 234.918458][ T8718] ? __x64_sys_splice+0x21/0xf0 [ 234.923358][ T8718] do_syscall_64+0xf3/0x230 [ 234.927888][ T8718] ? clear_bhb_loop+0x35/0x90 [ 234.932605][ T8718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.938508][ T8718] RIP: 0033:0x7f128d17def9 [ 234.942934][ T8718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.962585][ T8718] RSP: 002b:00007f128dea4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 234.971019][ T8718] RAX: ffffffffffffffda RBX: 00007f128d335f80 RCX: 00007f128d17def9 [ 234.978997][ T8718] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 234.986994][ T8718] RBP: 00007f128dea4090 R08: 0000000000010500 R09: 0000000000000000 [ 234.994994][ T8718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.003068][ T8718] R13: 0000000000000000 R14: 00007f128d335f80 R15: 00007ffeb516fd38 [ 235.011086][ T8718] [ 235.173398][ T8705] delete_channel: no stack [ 235.218499][ T8705] delete_channel: no stack [ 235.359933][ T8738] openvswitch: netlink: Message has 4 unknown bytes. [ 235.664744][ T8742] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1107'. [ 236.006877][ T8761] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1115'. [ 236.388801][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1117'. [ 236.491940][ T8777] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 237.261130][ T8793] netlink: 'syz.2.1127': attribute type 1 has an invalid length. [ 237.358893][ T8799] bridge2: entered promiscuous mode [ 237.364894][ T8799] bridge2: entered allmulticast mode [ 237.374114][ T8795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1128'. [ 237.403904][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1128'. [ 237.430899][ T8795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.445123][ T8795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.476925][ T8795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.489121][ T8795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.592588][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 237.620632][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1132'. [ 237.764741][ T8818] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 237.776126][ T8818] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1135'. [ 237.847052][ T8822] FAULT_INJECTION: forcing a failure. [ 237.847052][ T8822] name failslab, interval 1, probability 0, space 0, times 0 [ 237.860040][ T8822] CPU: 1 UID: 0 PID: 8822 Comm: syz.1.1134 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 237.870409][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 237.880505][ T8822] Call Trace: [ 237.883822][ T8822] [ 237.886790][ T8822] dump_stack_lvl+0x241/0x360 [ 237.891532][ T8822] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.896788][ T8822] ? __pfx__printk+0x10/0x10 [ 237.901451][ T8822] should_fail_ex+0x3b0/0x4e0 [ 237.906181][ T8822] ? skb_clone+0x20c/0x390 [ 237.910619][ T8822] should_failslab+0xac/0x100 [ 237.915353][ T8822] ? skb_clone+0x20c/0x390 [ 237.919840][ T8822] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 237.925272][ T8822] skb_clone+0x20c/0x390 [ 237.929562][ T8822] ? dev_queue_xmit_nit+0x220/0xc10 [ 237.934819][ T8822] dev_queue_xmit_nit+0x419/0xc10 [ 237.939895][ T8822] ? dev_queue_xmit_nit+0x2b/0xc10 [ 237.945076][ T8822] ? validate_xmit_skb+0x9f9/0x1120 [ 237.950333][ T8822] dev_hard_start_xmit+0x15f/0x7e0 [ 237.955497][ T8822] ? __pfx_validate_xmit_skb+0x10/0x10 [ 237.961100][ T8822] __dev_queue_xmit+0x1b58/0x3e80 [ 237.966254][ T8822] ? kasan_save_track+0x51/0x80 [ 237.971162][ T8822] ? do_syscall_64+0xf3/0x230 [ 237.975898][ T8822] ? __dev_queue_xmit+0x2da/0x3e80 [ 237.981067][ T8822] ? __pfx___dev_queue_xmit+0x10/0x10 [ 237.986502][ T8822] ? __copy_skb_header+0x437/0x5b0 [ 237.991660][ T8822] ? __asan_memcpy+0x40/0x70 [ 237.996320][ T8822] ? skb_clone+0x240/0x390 [ 238.000785][ T8822] __netlink_deliver_tap+0x54d/0x7c0 [ 238.006145][ T8822] ? netlink_deliver_tap+0x2e/0x1b0 [ 238.011483][ T8822] netlink_deliver_tap+0x19d/0x1b0 [ 238.016650][ T8822] netlink_unicast+0x7c4/0x990 [ 238.021561][ T8822] ? __pfx_netlink_unicast+0x10/0x10 [ 238.026906][ T8822] ? __virt_addr_valid+0x183/0x530 [ 238.032065][ T8822] ? __check_object_size+0x49c/0x900 [ 238.037458][ T8822] ? bpf_lsm_netlink_send+0x9/0x10 [ 238.042626][ T8822] netlink_sendmsg+0x8e4/0xcb0 [ 238.047464][ T8822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.052814][ T8822] ? __import_iovec+0x536/0x820 [ 238.057710][ T8822] ? aa_sock_msg_perm+0x91/0x160 [ 238.062821][ T8822] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 238.068251][ T8822] ? security_socket_sendmsg+0x87/0xb0 [ 238.073766][ T8822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 238.079104][ T8822] __sock_sendmsg+0x221/0x270 [ 238.083838][ T8822] ____sys_sendmsg+0x525/0x7d0 [ 238.088686][ T8822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 238.093275][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1135'. [ 238.094015][ T8822] __sys_sendmsg+0x2b0/0x3a0 [ 238.107657][ T8822] ? __pfx___sys_sendmsg+0x10/0x10 [ 238.112811][ T8822] ? vfs_write+0x7c4/0xc90 [ 238.117315][ T8822] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 238.123713][ T8822] ? do_syscall_64+0x100/0x230 [ 238.128506][ T8822] ? do_syscall_64+0xb6/0x230 [ 238.133202][ T8822] do_syscall_64+0xf3/0x230 [ 238.137853][ T8822] ? clear_bhb_loop+0x35/0x90 [ 238.142549][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.148750][ T8822] RIP: 0033:0x7ff48ef7def9 [ 238.153285][ T8822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.172914][ T8822] RSP: 002b:00007ff48fcba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 238.181372][ T8822] RAX: ffffffffffffffda RBX: 00007ff48f135f80 RCX: 00007ff48ef7def9 [ 238.189419][ T8822] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000003 [ 238.197435][ T8822] RBP: 00007ff48fcba090 R08: 0000000000000000 R09: 0000000000000000 [ 238.205445][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.213521][ T8822] R13: 0000000000000000 R14: 00007ff48f135f80 R15: 00007ffd321ec848 [ 238.221527][ T8822] [ 238.623638][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1141'. [ 238.646180][ T8848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1143'. [ 239.038720][ T8865] bridge1: entered promiscuous mode [ 239.061455][ T8865] bridge1: entered allmulticast mode [ 239.068604][ T8864] syzkaller0: entered allmulticast mode [ 239.096498][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1151'. [ 239.279624][ T8874] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1154'. [ 239.379618][ T8876] FAULT_INJECTION: forcing a failure. [ 239.379618][ T8876] name failslab, interval 1, probability 0, space 0, times 0 [ 239.410198][ T8876] CPU: 0 UID: 0 PID: 8876 Comm: syz.1.1155 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 239.420719][ T8876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 239.431010][ T8876] Call Trace: [ 239.434324][ T8876] [ 239.437297][ T8876] dump_stack_lvl+0x241/0x360 [ 239.442031][ T8876] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.447284][ T8876] ? __pfx__printk+0x10/0x10 [ 239.451931][ T8876] ? __kmalloc_node_noprof+0xb7/0x440 [ 239.457354][ T8876] ? __pfx___might_resched+0x10/0x10 [ 239.462793][ T8876] should_fail_ex+0x3b0/0x4e0 [ 239.467522][ T8876] should_failslab+0xac/0x100 [ 239.472265][ T8876] __kmalloc_node_noprof+0xdf/0x440 [ 239.477520][ T8876] ? __kvmalloc_node_noprof+0x72/0x190 [ 239.483308][ T8876] __kvmalloc_node_noprof+0x72/0x190 [ 239.488649][ T8876] page_pool_create_percpu+0x2ca/0xa00 [ 239.494171][ T8876] bpf_test_run_xdp_live+0x2e6/0x2160 [ 239.500129][ T8876] ? arch_stack_walk+0x16d/0x1b0 [ 239.505228][ T8876] ? __lock_acquire+0x137a/0x2040 [ 239.510322][ T8876] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 239.516198][ T8876] ? mark_lock+0x9a/0x350 [ 239.520642][ T8876] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 239.526601][ T8876] ? __might_fault+0xaa/0x120 [ 239.531327][ T8876] ? __might_fault+0xc6/0x120 [ 239.531663][ T8884] netlink: 'syz.3.1158': attribute type 25 has an invalid length. [ 239.536034][ T8876] ? _copy_from_user+0xa6/0xe0 [ 239.548627][ T8876] ? bpf_test_init+0x15a/0x180 [ 239.553439][ T8876] ? xdp_convert_md_to_buff+0x5b/0x330 [ 239.556639][ T8884] netlink: 'syz.3.1158': attribute type 7 has an invalid length. [ 239.558930][ T8876] bpf_prog_test_run_xdp+0x805/0x11e0 [ 239.558979][ T8876] ? __pfx_lock_release+0x10/0x10 [ 239.577118][ T8876] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 239.582976][ T8876] ? __fget_files+0x29/0x470 [ 239.587626][ T8876] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 239.593482][ T8876] bpf_prog_test_run+0x33a/0x3b0 [ 239.598478][ T8876] __sys_bpf+0x48d/0x810 [ 239.602778][ T8876] ? __pfx___sys_bpf+0x10/0x10 [ 239.607600][ T8876] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 239.613669][ T8876] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 239.620062][ T8876] ? do_syscall_64+0x100/0x230 [ 239.624892][ T8876] __x64_sys_bpf+0x7c/0x90 [ 239.629363][ T8876] do_syscall_64+0xf3/0x230 [ 239.634031][ T8876] ? clear_bhb_loop+0x35/0x90 [ 239.638982][ T8876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.644926][ T8876] RIP: 0033:0x7ff48ef7def9 [ 239.649386][ T8876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.669404][ T8876] RSP: 002b:00007ff48fcba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.677877][ T8876] RAX: ffffffffffffffda RBX: 00007ff48f135f80 RCX: 00007ff48ef7def9 [ 239.685895][ T8876] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 239.693906][ T8876] RBP: 00007ff48fcba090 R08: 0000000000000000 R09: 0000000000000000 [ 239.702006][ T8876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.710019][ T8876] R13: 0000000000000000 R14: 00007ff48f135f80 R15: 00007ffd321ec848 [ 239.718139][ T8876] [ 239.738572][ T8876] page_pool_create_percpu() gave up with errno -12 [ 240.000772][ T8901] FAULT_INJECTION: forcing a failure. [ 240.000772][ T8901] name failslab, interval 1, probability 0, space 0, times 0 [ 240.014422][ T8901] CPU: 1 UID: 0 PID: 8901 Comm: syz.1.1164 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 240.024893][ T8901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 240.034992][ T8901] Call Trace: [ 240.038313][ T8901] [ 240.041276][ T8901] dump_stack_lvl+0x241/0x360 [ 240.046012][ T8901] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.051261][ T8901] ? __pfx__printk+0x10/0x10 [ 240.055907][ T8901] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 240.061935][ T8901] ? __pfx___might_resched+0x10/0x10 [ 240.067289][ T8901] should_fail_ex+0x3b0/0x4e0 [ 240.072025][ T8901] should_failslab+0xac/0x100 [ 240.076773][ T8901] ? __alloc_skb+0x1c3/0x440 [ 240.081423][ T8901] kmem_cache_alloc_node_noprof+0x71/0x320 [ 240.087250][ T8901] __alloc_skb+0x1c3/0x440 [ 240.091689][ T8901] ? __pfx___alloc_skb+0x10/0x10 [ 240.096650][ T8901] ? netlink_ack_tlv_len+0x6e/0x200 [ 240.101878][ T8901] netlink_ack+0x13f/0xa30 [ 240.106309][ T8901] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.112145][ T8901] netlink_rcv_skb+0x262/0x430 [ 240.116956][ T8901] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 240.122431][ T8901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 240.127773][ T8901] ? netlink_deliver_tap+0x2e/0x1b0 [ 240.132992][ T8901] netlink_unicast+0x7f6/0x990 [ 240.137801][ T8901] ? __pfx_netlink_unicast+0x10/0x10 [ 240.143105][ T8901] ? __virt_addr_valid+0x183/0x530 [ 240.148249][ T8901] ? __check_object_size+0x49c/0x900 [ 240.153635][ T8901] ? bpf_lsm_netlink_send+0x9/0x10 [ 240.158762][ T8901] netlink_sendmsg+0x8e4/0xcb0 [ 240.163647][ T8901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.168953][ T8901] ? __import_iovec+0x536/0x820 [ 240.173835][ T8901] ? aa_sock_msg_perm+0x91/0x160 [ 240.178795][ T8901] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 240.184095][ T8901] ? security_socket_sendmsg+0x87/0xb0 [ 240.189569][ T8901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 240.194871][ T8901] __sock_sendmsg+0x221/0x270 [ 240.199569][ T8901] ____sys_sendmsg+0x525/0x7d0 [ 240.204350][ T8901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 240.209664][ T8901] __sys_sendmsg+0x2b0/0x3a0 [ 240.214267][ T8901] ? __pfx___sys_sendmsg+0x10/0x10 [ 240.219385][ T8901] ? vfs_write+0x7c4/0xc90 [ 240.223856][ T8901] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.230285][ T8901] ? do_syscall_64+0x100/0x230 [ 240.235066][ T8901] ? do_syscall_64+0xb6/0x230 [ 240.239802][ T8901] do_syscall_64+0xf3/0x230 [ 240.244335][ T8901] ? clear_bhb_loop+0x35/0x90 [ 240.249028][ T8901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.254929][ T8901] RIP: 0033:0x7ff48ef7def9 [ 240.259352][ T8901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.279055][ T8901] RSP: 002b:00007ff48fcba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.287483][ T8901] RAX: ffffffffffffffda RBX: 00007ff48f135f80 RCX: 00007ff48ef7def9 [ 240.295747][ T8901] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 240.303725][ T8901] RBP: 00007ff48fcba090 R08: 0000000000000000 R09: 0000000000000000 [ 240.311705][ T8901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.319689][ T8901] R13: 0000000000000000 R14: 00007ff48f135f80 R15: 00007ffd321ec848 [ 240.327694][ T8901] [ 240.908349][ T8925] sctp: [Deprecated]: syz.1.1172 (pid 8925) Use of int in maxseg socket option. [ 240.908349][ T8925] Use struct sctp_assoc_value instead [ 241.687999][ T8967] FAULT_INJECTION: forcing a failure. [ 241.687999][ T8967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.710424][ T8967] CPU: 0 UID: 0 PID: 8967 Comm: syz.0.1186 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 241.720825][ T8967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 241.730920][ T8967] Call Trace: [ 241.734239][ T8967] [ 241.737205][ T8967] dump_stack_lvl+0x241/0x360 [ 241.741941][ T8967] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.747202][ T8967] ? __pfx__printk+0x10/0x10 [ 241.751848][ T8967] ? __pfx_lock_release+0x10/0x10 [ 241.756935][ T8967] should_fail_ex+0x3b0/0x4e0 [ 241.761665][ T8967] _copy_from_user+0x2f/0xe0 [ 241.766306][ T8967] copy_msghdr_from_user+0xae/0x680 [ 241.771648][ T8967] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 241.777520][ T8967] __sys_sendmsg+0x23d/0x3a0 [ 241.782162][ T8967] ? __pfx___sys_sendmsg+0x10/0x10 [ 241.787313][ T8967] ? vfs_write+0x7c4/0xc90 [ 241.788454][ T8970] syzkaller0: entered allmulticast mode [ 241.791787][ T8967] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 241.791828][ T8967] ? do_syscall_64+0x100/0x230 [ 241.791865][ T8967] ? do_syscall_64+0xb6/0x230 [ 241.813487][ T8967] do_syscall_64+0xf3/0x230 [ 241.818046][ T8967] ? clear_bhb_loop+0x35/0x90 [ 241.822781][ T8967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.828716][ T8967] RIP: 0033:0x7f78d097def9 [ 241.833171][ T8967] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.852818][ T8967] RSP: 002b:00007f78d181e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.861286][ T8967] RAX: ffffffffffffffda RBX: 00007f78d0b35f80 RCX: 00007f78d097def9 [ 241.869484][ T8967] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 241.870607][ T8974] netlink: 'syz.1.1185': attribute type 1 has an invalid length. [ 241.877480][ T8967] RBP: 00007f78d181e090 R08: 0000000000000000 R09: 0000000000000000 [ 241.877503][ T8967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.877518][ T8967] R13: 0000000000000000 R14: 00007f78d0b35f80 R15: 00007ffe55071e38 [ 241.877554][ T8967] [ 241.988521][ T8969] syzkaller0: left allmulticast mode [ 241.994587][ T8974] openvswitch: netlink: Actions may not be safe on all matching packets [ 242.484532][ T8997] netlink: 'syz.1.1196': attribute type 10 has an invalid length. [ 242.543848][ T8997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.582622][ T8997] team0: Port device batadv0 added [ 243.052071][ T9021] x_tables: duplicate underflow at hook 2 [ 243.226478][ T9025] __nla_validate_parse: 7 callbacks suppressed [ 243.226499][ T9025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 243.304686][ T9028] IPVS: Unknown mcast interface: vcan0 [ 243.546456][ T9034] lo speed is unknown, defaulting to 1000 [ 243.552190][ T9037] syzkaller1: entered promiscuous mode [ 243.570461][ T9037] syzkaller1: entered allmulticast mode [ 243.738478][ T9040] sctp: [Deprecated]: syz.1.1211 (pid 9040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.738478][ T9040] Use struct sctp_sack_info instead [ 243.833525][ T9048] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1213'. [ 243.858325][ T9047] netlink: 'syz.4.1214': attribute type 10 has an invalid length. [ 243.957462][ T9050] xt_bpf: check failed: parse error [ 244.139309][ T9053] bridge3: entered promiscuous mode [ 244.151092][ T9053] bridge3: entered allmulticast mode [ 244.174018][ T9053] team0: Port device bridge3 added [ 244.203988][ T9055] vlan0: entered promiscuous mode [ 244.237681][ T9060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'. [ 244.292829][ T9062] FAULT_INJECTION: forcing a failure. [ 244.292829][ T9062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.324118][ T9062] CPU: 1 UID: 0 PID: 9062 Comm: syz.0.1220 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 244.334530][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 244.344811][ T9062] Call Trace: [ 244.348122][ T9062] [ 244.351086][ T9062] dump_stack_lvl+0x241/0x360 [ 244.351286][ T9064] sctp: [Deprecated]: syz.1.1221 (pid 9064) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.351286][ T9064] Use struct sctp_sack_info instead [ 244.355800][ T9062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.377294][ T9062] ? __pfx__printk+0x10/0x10 [ 244.382034][ T9062] ? snprintf+0xda/0x120 [ 244.386330][ T9062] should_fail_ex+0x3b0/0x4e0 [ 244.391063][ T9062] _copy_to_user+0x2f/0xb0 [ 244.395622][ T9062] simple_read_from_buffer+0xca/0x150 [ 244.401043][ T9062] proc_fail_nth_read+0x1ec/0x260 [ 244.406107][ T9062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.411697][ T9062] ? rw_verify_area+0x520/0x6b0 [ 244.416585][ T9062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 244.422177][ T9062] vfs_read+0x204/0xbc0 [ 244.426379][ T9062] ? __pfx_lock_release+0x10/0x10 [ 244.431464][ T9062] ? __pfx_vfs_read+0x10/0x10 [ 244.436271][ T9062] ? __fget_files+0x29/0x470 [ 244.440906][ T9062] ? __fget_files+0x3f6/0x470 [ 244.445650][ T9062] ksys_read+0x1a0/0x2c0 [ 244.449940][ T9062] ? __pfx_ksys_read+0x10/0x10 [ 244.454757][ T9062] ? do_syscall_64+0x100/0x230 [ 244.459584][ T9062] ? do_syscall_64+0xb6/0x230 [ 244.464671][ T9062] do_syscall_64+0xf3/0x230 [ 244.469263][ T9062] ? clear_bhb_loop+0x35/0x90 [ 244.473980][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.479956][ T9062] RIP: 0033:0x7f78d097c93c [ 244.484424][ T9062] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 244.504257][ T9062] RSP: 002b:00007f78d181e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 244.512699][ T9062] RAX: ffffffffffffffda RBX: 00007f78d0b35f80 RCX: 00007f78d097c93c [ 244.520900][ T9062] RDX: 000000000000000f RSI: 00007f78d181e0a0 RDI: 0000000000000004 [ 244.528893][ T9062] RBP: 00007f78d181e090 R08: 0000000000000000 R09: 0000000000000000 [ 244.536884][ T9062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 244.544986][ T9062] R13: 0000000000000000 R14: 00007f78d0b35f80 R15: 00007ffe55071e38 [ 244.553025][ T9062] [ 244.764290][ T9073] syz.1.1225[9073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.764482][ T9073] syz.1.1225[9073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 245.083708][ T9090] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1230'. [ 245.151441][ T9090] openvswitch: netlink: Actions may not be safe on all matching packets [ 245.164968][ T9094] netlink: 'syz.4.1230': attribute type 4 has an invalid length. [ 245.382849][ T9101] tipc: Failed to remove unknown binding: 66,1,1/0:1050759428/1050759430 [ 245.392191][ T9101] tipc: Failed to remove unknown binding: 66,1,1/0:1050759428/1050759430 [ 245.436057][ T9099] netlink: 'syz.2.1234': attribute type 4 has an invalid length. [ 245.449281][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1236'. [ 245.699626][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1241'. [ 246.221687][ T9133] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1248'. [ 246.610237][ T9137] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.1249'. [ 246.807106][ T9144] x_tables: duplicate entry at hook 3 [ 247.068628][ T9152] x_tables: duplicate underflow at hook 3 [ 247.268601][ T9165] FAULT_INJECTION: forcing a failure. [ 247.268601][ T9165] name failslab, interval 1, probability 0, space 0, times 0 [ 247.281796][ T9165] CPU: 1 UID: 0 PID: 9165 Comm: syz.0.1258 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 247.292170][ T9165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 247.302262][ T9165] Call Trace: [ 247.305578][ T9165] [ 247.308541][ T9165] dump_stack_lvl+0x241/0x360 [ 247.313271][ T9165] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.318598][ T9165] ? __pfx__printk+0x10/0x10 [ 247.323275][ T9165] ? ref_tracker_alloc+0x332/0x490 [ 247.328465][ T9165] should_fail_ex+0x3b0/0x4e0 [ 247.333190][ T9165] ? skb_clone+0x20c/0x390 [ 247.337642][ T9165] should_failslab+0xac/0x100 [ 247.342366][ T9165] ? skb_clone+0x20c/0x390 [ 247.346824][ T9165] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 247.352245][ T9165] skb_clone+0x20c/0x390 [ 247.356620][ T9165] __netlink_deliver_tap+0x3cc/0x7c0 [ 247.361969][ T9165] ? netlink_deliver_tap+0x2e/0x1b0 [ 247.367231][ T9165] netlink_deliver_tap+0x19d/0x1b0 [ 247.372399][ T9165] netlink_unicast+0x7c4/0x990 [ 247.377258][ T9165] ? __pfx_netlink_unicast+0x10/0x10 [ 247.382586][ T9165] ? __virt_addr_valid+0x183/0x530 [ 247.387749][ T9165] ? __check_object_size+0x49c/0x900 [ 247.393162][ T9165] ? bpf_lsm_netlink_send+0x9/0x10 [ 247.398341][ T9165] netlink_sendmsg+0x8e4/0xcb0 [ 247.403173][ T9165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.408563][ T9165] ? __import_iovec+0x536/0x820 [ 247.413454][ T9165] ? aa_sock_msg_perm+0x91/0x160 [ 247.418436][ T9165] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 247.423775][ T9165] ? security_socket_sendmsg+0x87/0xb0 [ 247.429282][ T9165] ? __pfx_netlink_sendmsg+0x10/0x10 [ 247.434779][ T9165] __sock_sendmsg+0x221/0x270 [ 247.439590][ T9165] ____sys_sendmsg+0x525/0x7d0 [ 247.444401][ T9165] ? __pfx_____sys_sendmsg+0x10/0x10 [ 247.449837][ T9165] __sys_sendmsg+0x2b0/0x3a0 [ 247.454464][ T9165] ? __pfx___sys_sendmsg+0x10/0x10 [ 247.459611][ T9165] ? vfs_write+0x7c4/0xc90 [ 247.464125][ T9165] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 247.470510][ T9165] ? do_syscall_64+0x100/0x230 [ 247.475333][ T9165] ? do_syscall_64+0xb6/0x230 [ 247.480071][ T9165] do_syscall_64+0xf3/0x230 [ 247.484622][ T9165] ? clear_bhb_loop+0x35/0x90 [ 247.489418][ T9165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.495528][ T9165] RIP: 0033:0x7f78d097def9 [ 247.499974][ T9165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.519789][ T9165] RSP: 002b:00007f78d181e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.528255][ T9165] RAX: ffffffffffffffda RBX: 00007f78d0b35f80 RCX: 00007f78d097def9 [ 247.536252][ T9165] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 247.544247][ T9165] RBP: 00007f78d181e090 R08: 0000000000000000 R09: 0000000000000000 [ 247.552677][ T9165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.560681][ T9165] R13: 0000000000000000 R14: 00007f78d0b35f80 R15: 00007ffe55071e38 [ 247.568722][ T9165] [ 248.066167][ T9192] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1267'. [ 248.535157][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1276'. [ 248.824730][ T9214] syz.4.1277[9214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.824903][ T9214] syz.4.1277[9214] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.110904][ T9232] 8021q: VLANs not supported on lo [ 249.252525][ T9245] FAULT_INJECTION: forcing a failure. [ 249.252525][ T9245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.282807][ T8] IPVS: starting estimator thread 0... [ 249.294321][ T9245] CPU: 0 UID: 0 PID: 9245 Comm: syz.1.1286 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 249.304975][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 249.310664][ T9250] siw: device registration error -23 [ 249.315041][ T9245] Call Trace: [ 249.315058][ T9245] [ 249.326593][ T9245] dump_stack_lvl+0x241/0x360 [ 249.331336][ T9245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.336677][ T9245] ? __pfx__printk+0x10/0x10 [ 249.341335][ T9245] ? snprintf+0xda/0x120 [ 249.345623][ T9245] should_fail_ex+0x3b0/0x4e0 [ 249.350384][ T9245] _copy_to_user+0x2f/0xb0 [ 249.354848][ T9245] simple_read_from_buffer+0xca/0x150 [ 249.360267][ T9245] proc_fail_nth_read+0x1ec/0x260 [ 249.365339][ T9245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.370942][ T9245] ? rw_verify_area+0x520/0x6b0 [ 249.376010][ T9245] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 249.381600][ T9245] vfs_read+0x204/0xbc0 [ 249.385802][ T9245] ? __pfx_lock_release+0x10/0x10 [ 249.390884][ T9245] ? __pfx_vfs_read+0x10/0x10 [ 249.395607][ T9245] ? __fget_files+0x29/0x470 [ 249.400254][ T9245] ? __fget_files+0x3f6/0x470 [ 249.404993][ T9245] ksys_read+0x1a0/0x2c0 [ 249.409285][ T9245] ? __pfx_ksys_read+0x10/0x10 [ 249.414187][ T9245] ? do_syscall_64+0x100/0x230 [ 249.419032][ T9245] ? do_syscall_64+0xb6/0x230 [ 249.423773][ T9245] do_syscall_64+0xf3/0x230 [ 249.428305][ T9245] ? clear_bhb_loop+0x35/0x90 [ 249.433006][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.438916][ T9245] RIP: 0033:0x7ff48ef7c93c [ 249.443354][ T9245] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 249.462986][ T9245] RSP: 002b:00007ff48fcba030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 249.471422][ T9245] RAX: ffffffffffffffda RBX: 00007ff48f135f80 RCX: 00007ff48ef7c93c [ 249.479406][ T9245] RDX: 000000000000000f RSI: 00007ff48fcba0a0 RDI: 0000000000000003 [ 249.487561][ T9245] RBP: 00007ff48fcba090 R08: 0000000000000000 R09: 0000000000000000 [ 249.495653][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.503633][ T9245] R13: 0000000000000001 R14: 00007ff48f135f80 R15: 00007ffd321ec848 [ 249.511639][ T9245] [ 249.580207][ T9249] IPVS: using max 15 ests per chain, 36000 per kthread [ 250.127738][ T9274] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.1296'. [ 250.165455][ T9274] netlink: 183228 bytes leftover after parsing attributes in process `syz.1.1296'. [ 250.258285][ T9274] openvswitch: netlink: Missing key (keys=440, expected=200000) [ 250.415231][ T9285] bridge2: entered promiscuous mode [ 250.426424][ T9285] bridge2: entered allmulticast mode [ 250.448709][ T9289] netlink: 'syz.1.1302': attribute type 1 has an invalid length. [ 250.449683][ T9290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1301'. [ 250.476660][ T9289] netlink: 54 bytes leftover after parsing attributes in process `syz.1.1302'. [ 250.493610][ T9289] openvswitch: netlink: Actions may not be safe on all matching packets [ 250.626794][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1304'. [ 251.088288][ T9306] vlan2: entered promiscuous mode [ 251.097153][ T9306] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 251.184838][ T9306] mac80211_hwsim hwsim15 wlan0: left promiscuous mode [ 256.020742][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 274.661572][ T5254] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 274.680351][ T5254] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 274.690330][ T5254] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 274.720459][ T5254] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 274.730804][ T5254] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 274.738263][ T5254] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 274.985262][ T9328] lo speed is unknown, defaulting to 1000 [ 275.581611][ T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.600658][ T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.608979][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.622728][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.638495][ T55] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.648230][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.683582][ T5254] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.698808][ T5254] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.711384][ T5252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.718045][ T5254] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 275.720148][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.728506][ T5254] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 275.737528][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.747999][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.782483][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 275.803161][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 275.814732][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 275.823979][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.877125][ T5241] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.894635][ T5241] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.903552][ T5241] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.912007][ T5241] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 275.921315][ T5241] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 275.932061][ T5241] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 276.033524][ T9333] lo speed is unknown, defaulting to 1000 [ 276.045819][ T9331] lo speed is unknown, defaulting to 1000 [ 276.102792][ T9336] lo speed is unknown, defaulting to 1000 [ 276.160662][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.205716][ T9338] lo speed is unknown, defaulting to 1000 [ 276.262680][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.345775][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.416756][ T9328] chnl_net:caif_netlink_parms(): no params data found [ 276.466649][ T53] bond0: (slave netdevsim0): Releasing backup interface [ 276.477389][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.675447][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.682991][ T9328] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.691050][ T9328] bridge_slave_0: entered allmulticast mode [ 276.701185][ T9328] bridge_slave_0: entered promiscuous mode [ 276.761787][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.768973][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.776351][ T9328] bridge_slave_1: entered allmulticast mode [ 276.784126][ T9328] bridge_slave_1: entered promiscuous mode [ 276.791036][ T55] Bluetooth: hci5: command tx timeout [ 276.899470][ T9328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.035826][ T9328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.147565][ T9328] team0: Port device team_slave_0 added [ 277.171396][ T9336] chnl_net:caif_netlink_parms(): no params data found [ 277.183963][ T9331] chnl_net:caif_netlink_parms(): no params data found [ 277.195468][ T53] ip6gretap0: left allmulticast mode [ 277.201299][ T53] ip6gretap0: left promiscuous mode [ 277.209127][ T53] bridge0: port 3(ip6gretap0) entered disabled state [ 277.221823][ T53] bridge_slave_1: left allmulticast mode [ 277.227548][ T53] bridge_slave_1: left promiscuous mode [ 277.235976][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.251440][ T53] bridge_slave_0: left allmulticast mode [ 277.257504][ T53] bridge_slave_0: left promiscuous mode [ 277.263467][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.597597][ T53] team0: Port device bridge1 removed [ 277.765275][ T55] Bluetooth: hci1: command tx timeout [ 277.795065][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.810152][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.828858][ T53] bond0 (unregistering): Released all slaves [ 277.835204][ T55] Bluetooth: hci2: command tx timeout [ 277.854425][ T9328] team0: Port device team_slave_1 added [ 277.910536][ T55] Bluetooth: hci3: command tx timeout [ 278.080484][ T55] Bluetooth: hci4: command tx timeout [ 278.113284][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.120443][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.149052][ T9328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.164843][ T9328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.171934][ T9328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.197918][ T9328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.221524][ T9333] chnl_net:caif_netlink_parms(): no params data found [ 278.296769][ T9338] chnl_net:caif_netlink_parms(): no params data found [ 278.374097][ T9336] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.382521][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.389815][ T9336] bridge_slave_0: entered allmulticast mode [ 278.399489][ T9336] bridge_slave_0: entered promiscuous mode [ 278.408753][ T9336] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.416337][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.434114][ T9336] bridge_slave_1: entered allmulticast mode [ 278.449784][ T9336] bridge_slave_1: entered promiscuous mode [ 278.528411][ T53] hsr_slave_0: left promiscuous mode [ 278.546346][ T53] hsr_slave_1: left promiscuous mode [ 278.556666][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.564782][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.573565][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.581133][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.606745][ T53] veth1_macvtap: left promiscuous mode [ 278.612699][ T53] veth0_macvtap: left promiscuous mode [ 278.618323][ T53] veth1_vlan: left promiscuous mode [ 278.623809][ T53] veth0_vlan: left promiscuous mode [ 278.871867][ T55] Bluetooth: hci5: command tx timeout [ 279.217790][ T53] team0 (unregistering): Port device team_slave_1 removed [ 279.272851][ T53] team0 (unregistering): Port device team_slave_0 removed [ 279.830701][ T55] Bluetooth: hci1: command tx timeout [ 279.879837][ T9336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.910671][ T55] Bluetooth: hci2: command tx timeout [ 279.990305][ T55] Bluetooth: hci3: command tx timeout [ 280.013069][ T9328] hsr_slave_0: entered promiscuous mode [ 280.030765][ T9328] hsr_slave_1: entered promiscuous mode [ 280.037588][ T9328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.058153][ T9328] Cannot create hsr debugfs directory [ 280.067577][ T9336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.159766][ T55] Bluetooth: hci4: command tx timeout [ 280.201768][ T9331] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.208986][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.229774][ T9331] bridge_slave_0: entered allmulticast mode [ 280.251841][ T9331] bridge_slave_0: entered promiscuous mode [ 280.271848][ T9331] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.290293][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.297818][ T9331] bridge_slave_1: entered allmulticast mode [ 280.316686][ T9331] bridge_slave_1: entered promiscuous mode [ 280.489264][ T9331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.546088][ T9336] team0: Port device team_slave_0 added [ 280.557431][ T9336] team0: Port device team_slave_1 added [ 280.591827][ T9333] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.599080][ T9333] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.607038][ T9333] bridge_slave_0: entered allmulticast mode [ 280.614712][ T9333] bridge_slave_0: entered promiscuous mode [ 280.626153][ T9331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.733176][ T9333] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.740464][ T9333] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.747864][ T9333] bridge_slave_1: entered allmulticast mode [ 280.755447][ T9333] bridge_slave_1: entered promiscuous mode [ 280.785147][ T9331] team0: Port device team_slave_0 added [ 280.807658][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.814873][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.841508][ T9336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.854054][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.862562][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.869802][ T9338] bridge_slave_0: entered allmulticast mode [ 280.877185][ T9338] bridge_slave_0: entered promiscuous mode [ 280.929854][ T9331] team0: Port device team_slave_1 added [ 280.949736][ T9336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.958708][ T9336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.984842][ T55] Bluetooth: hci5: command tx timeout [ 281.002363][ T9336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.022544][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.029776][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.037149][ T9338] bridge_slave_1: entered allmulticast mode [ 281.044590][ T9338] bridge_slave_1: entered promiscuous mode [ 281.082368][ T9333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.098053][ T9333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.177067][ T53] IPVS: stop unused estimator thread 0... [ 281.218071][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.225515][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.261025][ T9331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.274487][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.281570][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.310588][ T9331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.376323][ T9338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.409256][ T9338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.462577][ T9333] team0: Port device team_slave_0 added [ 281.567362][ T9336] hsr_slave_0: entered promiscuous mode [ 281.578097][ T9336] hsr_slave_1: entered promiscuous mode [ 281.585268][ T9336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.611697][ T9336] Cannot create hsr debugfs directory [ 281.661834][ T9333] team0: Port device team_slave_1 added [ 281.706034][ T9331] hsr_slave_0: entered promiscuous mode [ 281.717289][ T9331] hsr_slave_1: entered promiscuous mode [ 281.725070][ T9331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.733542][ T9331] Cannot create hsr debugfs directory [ 281.769825][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.777792][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.817515][ T9333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.833708][ T9333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.840910][ T9333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.868243][ T9333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.923367][ T55] Bluetooth: hci1: command tx timeout [ 281.984290][ T9338] team0: Port device team_slave_0 added [ 282.000194][ T55] Bluetooth: hci2: command tx timeout [ 282.070465][ T55] Bluetooth: hci3: command tx timeout [ 282.105762][ T9328] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.136524][ T9338] team0: Port device team_slave_1 added [ 282.188243][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.210751][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.239393][ T55] Bluetooth: hci4: command tx timeout [ 282.245467][ T9338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.334448][ T9328] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.350810][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.358774][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.387518][ T9338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.506319][ T9328] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.547169][ T9333] hsr_slave_0: entered promiscuous mode [ 282.554350][ T9333] hsr_slave_1: entered promiscuous mode [ 282.562182][ T9333] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.569799][ T9333] Cannot create hsr debugfs directory [ 282.674682][ T9328] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.696297][ T9338] hsr_slave_0: entered promiscuous mode [ 282.703438][ T9338] hsr_slave_1: entered promiscuous mode [ 282.710276][ T9338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.717890][ T9338] Cannot create hsr debugfs directory [ 282.959079][ T9336] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.030295][ T55] Bluetooth: hci5: command tx timeout [ 283.145932][ T9336] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.295706][ T9336] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.437521][ T9336] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.602006][ T9331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.702710][ T9331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.782350][ T9331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.904612][ T9331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.991290][ T55] Bluetooth: hci1: command tx timeout [ 284.073656][ T55] Bluetooth: hci2: command tx timeout [ 284.150879][ T55] Bluetooth: hci3: command tx timeout [ 284.246425][ T9328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.258937][ T9328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.284556][ T9328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 284.319381][ T55] Bluetooth: hci4: command tx timeout [ 284.365952][ T9328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 284.634856][ T9333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.719302][ T9328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.753239][ T9333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.794377][ T9328] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.828696][ T9333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.855040][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.862255][ T6971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.889490][ T777] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.896697][ T777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.936236][ T9333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.233334][ T9333] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 285.266872][ T9333] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 285.299164][ T9333] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 285.339212][ T9333] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 285.548614][ T9328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.576420][ T9336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.611340][ T9336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.632842][ T9336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.724543][ T9336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.854935][ T9331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 285.879986][ T9331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 285.958779][ T9331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 285.976363][ T9331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.055181][ T9328] veth0_vlan: entered promiscuous mode [ 286.216733][ T9328] veth1_vlan: entered promiscuous mode [ 286.291845][ T9333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.310220][ T9338] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 286.355425][ T9338] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 286.373200][ T9338] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 286.388839][ T9338] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.434905][ T9328] veth0_macvtap: entered promiscuous mode [ 286.503429][ T9328] veth1_macvtap: entered promiscuous mode [ 286.536988][ T9333] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.608291][ T9336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.653136][ T9328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.667067][ T9328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.677802][ T9328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.689495][ T9328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.699917][ T9328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.711394][ T9328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.722303][ T9328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.736900][ T9328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.759358][ T9328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.814653][ T2887] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.821885][ T2887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.847488][ T9328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.859091][ T9328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.870334][ T9328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.882479][ T9328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.893849][ T9328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.904777][ T9328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.919203][ T9328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.930596][ T9328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.956762][ T9328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.986213][ T2887] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.993421][ T2887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.041980][ T9336] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.068538][ T9328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.089541][ T9328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.099484][ T9328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.120130][ T9328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.157132][ T2887] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.164347][ T2887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.298402][ T6969] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.305682][ T6969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.577913][ T9331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.695579][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.738173][ T9331] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.749699][ T2887] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.793606][ T2887] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.814096][ T9338] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.872411][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.879624][ T6971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.985925][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.993178][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.007064][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.014316][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.039994][ T9333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.056360][ T6971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.078252][ T6971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.084729][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.093503][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.400568][ T9333] veth0_vlan: entered promiscuous mode [ 288.457604][ T9333] veth1_vlan: entered promiscuous mode [ 288.574427][ T9336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.626298][ T9497] xt_CT: No such helper "snmp" [ 288.638446][ T9333] veth0_macvtap: entered promiscuous mode [ 288.672240][ T9333] veth1_macvtap: entered promiscuous mode [ 288.940721][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.000290][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.037782][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.049302][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.061199][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.079412][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.104854][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.130625][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.148124][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.159503][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.190923][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.214907][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.237103][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.248643][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.269017][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.279878][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.306886][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.325998][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.349252][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.367867][ T9333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.380331][ T9333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.405038][ T9333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.507015][ T9333] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.561633][ T9333] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.575365][ T9333] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.585193][ T9333] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.705059][ T9336] veth0_vlan: entered promiscuous mode [ 289.777594][ T9331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.824171][ T9336] veth1_vlan: entered promiscuous mode [ 289.854605][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.401197][ T9336] veth0_macvtap: entered promiscuous mode [ 290.408666][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.421310][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.485271][ T9336] veth1_macvtap: entered promiscuous mode [ 290.568249][ T9331] veth0_vlan: entered promiscuous mode [ 290.620978][ T6971] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.629110][ T6971] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.632865][ T9331] veth1_vlan: entered promiscuous mode [ 290.694386][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.730646][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.752344][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.773766][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.792016][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.803406][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.814295][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.827737][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.850833][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.868452][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.884345][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.895424][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.909255][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.966392][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.994289][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.017195][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 291.017802][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.031005][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1316'. [ 291.052433][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.062966][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.073971][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.085277][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.096074][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.108916][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.122135][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.136925][ T9336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.147701][ T9336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.159971][ T9336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.215332][ T9336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.240450][ T9336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.249198][ T9336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.259306][ T9336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.294525][ T9331] veth0_macvtap: entered promiscuous mode [ 291.366692][ T9331] veth1_macvtap: entered promiscuous mode [ 291.490960][ T9338] veth0_vlan: entered promiscuous mode [ 291.570746][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.582245][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.594020][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.605834][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.615969][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.626643][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.636629][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.649889][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.660567][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.672410][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.688206][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.700085][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.710836][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.721898][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.734342][ T9331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.773952][ T9338] veth1_vlan: entered promiscuous mode [ 291.850823][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.880800][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.909591][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.937618][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.958152][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.979872][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.003735][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.025889][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.040691][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.066343][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.087964][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.099089][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.126269][ T9331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.140239][ T9331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.157938][ T9331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.176229][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.176688][ T9331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.198770][ T9331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.208455][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.220142][ T9331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.239109][ T9331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.427139][ T2945] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.447344][ T2945] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.474702][ T9585] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1330'. [ 292.517680][ T9338] veth0_macvtap: entered promiscuous mode [ 292.590886][ T9583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1330'. [ 292.636093][ T9338] veth1_macvtap: entered promiscuous mode [ 292.713723][ T9589] netlink: 'syz.2.1317': attribute type 9 has an invalid length. [ 292.740353][ T9589] netlink: 134660 bytes leftover after parsing attributes in process `syz.2.1317'. [ 292.796544][ T9589] netlink: 'syz.2.1317': attribute type 10 has an invalid length. [ 292.829942][ T9589] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.837885][ T9589] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.869043][ T9589] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.876384][ T9589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.884958][ T9589] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.892160][ T9589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.917393][ T9589] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 292.968761][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.990913][ T9593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1333'. [ 293.010918][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.020473][ T9593] netlink: 'syz.3.1333': attribute type 7 has an invalid length. [ 293.028256][ T9593] netlink: 'syz.3.1333': attribute type 8 has an invalid length. [ 293.079757][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1333'. [ 293.116188][ T9593] erspan0: entered promiscuous mode [ 293.139258][ T9593] batadv_slave_1: entered promiscuous mode [ 293.152856][ T9593] gretap0: entered promiscuous mode [ 293.326661][ T9596] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1333'. [ 293.333893][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.364138][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.390976][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.411468][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.422334][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.434129][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.444997][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.460258][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.482451][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.496179][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.506518][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.518856][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.529257][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.540251][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.550440][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.561508][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.582454][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.633731][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.658120][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.834365][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.845736][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.866088][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.912655][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.943585][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.964603][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.991979][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.017324][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.038868][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.059909][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.069888][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.081125][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.091020][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.104149][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.116283][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.127001][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.139386][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.273738][ T9338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.313110][ T9338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.360453][ T9338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.370411][ T9338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.371105][ T9621] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1341'. [ 294.520743][ T9626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'. [ 294.735456][ T9636] netlink: 'syz.3.1345': attribute type 10 has an invalid length. [ 294.885071][ T9636] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 294.991013][ T777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.012591][ T777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.165302][ T777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.186387][ T777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.701090][ T9636] netlink: 'syz.3.1345': attribute type 1 has an invalid length. [ 296.077963][ T9673] __nla_validate_parse: 2 callbacks suppressed [ 296.077988][ T9673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1357'. [ 296.214912][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1357'. [ 296.224017][ T9673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1357'. [ 296.494430][ T9681] siw: device registration error -23 [ 296.730643][ T9701] FAULT_INJECTION: forcing a failure. [ 296.730643][ T9701] name failslab, interval 1, probability 0, space 0, times 0 [ 296.755194][ T9701] CPU: 0 UID: 0 PID: 9701 Comm: syz.1.1365 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 296.765596][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 296.775693][ T9701] Call Trace: [ 296.779010][ T9701] [ 296.781973][ T9701] dump_stack_lvl+0x241/0x360 [ 296.786709][ T9701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.791963][ T9701] ? __pfx__printk+0x10/0x10 [ 296.796611][ T9701] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 296.802115][ T9701] ? __pfx___might_resched+0x10/0x10 [ 296.807461][ T9701] should_fail_ex+0x3b0/0x4e0 [ 296.812187][ T9701] should_failslab+0xac/0x100 [ 296.816921][ T9701] ? device_add+0xc1/0xbf0 [ 296.821406][ T9701] __kmalloc_cache_noprof+0x6c/0x2c0 [ 296.826746][ T9701] device_add+0xc1/0xbf0 [ 296.831084][ T9701] ? device_initialize+0x266/0x460 [ 296.836250][ T9701] netdev_register_kobject+0x17e/0x310 [ 296.841766][ T9701] register_netdevice+0x12c5/0x1b00 [ 296.847041][ T9701] ? __pfx_register_netdevice+0x10/0x10 [ 296.852637][ T9701] ? dev_addr_mod+0xbd/0x330 [ 296.857302][ T9701] ipip6_tunnel_create+0x142/0x320 [ 296.862550][ T9701] ipip6_newlink+0x288/0x940 [ 296.867179][ T9701] ? __pfx_ipip6_newlink+0x10/0x10 [ 296.872330][ T9701] ? alloc_netdev_mqs+0xcda/0x1000 [ 296.877519][ T9701] ? validate_linkmsg+0x71e/0x900 [ 296.882561][ T9701] ? rtnl_create_link+0x91c/0xc20 [ 296.887596][ T9701] ? __pfx_ipip6_newlink+0x10/0x10 [ 296.892725][ T9701] rtnl_newlink+0x1591/0x20a0 [ 296.897454][ T9701] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.902494][ T9701] ? __pfx___mutex_trylock_common+0x10/0x10 [ 296.908407][ T9701] ? rcu_is_watching+0x15/0xb0 [ 296.913194][ T9701] ? trace_contention_end+0x3c/0x120 [ 296.918495][ T9701] ? __mutex_lock+0x2ef/0xd70 [ 296.923188][ T9701] ? __pfx_lock_release+0x10/0x10 [ 296.928245][ T9701] ? __pfx_rtnl_newlink+0x10/0x10 [ 296.933285][ T9701] rtnetlink_rcv_msg+0x73f/0xcf0 [ 296.938238][ T9701] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 296.943377][ T9701] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.948860][ T9701] ? ref_tracker_free+0x643/0x7e0 [ 296.953914][ T9701] netlink_rcv_skb+0x1e3/0x430 [ 296.958697][ T9701] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 296.964177][ T9701] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.969511][ T9701] ? netlink_deliver_tap+0x2e/0x1b0 [ 296.974736][ T9701] netlink_unicast+0x7f6/0x990 [ 296.980056][ T9701] ? __pfx_netlink_unicast+0x10/0x10 [ 296.985357][ T9701] ? __virt_addr_valid+0x183/0x530 [ 296.990482][ T9701] ? __check_object_size+0x49c/0x900 [ 296.995787][ T9701] ? bpf_lsm_netlink_send+0x9/0x10 [ 297.000924][ T9701] netlink_sendmsg+0x8e4/0xcb0 [ 297.005717][ T9701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.011049][ T9701] ? __import_iovec+0x536/0x820 [ 297.015913][ T9701] ? aa_sock_msg_perm+0x91/0x160 [ 297.020861][ T9701] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 297.026160][ T9701] ? security_socket_sendmsg+0x87/0xb0 [ 297.031722][ T9701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.037033][ T9701] __sock_sendmsg+0x221/0x270 [ 297.041785][ T9701] ____sys_sendmsg+0x525/0x7d0 [ 297.046566][ T9701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.051878][ T9701] __sys_sendmsg+0x2b0/0x3a0 [ 297.056479][ T9701] ? __pfx___sys_sendmsg+0x10/0x10 [ 297.061601][ T9701] ? vfs_write+0x7c4/0xc90 [ 297.066069][ T9701] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.072438][ T9701] ? do_syscall_64+0x100/0x230 [ 297.077318][ T9701] ? do_syscall_64+0xb6/0x230 [ 297.082022][ T9701] do_syscall_64+0xf3/0x230 [ 297.086550][ T9701] ? clear_bhb_loop+0x35/0x90 [ 297.091244][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.097156][ T9701] RIP: 0033:0x7f049357def9 [ 297.101581][ T9701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.121302][ T9701] RSP: 002b:00007f04943c3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.129739][ T9701] RAX: ffffffffffffffda RBX: 00007f0493735f80 RCX: 00007f049357def9 [ 297.137723][ T9701] RDX: 0000000044000040 RSI: 00000000200000c0 RDI: 0000000000000003 [ 297.145704][ T9701] RBP: 00007f04943c3090 R08: 0000000000000000 R09: 0000000000000000 [ 297.153684][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 297.161662][ T9701] R13: 0000000000000000 R14: 00007f0493735f80 R15: 00007ffc457668a8 [ 297.169665][ T9701] [ 297.242336][ T9699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1364'. [ 297.258089][ T9699] syz_tun: entered promiscuous mode [ 297.302378][ T9699] macsec1: entered promiscuous mode [ 297.400847][ T9711] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1369'. [ 297.462525][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.585603][ T9719] FAULT_INJECTION: forcing a failure. [ 297.585603][ T9719] name failslab, interval 1, probability 0, space 0, times 0 [ 297.610162][ T9719] CPU: 1 UID: 0 PID: 9719 Comm: syz.0.1372 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 297.620652][ T9719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 297.630750][ T9719] Call Trace: [ 297.634072][ T9719] [ 297.637035][ T9719] dump_stack_lvl+0x241/0x360 [ 297.641772][ T9719] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.647028][ T9719] ? __pfx__printk+0x10/0x10 [ 297.651688][ T9719] should_fail_ex+0x3b0/0x4e0 [ 297.656591][ T9719] ? dst_alloc+0x12b/0x190 [ 297.661084][ T9719] should_failslab+0xac/0x100 [ 297.665824][ T9719] ? dst_alloc+0x12b/0x190 [ 297.670300][ T9719] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 297.675729][ T9719] dst_alloc+0x12b/0x190 [ 297.680031][ T9719] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 297.686174][ T9719] ip_route_output_key_hash+0x193/0x2b0 [ 297.691794][ T9719] ? ip_route_output_key_hash+0xdf/0x2b0 [ 297.697509][ T9719] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 297.703841][ T9719] ip_route_output_flow+0x29/0x140 [ 297.709021][ T9719] ? __ip_queue_xmit+0x5f/0x1b80 [ 297.714018][ T9719] __ip_queue_xmit+0x988/0x1b80 [ 297.718938][ T9719] ? __ip_queue_xmit+0x5f/0x1b80 [ 297.723933][ T9719] ? __pfx_ip_queue_xmit+0x10/0x10 [ 297.729102][ T9719] __tcp_transmit_skb+0x2544/0x3b30 [ 297.734356][ T9719] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 297.739933][ T9719] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 297.746562][ T9719] ? tcp_send_window_probe+0x26d/0x470 [ 297.752045][ T9719] do_tcp_setsockopt+0x1a64/0x2540 [ 297.757696][ T9719] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 297.763169][ T9719] ? __pfx_aa_sk_perm+0x10/0x10 [ 297.768050][ T9719] ? __pfx_lock_acquire+0x10/0x10 [ 297.773105][ T9719] ? aa_sock_opt_perm+0x79/0x120 [ 297.778069][ T9719] ? tcp_setsockopt+0x3e/0xf0 [ 297.782795][ T9719] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 297.788731][ T9719] do_sock_setsockopt+0x3af/0x720 [ 297.793808][ T9719] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 297.799382][ T9719] ? __fget_files+0x29/0x470 [ 297.803997][ T9719] ? __fget_files+0x3f6/0x470 [ 297.808698][ T9719] __sys_setsockopt+0x1ae/0x250 [ 297.813568][ T9719] __x64_sys_setsockopt+0xb5/0xd0 [ 297.818617][ T9719] do_syscall_64+0xf3/0x230 [ 297.823165][ T9719] ? clear_bhb_loop+0x35/0x90 [ 297.828032][ T9719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.833953][ T9719] RIP: 0033:0x7f34c257def9 [ 297.838465][ T9719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.858087][ T9719] RSP: 002b:00007f34c32f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 297.866606][ T9719] RAX: ffffffffffffffda RBX: 00007f34c2735f80 RCX: 00007f34c257def9 [ 297.874609][ T9719] RDX: 0000000000000013 RSI: 0000000000000006 RDI: 0000000000000003 [ 297.882592][ T9719] RBP: 00007f34c32f6090 R08: 0000000000000004 R09: 0000000000000000 [ 297.890588][ T9719] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 297.898664][ T9719] R13: 0000000000000000 R14: 00007f34c2735f80 R15: 00007ffd4f3558e8 [ 297.906664][ T9719] [ 297.919820][ T9721] netlink: 'syz.4.1373': attribute type 3 has an invalid length. [ 298.210648][ T9735] FAULT_INJECTION: forcing a failure. [ 298.210648][ T9735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.239117][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1377'. [ 298.272708][ T9735] CPU: 1 UID: 0 PID: 9735 Comm: syz.2.1378 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 298.283536][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 298.293640][ T9735] Call Trace: [ 298.296947][ T9735] [ 298.299899][ T9735] dump_stack_lvl+0x241/0x360 [ 298.304631][ T9735] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.309900][ T9735] ? __pfx__printk+0x10/0x10 [ 298.314560][ T9735] ? snprintf+0xda/0x120 [ 298.318841][ T9735] should_fail_ex+0x3b0/0x4e0 [ 298.323549][ T9735] _copy_to_user+0x2f/0xb0 [ 298.327992][ T9735] simple_read_from_buffer+0xca/0x150 [ 298.333409][ T9735] proc_fail_nth_read+0x1ec/0x260 [ 298.338450][ T9735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.344009][ T9735] ? rw_verify_area+0x520/0x6b0 [ 298.348868][ T9735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.354426][ T9735] vfs_read+0x204/0xbc0 [ 298.358590][ T9735] ? __pfx_lock_release+0x10/0x10 [ 298.363635][ T9735] ? __pfx_vfs_read+0x10/0x10 [ 298.368408][ T9735] ? __fget_files+0x29/0x470 [ 298.373014][ T9735] ? __fget_files+0x3f6/0x470 [ 298.377715][ T9735] ksys_read+0x1a0/0x2c0 [ 298.381979][ T9735] ? __pfx_ksys_read+0x10/0x10 [ 298.386751][ T9735] ? do_syscall_64+0x100/0x230 [ 298.391553][ T9735] ? do_syscall_64+0xb6/0x230 [ 298.396274][ T9735] do_syscall_64+0xf3/0x230 [ 298.400802][ T9735] ? clear_bhb_loop+0x35/0x90 [ 298.405494][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.411410][ T9735] RIP: 0033:0x7fc9f5f7c93c [ 298.415854][ T9735] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 298.435475][ T9735] RSP: 002b:00007fc9f6d06030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.444027][ T9735] RAX: ffffffffffffffda RBX: 00007fc9f6135f80 RCX: 00007fc9f5f7c93c [ 298.452106][ T9735] RDX: 000000000000000f RSI: 00007fc9f6d060a0 RDI: 0000000000000005 [ 298.460121][ T9735] RBP: 00007fc9f6d06090 R08: 0000000000000000 R09: 0000000000000000 [ 298.468130][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.476133][ T9735] R13: 0000000000000000 R14: 00007fc9f6135f80 R15: 00007ffd78f58e18 [ 298.484176][ T9735] [ 298.697437][ T9744] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1380'. [ 299.923069][ T9778] netlink: 'syz.0.1390': attribute type 10 has an invalid length. [ 299.967966][ T9778] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.976884][ T9778] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.036893][ T9792] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.1399'. [ 300.074264][ T9792] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1399'. [ 300.362786][ T9811] Bluetooth: MGMT ver 1.23 [ 300.488998][ T9816] trusted_key: syz.0.1408 sent an empty control message without MSG_MORE. [ 300.653093][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 300.692947][ T9825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1411'. [ 300.873797][ T9834] No such timeout policy "syz0" [ 301.266211][ T9849] __nla_validate_parse: 2 callbacks suppressed [ 301.266232][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 301.298026][ T9849] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1420'. [ 301.589590][ T9864] FAULT_INJECTION: forcing a failure. [ 301.589590][ T9864] name failslab, interval 1, probability 0, space 0, times 0 [ 301.615541][ T9864] CPU: 1 UID: 0 PID: 9864 Comm: syz.2.1424 Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 301.625947][ T9864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 301.630828][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 301.636105][ T9864] Call Trace: [ 301.636119][ T9864] [ 301.636130][ T9864] dump_stack_lvl+0x241/0x360 [ 301.636175][ T9864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 301.662374][ T9864] ? __pfx__printk+0x10/0x10 [ 301.667028][ T9864] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 301.673194][ T9864] ? __pfx___might_resched+0x10/0x10 [ 301.678551][ T9864] should_fail_ex+0x3b0/0x4e0 [ 301.683293][ T9864] should_failslab+0xac/0x100 [ 301.688012][ T9864] ? __alloc_skb+0x1c3/0x440 [ 301.692683][ T9864] kmem_cache_alloc_node_noprof+0x71/0x320 [ 301.698545][ T9864] __alloc_skb+0x1c3/0x440 [ 301.702997][ T9864] ? __pfx___alloc_skb+0x10/0x10 [ 301.707969][ T9864] ? netlink_has_listeners+0x2ea/0x3a0 [ 301.713450][ T9864] ? netlink_has_listeners+0x73/0x3a0 [ 301.719015][ T9864] nf_tables_commit+0x7d30/0x91e0 [ 301.724128][ T9864] ? __pfx_nf_tables_commit+0x10/0x10 [ 301.729560][ T9864] ? nft_trans_commit_list_add_tail+0x190/0x550 [ 301.735864][ T9864] ? nf_tables_newflowtable+0x1f35/0x2480 [ 301.741661][ T9864] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 301.747597][ T9864] ? __mutex_unlock_slowpath+0x21d/0x750 [ 301.753344][ T9864] ? __pfx_lock_release+0x10/0x10 [ 301.758447][ T9864] ? __nla_parse+0x40/0x60 [ 301.762915][ T9864] nfnetlink_rcv+0xc77/0x2ab0 [ 301.767749][ T9864] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 301.772928][ T9864] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.778150][ T9864] ? skb_clone+0x240/0x390 [ 301.782622][ T9864] ? __pfx_lock_release+0x10/0x10 [ 301.787676][ T9864] ? netlink_deliver_tap+0x2e/0x1b0 [ 301.792904][ T9864] netlink_unicast+0x7f6/0x990 [ 301.797699][ T9864] ? __pfx_netlink_unicast+0x10/0x10 [ 301.802999][ T9864] ? __virt_addr_valid+0x183/0x530 [ 301.808141][ T9864] ? __check_object_size+0x49c/0x900 [ 301.813446][ T9864] ? bpf_lsm_netlink_send+0x9/0x10 [ 301.818577][ T9864] netlink_sendmsg+0x8e4/0xcb0 [ 301.823893][ T9864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.829202][ T9864] ? __import_iovec+0x536/0x820 [ 301.834070][ T9864] ? aa_sock_msg_perm+0x91/0x160 [ 301.839023][ T9864] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 301.844505][ T9864] ? security_socket_sendmsg+0x87/0xb0 [ 301.849982][ T9864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.855290][ T9864] __sock_sendmsg+0x221/0x270 [ 301.860089][ T9864] ____sys_sendmsg+0x525/0x7d0 [ 301.864963][ T9864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 301.870274][ T9864] __sys_sendmsg+0x2b0/0x3a0 [ 301.874880][ T9864] ? __pfx___sys_sendmsg+0x10/0x10 [ 301.879998][ T9864] ? vfs_write+0x7c4/0xc90 [ 301.884478][ T9864] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.890838][ T9864] ? do_syscall_64+0x100/0x230 [ 301.895642][ T9864] ? do_syscall_64+0xb6/0x230 [ 301.900346][ T9864] do_syscall_64+0xf3/0x230 [ 301.904956][ T9864] ? clear_bhb_loop+0x35/0x90 [ 301.909645][ T9864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.915548][ T9864] RIP: 0033:0x7fc9f5f7def9 [ 301.919970][ T9864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.939588][ T9864] RSP: 002b:00007fc9f6d06038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.948019][ T9864] RAX: ffffffffffffffda RBX: 00007fc9f6135f80 RCX: 00007fc9f5f7def9 [ 301.956044][ T9864] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 301.964024][ T9864] RBP: 00007fc9f6d06090 R08: 0000000000000000 R09: 0000000000000000 [ 301.972034][ T9864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 301.980058][ T9864] R13: 0000000000000000 R14: 00007fc9f6135f80 R15: 00007ffd78f58e18 [ 301.988066][ T9864] [ 302.115622][ T9849] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 302.335019][ T9877] sctp: [Deprecated]: syz.1.1429 (pid 9877) Use of int in max_burst socket option. [ 302.335019][ T9877] Use struct sctp_assoc_value instead [ 302.366443][ T9876] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1428'. [ 302.833769][ T9898] netlink: 'syz.3.1437': attribute type 24 has an invalid length. [ 302.951706][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 303.046538][ T9911] netlink: 'syz.4.1443': attribute type 39 has an invalid length. [ 303.284429][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 303.548268][ T9921] IPVS: Error joining to the multicast group [ 303.905600][ T9933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1451'. [ 304.107310][ T9937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1453'. [ 304.146313][ T9941] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.1455'. [ 304.173169][ T9941] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.1455'. [ 304.203616][ T9941] openvswitch: netlink: Missing key (keys=440, expected=200000) [ 304.489205][ T9955] netlink: 'syz.2.1459': attribute type 1 has an invalid length. [ 304.521196][ T9955] netlink: 54 bytes leftover after parsing attributes in process `syz.2.1459'. [ 304.571521][ T9955] openvswitch: netlink: Actions may not be safe on all matching packets [ 304.728495][ T9959] syzkaller1: entered promiscuous mode [ 304.753265][ T9959] syzkaller1: entered allmulticast mode [ 304.767593][ T9957] lo speed is unknown, defaulting to 1000 [ 305.363166][ T9969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1464'. [ 305.830928][ T9978] netlink: 'syz.4.1467': attribute type 10 has an invalid length. [ 305.900935][ T9980] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1467'. [ 305.985270][ T9978] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.993191][ T9978] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.187306][ T9978] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.194628][ T9978] bridge0: port 2(bridge_slave_1) entered listening state [ 306.202186][ T9978] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.209463][ T9978] bridge0: port 1(bridge_slave_0) entered listening state [ 306.397878][ T9978] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 307.142969][ T9997] bridge1: entered promiscuous mode [ 307.148247][ T9997] bridge1: entered allmulticast mode [ 307.253136][ T9997] team0: Port device bridge1 added [ 308.191581][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1476'. [ 309.498155][T10035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1487'. [ 309.730164][T10040] sctp: [Deprecated]: syz.3.1488 (pid 10040) Use of int in max_burst socket option deprecated. [ 309.730164][T10040] Use struct sctp_assoc_value instead [ 309.842976][T10044] bridge0: port 3(ipvlan2) entered blocking state [ 309.891565][T10044] bridge0: port 3(ipvlan2) entered disabled state [ 309.933646][T10044] ipvlan2: entered allmulticast mode [ 309.962598][T10044] bridge0: entered allmulticast mode [ 310.010877][T10044] ipvlan2: left allmulticast mode [ 310.030334][T10044] bridge0: left allmulticast mode [ 320.784547][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.281484][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 321.290135][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 336.631989][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.639263][ C0] bridge0: topology change detected, propagating [ 336.647713][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.655015][ C0] bridge0: topology change detected, propagating [ 384.078400][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.363019][ T4623] Bluetooth: hci4: command 0x0406 tx timeout [ 404.369118][ T4623] Bluetooth: hci3: command 0x0406 tx timeout [ 404.414888][ T4623] Bluetooth: hci1: command 0x0406 tx timeout [ 404.441285][ T5249] Bluetooth: hci5: command 0x0406 tx timeout [ 404.447481][ T5249] Bluetooth: hci2: command 0x0406 tx timeout [ 440.605748][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.532980][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.390246][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 584.034773][ T30] INFO: task kworker/0:0:8 blocked for more than 144 seconds. [ 584.310087][ T30] Not tainted 6.11.0-syzkaller-01459-g151ac45348af #0 [ 584.317439][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 587.171550][ T30] task:kworker/0:0 state:D stack:22768 pid:8 tgid:8 ppid:2 flags:0x00004000 [ 587.490012][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 587.497150][ T30] Call Trace: [ 587.890138][ T30] [ 587.893156][ T30] __schedule+0x1800/0x4a60 [ 587.897749][ T30] ? __pfx___schedule+0x10/0x10 [ 588.091528][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 588.097610][ T30] ? __pfx_lock_release+0x10/0x10 [ 588.290018][ T30] ? kick_pool+0x45c/0x620 [ 588.297316][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 588.460046][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 588.465499][ T30] ? schedule+0x90/0x320 [ 588.469824][ T30] schedule+0x14b/0x320 [ 588.730166][ T30] schedule_preempt_disabled+0x13/0x30 [ 588.735730][ T30] __mutex_lock+0x6a4/0xd70 [ 588.860285][ T30] ? __mutex_lock+0x527/0xd70 [ 588.865050][ T30] ? reg_check_chans_work+0x164/0xfd0 [ 589.020088][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 589.025355][ T30] reg_check_chans_work+0x164/0xfd0 [ 589.200105][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 589.206191][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 589.360094][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 589.366538][ T30] ? process_scheduled_works+0x945/0x1830 [ 589.540006][ T30] process_scheduled_works+0xa2c/0x1830 [ 589.545679][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 589.731106][ T30] ? assign_work+0x364/0x3d0 [ 589.735798][ T30] worker_thread+0x870/0xd30 [ 589.859974][ T30] ? __kthread_parkme+0x169/0x1d0 [ 589.865105][ T30] ? __pfx_worker_thread+0x10/0x10 [ 590.029989][ T30] kthread+0x2f0/0x390 [ 590.034157][ T30] ? __pfx_worker_thread+0x10/0x10 [ 590.170025][ T30] ? __pfx_kthread+0x10/0x10 [ 590.174723][ T30] ret_from_fork+0x4b/0x80 [ 590.179194][ T30] ? __pfx_kthread+0x10/0x10 [ 590.380020][ T30] ret_from_fork_asm+0x1a/0x30 [ 590.384894][ T30] [ 590.388210][ T30] [ 590.388210][ T30] Showing all locks held in the system: [ 591.037236][ T30] 4 locks held by kworker/0:0/8: [ 591.200375][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 591.690068][ T30] #1: ffffc900000d7d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 591.974272][ T30] #2: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 592.260005][ T30] #3: ffff888051cd0768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: reg_check_chans_work+0x164/0xfd0 [ 592.620059][ T30] 3 locks held by kworker/0:1/9: [ 592.625156][ T30] 3 locks held by kworker/u8:0/11: [ 592.820069][ T30] 3 locks held by kworker/u8:1/12: [ 592.825264][ T30] 1 lock held by khungtaskd/30: [ 592.980107][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 593.132506][ T30] 3 locks held by kworker/u8:2/35: [ 593.137686][ T30] 3 locks held by kworker/u8:3/53: [ 593.259961][ T30] 3 locks held by kworker/u8:4/63: [ 593.265138][ T30] 2 locks held by kswapd1/91: [ 593.269847][ T30] 4 locks held by kworker/u8:5/777: [ 593.409947][ T30] #0: ffff88801bae5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 593.499965][ T30] #1: ffffc90003a67d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 593.583147][ T30] #2: ffffffff8fc7ba90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 593.662396][ T30] #3: ffffffff8fc88588 (rtnl_mutex){+.+.}-{3:3}, at: cfg802154_pernet_exit+0x1b/0xe0 [ 593.739972][ T30] 3 locks held by kworker/R-ipv6_/2728: [ 593.745588][ T30] #0: ffff88803048f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 593.861069][ T30] #1: ffff8880b8828948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 593.953485][ T30] #2: ffff8880b883e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 594.020024][ T30] 2 locks held by dhcpcd/4898: [ 594.024870][ T30] 5 locks held by dhcpcd/4899: