last executing test programs: 5.082466259s ago: executing program 1 (id=1142): socket$can_raw(0x1d, 0x3, 0x1) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) socket$can_raw(0x1d, 0x3, 0x1) (async) unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) unshare(0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40a01, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc601}) (async) socket$kcm(0x2, 0xa, 0x2) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd0700400000004000000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) 3.2728443s ago: executing program 1 (id=1165): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0xea, "12d96676b96c6ba283c858a88c848a5abebaec547f274b25d07ef084709e4f1483de3cbfef4a2c10a7ff8cc37976ba85d580698e30b44b00e7f8578b30d0ac21e31238c2ab33e4a96b4aabf034fbbb8de941b148cd3f921b15dae95b45af514d208c4513a073ea8edc8a1f361ad45470b36f5566d70019362b9a6b4198b4e0cde8e99552386bcf0331183463a4ab7501e4cd40bc83465d0a1056937d7bec3060e68005559c0a5cccda74c3366da8485ad3a59b74d2f769a8e20bb71b423719cd0bb7f3deccdfbcc8578c1823d0e564f5f64eca0ec39a92bae5ffc1b1d1a2cd3cdff2c96de6b88421bd5c"}, &(0x7f0000000440)=0xf2) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000480)=r2, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18b649000000553a3ed111dfaf38bcd1f7d2bf595ff8b7ee8fe26a49b58ffe2613ac1816efbb48275eb782902d910795dbdeef1dcc8d300d41192c"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x5b, 0x8a}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r4}, 0xc) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x568b4ea2bec4bec2, 0x50, r0, 0x14644000) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@remote, @in=@local}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) r6 = socket(0x400000000010, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x15, 0x4) setsockopt$inet_tcp_int(r7, 0x6, 0x10, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e24, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000340)=[@timestamp], 0x1) write$binfmt_elf64(r7, &(0x7f0000000280)=ANY=[], 0x40) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) sendto$inet(r7, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r8 = socket(0x80000000000000a, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2b, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2000473d, &(0x7f0000e68000)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) 2.49171489s ago: executing program 2 (id=1177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="c0000000190001000000000000000000000000000000000000000000000000000000000000000038aeffff000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000001"], 0xc0}}, 0x0) 2.365330734s ago: executing program 2 (id=1179): socket$nl_generic(0x10, 0x3, 0x10) r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000100)=0x80, 0x100000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="0700db1d0db205e2970000000100010000"], 0x12) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff}) unshare(0x20000400) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x5761, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x58}, 0x1, 0x2}, 0x0) unshare(0x400) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, 0x0, &(0x7f0000001440)=0x52) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0xa0000000, 0x0, 0xfffffff8, 0x32, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x4, 0x3}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0xf, &(0x7f00000000c0)=0x2, 0x12) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0x3d, &(0x7f0000000400)={0x0}}, 0x8c002) socket$phonet_pipe(0x23, 0x5, 0x2) socket$inet_dccp(0x2, 0x6, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 2.316556448s ago: executing program 1 (id=1181): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x1960, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x102, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) r2 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r2, &(0x7f0000007ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@ethernet={0x1, @remote}, 0x80, &(0x7f0000000500)}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x200, 0x3fff8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2}}}}]}, 0x78}}, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000000)=0x400, 0x4) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000100)=0xfffffffd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r8}, 0x10, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="01080000270000f1e41b98026ce222c28800000000000000d70ffe82ba142c5e69425dae222c6ca3597f7d515f750e9c90a6b27cd0b9e038210831", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000010000000000000000000000c4f40c848d970647"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xfffffffffffffe68) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x90) r9 = socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(r9, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="d7", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r9, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x8, 0x2b, 0x0, @private2, @local, {[], {0x2b00, 0x0, 0x8}}}}}}, 0x0) socket$inet(0x2, 0x0, 0x5) socket$inet6(0xa, 0x0, 0x0) 2.033857866s ago: executing program 2 (id=1184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x8, 0x0, 0xa}, {}, {0x4e}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x3}}, 0xe8) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x40004}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1bc81a00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x3, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {}, {0x4, 0x0, 0x9}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0x2, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x5, 0xff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x1, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8, 0x3ffd}]}}]}]}, 0x34}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r11, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 1.606902491s ago: executing program 2 (id=1189): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) getsockname$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000140)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a00010000000000000000000a"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) 1.443905051s ago: executing program 2 (id=1190): r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$caif_stream(0x25, 0x1, 0x5) ioctl(r0, 0x7, &(0x7f0000000000)="1286459e14f4e2c7938106a8b1696fa412856fb928efe4458e83d9576e297857c34eb0fc5737911d70655e7f54b7d3bdf5e206eb4e513a78feefe8671c861edb19d2332334f41b17a94c8d4fbc70e167f6759768043c569262d12857093aa2befb7b20f0ae7e5774869a71ea0fc27d86dcd9de2864d8eff945e3813470a9c182") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c00000006000000000000000100000d000000000400e3ff020000000000000040000006"], 0x0, 0x4a}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={r7, &(0x7f0000000f80), &(0x7f0000000800)=""/210}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090dc4c6000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc000800050007"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4020000000000007911300000000000850000002e0000009500000000000000358bb9f43d86b13600"/50], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000340)={{0x0, 0x0, 0x7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000140)={0x1f, 0x0, @fixed, 0x3ff}, 0xe) shutdown(r8, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0x70}}, 0x0) 1.351671601s ago: executing program 0 (id=1193): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$inet(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001500)="1a6a618ddb7993d170db787966714624dd642d43a0c54a15cbd415562ecfd005257e591aa300b3f77fa178d5ecad767425f61bf4b617cd3568678da5cbe2259f95f37086a5724e9a610e136c3de3785a77939486131b85244db63f70ac93d708799b8b66821aeafcbd357fc55c4e2ca590786b2a507e814e09b022feeafdfd4e5afb6b7a49e4233c4c6777343b5d7bc5e7fb15689588ddb7d5a7aee3c59ccf64a15a42270e6e71aaca77e2d9a614d5407adffbef34873d0b393121af6a4ca6e2e9c929ddb72554b200d05800c6079b8ea990fa05a401112139194672854d530bd71b21fe40d2317d003a6cd8d61057", 0xef}], 0x1, &(0x7f0000001640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x36}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x50}, 0x4000) 1.34718825s ago: executing program 4 (id=1194): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x3, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="570da90e8cc47e63f1bb6a6bf411a2a7765467825bd01e6086279ad61eb528cea088cdd785c7d46a1c1de9456edebb53b5a1c730165ff10317b60d9c5b98bf9a12bd311227d0f85638c0c7a6f661e9741aa3f4515f28fd7ad8ff0bcf0ff987377ba7a3e6a9eba62f8f0d49853ac0124e83acccc547e6dafce80f15535cd7be4406ad2344c967f39762c54a4f9ba166152e04ff0e5d9dd31d11b5fd7234f54b22", 0xa0}], 0x1}, 0x4014048) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000200000079102800000000001e50000000e1ffff9400000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305839, &(0x7f0000000000)={0x0, 0x2, 0xefff, 0xfa64}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000001c0)={r10, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000280)=0x10) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r11, 0x6b, 0x2, &(0x7f00000000c0), 0x4) sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 1.308334805s ago: executing program 1 (id=1195): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797ad00000000014000000110001"], 0x7c}}, 0x0) close(0x3) write$cgroup_devices(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='c 75:', @ANYRESOCT=r1, @ANYRESDEC=r1, @ANYRESOCT=r1, @ANYRES8=0x0], 0x10) r3 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) bind$rose(r3, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) syz_emit_ethernet(0xf6, &(0x7f00000002c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x1f, 0x4, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0xaa, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0xc}, 0x8}, {@empty, 0x5}, {@broadcast, 0x2}]}, @generic={0xf, 0x5, "cb0a39"}, @timestamp_addr={0x44, 0x1c, 0x4b, 0x1, 0x8, [{@local, 0xa3}, {@empty, 0x3ff}, {@remote, 0x1}]}, @noop, @cipso={0x86, 0x18, 0x2, [{0x2, 0x12, "daef48cb51abfc70aee21260c91a479d"}]}, @end, @generic={0x82, 0xd, "e1e02cdc117adb2bc160f5"}]}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @local, @local, {[@rr={0x7, 0x3, 0x38}, @ssrr={0x89, 0x7, 0x9d, [@empty]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}, "f181cd6e992c1bcb"}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@gettaction={0x90, 0x32, 0x6dd711a25f4cb68b, 0x70bd2e, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa6a}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_INDEX}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x91}}, {0xfffffddd, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6376f3aa}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x90}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000005200cb13"], 0x18}}, 0x0) 1.257268626s ago: executing program 0 (id=1196): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000019c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f00000009c0)="0000ffffff8d00f03f0100000001", 0x0, 0xfffffffe, 0x500, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.171751136s ago: executing program 3 (id=1197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000c80016801400018010000600810000000400000004000000340001800c00030005000000001000000c000900060000000b0000000c00090000000000010000000c00050006000000010000005c00018214000a00070000000000000001000000000000000c00050002000000000000800c00030001a800000000000014000b00a48cd0220000000005000000000000000c000400000000000a0000000c000500f16e630d04000000200001800c000700020000000600000010000602717f457c03000000020000000a000100aa"], 0xf4}}, 0x4a010) 1.171307346s ago: executing program 4 (id=1198): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) (async) listen(r3, 0x20) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) (async) getsockopt$inet_int(r4, 0x10d, 0x91, &(0x7f0000000000), &(0x7f0000000240)=0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x40, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "9bfe99d06c"}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x40}}, 0x0) 1.112009538s ago: executing program 3 (id=1199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x5ae, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000001500000000630138000000000095000000000000006cffae55164a69def6e518a3f61f822d34a1a9fa064aa49aa93f444259e7b0fe6e81f0ef56d08081cbf030b47b4c33"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.070392339s ago: executing program 4 (id=1200): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x48}, {0x28, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x20020}}}}}, 0x0) 995.326943ms ago: executing program 3 (id=1201): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x7) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="aa1e216699066bda24668c703b141b5716e494772557fd2e57d5351d0ffb5b842539672118449cd5dec59f1b97d6f17cd96b62bae4a953e7e924533252813b211e67cad83cb149c234d9fbec631edac2f4462fe939964f265b6bafcca51ec91f63c7c1519ef115660eb46f1a110ee079a3922e09cb2bde0c35fe40b39b0a43cdb7864b8cb08097ff2b43029f9764452d3f3e4f2b73826d92ef4f", 0x9a}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x84}], 0x1, &(0x7f0000002f40)=""/244, 0xf4}, 0x0) close(r3) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x32}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={r6, &(0x7f0000000200), 0x0}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d80)={'wpan1\x00'}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d080202000000fcfea4a1040015000600142603600e1208000f0000810401a80016040a00014003000000036010fab94dcf5c0460c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791823a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newtaction={0xec, 0x30, 0x1, 0x0, 0x0, {}, [{0xd8, 0x1, [@m_police={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0xa4, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x39, 0x6, "eb02c64b3865261f5aef046dff67032a58dcdc35a08a67f1391d191be453b2374668c30ad6ab7b27777b34f8492e6ab3b1f4ecc01c"}, {0xc}, {0xc}}}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r10 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r10, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c) 994.732934ms ago: executing program 1 (id=1202): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2}, 0xffffffffffffff33) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) setsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="52bdaf902d2416f31429bf87ec10057e97c251c099d7620a85640886fa1331a9a762fc1cff6b4c1c15beab0ee58f76dc53a7716fb14f08161ed5bf94032e5fbc56d08a29fd3f345871c1e62293d65c751676a85ee5294153903d0294d268975da92a1ffa105b59104e9f80c9e9482f2bc83c20993bffd26e1a945611629ed667d610856acd3cdb47bd532bad58b7cfc5b9c07cb02acbaf9d8b40227d", @ANYRES16=0x0, @ANYRESOCT=r1], 0x34}}, 0x800) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e21, 0xd, @remote, 0x4}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYRES16=r2, @ANYRESDEC=r3], 0x38}, 0x4, 0x700000000000000, 0x0, 0x8881}, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000001040)={0x0, 0x7, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c0108800c01008006000500070000002400020086650b35f0b4c2dc04a95e352f55e8204db1e72262099a4daa6bd5d598d1ecdb24000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002004e24ac1e0001000000000000000008000300000000009c0009801c000080060001000200000008000200e0000002050003000300000028000080060001000a000000140002002001000000000000000000000000000105000300030000001c000080060001000200000008000200ac141400050003"], 0x1d8}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r9 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000400)) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000200)={0x3, &(0x7f0000000140)=[{0x9, 0x0, 0x6, 0x937}, {0x1, 0x0, 0x9, 0x9}, {0x0, 0x9d, 0x6}]}) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x7d, &(0x7f0000000040), 0x8) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000280)="7b55c852a2a790233f1e1fcef7f0c5da276c3728f9532190be890ce13b481024210384775b6a6fc95aa3d82b9115600eb44c7a07031cfb97124c4ffb42648072ac49b01fa4", 0x45}], 0x1}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x40047452, 0xfffffffffffffffd) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d80000001c0081064e81f782db44b9040a1d08040e00000000680aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x640040, 0x0) 812.321189ms ago: executing program 3 (id=1203): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x1, 0x9, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x3ff}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x10e2}}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x26}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x8}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x7}}]}, 0x108}, 0x1, 0x0, 0x0, 0x28000001}, 0x4040085) (async) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000200)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x1ff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r3, 0x100, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x3f}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r4, 0x0, 0x483, &(0x7f00000003c0)={0x2e, @empty, 0x4e22, 0x0, 'lc\x00', 0x1, 0x26, 0x46}, 0x2c) (async) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000400)="ca25f1fdf440e6eacfd21a4ca981ae75eee660876995489ccb3d8fd24c73232d2fe3247d0b60c1b773447d26a261d0d741a46662d472c317e819b67e2fc2c2560708ba", 0x43}], 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000540)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000580)=0x1c) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r2) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000a40)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000640)={0x394, r6, 0x100, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_WANTED={0x16c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x45, 0x5, "ba06d1c1ac147d9399068827df50c9d243ee484d6bc3ed83e2e23fb181dcc6b771188173c8af0ea110dd098e50134c851604a76212a5b43ca957e39c3e5eb185f1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000000}, @ETHTOOL_A_BITSET_MASK={0x7e, 0x5, "1d53b40e0b3acb7eb12b6a7f2ea45b9e586d171b7eeffd696baeff9dfefcc5ce2081faf57e17d8615e63d9265f8cf4a80a5fe61d9f9ffa8d050de795f74a72e752c2d9df3b693749ef267556d77f87347cd92468ddc1e28279a2ad65feaeecf007d991d660f89d36d8e235c4f903be0f72fa414cf98a20af9997"}, @ETHTOOL_A_BITSET_VALUE={0x92, 0x4, "05df8c0dc5fe9b8f1ace1b4b5582de409d18f6935e99be8c0d0dd8dded72e906ec36a28c1c023a500fe5450052edd07f6362f3eab8d78b701287e498962da8f5ebfeb061779932853a23234bbbdda20fcf3a748b75d65865373dc4288f1d582e48f2c48f91050411ddc92d7fac7a727a3a5604930dd96379fcef0fbba280a9b75b0670efde32ede46092cf03025f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x58, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4c, 0x4, "ec9c76952a17391fa6b4efea50f367593965799674a3080f524c95e38d92fa298c099b28e2e605a4042d672c89d6114428f2cc30b62a4e124f3e484b17c23e78a28d8139632a07c1"}]}, @ETHTOOL_A_FEATURES_WANTED={0x190, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xc}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@\'\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']*:]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5f99c779}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, './cgroup/syz0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6e8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x829}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\xc2[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x2e, 0x5, "1f9ff7061790d32cfe6fe4729083c00bde00c3abb28b7efba296415607c2e9192d0a9739a24340eb2b07"}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x40}, 0x24000814) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000bc0)={0x1, 0xffffffffffffffff}, 0x4) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f40)={&(0x7f0000000e00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x3, [@fwd={0x10}, @typedef={0x6, 0x0, 0x0, 0x8, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x5}}, @union={0x7, 0xa, 0x0, 0x5, 0x0, 0x7, [{0x4, 0x3, 0x7fff}, {0x6, 0x2, 0x8001}, {0xf, 0x2, 0x1}, {0x5, 0x3, 0x1ff}, {0x10, 0x4, 0xd8da}, {0x3, 0x5, 0x9}, {0x0, 0x5, 0x702d}, {0x1, 0x2, 0xde24}, {0xd, 0x1, 0x200}, {0x9, 0x1}]}, @const={0xa, 0x0, 0x0, 0xa, 0x5}, @func={0xa, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x2e]}}, &(0x7f0000000f00)=""/24, 0xe7, 0x18, 0x0, 0x5}, 0x20) (async) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000fc0), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001000)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x18, 0x31, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7852, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @map_idx={0x18, 0xd, 0x5, 0x0, 0x6}, @ldst={0x1, 0x1, 0x2, 0x7, 0x7, 0x3e, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000dc0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x1e, r10, 0x8, &(0x7f0000000f80)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r11, 0x7, &(0x7f0000001040)=[r12], &(0x7f0000001080)=[{0x4, 0x4, 0xc, 0x6}, {0x0, 0x3, 0x1, 0x2}, {0x3, 0x2, 0x7, 0x9}, {0x0, 0x2, 0xc, 0xc}, {0x0, 0x4, 0x0, 0xf}, {0x1, 0x3, 0xd, 0x7}, {0x1, 0x1, 0x0, 0x7}], 0x10, 0x10001}, 0x90) (async) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f00000011c0)={{{@in=@broadcast, @in=@broadcast}}, {{@in6}, 0x0, @in=@private}}, &(0x7f00000012c0)=0xe8) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000001440)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x65257858490f1e88}, 0xc, &(0x7f0000001400)={&(0x7f0000001340)={0xbc, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd1d, 0x49}}}}, [@NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x234}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xc}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x60, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xc}, @NL80211_ATTR_CQM_RSSI_THOLD={0x24, 0x1, [0x80, 0x6, 0x3, 0x1, 0x5, 0x1, 0xaf7a, 0x7b46]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xec7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x14}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x12d6}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) r14 = accept4$x25(0xffffffffffffffff, &(0x7f0000001480)={0x9, @remote}, &(0x7f00000014c0)=0x12, 0x80800) ioctl$sock_x25_SIOCADDRT(r14, 0x890b, &(0x7f0000001500)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x1, 'gre0\x00'}) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40008d1) 735.415118ms ago: executing program 4 (id=1204): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYRES8=r4, @ANYRESDEC=r4, @ANYBLOB="38002f80200003801400038006000100000000001800020000000000080001000000000008000100000000000c00"], 0x54}}, 0x238fa9426526a30c) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r1, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}]}, 0x70}, 0x1, 0x0, 0x0, 0x44080}, 0x4010) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SECURITY(r8, 0x6, 0x4, 0x0, 0xf0ff1f00000000) (async) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) listen(r9, 0x81) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x82, &(0x7f0000000000), 0x8) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) r13 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) (async) bind$can_raw(r13, &(0x7f00000005c0), 0x10) recvmmsg(r10, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000980)=""/22, 0x16}, {&(0x7f0000000340)=""/92, 0x5c}, {&(0x7f0000000d80)=""/207, 0xcf}, {&(0x7f0000000b40)=""/228, 0xe4}, {&(0x7f0000000a80)=""/149, 0x95}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000600)=""/136, 0x5}, {&(0x7f00000003c0)=""/90, 0x5a}, {&(0x7f0000000300)}, {&(0x7f0000000480)=""/170, 0xaa}], 0xa}}], 0x1, 0x40002160, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r13, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) (async) sendmsg$can_raw(r13, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r14}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r11, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x20}}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r15, 0x8915, &(0x7f0000000080)={'macvtap0\x00', {0x2, 0x0, @private}}) 285.089516ms ago: executing program 2 (id=1205): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xfffffffffffffd6c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}}], 0x1, 0x0) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001880)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r5, @ANYRESHEX], 0x3c}, 0x1, 0x0, 0x0, 0x20000811}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0xe, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}]}}}]}, 0x90}}, 0x0) socket$alg(0x26, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000001940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r9) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private0}, @IFLA_GRE_IKEY={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f00000017c0)={&(0x7f0000000180)=@can={0x1d, r13}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000240)="d48792f2d06a57ba9db6f6408ddbcd8b57d514cf1821add54d04de2bf2f3edc97067d125ae49e95e1205e617cf088345d0200993bad924efb30d91d175661d3f7c0ef5c1cf5da1e4e15b411a1d6ccf8a491e55", 0x53}, {&(0x7f0000000480)="a654fa573f37a7f27cb58b23e830ea8b5cd2a56f770f289e2c80ba90838c5851950c59eb8e1abc0ed033b23d4e5bf275103d6c2cdd7778fcb947d24d4f17c4df7e04fb161374d8f379928e5a31722867748a7f380d28b652ac532202b6245d2d83cb982dc0e5518fe7d8fcfe003569e1f4022264a1e38ae3ed7bbbd4f75f52627ea952f9d9c59ad67285cbda72", 0x8d}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="75e9814b9644c6ee99fd10d00ce18913c720280cca7d3ed13419dbff528c8062df5ab8ff75e4d54156f16c09f33c2fd249fe1fb5f3aa6e1344e0462bc17ec3e3d14df3d460f6bfe31a0ea2b576d25bbe1bf7b7db07998c91ddc5347e8496f116ac7840d3a369acf593c48ad603c1b09b21db4e8be321decddfe653cb6c6a2e7a134dc6", 0x83}, {&(0x7f0000000340)="65d46f33f035a86cbafdaacb26", 0xd}, {&(0x7f0000001600)="8cb1eeff08401bdc2767887cdbfbbe07b370066fc24079adfa470aebf97e14499d10def31fb4530cd75e946262507a66915e608cbb4779cb04b00d3c153e590586d936654e20deb1dd63c0a1466bbc02de44706ca55c7ff01804ba7aa2a51450969856b091ed7c87f2fdbc154c68edb1b6f8fc7fea6a6eff9bf92e1c863441c7db9a0e2d63ded966dbaa373cf80635", 0x8f}, {&(0x7f00000016c0)="a29b06e814b50aa184d93367ea73f6014370972c8c0bb055350fb3d41eb2d2197d960bc9d076bc092ed1e87b5a1711669dbfb211d8e5", 0x36}], 0x7, &(0x7f00000018c0)=ANY=[@ANYBLOB="20000000000000000f0100000b000000ef10ccf37c58298f70d677e47f136d00abe20d84c828ff547ddb8334fa2babce1f5011ec0caed39064e976bf75e248997eec8908939986854f27b10cba192a8f1bd0855ae77944f795a7c96d2125b5f6445cd8c2aea647ae9a"], 0x20}, 0x20001010) socket$packet(0x11, 0x3, 0x300) 263.311955ms ago: executing program 0 (id=1206): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$inet(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}], 0x30}, 0x4000) 215.738161ms ago: executing program 3 (id=1207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f000000d5c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000020a20000000000a05000000000000000000020000000900010073797a310000000060000000160a03000000000000000000020000000900010073797a31000000000900020073797a31000000002c000380080002400000000008000140000000001800038014"], 0xa8}}, 0x0) 215.46292ms ago: executing program 4 (id=1208): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000180), 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) recvmmsg(r1, &(0x7f000000a300)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/37, 0x25}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000840)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, 0x0}, 0x0) 195.886763ms ago: executing program 0 (id=1209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000c80016801400018010000600810000000400000004000000340001800c00030005000000001000000c000900060000000b0000000c00090000000000010000000c00050006000000010000005c00018214000a00070000000000000001000000000000000c00050002000000000000800c00030001a800000000000014000b00a48cd0220000000005000000000000000c000400000000000a0000000c000500f16e630d04000000200001800c000700020000000600000010000602717f457c03000000020000000a000100aa"], 0xf4}}, 0x4a010) 141.744987ms ago: executing program 3 (id=1210): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000024c0)=ANY=[@ANYRES64=r2], 0x7c}}, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}}, 0x0, @in=@remote}}, 0xe8) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r3, &(0x7f0000000000)={0x1a, 0x10e, 0x7d, 0x4, 0x3f, 0x0, @remote}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="14000000000ac0000000160a0302000000000000000002000000090002000900014073797a3000000000140003800800024000014000000000140000001100010012000000000000000000000a0000000000"], 0x68}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001400)=ANY=[@ANYBLOB="2c000000170a010c0000000000000000020000000900010073797a3000000000090002"], 0x2c}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd600000f500140600fe8000000000000000000000000000aafe80000000000000000000", @ANYRES32, @ANYRES32=0x41424344, @ANYBLOB='l'], 0x0) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="11", 0x1}], 0x1}, 0xc001) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x0, 0x1, 0x6, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x8000, 0xf29e, 0x1}}) recvfrom(r0, &(0x7f0000000080)=""/125, 0x7d, 0x24, &(0x7f0000000340)=@ll={0x11, 0x6, r5, 0x1, 0x2, 0x6, @broadcast}, 0x80) recvmsg$unix(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x2001) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) socket$inet(0x2, 0x0, 0x0) socket$packet(0x11, 0x8b541bba2e8eb16d, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={0x0, 0x3c}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 63.599833ms ago: executing program 1 (id=1211): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000002000000000000000700000d02000000030000000000000005000000000000000b0000003f00000010000000000000000c0000000000000000000000ffffffff090000000300000000000000000000020200"], &(0x7f00000000c0)=""/189, 0x6a, 0xbd, 0x1, 0x300}, 0x20) 63.038978ms ago: executing program 4 (id=1212): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000180)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x7ff, 0x8, 0x8004, 0x5, 0x6, 0x2, 0x7, 0x10001, r5}, &(0x7f00000000c0)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80800) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x54) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000180)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) (async) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x7ff, 0x8, 0x8004, 0x5, 0x6, 0x2, 0x7, 0x10001, r5}, &(0x7f00000000c0)=0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x62, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 33.476317ms ago: executing program 0 (id=1213): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f00000009c0)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x9c, 0x11, 0x0, @remote, @local, {[], {0x4e22, 0xe22, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "643022af983e0c3b942b96be5bcfe0cc1000a8b3f45f8d2f465bb22b32241fd3", "065534169ea4d225c75690405e33b4f672dc79ccfd457f772607a23172a1b9bdeb5bdafcc4cc0be3864c06263bfe37ef", "fa8ec61fcc165c8cfe7da02b42c77f62999fee935f4552b68b2cab59", {"381c17e3295fb3a7636a16686c00020d", "3ad685507bf8adc0edc769d0be352856"}}}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54010000100013070000000000000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) 0s ago: executing program 0 (id=1214): getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000080)='GPL\x00', 0x0, 0x58, 0x0, 0x0, 0x1c, '\x00', r0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="1400000035000b63d25a80648c2594f902", 0x11}, {&(0x7f0000000300)="f897763d7b56", 0x6}], 0x2}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 52.123867][ T5222] cgroup: Unknown subsys name 'net' [ 52.291328][ T5222] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.703407][ T5222] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.968287][ T5240] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.978989][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.992031][ T5248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.994429][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.999821][ T5248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.015725][ T5248] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.023672][ T5248] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.031026][ T5248] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.039245][ T5248] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.045578][ T5251] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.047822][ T4628] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.061918][ T4628] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.069919][ T5251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.069961][ T4628] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.086548][ T4628] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.094910][ T4628] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.101125][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.102240][ T4628] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.109012][ T5251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.116668][ T4628] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.133468][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.139087][ T4628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.148505][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.148975][ T4628] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.164081][ T4628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.171905][ T5251] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.179221][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.187248][ T5251] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.199525][ T5251] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.212600][ T5251] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.740477][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 56.829204][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 56.864396][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 56.875458][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 56.886660][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 57.019961][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.027302][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.035684][ T5233] bridge_slave_0: entered allmulticast mode [ 57.042532][ T5233] bridge_slave_0: entered promiscuous mode [ 57.051205][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.058405][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.066162][ T5233] bridge_slave_1: entered allmulticast mode [ 57.072868][ T5233] bridge_slave_1: entered promiscuous mode [ 57.156318][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.163494][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.171121][ T5243] bridge_slave_0: entered allmulticast mode [ 57.178037][ T5243] bridge_slave_0: entered promiscuous mode [ 57.209367][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.216553][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.224183][ T5235] bridge_slave_0: entered allmulticast mode [ 57.230845][ T5235] bridge_slave_0: entered promiscuous mode [ 57.249523][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.257073][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.264941][ T5232] bridge_slave_0: entered allmulticast mode [ 57.271672][ T5232] bridge_slave_0: entered promiscuous mode [ 57.279942][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.287549][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.294801][ T5243] bridge_slave_1: entered allmulticast mode [ 57.301530][ T5243] bridge_slave_1: entered promiscuous mode [ 57.310816][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.324677][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.337944][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.348546][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.356337][ T5235] bridge_slave_1: entered allmulticast mode [ 57.362980][ T5235] bridge_slave_1: entered promiscuous mode [ 57.382014][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.389184][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.396482][ T5232] bridge_slave_1: entered allmulticast mode [ 57.403144][ T5232] bridge_slave_1: entered promiscuous mode [ 57.490380][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.514336][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.526586][ T5233] team0: Port device team_slave_0 added [ 57.532671][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.539889][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.547395][ T5236] bridge_slave_0: entered allmulticast mode [ 57.554913][ T5236] bridge_slave_0: entered promiscuous mode [ 57.563812][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.575831][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.587928][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.598886][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.619657][ T5233] team0: Port device team_slave_1 added [ 57.636456][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.643973][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.651135][ T5236] bridge_slave_1: entered allmulticast mode [ 57.658413][ T5236] bridge_slave_1: entered promiscuous mode [ 57.701541][ T5243] team0: Port device team_slave_0 added [ 57.718635][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.725649][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.751606][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.809688][ T5243] team0: Port device team_slave_1 added [ 57.827319][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.834509][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.860561][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.874803][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.886803][ T5235] team0: Port device team_slave_0 added [ 57.902238][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.914284][ T5232] team0: Port device team_slave_0 added [ 57.947252][ T5235] team0: Port device team_slave_1 added [ 57.973976][ T5232] team0: Port device team_slave_1 added [ 57.980306][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.987356][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.013495][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.027665][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.034716][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.060877][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.084396][ T5233] hsr_slave_0: entered promiscuous mode [ 58.091012][ T5233] hsr_slave_1: entered promiscuous mode [ 58.159476][ T5236] team0: Port device team_slave_0 added [ 58.166219][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.173175][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.199490][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.212428][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.221028][ T5242] Bluetooth: hci0: command tx timeout [ 58.221591][ T5251] Bluetooth: hci4: command tx timeout [ 58.226788][ T5242] Bluetooth: hci3: command tx timeout [ 58.237136][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.263877][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.280209][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.287288][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.314013][ T5251] Bluetooth: hci1: command tx timeout [ 58.318836][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.319744][ T5242] Bluetooth: hci2: command tx timeout [ 58.332077][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.342740][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.368818][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.388222][ T5236] team0: Port device team_slave_1 added [ 58.430655][ T5243] hsr_slave_0: entered promiscuous mode [ 58.437810][ T5243] hsr_slave_1: entered promiscuous mode [ 58.444003][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.451825][ T5243] Cannot create hsr debugfs directory [ 58.499458][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.506708][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.536724][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.587134][ T5235] hsr_slave_0: entered promiscuous mode [ 58.593504][ T5235] hsr_slave_1: entered promiscuous mode [ 58.599994][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.607595][ T5235] Cannot create hsr debugfs directory [ 58.625208][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.632153][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.661395][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.756300][ T5232] hsr_slave_0: entered promiscuous mode [ 58.762549][ T5232] hsr_slave_1: entered promiscuous mode [ 58.769268][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.777201][ T5232] Cannot create hsr debugfs directory [ 58.905190][ T5236] hsr_slave_0: entered promiscuous mode [ 58.911429][ T5236] hsr_slave_1: entered promiscuous mode [ 58.917933][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.926105][ T5236] Cannot create hsr debugfs directory [ 59.188930][ T5233] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.207326][ T5233] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.218334][ T5233] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.239894][ T5233] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.300593][ T5243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.311535][ T5243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.322128][ T5243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.350635][ T5243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.409150][ T5232] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.418733][ T5232] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.435875][ T5232] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.447858][ T5232] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.526345][ T5235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.557506][ T5235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.586793][ T5235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.597925][ T5235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.695010][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.701953][ T5236] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.729576][ T5236] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.741609][ T5236] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.765285][ T5236] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.794921][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.820472][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.839033][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.846429][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.883467][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.900430][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.915913][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.922983][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.958661][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.965840][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.024956][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.044331][ T1063] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.051455][ T1063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.096694][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.103872][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.168415][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.175627][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.294768][ T5242] Bluetooth: hci4: command tx timeout [ 60.300224][ T5242] Bluetooth: hci0: command tx timeout [ 60.306344][ T5251] Bluetooth: hci3: command tx timeout [ 60.310927][ T5232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.329764][ T5232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.347803][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.374735][ T5242] Bluetooth: hci2: command tx timeout [ 60.380200][ T5240] Bluetooth: hci1: command tx timeout [ 60.440923][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.497741][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.511168][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.521681][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.572391][ T2501] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.579797][ T2501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.634012][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.641258][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.677193][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.684401][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.698290][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.705422][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.780304][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.792064][ T5233] veth0_vlan: entered promiscuous mode [ 60.832325][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.914938][ T5233] veth1_vlan: entered promiscuous mode [ 61.026988][ T5232] veth0_vlan: entered promiscuous mode [ 61.062417][ T5243] veth0_vlan: entered promiscuous mode [ 61.098507][ T5232] veth1_vlan: entered promiscuous mode [ 61.141442][ T5243] veth1_vlan: entered promiscuous mode [ 61.162314][ T5233] veth0_macvtap: entered promiscuous mode [ 61.228858][ T5233] veth1_macvtap: entered promiscuous mode [ 61.251763][ T5232] veth0_macvtap: entered promiscuous mode [ 61.271717][ T5232] veth1_macvtap: entered promiscuous mode [ 61.283264][ T5243] veth0_macvtap: entered promiscuous mode [ 61.296600][ T5243] veth1_macvtap: entered promiscuous mode [ 61.311887][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.324861][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.339059][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.357115][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.368071][ T5233] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.377910][ T5233] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.390176][ T5233] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.399219][ T5233] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.449994][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.466732][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.479059][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.509178][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.520946][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.538562][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.586869][ T5232] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.598626][ T5232] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.608813][ T5232] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.617914][ T5232] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.631392][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.642003][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.652099][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.666277][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.677735][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.755616][ T5235] veth0_vlan: entered promiscuous mode [ 61.761894][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.779789][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.791112][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.803461][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.816331][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.848669][ T5243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.857865][ T5243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.867839][ T5243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.876779][ T5243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.931913][ T2501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.941602][ T2501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.993227][ T5235] veth1_vlan: entered promiscuous mode [ 62.041785][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.083743][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.085984][ T2501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.099785][ T2501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.168057][ T2501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.174893][ T5235] veth0_macvtap: entered promiscuous mode [ 62.184665][ T2501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.219351][ T5235] veth1_macvtap: entered promiscuous mode [ 62.227086][ T5236] veth0_vlan: entered promiscuous mode [ 62.262808][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.279519][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.305927][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.328246][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.343560][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.354785][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.364971][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.375904][ T5240] Bluetooth: hci0: command tx timeout [ 62.376210][ T5242] Bluetooth: hci3: command tx timeout [ 62.381304][ T5240] Bluetooth: hci4: command tx timeout [ 62.391548][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.411413][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.411783][ T5316] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.443528][ T5236] veth1_vlan: entered promiscuous mode [ 62.454854][ T5242] Bluetooth: hci1: command tx timeout [ 62.457363][ T5251] Bluetooth: hci2: command tx timeout [ 62.524315][ T5316] team_slave_0: entered promiscuous mode [ 62.530200][ T5316] team_slave_1: entered promiscuous mode [ 62.556494][ T5316] team0: Device macsec1 is already an upper device of the team interface [ 62.563690][ T5318] netlink: 'syz.1.2': attribute type 11 has an invalid length. [ 62.580599][ T5316] team_slave_0: left promiscuous mode [ 62.586037][ T5316] team_slave_1: left promiscuous mode [ 62.608622][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.613927][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.622061][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.639028][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.639547][ T5319] netlink: 'syz.1.2': attribute type 11 has an invalid length. [ 62.652987][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.668017][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.678160][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.689136][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.706989][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.722518][ T5235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.731899][ T5235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.741047][ T5235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.760721][ T5235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.809538][ T5319] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 62.923225][ T5236] veth0_macvtap: entered promiscuous mode [ 62.977609][ T5236] veth1_macvtap: entered promiscuous mode [ 63.041908][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.050011][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.050033][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.050044][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.082445][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.099771][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.112890][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.123515][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.136553][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.147046][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.165170][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.213374][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.227653][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.237578][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.248336][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.258909][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.270744][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.280925][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.291642][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.307767][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.319664][ T2501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.325591][ T5236] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.333734][ T2501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.348214][ T5236] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.357014][ T5236] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.377185][ T5236] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.612417][ T5332] netlink: 'syz.1.7': attribute type 11 has an invalid length. [ 63.636404][ T1063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.659286][ T1063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.676112][ T5332] debugfs: Directory 'netdev:nicvf0' with parent 'phy6' already present! [ 63.747838][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.766579][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.051418][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9'. [ 64.071027][ T5342] syz.1.10 uses obsolete (PF_INET,SOCK_PACKET) [ 64.350994][ T5354] Zero length message leads to an empty skb [ 64.374694][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 64.446146][ T5357] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.454852][ T5357] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.455446][ T5242] Bluetooth: hci3: command tx timeout [ 64.466999][ T5240] Bluetooth: hci4: command tx timeout [ 64.467875][ T55] Bluetooth: hci0: command tx timeout [ 64.481375][ T5357] bridge0: entered allmulticast mode [ 64.516042][ T5360] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.523323][ T5360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.531187][ T5360] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.538388][ T5360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.548664][ T5242] Bluetooth: hci2: command tx timeout [ 64.556815][ T5242] Bluetooth: hci1: command tx timeout [ 64.589428][ T5360] bridge0: entered promiscuous mode [ 64.724308][ T5350] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 64.764075][ T5350] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5'. [ 64.917746][ T5377] openvswitch: netlink: Missing key (keys=20040, expected=2000) [ 64.932560][ T5371] sctp: failed to load transform for md5: -2 [ 65.200722][ T5368] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15'. [ 65.234622][ T5368] netlink: 72 bytes leftover after parsing attributes in process `syz.0.15'. [ 65.590360][ T5403] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.626053][ T5407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 65.656332][ T5399] can: request_module (can-proto-4) failed. [ 65.759131][ T5407] syzkaller1: entered promiscuous mode [ 65.780497][ T5407] syzkaller1: entered allmulticast mode [ 65.959756][ T5415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.24'. [ 66.085420][ T5423] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 66.093137][ T5423] netlink: 636 bytes leftover after parsing attributes in process `syz.0.26'. [ 66.124002][ T5423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.26'. [ 66.255230][ T5426] netlink: 'syz.2.27': attribute type 3 has an invalid length. [ 66.263193][ T5426] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.27'. [ 66.496116][ T5434] netlink: 'syz.1.30': attribute type 7 has an invalid length. [ 66.508431][ T5434] netlink: 'syz.1.30': attribute type 39 has an invalid length. [ 66.522381][ T5433] openvswitch: netlink: Missing key (keys=20040, expected=2000) [ 66.534503][ T5242] Bluetooth: hci3: command 0x0405 tx timeout [ 66.575403][ T5439] netlink: 'syz.1.30': attribute type 7 has an invalid length. [ 66.594301][ T5439] netlink: 'syz.1.30': attribute type 39 has an invalid length. [ 67.180563][ T5453] hsr_slave_0 (unregistering): left promiscuous mode [ 67.234860][ T5471] ebt_among: dst integrity fail: 11d [ 67.269647][ T5470] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.506667][ T5477] openvswitch: netlink: Missing key (keys=20040, expected=2000) [ 67.616661][ T5482] tipc: Invalid UDP bearer configuration [ 67.616717][ T5482] tipc: Enabling of bearer rejected, failed to enable media [ 68.958096][ T5548] openvswitch: netlink: Missing key (keys=20040, expected=2000) [ 69.192523][ T5564] __nla_validate_parse: 6 callbacks suppressed [ 69.192541][ T5564] netlink: 60 bytes leftover after parsing attributes in process `syz.2.61'. [ 69.631976][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'. [ 69.692097][ T5584] openvswitch: netlink: Unknown key attributes 2 [ 69.697722][ T5583] netlink: 'syz.4.68': attribute type 11 has an invalid length. [ 69.716271][ T5585] netlink: 16 bytes leftover after parsing attributes in process `syz.1.69'. [ 69.721204][ T5583] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.68'. [ 69.886218][ T5591] tap0: tun_chr_ioctl cmd 1074025677 [ 69.904047][ T5591] tap0: linktype set to 821 [ 70.042411][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 70.279187][ T5604] netlink: 'syz.1.76': attribute type 3 has an invalid length. [ 70.292635][ T5604] netlink: 'syz.1.76': attribute type 3 has an invalid length. [ 70.558378][ T5619] netlink: 'syz.2.81': attribute type 10 has an invalid length. [ 70.581758][ T5619] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 70.781281][ T5626] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 70.962230][ T5642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 71.034676][ T5640] netlink: 24 bytes leftover after parsing attributes in process `syz.4.87'. [ 71.057720][ T5642] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.067091][ T5642] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.075853][ T5642] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.084672][ T5642] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.193538][ T5643] netlink: 4 bytes leftover after parsing attributes in process `syz.3.88'. [ 71.395501][ T5650] tun0: tun_chr_ioctl cmd 35108 [ 71.620151][ T5663] netlink: 104 bytes leftover after parsing attributes in process `syz.3.93'. [ 71.673637][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.278179][ T5667] Driver unsupported XDP return value 0 on prog (id 41) dev N/A, expect packet loss! [ 72.706922][ T5684] netlink: 'syz.2.98': attribute type 8 has an invalid length. [ 72.727643][ T5681] veth0_to_bridge: entered promiscuous mode [ 72.738017][ T5681] vlan2: entered promiscuous mode [ 72.748095][ T5681] veth0_to_bridge: left promiscuous mode [ 72.967379][ T5698] Bluetooth: MGMT ver 1.23 [ 73.055370][ T5702] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 73.425372][ T5712] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 74.254403][ T5726] tun0: tun_chr_ioctl cmd 1074025675 [ 74.265623][ T5726] tun0: persist disabled [ 74.311573][ T5734] netlink: 'syz.4.115': attribute type 29 has an invalid length. [ 74.321856][ T5734] __nla_validate_parse: 4 callbacks suppressed [ 74.321872][ T5734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.115'. [ 74.367829][ T5731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 74.382882][ T5734] pim6reg: entered allmulticast mode [ 74.477205][ T5739] netlink: 'syz.2.114': attribute type 2 has an invalid length. [ 74.504804][ T5739] netlink: 8 bytes leftover after parsing attributes in process `syz.2.114'. [ 74.625444][ T5750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 74.731658][ T5746] can: request_module (can-proto-4) failed. [ 74.789712][ T5750] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 74.919201][ T5750] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 74.985972][ T5766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 75.017628][ T5766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.117'. [ 75.113111][ T5749] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 75.168642][ T5770] netlink: 28 bytes leftover after parsing attributes in process `syz.1.122'. [ 75.178195][ T5770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.122'. [ 75.190539][ T5770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 75.376099][ T5749] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 75.593303][ T5752] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.601164][ T5752] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.624896][ T5759] netlink: 4 bytes leftover after parsing attributes in process `syz.4.117'. [ 75.642623][ T5759] netlink: 'syz.4.117': attribute type 15 has an invalid length. [ 75.673339][ T5745] ipvlan2: entered promiscuous mode [ 76.071761][ T5782] netlink: 'syz.3.127': attribute type 29 has an invalid length. [ 76.120027][ T5787] pim6reg: entered allmulticast mode [ 76.292483][ T5801] xt_CT: You must specify a L4 protocol and not use inversions on it [ 76.348935][ T5804] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 76.822207][ T25] cfg80211: failed to load regulatory.db [ 77.632910][ T5852] netlink: 'syz.1.142': attribute type 29 has an invalid length. [ 77.681810][ T5852] pim6reg: entered allmulticast mode [ 78.448838][ T5883] raw_sendmsg: syz.2.151 forgot to set AF_INET. Fix it! [ 78.930391][ T5880] "syz.3.153" (5880) uses obsolete ecb(arc4) skcipher [ 79.385071][ T5907] netlink: 'syz.3.158': attribute type 29 has an invalid length. [ 79.411346][ T5907] __nla_validate_parse: 12 callbacks suppressed [ 79.411366][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.158'. [ 79.450643][ T5911] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.160'. [ 79.460770][ T5911] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 79.767638][ T5931] netlink: 'syz.1.164': attribute type 33 has an invalid length. [ 79.863085][ T5936] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.166'. [ 79.935171][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 79.989716][ T5930] team_slave_0: entered promiscuous mode [ 79.995552][ T5930] team_slave_1: entered promiscuous mode [ 80.020272][ T5930] team_slave_0: left promiscuous mode [ 80.025872][ T5930] team_slave_1: left promiscuous mode [ 80.459120][ T5956] netlink: 'syz.4.173': attribute type 29 has an invalid length. [ 80.490983][ T5956] netlink: 8 bytes leftover after parsing attributes in process `syz.4.173'. [ 80.506244][ T5954] lo: entered promiscuous mode [ 80.810567][ T5979] netlink: 212 bytes leftover after parsing attributes in process `syz.0.181'. [ 80.936541][ T5980] ɶƣ0GC¦: entered promiscuous mode [ 81.053894][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 82.669597][ T6022] netlink: 212 bytes leftover after parsing attributes in process `syz.0.193'. [ 84.164456][ T6088] netlink: 'syz.3.202': attribute type 1 has an invalid length. [ 84.210443][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.202'. [ 84.496567][ T6104] netlink: 212 bytes leftover after parsing attributes in process `syz.4.207'. [ 84.959496][ T6121] warning: `syz.1.211' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.084321][ T6128] netlink: 'syz.3.213': attribute type 4 has an invalid length. [ 85.403940][ T6136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.505507][ T6150] netlink: 212 bytes leftover after parsing attributes in process `syz.2.220'. [ 85.719360][ T6158] netlink: 'syz.2.225': attribute type 2 has an invalid length. [ 86.138926][ T6180] xt_NFQUEUE: number of total queues is 0 [ 86.285764][ T6190] netlink: 212 bytes leftover after parsing attributes in process `syz.4.235'. [ 86.708170][ T6214] netlink: 'syz.0.240': attribute type 3 has an invalid length. [ 86.737836][ T6214] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.240'. [ 86.968079][ T6220] sctp: [Deprecated]: syz.4.245 (pid 6220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.968079][ T6220] Use struct sctp_sack_info instead [ 86.984390][ T6230] netlink: 212 bytes leftover after parsing attributes in process `syz.0.248'. [ 86.995291][ T6220] sctp: [Deprecated]: syz.4.245 (pid 6220) Use of struct sctp_assoc_value in delayed_ack socket option. [ 86.995291][ T6220] Use struct sctp_sack_info instead [ 87.059508][ T6235] netlink: 'syz.0.250': attribute type 5 has an invalid length. [ 87.196262][ T6242] netlink: 76 bytes leftover after parsing attributes in process `syz.1.252'. [ 87.226380][ T6240] netlink: 80 bytes leftover after parsing attributes in process `syz.3.251'. [ 87.511667][ T6257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.260'. [ 87.535821][ T6253] IPVS: set_ctl: invalid protocol: 108 172.20.20.51:20003 [ 87.559705][ T6253] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 87.681087][ T6220] syz.4.245 (6220) used greatest stack depth: 18336 bytes left [ 87.856051][ T6277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.264'. [ 87.866610][ T6272] netlink: 16 bytes leftover after parsing attributes in process `syz.4.266'. [ 87.914978][ T6272] ipt_REJECT: TCP_RESET invalid for non-tcp [ 87.922544][ T6283] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.931963][ T6283] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.941420][ T6283] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.950388][ T6283] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.058263][ T6290] Cannot find add_set index 0 as target [ 88.072405][ T6290] netlink: 'syz.3.269': attribute type 25 has an invalid length. [ 88.103137][ T6290] netlink: 'syz.3.269': attribute type 44 has an invalid length. [ 88.194510][ T6296] netlink: 'syz.2.273': attribute type 29 has an invalid length. [ 88.243076][ T6296] pim6reg: entered allmulticast mode [ 88.478612][ T6310] netlink: 'syz.1.279': attribute type 1 has an invalid length. [ 88.610139][ T6320] netlink: 'syz.3.280': attribute type 25 has an invalid length. [ 88.647843][ T6320] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.657844][ T6320] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.667312][ T6320] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.676180][ T6320] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.156132][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.179259][ T6338] batadv_slave_0: entered promiscuous mode [ 89.213382][ T6341] netlink: 'syz.0.288': attribute type 1 has an invalid length. [ 89.624525][ T6360] bridge0: port 3(gretap0) entered blocking state [ 89.644562][ T6360] bridge0: port 3(gretap0) entered disabled state [ 89.658013][ T6360] gretap0: entered allmulticast mode [ 89.672494][ T6360] gretap0: entered promiscuous mode [ 89.684211][ T6360] bridge0: port 3(gretap0) entered blocking state [ 89.691123][ T6360] bridge0: port 3(gretap0) entered forwarding state [ 89.715245][ T6363] gretap0: left allmulticast mode [ 89.724978][ T6363] gretap0: left promiscuous mode [ 89.739920][ T6363] bridge0: port 3(gretap0) entered disabled state [ 92.162339][ T6407] __nla_validate_parse: 7 callbacks suppressed [ 92.162357][ T6407] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.308'. [ 92.200702][ T6407] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.308'. [ 92.390820][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.1.312'. [ 92.412171][ T6421] netlink: 24 bytes leftover after parsing attributes in process `syz.0.311'. [ 92.449905][ T6421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.311'. [ 92.473317][ T6421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.311'. [ 92.494069][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 92.650314][ T6430] syzkaller0: entered promiscuous mode [ 92.656402][ T6430] syzkaller0: entered allmulticast mode [ 92.669332][ T6434] netlink: 16 bytes leftover after parsing attributes in process `syz.4.317'. [ 93.411117][ T6448] netlink: 20 bytes leftover after parsing attributes in process `syz.0.319'. [ 94.852857][ T6465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.324'. [ 94.877470][ T6465] ax25_connect(): syz.2.324 uses autobind, please contact jreuter@yaina.de [ 95.403307][ T6489] netlink: 'syz.0.333': attribute type 1 has an invalid length. [ 96.400691][ T6516] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 97.166740][ T6560] ÊüðÿG: entered promiscuous mode [ 97.222258][ T6564] __nla_validate_parse: 4 callbacks suppressed [ 97.222276][ T6564] netlink: 264 bytes leftover after parsing attributes in process `syz.0.353'. [ 97.352091][ T6570] netlink: 184 bytes leftover after parsing attributes in process `syz.1.354'. [ 97.383693][ T6570] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 97.419992][ T6572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.056606][ T6580] trusted_key: syz.4.357 sent an empty control message without MSG_MORE. [ 100.180434][ T6588] tipc: Started in network mode [ 100.192384][ T6588] tipc: Node identity f7, cluster identity 4711 [ 100.199547][ T6588] tipc: Node number set to 247 [ 100.441282][ T6603] netlink: 'syz.4.364': attribute type 1 has an invalid length. [ 100.540930][ T6613] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 100.598975][ T6611] netlink: 36 bytes leftover after parsing attributes in process `syz.1.365'. [ 100.642975][ T6616] netlink: 'syz.4.367': attribute type 1 has an invalid length. [ 100.652483][ T6616] netlink: 224 bytes leftover after parsing attributes in process `syz.4.367'. [ 100.667699][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 100.683509][ T6620] netlink: 'syz.4.367': attribute type 1 has an invalid length. [ 100.697440][ T6620] netlink: 224 bytes leftover after parsing attributes in process `syz.4.367'. [ 100.716130][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 100.773275][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 100.928285][ T6634] netlink: 16 bytes leftover after parsing attributes in process `syz.1.375'. [ 100.997839][ T6637] netlink: 36 bytes leftover after parsing attributes in process `syz.3.373'. [ 101.014463][ T6635] bM1®NuëöÉÑ30Ê: renamed from lo (while UP) [ 101.047589][ T6635] bM1®NuëöÉÑ30Ê: entered allmulticast mode [ 101.305683][ T6625] netlink: 'syz.0.371': attribute type 2 has an invalid length. [ 102.411444][ T6720] netlink: 'syz.3.392': attribute type 2 has an invalid length. [ 102.746985][ T6729] pimreg: entered allmulticast mode [ 102.759862][ T6729] pimreg: left allmulticast mode [ 102.938504][ T6737] __nla_validate_parse: 9 callbacks suppressed [ 102.938524][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.0.396'. [ 102.959242][ T6738] dccp_invalid_packet: P.Data Offset(0) too small [ 102.999571][ T6737] netlink: 36 bytes leftover after parsing attributes in process `syz.0.396'. [ 103.172916][ T6746] netlink: 204 bytes leftover after parsing attributes in process `syz.4.402'. [ 103.222889][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'. [ 103.327780][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 103.354865][ T6755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.402'. [ 103.379187][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 103.410619][ T6756] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 103.440098][ T6756] netlink: 36 bytes leftover after parsing attributes in process `syz.3.406'. [ 103.475493][ T6757] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 103.641638][ T6760] netlink: 'syz.2.407': attribute type 10 has an invalid length. [ 103.685446][ T6760] team0: Port device dummy0 added [ 104.918810][ T6810] nbd: device at index 2 is going down [ 104.966310][ T6813] netlink: 'syz.3.425': attribute type 25 has an invalid length. [ 106.067589][ T6859] netlink: 'syz.1.442': attribute type 30 has an invalid length. [ 106.904406][ T6879] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 106.925056][ T6879] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 107.231672][ T6902] netlink: 'syz.1.456': attribute type 10 has an invalid length. [ 107.259918][ T6902] batman_adv: batadv0: Adding interface: team0 [ 107.273796][ T6902] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.303460][ T6902] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 108.384007][ T6934] Bluetooth: MGMT ver 1.23 [ 108.390260][ T6934] __nla_validate_parse: 18 callbacks suppressed [ 108.390276][ T6934] netlink: 1536 bytes leftover after parsing attributes in process `syz.3.469'. [ 108.444514][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.470'. [ 108.464112][ T6938] netlink: 32 bytes leftover after parsing attributes in process `syz.4.470'. [ 108.611006][ T6946] netlink: 52 bytes leftover after parsing attributes in process `syz.1.473'. [ 108.624105][ T6948] Cannot find set identified by id 0 to match [ 108.661241][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.473'. [ 108.714505][ T6954] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 [ 108.731428][ T6953] syz_tun: entered promiscuous mode [ 108.748473][ T6953] macsec1: entered promiscuous mode [ 108.765123][ T6953] macsec1: entered allmulticast mode [ 108.775113][ T6953] syz_tun: entered allmulticast mode [ 108.775247][ T6956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.475'. [ 108.919307][ T6961] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 109.310401][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.482'. [ 109.319757][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.482'. [ 109.393440][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 109.497976][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.484'. [ 109.867297][ T7002] syz_tun: entered promiscuous mode [ 109.873977][ T7002] macsec1: entered promiscuous mode [ 109.883031][ T7002] macsec1: entered allmulticast mode [ 109.893266][ T7002] syz_tun: entered allmulticast mode [ 110.365160][ T7040] netlink: 'syz.4.504': attribute type 30 has an invalid length. [ 110.581730][ T7055] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 110.614033][ T7055] FAULT_INJECTION: forcing a failure. [ 110.614033][ T7055] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 110.643680][ T7055] CPU: 1 UID: 0 PID: 7055 Comm: syz.0.508 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 110.654331][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 110.664414][ T7055] Call Trace: [ 110.667711][ T7055] [ 110.670655][ T7055] dump_stack_lvl+0x241/0x360 [ 110.675373][ T7055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.680604][ T7055] ? __pfx__printk+0x10/0x10 [ 110.685224][ T7055] ? snprintf+0xda/0x120 [ 110.689500][ T7055] should_fail_ex+0x3b0/0x4e0 [ 110.694208][ T7055] _copy_to_user+0x2f/0xb0 [ 110.698654][ T7055] simple_read_from_buffer+0xca/0x150 [ 110.704052][ T7055] proc_fail_nth_read+0x1ec/0x260 [ 110.709101][ T7055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.714669][ T7055] ? rw_verify_area+0x520/0x6b0 [ 110.719534][ T7055] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 110.725084][ T7055] vfs_read+0x204/0xbc0 [ 110.729406][ T7055] ? __pfx_lock_release+0x10/0x10 [ 110.734427][ T7055] ? do_sock_setsockopt+0x3e2/0x720 [ 110.739618][ T7055] ? __pfx_vfs_read+0x10/0x10 [ 110.744285][ T7055] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 110.749830][ T7055] ? __fget_files+0x29/0x470 [ 110.754415][ T7055] ? __fget_files+0x3f6/0x470 [ 110.759093][ T7055] ksys_read+0x1a0/0x2c0 [ 110.763330][ T7055] ? __pfx_ksys_read+0x10/0x10 [ 110.768165][ T7055] ? do_syscall_64+0x100/0x230 [ 110.772927][ T7055] ? do_syscall_64+0xb6/0x230 [ 110.777601][ T7055] do_syscall_64+0xf3/0x230 [ 110.782097][ T7055] ? clear_bhb_loop+0x35/0x90 [ 110.786772][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.792668][ T7055] RIP: 0033:0x7f8bc3d788fc [ 110.797078][ T7055] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 110.816678][ T7055] RSP: 002b:00007f8bc4bc3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.825088][ T7055] RAX: ffffffffffffffda RBX: 00007f8bc3f15f80 RCX: 00007f8bc3d788fc [ 110.833049][ T7055] RDX: 000000000000000f RSI: 00007f8bc4bc30a0 RDI: 0000000000000004 [ 110.841007][ T7055] RBP: 00007f8bc4bc3090 R08: 0000000000000000 R09: 0000000000000000 [ 110.848967][ T7055] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.856927][ T7055] R13: 0000000000000000 R14: 00007f8bc3f15f80 R15: 00007fffec3680a8 [ 110.864902][ T7055] [ 110.947762][ T7059] netlink: 'syz.4.511': attribute type 2 has an invalid length. [ 111.027193][ T7061] dvmrp0: entered allmulticast mode [ 112.096663][ T7121] netlink: 'syz.3.527': attribute type 1 has an invalid length. [ 112.142221][ T7121] bond1: entered promiscuous mode [ 112.554587][ T7142] x_tables: duplicate underflow at hook 3 [ 112.604652][ T7145] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 112.630830][ T7145] netlink: 'syz.0.535': attribute type 1 has an invalid length. [ 112.661049][ T7149] xt_bpf: check failed: parse error [ 113.085683][ T7168] sctp: [Deprecated]: syz.4.542 (pid 7168) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.085683][ T7168] Use struct sctp_sack_info instead [ 113.102595][ T7166] macsec0: entered promiscuous mode [ 113.120863][ T7166] macsec1: entered promiscuous mode [ 113.442309][ T7183] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.551219][ T7183] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 113.824942][ T7200] __nla_validate_parse: 23 callbacks suppressed [ 113.824964][ T7200] netlink: 100 bytes leftover after parsing attributes in process `syz.0.548'. [ 113.911742][ T7203] bridge0: entered promiscuous mode [ 113.928876][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'. [ 113.943038][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.550'. [ 114.024058][ T7208] netlink: 8 bytes leftover after parsing attributes in process `syz.3.550'. [ 114.166383][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.552'. [ 114.203289][ T7211] syz_tun: entered promiscuous mode [ 114.218165][ T7211] macsec1: entered promiscuous mode [ 114.229539][ T7211] macsec1: entered allmulticast mode [ 114.238639][ T7211] syz_tun: entered allmulticast mode [ 114.604949][ T7230] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 114.744407][ T7202] bridge0: left promiscuous mode [ 114.820323][ T7238] smc: net device lo applied user defined pnetid SYZ2 [ 115.115084][ T7257] netlink: 204 bytes leftover after parsing attributes in process `syz.0.563'. [ 115.141414][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'. [ 115.264545][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 115.439920][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 116.572970][ T7321] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 117.133027][ T7346] netlink: 'syz.3.589': attribute type 3 has an invalid length. [ 117.158019][ T7346] netlink: 'syz.3.589': attribute type 2 has an invalid length. [ 117.755991][ T7371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 118.094931][ T7382] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 118.534954][ T7409] FAULT_INJECTION: forcing a failure. [ 118.534954][ T7409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.564644][ T7409] CPU: 0 UID: 0 PID: 7409 Comm: syz.2.608 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 118.575284][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 118.585368][ T7409] Call Trace: [ 118.588675][ T7409] [ 118.591715][ T7409] dump_stack_lvl+0x241/0x360 [ 118.596441][ T7409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.601660][ T7409] ? __pfx__printk+0x10/0x10 [ 118.606275][ T7409] ? __pfx_lock_release+0x10/0x10 [ 118.611319][ T7409] should_fail_ex+0x3b0/0x4e0 [ 118.616017][ T7409] _copy_from_user+0x2f/0xe0 [ 118.620641][ T7409] copy_msghdr_from_user+0xae/0x680 [ 118.625860][ T7409] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 118.631684][ T7409] __sys_sendmsg+0x23d/0x3a0 [ 118.636279][ T7409] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.641390][ T7409] ? vfs_write+0x7c4/0xc90 [ 118.645836][ T7409] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 118.652165][ T7409] ? do_syscall_64+0x100/0x230 [ 118.656932][ T7409] ? do_syscall_64+0xb6/0x230 [ 118.661628][ T7409] do_syscall_64+0xf3/0x230 [ 118.666126][ T7409] ? clear_bhb_loop+0x35/0x90 [ 118.670801][ T7409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.676693][ T7409] RIP: 0033:0x7fc4b6979eb9 [ 118.681100][ T7409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.700720][ T7409] RSP: 002b:00007fc4b77bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.709140][ T7409] RAX: ffffffffffffffda RBX: 00007fc4b6b15f80 RCX: 00007fc4b6979eb9 [ 118.717109][ T7409] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 118.725074][ T7409] RBP: 00007fc4b77bd090 R08: 0000000000000000 R09: 0000000000000000 [ 118.733065][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.741025][ T7409] R13: 0000000000000000 R14: 00007fc4b6b15f80 R15: 00007ffc1baf9098 [ 118.749001][ T7409] [ 118.827082][ T7415] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 119.056353][ T7417] xt_TPROXY: Can be used only with -p tcp or -p udp [ 119.097011][ T7429] __nla_validate_parse: 13 callbacks suppressed [ 119.097031][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 119.294405][ T7441] FAULT_INJECTION: forcing a failure. [ 119.294405][ T7441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.305771][ T7440] netlink: 'syz.4.620': attribute type 10 has an invalid length. [ 119.325931][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.0.623'. [ 119.335000][ T7441] CPU: 0 UID: 0 PID: 7441 Comm: syz.3.622 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 119.345617][ T7441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 119.355694][ T7441] Call Trace: [ 119.358992][ T7441] [ 119.361982][ T7441] dump_stack_lvl+0x241/0x360 [ 119.366687][ T7441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.371915][ T7441] ? __pfx__printk+0x10/0x10 [ 119.376534][ T7441] ? __pfx_lock_release+0x10/0x10 [ 119.381588][ T7441] should_fail_ex+0x3b0/0x4e0 [ 119.386292][ T7441] _copy_from_user+0x2f/0xe0 [ 119.390897][ T7441] copy_msghdr_from_user+0xae/0x680 [ 119.396102][ T7441] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 119.401937][ T7441] __sys_sendmsg+0x23d/0x3a0 [ 119.406563][ T7441] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.408457][ T7450] FAULT_INJECTION: forcing a failure. [ 119.408457][ T7450] name failslab, interval 1, probability 0, space 0, times 1 [ 119.411674][ T7441] ? vfs_write+0x7c4/0xc90 [ 119.411734][ T7441] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.435000][ T7441] ? do_syscall_64+0x100/0x230 [ 119.439770][ T7441] ? do_syscall_64+0xb6/0x230 [ 119.444458][ T7441] do_syscall_64+0xf3/0x230 [ 119.448981][ T7441] ? clear_bhb_loop+0x35/0x90 [ 119.453674][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.459580][ T7441] RIP: 0033:0x7f3554379eb9 [ 119.463999][ T7441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.483698][ T7441] RSP: 002b:00007f35550fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.492117][ T7441] RAX: ffffffffffffffda RBX: 00007f3554515f80 RCX: 00007f3554379eb9 [ 119.500097][ T7441] RDX: 0000000000004000 RSI: 00000000200016c0 RDI: 0000000000000003 [ 119.508089][ T7441] RBP: 00007f35550fd090 R08: 0000000000000000 R09: 0000000000000000 [ 119.516070][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.524044][ T7441] R13: 0000000000000000 R14: 00007f3554515f80 R15: 00007ffee34e2a18 [ 119.532027][ T7441] [ 119.535046][ T7450] CPU: 1 UID: 0 PID: 7450 Comm: syz.2.625 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 119.545644][ T7450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 119.555696][ T7450] Call Trace: [ 119.558973][ T7450] [ 119.561897][ T7450] dump_stack_lvl+0x241/0x360 [ 119.566576][ T7450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.571770][ T7450] ? __pfx__printk+0x10/0x10 [ 119.576355][ T7450] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 119.582331][ T7450] ? __pfx___might_resched+0x10/0x10 [ 119.587623][ T7450] should_fail_ex+0x3b0/0x4e0 [ 119.592301][ T7450] should_failslab+0xac/0x100 [ 119.596974][ T7450] ? __alloc_skb+0x1c3/0x440 [ 119.601557][ T7450] kmem_cache_alloc_node_noprof+0x71/0x320 [ 119.607383][ T7450] __alloc_skb+0x1c3/0x440 [ 119.611795][ T7450] ? __pfx___alloc_skb+0x10/0x10 [ 119.616723][ T7450] ? netlink_autobind+0xd6/0x2f0 [ 119.621657][ T7450] ? netlink_autobind+0x2b0/0x2f0 [ 119.626676][ T7450] netlink_sendmsg+0x638/0xcb0 [ 119.631526][ T7450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.636811][ T7450] ? __import_iovec+0x536/0x820 [ 119.641674][ T7450] ? aa_sock_msg_perm+0x91/0x160 [ 119.646623][ T7450] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 119.651907][ T7450] ? security_socket_sendmsg+0x87/0xb0 [ 119.657370][ T7450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 119.662661][ T7450] __sock_sendmsg+0x221/0x270 [ 119.667344][ T7450] ____sys_sendmsg+0x525/0x7d0 [ 119.672112][ T7450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 119.677405][ T7450] __sys_sendmsg+0x2b0/0x3a0 [ 119.681991][ T7450] ? __pfx___sys_sendmsg+0x10/0x10 [ 119.687094][ T7450] ? vfs_write+0x7c4/0xc90 [ 119.691540][ T7450] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.697862][ T7450] ? do_syscall_64+0x100/0x230 [ 119.702622][ T7450] ? do_syscall_64+0xb6/0x230 [ 119.707295][ T7450] do_syscall_64+0xf3/0x230 [ 119.711787][ T7450] ? clear_bhb_loop+0x35/0x90 [ 119.716469][ T7450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.722357][ T7450] RIP: 0033:0x7fc4b6979eb9 [ 119.726763][ T7450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.746358][ T7450] RSP: 002b:00007fc4b77bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 119.754851][ T7450] RAX: ffffffffffffffda RBX: 00007fc4b6b15f80 RCX: 00007fc4b6979eb9 [ 119.762815][ T7450] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 119.770773][ T7450] RBP: 00007fc4b77bd090 R08: 0000000000000000 R09: 0000000000000000 [ 119.778732][ T7450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.786698][ T7450] R13: 0000000000000000 R14: 00007fc4b6b15f80 R15: 00007ffc1baf9098 [ 119.794673][ T7450] [ 119.897366][ T7455] ieee802154 phy1 wpan1: encryption failed: -90 [ 119.914476][ T7440] team0: Failed to send options change via netlink (err -105) [ 119.917196][ T7455] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 119.923450][ T7440] team0: Port device netdevsim0 added [ 119.994250][ T7443] netlink: 'syz.4.620': attribute type 10 has an invalid length. [ 120.012959][ T7443] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 120.050232][ T7443] team0: Failed to send options change via netlink (err -105) [ 120.058692][ T7443] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 120.069992][ T7443] team0: Port device netdevsim0 removed [ 120.081582][ T7443] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 120.133855][ T5251] Bluetooth: hci0: command tx timeout [ 120.290366][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 120.420677][ T7486] veth0: entered allmulticast mode [ 120.456292][ T7495] x_tables: duplicate underflow at hook 4 [ 120.470494][ T7485] netlink: 'syz.4.636': attribute type 1 has an invalid length. [ 120.480077][ T7485] netlink: 'syz.4.636': attribute type 2 has an invalid length. [ 120.491397][ T7485] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 120.527592][ T7499] FAULT_INJECTION: forcing a failure. [ 120.527592][ T7499] name failslab, interval 1, probability 0, space 0, times 0 [ 120.541943][ T7499] CPU: 0 UID: 0 PID: 7499 Comm: syz.3.639 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 120.552652][ T7499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 120.562707][ T7499] Call Trace: [ 120.565981][ T7499] [ 120.568905][ T7499] dump_stack_lvl+0x241/0x360 [ 120.573579][ T7499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 120.578772][ T7499] ? __pfx__printk+0x10/0x10 [ 120.583355][ T7499] ? __kmalloc_noprof+0xb0/0x400 [ 120.588285][ T7499] ? __pfx___might_resched+0x10/0x10 [ 120.593563][ T7499] should_fail_ex+0x3b0/0x4e0 [ 120.598243][ T7499] ? sock_kmalloc+0xd7/0x160 [ 120.602829][ T7499] should_failslab+0xac/0x100 [ 120.607505][ T7499] ? sock_kmalloc+0xd7/0x160 [ 120.612087][ T7499] __kmalloc_noprof+0xd8/0x400 [ 120.616843][ T7499] sock_kmalloc+0xd7/0x160 [ 120.621254][ T7499] ____sys_sendmsg+0x216/0x7d0 [ 120.626018][ T7499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 120.631309][ T7499] __sys_sendmsg+0x2b0/0x3a0 [ 120.635897][ T7499] ? __pfx___sys_sendmsg+0x10/0x10 [ 120.641001][ T7499] ? vfs_write+0x7c4/0xc90 [ 120.645437][ T7499] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 120.651763][ T7499] ? do_syscall_64+0x100/0x230 [ 120.656521][ T7499] ? do_syscall_64+0xb6/0x230 [ 120.661191][ T7499] do_syscall_64+0xf3/0x230 [ 120.665704][ T7499] ? clear_bhb_loop+0x35/0x90 [ 120.670390][ T7499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.676290][ T7499] RIP: 0033:0x7f3554379eb9 [ 120.680703][ T7499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.700306][ T7499] RSP: 002b:00007f35550fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.708714][ T7499] RAX: ffffffffffffffda RBX: 00007f3554515f80 RCX: 00007f3554379eb9 [ 120.716681][ T7499] RDX: 0000000000004000 RSI: 00000000200016c0 RDI: 0000000000000003 [ 120.724645][ T7499] RBP: 00007f35550fd090 R08: 0000000000000000 R09: 0000000000000000 [ 120.732602][ T7499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.740570][ T7499] R13: 0000000000000000 R14: 00007f3554515f80 R15: 00007ffee34e2a18 [ 120.748543][ T7499] [ 121.249199][ T7531] FAULT_INJECTION: forcing a failure. [ 121.249199][ T7531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.269917][ T7531] CPU: 0 UID: 0 PID: 7531 Comm: syz.0.650 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 121.280539][ T7531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 121.290613][ T7531] Call Trace: [ 121.293884][ T7531] [ 121.296808][ T7531] dump_stack_lvl+0x241/0x360 [ 121.301483][ T7531] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.306672][ T7531] ? __pfx__printk+0x10/0x10 [ 121.311254][ T7531] ? __pfx_lock_release+0x10/0x10 [ 121.316278][ T7531] should_fail_ex+0x3b0/0x4e0 [ 121.320961][ T7531] _copy_from_user+0x2f/0xe0 [ 121.325557][ T7531] ____sys_sendmsg+0x2e4/0x7d0 [ 121.330322][ T7531] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.335611][ T7531] __sys_sendmsg+0x2b0/0x3a0 [ 121.340198][ T7531] ? __pfx___sys_sendmsg+0x10/0x10 [ 121.345303][ T7531] ? vfs_write+0x7c4/0xc90 [ 121.349741][ T7531] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.356064][ T7531] ? do_syscall_64+0x100/0x230 [ 121.360821][ T7531] ? do_syscall_64+0xb6/0x230 [ 121.365488][ T7531] do_syscall_64+0xf3/0x230 [ 121.369987][ T7531] ? clear_bhb_loop+0x35/0x90 [ 121.374665][ T7531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.380560][ T7531] RIP: 0033:0x7f8bc3d79eb9 [ 121.384965][ T7531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.404558][ T7531] RSP: 002b:00007f8bc4bc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.412961][ T7531] RAX: ffffffffffffffda RBX: 00007f8bc3f15f80 RCX: 00007f8bc3d79eb9 [ 121.420921][ T7531] RDX: 0000000000004000 RSI: 00000000200016c0 RDI: 0000000000000003 [ 121.428882][ T7531] RBP: 00007f8bc4bc3090 R08: 0000000000000000 R09: 0000000000000000 [ 121.436845][ T7531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.444897][ T7531] R13: 0000000000000000 R14: 00007f8bc3f15f80 R15: 00007fffec3680a8 [ 121.452868][ T7531] [ 121.649028][ T7544] netlink: 68 bytes leftover after parsing attributes in process `syz.1.654'. [ 121.685216][ T7546] netlink: 24 bytes leftover after parsing attributes in process `syz.4.655'. [ 121.762002][ T7546] netlink: 'syz.4.655': attribute type 1 has an invalid length. [ 121.830125][ T7556] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 121.839374][ T7556] macsec2: entered promiscuous mode [ 121.865801][ T7556] macsec2: entered allmulticast mode [ 121.881358][ T7556] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 121.924384][ T7556] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 121.931442][ T7556] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 121.969663][ T7566] FAULT_INJECTION: forcing a failure. [ 121.969663][ T7566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.993461][ T7566] CPU: 1 UID: 0 PID: 7566 Comm: syz.3.663 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 122.004099][ T7566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 122.014175][ T7566] Call Trace: [ 122.017469][ T7566] [ 122.020413][ T7566] dump_stack_lvl+0x241/0x360 [ 122.025118][ T7566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.030343][ T7566] ? __pfx__printk+0x10/0x10 [ 122.034951][ T7566] ? __pfx_lock_release+0x10/0x10 [ 122.040010][ T7566] should_fail_ex+0x3b0/0x4e0 [ 122.044715][ T7566] _copy_from_iter+0x1f6/0x1960 [ 122.049584][ T7566] ? __virt_addr_valid+0x183/0x530 [ 122.054717][ T7566] ? __pfx_lock_release+0x10/0x10 [ 122.059768][ T7566] ? __alloc_skb+0x28f/0x440 [ 122.064378][ T7566] ? __pfx__copy_from_iter+0x10/0x10 [ 122.069679][ T7566] ? __virt_addr_valid+0x183/0x530 [ 122.074807][ T7566] ? __virt_addr_valid+0x183/0x530 [ 122.079929][ T7566] ? __virt_addr_valid+0x45f/0x530 [ 122.085056][ T7566] ? __check_object_size+0x49c/0x900 [ 122.090375][ T7566] netlink_sendmsg+0x73d/0xcb0 [ 122.095176][ T7566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.100482][ T7566] ? __import_iovec+0x536/0x820 [ 122.105354][ T7566] ? aa_sock_msg_perm+0x91/0x160 [ 122.110311][ T7566] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 122.115711][ T7566] ? security_socket_sendmsg+0x87/0xb0 [ 122.121189][ T7566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.126488][ T7566] __sock_sendmsg+0x221/0x270 [ 122.131185][ T7566] ____sys_sendmsg+0x525/0x7d0 [ 122.135986][ T7566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.141307][ T7566] __sys_sendmsg+0x2b0/0x3a0 [ 122.145934][ T7566] ? __pfx___sys_sendmsg+0x10/0x10 [ 122.151064][ T7566] ? vfs_write+0x7c4/0xc90 [ 122.155545][ T7566] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 122.161900][ T7566] ? do_syscall_64+0x100/0x230 [ 122.166691][ T7566] ? do_syscall_64+0xb6/0x230 [ 122.171389][ T7566] do_syscall_64+0xf3/0x230 [ 122.175917][ T7566] ? clear_bhb_loop+0x35/0x90 [ 122.180621][ T7566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.186538][ T7566] RIP: 0033:0x7f3554379eb9 [ 122.190968][ T7566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.210593][ T7566] RSP: 002b:00007f35550fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.219122][ T7566] RAX: ffffffffffffffda RBX: 00007f3554515f80 RCX: 00007f3554379eb9 [ 122.227124][ T7566] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 122.235114][ T7566] RBP: 00007f35550fd090 R08: 0000000000000000 R09: 0000000000000000 [ 122.243105][ T7566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.251126][ T7566] R13: 0000000000000000 R14: 00007f3554515f80 R15: 00007ffee34e2a18 [ 122.259129][ T7566] [ 122.311094][ T7573] netlink: 56 bytes leftover after parsing attributes in process `syz.1.666'. [ 122.362615][ T7573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.666'. [ 122.555525][ T7593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.654685][ T7598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 122.731977][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 122.849628][ T7608] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 122.968332][ T7616] syzkaller1: entered promiscuous mode [ 122.976340][ T7616] syzkaller1: entered allmulticast mode [ 123.025317][ T7618] netlink: 204 bytes leftover after parsing attributes in process `syz.2.679'. [ 123.279756][ T7633] bridge0: port 3(syz_tun) entered blocking state [ 123.288090][ T7633] bridge0: port 3(syz_tun) entered disabled state [ 123.299237][ T7633] syz_tun: entered allmulticast mode [ 123.307210][ T7633] syz_tun: entered promiscuous mode [ 123.312967][ T7633] bridge0: port 3(syz_tun) entered blocking state [ 123.320307][ T7633] bridge0: port 3(syz_tun) entered forwarding state [ 123.331857][ T7634] pim6reg: left allmulticast mode [ 123.436190][ T7639] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.950523][ T7662] netlink: 'syz.4.695': attribute type 126 has an invalid length. [ 124.117279][ T7685] __nla_validate_parse: 6 callbacks suppressed [ 124.117296][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.701'. [ 124.168697][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.699'. [ 124.311921][ T7697] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 124.320850][ T7697] macsec2: entered promiscuous mode [ 124.329186][ T7697] macsec2: entered allmulticast mode [ 124.335703][ T7697] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 124.347013][ T7697] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 124.355079][ T7697] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 125.091536][ T7724] netlink: 'syz.3.711': attribute type 10 has an invalid length. [ 125.122306][ T7724] batman_adv: batadv0: Adding interface: team0 [ 125.125053][ T7727] netlink: 24 bytes leftover after parsing attributes in process `syz.3.711'. [ 125.133452][ T7724] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.165374][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.2.712'. [ 125.178459][ T7724] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 125.441572][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 125.694243][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 125.727812][ T7772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'. [ 125.802716][ T7775] netlink: 'syz.3.725': attribute type 13 has an invalid length. [ 126.017502][ T7784] sit0: entered allmulticast mode [ 126.071672][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.4.722'. [ 126.258928][ T7789] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.727'. [ 126.383251][ T7794] netlink: 'syz.1.730': attribute type 1 has an invalid length. [ 126.405093][ T7794] netlink: 9328 bytes leftover after parsing attributes in process `syz.1.730'. [ 126.620815][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.3.736'. [ 126.683874][ T7814] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 126.727477][ T7814] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 126.752788][ T7814] bridge_slave_0: default FDB implementation only supports local addresses [ 127.147712][ T7842] vlan2: entered allmulticast mode [ 127.174259][ T7842] bond0: entered allmulticast mode [ 127.199803][ T7842] bond_slave_0: entered allmulticast mode [ 127.213495][ T7842] bond_slave_1: entered allmulticast mode [ 127.246500][ T7840] netlink: 'syz.4.743': attribute type 3 has an invalid length. [ 128.327606][ T7878] IPVS: length: 24 != 6456 [ 128.458230][ T7890] netlink: 'syz.3.752': attribute type 15 has an invalid length. [ 128.495546][ T7890] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 65023 - 0 [ 128.504881][ T7890] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 65023 - 0 [ 128.513966][ T7890] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 65023 - 0 [ 128.522774][ T7890] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 65023 - 0 [ 128.535585][ T7890] vxlan1: entered promiscuous mode [ 128.626133][ T7900] netlink: 'syz.4.759': attribute type 7 has an invalid length. [ 128.635143][ T7900] netlink: 'syz.4.759': attribute type 39 has an invalid length. [ 128.952035][ T7922] netlink: 'syz.4.768': attribute type 15 has an invalid length. [ 129.031799][ T7929] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 129.161514][ T7939] IPVS: set_ctl: invalid protocol: 44 100.1.1.0:20000 [ 129.324749][ T7943] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 129.399791][ T7956] __nla_validate_parse: 13 callbacks suppressed [ 129.399809][ T7956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.777'. [ 129.484219][ T7959] netlink: 'syz.1.778': attribute type 4 has an invalid length. [ 129.525546][ T7959] tipc: Failed to remove unknown binding: 66,1,1/0:602955479/602955481 [ 129.542528][ T7967] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.781'. [ 129.544047][ T7959] tipc: Failed to remove unknown binding: 66,1,1/0:602955479/602955481 [ 129.740057][ T7970] ip6t_REJECT: ECHOREPLY is not supported [ 129.834826][ T7980] netlink: 256 bytes leftover after parsing attributes in process `syz.1.785'. [ 129.849119][ T7980] netlink: 'syz.1.785': attribute type 9 has an invalid length. [ 129.974088][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.787'. [ 130.114825][ T7990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.788'. [ 130.124311][ T7990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.788'. [ 130.160129][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.790'. [ 130.313164][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 130.630847][ T8021] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'. [ 130.720008][ T8019] x_tables: duplicate underflow at hook 1 [ 130.827458][ T8028] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 130.885230][ T8028] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 130.914777][ T8034] FAULT_INJECTION: forcing a failure. [ 130.914777][ T8034] name failslab, interval 1, probability 0, space 0, times 0 [ 130.956406][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.1.806 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 130.967054][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 130.977129][ T8034] Call Trace: [ 130.980434][ T8034] [ 130.983387][ T8034] dump_stack_lvl+0x241/0x360 [ 130.988102][ T8034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.993317][ T8034] ? __pfx__printk+0x10/0x10 [ 130.997923][ T8034] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 131.003391][ T8034] ? __pfx___might_resched+0x10/0x10 [ 131.008705][ T8034] should_fail_ex+0x3b0/0x4e0 [ 131.013420][ T8034] should_failslab+0xac/0x100 [ 131.018126][ T8034] ? nf_tables_newtable+0x52c/0x1e10 [ 131.023434][ T8034] __kmalloc_cache_noprof+0x6c/0x2c0 [ 131.028737][ T8034] ? nft_pernet+0x23/0x240 [ 131.033173][ T8034] nf_tables_newtable+0x52c/0x1e10 [ 131.038304][ T8034] ? nfnl_pernet+0x23/0x240 [ 131.042834][ T8034] ? __pfx_nf_tables_newtable+0x10/0x10 [ 131.048411][ T8034] ? __nla_parse+0x40/0x60 [ 131.052853][ T8034] nfnetlink_rcv+0x14dc/0x2ab0 [ 131.057671][ T8034] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 131.062858][ T8034] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.068072][ T8034] ? skb_clone+0x240/0x390 [ 131.072510][ T8034] ? __pfx_lock_release+0x10/0x10 [ 131.077654][ T8034] ? netlink_deliver_tap+0x2e/0x1b0 [ 131.082874][ T8034] netlink_unicast+0x7f6/0x990 [ 131.087670][ T8034] ? __pfx_netlink_unicast+0x10/0x10 [ 131.092976][ T8034] ? __virt_addr_valid+0x183/0x530 [ 131.098116][ T8034] ? __check_object_size+0x49c/0x900 [ 131.103433][ T8034] ? bpf_lsm_netlink_send+0x9/0x10 [ 131.108570][ T8034] netlink_sendmsg+0x8e4/0xcb0 [ 131.113376][ T8034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.118690][ T8034] ? __import_iovec+0x536/0x820 [ 131.123563][ T8034] ? aa_sock_msg_perm+0x91/0x160 [ 131.128522][ T8034] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 131.133828][ T8034] ? security_socket_sendmsg+0x87/0xb0 [ 131.139311][ T8034] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.144615][ T8034] __sock_sendmsg+0x221/0x270 [ 131.149316][ T8034] ____sys_sendmsg+0x525/0x7d0 [ 131.154114][ T8034] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.159442][ T8034] __sys_sendmsg+0x2b0/0x3a0 [ 131.164062][ T8034] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.169191][ T8034] ? vfs_write+0x7c4/0xc90 [ 131.173663][ T8034] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.180012][ T8034] ? do_syscall_64+0x100/0x230 [ 131.182826][ T8045] netlink: 'syz.4.807': attribute type 1 has an invalid length. [ 131.184780][ T8034] ? do_syscall_64+0xb6/0x230 [ 131.197144][ T8034] do_syscall_64+0xf3/0x230 [ 131.201665][ T8034] ? clear_bhb_loop+0x35/0x90 [ 131.206370][ T8034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.211924][ T8045] netlink: 'syz.4.807': attribute type 2 has an invalid length. [ 131.212267][ T8034] RIP: 0033:0x7faa68b79eb9 [ 131.224303][ T8034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.243929][ T8034] RSP: 002b:00007faa69a20038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.247074][ T8045] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 131.252361][ T8034] RAX: ffffffffffffffda RBX: 00007faa68d15f80 RCX: 00007faa68b79eb9 [ 131.252381][ T8034] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 131.252399][ T8034] RBP: 00007faa69a20090 R08: 0000000000000000 R09: 0000000000000000 [ 131.292094][ T8034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.300088][ T8034] R13: 0000000000000000 R14: 00007faa68d15f80 R15: 00007ffdac0012c8 [ 131.308094][ T8034] [ 131.399827][ T8045] netlink: 'syz.4.807': attribute type 6 has an invalid length. [ 131.455580][ T8049] netlink: 'syz.1.811': attribute type 10 has an invalid length. [ 131.813790][ T5242] Bluetooth: hci3: command 0x0405 tx timeout [ 132.106670][ T8082] FAULT_INJECTION: forcing a failure. [ 132.106670][ T8082] name failslab, interval 1, probability 0, space 0, times 0 [ 132.119817][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.0.821 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 132.126003][ T8081] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 132.130412][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 132.130429][ T8082] Call Trace: [ 132.130438][ T8082] [ 132.130446][ T8082] dump_stack_lvl+0x241/0x360 [ 132.161774][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.167004][ T8082] ? __pfx__printk+0x10/0x10 [ 132.171621][ T8082] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 132.177102][ T8082] ? __pfx___might_resched+0x10/0x10 [ 132.182417][ T8082] should_fail_ex+0x3b0/0x4e0 [ 132.187124][ T8082] should_failslab+0xac/0x100 [ 132.191823][ T8082] ? nf_tables_newtable+0x52c/0x1e10 [ 132.197125][ T8082] __kmalloc_cache_noprof+0x6c/0x2c0 [ 132.202438][ T8082] nf_tables_newtable+0x52c/0x1e10 [ 132.207296][ T8085] netlink: 'syz.3.822': attribute type 10 has an invalid length. [ 132.207552][ T8082] ? nfnl_pernet+0x23/0x240 [ 132.207586][ T8082] ? __pfx_nf_tables_newtable+0x10/0x10 [ 132.225425][ T8082] ? __nla_parse+0x40/0x60 [ 132.229866][ T8082] nfnetlink_rcv+0x14dc/0x2ab0 [ 132.234686][ T8082] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 132.239809][ T8082] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 132.245729][ T8082] ? rcu_preempt_deferred_qs_irqrestore+0x87b/0xc70 [ 132.252380][ T8082] ? rcu_read_unlock_special+0x470/0x550 [ 132.258031][ T8082] ? skb_clone+0x240/0x390 [ 132.262469][ T8082] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 132.268572][ T8082] ? __rcu_read_unlock+0xa1/0x110 [ 132.273617][ T8082] netlink_unicast+0x7f6/0x990 [ 132.278413][ T8082] ? __pfx_netlink_unicast+0x10/0x10 [ 132.283714][ T8082] ? __virt_addr_valid+0x183/0x530 [ 132.288844][ T8082] ? __check_object_size+0x49c/0x900 [ 132.294154][ T8082] ? bpf_lsm_netlink_send+0x9/0x10 [ 132.299287][ T8082] netlink_sendmsg+0x8e4/0xcb0 [ 132.304072][ T8082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.309352][ T8082] ? __import_iovec+0x536/0x820 [ 132.314187][ T8082] ? aa_sock_msg_perm+0x91/0x160 [ 132.319127][ T8082] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 132.324407][ T8082] ? security_socket_sendmsg+0x87/0xb0 [ 132.329884][ T8082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 132.335178][ T8082] __sock_sendmsg+0x221/0x270 [ 132.339859][ T8082] ____sys_sendmsg+0x525/0x7d0 [ 132.344626][ T8082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 132.349908][ T8082] __sys_sendmsg+0x2b0/0x3a0 [ 132.354489][ T8082] ? __pfx___sys_sendmsg+0x10/0x10 [ 132.359584][ T8082] ? vfs_write+0x7c4/0xc90 [ 132.364040][ T8082] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.370391][ T8082] ? do_syscall_64+0x100/0x230 [ 132.375177][ T8082] ? do_syscall_64+0xb6/0x230 [ 132.379871][ T8082] do_syscall_64+0xf3/0x230 [ 132.384388][ T8082] ? clear_bhb_loop+0x35/0x90 [ 132.389081][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.394980][ T8082] RIP: 0033:0x7f8bc3d79eb9 [ 132.399404][ T8082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.419015][ T8082] RSP: 002b:00007f8bc4bc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 132.427430][ T8082] RAX: ffffffffffffffda RBX: 00007f8bc3f15f80 RCX: 00007f8bc3d79eb9 [ 132.435389][ T8082] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 132.443369][ T8082] RBP: 00007f8bc4bc3090 R08: 0000000000000000 R09: 0000000000000000 [ 132.451348][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.459316][ T8082] R13: 0000000000000000 R14: 00007f8bc3f15f80 R15: 00007fffec3680a8 [ 132.467294][ T8082] [ 132.603259][ T8092] vxlan2: entered promiscuous mode [ 132.713321][ T8102] xt_CONNSECMARK: invalid mode: 0 [ 132.739035][ T8094] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.098803][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.232081][ T8132] FAULT_INJECTION: forcing a failure. [ 133.232081][ T8132] name failslab, interval 1, probability 0, space 0, times 0 [ 133.247281][ T8132] CPU: 0 UID: 0 PID: 8132 Comm: syz.4.836 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 133.257884][ T8132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 133.267949][ T8132] Call Trace: [ 133.271220][ T8132] [ 133.274170][ T8132] dump_stack_lvl+0x241/0x360 [ 133.278850][ T8132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.284051][ T8132] ? __pfx__printk+0x10/0x10 [ 133.288652][ T8132] ? __kmalloc_node_noprof+0xb7/0x440 [ 133.294026][ T8132] ? __pfx___might_resched+0x10/0x10 [ 133.299296][ T8132] ? __asan_memset+0x23/0x50 [ 133.303889][ T8132] should_fail_ex+0x3b0/0x4e0 [ 133.308592][ T8132] should_failslab+0xac/0x100 [ 133.313278][ T8132] __kmalloc_node_noprof+0xdf/0x440 [ 133.318476][ T8132] ? __kvmalloc_node_noprof+0x72/0x190 [ 133.323924][ T8132] __kvmalloc_node_noprof+0x72/0x190 [ 133.329207][ T8132] rhashtable_init_noprof+0x534/0xa60 [ 133.334574][ T8132] rhltable_init_noprof+0x1c/0x60 [ 133.339584][ T8132] nf_tables_newtable+0x7e8/0x1e10 [ 133.344687][ T8132] ? nfnl_pernet+0x23/0x240 [ 133.349206][ T8132] ? __pfx_nf_tables_newtable+0x10/0x10 [ 133.354760][ T8132] ? __nla_parse+0x40/0x60 [ 133.359200][ T8132] nfnetlink_rcv+0x14dc/0x2ab0 [ 133.364013][ T8132] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 133.369194][ T8132] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.374409][ T8132] ? skb_clone+0x240/0x390 [ 133.378847][ T8132] ? __pfx_lock_release+0x10/0x10 [ 133.383908][ T8132] ? netlink_deliver_tap+0x2e/0x1b0 [ 133.389300][ T8132] netlink_unicast+0x7f6/0x990 [ 133.394097][ T8132] ? __pfx_netlink_unicast+0x10/0x10 [ 133.399397][ T8132] ? __virt_addr_valid+0x183/0x530 [ 133.404518][ T8132] ? __check_object_size+0x49c/0x900 [ 133.409826][ T8132] ? bpf_lsm_netlink_send+0x9/0x10 [ 133.414938][ T8132] netlink_sendmsg+0x8e4/0xcb0 [ 133.419713][ T8132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.424987][ T8132] ? __import_iovec+0x536/0x820 [ 133.429853][ T8132] ? aa_sock_msg_perm+0x91/0x160 [ 133.434778][ T8132] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 133.440062][ T8132] ? security_socket_sendmsg+0x87/0xb0 [ 133.445524][ T8132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 133.450823][ T8132] __sock_sendmsg+0x221/0x270 [ 133.455518][ T8132] ____sys_sendmsg+0x525/0x7d0 [ 133.460310][ T8132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 133.465631][ T8132] __sys_sendmsg+0x2b0/0x3a0 [ 133.470243][ T8132] ? __pfx___sys_sendmsg+0x10/0x10 [ 133.475371][ T8132] ? vfs_write+0x7c4/0xc90 [ 133.479854][ T8132] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.486204][ T8132] ? do_syscall_64+0x100/0x230 [ 133.490988][ T8132] ? do_syscall_64+0xb6/0x230 [ 133.495681][ T8132] do_syscall_64+0xf3/0x230 [ 133.500205][ T8132] ? clear_bhb_loop+0x35/0x90 [ 133.504910][ T8132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.510830][ T8132] RIP: 0033:0x7fb69d579eb9 [ 133.515259][ T8132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.534892][ T8132] RSP: 002b:00007fb69e346038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.543331][ T8132] RAX: ffffffffffffffda RBX: 00007fb69d715f80 RCX: 00007fb69d579eb9 [ 133.551321][ T8132] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 133.559310][ T8132] RBP: 00007fb69e346090 R08: 0000000000000000 R09: 0000000000000000 [ 133.567298][ T8132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.575286][ T8132] R13: 0000000000000000 R14: 00007fb69d715f80 R15: 00007ffe083be8f8 [ 133.583377][ T8132] [ 133.623877][ T8138] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 133.631607][ T8138] netlink: 'syz.3.839': attribute type 1 has an invalid length. [ 133.660524][ T8138] netlink: 'syz.3.839': attribute type 2 has an invalid length. [ 133.822738][ T8151] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 134.227970][ T8163] syzkaller0: entered promiscuous mode [ 134.241057][ T8163] syzkaller0: entered allmulticast mode [ 134.477557][ T8170] team0: Port device macvlan1 added [ 134.667816][ T8180] FAULT_INJECTION: forcing a failure. [ 134.667816][ T8180] name failslab, interval 1, probability 0, space 0, times 0 [ 134.683067][ T8180] CPU: 1 UID: 0 PID: 8180 Comm: syz.0.852 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 134.693689][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 134.703768][ T8180] Call Trace: [ 134.707060][ T8180] [ 134.709997][ T8180] dump_stack_lvl+0x241/0x360 [ 134.714693][ T8180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 134.719904][ T8180] ? __pfx__printk+0x10/0x10 [ 134.724505][ T8180] ? __kmalloc_node_noprof+0xb7/0x440 [ 134.729894][ T8180] ? __pfx___might_resched+0x10/0x10 [ 134.735201][ T8180] ? __asan_memset+0x23/0x50 [ 134.739809][ T8180] should_fail_ex+0x3b0/0x4e0 [ 134.744505][ T8180] should_failslab+0xac/0x100 [ 134.749200][ T8180] __kmalloc_node_noprof+0xdf/0x440 [ 134.754493][ T8180] ? __kvmalloc_node_noprof+0x72/0x190 [ 134.759965][ T8180] __kvmalloc_node_noprof+0x72/0x190 [ 134.765268][ T8180] rhashtable_init_noprof+0x534/0xa60 [ 134.770653][ T8180] rhltable_init_noprof+0x1c/0x60 [ 134.775687][ T8180] nf_tables_newtable+0x7e8/0x1e10 [ 134.780812][ T8180] ? nfnl_pernet+0x23/0x240 [ 134.785328][ T8180] ? __pfx_nf_tables_newtable+0x10/0x10 [ 134.790886][ T8180] ? __nla_parse+0x40/0x60 [ 134.795318][ T8180] nfnetlink_rcv+0x14dc/0x2ab0 [ 134.800130][ T8180] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 134.805313][ T8180] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.810520][ T8180] ? skb_clone+0x240/0x390 [ 134.814949][ T8180] ? __pfx_lock_release+0x10/0x10 [ 134.819998][ T8180] ? netlink_deliver_tap+0x2e/0x1b0 [ 134.825210][ T8180] netlink_unicast+0x7f6/0x990 [ 134.830001][ T8180] ? __pfx_netlink_unicast+0x10/0x10 [ 134.835381][ T8180] ? __virt_addr_valid+0x183/0x530 [ 134.840763][ T8180] ? __check_object_size+0x49c/0x900 [ 134.846060][ T8180] ? bpf_lsm_netlink_send+0x9/0x10 [ 134.851183][ T8180] netlink_sendmsg+0x8e4/0xcb0 [ 134.855975][ T8180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.861272][ T8180] ? __import_iovec+0x536/0x820 [ 134.866128][ T8180] ? aa_sock_msg_perm+0x91/0x160 [ 134.871081][ T8180] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 134.876374][ T8180] ? security_socket_sendmsg+0x87/0xb0 [ 134.882286][ T8180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.887582][ T8180] __sock_sendmsg+0x221/0x270 [ 134.892288][ T8180] ____sys_sendmsg+0x525/0x7d0 [ 134.897074][ T8180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.902386][ T8180] __sys_sendmsg+0x2b0/0x3a0 [ 134.906995][ T8180] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.912118][ T8180] ? vfs_write+0x7c4/0xc90 [ 134.916591][ T8180] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.922935][ T8180] ? do_syscall_64+0x100/0x230 [ 134.927713][ T8180] ? do_syscall_64+0xb6/0x230 [ 134.932403][ T8180] do_syscall_64+0xf3/0x230 [ 134.936921][ T8180] ? clear_bhb_loop+0x35/0x90 [ 134.941614][ T8180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.947518][ T8180] RIP: 0033:0x7f8bc3d79eb9 [ 134.951944][ T8180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.971563][ T8180] RSP: 002b:00007f8bc4bc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.979992][ T8180] RAX: ffffffffffffffda RBX: 00007f8bc3f15f80 RCX: 00007f8bc3d79eb9 [ 134.987985][ T8180] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 134.995966][ T8180] RBP: 00007f8bc4bc3090 R08: 0000000000000000 R09: 0000000000000000 [ 135.003946][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.011924][ T8180] R13: 0000000000000000 R14: 00007f8bc3f15f80 R15: 00007fffec3680a8 [ 135.019927][ T8180] [ 135.030505][ T8180] __nla_validate_parse: 12 callbacks suppressed [ 135.030522][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 137.051201][ T25] IPVS: starting estimator thread 0... [ 137.190129][ T8186] IPVS: using max 22 ests per chain, 52800 per kthread [ 137.556731][ T8206] netlink: 204 bytes leftover after parsing attributes in process `syz.0.860'. [ 137.590416][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.860'. [ 137.631195][ T8206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 137.694978][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 137.713761][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 138.499068][ T8209] validate_nla: 1 callbacks suppressed [ 138.499086][ T8209] netlink: 'syz.0.861': attribute type 96 has an invalid length. [ 139.010265][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 139.022068][ T8193] veth1_macvtap: left promiscuous mode [ 139.095012][ T5251] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 139.143111][ T8216] netlink: 'syz.0.864': attribute type 10 has an invalid length. [ 139.176623][ T8216] batman_adv: batadv0: Adding interface: team0 [ 139.182826][ T8216] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.229901][ T8216] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 139.240139][ T8220] netlink: 68 bytes leftover after parsing attributes in process `syz.1.866'. [ 139.252569][ T8220] netlink: 144 bytes leftover after parsing attributes in process `syz.1.866'. [ 139.263525][ T8222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.864'. [ 139.336961][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 139.441243][ T8230] netlink: 'syz.4.868': attribute type 11 has an invalid length. [ 139.563462][ T8235] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 139.896558][ T8260] netlink: 'syz.0.880': attribute type 10 has an invalid length. [ 140.042408][ T8269] __nla_validate_parse: 8 callbacks suppressed [ 140.042427][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.882'. [ 140.114757][ T8273] netlink: 16 bytes leftover after parsing attributes in process `syz.3.884'. [ 140.124059][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.884'. [ 140.388951][ T8288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.889'. [ 140.488766][ T8296] netlink: 204 bytes leftover after parsing attributes in process `syz.4.891'. [ 140.503080][ T8296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'. [ 140.527989][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 140.579538][ T8301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.893'. [ 140.589877][ T8296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.891'. [ 140.687584][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.895'. [ 140.792123][ T8317] IPVS: set_ctl: invalid protocol: 59 10.1.1.0:20003 [ 141.201142][ T8344] veth0_macvtap: left promiscuous mode [ 141.711762][ T8379] netlink: 'syz.3.916': attribute type 1 has an invalid length. [ 141.740827][ T8379] netlink: 'syz.3.916': attribute type 2 has an invalid length. [ 141.861276][ T8391] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 141.877451][ T8391] sit0: entered allmulticast mode [ 141.923194][ T8391] sit0: entered promiscuous mode [ 141.940686][ T8394] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 141.962016][ T8391] netlink: 'syz.1.920': attribute type 1 has an invalid length. [ 142.078451][ T8401] netlink: 'syz.1.924': attribute type 11 has an invalid length. [ 142.147902][ T8401] netlink: 'syz.1.924': attribute type 11 has an invalid length. [ 142.164427][ T8401] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 142.237272][ T8412] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 142.288631][ T8412] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 142.456273][ T8419] netlink: 'syz.2.927': attribute type 7 has an invalid length. [ 142.464431][ T8419] netlink: 'syz.2.927': attribute type 8 has an invalid length. [ 142.477611][ T8419] erspan0: entered promiscuous mode [ 142.487619][ T8419] batadv_slave_1: entered promiscuous mode [ 142.497323][ T8419] gretap0: entered promiscuous mode [ 142.909938][ T8441] netlink: 'syz.0.931': attribute type 2 has an invalid length. [ 142.939037][ T8441] batadv_slave_0: entered allmulticast mode [ 142.979452][ T8441] pim6reg: entered allmulticast mode [ 143.028194][ T8441] batadv_slave_0: left allmulticast mode [ 143.048732][ T8440] pim6reg: left allmulticast mode [ 143.285511][ T8460] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 143.314052][ T8462] openvswitch: netlink: Multiple metadata blocks provided [ 143.563565][ T8475] netlink: 'syz.3.944': attribute type 7 has an invalid length. [ 143.713035][ T8480] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 143.733945][ T8482] netlink: 'syz.3.946': attribute type 10 has an invalid length. [ 144.297569][ T8515] netlink: 'syz.3.954': attribute type 1 has an invalid length. [ 144.574183][ T8523] block nbd0: Unsupported socket: shutdown callout must be supported. [ 144.888543][ T8542] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 144.905937][ T8542] macvlan2: entered promiscuous mode [ 144.924016][ T8542] macvlan2: entered allmulticast mode [ 144.946236][ T8542] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 145.305691][ T8563] __nla_validate_parse: 38 callbacks suppressed [ 145.305711][ T8563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 145.326859][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 145.437112][ T8570] netlink: 'syz.3.967': attribute type 10 has an invalid length. [ 145.510621][ T8570] team0: Port device dummy0 added [ 145.518926][ T8571] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 145.533169][ T8568] netlink: 'syz.0.968': attribute type 10 has an invalid length. [ 145.543743][ T8568] netlink: 2 bytes leftover after parsing attributes in process `syz.0.968'. [ 145.563394][ T8568] team0: entered promiscuous mode [ 145.572216][ T8568] team_slave_0: entered promiscuous mode [ 145.584415][ T8568] team_slave_1: entered promiscuous mode [ 145.620904][ T8568] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.638687][ T8568] batman_adv: batadv0: Interface activated: team0 [ 145.656582][ T8568] batman_adv: batadv0: Interface deactivated: team0 [ 145.666143][ T8568] batman_adv: batadv0: Removing interface: team0 [ 145.733445][ T8568] bridge0: port 4(team0) entered blocking state [ 145.762240][ T8568] bridge0: port 4(team0) entered disabled state [ 145.784710][ T8568] team0: entered allmulticast mode [ 145.790491][ T8568] team_slave_0: entered allmulticast mode [ 145.824783][ T8568] team_slave_1: entered allmulticast mode [ 145.835889][ T8568] bridge0: port 4(team0) entered blocking state [ 145.843173][ T8568] bridge0: port 4(team0) entered forwarding state [ 145.851512][ T8585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.972'. [ 146.136575][ T8599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 146.152930][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.1.977'. [ 146.167507][ T8601] netlink: 4 bytes leftover after parsing attributes in process `syz.2.978'. [ 146.192460][ T8601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.978'. [ 146.504787][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.985'. [ 146.993238][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.988'. [ 147.242185][ T8632] openvswitch: netlink: Unknown nsh attribute 0 [ 147.396507][ T8636] netlink: 'syz.4.990': attribute type 2 has an invalid length. [ 147.558263][ T8647] team0: entered promiscuous mode [ 147.569440][ T8647] team_slave_0: entered promiscuous mode [ 147.597840][ T8647] team_slave_1: entered promiscuous mode [ 147.641318][ T8651] netlink: 'syz.1.995': attribute type 1 has an invalid length. [ 147.644872][ T8647] openvswitch: netlink: VXLAN extension 1024 out of range max 1 [ 147.891513][ T8660] netlink: 'syz.0.1000': attribute type 11 has an invalid length. [ 147.930137][ T8660] netlink: 'syz.0.1000': attribute type 11 has an invalid length. [ 147.960973][ T8660] debugfs: Directory 'netdev:' with parent 'phy5' already present! [ 148.194867][ T8645] team0: left promiscuous mode [ 148.199703][ T8645] team_slave_0: left promiscuous mode [ 148.219994][ T8645] team_slave_1: left promiscuous mode [ 148.689449][ T8677] netlink: 'syz.3.1004': attribute type 4 has an invalid length. [ 148.720734][ T8683] netlink: 'syz.4.1007': attribute type 10 has an invalid length. [ 148.726403][ T8684] xt_recent: Unsupported userspace flags (00000042) [ 148.752114][ T8683] batman_adv: batadv0: Adding interface: team0 [ 148.782354][ T8683] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.840150][ T8683] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 148.872760][ T8692] pim6reg: left allmulticast mode [ 149.113779][ T8703] Bluetooth: MGMT ver 1.23 [ 149.448877][ T8724] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.588841][ T8731] sit0: entered allmulticast mode [ 150.345280][ T8778] __nla_validate_parse: 16 callbacks suppressed [ 150.345299][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 150.517523][ T8785] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1037'. [ 151.168923][ T8796] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 151.507285][ T8830] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1051'. [ 151.589133][ T8831] tap0: tun_chr_ioctl cmd 2147767507 [ 151.614538][ T8831] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1055'. [ 151.692388][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1056'. [ 151.793934][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1058'. [ 151.841225][ T8842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1058'. [ 151.864955][ T8842] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not filter [ 151.888170][ T8842] netlink: 'syz.0.1058': attribute type 3 has an invalid length. [ 152.011611][ T8859] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1063'. [ 152.216812][ T8872] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 152.681728][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 152.726484][ T8910] netlink: 'syz.3.1077': attribute type 11 has an invalid length. [ 152.739292][ T8910] netlink: 'syz.3.1077': attribute type 11 has an invalid length. [ 153.057798][ T6658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.079614][ T6658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.681318][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1090'. [ 153.770684][ T8956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.202839][ T8979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.211183][ T8980] netlink: 'syz.2.1100': attribute type 1 has an invalid length. [ 154.223977][ T8980] netlink: 'syz.2.1100': attribute type 1 has an invalid length. [ 154.240472][ T8979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.620938][ T8990] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 155.886877][ T9039] __nla_validate_parse: 14 callbacks suppressed [ 155.886898][ T9039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1120'. [ 156.115861][ T9050] netlink: 'syz.3.1121': attribute type 10 has an invalid length. [ 156.352770][ T9058] netlink: 'syz.1.1125': attribute type 11 has an invalid length. [ 156.380258][ T9058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1125'. [ 156.701701][ T9068] netlink: 'syz.0.1127': attribute type 10 has an invalid length. [ 156.789316][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.825133][ T9068] batadv0: entered promiscuous mode [ 156.830454][ T9068] batadv0: entered allmulticast mode [ 156.852010][ T9068] team0: Port device batadv0 added [ 157.262084][ T9083] netlink: 'syz.3.1130': attribute type 2 has an invalid length. [ 157.293844][ T6661] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 157.303455][ T6661] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 157.313031][ T9083] netlink: 'syz.3.1130': attribute type 1 has an invalid length. [ 157.711873][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1133'. [ 159.715747][ T9114] netlink: 'syz.3.1140': attribute type 1 has an invalid length. [ 159.735824][ T9118] netlink: 892 bytes leftover after parsing attributes in process `syz.4.1143'. [ 159.788506][ T9108] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 159.810051][ T9108] macsec2: entered promiscuous mode [ 159.896164][ T9108] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 159.933012][ T9127] netlink: 'syz.4.1145': attribute type 3 has an invalid length. [ 160.027355][ T9126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1144'. [ 160.060407][ T9126] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1144'. [ 160.101384][ T9126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1144'. [ 160.387205][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1148'. [ 161.021931][ T9160] netlink: 'syz.2.1155': attribute type 29 has an invalid length. [ 161.097755][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'. [ 161.130755][ T9163] 8021q: adding VLAN 0 to HW filter on device team1 [ 161.216161][ T9160] netlink: 'syz.2.1155': attribute type 29 has an invalid length. [ 161.405043][ T9174] openvswitch: netlink: Message has 16 unknown bytes. [ 161.489526][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1162'. [ 161.561360][ T9179] netlink: 'syz.3.1164': attribute type 11 has an invalid length. [ 161.599143][ T9179] netlink: 'syz.3.1164': attribute type 11 has an invalid length. [ 161.626811][ T9185] netlink: 'syz.2.1166': attribute type 3 has an invalid length. [ 161.901243][ T9207] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1171'. [ 161.927000][ T9207] vlan1: entered promiscuous mode [ 162.014559][ T9207] x_tables: duplicate underflow at hook 2 [ 162.038790][ T9207] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 162.159911][ T9218] netlink: 'syz.4.1176': attribute type 9 has an invalid length. [ 162.291875][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 162.530678][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1179'. [ 162.656699][ T9238] delete_channel: no stack [ 162.848864][ T9249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.908428][ T9249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.208437][ T9269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1189'. [ 163.316642][ T9274] netlink: 'syz.2.1190': attribute type 11 has an invalid length. [ 163.327422][ T9274] netlink: 'syz.2.1190': attribute type 11 has an invalid length. [ 163.364463][ T9276] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 163.534269][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1195'. [ 163.555224][ T9286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1195'. [ 163.580937][ T9286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1195'. [ 163.613063][ T9286] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1195'. [ 163.627048][ T9286] tc_dump_action: action bad kind [ 164.092912][ T9312] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20002 [ 164.766628][ T9332] ================================================================== [ 164.774730][ T9332] BUG: KASAN: slab-use-after-free in unix_stream_read_actor+0xa6/0xb0 [ 164.782907][ T9332] Read of size 4 at addr ffff8880222fe404 by task syz.3.1210/9332 [ 164.790722][ T9332] [ 164.793065][ T9332] CPU: 0 UID: 0 PID: 9332 Comm: syz.3.1210 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 164.803749][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 164.813812][ T9332] Call Trace: [ 164.817096][ T9332] [ 164.820028][ T9332] dump_stack_lvl+0x241/0x360 [ 164.824723][ T9332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.829942][ T9332] ? __pfx__printk+0x10/0x10 [ 164.834545][ T9332] ? _printk+0xd5/0x120 [ 164.838710][ T9332] ? __virt_addr_valid+0x183/0x530 [ 164.843832][ T9332] ? __virt_addr_valid+0x183/0x530 [ 164.848958][ T9332] print_report+0x169/0x550 [ 164.853478][ T9332] ? __virt_addr_valid+0x183/0x530 [ 164.858598][ T9332] ? __virt_addr_valid+0x183/0x530 [ 164.863716][ T9332] ? __virt_addr_valid+0x45f/0x530 [ 164.868841][ T9332] ? __phys_addr+0xba/0x170 [ 164.873356][ T9332] ? unix_stream_read_actor+0xa6/0xb0 [ 164.878748][ T9332] kasan_report+0x143/0x180 [ 164.883275][ T9332] ? unix_stream_read_actor+0xa6/0xb0 [ 164.888674][ T9332] unix_stream_read_actor+0xa6/0xb0 [ 164.893903][ T9332] unix_stream_recv_urg+0x1df/0x320 [ 164.899133][ T9332] unix_stream_read_generic+0x2456/0x2520 [ 164.904879][ T9332] ? finish_task_switch+0x1e5/0x870 [ 164.910096][ T9332] ? lockdep_hardirqs_on+0x99/0x150 [ 164.915307][ T9332] ? aa_label_sk_perm+0x4f0/0x6d0 [ 164.915673][ T9345] netlink: 'syz.0.1216': attribute type 11 has an invalid length. [ 164.920323][ T9332] ? finish_task_switch+0x1e5/0x870 [ 164.933318][ T9332] ? __schedule+0x1808/0x4a60 [ 164.938008][ T9332] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 164.943483][ T9332] ? mark_lock+0x9a/0x350 [ 164.947833][ T9332] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 164.952970][ T9345] netlink: 'syz.0.1216': attribute type 11 has an invalid length. [ 164.953919][ T9332] ? aa_sk_perm+0x96d/0xab0 [ 164.953943][ T9332] unix_stream_recvmsg+0x22b/0x2c0 [ 164.953965][ T9332] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 164.976994][ T9332] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 164.982917][ T9332] ? __pfx___might_resched+0x10/0x10 [ 164.988237][ T9332] ? aa_sock_msg_perm+0x91/0x160 [ 164.993188][ T9332] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 164.998486][ T9332] ? security_socket_recvmsg+0x90/0xb0 [ 165.003960][ T9332] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 165.009597][ T9332] sock_recvmsg+0x22f/0x280 [ 165.014103][ T9332] ____sys_recvmsg+0x1db/0x470 [ 165.018873][ T9332] ? __pfx_____sys_recvmsg+0x10/0x10 [ 165.024170][ T9332] __sys_recvmsg+0x2f0/0x3e0 [ 165.028757][ T9332] ? __pfx___sys_recvmsg+0x10/0x10 [ 165.033858][ T9332] ? do_futex+0x33b/0x560 [ 165.038194][ T9332] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.044513][ T9332] ? do_syscall_64+0x100/0x230 [ 165.049268][ T9332] ? do_syscall_64+0xb6/0x230 [ 165.053935][ T9332] do_syscall_64+0xf3/0x230 [ 165.058424][ T9332] ? clear_bhb_loop+0x35/0x90 [ 165.063095][ T9332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.068977][ T9332] RIP: 0033:0x7f3554379eb9 [ 165.073379][ T9332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.092970][ T9332] RSP: 002b:00007f35550fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 165.101372][ T9332] RAX: ffffffffffffffda RBX: 00007f3554515f80 RCX: 00007f3554379eb9 [ 165.109333][ T9332] RDX: 0000000000002001 RSI: 0000000020000640 RDI: 0000000000000003 [ 165.117288][ T9332] RBP: 00007f35543e793e R08: 0000000000000000 R09: 0000000000000000 [ 165.125247][ T9332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.133201][ T9332] R13: 0000000000000000 R14: 00007f3554515f80 R15: 00007ffee34e2a18 [ 165.141173][ T9332] [ 165.144177][ T9332] [ 165.146481][ T9332] Allocated by task 9332: [ 165.150790][ T9332] kasan_save_track+0x3f/0x80 [ 165.155460][ T9332] __kasan_slab_alloc+0x66/0x80 [ 165.160299][ T9332] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 165.166178][ T9332] __alloc_skb+0x1c3/0x440 [ 165.170583][ T9332] alloc_skb_with_frags+0xc3/0x770 [ 165.175688][ T9332] sock_alloc_send_pskb+0x91a/0xa60 [ 165.180875][ T9332] queue_oob+0x108/0x680 [ 165.185109][ T9332] unix_stream_sendmsg+0xd24/0xf80 [ 165.190203][ T9332] __sock_sendmsg+0x221/0x270 [ 165.194863][ T9332] ____sys_sendmsg+0x525/0x7d0 [ 165.199616][ T9332] __sys_sendmsg+0x2b0/0x3a0 [ 165.204191][ T9332] do_syscall_64+0xf3/0x230 [ 165.208681][ T9332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.214561][ T9332] [ 165.216868][ T9332] Freed by task 9332: [ 165.220838][ T9332] kasan_save_track+0x3f/0x80 [ 165.225502][ T9332] kasan_save_free_info+0x40/0x50 [ 165.230511][ T9332] poison_slab_object+0xe0/0x150 [ 165.235435][ T9332] __kasan_slab_free+0x37/0x60 [ 165.240183][ T9332] kmem_cache_free+0x145/0x350 [ 165.244932][ T9332] unix_stream_read_generic+0x1ef6/0x2520 [ 165.250646][ T9332] unix_stream_recvmsg+0x22b/0x2c0 [ 165.255750][ T9332] sock_recvmsg+0x22f/0x280 [ 165.260236][ T9332] __sys_recvfrom+0x256/0x3e0 [ 165.264899][ T9332] __x64_sys_recvfrom+0xde/0x100 [ 165.269823][ T9332] do_syscall_64+0xf3/0x230 [ 165.274317][ T9332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.280209][ T9332] [ 165.282518][ T9332] The buggy address belongs to the object at ffff8880222fe3c0 [ 165.282518][ T9332] which belongs to the cache skbuff_head_cache of size 240 [ 165.297073][ T9332] The buggy address is located 68 bytes inside of [ 165.297073][ T9332] freed 240-byte region [ffff8880222fe3c0, ffff8880222fe4b0) [ 165.310764][ T9332] [ 165.313072][ T9332] The buggy address belongs to the physical page: [ 165.319469][ T9332] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x222fe [ 165.328211][ T9332] memcg:ffff8880795f4281 [ 165.332437][ T9332] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 165.339971][ T9332] page_type: 0xfdffffff(slab) [ 165.344632][ T9332] raw: 00fff00000000000 ffff88801eae9780 ffffea0001d64300 dead000000000009 [ 165.353199][ T9332] raw: 0000000000000000 00000000000c000c 00000001fdffffff ffff8880795f4281 [ 165.361856][ T9332] page dumped because: kasan: bad access detected [ 165.368259][ T9332] page_owner tracks the page as allocated [ 165.373964][ T9332] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6630, tgid 6629 (syz.3.373), ts 100941182603, free_ts 100282687320 [ 165.393056][ T9332] post_alloc_hook+0x1f3/0x230 [ 165.397899][ T9332] get_page_from_freelist+0x2e4c/0x2f10 [ 165.403448][ T9332] __alloc_pages_noprof+0x256/0x6c0 [ 165.408647][ T9332] alloc_slab_page+0x5f/0x120 [ 165.413317][ T9332] allocate_slab+0x5a/0x2f0 [ 165.417817][ T9332] ___slab_alloc+0xcd1/0x14b0 [ 165.422488][ T9332] __slab_alloc+0x58/0xa0 [ 165.426812][ T9332] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 165.432695][ T9332] __alloc_skb+0x1c3/0x440 [ 165.437102][ T9332] _sctp_make_chunk+0x58/0x460 [ 165.441859][ T9332] sctp_make_datafrag_empty+0xa6/0x510 [ 165.447308][ T9332] sctp_datamsg_from_user+0x740/0xf20 [ 165.452664][ T9332] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 165.457935][ T9332] sctp_sendmsg+0x1bc3/0x3520 [ 165.462597][ T9332] __sock_sendmsg+0x1a6/0x270 [ 165.467257][ T9332] __sys_sendto+0x3a4/0x4f0 [ 165.471747][ T9332] page last free pid 3 tgid 3 stack trace: [ 165.477533][ T9332] free_unref_page+0xd22/0xea0 [ 165.482283][ T9332] __folio_put+0x2c8/0x440 [ 165.486687][ T9332] skb_release_data+0x467/0x880 [ 165.491526][ T9332] napi_consume_skb+0x114/0x1e0 [ 165.496361][ T9332] __free_old_xmit+0x1e4/0x5f0 [ 165.501114][ T9332] virtnet_poll_tx+0x2bf/0x7e0 [ 165.505874][ T9332] __napi_poll+0xcb/0x490 [ 165.510191][ T9332] net_rx_action+0x89b/0x1240 [ 165.514850][ T9332] handle_softirqs+0x2c4/0x970 [ 165.519633][ T9332] __irq_exit_rcu+0xf4/0x1c0 [ 165.524213][ T9332] irq_exit_rcu+0x9/0x30 [ 165.528443][ T9332] common_interrupt+0xaa/0xd0 [ 165.533113][ T9332] asm_common_interrupt+0x26/0x40 [ 165.538130][ T9332] [ 165.540436][ T9332] Memory state around the buggy address: [ 165.546046][ T9332] ffff8880222fe300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 165.554090][ T9332] ffff8880222fe380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 165.562140][ T9332] >ffff8880222fe400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.570182][ T9332] ^ [ 165.574231][ T9332] ffff8880222fe480: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 165.582273][ T9332] ffff8880222fe500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 165.590313][ T9332] ================================================================== [ 165.630069][ T9332] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.637311][ T9332] CPU: 0 UID: 0 PID: 9332 Comm: syz.3.1210 Not tainted 6.11.0-rc5-syzkaller-00742-gfbdaffe41adc #0 [ 165.648000][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 165.658068][ T9332] Call Trace: [ 165.661367][ T9332] [ 165.664313][ T9332] dump_stack_lvl+0x241/0x360 [ 165.669012][ T9332] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.674233][ T9332] ? __pfx__printk+0x10/0x10 [ 165.678840][ T9332] ? preempt_schedule+0xe1/0xf0 [ 165.683716][ T9332] ? vscnprintf+0x5d/0x90 [ 165.688076][ T9332] panic+0x349/0x860 [ 165.692082][ T9332] ? check_panic_on_warn+0x21/0xb0 [ 165.697210][ T9332] ? __pfx_panic+0x10/0x10 [ 165.701647][ T9332] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 165.707666][ T9332] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 165.714014][ T9332] ? print_report+0x502/0x550 [ 165.718723][ T9332] check_panic_on_warn+0x86/0xb0 [ 165.723680][ T9332] ? unix_stream_read_actor+0xa6/0xb0 [ 165.729078][ T9332] end_report+0x77/0x160 [ 165.733352][ T9332] kasan_report+0x154/0x180 [ 165.737883][ T9332] ? unix_stream_read_actor+0xa6/0xb0 [ 165.743284][ T9332] unix_stream_read_actor+0xa6/0xb0 [ 165.748504][ T9332] unix_stream_recv_urg+0x1df/0x320 [ 165.753731][ T9332] unix_stream_read_generic+0x2456/0x2520 [ 165.759473][ T9332] ? finish_task_switch+0x1e5/0x870 [ 165.764685][ T9332] ? lockdep_hardirqs_on+0x99/0x150 [ 165.769894][ T9332] ? aa_label_sk_perm+0x4f0/0x6d0 [ 165.774927][ T9332] ? finish_task_switch+0x1e5/0x870 [ 165.780136][ T9332] ? __schedule+0x1808/0x4a60 [ 165.784830][ T9332] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 165.790237][ T9332] ? mark_lock+0x9a/0x350 [ 165.794590][ T9332] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 165.800686][ T9332] ? aa_sk_perm+0x96d/0xab0 [ 165.805200][ T9332] unix_stream_recvmsg+0x22b/0x2c0 [ 165.810324][ T9332] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 165.815972][ T9332] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 165.821882][ T9332] ? __pfx___might_resched+0x10/0x10 [ 165.827184][ T9332] ? aa_sock_msg_perm+0x91/0x160 [ 165.832133][ T9332] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 165.837432][ T9332] ? security_socket_recvmsg+0x90/0xb0 [ 165.842888][ T9332] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 165.848510][ T9332] sock_recvmsg+0x22f/0x280 [ 165.853005][ T9332] ____sys_recvmsg+0x1db/0x470 [ 165.857765][ T9332] ? __pfx_____sys_recvmsg+0x10/0x10 [ 165.863048][ T9332] __sys_recvmsg+0x2f0/0x3e0 [ 165.867638][ T9332] ? __pfx___sys_recvmsg+0x10/0x10 [ 165.872740][ T9332] ? do_futex+0x33b/0x560 [ 165.877076][ T9332] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 165.883397][ T9332] ? do_syscall_64+0x100/0x230 [ 165.888152][ T9332] ? do_syscall_64+0xb6/0x230 [ 165.892820][ T9332] do_syscall_64+0xf3/0x230 [ 165.897312][ T9332] ? clear_bhb_loop+0x35/0x90 [ 165.901981][ T9332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.907864][ T9332] RIP: 0033:0x7f3554379eb9 [ 165.912268][ T9332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.931857][ T9332] RSP: 002b:00007f35550fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 165.940261][ T9332] RAX: ffffffffffffffda RBX: 00007f3554515f80 RCX: 00007f3554379eb9 [ 165.948221][ T9332] RDX: 0000000000002001 RSI: 0000000020000640 RDI: 0000000000000003 [ 165.956177][ T9332] RBP: 00007f35543e793e R08: 0000000000000000 R09: 0000000000000000 [ 165.964132][ T9332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.972090][ T9332] R13: 0000000000000000 R14: 00007f3554515f80 R15: 00007ffee34e2a18 [ 165.980067][ T9332] [ 165.983365][ T9332] Kernel Offset: disabled [ 165.987673][ T9332] Rebooting in 86400 seconds..