last executing test programs: 2.070117342s ago: executing program 2 (id=1833): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x330, 0xffffffff, 0x0, 0x84, 0x1d0, 0xffffffff, 0xffffffff, 0x298, 0x298, 0x298, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x287, 0xd8, 0x138, 0x0, {}, [@common=@addrtype={{0x30}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x88}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) 1.900257909s ago: executing program 4 (id=1838): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x68, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0xe}}}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x7800, 0x7800, 0x4, 0x251, {{0x12, 0x4, 0x3, 0x18, 0x48, 0x64, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x43}, @multicast1, {[@rr={0x7, 0x13, 0xbe, [@remote, @rand_addr=0x64010102, @broadcast, @private=0xa010102]}, @generic={0x88, 0xa, "59af6765e666ca4f"}, @rr={0x7, 0x7, 0x4f, [@remote]}, @cipso={0x86, 0xe, 0xffffffffffffffff, [{0x5, 0x8, "99806e8d94a3"}]}, @noop]}}}}}) bpf$ITER_CREATE(0x21, &(0x7f0000000440), 0x8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x10, 0x8, 0x0, 0x1, [@multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x10}]}, @IFLA_BOND_MODE={0x5, 0x1, 0xfe}]}}}, @IFLA_PHYS_PORT_ID={0x11, 0x22, "2ae94f947c11663592f79418b0"}]}, 0x60}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'ip6gretap0\x00', {}, 0x1ff}) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0x20, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xb, 0xa}, {0xfff1}, {0x0, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x400}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x6, 0xfff, 0x7fff, 0x846, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x8}, 0x48) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r6, &(0x7f00000004c0), &(0x7f0000000180)=@tcp6=r7}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f00000002c0)="f9fe", &(0x7f00000004c0)=""/223}, 0x20) 1.900051626s ago: executing program 2 (id=1839): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000010025bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0080000000001000240012800b0001006d616373656300001400028005000a000000000005000c"], 0x4c}}, 0x0) 1.820421352s ago: executing program 2 (id=1841): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e99900000000cc000000e0000001000000002500000000000000e000000100000000000000000000007d791eaa159e5d8b0002"], 0xb8}}, 0x0) 1.734057512s ago: executing program 4 (id=1843): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r2, 0x5) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x80, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x50, 0x2, {{}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x0, 0x0, 0xe, 0x0, 0x7}}]}}}]}, 0x80}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@local, @in6=@local, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x3a, 0x0, 0xee01}, {}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) getsockopt(r7, 0x1, 0x12, &(0x7f00000007c0)=""/177, &(0x7f0000000640)=0xb1) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14, 0x0) setsockopt$packet_int(r8, 0x107, 0x9, &(0x7f0000000140)=0x5, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000004f9718120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000002e000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r11, @ANYBLOB="f364d5e6072333d3197819261c"], 0x1c}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) sendto$packet(r8, &(0x7f0000000180)="dbec4a9478c8c85580e0839ee0876f6a95e623", 0x13, 0x0, &(0x7f0000000200)={0x11, 0xd, r9, 0x1, 0xff, 0x6, @random="faa4ccc359cc"}, 0x14) 1.695915289s ago: executing program 2 (id=1845): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000068000000e0000001000000000006000000000000e000000100000000000000000000007d791eaa159e5d8b0002"], 0xb8}}, 0x0) 1.684593186s ago: executing program 0 (id=1846): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0x9c, &(0x7f0000000000)=""/156}, 0x90) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fcff00000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702728ea4375f52e8a5e15b633f3da4856119a12295e98ddc875d281b5040b62fd1d8a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105040000000000000000000001000085000000000000000001"], 0x0, 0x42}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYRES64=r0], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) socketpair(0x10, 0xa, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r4, &(0x7f0000000ac0), 0x1c, 0xa801) (async) sendmmsg$inet6(r4, &(0x7f0000000ac0), 0x1c, 0xa801) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000380)) (async) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000011c0)="a0", 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @private0}, 0x1c) socket$l2tp6(0xa, 0x2, 0x73) (async) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvfrom(r1, 0x0, 0x0, 0x40000040, 0x0, 0x12) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x68}}, 0x10) shutdown(r6, 0x1) (async) shutdown(r6, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000140)={r9}, &(0x7f0000000180)=0x8) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f00000013c0)=[@in={0x2, 0x4e20, @local}], 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r11, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c008000fce80791bfa3403b31f00c1194283b25c7576ec66f245de36a00396b9127a1b7b35b6ae7133375602b1f1751035dc51899592eb693db410c7d0ebaf3d988deb6f57887db7556370efdd7e80974b9f5a7e007cc3a08f30d4d30d4e8e554e161ffcee774bb66852fc81ebe7c2133c7ebea", @ANYRES16=r12, @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x24008050}, 0x50) 1.586055862s ago: executing program 2 (id=1847): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x0, 0xb8, 0xb8, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0x70, 0xb8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x287, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@cpu={{0x28}}, @common=@unspec=@limit={{0x48}, {0x40000, 0x80000}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket(0x1d, 0x2, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000d00)=@newtclass={0x90, 0x28, 0x403, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb}, {0x5, 0x10}, {0xe, 0x8}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x4}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x20}}}, @c_atm={{0x8}, {0x34, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0x7}}, @TCA_ATM_HDR={0x5, 0x3, "d2"}, @TCA_ATM_HDR={0x1f, 0x3, "ab110e2217750e93d12719034d0c42145f1b9a5b636e6fdc4a8cb8"}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_emit_ethernet(0x8c, &(0x7f0000000f40)={@link_local, @random="86082b9827c1", @void, {@llc={0x4, {@llc={0xfe, 0x42, "0244", "af354a69df76fa6601b1af7bf41e90937a04cd4f1fba5f41e5da5d796c3464acc66f323158624791839100800bf703b3e4f2dfe4ef51c74f445282354413485ab864d12bb02c3247eff4d4a2cd725647c905d94b497022e77212faa827d61bf3882abb9fc057376b9defa14934ed6da679995e643db5140df807"}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x58, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008005}, 0x1) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r5, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_VLANID={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x8040) 1.585828288s ago: executing program 0 (id=1848): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xd, &(0x7f0000000380)=@framed={{}, [@ringbuf_output, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) socketpair$unix(0x1, 0x0, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) 1.315083583s ago: executing program 3 (id=1853): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0002000000000c00000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r3, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB, @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="080001"], 0x90}}, 0x0) 1.160193075s ago: executing program 3 (id=1856): bind$netlink(0xffffffffffffffff, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080), 0xc, 0x0}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000d000000288000001294", 0x2e}], 0x1}, 0x0) 1.051335755s ago: executing program 0 (id=1858): socket(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet(0x2, 0x80001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) accept4(r1, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="4c00000010000104000000000000000000000025", @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x0) 930.011904ms ago: executing program 3 (id=1860): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$sock(r2, &(0x7f0000002280)=[{{&(0x7f0000000280)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-serpent-avx2\x00'}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000540)="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", 0xfb}, {&(0x7f00000006c0)="8835d4322d7e401494e3c044558bbbb2203dbe513c1997b9bf8a2bdd2273bd8d9b8aca9ae3aa0873a9b32f5dfc2af774172210e6843537c752e165c2becced88c9f0daa5e6ce4defe95a25a9cbb3323888bdbc6ec504a694269dcfba890391b96cceedc64753d2952ad76b0227ccee7a719127483d6f37f227a90a26b243e0b7d3c2d12680dd8a1b16912a3fa072b304a63221c9be198990d1d06b38052d3b2b3e80fd7ed4e3f9b4aeecd7d2aa890920d92852a7ba698e123b726d616a6dd03267846ddadeb3243778cc4855b5dda34a7b67db86bc73dde24207e617ef059a725aa282e2a3c6851615579e29dc872b77", 0xf0}], 0x2, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x72d26070}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffffd}}, @txtime={{0x18, 0x1, 0x3d, 0x33}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}], 0x78}}, {{&(0x7f0000000840)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x4, 0x4, {0xa, 0x81, 0x4, @private1, 0x8}}}, 0x80, &(0x7f0000002180)=[{&(0x7f0000000d40)="332bdc504a86176b19c8a2637c71a35804bcc7bf1ccdfa34057f5258c9996d0f9d8daf762fa1f3736c057139756c378eb904a114cd1aeec4f3634cb2a383af1e3986ed9f0c1de33cf82bd3986802635340ed7a7f7065525f5431b2cd96888742ecd5bbb798e68ab85f7d069992cb3f82e1b85aa9ff1df413a834fcd7030b8840f8a62a1350ee199567d7165b1092618817ebd5a385885c9694a15ecf15beda485a9d2a80b5253f5fc4959782eb380eb28a22d3f61c17a32d221c1a927271f9b919b4bfda9b1db487587dd1e8e4406b69796f83c14e2a9f16b9a06e35c0cab17724fdc97ff206e7914c", 0xe9}, {&(0x7f0000000e40)="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", 0xffe}, {&(0x7f0000000980)="ead5c4f708b35c541032c885ef9406069f0682f374eb45594cb560f66a23dedcc2802fa72fee18125f78ac21bb7d5a9dbcffce2ff42df88198b9f714a3d60cba2c742b6a1d717eb623d049d7af09fe9c38852e97dc14aca08998a8fceced29761e2ecff69ec93463e37a28c79180bf915128d832feced6a71ec2990a55b02c1ffb145916114904d4f0ed1e919ac76d2d07d2608007a20788fba24f33c62d9687a9f6ca9c99d5ef83aaeb0b33a93ff49cb4388bf2", 0xb4}, {&(0x7f0000001e40)="e61aa6ad2cb9ec454f4a4e58153ffe350317eac91bd2505362c68caf18ea7ed34a97329205ea9e427ad35099a5227114ac6a5f83aad38e7f063c3e15384a", 0x3e}, {&(0x7f0000001e80)="a9a500bbf7ebef2f8011adeb4df8fde22db1aaae500af3214c4c39f9eeb15508ce684dadc1b2568f379731b0adaed65e284421d594b1f8195570e3938b02a8c513157d6cdf824559cc048e6508fd673e315b0b7366a4fc650950d68719b6e801384b4503284817006157835462125a9cee63fecdb53a95076f437a1b47cc77de64768ef8ed000643d4d2d8d61b6c7287992ffb16c7d94a2fa96542a1486b6975ace00db2c350e8064c209a0a54d030cb11d3e65adad1822b5736033edf737ec95592c5981995fe28b1df02bc32d55e199de8066d", 0xd4}, {&(0x7f0000001f80)="f8dc147ad453ae8ba1b7325bc4a5ef34764e79fd894cf1eeef243e5f4881c6380acd9902784e32c94d4b468ec771776bc4cfa4646a551dff32fb8ace48a38df09fb7ca929c46318e68309c8033df2fc7d4a9c03203a10fa5346665add6ccb6fd82f4999240258feef91b60dc9981f7452459e73acd48df3a760af83400d035972f4eb607e44bf740a76ca7514e5968f1931757889eebaa09", 0x98}, {&(0x7f0000002140)="2b7287ecdb49128747d2023945a53474c73690907ed96181ae92e7edbf854e3895f9a6170695eb7324ee1ae9ad6cc86c3177adb125f2ecd37c77ccbca16ac7", 0x3f}], 0x7, &(0x7f0000002200)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x74}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x200}}], 0x78}}], 0x2, 0x44004) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="e05297b88fc15320adf94b2a448f1e336efb19fd1da3e33190492625e7307f42ab0e61eb82b0b7ae7bfe9f09fc501683f0a8014dac8e7129402a95846197ed1bbc92bc166f", 0x45}, {&(0x7f0000000100)="0128b4cb383b48d7f6a7794fa361fddc7dbe0114be098676bdac52ae4ac8f5cdc99858119360492d8ebc51af4bc42b04ae7564b5befb0701c10da8", 0x3b}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={r4}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="fc010000", @ANYRES16=r7, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x8000000}, 0x20040000) socket$nl_netfilter(0x10, 0x3, 0xc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000002480)={0x0, 0xff, "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"}, &(0x7f0000002040)=0x107) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r6, 0x84, 0xf, &(0x7f0000002080)={r8, @in6={{0xa, 0x4e21, 0x6, @loopback, 0x5}}, 0x1000, 0x6e, 0x1, 0x1ff, 0x62}, &(0x7f00000025c0)=0x98) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000110400"/20, @ANYRES32=r10, @ANYBLOB="000000000000000008000400000000000c001a80080002"], 0x34}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000ffdbdf2501000a000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c000780"], 0x60}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000002440)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002400)={&(0x7f00000023c0)={0x20, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4850}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x44e, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002340)={&(0x7f0000002300)='sched_kthread_work_execute_start\x00', r1}, 0x10) 893.690976ms ago: executing program 1 (id=1861): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_retopts={{0x24, 0xd000000, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@remote]}, @rr={0x7, 0xb, 0x8, [@multicast1, @private]}]}}}], 0x28}, 0x0) 873.504886ms ago: executing program 0 (id=1862): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="d800000019008111e0020f060d8107040a60090000bed7f95c0255a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b94002000009080016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbaea8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3f39cf02c8bd056d2ddf467037c2c5fb6927f1677cd8b239d3a78091c217a6d1f3adca5bbc244562e07aeaaac31b2d33ae37eb1feb76", 0xd8}], 0x1, 0x0, 0x0, 0x15000000}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000002c0)=0x5, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x47, &(0x7f0000000080)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x89, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}, "75a03d97e1"}}}}}}}, 0x0) 805.842767ms ago: executing program 3 (id=1863): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f00000004c0)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000001000)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0xbf, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x10001}, @exit, @cb_func={0x18, 0x2, 0x4, 0x0, 0x8}, @exit], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={0x0, 0x2cc}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) close(r0) (async) close(r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8002004}, 0xc, &(0x7f0000000480)={&(0x7f0000000780)=@gettfilter={0x44, 0x2e, 0x200, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa}, {0xa, 0xe}, {0x0, 0xe}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2353}, {0x8, 0xb, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x44081) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000006b1afc0a86145011647f0ac4988ed09ba6d331fc9e2f6fa5c03c08fe0c3063546ba80bb4cbf226a47b0506b06a80a26c420475dcbb9ed01eea980045eb74c165e58b26bc6ab3a5a75669082796df73a7aaf6c8f2acbd", @ANYRES32=r8], 0x18}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=ANY=[@ANYBLOB="0000000000000000006b1afc0a86145011647f0ac4988ed09ba6d331fc9e2f6fa5c03c08fe0c3063546ba80bb4cbf226a47b0506b06a80a26c420475dcbb9ed01eea980045eb74c165e58b26bc6ab3a5a75669082796df73a7aaf6c8f2acbd", @ANYRES32=r8], 0x18}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)={0x5a4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff0545}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xa256, 0x1, 0x0, 0x7}, {0x6, 0x7, 0xde, 0x3d25}, {0xec, 0x80, 0x1, 0x7fffffff}, {0x0, 0x8b, 0xff, 0x7e}, {0x0, 0x1, 0x1, 0x9}, {0x9, 0x3, 0xbd, 0x3}, {0x101, 0x1f, 0x80, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x5a4}}, 0x800) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000940)={0x5a4, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x190, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff0545}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xa256, 0x1, 0x0, 0x7}, {0x6, 0x7, 0xde, 0x3d25}, {0xec, 0x80, 0x1, 0x7fffffff}, {0x0, 0x8b, 0xff, 0x7e}, {0x0, 0x1, 0x1, 0x9}, {0x9, 0x3, 0xbd, 0x3}, {0x101, 0x1f, 0x80, 0x7}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}]}, 0x5a4}}, 0x800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) 805.620385ms ago: executing program 4 (id=1864): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@sack_perm], 0x1) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0xfffffffffffffc9f, 0x20000805, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020001000003be8c5e687a8a6a003300020100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac00001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8) recvmsg(r2, &(0x7f00000008c0)={&(0x7f0000000200)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000400)=""/137, 0x89}, {&(0x7f0000000680)=""/201, 0xc9}], 0x2, &(0x7f00000007c0)=""/236, 0xec}, 0x10000) 767.634778ms ago: executing program 0 (id=1865): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x4800, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400000000007fff0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB="c6397b1a6d63faedbc4e5359195caf41cc84b37ff766fd7e36eb39876f9afa8ab2007358455d0de3aac48a74661ff9cb498b504535154eb579450c41b18e338b31c2828ece5ab6fd011dfa8ac17a8dc82981234c2f46fbc33b8f925f80b1ba1033060000000000000003641b4d8517ffff00000000000091384963fdff10cb06dd97016334ed2d4d8104e387178da5ddb5eb96edc5d62a6e3430de8005a816"], 0x3c}}, 0x0) 751.511726ms ago: executing program 1 (id=1866): setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/230, 0xe6}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) (fail_nth: 8) 698.149933ms ago: executing program 4 (id=1867): socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) socket$rxrpc(0x21, 0x2, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r4}, 0x10) write$binfmt_script(r1, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)={@map=0x1}, 0x20) 662.741832ms ago: executing program 4 (id=1868): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000240), 0x4) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00005a3c7fca000024001280090001007866726d0000000014000280080001000413000008000200020000"], 0x5c}}, 0x0) 625.369153ms ago: executing program 3 (id=1869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000003cb7d051000000000a54000000060a0b440000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001f0800014000007f50f1a7e76946000d0900010073797a3000000000090002007379fa3200f2ffff13000000110001000000000000"], 0x7c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r4, 0x29, 0x31, &(0x7f0000000080)=0xff, 0x4) listen(r4, 0x20000005) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f00000001c0), 0x0, 0x40811) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000840)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c70a236c60294e710f24fac078bd0c2b2a5096b42e82ee34e22275e9378e4285001fb27614128328f51886dada13bd8113ea18036ff9e09ad93fbba47ce7f55a93688714cbdefd780c93a6e50696a115d2501edf9af91a88d8c0c297179127530f19caa4fc8689bb228697af528b8ef1176bcf59b7e25e1f7332c7328b854d7a18047b08f4b7598ed03f23dd7ac1fb99172c9d0f564c1a750dd6f2", @ANYRES16=r3, @ANYRES16], 0x160}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$inet6(r0, &(0x7f0000002380)="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", 0xfffffffffffffced, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000033c0)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000bc0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/231, 0xe7, 0x0, 0x0}, &(0x7f0000000c00)=0x40) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r2) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="20003126d337000000000e000000"], 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x4000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f00000007c0), &(0x7f0000000800)=0x4) 306.259285ms ago: executing program 4 (id=1870): socket$inet(0x2, 0x0, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)={0x14, r1, 0x50e30db85b07bfe3, 0xa6}, 0x14}}, 0x0) 306.155866ms ago: executing program 1 (id=1871): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="2c0050801800088004000100040001000400010004000109040002000800088000000000050006"], 0x48}, 0x1, 0x700000000000000}, 0x0) 299.409836ms ago: executing program 3 (id=1872): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16, @ANYRESHEX=r0], 0xc8}}, 0x40001) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r3, &(0x7f0000000100)="c0bb43c62978f6f6cdf30f0a2aa14b0bc55d904ba0ce2bdbc64d6f3fbd16ef0c9b7a50ea6829f5dce81543ca5bd4f82c861966aacad32df6e26805ce79575974e9ae82ae4be7156b4299879110b987a55426fc4f4396d986a0dcf8169a4a41572c81aa6b9e8ea3db1193b79831bc5f93cbf64524a182a479cf721bc5d58cbf3d991b7e75e2c7ad4d5cdb7232c6cd6e44d95ff76972f3858488be7c18c6df3951092b4db2deeadf6d1292f1e8492212912b23f8cf54da50a3f0365eb3fb09336ef88bb4d5b207051ac57e863a43473ec16d49a5141f55d1ae7229"}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340), 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000000)={'wlan0\x00'}) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00000031c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0904000000000000000002000000500004804c0001800a00010072616e67650000003c000280080001400000000008000240000000001c0004800f0001000bf1bf032cf7b34f9a9702009400d3f9e20000000c00038005000100430000000900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r2, &(0x7f0000005a40)={0xa, 0x4e24, 0x80000000, @private2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4bb2073841e60c1) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, 0x0) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x0) 279.847084ms ago: executing program 0 (id=1873): bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) 234.196376ms ago: executing program 2 (id=1874): bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="3f000000010000", 0x7) (fail_nth: 1) 169.132871ms ago: executing program 1 (id=1875): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080042fe3d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f75000000000000bf5400000000000007040000f0fff8ffad420100000000009500000000000000050000000000000095000000000000001c0a7900009d3c2792432a4fa650c512aee994a56462712cb064ecce5e7a9ce0a575a4f7952cb768637e60bd5d2e4b5992de991371274fdf535e001022e25659a7c85615c1b88bc894123c090014e8fb87efecdcb73858479526222b22ff81971ef49b2cb0dcebea6d90e9c1677fbefd35893d883a2c559b7af8db8b2d89fcc8af461b2a74af360eace66cec40d927006bd666c8122217c27902b3933106d0cc5bf6fec345ae9606c3c1a3000c94df67ae600900ffa2f49ec035883e27b1a9e9dff3e8bfc7d1be00f1a0820102b19000000000000000009095601e090012086dee84efd375f0642ed261765d3b9efdfbed9b430bcf04060000bdff1c8bcfc00300000000000000ab5d5f299354997c8bef9ca55841a57eddff9220c67c9e17bee524c3dc74c0271124cf9e4e2d23f7062351edf77c7129eb89085967722da6cb884d1afe82f7f722e38397996271700241094d272dd8b754b2dd36d486e7ffd1bdc198deb495cac0995ca3ef6c1affb693ae366b0f11db6ee4830d87a347d448b0737e852306b4713e5ce6cac6a27e29f164b9f16d6f045271b8e9f172c3db24558d77b8bf18be45c50b3fc005fa7b5e45a209d48d6dc2389d7f34cb9c02cf517c8ee8a9b6159ce895101c2ccff2bde95aa860ed9b8b6d6b8fcab7663d9bd8415e6f90fdb007b8f3e0ffe3a638c4fd88d20d235173720c1df1147c9f5013c82fc98604bd70cd56609a6b73943748a900e1d8cf81bcb1d2620bee688eb0a284040000005cc3ba8bf0b5e0fc018463d03a73fa85429725545128b0e9b550a13d0dd35092250b7d00ff03d5314fa8d37932055bb6d30d0000cad2375a34c7f15c3096f31e6aa6887864f62760ae35214552982bba84d92b1261251330dde4cf97b7cc6b2349e4f7a56003f7303d210fccd2efe6cda2595aacc36db66ff83af576b56dfbd40b15d569244d7d6e1182c4fa829c3f86acd17082bfed73ab9ef37705f9d2734801899e248e1a7155e28f000000000000000fce52263e3953a6f8560f852602ca905b58a9e2dbf16dd0322d0bb3ceb1b01752230bcbbf731701b2b1768aabb9a002090c09ab606e91ad9d88e7205464594add8691b62d55127cd891b8abe4358697e1b5f038773c0aa220cdce78b9346adbd72b293e66ef1a04905aaf6bd31e8d40d425d21232956ee45935d7adb2bf9fb37ff145472c58dbc8db58d0cde99df77d86ed71070000000000006d5cf959fb84c9f8ec46ec9af313d13d1bd85d57f598c00eb7bb8b6b4ff5875a50e2ea3287cf0f838bffdbf985fdce1fb66979b51cc6d6d6661354f33986f7acee499e25e3b70db6f15d7f2bfc0000000000000000c9c9ac899eeb78c3d2e83f5e0eaf5cec82f45884cb0394271826ac2d5cc0afc4e784b515c659901c5c6a8573436be7b0f64c6176ef37db239a1ee9839436e951aef4196798d518a4820a241cec1b3e4923dae4c87d460900000000000000de7b13645fc6921a759e2c23153f432a3e5167628a94aacd0f40543049d8ef9787b56006227f143ce5554837675b93eeced66fe71bbe2c055660d23af1c9a83b78d0fde1f9dd526858a320563807a1ef41829913ce0b280010dca0cb3a98a8986e8e656dcaa6ae4ee6717a29e50450688763f1b17c156b860ba0d5a121d00ceac30ef5e104c43d76074c3884cb8fa504ebc94f7c83e90b6cad8d2a02df007bd585f4472cfb004cd9f09995000000000021000002cfceb7feffffffffffffffb1a6c40ac666744ca6c8fbba8452b686fd9b6250edd7d86ebc35898637dd88540e40d5799c11ee9883be26229eeee3941494fcd4389af9b755843126338c346b4d50a5b8684ad74bad46f4ffd862a6d72a933fcb7304aef4b4a4bf6e054fea3549e08c0dd2334f485da9382887c16306176f73f029e2f9f8145360cfd5ffd66ae82d51e683ff364981b358a5f48af10059a0716951942eed021e41ba076d486cd095ffcefc3e8b8ead226c5a640b06fc13311826d024248f14b62a7fb0f9b95c9e23e7d29aca69e77db40dd00c0b20e43e300b1a46e243e2a8321dbb1270a22d9a2368de08d625566f253f0760abb44c11583fa5b914ab298ade422e4c0ddc7b17dd2aa8ac94d93d6b590000000000000000000000009b90eb1db265c18521667d305886e9c47ad357a76be0c9ce899bdd80a51a2017190a590d092bc500ea71b338098d1007517c1d6e785d5e0975ca2c2edf221b30377e61fce8bf47e7b93da593d154caca75b1ef1273aa501807005593ba45d219d7c656be0fb900000000004093461ceec5fce099368e07060c21cabb846f2447fc72be9925b2f568b15e5d22c8fabbfd3edac460c70a5619a043ada38fea3b104f9c1a473b7820faecfbb40b5e0d3681013c0cb2b8acc1ceb5f790210a3be07b2727c4e5a5d20468b3ed35f9a71519904c6dd76dee5738dcdac1f4358bb65c1aca8eb0a65aacbaaca92cc7cc553b1c5181d81c15ff4eaea3bcbfc4e0d06bd8d2e2d941924f860f2aba2253b9038e6923b026b7ece3e9fcdf6aa14a65bd6cd7e78457dac1fb3cdc421d6059e17d44e378189035c2fe489e5b7a87c23ec952e2affbc7a4c707312b17a5f428527cb42a8cbd072490eae617e6ea32ee7d3055bfc9b1128553cb963d3873115296a8bd2efb7368ea2727b294d6eceee49ad9093738a3b1bbfa163a917380953fdc3a443a6585925ee14a817390a655c1988632a414b304d688116d79693efd80b293ddc89bb27529c34f4f8ee3ddbaf1c13a4e15186353efd0ced475794ff5f9b0580f2fb996928f0ca6d1a9f4bda1fe9c1bc2e657448c00ca6afb2e5b1c336d657c87f2634db46e2e8e82366a2de4dd41ca0a26ab49d5d357e5a8af73d9504af230513acadd2f0d9d99c4b6e4ebf68582cf8dc4dac990b216a6a216b0cae87a2339fda14e546b224857f758cb64ca2dcdf32b5420ad9f33dbaeb36b7466c5129508d57329f57ac682757e398c4d2a6f93fb1dfc2c840e06bd6c0d7ceedc3721b19c7c9fc1645cf32d79807c4d3e0898ae2a829df5c03834bc2558aeed652399a9cf9e5c859d3c5c5341b329fea445d2e040562a813c35ed1c1afab50aeb12eea9456adf21953947413c03af836bc339355250daeaca253f809493c75c9dcdbae3a76753d593623348e82b1e9c5480fd099b6322b6c6158ebe8ecba0ab364ce4a58e244b76d16b81905878c4caaad1f54cc11df97a50356638016a7e50a92ee55af3c64ae2b95653373d3471c0f26119e18426fae7739a9031618635a257cf58b1e9b8264b6543d6c1c372b66d9a5f96198ae01beeb398744ac4b6f26b568cd7b792039ac4e10f9307b1a8dc268a5d2af3dbce55fdac6d1a158a2243c679261aa080acdf0d55753d3163664df7e4129f12f850c694dc140cf9380687da9914be848a01bc7f5278eb3c3210664b62743887b822814c58a3304b392c7e2a6e64576248af87c0f995af921be86e8102d8343c0de8cda3512f84c894ed6c0206e41443c456467c42ff9ddad36e882cc5287394aedd8d413a061a2894f2ef5fc3072fc8a0c5c2a9f94954278c3d67a0b0fa6e002ce0840e3405d166f037a6e678ce1af6ed9c6e7023f8663d294f4bee1effc148e096d2eb91903c482548c0c5b135a31ae6903a9cb9a40a89155ce15dbe3e373a7ac4c7b4d391bdac5268b2d419f13aeb86f68725a4633eb883417bc23243a302ccc919e0b141ae8aeb7457264f8cad663255db96efda704cef9428ffeb16acd3295a36b1e514ecf65944d5c754e02410075714612e7841e6c7e1e2366bd6ccf335ac9dd35332ee78aaa2ff6950c81fd53db93dcebe8b9c42aeefaf63150d649bd1542014ac64daaec18e82854454967e37a6dccea142f2504a6aba4dd44594c230101a4574d56a1ff4f5b7dd246f7d607ff6f8bebf4fd7e709122f3129bec4dd5b4129829d15d1d3b1fb82e341a325f7863c5035bc6a35a6568b35327a8364d98bdf516e27b57976af232128856692b491469c525eb2a48d4794459dae9213bd0088206f364f8c2c727e3e1d1a3ca9f1b40fea92bfea26189d3bf91e92c1e8795334cc268e0b31cd354701eff8adfa247b848b0ae203f78380b818c0afbe01efec884ff0a6cecfb726886bbdaf78ed3ebc40556b434d0fd81799d96cf302e1115c8cda0b4c7f27c8b4ad1a5808f6b908816ca7483f94fbb8391e6533833470c9c3352d70ae03bc8479e64caf16d5fabe77519aa196fcfb4e480620ef153a09e1dd59490ffab33976fba5b3126dc509e4cbc94bd59f745319efc4523e1f0387968be039a920a0abc8aef753f82ca796055bf28affa706df1312a898162454ff9010ee5fa95d56fa3e8ab283481c20d0fa2b3149a54c268d2b77ad6ce63f97e10bf3baa14dc7a4492587ae1e26237787231d000000000000000000000000003ef8cbcd3ffe8d35974cbb469c41e8ad0b58c5376c4fa943d02a4bd12dab3cab9ef4e62cb10820de0d87ddd79f820879e4ad8868f81cf931760d5c6b9c7337e8efcaa4e63eed8e3eb668f104cf1fa53fb300acb4bd61371d6f12165e9814d2517cba3403530d06737da5cb6ca5996af9a16cca9853430842bdf0995c53681e4a2b0bd1fdaeb0e7839669aed97a6f6f25f7de9ba0ea23384b85957faf49d62dba00af3c7e3c817e13e63c487fc167f2aff6e5a250937bb43b0a8e9d12ff551e6cc2d304aec2a5d843ea327c0a3379594726b92b1919367f3b1711087f160503b3b37170579ce2a664b21d86aca4cf19c1f36d264b0b7ba3de1e020601418d981c6f596e48d5cebe4ff0fb8046e87a5c4d95c07935"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x39}, 0x48) 264.008µs ago: executing program 1 (id=1876): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000300000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28000000030601040000feffffffffffffff000005000100070000000900020073797a31"], 0x28}, 0x1, 0xfcffffffffffffff}, 0x0) 0s ago: executing program 1 (id=1877): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000440), 0x4) (async) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) (async) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'veth1_to_batadv\x00', 0x400}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="71cab2ebd1d0ec5c00003d0000004600004000000000008490783fffffffac1414aa00000000657bbedb8e82bac69a93546581da06722c9e7b489371d3ad9928f85c3026ce52f7180241eed3a2665daf8c", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b4fe00009078001c0e0302050200000000000000000002d58838068b91000000"], 0x4e) (async) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c800) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000050000000000000072b9682618110000", @ANYRES32, @ANYBLOB="0000010000000000b702000014000000b7030000000000008500000083000000bf0900000000000055c3c900000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xa}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000a00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x400448ca, 0x0) (async) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x5}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@local}}, 0xe8) (async) close(r5) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socket$packet(0x11, 0x0, 0x300) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0), 0x12) kernel console output (not intermixed with test programs): _slave_1) entered forwarding state [ 64.740668][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.832396][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.839592][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.872932][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.880099][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.895619][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.915578][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.963291][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.159873][ T5089] veth0_vlan: entered promiscuous mode [ 65.215265][ T5089] veth1_vlan: entered promiscuous mode [ 65.234578][ T5098] veth0_vlan: entered promiscuous mode [ 65.287104][ T5098] veth1_vlan: entered promiscuous mode [ 65.328165][ T5089] veth0_macvtap: entered promiscuous mode [ 65.387180][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.415248][ T5089] veth1_macvtap: entered promiscuous mode [ 65.428695][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.513353][ T5098] veth0_macvtap: entered promiscuous mode [ 65.532447][ T5098] veth1_macvtap: entered promiscuous mode [ 65.554515][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.568508][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.584128][ T5086] veth0_vlan: entered promiscuous mode [ 65.604976][ T5086] veth1_vlan: entered promiscuous mode [ 65.615437][ T5091] veth0_vlan: entered promiscuous mode [ 65.623696][ T5089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.633920][ T5089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.642846][ T5089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.651877][ T5089] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.685780][ T5091] veth1_vlan: entered promiscuous mode [ 65.715790][ T5097] veth0_vlan: entered promiscuous mode [ 65.755009][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.765927][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.778984][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.813795][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.824694][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.841285][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.864255][ T5097] veth1_vlan: entered promiscuous mode [ 65.894577][ T5086] veth0_macvtap: entered promiscuous mode [ 65.920402][ T5098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.929130][ T5098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.943298][ T5098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.952183][ T5098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.965341][ T5086] veth1_macvtap: entered promiscuous mode [ 65.990321][ T2799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.001889][ T2799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.047735][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.058717][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.078123][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.079779][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.095460][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.106152][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.118085][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.128978][ T5091] veth0_macvtap: entered promiscuous mode [ 66.147817][ T5091] veth1_macvtap: entered promiscuous mode [ 66.163216][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.174153][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.185276][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.196723][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.208393][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.227472][ T5086] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.238495][ T5086] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.247488][ T5086] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.256297][ T5086] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.280465][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.294475][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.305590][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.316640][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.327312][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.337871][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.350922][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.376455][ T5097] veth0_macvtap: entered promiscuous mode [ 66.390107][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.401915][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.412055][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.422779][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.432706][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.443341][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.454373][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.470263][ T5099] Bluetooth: hci4: command tx timeout [ 66.470384][ T5105] Bluetooth: hci0: command tx timeout [ 66.475691][ T5099] Bluetooth: hci1: command tx timeout [ 66.504202][ T5097] veth1_macvtap: entered promiscuous mode [ 66.549811][ T5099] Bluetooth: hci3: command tx timeout [ 66.560631][ T5099] Bluetooth: hci2: command tx timeout [ 66.581325][ T5091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.590223][ T5091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.598972][ T5091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.608782][ T5091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.664980][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.677951][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.689346][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.700835][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.713989][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.724514][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.737879][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.754857][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.765160][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.793416][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.811180][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.842251][ T5176] netlink: 'syz.2.6': attribute type 21 has an invalid length. [ 66.850505][ T5176] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6'. [ 66.860024][ T5176] netlink: 'syz.2.6': attribute type 4 has an invalid length. [ 66.867572][ T5176] netlink: 'syz.2.6': attribute type 5 has an invalid length. [ 66.877557][ T5176] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6'. [ 66.928144][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.949038][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.968932][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.980132][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.993522][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.004459][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.014713][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.026369][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.037931][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.064674][ T5179] ɶƣ0GCTw: entered promiscuous mode [ 67.077643][ T5097] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.086852][ T5097] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.096180][ T5097] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.105645][ T5097] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.132591][ T2799] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.152237][ T2799] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.218701][ T5182] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 67.236522][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.260212][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.332190][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.364353][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.438294][ T2811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.473227][ T2811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.574956][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.592064][ T5192] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 67.616918][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.618184][ T2799] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.686062][ T2799] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.862271][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.880845][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 67.907070][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.939957][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12'. [ 68.004251][ T5206] openvswitch: netlink: Message has 4 unknown bytes. [ 68.044846][ T5209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 68.157441][ T5209] netlink: 'syz.2.14': attribute type 1 has an invalid length. [ 68.184439][ T5209] netlink: 244 bytes leftover after parsing attributes in process `syz.2.14'. [ 68.240297][ T5214] netlink: 'syz.1.16': attribute type 34 has an invalid length. [ 68.317204][ T5219] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.550158][ T5094] Bluetooth: hci4: command tx timeout [ 68.555716][ T5105] Bluetooth: hci1: command tx timeout [ 68.561549][ T5099] Bluetooth: hci0: command tx timeout [ 68.629783][ T5094] Bluetooth: hci3: command tx timeout [ 68.635386][ T5099] Bluetooth: hci2: command tx timeout [ 68.650302][ T5233] netlink: 104 bytes leftover after parsing attributes in process `syz.1.22'. [ 68.938270][ T5251] netlink: 'syz.4.27': attribute type 3 has an invalid length. [ 68.976813][ T5255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 69.014753][ T5255] netlink: zone id is out of range [ 69.038546][ T5255] netlink: zone id is out of range [ 69.068441][ T5255] netlink: zone id is out of range [ 69.094379][ T5255] netlink: zone id is out of range [ 69.141130][ T5255] netlink: zone id is out of range [ 69.180159][ T5255] netlink: zone id is out of range [ 69.214905][ T5255] netlink: zone id is out of range [ 69.277632][ T5255] netlink: zone id is out of range [ 69.320284][ T5255] netlink: set zone limit has 4 unknown bytes [ 69.472985][ T5281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.36'. [ 69.544283][ T5282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'. [ 69.581647][ T5282] gretap0: entered promiscuous mode [ 69.673123][ T5290] netem: unknown loss type 0 [ 69.691598][ T5290] netem: change failed [ 69.877211][ T5303] FAULT_INJECTION: forcing a failure. [ 69.877211][ T5303] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.915118][ T5301] netlink: 'syz.0.42': attribute type 4 has an invalid length. [ 69.930855][ T5303] CPU: 1 PID: 5303 Comm: syz.1.45 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 69.940793][ T5303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 69.950882][ T5303] Call Trace: [ 69.954166][ T5303] [ 69.957103][ T5303] dump_stack_lvl+0x241/0x360 [ 69.961816][ T5303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.967041][ T5303] ? __pfx__printk+0x10/0x10 [ 69.971650][ T5303] ? __pfx_lock_release+0x10/0x10 [ 69.976698][ T5303] should_fail_ex+0x3b0/0x4e0 [ 69.981403][ T5303] _copy_from_user+0x2f/0xe0 [ 69.986010][ T5303] copy_msghdr_from_user+0xae/0x680 [ 69.991234][ T5303] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 69.997075][ T5303] do_recvmmsg+0x40f/0xae0 [ 70.001516][ T5303] ? __pfx_lock_release+0x10/0x10 [ 70.006561][ T5303] ? __pfx_do_recvmmsg+0x10/0x10 [ 70.011537][ T5303] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 70.017449][ T5303] ? ksys_write+0x23e/0x2c0 [ 70.021969][ T5303] ? __pfx_lock_release+0x10/0x10 [ 70.027012][ T5303] ? vfs_write+0x7c4/0xc90 [ 70.031442][ T5303] ? __mutex_unlock_slowpath+0x21d/0x750 [ 70.037078][ T5303] ? __fget_files+0x3f6/0x470 [ 70.041763][ T5303] __x64_sys_recvmmsg+0x199/0x250 [ 70.046785][ T5303] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 70.052327][ T5303] ? do_syscall_64+0x100/0x230 [ 70.057082][ T5303] ? do_syscall_64+0xb6/0x230 [ 70.061748][ T5303] do_syscall_64+0xf3/0x230 [ 70.066240][ T5303] ? clear_bhb_loop+0x35/0x90 [ 70.070915][ T5303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.076807][ T5303] RIP: 0033:0x7f53ac375bd9 [ 70.081224][ T5303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.100825][ T5303] RSP: 002b:00007f53ad12c048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 70.109237][ T5303] RAX: ffffffffffffffda RBX: 00007f53ac503f60 RCX: 00007f53ac375bd9 [ 70.117205][ T5303] RDX: 0400000000000179 RSI: 0000000020000480 RDI: 0000000000000003 [ 70.125164][ T5303] RBP: 00007f53ad12c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.133125][ T5303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.141086][ T5303] R13: 000000000000000b R14: 00007f53ac503f60 R15: 00007ffe5f44c828 [ 70.149057][ T5303] [ 70.632545][ T5336] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 70.679350][ T5333] netem: unknown loss type 0 [ 70.698159][ T5333] netem: change failed [ 70.726608][ T5340] syz_tun: entered promiscuous mode [ 70.741705][ T5340] macsec1: entered promiscuous mode [ 70.749870][ T5340] macsec1: entered allmulticast mode [ 70.755266][ T5340] syz_tun: entered allmulticast mode [ 70.890225][ T5346] netlink: 'syz.0.61': attribute type 1 has an invalid length. [ 70.971165][ T5350] Bluetooth: MGMT ver 1.22 [ 71.586488][ T5381] netlink: 'syz.2.76': attribute type 5 has an invalid length. [ 71.591169][ T5377] netlink: 'syz.3.73': attribute type 1 has an invalid length. [ 71.743873][ T5389] IPVS: length: 215 != 24 [ 71.757298][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.765868][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.003143][ T5397] __nla_validate_parse: 18 callbacks suppressed [ 72.003162][ T5397] netlink: 44 bytes leftover after parsing attributes in process `syz.2.80'. [ 72.042480][ T5400] netlink: 'syz.1.79': attribute type 13 has an invalid length. [ 72.220820][ T5408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 72.408945][ T5415] netlink: 11 bytes leftover after parsing attributes in process `syz.4.86'. [ 72.733400][ T5432] ɶƣ0GCTw: entered promiscuous mode [ 72.823476][ T5435] netlink: 'syz.2.94': attribute type 10 has an invalid length. [ 72.864022][ T5435] bridge0: port 3(netdevsim0) entered blocking state [ 72.881955][ T5435] bridge0: port 3(netdevsim0) entered disabled state [ 72.892325][ T5435] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 72.901932][ T5435] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 72.946472][ T5437] dummy0: entered promiscuous mode [ 72.989908][ T5437] dummy0: left promiscuous mode [ 73.035565][ T5099] Bluetooth: hci0: command tx timeout [ 73.112743][ T5441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 73.293461][ T5445] syz_tun: entered promiscuous mode [ 73.337576][ T5445] ip6gretap0: entered promiscuous mode [ 73.674656][ T5462] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.766207][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.774727][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.834822][ T5472] rdma_op ffff88807c9be9f0 conn xmit_rdma 0000000000000000 [ 73.837197][ T5467] bridge0: entered promiscuous mode [ 73.901029][ T5475] dummy0: entered promiscuous mode [ 73.945940][ T5475] dummy0: left promiscuous mode [ 73.998232][ T5479] netlink: 32 bytes leftover after parsing attributes in process `syz.2.112'. [ 74.084364][ T5487] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'. [ 74.161882][ T5487] : entered promiscuous mode [ 74.174640][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 74.186234][ T5485] netlink: 'syz.4.114': attribute type 20 has an invalid length. [ 74.289450][ T5495] netlink: 'syz.0.116': attribute type 10 has an invalid length. [ 74.362547][ T5495] bridge0: port 3(netdevsim0) entered blocking state [ 74.392826][ T5495] bridge0: port 3(netdevsim0) entered disabled state [ 74.429495][ T5495] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 74.446585][ T5495] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 74.492895][ T5501] macvlan2: entered promiscuous mode [ 74.519516][ T5501] macvlan2: entered allmulticast mode [ 74.525679][ T5501] bond_slave_0: entered promiscuous mode [ 74.531695][ T5501] bond_slave_1: entered promiscuous mode [ 74.579716][ T5501] bond0: entered allmulticast mode [ 74.592462][ T5501] bond_slave_0: entered allmulticast mode [ 74.606328][ T5501] bond_slave_1: entered allmulticast mode [ 74.639396][ T5501] bond0: entered promiscuous mode [ 74.661761][ T5501] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 74.705648][ T5501] team0: Port device macvlan2 added [ 74.715327][ T5514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'. [ 74.846796][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 74.868191][ T5524] block nbd0: not configured, cannot reconfigure [ 75.153968][ T5538] vlan2: entered allmulticast mode [ 75.182867][ T5547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.129'. [ 75.207147][ T5538] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 75.250956][ T5538] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 75.955308][ T5587] netem: unknown loss type 0 [ 75.965606][ T5587] netem: change failed [ 76.260467][ T5598] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 76.493304][ T5609] openvswitch: : Dropping previously announced user features [ 76.711871][ T5622] netem: unknown loss type 0 [ 76.729404][ T5622] netem: change failed [ 76.834702][ T5625] tipc: Started in network mode [ 76.859384][ T5625] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 76.875884][ T785] cfg80211: failed to load regulatory.db [ 76.882232][ T5625] tipc: Enabling of bearer rejected, failed to enable media [ 76.938500][ T5627] ieee802154 phy0 wpan0: encryption failed: -22 [ 77.206350][ T5641] __nla_validate_parse: 18 callbacks suppressed [ 77.206369][ T5641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.166'. [ 77.394274][ T5650] netlink: 728 bytes leftover after parsing attributes in process `syz.4.170'. [ 77.430882][ T5649] netlink: 'syz.1.169': attribute type 13 has an invalid length. [ 77.490720][ T5650] netem: unknown loss type 0 [ 77.495405][ T5650] netem: change failed [ 77.546049][ T5651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.170'. [ 77.577056][ T5655] netlink: 244 bytes leftover after parsing attributes in process `syz.2.172'. [ 77.635628][ T5651] netlink: 180 bytes leftover after parsing attributes in process `syz.4.170'. [ 77.645877][ T5657] netlink: 44 bytes leftover after parsing attributes in process `syz.1.173'. [ 77.685603][ T5651] netlink: 2776 bytes leftover after parsing attributes in process `syz.4.170'. [ 77.907995][ T5662] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.175'. [ 77.943746][ T5094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 77.958355][ T5094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 77.967034][ T5662] net_ratelimit: 12 callbacks suppressed [ 77.967053][ T5662] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 78.020067][ T5094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 78.036336][ T5094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 78.045691][ T5094] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 78.048709][ T5679] Can't find ip_set type bitmap:i [ 78.056070][ T5094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 78.133537][ T5097] syz_tun (unregistering): left promiscuous mode [ 78.194337][ T5678] netlink: 128 bytes leftover after parsing attributes in process `syz.3.179'. [ 78.203917][ T5678] Zero length message leads to an empty skb [ 78.212560][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.180'. [ 78.392608][ T2773] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.602115][ T2773] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.668630][ T5704] netem: unknown loss type 0 [ 78.673774][ T5704] netem: change failed [ 78.697680][ T5707] dummy0: entered promiscuous mode [ 78.734185][ T5707] dummy0: left promiscuous mode [ 78.835561][ T2773] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.094684][ T2773] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 79.136138][ T2773] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 79.180526][ T2773] bridge0: port 3(netdevsim0) entered disabled state [ 79.214585][ T2773] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.363582][ T5733] netlink: 'syz.2.195': attribute type 3 has an invalid length. [ 79.477675][ T5737] vlan2: entered promiscuous mode [ 79.488106][ T5737] veth0: entered promiscuous mode [ 79.526662][ T5737] team0: Port device vlan2 added [ 79.647138][ T5670] chnl_net:caif_netlink_parms(): no params data found [ 79.837801][ T2773] bridge_slave_1: left allmulticast mode [ 79.844037][ T2773] bridge_slave_1: left promiscuous mode [ 79.851682][ T2773] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.864405][ T2773] bridge_slave_0: left allmulticast mode [ 79.872238][ T2773] bridge_slave_0: left promiscuous mode [ 79.877939][ T2773] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.008496][ T2773] ip6gretap0 (unregistering): left promiscuous mode [ 80.152551][ T5094] Bluetooth: hci5: command tx timeout [ 80.269177][ T2773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.283624][ T2773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.295094][ T2773] bond0 (unregistering): Released all slaves [ 80.306325][ T5749] netem: unknown loss type 0 [ 80.320191][ T5749] netem: change failed [ 80.468699][ T2773] ɶƣ0GCTw: left promiscuous mode [ 80.589854][ T5771] netlink: 'syz.3.204': attribute type 62 has an invalid length. [ 80.650216][ T5771] netlink: 'syz.3.204': attribute type 1 has an invalid length. [ 80.757537][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.790044][ T5670] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.820308][ T5670] bridge_slave_0: entered allmulticast mode [ 80.846346][ T5670] bridge_slave_0: entered promiscuous mode [ 81.063428][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.072345][ T5670] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.085787][ T5670] bridge_slave_1: entered allmulticast mode [ 81.097166][ T5670] bridge_slave_1: entered promiscuous mode [ 81.137428][ T5798] netem: unknown loss type 0 [ 81.142633][ T5798] netem: change failed [ 81.508957][ T5670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.613619][ T5670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.784677][ T2773] hsr_slave_0: left promiscuous mode [ 81.804559][ T2773] hsr_slave_1: left promiscuous mode [ 81.817844][ T2773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.835673][ T2773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.854166][ T2773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.876391][ T2773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.939170][ T2773] veth1_macvtap: left promiscuous mode [ 81.947819][ T2773] veth0_macvtap: left promiscuous mode [ 81.958019][ T2773] veth1_vlan: left promiscuous mode [ 81.966868][ T2773] veth0_vlan: left promiscuous mode [ 82.231835][ T5094] Bluetooth: hci5: command tx timeout [ 82.354088][ T2773] team0 (unregistering): Port device team_slave_1 removed [ 82.389644][ T2773] team0 (unregistering): Port device team_slave_0 removed [ 82.715583][ T5844] netem: unknown loss type 0 [ 82.729180][ T5844] netem: change failed [ 82.904937][ T5670] team0: Port device team_slave_0 added [ 82.937408][ T5670] team0: Port device team_slave_1 added [ 82.989036][ T5854] bond0: entered promiscuous mode [ 82.995463][ T5861] Cannot find add_set index 0 as target [ 83.001543][ T5854] bond_slave_0: entered promiscuous mode [ 83.007633][ T5854] bond_slave_1: entered promiscuous mode [ 83.022134][ T5854] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 83.033194][ T5854] bond0: left promiscuous mode [ 83.042494][ T5854] bond_slave_0: left promiscuous mode [ 83.061552][ T5854] bond_slave_1: left promiscuous mode [ 83.101432][ T5863] __nla_validate_parse: 27 callbacks suppressed [ 83.101452][ T5863] netlink: 104 bytes leftover after parsing attributes in process `syz.2.233'. [ 83.116697][ T5865] netlink: 44 bytes leftover after parsing attributes in process `syz.3.234'. [ 83.126363][ T5865] netlink: 43 bytes leftover after parsing attributes in process `syz.3.234'. [ 83.126386][ T5865] netlink: 'syz.3.234': attribute type 5 has an invalid length. [ 83.126409][ T5865] netlink: 43 bytes leftover after parsing attributes in process `syz.3.234'. [ 83.167873][ T5858] netlink: 'syz.4.231': attribute type 21 has an invalid length. [ 83.374594][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.404902][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.492523][ T5881] netlink: 728 bytes leftover after parsing attributes in process `syz.3.238'. [ 83.530399][ T5670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.558263][ T5670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.581217][ T5670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.654767][ T5670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.680408][ T5881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.238'. [ 83.689224][ T5881] netlink: 180 bytes leftover after parsing attributes in process `syz.3.238'. [ 83.753805][ T5881] netlink: 2776 bytes leftover after parsing attributes in process `syz.3.238'. [ 83.766036][ T5889] netem: unknown loss type 0 [ 83.769842][ T5890] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 83.778508][ T5889] netem: change failed [ 83.994631][ T5902] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.241'. [ 84.008725][ T5670] hsr_slave_0: entered promiscuous mode [ 84.026306][ T5902] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 84.045855][ T5670] hsr_slave_1: entered promiscuous mode [ 84.060379][ T5670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.075642][ T5670] Cannot create hsr debugfs directory [ 84.268788][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'. [ 84.311749][ T5094] Bluetooth: hci5: command tx timeout [ 84.608684][ T5938] netlink: 'syz.2.250': attribute type 3 has an invalid length. [ 84.632199][ T5938] netlink: 'syz.2.250': attribute type 3 has an invalid length. [ 84.852128][ T5950] veth1_macvtap: left promiscuous mode [ 84.864320][ T5950] macsec0: entered promiscuous mode [ 84.885550][ T5950] macsec0: entered allmulticast mode [ 84.960438][ T5957] netem: unknown loss type 0 [ 84.985046][ T5960] macsec1: entered promiscuous mode [ 84.999619][ T5960] macvlan1: entered promiscuous mode [ 85.013880][ T5960] macsec1: entered allmulticast mode [ 85.022008][ T5960] macvlan1: entered allmulticast mode [ 85.030037][ T5960] veth1_vlan: entered allmulticast mode [ 85.383173][ T5978] dummy0: entered promiscuous mode [ 85.394823][ T5978] dummy0: left promiscuous mode [ 85.906754][ T6007] netem: unknown loss type 0 [ 85.924946][ T6007] netem: change failed [ 85.982565][ T5670] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.053653][ T5670] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.136377][ T5670] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.185159][ T5670] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.270761][ T6020] macvlan2: entered promiscuous mode [ 86.276117][ T6020] macvlan2: entered allmulticast mode [ 86.292112][ T6020] bond_slave_0: entered promiscuous mode [ 86.298077][ T6020] bond_slave_1: entered promiscuous mode [ 86.310997][ T6020] bond0: entered allmulticast mode [ 86.316229][ T6020] bond_slave_0: entered allmulticast mode [ 86.322703][ T6020] bond_slave_1: entered allmulticast mode [ 86.328526][ T6020] bond0: entered promiscuous mode [ 86.337336][ T6020] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.352137][ T6020] team0: Port device macvlan2 added [ 86.390398][ T5094] Bluetooth: hci5: command tx timeout [ 86.763211][ T6037] netem: unknown loss type 0 [ 86.784366][ T6037] netem: change failed [ 86.898064][ T5670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.994478][ T5670] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.025757][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.032987][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.080843][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.088072][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.253801][ T5670] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.299968][ T6024] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 87.521578][ T6077] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 87.611083][ T6081] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 87.886019][ T6098] netem: unknown loss type 0 [ 87.932628][ T6098] netem: change failed [ 88.124254][ T5670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.213887][ T6120] __nla_validate_parse: 22 callbacks suppressed [ 88.213906][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 88.257154][ T6124] warning: `syz.1.294' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.428500][ T5670] veth0_vlan: entered promiscuous mode [ 88.476533][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 88.526203][ T5670] veth1_vlan: entered promiscuous mode [ 88.564427][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.301'. [ 88.646639][ T5670] veth0_macvtap: entered promiscuous mode [ 88.707775][ T5670] veth1_macvtap: entered promiscuous mode [ 88.740345][ T6144] netlink: 728 bytes leftover after parsing attributes in process `syz.3.303'. [ 88.793687][ T6144] netem: unknown loss type 0 [ 88.799215][ T6144] netem: change failed [ 88.815499][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 88.831847][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.844833][ T6144] netlink: 180 bytes leftover after parsing attributes in process `syz.3.303'. [ 88.854308][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.864300][ T6144] netlink: 2776 bytes leftover after parsing attributes in process `syz.3.303'. [ 88.872715][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.910564][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.935457][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.949930][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.960049][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.970899][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.982864][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.058729][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.095130][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.122500][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.161323][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.177059][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.208208][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.218502][ T5670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.230241][ T5670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.244015][ T5670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.255545][ T6160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.306'. [ 89.268087][ T6160] netlink: 152 bytes leftover after parsing attributes in process `syz.2.306'. [ 89.306057][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 89.344334][ T6169] netlink: 'syz.1.309': attribute type 2 has an invalid length. [ 89.363403][ T5670] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.411626][ T5670] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.447536][ T5670] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.478983][ T5670] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.885588][ T6194] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 89.919614][ T2811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.957933][ T2811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.083014][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.096299][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.626945][ T6222] FAULT_INJECTION: forcing a failure. [ 90.626945][ T6222] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 90.676649][ T6222] CPU: 1 PID: 6222 Comm: syz.0.320 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 90.686678][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.696749][ T6222] Call Trace: [ 90.700045][ T6222] [ 90.702988][ T6222] dump_stack_lvl+0x241/0x360 [ 90.707687][ T6222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.712900][ T6222] ? __pfx__printk+0x10/0x10 [ 90.717510][ T6222] should_fail_ex+0x3b0/0x4e0 [ 90.722216][ T6222] prepare_alloc_pages+0x1da/0x5d0 [ 90.727357][ T6222] __alloc_pages_noprof+0x166/0x6c0 [ 90.732591][ T6222] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 90.738353][ T6222] __kmalloc_large_node+0x8b/0x1d0 [ 90.743491][ T6222] ? iovec_from_user+0x87/0x240 [ 90.748361][ T6222] __kmalloc_noprof+0x2aa/0x400 [ 90.753233][ T6222] iovec_from_user+0x87/0x240 [ 90.757927][ T6222] __import_iovec+0x132/0x820 [ 90.762629][ T6222] import_iovec+0xeb/0x120 [ 90.767063][ T6222] copy_msghdr_from_user+0x52f/0x680 [ 90.772356][ T6222] ? __pfx___might_resched+0x10/0x10 [ 90.777656][ T6222] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 90.783486][ T6222] ? __might_fault+0xaa/0x120 [ 90.788187][ T6222] do_recvmmsg+0x40f/0xae0 [ 90.792632][ T6222] ? __pfx_lock_release+0x10/0x10 [ 90.797673][ T6222] ? __pfx_do_recvmmsg+0x10/0x10 [ 90.802650][ T6222] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 90.808568][ T6222] ? ksys_write+0x23e/0x2c0 [ 90.813093][ T6222] ? __pfx_lock_release+0x10/0x10 [ 90.818136][ T6222] ? vfs_write+0x7c4/0xc90 [ 90.822576][ T6222] ? __mutex_unlock_slowpath+0x21d/0x750 [ 90.828238][ T6222] ? __fget_files+0x3f6/0x470 [ 90.832948][ T6222] __x64_sys_recvmmsg+0x199/0x250 [ 90.837998][ T6222] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 90.843571][ T6222] ? do_syscall_64+0x100/0x230 [ 90.848354][ T6222] ? do_syscall_64+0xb6/0x230 [ 90.853048][ T6222] do_syscall_64+0xf3/0x230 [ 90.857573][ T6222] ? clear_bhb_loop+0x35/0x90 [ 90.860917][ T6234] netlink: 'syz.1.324': attribute type 5 has an invalid length. [ 90.862248][ T6222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.875761][ T6222] RIP: 0033:0x7f61a4b75bd9 [ 90.880190][ T6222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.899816][ T6222] RSP: 002b:00007f61a58ea048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 90.908255][ T6222] RAX: ffffffffffffffda RBX: 00007f61a4d03f60 RCX: 00007f61a4b75bd9 [ 90.916245][ T6222] RDX: 0400000000000179 RSI: 0000000020000480 RDI: 0000000000000003 [ 90.924231][ T6222] RBP: 00007f61a58ea0a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.932219][ T6222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.940206][ T6222] R13: 000000000000000b R14: 00007f61a4d03f60 R15: 00007ffe060c1188 [ 90.948208][ T6222] [ 91.242341][ T6218] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 91.572613][ T6257] xt_CONNSECMARK: invalid mode: 0 [ 91.952939][ T6266] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 92.334486][ T6287] geneve2: entered promiscuous mode [ 92.353468][ T6287] geneve2: entered allmulticast mode [ 92.541538][ T6297] dummy0: entered promiscuous mode [ 92.562821][ T6297] batman_adv: batadv0: Adding interface: macvtap1 [ 92.569852][ T6297] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.601239][ T6297] batman_adv: batadv0: Interface activated: macvtap1 [ 93.222831][ T6334] dummy0: entered promiscuous mode [ 93.240485][ T6334] dummy0: left promiscuous mode [ 93.340880][ T6343] __nla_validate_parse: 16 callbacks suppressed [ 93.340900][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.357'. [ 93.411732][ T6346] netlink: 32 bytes leftover after parsing attributes in process `syz.4.360'. [ 93.431174][ T6344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.359'. [ 93.976448][ T6376] macvlan3: entered promiscuous mode [ 93.990229][ T6376] macvlan3: entered allmulticast mode [ 94.010871][ T6376] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 94.034635][ T6376] team0: Port device macvlan3 added [ 94.251328][ T6388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 94.608578][ T6371] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 94.761785][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.384'. [ 95.022583][ T6425] netlink: 152 bytes leftover after parsing attributes in process `syz.3.386'. [ 95.054770][ T6428] syz.0.387[6428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.054931][ T6428] syz.0.387[6428] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.083869][ T6430] netlink: 'syz.1.388': attribute type 3 has an invalid length. [ 95.635847][ T6456] syz.4.398 (6456) used greatest stack depth: 17936 bytes left [ 95.643482][ T6463] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 95.722071][ T6465] netlink: 196512 bytes leftover after parsing attributes in process `syz.0.402'. [ 95.836892][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.404'. [ 95.925100][ T6476] netlink: 276 bytes leftover after parsing attributes in process `syz.4.406'. [ 96.003558][ T6478] netlink: 40 bytes leftover after parsing attributes in process `syz.4.407'. [ 96.204943][ T6487] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms [ 96.632388][ T6507] Cannot find add_set index 0 as target [ 96.866341][ T6521] netlink: 'syz.3.422': attribute type 4 has an invalid length. [ 96.986142][ T6530] netlink: 'syz.4.425': attribute type 10 has an invalid length. [ 97.009538][ T6530] bridge0: port 3(netdevsim0) entered blocking state [ 97.024780][ T6530] bridge0: port 3(netdevsim0) entered disabled state [ 97.032535][ T6530] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 97.037445][ T6535] netlink: 'syz.4.425': attribute type 1 has an invalid length. [ 97.041847][ T6530] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 97.053523][ T6535] NCSI netlink: No device for ifindex 0 [ 97.378259][ T6550] netlink: 'syz.2.431': attribute type 10 has an invalid length. [ 97.403593][ T6550] macvlan0: entered promiscuous mode [ 97.421183][ T6550] macvlan0: entered allmulticast mode [ 97.480495][ T6553] xt_socket: unknown flags 0x8 [ 97.503977][ T6550] veth1_vlan: entered allmulticast mode [ 97.524393][ T6550] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 97.878501][ T6572] : renamed from vlan1 (while UP) [ 98.150713][ T6593] FAULT_INJECTION: forcing a failure. [ 98.150713][ T6593] name failslab, interval 1, probability 0, space 0, times 1 [ 98.151028][ T6592] netlink: 'syz.3.443': attribute type 1 has an invalid length. [ 98.219946][ T6593] CPU: 0 PID: 6593 Comm: syz.4.446 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 98.229985][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 98.240062][ T6593] Call Trace: [ 98.243358][ T6593] [ 98.246305][ T6593] dump_stack_lvl+0x241/0x360 [ 98.251008][ T6593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.256229][ T6593] ? __pfx__printk+0x10/0x10 [ 98.260852][ T6593] should_fail_ex+0x3b0/0x4e0 [ 98.265554][ T6593] ? __alloc_skb+0x1c3/0x440 [ 98.270168][ T6593] should_failslab+0x9/0x20 [ 98.274695][ T6593] kmem_cache_alloc_node_noprof+0x71/0x320 [ 98.280529][ T6593] __alloc_skb+0x1c3/0x440 [ 98.284965][ T6593] ? __pfx___might_resched+0x10/0x10 [ 98.290265][ T6593] ? __pfx___alloc_skb+0x10/0x10 [ 98.295202][ T6593] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 98.301260][ T6593] ? security_socket_getpeersec_dgram+0x88/0xb0 [ 98.307497][ T6593] netlink_sendmsg+0x638/0xcb0 [ 98.312263][ T6593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.317542][ T6593] ? __import_iovec+0x536/0x820 [ 98.322385][ T6593] ? aa_sock_msg_perm+0x91/0x160 [ 98.327339][ T6593] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 98.332644][ T6593] ? security_socket_sendmsg+0x87/0xb0 [ 98.338098][ T6593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.343372][ T6593] __sock_sendmsg+0x221/0x270 [ 98.348050][ T6593] ____sys_sendmsg+0x525/0x7d0 [ 98.352831][ T6593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.358122][ T6593] __sys_sendmsg+0x2b0/0x3a0 [ 98.362707][ T6593] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.367809][ T6593] ? vfs_write+0x7c4/0xc90 [ 98.372258][ T6593] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.378660][ T6593] ? do_syscall_64+0x100/0x230 [ 98.383420][ T6593] ? do_syscall_64+0xb6/0x230 [ 98.388088][ T6593] do_syscall_64+0xf3/0x230 [ 98.392581][ T6593] ? clear_bhb_loop+0x35/0x90 [ 98.397250][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.403131][ T6593] RIP: 0033:0x7fbe52175bd9 [ 98.407553][ T6593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.427160][ T6593] RSP: 002b:00007fbe52ece048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.435577][ T6593] RAX: ffffffffffffffda RBX: 00007fbe52304038 RCX: 00007fbe52175bd9 [ 98.443555][ T6593] RDX: 0000000000000000 RSI: 0000000020000a80 RDI: 0000000000000004 [ 98.451524][ T6593] RBP: 00007fbe52ece0a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.459492][ T6593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.467465][ T6593] R13: 000000000000006e R14: 00007fbe52304038 R15: 00007ffd47c2c3c8 [ 98.475451][ T6593] [ 98.698920][ T6606] __nla_validate_parse: 48 callbacks suppressed [ 98.698939][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.451'. [ 98.790148][ T6606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 98.805786][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.451'. [ 98.826583][ T6613] dummy0: entered promiscuous mode [ 98.854815][ T6613] dummy0: left promiscuous mode [ 98.993230][ T6622] netlink: 32 bytes leftover after parsing attributes in process `syz.4.456'. [ 99.097429][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.459'. [ 99.276749][ T6637] Illegal XDP return value 4294967294 on prog (id 89) dev N/A, expect packet loss! [ 99.307608][ T6641] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.500700][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 99.619459][ T6660] netlink: 728 bytes leftover after parsing attributes in process `syz.1.471'. [ 99.687478][ T6660] netem: unknown loss type 0 [ 99.698135][ T6660] netem: change failed [ 99.702441][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.472'. [ 99.739605][ T6664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.472'. [ 99.776552][ T6660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 99.979126][ T6689] tap0: tun_chr_ioctl cmd 2147767521 [ 100.111410][ T6698] syz.2.482[6698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.111613][ T6698] syz.2.482[6698] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.505356][ T6720] netem: unknown loss type 0 [ 100.530894][ T6720] netem: change failed [ 100.784837][ T6741] netlink: 'syz.4.497': attribute type 4 has an invalid length. [ 101.065211][ T6755] netem: unknown loss type 0 [ 101.074071][ T6755] netem: change failed [ 101.261005][ T6763] macvlan2: entered allmulticast mode [ 101.267640][ T6763] team_slave_0: entered promiscuous mode [ 101.273779][ T6763] team_slave_1: entered promiscuous mode [ 101.321763][ T6763] team0: entered allmulticast mode [ 101.340039][ T6763] team_slave_0: entered allmulticast mode [ 101.366879][ T6763] team_slave_1: entered allmulticast mode [ 101.376754][ T6763] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.418951][ T6763] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 101.468605][ T6779] No such timeout policy "syz0" [ 101.494935][ T6773] bond0: entered promiscuous mode [ 101.506158][ T6773] bond_slave_0: entered promiscuous mode [ 101.512709][ T6773] bond_slave_1: entered promiscuous mode [ 101.518904][ T6773] macvlan2: entered promiscuous mode [ 101.525899][ T6773] team0: entered promiscuous mode [ 102.465167][ T6831] netlink: 'syz.0.534': attribute type 21 has an invalid length. [ 102.804573][ T6855] netpci0: tun_chr_ioctl cmd 2148553947 [ 102.880497][ T6855] lo: entered allmulticast mode [ 102.888297][ T6855] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.241215][ T6883] openvswitch: netlink: Message has 4 unknown bytes. [ 103.309700][ T6885] pim6reg1: entered promiscuous mode [ 103.320815][ T6885] pim6reg1: entered allmulticast mode [ 103.427850][ T6895] batadv_slave_1: entered promiscuous mode [ 103.543155][ T6893] batadv_slave_1: left promiscuous mode [ 103.763055][ T6919] __nla_validate_parse: 27 callbacks suppressed [ 103.763073][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.559'. [ 103.998139][ T6927] netlink: 'syz.2.564': attribute type 34 has an invalid length. [ 104.089073][ T6930] pimreg: entered allmulticast mode [ 104.144201][ T6930] pimreg: left allmulticast mode [ 104.462614][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.572'. [ 104.478734][ T6951] netlink: 'syz.2.574': attribute type 11 has an invalid length. [ 104.569554][ T6959] netlink: 36 bytes leftover after parsing attributes in process `syz.4.576'. [ 104.640970][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.576'. [ 104.665692][ T6959] netlink: 36 bytes leftover after parsing attributes in process `syz.4.576'. [ 104.997666][ T6990] netlink: 'syz.3.584': attribute type 3 has an invalid length. [ 105.219153][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.586'. [ 105.387736][ T7000] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 105.431941][ T7008] netlink: 16 bytes leftover after parsing attributes in process `syz.1.591'. [ 105.604194][ T7018] netlink: 104 bytes leftover after parsing attributes in process `syz.1.594'. [ 105.777256][ T7024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.595'. [ 105.940773][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 107.007010][ T7130] netlink: 'syz.0.616': attribute type 5 has an invalid length. [ 107.544840][ T7162] netlink: 'syz.1.629': attribute type 21 has an invalid length. [ 108.156680][ T7198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.898188][ T7233] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 108.944645][ T7238] netlink: 'syz.3.650': attribute type 8 has an invalid length. [ 109.722166][ T7284] __nla_validate_parse: 14 callbacks suppressed [ 109.722186][ T7284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.664'. [ 109.794383][ T7283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.663'. [ 109.810745][ T7286] syz.1.665[7286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.810887][ T7286] syz.1.665[7286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 109.844389][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.663'. [ 110.067449][ T7304] netlink: 16 bytes leftover after parsing attributes in process `syz.1.671'. [ 110.198578][ T7310] netlink: 104 bytes leftover after parsing attributes in process `syz.0.674'. [ 110.240963][ T7312] netlink: 195508 bytes leftover after parsing attributes in process `syz.2.675'. [ 110.301187][ T7316] netlink: 40 bytes leftover after parsing attributes in process `syz.1.676'. [ 110.309368][ T7318] netlink: 276 bytes leftover after parsing attributes in process `syz.0.678'. [ 110.480540][ T7324] netlink: 'syz.0.680': attribute type 21 has an invalid length. [ 110.519080][ T7324] netlink: 156 bytes leftover after parsing attributes in process `syz.0.680'. [ 110.532741][ T7332] netlink: 'syz.2.681': attribute type 4 has an invalid length. [ 110.588698][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.680'. [ 110.749121][ T7342] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.763281][ T7341] xt_hashlimit: Unknown mode mask 242, kernel too old? [ 110.775755][ T7342] team0: Port device batadv1 added [ 111.154146][ T7364] netlink: 'syz.2.693': attribute type 10 has an invalid length. [ 111.425894][ T7379] netlink: 'syz.1.699': attribute type 11 has an invalid length. [ 111.747384][ T7399] @: renamed from veth0_vlan (while UP) [ 111.754273][ T7397] netlink: 'syz.4.704': attribute type 13 has an invalid length. [ 111.855889][ T7408] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 112.246748][ T7425] netlink: 'syz.2.715': attribute type 3 has an invalid length. [ 112.928506][ T7466] netlink: 'syz.2.731': attribute type 11 has an invalid length. [ 112.947325][ T7464] netlink: zone id is out of range [ 112.975068][ T7464] netlink: zone id is out of range [ 113.007039][ T7466] netlink: 'syz.2.731': attribute type 11 has an invalid length. [ 114.250086][ T7538] xt_hashlimit: Unknown mode mask 242, kernel too old? [ 114.389690][ T7549] netlink: 'syz.1.761': attribute type 3 has an invalid length. [ 114.951995][ T7573] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 115.062460][ T7579] __nla_validate_parse: 21 callbacks suppressed [ 115.062479][ T7579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.772'. [ 115.301497][ T7590] netlink: 104 bytes leftover after parsing attributes in process `syz.0.776'. [ 115.441438][ T7599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 115.465970][ T7601] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 115.503442][ T7599] netlink: 'syz.0.777': attribute type 4 has an invalid length. [ 115.506314][ T7609] netlink: 'syz.3.780': attribute type 29 has an invalid length. [ 115.541808][ T7609] netlink: 'syz.3.780': attribute type 29 has an invalid length. [ 115.683509][ T7619] netlink: 3 bytes leftover after parsing attributes in process `syz.3.782'. [ 115.774025][ T7624] team0: entered promiscuous mode [ 115.784612][ T7624] team_slave_0: entered promiscuous mode [ 115.794825][ T7629] netlink: 104 bytes leftover after parsing attributes in process `syz.0.785'. [ 115.804505][ T7624] team_slave_1: entered promiscuous mode [ 115.823645][ T7624] dummy0: entered promiscuous mode [ 115.838633][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 115.863667][ T7627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.784'. [ 115.894367][ T7627] ipvlan2: entered allmulticast mode [ 115.901689][ T7627] veth1_to_bridge: entered allmulticast mode [ 115.938904][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.784'. [ 115.944762][ T7631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.786'. [ 116.288018][ T7653] netlink: 'syz.4.795': attribute type 10 has an invalid length. [ 116.375771][ T7658] netlink: 40 bytes leftover after parsing attributes in process `syz.0.796'. [ 116.441019][ T7658] netlink: 'syz.0.796': attribute type 14 has an invalid length. [ 116.729910][ T7671] netlink: 'syz.0.801': attribute type 1 has an invalid length. [ 116.732075][ T7675] xt_limit: Overflow, try lower: 65536/524288 [ 116.751464][ T7676] xt_HMARK: spi-set and port-set can't be combined [ 117.017501][ T7689] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 117.556433][ T7720] netlink: 'syz.3.819': attribute type 21 has an invalid length. [ 117.687050][ T7725] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 117.846507][ T7729] netlink: 'syz.3.823': attribute type 3 has an invalid length. [ 118.433270][ T7749] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 118.916761][ T7770] netlink: 'syz.2.838': attribute type 11 has an invalid length. [ 119.009726][ T7770] netlink: 'syz.2.838': attribute type 11 has an invalid length. [ 119.628004][ T7798] netlink: 'syz.4.848': attribute type 11 has an invalid length. [ 119.938995][ T7814] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 119.956936][ T7814] bridge0: port 3(dummy0) entered blocking state [ 119.980049][ T7814] bridge0: port 3(dummy0) entered disabled state [ 120.006992][ T7814] dummy0: entered allmulticast mode [ 120.037254][ T7814] dummy0: left allmulticast mode [ 120.058184][ T7814] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 120.069499][ T5094] Bluetooth: hci5: command tx timeout [ 120.088401][ T7817] netlink: 'syz.4.855': attribute type 10 has an invalid length. [ 120.196536][ T7820] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 120.201202][ T7817] team0: Device dummy0 failed to register rx_handler [ 120.256963][ T7826] __nla_validate_parse: 13 callbacks suppressed [ 120.256981][ T7826] netlink: 152 bytes leftover after parsing attributes in process `syz.0.858'. [ 120.713210][ T7849] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 120.789620][ T7857] macvlan3: entered promiscuous mode [ 120.797338][ T7857] macvlan3: entered allmulticast mode [ 120.819566][ T7857] team0: Device macvlan3 is already an upper device of the team interface [ 120.829414][ T7862] netlink: 'syz.0.869': attribute type 11 has an invalid length. [ 120.902722][ T7862] netlink: 'syz.0.869': attribute type 11 has an invalid length. [ 120.935618][ T7862] debugfs: Directory 'netdev:' with parent 'phy13' already present! [ 121.011560][ T7871] netlink: 'syz.0.869': attribute type 11 has an invalid length. [ 121.028521][ T7868] tipc: Cannot configure node identity twice [ 121.048432][ T7875] netlink: 104 bytes leftover after parsing attributes in process `syz.2.872'. [ 121.213294][ T7883] netlink: 104 bytes leftover after parsing attributes in process `syz.3.877'. [ 121.291498][ T7887] netlink: 195504 bytes leftover after parsing attributes in process `syz.0.879'. [ 121.450496][ T7894] macvlan4: entered promiscuous mode [ 121.461538][ T7894] macvlan4: entered allmulticast mode [ 121.482149][ T7894] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 121.502147][ T7894] team0: Port device macvlan4 added [ 121.567154][ T7902] netlink: 728 bytes leftover after parsing attributes in process `syz.4.885'. [ 121.612850][ T7898] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 121.631373][ T7902] netem: unknown loss type 0 [ 121.643001][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.885'. [ 121.670139][ T7902] netlink: 180 bytes leftover after parsing attributes in process `syz.4.885'. [ 121.672167][ T7908] Cannot find add_set index 0 as target [ 121.701877][ T7902] netlink: 2776 bytes leftover after parsing attributes in process `syz.4.885'. [ 121.891408][ T7919] netlink: 'syz.2.893': attribute type 10 has an invalid length. [ 122.204893][ T7937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.899'. [ 122.225350][ T7940] netlink: 728 bytes leftover after parsing attributes in process `syz.1.901'. [ 122.253979][ T7941] ɶƣ0GCTw: entered promiscuous mode [ 122.262486][ T7940] netem: unknown loss type 0 [ 122.299455][ T7943] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 122.446752][ T7952] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 122.467221][ T7954] IPVS: set_ctl: invalid protocol: 60 172.30.1.3:20000 [ 122.693832][ T7963] tipc: Enabling of bearer rejected, failed to enable media [ 122.861767][ T7976] netem: unknown loss type 0 [ 122.959748][ T7981] macvlan4: entered promiscuous mode [ 122.965209][ T7981] macvlan4: entered allmulticast mode [ 122.987758][ T7981] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 123.031850][ T7981] team0: Port device macvlan4 added [ 123.642940][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.667787][ T8027] vlan3: entered allmulticast mode [ 123.680832][ T8027] geneve0: entered allmulticast mode [ 123.703706][ T8027] bridge0: port 4(vlan3) entered blocking state [ 123.731294][ T8027] bridge0: port 4(vlan3) entered disabled state [ 123.753671][ T8027] vlan3: entered promiscuous mode [ 123.759141][ T8027] geneve0: entered promiscuous mode [ 123.784576][ T8027] bridge0: port 4(vlan3) entered blocking state [ 123.791087][ T8027] bridge0: port 4(vlan3) entered forwarding state [ 123.817172][ T8036] netem: unknown loss type 0 [ 124.265055][ T8068] netlink: 'syz.4.939': attribute type 8 has an invalid length. [ 124.373830][ T8072] netem: unknown loss type 0 [ 124.535746][ T8086] ip6t_REJECT: ECHOREPLY is not supported [ 124.795327][ T8097] netlink: 'syz.2.952': attribute type 7 has an invalid length. [ 124.984596][ T8104] dvmrp0: entered allmulticast mode [ 124.998791][ T8107] netem: unknown loss type 0 [ 125.462909][ T8134] __nla_validate_parse: 32 callbacks suppressed [ 125.462928][ T8134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 125.485263][ T8134] block nbd0: not configured, cannot reconfigure [ 125.664395][ T8147] netlink: 728 bytes leftover after parsing attributes in process `syz.4.968'. [ 125.696006][ T8149] netlink: 104 bytes leftover after parsing attributes in process `syz.2.969'. [ 125.700800][ T8147] netem: unknown loss type 0 [ 125.712364][ T8147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.968'. [ 125.721415][ T8147] netlink: 180 bytes leftover after parsing attributes in process `syz.4.968'. [ 125.730502][ T8147] netlink: 2776 bytes leftover after parsing attributes in process `syz.4.968'. [ 125.793309][ T8151] netlink: 8 bytes leftover after parsing attributes in process `syz.2.970'. [ 125.909738][ T8155] netlink: 104 bytes leftover after parsing attributes in process `syz.1.972'. [ 126.036920][ T8161] netlink: 195500 bytes leftover after parsing attributes in process `syz.4.975'. [ 126.201345][ T8171] netlink: 104 bytes leftover after parsing attributes in process `syz.1.978'. [ 126.325497][ T8176] netem: unknown loss type 0 [ 126.340629][ T8176] netem: change failed [ 126.632572][ T5099] Bluetooth: hci5: command 0x0405 tx timeout [ 126.856299][ T8209] IPv6: Can't replace route, no match found [ 127.033637][ T8220] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 127.179592][ T29] audit: type=1107 audit(1720486171.167:2): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':Y$nJ5 9Icc}֨ V}L(ΤO*?S\HSsdLY۞D|UsH;=' [ 127.250076][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.257784][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.310865][ T8238] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.328045][ T8238] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.338046][ T8238] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.364361][ T8238] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 127.387351][ T8238] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.403868][ T8238] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.413773][ T8238] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.423267][ T8238] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 127.446512][ T8238] geneve2: entered promiscuous mode [ 127.464789][ T8238] geneve2: entered allmulticast mode [ 127.514174][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.522271][ T8240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.530081][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.537197][ T8240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.546502][ T8240] bridge0: entered promiscuous mode [ 127.552880][ T8240] bridge0: entered allmulticast mode [ 127.717828][ T8265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.744630][ T8263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.880545][ T8284] netlink: 'syz.0.1016': attribute type 21 has an invalid length. [ 127.989107][ T8289] Cannot find del_set index 4 as target [ 128.056676][ T8296] openvswitch: netlink: Message has 4 unknown bytes. [ 128.195291][ T8302] netlink: 'syz.0.1022': attribute type 34 has an invalid length. [ 128.444664][ T8314] netlink: 'syz.0.1025': attribute type 11 has an invalid length. [ 128.466198][ T8314] netlink: 'syz.0.1025': attribute type 11 has an invalid length. [ 128.627671][ T8323] IPv6: Can't replace route, no match found [ 129.008323][ T8347] netlink: 'syz.3.1037': attribute type 8 has an invalid length. [ 129.202835][ T8356] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 129.251422][ T8359] netem: unknown loss type 0 [ 129.261336][ T8359] netem: change failed [ 129.543195][ T8380] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.550939][ T8380] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.570275][ T8378] netlink: 'syz.0.1048': attribute type 3 has an invalid length. [ 129.572490][ T8380] bridge0: entered promiscuous mode [ 129.595178][ T8380] bridge0: entered allmulticast mode [ 129.673064][ T8386] FAULT_INJECTION: forcing a failure. [ 129.673064][ T8386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.719408][ T8386] CPU: 1 PID: 8386 Comm: syz.3.1051 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 129.729527][ T8386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 129.739599][ T8386] Call Trace: [ 129.742894][ T8386] [ 129.745839][ T8386] dump_stack_lvl+0x241/0x360 [ 129.750536][ T8386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.755748][ T8386] ? __pfx__printk+0x10/0x10 [ 129.760360][ T8386] ? snprintf+0xda/0x120 [ 129.764624][ T8386] should_fail_ex+0x3b0/0x4e0 [ 129.769330][ T8386] _copy_to_user+0x2f/0xb0 [ 129.773762][ T8386] simple_read_from_buffer+0xca/0x150 [ 129.779157][ T8386] proc_fail_nth_read+0x1e9/0x250 [ 129.784202][ T8386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.789765][ T8386] ? rw_verify_area+0x520/0x6b0 [ 129.794634][ T8386] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 129.800200][ T8386] vfs_read+0x204/0xbc0 [ 129.804375][ T8386] ? __pfx_lock_release+0x10/0x10 [ 129.809422][ T8386] ? __pfx_vfs_read+0x10/0x10 [ 129.814111][ T8386] ? __fget_files+0x29/0x470 [ 129.818706][ T8386] ? __fget_files+0x3f6/0x470 [ 129.823386][ T8386] ksys_read+0x1a0/0x2c0 [ 129.827623][ T8386] ? __pfx_ksys_read+0x10/0x10 [ 129.832384][ T8386] ? do_syscall_64+0x100/0x230 [ 129.837231][ T8386] ? do_syscall_64+0xb6/0x230 [ 129.841907][ T8386] do_syscall_64+0xf3/0x230 [ 129.846405][ T8386] ? clear_bhb_loop+0x35/0x90 [ 129.851077][ T8386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.856959][ T8386] RIP: 0033:0x7febec9746bc [ 129.861364][ T8386] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 129.880971][ T8386] RSP: 002b:00007febed7e6040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 129.889384][ T8386] RAX: ffffffffffffffda RBX: 00007febecb04038 RCX: 00007febec9746bc [ 129.897347][ T8386] RDX: 000000000000000f RSI: 00007febed7e60b0 RDI: 0000000000000003 [ 129.905307][ T8386] RBP: 00007febed7e60a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.913267][ T8386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.921225][ T8386] R13: 000000000000006e R14: 00007febecb04038 R15: 00007ffc675b9888 [ 129.929199][ T8386] [ 130.074300][ T8397] netem: unknown loss type 0 [ 130.087443][ T8397] netem: change failed [ 130.131799][ T8392] netlink: 'syz.2.1053': attribute type 2 has an invalid length. [ 130.367037][ T8411] macvlan5: entered promiscuous mode [ 130.378492][ T8411] macvlan5: entered allmulticast mode [ 130.405128][ T8411] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 130.433347][ T8411] team0: Port device macvlan5 added [ 130.613476][ T8432] __nla_validate_parse: 30 callbacks suppressed [ 130.613497][ T8432] netlink: 728 bytes leftover after parsing attributes in process `syz.1.1069'. [ 130.688293][ T8432] netem: unknown loss type 0 [ 130.703324][ T8439] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1072'. [ 130.715039][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1069'. [ 130.747695][ T8432] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1069'. [ 130.810251][ T8432] netlink: 2776 bytes leftover after parsing attributes in process `syz.1.1069'. [ 130.850356][ T8444] netlink: 'syz.4.1073': attribute type 3 has an invalid length. [ 130.859095][ T8443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1074'. [ 130.873561][ T8444] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.1073'. [ 130.942453][ T8452] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 131.072294][ T8464] IPVS: stopping backup sync thread 8452 ... [ 131.185752][ T8471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 131.322842][ T8476] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1083'. [ 131.507360][ T8484] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1087'. [ 131.561214][ T8485] netem: unknown loss type 0 [ 131.643033][ T8492] netlink: 'syz.1.1090': attribute type 4 has an invalid length. [ 132.135910][ T8519] netem: unknown loss type 0 [ 132.309855][ T8528] netlink: 'syz.4.1106': attribute type 5 has an invalid length. [ 132.433937][ T8535] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 132.805380][ T8558] netem: unknown loss type 0 [ 133.140569][ T8576] netlink: 'syz.3.1122': attribute type 21 has an invalid length. [ 133.192840][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.201032][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.419000][ T8589] macsec3: entered promiscuous mode [ 133.424470][ T8589] macvlan1: entered promiscuous mode [ 133.432786][ T8589] macsec3: entered allmulticast mode [ 133.438167][ T8589] macvlan1: entered allmulticast mode [ 133.444830][ T8589] veth1_vlan: entered allmulticast mode [ 133.673044][ T8599] netlink: 'syz.1.1130': attribute type 21 has an invalid length. [ 133.689212][ T8600] netem: unknown loss type 0 [ 133.694425][ T8600] netem: change failed [ 133.986720][ T8620] ipvlan2: entered allmulticast mode [ 133.993373][ T8620] veth0_vlan: entered allmulticast mode [ 134.182928][ T8634] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 134.380866][ T8643] netem: unknown loss type 0 [ 134.392634][ T8643] netem: change failed [ 134.658913][ T8657] dummy0: entered promiscuous mode [ 134.677032][ T8657] dummy0: left promiscuous mode [ 135.034189][ T8679] netlink: 'syz.1.1159': attribute type 4 has an invalid length. [ 135.044714][ T8677] netem: unknown loss type 0 [ 135.661344][ T8711] __nla_validate_parse: 50 callbacks suppressed [ 135.661364][ T8711] netlink: 728 bytes leftover after parsing attributes in process `syz.1.1172'. [ 135.707438][ T8709] macvlan2: entered promiscuous mode [ 135.738100][ T8709] macvlan2: entered allmulticast mode [ 135.773296][ T8709] bond_slave_0: entered promiscuous mode [ 135.779521][ T8709] bond_slave_1: entered promiscuous mode [ 135.831446][ T8709] bond0: entered allmulticast mode [ 135.832493][ T8722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 135.850440][ T8709] bond_slave_0: entered allmulticast mode [ 135.857147][ T8709] bond_slave_1: entered allmulticast mode [ 135.869119][ T8722] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1172'. [ 135.883213][ T8722] netlink: 2776 bytes leftover after parsing attributes in process `syz.1.1172'. [ 135.895672][ T8709] bond0: entered promiscuous mode [ 135.925910][ T8709] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 135.953679][ T8709] team0: Port device macvlan2 added [ 135.976586][ T8719] netem: unknown loss type 0 [ 136.214047][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1180'. [ 136.313203][ T8741] vlan2: entered promiscuous mode [ 136.318179][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1180'. [ 136.318894][ T8741] veth0: entered promiscuous mode [ 136.376510][ T8741] team0: Port device vlan2 added [ 136.523731][ T8751] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1187'. [ 136.591029][ T8758] netlink: 728 bytes leftover after parsing attributes in process `syz.0.1190'. [ 136.657483][ T8758] netem: unknown loss type 0 [ 136.667065][ T8758] netem: change failed [ 136.683831][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 136.707474][ T8758] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1190'. [ 136.924549][ T8778] netlink: 'syz.1.1195': attribute type 4 has an invalid length. [ 137.404342][ T8804] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 137.565498][ T8811] tipc: Started in network mode [ 137.581754][ T8811] tipc: Node identity fffffffd, cluster identity 4711 [ 137.588555][ T8811] tipc: Node number set to 4294967293 [ 137.653434][ T8814] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 137.834091][ T8828] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 138.032689][ T8843] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 138.186517][ T8856] trusted_key: syz.1.1221 sent an empty control message without MSG_MORE. [ 138.242668][ T8859] netlink: 'syz.2.1227': attribute type 2 has an invalid length. [ 138.294107][ T8862] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 138.332307][ T8862] team0: Port device macvlan3 added [ 138.400716][ T8870] netlink: 'syz.2.1230': attribute type 34 has an invalid length. [ 138.629471][ T8882] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 139.098668][ T8906] x_tables: duplicate underflow at hook 1 [ 139.532139][ T8267] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.558026][ T5099] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 139.576592][ T5099] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 139.585050][ T5099] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 139.594659][ T5099] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 139.604010][ T5099] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 139.631073][ T5099] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 139.696520][ T8928] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 139.818552][ T8267] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.066588][ T8267] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.102730][ T8941] dummy0: entered promiscuous mode [ 140.121956][ T8941] dummy0: left promiscuous mode [ 140.324924][ T8267] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.453491][ T8955] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 140.823006][ T8267] bridge_slave_1: left allmulticast mode [ 140.848033][ T8974] __nla_validate_parse: 8 callbacks suppressed [ 140.848051][ T8974] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1264'. [ 140.864012][ T8267] bridge_slave_1: left promiscuous mode [ 140.872958][ T8267] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.896927][ T8267] bridge_slave_0: left allmulticast mode [ 140.906585][ T8267] bridge_slave_0: left promiscuous mode [ 140.918104][ T8267] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.670025][ T5099] Bluetooth: hci3: command tx timeout [ 141.705097][ T8267] bond0 (unregistering): left allmulticast mode [ 141.711523][ T8267] bond_slave_0: left allmulticast mode [ 141.717078][ T8267] bond_slave_1: left allmulticast mode [ 141.723139][ T8267] bond0 (unregistering): left promiscuous mode [ 141.729833][ T8267] bond_slave_0: left promiscuous mode [ 141.735348][ T8267] bond_slave_1: left promiscuous mode [ 141.756049][ T8267] team0: Port device macvlan2 removed [ 141.774238][ T8267] team0: Port device macvlan3 removed [ 141.785472][ T8267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.797406][ T8267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.808067][ T8267] bond0 (unregistering): Released all slaves [ 141.821613][ T8267] bond1 (unregistering): Released all slaves [ 141.845182][ T8976] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1265'. [ 141.884082][ T8921] chnl_net:caif_netlink_parms(): no params data found [ 141.935941][ T8267] ɶƣ0GCTw: left promiscuous mode [ 142.054086][ T8993] netlink: 195492 bytes leftover after parsing attributes in process `syz.3.1270'. [ 142.230260][ T9006] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1275'. [ 142.627056][ T8921] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.695627][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.717300][ T8921] bridge_slave_0: entered allmulticast mode [ 142.735312][ T8921] bridge_slave_0: entered promiscuous mode [ 142.754226][ T9030] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1279'. [ 142.768364][ T8921] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.806152][ T8921] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.820618][ T8921] bridge_slave_1: entered allmulticast mode [ 142.857010][ T8921] bridge_slave_1: entered promiscuous mode [ 143.184612][ T8921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.260310][ T8921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.328527][ T9051] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1289'. [ 143.373346][ T8267] hsr_slave_0: left promiscuous mode [ 143.387443][ T8267] hsr_slave_1: left promiscuous mode [ 143.393612][ T8267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.402072][ T8267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.411356][ T8267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.418808][ T8267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.429102][ T8267] batman_adv: batadv0: Interface deactivated: macvtap1 [ 143.437971][ T8267] batman_adv: batadv0: Removing interface: macvtap1 [ 143.478617][ T8267] veth0: left promiscuous mode [ 143.494397][ T8267] dummy0: left promiscuous mode [ 143.500163][ T8267] veth1_macvtap: left promiscuous mode [ 143.506577][ T8267] veth0_macvtap: left promiscuous mode [ 143.512736][ T8267] veth1_vlan: left promiscuous mode [ 143.518284][ T8267] veth0_vlan: left promiscuous mode [ 143.689203][ T8267] team0 (unregistering): Port device vlan2 removed [ 143.749757][ T5099] Bluetooth: hci3: command tx timeout [ 144.001433][ T8267] team0 (unregistering): Port device team_slave_1 removed [ 144.038934][ T8267] team0 (unregistering): Port device team_slave_0 removed [ 144.382987][ T9057] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1288'. [ 144.506765][ T8921] team0: Port device team_slave_0 added [ 144.528500][ T8921] team0: Port device team_slave_1 added [ 144.756425][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.799388][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.800361][ T9088] netlink: 'syz.1.1295': attribute type 4 has an invalid length. [ 144.866952][ T9090] netlink: 'syz.1.1295': attribute type 4 has an invalid length. [ 144.889720][ T8921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.902504][ T9090] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1295'. [ 144.920169][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.927958][ T9088] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1295'. [ 144.934966][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.966493][ T8921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.223438][ T9108] netlink: 'syz.2.1298': attribute type 11 has an invalid length. [ 145.230676][ T8921] hsr_slave_0: entered promiscuous mode [ 145.250363][ T9108] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1298'. [ 145.260622][ T8921] hsr_slave_1: entered promiscuous mode [ 145.267632][ T8921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.286585][ T8921] Cannot create hsr debugfs directory [ 145.830603][ T5099] Bluetooth: hci3: command tx timeout [ 145.837613][ T9133] netlink: 'syz.4.1306': attribute type 4 has an invalid length. [ 145.871618][ T9137] __nla_validate_parse: 1 callbacks suppressed [ 145.871635][ T9137] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1307'. [ 146.011819][ T9141] netlink: 276 bytes leftover after parsing attributes in process `syz.1.1308'. [ 146.108359][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1309'. [ 146.330404][ T9159] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 146.444028][ T9166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1315'. [ 146.518262][ T9170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1316'. [ 146.531198][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1314'. [ 146.556127][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 146.781635][ T9179] dvmrp0: entered allmulticast mode [ 146.802455][ T9180] dvmrp0: left allmulticast mode [ 147.092681][ T9206] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1325'. [ 147.105589][ T9206] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1325'. [ 147.135911][ T9206] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 147.194505][ T8921] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.241204][ T8921] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.312104][ T8921] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.370364][ T8921] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.399942][ T9214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1327'. [ 147.660094][ T9229] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.667566][ T9229] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.680426][ T9229] bridge0: left promiscuous mode [ 147.714675][ T9229] bridge0: left allmulticast mode [ 147.909996][ T5099] Bluetooth: hci3: command tx timeout [ 148.030764][ T8921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.097581][ T8921] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.160377][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.167579][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.277214][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.284427][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.391272][ T9271] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 148.440959][ T9271] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 148.546096][ T9271] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 148.583944][ T9271] bridge0: port 3(netdevsim0) entered disabled state [ 148.628258][ T9271] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 148.653750][ T9271] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 148.708405][ T9280] batadv_slave_0: entered allmulticast mode [ 149.098673][ T9302] netlink: 'syz.3.1346': attribute type 2 has an invalid length. [ 149.503290][ T8921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.696016][ T8921] veth0_vlan: entered promiscuous mode [ 149.734883][ T8921] veth1_vlan: entered promiscuous mode [ 149.844904][ T8921] veth0_macvtap: entered promiscuous mode [ 149.893336][ T8921] veth1_macvtap: entered promiscuous mode [ 149.945062][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.002183][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.031172][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.069666][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.112740][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.117003][ T9366] FAULT_INJECTION: forcing a failure. [ 150.117003][ T9366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.134104][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.169473][ T9366] CPU: 1 PID: 9366 Comm: syz.3.1360 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 150.171297][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.179566][ T9366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 150.179580][ T9366] Call Trace: [ 150.179588][ T9366] [ 150.179596][ T9366] dump_stack_lvl+0x241/0x360 [ 150.179624][ T9366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.179643][ T9366] ? __pfx__printk+0x10/0x10 [ 150.179662][ T9366] ? __pfx_lock_release+0x10/0x10 [ 150.179689][ T9366] should_fail_ex+0x3b0/0x4e0 [ 150.179724][ T9366] _copy_from_user+0x2f/0xe0 [ 150.179746][ T9366] copy_msghdr_from_user+0xae/0x680 [ 150.179773][ T9366] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 150.179810][ T9366] do_recvmmsg+0x40f/0xae0 [ 150.179839][ T9366] ? __pfx_lock_release+0x10/0x10 [ 150.198915][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.200256][ T9366] ? __pfx_do_recvmmsg+0x10/0x10 [ 150.200303][ T9366] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 150.200326][ T9366] ? ksys_write+0x23e/0x2c0 [ 150.200347][ T9366] ? __pfx_lock_release+0x10/0x10 [ 150.205911][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.206544][ T9366] ? vfs_write+0x7c4/0xc90 [ 150.297179][ T9366] ? __mutex_unlock_slowpath+0x21d/0x750 [ 150.302824][ T9366] ? __fget_files+0x3f6/0x470 [ 150.307509][ T9366] __x64_sys_recvmmsg+0x199/0x250 [ 150.312535][ T9366] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 150.318080][ T9366] ? do_syscall_64+0x100/0x230 [ 150.322840][ T9366] ? do_syscall_64+0xb6/0x230 [ 150.327524][ T9366] do_syscall_64+0xf3/0x230 [ 150.332021][ T9366] ? clear_bhb_loop+0x35/0x90 [ 150.336691][ T9366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.342575][ T9366] RIP: 0033:0x7febec975bd9 [ 150.346980][ T9366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.366593][ T9366] RSP: 002b:00007febed807048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 150.375013][ T9366] RAX: ffffffffffffffda RBX: 00007febecb03f60 RCX: 00007febec975bd9 [ 150.382975][ T9366] RDX: 0400000000000179 RSI: 0000000020000480 RDI: 0000000000000003 [ 150.390937][ T9366] RBP: 00007febed8070a0 R08: 0000000000000000 R09: 0000000000000000 [ 150.398896][ T9366] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 150.406879][ T9366] R13: 000000000000004d R14: 00007febecb03f60 R15: 00007ffc675b9888 [ 150.414865][ T9366] [ 150.501241][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.512412][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.525207][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.544956][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.557083][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.575264][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.605654][ T8921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.617052][ T8921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.645027][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.674761][ T9348] netlink: 'syz.4.1357': attribute type 10 has an invalid length. [ 150.712455][ T9348] team0: Device dummy0 failed to register rx_handler [ 150.883968][ T8921] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.936017][ T8921] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.977799][ T8921] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.005483][ T8921] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.093613][ T9389] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 151.386515][ T7082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.410047][ T7082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.483931][ T7082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.500041][ T7082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.693071][ T9427] __nla_validate_parse: 3 callbacks suppressed [ 151.693091][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1376'. [ 151.809502][ T9436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1234'. [ 151.948246][ T9444] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1380'. [ 151.982862][ T9444] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1380'. [ 151.985509][ T9446] netlink: 'syz.2.1381': attribute type 34 has an invalid length. [ 152.014157][ T9444] netlink: 'syz.1.1380': attribute type 5 has an invalid length. [ 152.030964][ T9444] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1380'. [ 152.066835][ T9449] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1382'. [ 152.675279][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 152.766163][ T9489] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1392'. [ 152.947449][ T9483] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1392'. [ 152.998831][ T9483] IPv6: sit1: Disabled Multicast RS [ 153.318772][ T9520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1401'. [ 153.383393][ T9524] netlink: 'syz.2.1402': attribute type 10 has an invalid length. [ 153.437170][ T9524] bond0: (slave netdevsim0): Releasing backup interface [ 153.463766][ T9524] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 153.498980][ T9524] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 153.524719][ T9524] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 153.537535][ T9524] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 153.555078][ T9524] team0: Failed to send options change via netlink (err -105) [ 153.563149][ T9524] team0: Port device netdevsim0 added [ 153.572231][ T9521] netlink: 'syz.2.1402': attribute type 10 has an invalid length. [ 153.599063][ T9521] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 153.627601][ T9521] team0: Failed to send options change via netlink (err -105) [ 153.641030][ T9521] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 153.668081][ T9521] team0: Port device netdevsim0 removed [ 153.686183][ T9521] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 153.695687][ T9521] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 153.706049][ T9521] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 153.719755][ T9530] 0: renamed from hsr_slave_1 (while UP) [ 153.733098][ T9530] 0: entered allmulticast mode [ 153.738715][ T9530] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 154.430382][ T9573] netlink: 'syz.2.1417': attribute type 10 has an invalid length. [ 154.484723][ T9573] bond0: (slave netdevsim0): Releasing backup interface [ 154.513231][ T9573] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 154.532436][ T9573] bridge0: port 3(netdevsim0) entered blocking state [ 154.540524][ T9573] bridge0: port 3(netdevsim0) entered disabled state [ 154.547541][ T9573] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 154.557983][ T9573] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 154.819696][ T9592] netlink: 'syz.4.1424': attribute type 2 has an invalid length. [ 154.846881][ T9592] netlink: 'syz.4.1424': attribute type 2 has an invalid length. [ 154.870111][ T9592] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 154.878489][ T9592] netlink: 'syz.4.1424': attribute type 2 has an invalid length. [ 155.116276][ T9607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.146651][ T9607] bond0: entered promiscuous mode [ 155.160388][ T9607] bond_slave_0: entered promiscuous mode [ 155.175210][ T9607] bond_slave_1: entered promiscuous mode [ 155.205298][ T9607] team0: Port device bond0 added [ 155.284123][ T9607] team_slave_0: left promiscuous mode [ 155.347587][ T9607] team0: Port device team_slave_0 removed [ 155.358391][ T9607] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 155.375300][ T9623] FAULT_INJECTION: forcing a failure. [ 155.375300][ T9623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 155.391410][ T9623] CPU: 1 PID: 9623 Comm: syz.2.1435 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 155.401503][ T9623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 155.411570][ T9623] Call Trace: [ 155.414854][ T9623] [ 155.417792][ T9623] dump_stack_lvl+0x241/0x360 [ 155.418833][ T9615] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 155.422558][ T9623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 155.436417][ T9623] ? __pfx__printk+0x10/0x10 [ 155.441124][ T9623] should_fail_ex+0x3b0/0x4e0 [ 155.445828][ T9623] prepare_alloc_pages+0x1da/0x5d0 [ 155.450972][ T9623] __alloc_pages_noprof+0x166/0x6c0 [ 155.456203][ T9623] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 155.461968][ T9623] alloc_pages_mpol_noprof+0x3e8/0x680 [ 155.467451][ T9623] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 155.473472][ T9623] vma_alloc_folio_noprof+0xf3/0x1f0 [ 155.478779][ T9623] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 155.484701][ T9623] folio_prealloc+0x31/0x170 [ 155.489309][ T9623] handle_pte_fault+0x257b/0x7090 [ 155.494358][ T9623] ? __pfx_validate_chain+0x10/0x10 [ 155.499581][ T9623] ? __pfx_handle_pte_fault+0x10/0x10 [ 155.504972][ T9623] ? __lock_acquire+0x1346/0x1fd0 [ 155.510050][ T9623] ? __pfx_lock_release+0x10/0x10 [ 155.515098][ T9623] handle_mm_fault+0x10df/0x1ba0 [ 155.520080][ T9623] ? __pfx_handle_mm_fault+0x10/0x10 [ 155.525402][ T9623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 155.531754][ T9623] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 155.537057][ T9623] exc_page_fault+0x2b9/0x8c0 [ 155.541763][ T9623] asm_exc_page_fault+0x26/0x30 [ 155.546624][ T9623] RIP: 0010:put_cmsg+0x2c7/0x640 [ 155.551573][ T9623] Code: ef 4b 41 f8 48 89 df 4c 89 e6 e8 64 49 41 f8 4c 89 f0 4c 01 e0 0f 88 5e 02 00 00 4c 39 e0 0f 82 55 02 00 00 0f 01 cb 0f ae e8 <4d> 89 34 24 8b 44 24 0c 41 89 44 24 08 8b 44 24 1c 41 89 44 24 0c [ 155.571199][ T9623] RSP: 0018:ffffc900043773f8 EFLAGS: 00050206 [ 155.577289][ T9623] RAX: 0000000020002c24 RBX: 0000000020002c24 RCX: ffff888023070000 [ 155.585276][ T9623] RDX: 0000000000000000 RSI: 0000000020002c00 RDI: 0000000020002c24 [ 155.593268][ T9623] RBP: ffffc90004377d48 R08: ffffffff8954e05c R09: ffffffff820a1f97 [ 155.601252][ T9623] R10: 0000000000000003 R11: ffff888023070000 R12: 0000000020002c00 [ 155.609240][ T9623] R13: 0000000000000014 R14: 0000000000000024 R15: dffffc0000000000 [ 155.617232][ T9623] ? __check_object_size+0x77/0x900 [ 155.622460][ T9623] ? put_cmsg+0x2ac/0x640 [ 155.626814][ T9623] ? put_cmsg+0x2ac/0x640 [ 155.631174][ T9623] ip6_datagram_recv_specific_ctl+0xa43/0x19a0 [ 155.637350][ T9623] ? __might_fault+0xaa/0x120 [ 155.642057][ T9623] ? __pfx_ip6_datagram_recv_specific_ctl+0x10/0x10 [ 155.648665][ T9623] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 155.654058][ T9623] ? ip6_datagram_recv_common_ctl+0x145/0x480 [ 155.660180][ T9623] ? __pfx_ip6_datagram_recv_common_ctl+0x10/0x10 [ 155.666617][ T9623] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 155.672022][ T9623] udpv6_recvmsg+0x134d/0x1a20 [ 155.676804][ T9623] ? mark_lock+0x9a/0x350 [ 155.681167][ T9623] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 155.686304][ T9623] ? aa_sk_perm+0x967/0xab0 [ 155.690827][ T9623] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 155.695962][ T9623] inet6_recvmsg+0x242/0x730 [ 155.700580][ T9623] ? __pfx_inet6_recvmsg+0x10/0x10 [ 155.705709][ T9623] ? aa_sock_msg_perm+0x91/0x160 [ 155.710669][ T9623] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 155.715965][ T9623] ? security_socket_recvmsg+0x90/0xb0 [ 155.721451][ T9623] sock_recvmsg+0x109/0x280 [ 155.725976][ T9623] ____sys_recvmsg+0x1db/0x470 [ 155.730771][ T9623] ? __pfx_____sys_recvmsg+0x10/0x10 [ 155.736099][ T9623] do_recvmmsg+0x474/0xae0 [ 155.740545][ T9623] ? __pfx_lock_release+0x10/0x10 [ 155.745587][ T9623] ? __pfx_do_recvmmsg+0x10/0x10 [ 155.750566][ T9623] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 155.756475][ T9623] ? ksys_write+0x23e/0x2c0 [ 155.760994][ T9623] ? __pfx_lock_release+0x10/0x10 [ 155.766041][ T9623] ? vfs_write+0x7c4/0xc90 [ 155.770480][ T9623] ? __mutex_unlock_slowpath+0x21d/0x750 [ 155.776140][ T9623] ? __fget_files+0x3f6/0x470 [ 155.780855][ T9623] __x64_sys_recvmmsg+0x199/0x250 [ 155.785904][ T9623] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 155.791471][ T9623] ? do_syscall_64+0x100/0x230 [ 155.796254][ T9623] ? do_syscall_64+0xb6/0x230 [ 155.800950][ T9623] do_syscall_64+0xf3/0x230 [ 155.805466][ T9623] ? clear_bhb_loop+0x35/0x90 [ 155.810164][ T9623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.816072][ T9623] RIP: 0033:0x7f88b3575bd9 [ 155.820500][ T9623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.840105][ T9623] RSP: 002b:00007f88b4318048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 155.848510][ T9623] RAX: ffffffffffffffda RBX: 00007f88b3703f60 RCX: 00007f88b3575bd9 [ 155.856470][ T9623] RDX: 0000000000000001 RSI: 0000000020000980 RDI: 0000000000000003 [ 155.864434][ T9623] RBP: 00007f88b43180a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.872394][ T9623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.880355][ T9623] R13: 000000000000004d R14: 00007f88b3703f60 R15: 00007fff6dd908f8 [ 155.888326][ T9623] [ 156.016748][ T9645] validate_nla: 3 callbacks suppressed [ 156.016766][ T9645] netlink: 'syz.1.1445': attribute type 5 has an invalid length. [ 156.252487][ T9656] netlink: 'syz.1.1448': attribute type 2 has an invalid length. [ 156.331194][ T9653] netlink: 'syz.2.1446': attribute type 1 has an invalid length. [ 156.925011][ T9691] netlink: 'syz.4.1460': attribute type 4 has an invalid length. [ 157.055811][ T9700] __nla_validate_parse: 16 callbacks suppressed [ 157.055830][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1461'. [ 157.180906][ T9706] macvlan2: entered allmulticast mode [ 157.201281][ T9706] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 157.214725][ T9706] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 157.258903][ T9706] team0: Port device macvlan2 added [ 157.595873][ T9732] netlink: 'syz.3.1473': attribute type 3 has an invalid length. [ 157.702650][ T9736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1475'. [ 157.726264][ T9736] syz_tun: entered promiscuous mode [ 157.735881][ T9736] macsec1: entered promiscuous mode [ 157.745648][ T9736] macsec1: entered allmulticast mode [ 157.751688][ T9736] syz_tun: entered allmulticast mode [ 157.764634][ T9737] ɶƣ0GCTw: entered promiscuous mode [ 157.772426][ T9739] team0: Device is already in use. [ 157.971395][ T9753] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 157.984224][ T9753] netlink: 'syz.0.1480': attribute type 2 has an invalid length. [ 157.993569][ T9753] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 158.001636][ T9753] netlink: 'syz.0.1480': attribute type 2 has an invalid length. [ 158.014870][ T9753] netlink: 'syz.0.1480': attribute type 1 has an invalid length. [ 158.038410][ T9758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1482'. [ 158.109646][ T9760] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1483'. [ 158.278939][ T9768] netlink: 210620 bytes leftover after parsing attributes in process `syz.4.1486'. [ 158.367678][ T9772] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1487'. [ 158.422059][ T9776] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1487'. [ 158.433346][ T9776] openvswitch: netlink: Geneve opt len 13 is not a multiple of 4. [ 158.442788][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1489'. [ 158.461705][ T9778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1489'. [ 158.493149][ T9778] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1489'. [ 158.666623][ T9788] sctp: [Deprecated]: syz.1.1494 (pid 9788) Use of int in max_burst socket option deprecated. [ 158.666623][ T9788] Use struct sctp_assoc_value instead [ 158.800279][ T9795] netem: unknown loss type 0 [ 158.824367][ T9797] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 158.898502][ T9792] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.908229][ T9792] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.917381][ T9792] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.926604][ T9792] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.971376][ T9792] vxlan0: entered promiscuous mode [ 159.460017][ T9832] netem: unknown loss type 0 [ 159.497409][ T9787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.956154][ T9859] netem: unknown loss type 0 [ 160.480303][ T9891] netem: unknown loss type 0 [ 161.017844][ T9925] SET target dimension over the limit! [ 161.026454][ T9926] validate_nla: 133 callbacks suppressed [ 161.026471][ T9926] netlink: 'syz.0.1539': attribute type 10 has an invalid length. [ 161.103321][ T9926] team0: Device ipvlan1 failed to register rx_handler [ 161.181113][ T9928] netem: unknown loss type 0 [ 161.406116][ T9950] netlink: 'syz.1.1551': attribute type 10 has an invalid length. [ 161.470311][ T9950] bridge0: port 3(netdevsim0) entered blocking state [ 161.486594][ T9950] bridge0: port 3(netdevsim0) entered disabled state [ 161.496400][ T9950] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 161.508139][ T9950] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 161.531753][ T9951] vlan4: entered promiscuous mode [ 161.547637][ T9951] veth0: entered promiscuous mode [ 161.576409][ T9951] team0: Port device vlan4 added [ 162.017248][ T9976] netem: unknown loss type 0 [ 162.190309][ T9989] netlink: 'syz.2.1566': attribute type 4 has an invalid length. [ 162.296340][ T9992] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-xor(2) [ 162.500907][T10005] __nla_validate_parse: 46 callbacks suppressed [ 162.500926][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1571'. [ 162.513265][T10008] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1573'. [ 162.562377][T10005] block nbd0: not configured, cannot reconfigure [ 162.673983][T10017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1575'. [ 162.802424][T10024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1578'. [ 162.816395][T10024] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 162.863114][T10029] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1580'. [ 162.969789][T10035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1581'. [ 163.072413][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1583'. [ 163.109491][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1584'. [ 163.645891][T10080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1594'. [ 163.715417][T10084] netlink: 'syz.4.1596': attribute type 4 has an invalid length. [ 163.784499][T10086] IPv6: sit2: Disabled Multicast RS [ 163.818546][T10089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'. [ 164.046251][T10102] team0: Device is already in use. [ 164.051896][T10099] netlink: 'syz.2.1601': attribute type 2 has an invalid length. [ 164.824977][T10143] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 164.854031][T10143] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 165.030187][T10156] FAULT_INJECTION: forcing a failure. [ 165.030187][T10156] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 165.049452][T10156] CPU: 0 PID: 10156 Comm: syz.0.1625 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 165.059653][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 165.069729][T10156] Call Trace: [ 165.073024][T10156] [ 165.075970][T10156] dump_stack_lvl+0x241/0x360 [ 165.080670][T10156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.085892][T10156] ? __pfx__printk+0x10/0x10 [ 165.086864][T10160] vlan2: entered promiscuous mode [ 165.090482][T10156] ? __pfx_lock_release+0x10/0x10 [ 165.090519][T10156] should_fail_ex+0x3b0/0x4e0 [ 165.090549][T10156] _copy_from_user+0x2f/0xe0 [ 165.090570][T10156] copy_msghdr_from_user+0xae/0x680 [ 165.095891][T10160] vlan2: entered allmulticast mode [ 165.100601][T10156] ? __pfx___might_resched+0x10/0x10 [ 165.100636][T10156] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 165.100664][T10156] ? __might_fault+0xaa/0x120 [ 165.100692][T10156] do_recvmmsg+0x40f/0xae0 [ 165.110152][T10160] team_slave_0: entered promiscuous mode [ 165.115117][T10156] ? __pfx_lock_release+0x10/0x10 [ 165.115148][T10156] ? __pfx_do_recvmmsg+0x10/0x10 [ 165.120515][T10160] team_slave_1: entered promiscuous mode [ 165.125690][T10156] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 165.136654][T10160] team0: entered allmulticast mode [ 165.140507][T10156] ? ksys_write+0x23e/0x2c0 [ 165.140537][T10156] ? __pfx_lock_release+0x10/0x10 [ 165.140563][T10156] ? vfs_write+0x7c4/0xc90 [ 165.140587][T10156] ? __mutex_unlock_slowpath+0x21d/0x750 [ 165.146447][T10160] team_slave_0: entered allmulticast mode [ 165.151214][T10156] ? __fget_files+0x3f6/0x470 [ 165.151259][T10156] __x64_sys_recvmmsg+0x199/0x250 [ 165.151288][T10156] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 165.151312][T10156] ? do_syscall_64+0x100/0x230 [ 165.151335][T10156] ? do_syscall_64+0xb6/0x230 [ 165.157829][T10160] team_slave_1: entered allmulticast mode [ 165.161847][T10156] do_syscall_64+0xf3/0x230 [ 165.161875][T10156] ? clear_bhb_loop+0x35/0x90 [ 165.161899][T10156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.161917][T10156] RIP: 0033:0x7fcbaff75bd9 [ 165.161934][T10156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.161948][T10156] RSP: 002b:00007fcbb0d1a048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 165.161969][T10156] RAX: ffffffffffffffda RBX: 00007fcbb0103f60 RCX: 00007fcbaff75bd9 [ 165.161982][T10156] RDX: 0400000000000179 RSI: 0000000020000480 RDI: 0000000000000003 [ 165.161994][T10156] RBP: 00007fcbb0d1a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 165.162006][T10156] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 165.162017][T10156] R13: 000000000000000b R14: 00007fcbb0103f60 R15: 00007ffd435db548 [ 165.162046][T10156] [ 165.328421][T10160] team0: entered promiscuous mode [ 165.373020][T10160] team0: left allmulticast mode [ 165.377942][T10160] team_slave_0: left allmulticast mode [ 165.394145][T10160] team_slave_1: left allmulticast mode [ 165.405412][T10160] team0: left promiscuous mode [ 165.416846][T10160] team_slave_0: left promiscuous mode [ 165.422356][T10160] team_slave_1: left promiscuous mode [ 165.842953][T10184] ieee802154 phy0 wpan0: encryption failed: -90 [ 166.392389][T10221] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 166.566865][T10225] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.574123][T10225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.582648][T10225] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.589854][T10225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.652834][T10225] bridge0: entered promiscuous mode [ 167.117932][T10257] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 167.138280][T10260] Cannot find add_set index 17 as target [ 167.436587][T10273] syz_tun (unregistering): left allmulticast mode [ 167.727711][T10286] netlink: 'syz.2.1674': attribute type 13 has an invalid length. [ 167.786905][T10289] __nla_validate_parse: 10 callbacks suppressed [ 167.786925][T10289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1675'. [ 168.234952][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1679'. [ 168.327312][T10314] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1686'. [ 168.338868][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1686'. [ 168.479969][T10323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1690'. [ 168.508032][T10324] netlink: 'syz.2.1688': attribute type 4 has an invalid length. [ 169.115266][T10358] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 169.134010][T10359] netlink: 'syz.3.1704': attribute type 34 has an invalid length. [ 169.253599][T10365] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1705'. [ 169.304513][T10368] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1708'. [ 169.314793][T10368] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1708'. [ 169.325767][T10368] netlink: 'syz.1.1708': attribute type 5 has an invalid length. [ 169.346983][T10368] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1708'. [ 169.401871][T10372] netlink: 'syz.0.1710': attribute type 11 has an invalid length. [ 169.413730][T10372] netlink: 'syz.0.1710': attribute type 11 has an invalid length. [ 169.428450][T10372] debugfs: Directory 'netdev:' with parent 'phy16' already present! [ 169.492845][T10371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1709'. [ 169.967583][T10404] netlink: 'syz.3.1724': attribute type 11 has an invalid length. [ 170.116509][T10411] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 170.142014][T10411] 0XD: renamed from gretap0 (while UP) [ 170.198593][T10411] 0XD: entered allmulticast mode [ 170.208870][T10414] bridge0: left promiscuous mode [ 170.399991][T10421] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.564634][T10421] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.704187][T10421] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.790003][T10446] netlink: 'syz.2.1739': attribute type 8 has an invalid length. [ 170.804986][T10448] netlink: 'syz.1.1740': attribute type 1 has an invalid length. [ 170.828088][T10448] NCSI netlink: No device for ifindex 0 [ 170.876210][T10421] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode [ 170.912753][T10421] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 170.930398][T10421] bridge0: port 3(netdevsim0) entered disabled state [ 170.944898][T10459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.959178][T10421] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.093113][T10464] netlink: 'syz.0.1746': attribute type 11 has an invalid length. [ 171.163544][T10464] netlink: 'syz.0.1746': attribute type 11 has an invalid length. [ 171.198216][T10421] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.255321][T10421] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.349220][T10421] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.398953][T10421] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.509608][T10485] netlink: 'syz.0.1755': attribute type 30 has an invalid length. [ 171.532059][T10485] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 171.546109][T10485] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 171.746012][T10458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.945727][T10513] tipc: Started in network mode [ 171.952329][T10513] tipc: Node identity 0000000000004c3a0000400000000001, cluster identity 4711 [ 171.964172][T10513] tipc: Enabling of bearer rejected, failed to enable media [ 172.624841][T10543] netlink: 'syz.0.1776': attribute type 1 has an invalid length. [ 173.009743][T10557] __nla_validate_parse: 19 callbacks suppressed [ 173.009762][T10557] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1781'. [ 173.076112][T10557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1781'. [ 173.119161][T10557] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 173.273893][T10574] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1788'. [ 173.412280][T10580] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1790'. [ 173.478487][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1791'. [ 173.519727][T10586] block nbd0: not configured, cannot reconfigure [ 173.647928][T10598] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1794'. [ 173.854271][T10611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 173.920285][T10611] netlink: 'syz.0.1800': attribute type 1 has an invalid length. [ 173.948592][T10611] netlink: 'syz.0.1800': attribute type 2 has an invalid length. [ 174.380808][T10634] bond_slave_0: entered promiscuous mode [ 174.386837][T10634] bond_slave_1: entered promiscuous mode [ 174.415514][T10634] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 174.424017][T10643] netlink: 276 bytes leftover after parsing attributes in process `syz.2.1810'. [ 174.426353][T10634] team0: Port device macvlan3 added [ 174.440563][T10640] bridge0: entered allmulticast mode [ 174.472674][T10640] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.479923][T10640] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.487617][T10640] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.494818][T10640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.534360][T10640] bridge0: entered promiscuous mode [ 174.587655][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 174.719135][T10640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1808'. [ 174.866141][T10666] netlink: 'syz.0.1817': attribute type 34 has an invalid length. [ 175.127692][ T4545] udevd[4545]: worker [5108] terminated by signal 33 (Unknown signal 33) [ 175.151307][ T4545] udevd[4545]: worker [5108] failed while handling '/devices/virtual/block/loop1' [ 175.392878][T10700] tipc: Enabling of bearer rejected, failed to enable media [ 175.654046][T10720] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 175.910052][T10734] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 175.945162][T10743] xt_limit: Overflow, try lower: 262144/524288 [ 176.018109][T10747] 0XD: left allmulticast mode [ 176.027252][T10747] bridge0: left promiscuous mode [ 176.418625][T10762] netlink: 'syz.3.1856': attribute type 10 has an invalid length. [ 176.465721][T10762] bridge0: port 3(netdevsim0) entered blocking state [ 176.486222][T10762] bridge0: port 3(netdevsim0) entered disabled state [ 176.497838][T10762] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 176.511896][T10762] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 176.535584][T10766] vlan2: entered promiscuous mode [ 176.546679][T10766] veth0: entered promiscuous mode [ 176.568555][T10766] team0: Port device vlan2 added [ 176.607156][T10770] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 176.870011][T10784] FAULT_INJECTION: forcing a failure. [ 176.870011][T10784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.910409][T10784] CPU: 1 PID: 10784 Comm: syz.1.1866 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 176.920620][T10784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 176.930690][T10784] Call Trace: [ 176.933986][T10784] [ 176.936938][T10784] dump_stack_lvl+0x241/0x360 [ 176.941638][T10784] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.946848][T10784] ? __pfx__printk+0x10/0x10 [ 176.951440][T10784] ? __pfx_lock_release+0x10/0x10 [ 176.956472][T10784] should_fail_ex+0x3b0/0x4e0 [ 176.961241][T10784] _copy_from_user+0x2f/0xe0 [ 176.965846][T10784] copy_msghdr_from_user+0xae/0x680 [ 176.971061][T10784] ? __pfx___might_resched+0x10/0x10 [ 176.976367][T10784] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 176.982196][T10784] ? __might_fault+0xaa/0x120 [ 176.986899][T10784] do_recvmmsg+0x40f/0xae0 [ 176.991342][T10784] ? __pfx_lock_release+0x10/0x10 [ 176.996382][T10784] ? __pfx_do_recvmmsg+0x10/0x10 [ 177.001345][T10784] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 177.007234][T10784] ? ksys_write+0x23e/0x2c0 [ 177.011733][T10784] ? __pfx_lock_release+0x10/0x10 [ 177.016752][T10784] ? vfs_write+0x7c4/0xc90 [ 177.021163][T10784] ? __mutex_unlock_slowpath+0x21d/0x750 [ 177.026794][T10784] ? __fget_files+0x3f6/0x470 [ 177.031477][T10784] __x64_sys_recvmmsg+0x199/0x250 [ 177.036502][T10784] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 177.042043][T10784] ? do_syscall_64+0x100/0x230 [ 177.046819][T10784] ? do_syscall_64+0xb6/0x230 [ 177.051487][T10784] do_syscall_64+0xf3/0x230 [ 177.055979][T10784] ? clear_bhb_loop+0x35/0x90 [ 177.060651][T10784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.066531][T10784] RIP: 0033:0x7f53ac375bd9 [ 177.070935][T10784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.090526][T10784] RSP: 002b:00007f53ad12c048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 177.098933][T10784] RAX: ffffffffffffffda RBX: 00007f53ac503f60 RCX: 00007f53ac375bd9 [ 177.106895][T10784] RDX: 0400000000000179 RSI: 0000000020000480 RDI: 0000000000000003 [ 177.114855][T10784] RBP: 00007f53ad12c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.122814][T10784] R10: 0000000000010022 R11: 0000000000000246 R12: 0000000000000001 [ 177.130771][T10784] R13: 000000000000004d R14: 00007f53ac503f60 R15: 00007ffe5f44c828 [ 177.138740][T10784] [ 177.324587][T10804] FAULT_INJECTION: forcing a failure. [ 177.324587][T10804] name failslab, interval 1, probability 0, space 0, times 0 [ 177.353606][T10804] CPU: 0 PID: 10804 Comm: syz.2.1874 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 177.363806][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 177.373878][T10804] Call Trace: [ 177.377169][T10804] [ 177.380110][T10804] dump_stack_lvl+0x241/0x360 [ 177.384807][T10804] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.390024][T10804] ? __pfx__printk+0x10/0x10 [ 177.394630][T10804] ? __lock_acquire+0x1346/0x1fd0 [ 177.399679][T10804] should_fail_ex+0x3b0/0x4e0 [ 177.404381][T10804] ? __alloc_skb+0x1c3/0x440 [ 177.409000][T10804] should_failslab+0x9/0x20 [ 177.413526][T10804] kmem_cache_alloc_node_noprof+0x71/0x320 [ 177.419361][T10804] __alloc_skb+0x1c3/0x440 [ 177.423796][T10804] ? validate_chain+0x11e/0x5900 [ 177.428756][T10804] ? __pfx___alloc_skb+0x10/0x10 [ 177.433721][T10804] alloc_skb_with_frags+0xc3/0x770 [ 177.438857][T10804] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 177.444249][T10804] sock_alloc_send_pskb+0x91a/0xa60 [ 177.449489][T10804] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 177.455239][T10804] ? aa_sk_perm+0x967/0xab0 [ 177.459764][T10804] hci_sock_sendmsg+0x22b/0x11c0 [ 177.464724][T10804] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 177.470116][T10804] ? aa_sock_msg_perm+0x91/0x160 [ 177.475080][T10804] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 177.480383][T10804] ? security_socket_sendmsg+0x87/0xb0 [ 177.485860][T10804] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 177.491245][T10804] __sock_sendmsg+0x221/0x270 [ 177.495939][T10804] sock_write_iter+0x2dd/0x400 [ 177.500727][T10804] ? __pfx_sock_write_iter+0x10/0x10 [ 177.506038][T10804] ? bpf_lsm_file_permission+0x9/0x10 [ 177.511429][T10804] ? security_file_permission+0x7f/0xa0 [ 177.516999][T10804] vfs_write+0xa72/0xc90 [ 177.521259][T10804] ? __pfx_sock_write_iter+0x10/0x10 [ 177.526558][T10804] ? __pfx_vfs_write+0x10/0x10 [ 177.531362][T10804] ksys_write+0x1a0/0x2c0 [ 177.535715][T10804] ? __pfx_ksys_write+0x10/0x10 [ 177.540582][T10804] ? do_syscall_64+0x100/0x230 [ 177.545366][T10804] ? do_syscall_64+0xb6/0x230 [ 177.550058][T10804] do_syscall_64+0xf3/0x230 [ 177.554580][T10804] ? clear_bhb_loop+0x35/0x90 [ 177.559276][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.565184][T10804] RIP: 0033:0x7f88b3575bd9 [ 177.569615][T10804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.583607][T10815] ================================================================== [ 177.589213][T10804] RSP: 002b:00007f88b4318048 EFLAGS: 00000246 [ 177.597255][T10815] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50 [ 177.603330][T10804] ORIG_RAX: 0000000000000001 [ 177.611187][T10815] Read of size 4 at addr ffff88804a8c3568 by task syz.1.1877/10815 [ 177.615833][T10804] RAX: ffffffffffffffda RBX: 00007f88b3703f60 RCX: 00007f88b3575bd9 [ 177.623686][T10815] [ 177.633992][T10804] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000005 [ 177.641959][T10804] RBP: 00007f88b43180a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.649929][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.657893][T10804] R13: 000000000000004d R14: 00007f88b3703f60 R15: 00007fff6dd908f8 [ 177.665878][T10804] [ 177.668888][T10815] CPU: 1 PID: 10815 Comm: syz.1.1877 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 177.679042][T10815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 177.689100][T10815] Call Trace: [ 177.692381][T10815] [ 177.695318][T10815] dump_stack_lvl+0x241/0x360 [ 177.700011][T10815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.704968][T10820] xt_l2tp: missing protocol rule (udp|l2tpip) [ 177.705202][T10815] ? __pfx__printk+0x10/0x10 [ 177.712318][T10820] @: renamed from veth0_vlan (while UP) [ 177.715809][T10815] ? _printk+0xd5/0x120 [ 177.715833][T10815] ? __virt_addr_valid+0x183/0x520 [ 177.730878][T10815] ? __virt_addr_valid+0x183/0x520 [ 177.735982][T10815] print_report+0x169/0x550 [ 177.740474][T10815] ? __virt_addr_valid+0x183/0x520 [ 177.745571][T10815] ? __virt_addr_valid+0x183/0x520 [ 177.750666][T10815] ? __virt_addr_valid+0x44e/0x520 [ 177.755763][T10815] ? __phys_addr+0xba/0x170 [ 177.760255][T10815] ? hci_sock_get_cookie+0x49/0x50 [ 177.765357][T10815] kasan_report+0x143/0x180 [ 177.769847][T10815] ? hci_sock_get_cookie+0x49/0x50 [ 177.774950][T10815] hci_sock_get_cookie+0x49/0x50 [ 177.779874][T10815] mgmt_cmd_status+0x1be/0x4d0 [ 177.784631][T10815] cmd_complete_rsp+0xe7/0x150 [ 177.789380][T10815] mgmt_pending_foreach+0xd1/0x130 [ 177.794479][T10815] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 177.799835][T10815] __mgmt_power_off+0x187/0x420 [ 177.804668][T10815] ? __pfx___mgmt_power_off+0x10/0x10 [ 177.810038][T10815] ? __mutex_trylock_common+0x183/0x2e0 [ 177.815573][T10815] ? __pfx___might_resched+0x10/0x10 [ 177.820845][T10815] ? __pfx___mutex_trylock_common+0x10/0x10 [ 177.826728][T10815] ? rcu_is_watching+0x15/0xb0 [ 177.831477][T10815] ? trace_contention_end+0x3c/0x120 [ 177.836749][T10815] ? __mutex_lock+0x2ef/0xd70 [ 177.841416][T10815] ? __mutex_unlock_slowpath+0x21d/0x750 [ 177.847035][T10815] ? hci_dev_close_sync+0x494/0xf70 [ 177.852222][T10815] ? lockdep_hardirqs_on+0xf/0x150 [ 177.857322][T10815] ? _raw_spin_unlock_irq+0x2e/0x50 [ 177.862502][T10815] ? drain_workqueue+0x2d3/0x3a0 [ 177.867425][T10815] ? hci_discovery_set_state+0x57/0x1c0 [ 177.872960][T10815] hci_dev_close_sync+0x587/0xf70 [ 177.877976][T10815] hci_dev_close+0x112/0x210 [ 177.882551][T10815] sock_do_ioctl+0x158/0x460 [ 177.887127][T10815] ? __pfx_sock_do_ioctl+0x10/0x10 [ 177.892233][T10815] sock_ioctl+0x629/0x8e0 [ 177.896546][T10815] ? __pfx_sock_ioctl+0x10/0x10 [ 177.901378][T10815] ? __fget_files+0x29/0x470 [ 177.905957][T10815] ? __fget_files+0x3f6/0x470 [ 177.910619][T10815] ? __fget_files+0x29/0x470 [ 177.915198][T10815] ? bpf_lsm_file_ioctl+0x9/0x10 [ 177.920124][T10815] ? security_file_ioctl+0x87/0xb0 [ 177.925225][T10815] ? __pfx_sock_ioctl+0x10/0x10 [ 177.930059][T10815] __se_sys_ioctl+0xfc/0x170 [ 177.934635][T10815] do_syscall_64+0xf3/0x230 [ 177.939131][T10815] ? clear_bhb_loop+0x35/0x90 [ 177.943798][T10815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.949676][T10815] RIP: 0033:0x7f53ac375bd9 [ 177.954074][T10815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.973663][T10815] RSP: 002b:00007f53ad10b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 177.982069][T10815] RAX: ffffffffffffffda RBX: 00007f53ac504038 RCX: 00007f53ac375bd9 [ 177.990029][T10815] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000007 [ 177.997994][T10815] RBP: 00007f53ac3e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 178.005976][T10815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.013935][T10815] R13: 000000000000004d R14: 00007f53ac504038 R15: 00007ffe5f44c828 [ 178.021900][T10815] [ 178.024905][T10815] [ 178.027208][T10815] Allocated by task 5350: [ 178.031516][T10815] kasan_save_track+0x3f/0x80 [ 178.036183][T10815] __kasan_kmalloc+0x98/0xb0 [ 178.040759][T10815] __kmalloc_noprof+0x1f9/0x400 [ 178.045593][T10815] sk_prot_alloc+0xe0/0x210 [ 178.050084][T10815] sk_alloc+0x38/0x370 [ 178.054139][T10815] bt_sock_alloc+0x3c/0x340 [ 178.058628][T10815] hci_sock_create+0xa1/0x190 [ 178.063292][T10815] bt_sock_create+0x161/0x230 [ 178.067955][T10815] __sock_create+0x490/0x920 [ 178.072526][T10815] __sys_socket+0x150/0x3c0 [ 178.077012][T10815] __x64_sys_socket+0x7a/0x90 [ 178.081673][T10815] do_syscall_64+0xf3/0x230 [ 178.086160][T10815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.092035][T10815] [ 178.094338][T10815] Freed by task 10819: [ 178.098380][T10815] kasan_save_track+0x3f/0x80 [ 178.103041][T10815] kasan_save_free_info+0x40/0x50 [ 178.108050][T10815] poison_slab_object+0xe0/0x150 [ 178.112969][T10815] __kasan_slab_free+0x37/0x60 [ 178.117717][T10815] kfree+0x149/0x360 [ 178.121603][T10815] __sk_destruct+0x476/0x5f0 [ 178.126180][T10815] mgmt_pending_remove+0x13e/0x1a0 [ 178.131278][T10815] mgmt_pending_foreach+0xd1/0x130 [ 178.136375][T10815] mgmt_index_removed+0xe6/0x340 [ 178.141294][T10815] hci_sock_bind+0xcce/0x1150 [ 178.145956][T10815] __sys_bind+0x23d/0x2f0 [ 178.150270][T10815] __x64_sys_bind+0x7a/0x90 [ 178.154755][T10815] do_syscall_64+0xf3/0x230 [ 178.159242][T10815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.165122][T10815] [ 178.167431][T10815] The buggy address belongs to the object at ffff88804a8c3000 [ 178.167431][T10815] which belongs to the cache kmalloc-2k of size 2048 [ 178.181466][T10815] The buggy address is located 1384 bytes inside of [ 178.181466][T10815] freed 2048-byte region [ffff88804a8c3000, ffff88804a8c3800) [ 178.195415][T10815] [ 178.197718][T10815] The buggy address belongs to the physical page: [ 178.204115][T10815] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88804a8c0000 pfn:0x4a8c0 [ 178.214164][T10815] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 178.222644][T10815] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 178.231141][T10815] page_type: 0xffffefff(slab) [ 178.235803][T10815] raw: 00fff00000000240 ffff888015042000 ffffea00008c3210 ffffea0001ab5610 [ 178.244379][T10815] raw: ffff88804a8c0000 0000000000080006 00000001ffffefff 0000000000000000 [ 178.252950][T10815] head: 00fff00000000240 ffff888015042000 ffffea00008c3210 ffffea0001ab5610 [ 178.261607][T10815] head: ffff88804a8c0000 0000000000080006 00000001ffffefff 0000000000000000 [ 178.270266][T10815] head: 00fff00000000003 ffffea00012a3001 ffffffffffffffff 0000000000000000 [ 178.278920][T10815] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 178.287572][T10815] page dumped because: kasan: bad access detected [ 178.293978][T10815] page_owner tracks the page as allocated [ 178.299673][T10815] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5091, tgid 5091 (syz-executor), ts 63735148986, free_ts 14257822382 [ 178.320408][T10815] post_alloc_hook+0x1f3/0x230 [ 178.325164][T10815] get_page_from_freelist+0x2e4c/0x2f10 [ 178.330700][T10815] __alloc_pages_noprof+0x256/0x6c0 [ 178.335893][T10815] alloc_slab_page+0x5f/0x120 [ 178.340558][T10815] allocate_slab+0x5a/0x2f0 [ 178.345044][T10815] ___slab_alloc+0xcd1/0x14b0 [ 178.349701][T10815] __slab_alloc+0x58/0xa0 [ 178.354012][T10815] kmalloc_node_track_caller_noprof+0x281/0x440 [ 178.360241][T10815] kmalloc_reserve+0x111/0x2a0 [ 178.364990][T10815] pskb_expand_head+0x202/0x1390 [ 178.369914][T10815] netlink_trim+0x183/0x220 [ 178.374400][T10815] netlink_broadcast_filtered+0x76/0x1290 [ 178.380099][T10815] nlmsg_notify+0xfb/0x1c0 [ 178.384496][T10815] __dev_notify_flags+0xf7/0x400 [ 178.389417][T10815] dev_change_flags+0xf0/0x1a0 [ 178.394164][T10815] do_setlink+0xccd/0x41f0 [ 178.398563][T10815] page last free pid 1 tgid 1 stack trace: [ 178.404348][T10815] free_unref_page+0xd22/0xea0 [ 178.409096][T10815] free_contig_range+0x9e/0x160 [ 178.413930][T10815] destroy_args+0x8a/0x890 [ 178.418330][T10815] debug_vm_pgtable+0x4be/0x550 [ 178.423165][T10815] do_one_initcall+0x248/0x880 [ 178.427915][T10815] do_initcall_level+0x157/0x210 [ 178.432851][T10815] do_initcalls+0x3f/0x80 [ 178.437176][T10815] kernel_init_freeable+0x435/0x5d0 [ 178.442361][T10815] kernel_init+0x1d/0x2b0 [ 178.446679][T10815] ret_from_fork+0x4b/0x80 [ 178.451087][T10815] ret_from_fork_asm+0x1a/0x30 [ 178.455849][T10815] [ 178.458157][T10815] Memory state around the buggy address: [ 178.463770][T10815] ffff88804a8c3400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.471814][T10815] ffff88804a8c3480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.479875][T10815] >ffff88804a8c3500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.487915][T10815] ^ [ 178.495347][T10815] ffff88804a8c3580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.503407][T10815] ffff88804a8c3600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 178.511446][T10815] ================================================================== [ 178.530708][T10821] sctp: [Deprecated]: syz.0.1878 (pid 10821) Use of int in max_burst socket option deprecated. [ 178.530708][T10821] Use struct sctp_assoc_value instead [ 178.555411][T10815] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 178.562623][T10815] CPU: 0 PID: 10815 Comm: syz.1.1877 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 178.572772][T10815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 178.582811][T10815] Call Trace: [ 178.586078][T10815] [ 178.588995][T10815] dump_stack_lvl+0x241/0x360 [ 178.593663][T10815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.598847][T10815] ? __pfx__printk+0x10/0x10 [ 178.603419][T10815] ? preempt_schedule+0xe1/0xf0 [ 178.608257][T10815] ? vscnprintf+0x5d/0x90 [ 178.612577][T10815] panic+0x349/0x860 [ 178.616462][T10815] ? check_panic_on_warn+0x21/0xb0 [ 178.621564][T10815] ? __pfx_panic+0x10/0x10 [ 178.625968][T10815] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 178.631936][T10815] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 178.638250][T10815] ? print_report+0x502/0x550 [ 178.642921][T10815] check_panic_on_warn+0x86/0xb0 [ 178.647849][T10815] ? hci_sock_get_cookie+0x49/0x50 [ 178.652952][T10815] end_report+0x77/0x160 [ 178.657184][T10815] kasan_report+0x154/0x180 [ 178.661676][T10815] ? hci_sock_get_cookie+0x49/0x50 [ 178.666781][T10815] hci_sock_get_cookie+0x49/0x50 [ 178.671709][T10815] mgmt_cmd_status+0x1be/0x4d0 [ 178.676463][T10815] cmd_complete_rsp+0xe7/0x150 [ 178.681212][T10815] mgmt_pending_foreach+0xd1/0x130 [ 178.686484][T10815] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 178.691846][T10815] __mgmt_power_off+0x187/0x420 [ 178.696685][T10815] ? __pfx___mgmt_power_off+0x10/0x10 [ 178.702047][T10815] ? __mutex_trylock_common+0x183/0x2e0 [ 178.707579][T10815] ? __pfx___might_resched+0x10/0x10 [ 178.712854][T10815] ? __pfx___mutex_trylock_common+0x10/0x10 [ 178.718735][T10815] ? rcu_is_watching+0x15/0xb0 [ 178.723488][T10815] ? trace_contention_end+0x3c/0x120 [ 178.728761][T10815] ? __mutex_lock+0x2ef/0xd70 [ 178.733429][T10815] ? __mutex_unlock_slowpath+0x21d/0x750 [ 178.739050][T10815] ? hci_dev_close_sync+0x494/0xf70 [ 178.744240][T10815] ? lockdep_hardirqs_on+0xf/0x150 [ 178.749345][T10815] ? _raw_spin_unlock_irq+0x2e/0x50 [ 178.754530][T10815] ? drain_workqueue+0x2d3/0x3a0 [ 178.759457][T10815] ? hci_discovery_set_state+0x57/0x1c0 [ 178.764992][T10815] hci_dev_close_sync+0x587/0xf70 [ 178.770009][T10815] hci_dev_close+0x112/0x210 [ 178.774586][T10815] sock_do_ioctl+0x158/0x460 [ 178.779162][T10815] ? __pfx_sock_do_ioctl+0x10/0x10 [ 178.784269][T10815] sock_ioctl+0x629/0x8e0 [ 178.788582][T10815] ? __pfx_sock_ioctl+0x10/0x10 [ 178.793413][T10815] ? __fget_files+0x29/0x470 [ 178.797991][T10815] ? __fget_files+0x3f6/0x470 [ 178.802654][T10815] ? __fget_files+0x29/0x470 [ 178.807233][T10815] ? bpf_lsm_file_ioctl+0x9/0x10 [ 178.812154][T10815] ? security_file_ioctl+0x87/0xb0 [ 178.817250][T10815] ? __pfx_sock_ioctl+0x10/0x10 [ 178.822083][T10815] __se_sys_ioctl+0xfc/0x170 [ 178.826659][T10815] do_syscall_64+0xf3/0x230 [ 178.831147][T10815] ? clear_bhb_loop+0x35/0x90 [ 178.835820][T10815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.841705][T10815] RIP: 0033:0x7f53ac375bd9 [ 178.846105][T10815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.865697][T10815] RSP: 002b:00007f53ad10b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.874097][T10815] RAX: ffffffffffffffda RBX: 00007f53ac504038 RCX: 00007f53ac375bd9 [ 178.882054][T10815] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000007 [ 178.890014][T10815] RBP: 00007f53ac3e4e60 R08: 0000000000000000 R09: 0000000000000000 [ 178.897971][T10815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 178.905924][T10815] R13: 000000000000004d R14: 00007f53ac504038 R15: 00007ffe5f44c828 [ 178.913888][T10815] [ 178.917117][T10815] Kernel Offset: disabled [ 178.921425][T10815] Rebooting in 86400 seconds..