last executing test programs: 26.281871097s ago: executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="41000300010003", 0x7) 26.174221875s ago: executing program 1: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000880)="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", 0x581, 0x0, 0x0, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000026c0)='?', 0xd0b9, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 25.205289603s ago: executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) (async) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, 0x0, 0x0) (async) r3 = socket(0x840000000002, 0x3, 0x100) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x40, 0x7, 0x3, 0xfffffff7, {{0xe, 0x4, 0x0, 0x3, 0x38, 0x68, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @empty, {[@timestamp_prespec={0x44, 0xc, 0x65, 0x3, 0x0, [{@private=0xa010102, 0x9}]}, @timestamp={0x44, 0xfffffffffffffea2, 0xd0, 0x0, 0xd, [0x7ff]}, @noop, @lsrr={0x83, 0xf, 0x8b, [@dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}}}}) connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000005240), 0x264e33, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x58, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xd1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_STATUS={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) (async) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r6, 0x1, 0xfffffffc}, 0x14}}, 0x0) (async) setsockopt$sock_timeval(r3, 0x1, 0x34, &(0x7f0000000040)={0x77359400}, 0x10) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r8 = socket(0x28, 0x5, 0x0) (async) unshare(0x28000600) bind$tipc(r8, 0x0, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="000202aa0500000000000002802c0000040000000000000000000000013129a4111200"/48], 0x44}}, 0x0) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r10, 0x29, 0x2e, &(0x7f0000000000)={0x1000003, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f0000100000000000000000000000030005000000000002000000ffffffff0000400000000000080012000000010000000000000097740600000000000000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030006000000000002000000e0000001"], 0x80}}, 0x0) 24.792165625s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0xb000000, @dev}}}, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000016"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r6, 0xfffffffffffff000) write$cgroup_type(r5, &(0x7f0000000180), 0x40010) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}, @CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0x7c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x46, 0x0, 0x0, 0x10, 0x2}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x1, 0x0, 0x0, 0x12}]}, {0x0, [0x5f]}}, 0x0, 0x33, 0x0, 0x8}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000800)=ANY=[@ANYRESOCT=r4, @ANYBLOB="e7113273f02c5b64e04776ef9d6919c164ef66f890d4533c2f6071c5b49fccb84ceac29d9c294f2daacbf0602cf5e3259738b9d9835dae4556fd43d598ade4cf0b2261b3faf386d8de4c3fae4ff4a374c1d43080305b00144e988ffc5f122f618ab73dcb69d2b183686ca0d149bc16eaf606ed8793b2de785e300a81b4c3a022ac4f410396be1487b95cc8577e20d227a621d50f9ff500353ea2cc5b236fe1a80d1e47f76f9bbe74d3f3dde5f8fd79b1100186d0252c56195b2c3fc536892f3e1d055ba7cb5e3db9000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) socket$inet6_dccp(0xa, 0x6, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) 24.486228584s ago: executing program 1: r0 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000000000023bd00", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="60de9b907f0fc170ae50000000110200"/25, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080), 0x10) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x120) 19.316507597s ago: executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x60}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/172, 0xac, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x88, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd601e690b004a2f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000790000000708000000000086dd"], 0x0) 19.011124763s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x1d}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}}, 0x0) 18.894846661s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000e7ff06000000140008"], 0x28}}, 0x0) 18.776167579s ago: executing program 0: r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 18.136312714s ago: executing program 0: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x26, 0x0, 0x14) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x10, 0x3f5, 0x10, 0x70bd29, 0x255fdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000600)=0x4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000002c0)={r3}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000280)={r3, 0x5de, 0xef, "0401e7135edb2602a224d3dfbc47b417aa15ba3eb9b1c46ea2fa2d5e002c5ae3142174e9c5f4b4dc553fda4e65d90dd9f116d2deeb31e0597031d6ba317d310875b79d27d2c84020860061b16d20e7382ffe40a58670e711a36f8cf156678761cedff9e9c9f0be7670f662472c42429d340476775b7b59cdf0c29b0ec7763ad43fc8dd278ea633c0d20cccc589452e06e9a03f5ea2c672f75657fd5da760a1dfe9dbe2ab187462f48464497e948553fe76b0be67e45da9a2886e87d8a259de83c2415ac345d64b33e8cc709f605492115d8ac4b2f704f94c8f8d63cff02b64ef67e3652efc9b9c0adb111fc7698cad"}, 0xf7) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "05aeb0c9a9ffd587a1b645995ed347e840e5786bc6858abc8027e8a3859ee478923670723147572eb177fdbd3403eb0c7779cb1ad4e3781012244a125c61408f6709587da377dab3fe6c51e60fdf97558a1bc1c316bd8aa1fc01188b4ceadac2830b082b0649fcf009e6b680d5350fab331cc89816fdd8c2080dc0feca943d63f13f"}, 0x8d) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f0000002e80)={0x1a, 0x30f, 0x1, 0xff, 0x4, 0x3f, @random="64067040a1f8"}, 0x10) connect$llc(r7, &(0x7f0000000040)={0x1a, 0x11d, 0x80, 0x9b, 0x40, 0xf2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) sendto$llc(r7, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x1a, 0x331, 0x1, 0x0, 0x7, 0x3, @random="9bed3aeb1d3e"}, 0x10) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000002ec0), 0x10) connect$llc(r7, &(0x7f0000000000)={0x1a, 0x204, 0x0, 0x9b, 0x2, 0x5, @local}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f0000000440)={&(0x7f00000002c0)=""/179, 0xb3, 0x0, &(0x7f0000000380)=""/138, 0x8a}}, 0x10) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x77}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000032c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000003340)={0x3, 0x1d, &(0x7f0000003000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @exit, @map_fd={0x18, 0xe}, @exit, @call={0x85, 0x0, 0x0, 0x2b}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000003100)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003280)={0x0, 0xa, 0xffff, 0x6}, 0x10, r8, 0xffffffffffffffff, 0x0, &(0x7f0000003300)=[r9, r7, r10], 0x0, 0x10, 0x20}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x12, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, [@jmp={0x5, 0x1, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x8}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20}}, @map_fd={0x18, 0x9, 0x1, 0x0, r4}, @alu={0x0, 0x0, 0x3, 0x5, 0x9, 0xfffffffffffffff8, 0xffffffffffffffeb}, @jmp={0x5, 0x1, 0x6, 0x2, 0xb, 0x50, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0x0, 0x1, 0x2, 0x4, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x5, 0x2, 0x1, 0x18}]}, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x14, r6, 0x8, &(0x7f0000000440)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x8, 0x5, 0x10000}, 0x10, r8, r5, 0x5, &(0x7f00000004c0)=[r4, r4, r4], &(0x7f0000000500)=[{0x5, 0x3, 0x7, 0xb}, {0x5, 0x5, 0xd, 0x8}, {0x3, 0x4, 0xc}, {0x5, 0x1, 0xe, 0x6}, {0x1, 0x4, 0x6, 0x8}], 0x10, 0x81}, 0x90) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x0, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 17.223052678s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000000c0)={@remote, @empty}, 0xc) r2 = accept4(r0, 0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x0, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), r2) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000200)=ANY=[@ANYBLOB="d8000000", @ANYBLOB="f652178b5db46d25ef7f9d38811a9b1cca81b0c4239196d0f04042ac24d90d693511c10c8b26fccbc10b", @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r5, @ANYBLOB="0800050001000000b4000880"], 0xd8}, 0x1, 0x0, 0x0, 0xe085fe5284bd7f20}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000880)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fcdbdf250100000024000300a05ca8526c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843080007000000000008000100", @ANYRES32=r5, @ANYBLOB], 0x48}}, 0x0) sendmsg$unix(r2, &(0x7f0000001940)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000580)="6f0ed31c2a", 0x5}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="45f31f00", @ANYRES16=r8, @ANYBLOB="01000000000000000000140000001c0007800c00030000000000000000000c0004000000000000000000"], 0x30}}, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r9, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r10}, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_freezer_state(r11, &(0x7f00000003c0), 0x2, 0x0) r13 = openat$cgroup_procs(r11, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000180), 0x12) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r14, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000280)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x0, 0x1, 0x7, 0x6, 0x7f}, &(0x7f0000000300)=0x20) write$cgroup_freezer_state(r12, &(0x7f0000000400)='FROZEN\x00', 0x7) 11.162700062s ago: executing program 1: r0 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000000000000023bd00", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="60de9b907f0fc170ae50000000110200"/25, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080), 0x10) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0x120) 1.743553995s ago: executing program 2: socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001c0000002000018008000100", @ANYRES32=r3, @ANYBLOB="14007612e23900007665746830e3848185cb47e35f73be230295464ecea97be601f9ad869682d8c8dfc2d3d350c9aa73b06c2e95b2edc64a8793c0f9b95ce66d71940d9708d3dfec4ac65e7518b5c2ff8c3278d27471e42d3fbb43355247901c187d177af9e4e332b00803ca003a24b169a9a36c1a97cc82ae2ca36f8375feccc42b1dedbd4950ae041fe5140cb5dc352bba312de80e4893c3272cd476490daf1c51c60017b6a731"], 0x34}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x1, 0x20}, &(0x7f0000000080)=0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES32=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4054}, 0x80) sendmsg$NFT_BATCH(r6, 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000180)='blkio.bfq.io_queued\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x12) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@mcast1, 0x2, 0x2, 0x0, 0xd}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000014000000020a010400000000000000000000000020000000080a0107fffffff800000000010000000900010073797a3000000000140100001000010000000000000000000000000a"], 0x7c}}, 0x0) 1.59549476s ago: executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x1d, 0x2, 0x6) socket$caif_stream(0x25, 0x1, 0x0) pipe(&(0x7f0000000100)) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f00000017c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000032a0000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 1.236306061s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000f8ff850000002d000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x4c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) write$cgroup_int(r1, &(0x7f0000000200), 0x43400) openat$cgroup_ro(r1, &(0x7f0000000300)='blkio.bfq.io_merged\x00', 0x0, 0x0) 821.033937ms ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x50, r1, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x1}]}]}, 0x50}}, 0x0) socket$key(0xf, 0x3, 0x2) (async) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) 726.271049ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002520702500000000690000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x7, 0xb3, 0x7f, 0xf}, 0x48) 668.352557ms ago: executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)='8', 0x1}], 0x1, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}}], 0x1, 0x1) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040), 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000002c0)={@null, @default, 0x2, 0x20}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRESHEX=r2, @ANYBLOB="01000000000000000038700f200008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x408d5}, 0x200040c0) r8 = socket$qrtr(0x2a, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001080), 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x29, 0x2, 0x0) close(r9) r10 = socket$kcm(0x2b, 0x1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc020000210a0108fdffffff0000000000000000630003"], 0x2cc}}, 0x0) close(r10) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$kcm(r10, &(0x7f0000002480)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @private=0xa010101}, 0x80, 0x0}, 0x4854) setsockopt$sock_attach_bpf(r9, 0x1, 0xd, 0x0, 0x0) close(r10) connect$qrtr(r8, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) writev(r8, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) splice(r0, 0x0, r3, 0x0, 0x39000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_SET_WOWLAN(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r9, @ANYBLOB="1266ec383c2601ae140e93b0be1956fb8ce5f9993b10e7dbd0b9710e736027d0"], 0x43b4}, 0x1, 0x0, 0x0, 0x80c}, 0x404c0c0) 459.024902ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x13, &(0x7f0000000400)=ANY=[@ANYRESHEX=r2, @ANYBLOB="00000000000a0000b702000014000000b703000000000000850000008300001fbf090000000000005509010000000000950000210000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000bf91000000000000b702000000000000"], &(0x7f0000000080)='GPL\x00', 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0), &(0x7f00000001c0)=@udp, 0x1}, 0x20) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x16, 0x8, 0x2}, 0x48) (async, rerun: 32) r7 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r7}, 0x20) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r6, &(0x7f00000001c0), 0x0}, 0x20) socket$netlink(0x10, 0x3, 0x1) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x0) (async, rerun: 64) socket$kcm(0x10, 0x0, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, 0x0, 0x0) (async) recvmsg(r8, 0x0, 0x0) 404.611969ms ago: executing program 3: socket$inet6(0xa, 0x2, 0x3a) accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x28011, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r2, &(0x7f00000033c0)=[{&(0x7f00000030c0)='\n', 0xfdef}], 0x2, 0x8, 0x0) 385.21528ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x3, 0x1, [@m_ctinfo={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xbbf}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 357.104749ms ago: executing program 3: mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000050700be00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800600020030000000140007000001"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x74}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x5, 0xa4, &(0x7f00000000c0)=""/164, 0x40f00, 0x1c, '\x00', r4, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x8001, 0x2}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000001c0)=[{0x4, 0x5, 0x2, 0x7}, {0x5, 0x1, 0x9, 0xb}, {0x3, 0x2, 0x1, 0x3}], 0x10, 0x2}, 0x90) bind$inet(r2, &(0x7f0000000340)={0x2, 0x1, @loopback}, 0x10) write$cgroup_int(r1, &(0x7f0000000040), 0xfea0) 321.943019ms ago: executing program 4: socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080001000000000008001d"], 0x24}}, 0x0) 281.226107ms ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000034c0)=0x165, 0x4) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000003580)="cb", 0x1, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, &(0x7f0000000540)=ANY=[], 0xfffffe8a) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/4083, 0xff3}], 0x1}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000040000000bf0900000000000055090100000000001500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@assoc_value, 0x8) 264.232081ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1f}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x83de, 0x2}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0xa, 0x0, 0x22}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x4}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x27}}, @NFQA_CFG_MASK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x44010}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0xb, 0x1}]}}, 0x0, 0x26}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_MARK_MASK={0x8}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x48}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="f4ffffff42da33ff53ac00000002898443d9e38bf84a88e88965db00cd00950000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r2, 0x0, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(&(0x7f0000000880)={0xffffffffffffffff}) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000580)={'#! ', './file0', [{}, {}, {0x20, '@'}, {0x20, '#! '}], 0xa, "22580968c39efb9f00de2c0e4812000087a72d00"}, 0x27) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x34, r9, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r10}, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r11) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r14, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)={0x38, r13, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x38}}, 0x0) r15 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x3f7, 0x400, 0x70bd27, 0x25dfdbfb, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", ""]}, 0x28}}, 0x40000) bind$llc(r15, &(0x7f0000000000), 0x10) splice(r3, 0x0, r4, &(0x7f0000000080), 0x100000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) 172.700168ms ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x102}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xe}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 127.550894ms ago: executing program 3: unshare(0x0) setsockopt(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x50}}, 0x0) 81.656579ms ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000007110190000000000950008000000000006c13f0b9be40518eb89a8361a029d9373cfa015e8b0f3fd295bef59a09896b1bcff01800000000000001d9c147e95ac45e2769b460ea8430ff907e9d24271ff219ccf7ff2fd42"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d20400000000d10000200000180053c6", 0x18) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000f00)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@restrict={0x0, 0x0, 0x0, 0xb, 0x2}, @fwd={0x2, 0x0, 0x0, 0x12}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x20) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000006e00000090000000030000000d0000000000000803000000000000000300000d000000000d00000003000000ff010000010000000800000005000000000000000600000d000000000d0000000400000007000000010000000c0000000100000004000000010000000e000000040000000300000005001cabbc0e10c1604b6f6fa800000100000002000004ff0300000e000000050000000800000003000000"], &(0x7f0000000000), 0xab, 0x0, 0x0, 0x770a5410}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x7, 0x80, 0xfff, 0x1b8, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x65, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x38}, @remote, {[@generic={0x83, 0x8, "f70fb82b7dbd"}, @noop, @generic={0x17, 0x3, "8b"}, @generic={0x94, 0xc, "3eef155bed06e0b7696b"}, @end]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{r3}, &(0x7f0000000cc0), &(0x7f0000000d00)='%ps \x00'}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d80)={0x1b, 0x0, 0x0, 0x43, 0x0, r3, 0x0, '\x00', 0x0, r3, 0x2, 0x5, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x6, 0x16, &(0x7f0000000ac0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5d00}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, @generic={0x80, 0x0, 0xc, 0x804, 0x200}, @ldst={0x1, 0x0, 0x6, 0x6, 0x2, 0xfffffffffffffffe, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x80000000}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0xb}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x26c3}]}, &(0x7f0000000b80)='GPL\x00', 0x97a, 0x54, &(0x7f0000000bc0)=""/84, 0x41000, 0x4, '\x00', 0x0, 0xd, r1, 0x8, &(0x7f0000000c40)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000c80)={0x3, 0xb, 0x7f, 0x4}, 0x10, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x90) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x7}]}, 0x4c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r2, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/136, 0x88, 0x0, &(0x7f0000000480)=""/78, 0x4e}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r11, 0x89f3, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000800)={'syztnl1\x00', r12, 0x2f, 0x7, 0x1, 0x100, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x700, 0x0, 0x8}}) 64.042094ms ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x19, 0x0, "8b067b9a779868db6cbcd7cc9cb147a9287b269395ddf0614fc75a0d7b9e27f84b04d28276a268b0b6c667bce08f4e5e855eba46fade6d1a711e986fc58f2c0d7c8ac179f9c561e6818a25c53ee9cb09"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) socketpair(0x0, 0x0, 0x1, &(0x7f0000000080)) select(0xff42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x77359400}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000014000100000000000000000002000000", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x48041}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r11}}, 0x24}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r13, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) 0s ago: executing program 4: r0 = socket(0x23, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000500)="b958945d8ae49c4f19be14f06558", 0x0, 0x1cb0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) listen(r0, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @multicast1, @remote}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSET={0x188, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_DESC={0x174, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x998}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x58}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xccc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc3b}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x484fab45}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x52ec}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_DESC_CONCAT={0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x655}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0xf1bfb5e94d1ef342}], {0x14, 0x10}}, 0x1c4}}, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) getsockname(0xffffffffffffffff, &(0x7f0000000480)=@caif, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) write$tun(r3, &(0x7f0000000180)={@void, @val={0x2, 0x80, 0x40, 0xfffc, 0x7, 0x816}, @mpls={[{0x5, 0x0, 0x1}, {0x9}, {0x20}, {0x1, 0x0, 0x1}, {0xecf6, 0x0, 0x1}, {0x1, 0x0, 0x1}], @llc={@snap={0x0, 0x0, "b3e3", "0749ae", 0x6000, "48007476a34115cf5252af7415e3e7519ebd097bf4fa8d1b213dde911b65fe7f5b5a14a79e4a30df6cab8141afe5de8c3e8a56c30bf0862ee94424a0a6605b9c4e139d"}}}}, 0x6e) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000001, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x1fffff, 0x0, 0x28031, 0xffffffffffffffff, 0x0) (fail_nth: 5) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.118' (ED25519) to the list of known hosts. 2024/06/08 15:51:25 fuzzer started 2024/06/08 15:51:25 dialing manager at 10.128.0.169:30018 [ 52.848148][ T5089] cgroup: Unknown subsys name 'net' [ 52.996900][ T5089] cgroup: Unknown subsys name 'rlimit' 2024/06/08 15:51:27 starting 5 executor processes [ 54.065725][ T5095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.104359][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.113671][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.122041][ T5114] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.123319][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.129591][ T5114] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.141362][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.144833][ T5114] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.150810][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.158166][ T5114] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.164729][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.171321][ T5114] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.185950][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.186316][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.194229][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.209415][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.216962][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.225711][ T5123] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.232959][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.241094][ T5123] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.248969][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.264500][ T5123] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.272691][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.286456][ T5128] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.296575][ T5128] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.314152][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.321555][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.334738][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.350040][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.359867][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.367914][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.814386][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 55.906876][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 55.918828][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 56.010504][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 56.104438][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 56.149479][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.156816][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.167790][ T5111] bridge_slave_0: entered allmulticast mode [ 56.174769][ T5111] bridge_slave_0: entered promiscuous mode [ 56.215218][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.222289][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.230031][ T5122] bridge_slave_0: entered allmulticast mode [ 56.237841][ T5122] bridge_slave_0: entered promiscuous mode [ 56.245899][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.253057][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.260483][ T5111] bridge_slave_1: entered allmulticast mode [ 56.267304][ T5111] bridge_slave_1: entered promiscuous mode [ 56.298971][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.306209][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.313307][ T5110] bridge_slave_0: entered allmulticast mode [ 56.320330][ T5110] bridge_slave_0: entered promiscuous mode [ 56.327874][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.335076][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.342338][ T5110] bridge_slave_1: entered allmulticast mode [ 56.349508][ T5110] bridge_slave_1: entered promiscuous mode [ 56.356331][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.363387][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.370633][ T5122] bridge_slave_1: entered allmulticast mode [ 56.377814][ T5122] bridge_slave_1: entered promiscuous mode [ 56.426250][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.464822][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.513203][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.526868][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.538072][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.560927][ T5111] team0: Port device team_slave_0 added [ 56.589020][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.597030][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.604228][ T5115] bridge_slave_0: entered allmulticast mode [ 56.610879][ T5115] bridge_slave_0: entered promiscuous mode [ 56.618821][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.626622][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.633709][ T5115] bridge_slave_1: entered allmulticast mode [ 56.641558][ T5115] bridge_slave_1: entered promiscuous mode [ 56.669291][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.691136][ T5111] team0: Port device team_slave_1 added [ 56.697364][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.705019][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.712237][ T5117] bridge_slave_0: entered allmulticast mode [ 56.720058][ T5117] bridge_slave_0: entered promiscuous mode [ 56.729819][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.737031][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.744331][ T5117] bridge_slave_1: entered allmulticast mode [ 56.751574][ T5117] bridge_slave_1: entered promiscuous mode [ 56.771221][ T5110] team0: Port device team_slave_0 added [ 56.797021][ T5122] team0: Port device team_slave_0 added [ 56.842718][ T5110] team0: Port device team_slave_1 added [ 56.861182][ T5122] team0: Port device team_slave_1 added [ 56.876566][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.883519][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.910130][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.935713][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.968657][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.975654][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.001913][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.015309][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.022254][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.048159][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.067582][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.079177][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.100197][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.107246][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.133645][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.145478][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.152431][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.178869][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.199799][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.229935][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.238482][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.264849][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.275926][ T53] Bluetooth: hci1: command tx timeout [ 57.315936][ T5115] team0: Port device team_slave_0 added [ 57.326073][ T5115] team0: Port device team_slave_1 added [ 57.334414][ T53] Bluetooth: hci2: command tx timeout [ 57.369585][ T5117] team0: Port device team_slave_0 added [ 57.400407][ T5122] hsr_slave_0: entered promiscuous mode [ 57.409061][ T5122] hsr_slave_1: entered promiscuous mode [ 57.424484][ T53] Bluetooth: hci4: command tx timeout [ 57.430094][ T53] Bluetooth: hci3: command tx timeout [ 57.435863][ T5128] Bluetooth: hci0: command tx timeout [ 57.444823][ T5111] hsr_slave_0: entered promiscuous mode [ 57.451106][ T5111] hsr_slave_1: entered promiscuous mode [ 57.457427][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.465476][ T5111] Cannot create hsr debugfs directory [ 57.472347][ T5117] team0: Port device team_slave_1 added [ 57.546616][ T5110] hsr_slave_0: entered promiscuous mode [ 57.553196][ T5110] hsr_slave_1: entered promiscuous mode [ 57.559440][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.567385][ T5110] Cannot create hsr debugfs directory [ 57.573458][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.581168][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.607255][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.619267][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.626880][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.652870][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.679469][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.686754][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.712759][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.725907][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.732857][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.758804][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.868787][ T5117] hsr_slave_0: entered promiscuous mode [ 57.875114][ T5117] hsr_slave_1: entered promiscuous mode [ 57.881110][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.889211][ T5117] Cannot create hsr debugfs directory [ 58.000537][ T5115] hsr_slave_0: entered promiscuous mode [ 58.007254][ T5115] hsr_slave_1: entered promiscuous mode [ 58.013297][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.021050][ T5115] Cannot create hsr debugfs directory [ 58.239784][ T5122] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.252518][ T5122] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.262422][ T5122] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.276561][ T5122] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.409556][ T5111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.418889][ T5111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.435934][ T5111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.446532][ T5111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.509762][ T5110] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.520985][ T5110] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.536774][ T5110] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.570508][ T5110] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.646888][ T5117] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.665537][ T5117] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.676373][ T5117] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.716785][ T5117] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.782933][ T5115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.805674][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.815046][ T5115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.825222][ T5115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.852819][ T5115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.871301][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.927062][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.974369][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.991657][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.999011][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.011062][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.018226][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.043450][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.050579][ T5118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.090689][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.107545][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.114776][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.202405][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.258143][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.267065][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.274228][ T5118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.309757][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.316927][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.335197][ T5128] Bluetooth: hci1: command tx timeout [ 59.338349][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.411164][ T5117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.423745][ T5128] Bluetooth: hci2: command tx timeout [ 59.429537][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.495956][ T5128] Bluetooth: hci0: command tx timeout [ 59.495984][ T5120] Bluetooth: hci4: command tx timeout [ 59.508123][ T53] Bluetooth: hci3: command tx timeout [ 59.521830][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.553288][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.602916][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.610106][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.668669][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.675866][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.720171][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.727354][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.737328][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.744484][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.805631][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.846148][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.871713][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.086886][ T5122] veth0_vlan: entered promiscuous mode [ 60.103339][ T5117] veth0_vlan: entered promiscuous mode [ 60.119813][ T5122] veth1_vlan: entered promiscuous mode [ 60.148866][ T5117] veth1_vlan: entered promiscuous mode [ 60.230303][ T5122] veth0_macvtap: entered promiscuous mode [ 60.257341][ T5117] veth0_macvtap: entered promiscuous mode [ 60.290300][ T5122] veth1_macvtap: entered promiscuous mode [ 60.328380][ T5117] veth1_macvtap: entered promiscuous mode [ 60.353718][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.388892][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.402963][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.414181][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.426484][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.439514][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.452048][ T5122] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.462225][ T5122] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.473192][ T5122] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.482211][ T5122] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.501822][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.515882][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.527087][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.538997][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.587820][ T5117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.597969][ T5117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.607157][ T5117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.616006][ T5117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.692274][ T5111] veth0_vlan: entered promiscuous mode [ 60.729060][ T5111] veth1_vlan: entered promiscuous mode [ 60.752379][ T5110] veth0_vlan: entered promiscuous mode [ 60.809717][ T2835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.812769][ T5110] veth1_vlan: entered promiscuous mode [ 60.817976][ T2835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.889907][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.897848][ T5111] veth0_macvtap: entered promiscuous mode [ 60.903246][ T5111] veth1_macvtap: entered promiscuous mode [ 60.912221][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.928798][ T5110] veth0_macvtap: entered promiscuous mode [ 60.963311][ T5115] veth0_vlan: entered promiscuous mode [ 60.980185][ T5110] veth1_macvtap: entered promiscuous mode [ 61.002800][ T5115] veth1_vlan: entered promiscuous mode [ 61.018596][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.030715][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.041423][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.051891][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.065155][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.079105][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.090037][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.100954][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.111605][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.122670][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.155701][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.166845][ T2835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.167551][ T5111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.183774][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.192358][ T5111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.202468][ T5111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.203919][ T2835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.211585][ T5111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.245304][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.258380][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.268375][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.279867][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.290069][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.300525][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.312389][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.366355][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.383619][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.393525][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.405013][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.422716][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.424361][ T5120] Bluetooth: hci1: command tx timeout [ 61.451542][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.471656][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.495149][ T5120] Bluetooth: hci2: command tx timeout [ 61.538191][ T5115] veth0_macvtap: entered promiscuous mode [ 61.559760][ T5110] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.569340][ T5110] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.580765][ T5120] Bluetooth: hci3: command tx timeout [ 61.585314][ T53] Bluetooth: hci4: command tx timeout [ 61.587009][ T5128] Bluetooth: hci0: command tx timeout [ 61.606404][ T5110] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.615207][ T5110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.638388][ T5115] veth1_macvtap: entered promiscuous mode [ 61.783528][ T5204] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.806706][ T5204] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.816538][ T5204] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 61.831147][ T5204] bridge1: entered promiscuous mode [ 61.837102][ T5204] bridge1: entered allmulticast mode [ 61.855149][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.882454][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.904123][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.935816][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.969173][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.989795][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.005772][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.014198][ T5214] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 62.020758][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.043749][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.055135][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.062959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.115350][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.127212][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.137281][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.148725][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.159024][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.170665][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.181626][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.193669][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.213194][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.273658][ T2835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.281852][ T2835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.328257][ T5115] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.337899][ T5115] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.347478][ T5115] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.356872][ T5115] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.492548][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.520384][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.820341][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.856535][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.897639][ T5234] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.009456][ T2835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.020225][ T5236] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.032156][ T2835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.266464][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.324329][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.495383][ T5120] Bluetooth: hci1: command tx timeout [ 63.570706][ T5250] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.585468][ T5120] Bluetooth: hci2: command tx timeout [ 63.619939][ T5254] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 63.646957][ T5254] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 63.658801][ T5120] Bluetooth: hci4: command tx timeout [ 63.664570][ T5120] Bluetooth: hci3: command tx timeout [ 63.669994][ T5120] Bluetooth: hci0: command tx timeout [ 63.686602][ T5254] gretap0: refused to change device tx_queue_len [ 63.696714][ T5254] net_ratelimit: 2 callbacks suppressed [ 63.696730][ T5254] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 63.709344][ T5260] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.737925][ T5258] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 64.055663][ T5275] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.103353][ T5281] FAULT_INJECTION: forcing a failure. [ 64.103353][ T5281] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 64.143382][ T5281] CPU: 1 PID: 5281 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 64.153846][ T5281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 64.163927][ T5281] Call Trace: [ 64.167221][ T5281] [ 64.170169][ T5281] dump_stack_lvl+0x241/0x360 [ 64.174894][ T5281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.180114][ T5281] ? __pfx__printk+0x10/0x10 [ 64.184723][ T5281] ? __pfx_lock_release+0x10/0x10 [ 64.189766][ T5281] ? vfs_write+0x7c4/0xc90 [ 64.194203][ T5281] should_fail_ex+0x3b0/0x4e0 [ 64.198905][ T5281] _copy_from_user+0x2f/0xe0 [ 64.203519][ T5281] __sys_bpf+0x1a4/0x810 [ 64.207770][ T5281] ? __pfx___sys_bpf+0x10/0x10 [ 64.212528][ T5281] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 64.218495][ T5281] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 64.224818][ T5281] ? do_syscall_64+0x100/0x230 [ 64.229580][ T5281] __x64_sys_bpf+0x7c/0x90 [ 64.233987][ T5281] do_syscall_64+0xf3/0x230 [ 64.238476][ T5281] ? clear_bhb_loop+0x35/0x90 [ 64.243143][ T5281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.249041][ T5281] RIP: 0033:0x7fbdf8e7cf69 [ 64.253453][ T5281] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 64.273047][ T5281] RSP: 002b:00007fbdf9b260c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 64.281449][ T5281] RAX: ffffffffffffffda RBX: 00007fbdf8fb3f80 RCX: 00007fbdf8e7cf69 [ 64.289413][ T5281] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 64.297376][ T5281] RBP: 00007fbdf9b26120 R08: 0000000000000000 R09: 0000000000000000 [ 64.305340][ T5281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.313300][ T5281] R13: 000000000000000b R14: 00007fbdf8fb3f80 R15: 00007ffdfe502cb8 [ 64.321268][ T5281] [ 64.523077][ T29] audit: type=1804 audit(1717861897.892:2): pid=5301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4113420040/syzkaller.GIKHc7/9/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 64.523337][ T5293] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.557306][ T5293] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.688859][ T5303] syzkaller0: entered promiscuous mode [ 64.707224][ T5303] syzkaller0: entered allmulticast mode [ 64.757195][ T5305] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 64.769809][ T5305] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.777833][ T5305] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.820258][ T5305] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.827775][ T5305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.835570][ T5305] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.842741][ T5305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.866657][ T5305] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 65.201571][ T5324] Zero length message leads to an empty skb [ 65.213270][ T5328] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 65.239995][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.255674][ T5333] x_tables: duplicate underflow at hook 1 [ 65.320620][ T29] audit: type=1804 audit(1717861898.692:3): pid=5332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1278482394/syzkaller.O1l1bz/16/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 65.631230][ T5351] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 66.106314][ T5384] Cannot find add_set index 0 as target [ 66.684869][ T5422] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 66.791259][ T5428] __nla_validate_parse: 2 callbacks suppressed [ 66.791278][ T5428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.958879][ T5434] Bluetooth: MGMT ver 1.22 [ 67.022148][ T5442] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.888708][ T5494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.176422][ T5510] vlan2: entered promiscuous mode [ 68.181475][ T5510] gretap0: entered promiscuous mode [ 68.199865][ T5510] vlan2: entered allmulticast mode [ 68.206750][ T5510] gretap0: entered allmulticast mode [ 68.219422][ T5515] netlink: 201392 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.240822][ T5515] netlink: zone id is out of range [ 68.246471][ T5515] netlink: zone id is out of range [ 68.281687][ T5515] netlink: zone id is out of range [ 68.305889][ T5515] netlink: zone id is out of range [ 68.348611][ T5515] netlink: zone id is out of range [ 68.356645][ T5515] netlink: zone id is out of range [ 68.361779][ T5515] netlink: zone id is out of range [ 68.367540][ T5516] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.386323][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.787338][ T5551] veth0_vlan: entered allmulticast mode [ 69.313436][ T5575] veth1_macvtap: left promiscuous mode [ 69.350164][ T5575] macsec0: entered promiscuous mode [ 69.363185][ T5575] macsec0: entered allmulticast mode [ 69.381926][ T5581] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.416212][ T5585] veth1_macvtap: entered promiscuous mode [ 69.440511][ T5585] veth1_macvtap: entered allmulticast mode [ 69.470779][ T5585] macsec0: left promiscuous mode [ 69.499779][ T5585] macsec0: left allmulticast mode [ 69.514039][ T5585] veth1_macvtap: left allmulticast mode [ 69.538816][ T5578] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.681273][ T5596] team_slave_0: entered promiscuous mode [ 69.687193][ T5596] team_slave_1: entered promiscuous mode [ 69.703314][ T5596] vlan2: entered promiscuous mode [ 69.727338][ T5596] team0: entered promiscuous mode [ 69.733004][ T5596] vlan2: entered allmulticast mode [ 69.760128][ T5596] team0: entered allmulticast mode [ 69.765516][ T5596] team_slave_0: entered allmulticast mode [ 69.774037][ T5596] team_slave_1: entered allmulticast mode [ 69.785881][ T5596] team0: left allmulticast mode [ 69.789842][ T5601] netlink: 191416 bytes leftover after parsing attributes in process `syz-executor.0'. [ 69.795410][ T5596] team_slave_0: left allmulticast mode [ 69.811370][ T5601] net_ratelimit: 145 callbacks suppressed [ 69.811385][ T5601] netlink: zone id is out of range [ 69.814848][ T5596] team_slave_1: left allmulticast mode [ 69.840403][ T5596] team0: left promiscuous mode [ 69.858209][ T5596] team_slave_0: left promiscuous mode [ 69.863700][ T5596] team_slave_1: left promiscuous mode [ 69.933016][ T5602] veth0_vlan: entered allmulticast mode [ 70.175177][ T5612] x_tables: duplicate underflow at hook 1 [ 70.408394][ T5628] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 70.515484][ T5631] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.542744][ T5631] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.930887][ T5657] veth0_vlan: entered allmulticast mode [ 71.087490][ T5666] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.223892][ T5676] bridge_slave_0: left allmulticast mode [ 71.229706][ T5676] bridge_slave_0: left promiscuous mode [ 71.244519][ T5676] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.272059][ T5676] bridge_slave_1: left allmulticast mode [ 71.282484][ T5676] bridge_slave_1: left promiscuous mode [ 71.290091][ T5676] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.328394][ T5676] bond0: (slave bond_slave_0): Releasing backup interface [ 71.353427][ T5676] bond0: (slave bond_slave_1): Releasing backup interface [ 71.412618][ T5676] team0: Port device team_slave_0 removed [ 71.436418][ T5676] team0: Port device team_slave_1 removed [ 71.443024][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.471310][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.491372][ T5676] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.500306][ T5676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.580485][ T5677] team0: Device bridge0 is up. Set it down before adding it as a team port [ 71.631247][ T5689] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 71.660362][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.673915][ T1244] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.930305][ T5709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.965683][ T5708] team0: entered promiscuous mode [ 71.973109][ T5708] team_slave_0: entered promiscuous mode [ 71.995855][ T5709] __nla_validate_parse: 1 callbacks suppressed [ 71.995872][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.998371][ T5708] team_slave_1: entered promiscuous mode [ 72.056365][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 72.074049][ T5708] team0: left promiscuous mode [ 72.092232][ T5708] team_slave_0: left promiscuous mode [ 72.119841][ T5708] team_slave_1: left promiscuous mode [ 72.202727][ T5716] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.337952][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.796041][ T5764] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.826385][ T5764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.393348][ T5795] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 73.402311][ T5795] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.453029][ T5796] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.469887][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.473076][ T5799] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.492741][ T5796] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 73.571157][ T5805] bridge1: entered promiscuous mode [ 73.597972][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 73.969685][ T5831] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 74.080897][ T5833] veth0_macvtap: left promiscuous mode [ 74.300062][ T5856] syz-executor.0[5856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.300201][ T5856] syz-executor.0[5856] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.441275][ T5861] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 74.545212][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.573003][ T5861] bond0: (slave team0): Enslaving as an active interface with an up link [ 74.685704][ T5873] ɶƣ0GC¦: entered promiscuous mode [ 74.954024][ T5895] Bluetooth: MGMT ver 1.22 [ 76.010393][ T5947] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 76.551880][ T5975] FAULT_INJECTION: forcing a failure. [ 76.551880][ T5975] name failslab, interval 1, probability 0, space 0, times 1 [ 76.618478][ T5975] CPU: 0 PID: 5975 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 76.629021][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 76.639072][ T5975] Call Trace: [ 76.642344][ T5975] [ 76.645267][ T5975] dump_stack_lvl+0x241/0x360 [ 76.649942][ T5975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 76.655137][ T5975] ? __pfx__printk+0x10/0x10 [ 76.659749][ T5975] should_fail_ex+0x3b0/0x4e0 [ 76.664418][ T5975] ? __alloc_skb+0x1c3/0x440 [ 76.669001][ T5975] should_failslab+0x9/0x20 [ 76.673496][ T5975] kmem_cache_alloc_node_noprof+0x71/0x320 [ 76.679298][ T5975] __alloc_skb+0x1c3/0x440 [ 76.683711][ T5975] ? __pfx___alloc_skb+0x10/0x10 [ 76.688648][ T5975] ? netlink_ack_tlv_len+0x6e/0x200 [ 76.693841][ T5975] netlink_ack+0x13f/0xa30 [ 76.698259][ T5975] ? __pfx_lock_acquire+0x10/0x10 [ 76.703273][ T5975] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 76.708548][ T5975] ? __pfx_nl80211_post_doit+0x10/0x10 [ 76.714009][ T5975] netlink_rcv_skb+0x262/0x430 [ 76.718762][ T5975] ? __pfx_genl_rcv_msg+0x10/0x10 [ 76.723779][ T5975] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 76.729064][ T5975] ? __netlink_deliver_tap+0x77e/0x7c0 [ 76.734531][ T5975] genl_rcv+0x28/0x40 [ 76.738509][ T5975] netlink_unicast+0x7ea/0x980 [ 76.743267][ T5975] ? __pfx_netlink_unicast+0x10/0x10 [ 76.748538][ T5975] ? __virt_addr_valid+0x183/0x520 [ 76.753643][ T5975] ? __check_object_size+0x49c/0x900 [ 76.758923][ T5975] ? bpf_lsm_netlink_send+0x9/0x10 [ 76.764030][ T5975] netlink_sendmsg+0x8db/0xcb0 [ 76.768793][ T5975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.774082][ T5975] ? __import_iovec+0x536/0x820 [ 76.778953][ T5975] ? aa_sock_msg_perm+0x91/0x160 [ 76.783907][ T5975] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 76.789191][ T5975] ? security_socket_sendmsg+0x87/0xb0 [ 76.794646][ T5975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 76.799917][ T5975] __sock_sendmsg+0x221/0x270 [ 76.804592][ T5975] ____sys_sendmsg+0x525/0x7d0 [ 76.809351][ T5975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 76.814635][ T5975] __sys_sendmsg+0x2b0/0x3a0 [ 76.819215][ T5975] ? __pfx___sys_sendmsg+0x10/0x10 [ 76.824312][ T5975] ? vfs_write+0x7c4/0xc90 [ 76.828840][ T5975] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 76.835159][ T5975] ? do_syscall_64+0x100/0x230 [ 76.839916][ T5975] ? do_syscall_64+0xb6/0x230 [ 76.844589][ T5975] do_syscall_64+0xf3/0x230 [ 76.849082][ T5975] ? clear_bhb_loop+0x35/0x90 [ 76.853754][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.859638][ T5975] RIP: 0033:0x7ff27c47cf69 [ 76.864070][ T5975] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 76.883670][ T5975] RSP: 002b:00007ff27d2d90c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.892074][ T5975] RAX: ffffffffffffffda RBX: 00007ff27c5b3f80 RCX: 00007ff27c47cf69 [ 76.900058][ T5975] RDX: 0000000000000000 RSI: 00000000200004c0 RDI: 0000000000000003 [ 76.908033][ T5975] RBP: 00007ff27d2d9120 R08: 0000000000000000 R09: 0000000000000000 [ 76.916040][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.924010][ T5975] R13: 000000000000000b R14: 00007ff27c5b3f80 R15: 00007ffe9351b238 [ 76.931986][ T5975] [ 76.944898][ T45] cfg80211: failed to load regulatory.db [ 77.017400][ T5980] __nla_validate_parse: 7 callbacks suppressed [ 77.017419][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.060228][ T5980] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 77.072391][ T5981] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.097999][ T5981] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 77.120817][ T5981] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.248134][ T5980] syz-executor.3 (5980) used greatest stack depth: 18136 bytes left [ 77.302857][ T5989] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 77.355604][ T5989] bond1: entered promiscuous mode [ 77.378870][ T5989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.547635][ T6009] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 77.649165][ T6013] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.900414][ T6026] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 77.917464][ T6026] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 77.938233][ T6026] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 78.309653][ T6045] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 78.433065][ T6051] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.040025][ T6069] syzkaller0: entered promiscuous mode [ 79.063948][ T6069] syzkaller0: entered allmulticast mode [ 79.075524][ T6076] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.172103][ T6078] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2231046157 (only 8 groups) [ 79.376043][ T6086] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.173531][ T6114] syzkaller1: entered promiscuous mode [ 81.203973][ T6114] syzkaller1: entered allmulticast mode [ 81.240446][ T6118] sctp: [Deprecated]: syz-executor.0 (pid 6118) Use of int in max_burst socket option. [ 81.240446][ T6118] Use struct sctp_assoc_value instead [ 81.887977][ T6134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.078320][ T6140] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.633234][ T6162] bridge_slave_0: left allmulticast mode [ 82.644408][ T6162] bridge_slave_0: left promiscuous mode [ 82.659822][ T6162] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.693253][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 82.880166][ T6175] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.944693][ T6176] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.994954][ T6175] sctp: [Deprecated]: syz-executor.1 (pid 6175) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.994954][ T6175] Use struct sctp_sack_info instead [ 83.076638][ T6188] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.121012][ T6189] FAULT_INJECTION: forcing a failure. [ 83.121012][ T6189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.165408][ T6189] CPU: 0 PID: 6189 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 83.175858][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 83.185910][ T6189] Call Trace: [ 83.189179][ T6189] [ 83.192096][ T6189] dump_stack_lvl+0x241/0x360 [ 83.196774][ T6189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.201962][ T6189] ? __pfx__printk+0x10/0x10 [ 83.206545][ T6189] ? __pfx_lock_release+0x10/0x10 [ 83.211562][ T6189] should_fail_ex+0x3b0/0x4e0 [ 83.216233][ T6189] _copy_from_user+0x2f/0xe0 [ 83.220817][ T6189] copy_msghdr_from_user+0xae/0x680 [ 83.226010][ T6189] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 83.231818][ T6189] __sys_sendmsg+0x23d/0x3a0 [ 83.236400][ T6189] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.241499][ T6189] ? vfs_write+0x7c4/0xc90 [ 83.245934][ T6189] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.252248][ T6189] ? do_syscall_64+0x100/0x230 [ 83.257006][ T6189] ? do_syscall_64+0xb6/0x230 [ 83.261680][ T6189] do_syscall_64+0xf3/0x230 [ 83.266177][ T6189] ? clear_bhb_loop+0x35/0x90 [ 83.270845][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.276730][ T6189] RIP: 0033:0x7f746947cf69 [ 83.281136][ T6189] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 83.300737][ T6189] RSP: 002b:00007f746a2b90c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.309144][ T6189] RAX: ffffffffffffffda RBX: 00007f74695b3f80 RCX: 00007f746947cf69 [ 83.317193][ T6189] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 000000000000000b [ 83.325412][ T6189] RBP: 00007f746a2b9120 R08: 0000000000000000 R09: 0000000000000000 [ 83.333369][ T6189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.341326][ T6189] R13: 000000000000000b R14: 00007f74695b3f80 R15: 00007ffd4aba1678 [ 83.349302][ T6189] [ 83.437112][ T6188] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 83.487157][ T6199] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 83.766966][ T6206] syzkaller0: entered promiscuous mode [ 83.772780][ T6206] syzkaller0: entered allmulticast mode [ 83.876898][ T6206] vxcan2: entered allmulticast mode [ 85.424903][ T6236] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.439950][ T6245] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 85.925847][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.019211][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.814901][ T6293] syzkaller0: entered promiscuous mode [ 86.820540][ T6293] syzkaller0: entered allmulticast mode [ 86.868197][ T6309] sctp: [Deprecated]: syz-executor.0 (pid 6309) Use of int in max_burst socket option. [ 86.868197][ T6309] Use struct sctp_assoc_value instead [ 86.959959][ T6293] vxcan2: entered allmulticast mode [ 87.236363][ T6334] FAULT_INJECTION: forcing a failure. [ 87.236363][ T6334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 87.315026][ T6334] CPU: 0 PID: 6334 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 87.325665][ T6334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 87.335734][ T6334] Call Trace: [ 87.339026][ T6334] [ 87.341969][ T6334] dump_stack_lvl+0x241/0x360 [ 87.346674][ T6334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.351890][ T6334] ? __pfx__printk+0x10/0x10 [ 87.356497][ T6334] ? __pfx_lock_release+0x10/0x10 [ 87.361540][ T6334] should_fail_ex+0x3b0/0x4e0 [ 87.366237][ T6334] _copy_from_iter+0x1f6/0x1960 [ 87.371109][ T6334] ? __virt_addr_valid+0x183/0x520 [ 87.376248][ T6334] ? __pfx_lock_release+0x10/0x10 [ 87.381289][ T6334] ? __alloc_skb+0x28f/0x440 [ 87.385892][ T6334] ? __pfx__copy_from_iter+0x10/0x10 [ 87.391197][ T6334] ? __virt_addr_valid+0x183/0x520 [ 87.396328][ T6334] ? __virt_addr_valid+0x183/0x520 [ 87.401453][ T6334] ? __virt_addr_valid+0x44e/0x520 [ 87.406582][ T6334] ? __check_object_size+0x49c/0x900 [ 87.411894][ T6334] netlink_sendmsg+0x743/0xcb0 [ 87.416688][ T6334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.421992][ T6334] ? __import_iovec+0x536/0x820 [ 87.426858][ T6334] ? aa_sock_msg_perm+0x91/0x160 [ 87.431815][ T6334] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 87.437111][ T6334] ? security_socket_sendmsg+0x87/0xb0 [ 87.442590][ T6334] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.447888][ T6334] __sock_sendmsg+0x221/0x270 [ 87.452584][ T6334] ____sys_sendmsg+0x525/0x7d0 [ 87.457374][ T6334] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.462689][ T6334] __sys_sendmsg+0x2b0/0x3a0 [ 87.467297][ T6334] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.472420][ T6334] ? vfs_write+0x7c4/0xc90 [ 87.476889][ T6334] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.483238][ T6334] ? do_syscall_64+0x100/0x230 [ 87.488024][ T6334] ? do_syscall_64+0xb6/0x230 [ 87.492717][ T6334] do_syscall_64+0xf3/0x230 [ 87.497242][ T6334] ? clear_bhb_loop+0x35/0x90 [ 87.501937][ T6334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.507845][ T6334] RIP: 0033:0x7fbd61a7cf69 [ 87.512271][ T6334] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 87.531898][ T6334] RSP: 002b:00007fbd6283a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.540328][ T6334] RAX: ffffffffffffffda RBX: 00007fbd61bb4050 RCX: 00007fbd61a7cf69 [ 87.548316][ T6334] RDX: 0000000020040800 RSI: 0000000020000080 RDI: 0000000000000007 [ 87.556301][ T6334] RBP: 00007fbd6283a120 R08: 0000000000000000 R09: 0000000000000000 [ 87.564287][ T6334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.572270][ T6334] R13: 000000000000006e R14: 00007fbd61bb4050 R15: 00007ffe702f2c38 [ 87.580269][ T6334] [ 87.964620][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.978338][ T6364] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.709616][ T6369] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 89.357434][ T6386] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.445508][ T6386] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 89.560770][ T6407] xt_CT: You must specify a L4 protocol and not use inversions on it [ 89.592009][ T6401] syzkaller0: entered promiscuous mode [ 89.608225][ T6401] syzkaller0: entered allmulticast mode [ 89.640772][ T6408] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 89.660962][ T6408] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.675243][ T6408] bridge0: port 3(dummy0) entered blocking state [ 89.689902][ T6408] bridge0: port 3(dummy0) entered disabled state [ 89.709854][ T6408] dummy0: entered allmulticast mode [ 89.717544][ T6408] dummy0: entered promiscuous mode [ 89.723407][ T6408] bridge0: port 3(dummy0) entered blocking state [ 89.729895][ T6408] bridge0: port 3(dummy0) entered forwarding state [ 89.753093][ T6401] vxcan0: entered allmulticast mode [ 90.213277][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.261976][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.392082][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.403512][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.458209][ T6458] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 91.665295][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.182574][ T6499] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.620241][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.635813][ T6508] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 92.651309][ T6508] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 92.671345][ T6508] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 92.690962][ T6508] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 92.724596][ T6508] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 92.736962][ T6508] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 92.770049][ T6508] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 92.782641][ T6512] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.359960][ T6540] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.610808][ T6552] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.635614][ T6553] sctp: [Deprecated]: syz-executor.2 (pid 6553) Use of int in max_burst socket option. [ 93.635614][ T6553] Use struct sctp_assoc_value instead [ 94.023557][ T6531] dccp_close: ABORT with 32 bytes unread [ 94.263712][ T6577] validate_nla: 7 callbacks suppressed [ 94.263732][ T6577] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 95.020593][ T6620] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 95.046444][ T6620] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.088951][ T6620] dummy0: entered promiscuous mode [ 95.124053][ T6620] dummy0: entered allmulticast mode [ 95.130305][ T6620] bridge0: port 3(dummy0) entered blocking state [ 95.246650][ T6630] sctp: [Deprecated]: syz-executor.2 (pid 6630) Use of int in max_burst socket option. [ 95.246650][ T6630] Use struct sctp_assoc_value instead [ 95.364204][ T6620] bridge0: port 3(dummy0) entered disabled state [ 95.373928][ T6620] bridge0: port 3(dummy0) entered blocking state [ 95.380390][ T6620] bridge0: port 3(dummy0) entered forwarding state [ 95.536131][ T6639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.563993][ T6639] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.624104][ T6639] bridge2: entered promiscuous mode [ 95.640934][ T6639] bridge2: entered allmulticast mode [ 95.962031][ T6661] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 95.965774][ T6658] FAULT_INJECTION: forcing a failure. [ 95.965774][ T6658] name failslab, interval 1, probability 0, space 0, times 0 [ 95.992737][ T6663] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.006990][ T6658] CPU: 1 PID: 6658 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 96.017434][ T6658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 96.027497][ T6658] Call Trace: [ 96.030787][ T6658] [ 96.033731][ T6658] dump_stack_lvl+0x241/0x360 [ 96.038443][ T6658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.043665][ T6658] ? __pfx__printk+0x10/0x10 [ 96.048275][ T6658] ? __pfx___might_resched+0x10/0x10 [ 96.053584][ T6658] should_fail_ex+0x3b0/0x4e0 [ 96.058286][ T6658] should_failslab+0x9/0x20 [ 96.062805][ T6658] kmalloc_node_trace_noprof+0x74/0x300 [ 96.068364][ T6658] ? page_pool_create_percpu+0x77/0x7c0 [ 96.073935][ T6658] page_pool_create_percpu+0x77/0x7c0 [ 96.079332][ T6658] bpf_test_run_xdp_live+0x2f2/0x1e60 [ 96.084731][ T6658] ? stack_trace_save+0x118/0x1d0 [ 96.089771][ T6658] ? __pfx_stack_trace_save+0x10/0x10 [ 96.095166][ T6658] ? mark_lock+0x9a/0x350 [ 96.099511][ T6658] ? __lock_acquire+0x1346/0x1fd0 [ 96.104537][ T6658] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 96.110379][ T6658] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 96.116295][ T6658] ? __might_fault+0xaa/0x120 [ 96.120998][ T6658] ? __might_fault+0xc6/0x120 [ 96.125668][ T6658] ? _copy_from_user+0xa6/0xe0 [ 96.130431][ T6658] ? bpf_test_init+0x15a/0x180 [ 96.135194][ T6658] ? xdp_convert_md_to_buff+0x5b/0x330 [ 96.140651][ T6658] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 96.146033][ T6658] ? __pfx_lock_release+0x10/0x10 [ 96.151070][ T6658] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.156893][ T6658] ? __fget_files+0x29/0x470 [ 96.161495][ T6658] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 96.167301][ T6658] bpf_prog_test_run+0x33a/0x3b0 [ 96.172261][ T6658] __sys_bpf+0x48d/0x810 [ 96.176522][ T6658] ? __pfx___sys_bpf+0x10/0x10 [ 96.181296][ T6658] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 96.187268][ T6658] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 96.193596][ T6658] ? do_syscall_64+0x100/0x230 [ 96.198380][ T6658] __x64_sys_bpf+0x7c/0x90 [ 96.202805][ T6658] do_syscall_64+0xf3/0x230 [ 96.207296][ T6658] ? clear_bhb_loop+0x35/0x90 [ 96.211961][ T6658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.217856][ T6658] RIP: 0033:0x7ff2b6a7cf69 [ 96.222272][ T6658] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 96.241875][ T6658] RSP: 002b:00007ff2b78d50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 96.250299][ T6658] RAX: ffffffffffffffda RBX: 00007ff2b6bb3f80 RCX: 00007ff2b6a7cf69 [ 96.258258][ T6658] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 96.266224][ T6658] RBP: 00007ff2b78d5120 R08: 0000000000000000 R09: 0000000000000000 [ 96.274196][ T6658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.282170][ T6658] R13: 000000000000000b R14: 00007ff2b6bb3f80 R15: 00007fffe1544ee8 [ 96.290154][ T6658] [ 96.460447][ T6677] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 96.480605][ T6677] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 96.484996][ T6680] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.519666][ T6680] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.542516][ T6680] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 96.561229][ T6680] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 96.570396][ T6680] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.595314][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.630117][ T6688] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 96.663977][ T6688] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 96.675001][ T6690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.949921][ T6711] delete_channel: no stack [ 97.172147][ T1120] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.199393][ T6731] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 97.317691][ T1120] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.473700][ T1120] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.607626][ T1120] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.799052][ T5128] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.809170][ T5128] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.821103][ T5128] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.831910][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.840778][ T5128] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.849049][ T5128] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.253618][ T1120] bond0 (unregistering): (slave team0): Releasing backup interface [ 98.295671][ T1120] bond0 (unregistering): Released all slaves [ 98.490588][ T1120] bond1 (unregistering): Released all slaves [ 98.606491][ T6771] x_tables: ip_tables: osf match: only valid for protocol 6 [ 98.751243][ T6784] bond0: option min_links: invalid value (18446744073709551615) [ 98.778962][ T6784] bond0: option min_links: allowed values 0 - 2147483647 [ 98.931512][ T6795] __nla_validate_parse: 7 callbacks suppressed [ 98.931531][ T6795] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.005416][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.321469][ T1120] hsr_slave_0: left promiscuous mode [ 99.340529][ T1120] hsr_slave_1: left promiscuous mode [ 99.378817][ T1120] veth1_macvtap: left promiscuous mode [ 99.387441][ T1120] veth1_vlan: left promiscuous mode [ 99.398881][ T6825] validate_nla: 1 callbacks suppressed [ 99.398898][ T6825] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 99.405904][ T1120] veth0_vlan: left promiscuous mode [ 99.432706][ T6825] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.625422][ T5128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.636883][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.644785][ T6833] tipc: Failed to remove unknown binding: 66,1,1/0:1784413665/1784413667 [ 99.654426][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.660782][ T6833] tipc: Failed to remove unknown binding: 66,1,1/0:1784413665/1784413667 [ 99.671448][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.680636][ T5128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 99.692413][ T5128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.896679][ T5128] Bluetooth: hci0: command tx timeout [ 100.392471][ T6750] chnl_net:caif_netlink_parms(): no params data found [ 100.401091][ T6829] tipc: Failed to remove unknown binding: 66,1,1/0:1784413665/1784413667 [ 100.424393][ T6829] tipc: Failed to remove unknown binding: 66,1,1/0:1784413665/1784413667 [ 100.552170][ T6843] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.570849][ T29] audit: type=1804 audit(1717861933.942:4): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2511206775/syzkaller.I4K8cM/99/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 100.676477][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.686641][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.694869][ T6750] bridge_slave_0: entered allmulticast mode [ 100.701719][ T6750] bridge_slave_0: entered promiscuous mode [ 100.742007][ T6847] : renamed from bond0 [ 100.754319][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.785003][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.792233][ T6750] bridge_slave_1: entered allmulticast mode [ 100.813182][ T6750] bridge_slave_1: entered promiscuous mode [ 100.830422][ T6851] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.883605][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.909380][ T6750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.927253][ T6750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.012948][ T6750] team0: Port device team_slave_0 added [ 101.039418][ T6750] team0: Port device team_slave_1 added [ 101.053672][ T6858] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.200081][ T1120] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.233457][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.243988][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.260703][ T6870] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.273338][ T6750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.348273][ T1120] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.370173][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.379364][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.411825][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.413099][ T6750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.448494][ T6875] x_tables: duplicate underflow at hook 2 [ 101.463218][ T6875] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 101.516020][ T1120] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.568578][ T6831] chnl_net:caif_netlink_parms(): no params data found [ 101.600646][ T29] audit: type=1800 audit(1717861934.972:5): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="blkio.throttle.io_service_bytes_recursive" dev="sda1" ino=1955 res=0 errno=0 [ 101.692135][ T6887] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 101.736712][ T5128] Bluetooth: hci1: command tx timeout [ 101.758679][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.770244][ T1120] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.796482][ T6890] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 101.811134][ T6750] hsr_slave_0: entered promiscuous mode [ 101.830102][ T6750] hsr_slave_1: entered promiscuous mode [ 101.839015][ T6750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.853165][ T6750] Cannot create hsr debugfs directory [ 101.859450][ T6887] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 101.984248][ T5128] Bluetooth: hci0: command tx timeout [ 102.147248][ T6887] bridge0: port 3(dummy0) entered disabled state [ 102.153913][ T6887] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.161616][ T6887] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.521024][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.555329][ T6887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.623515][ T6887] veth0_vlan: left allmulticast mode [ 102.678277][ T6887] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.687382][ T6887] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.712512][ T6887] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.721594][ T6887] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.816369][ T6887] vxcan2: left allmulticast mode [ 102.925370][ T6902] IPVS: Error joining to the multicast group [ 103.087470][ T6935] sctp: [Deprecated]: syz-executor.0 (pid 6935) Use of int in max_burst socket option. [ 103.087470][ T6935] Use struct sctp_assoc_value instead [ 103.113088][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.122086][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.137251][ T6831] bridge_slave_0: entered allmulticast mode [ 103.148625][ T6831] bridge_slave_0: entered promiscuous mode [ 103.217649][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.230154][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.240030][ T6831] bridge_slave_1: entered allmulticast mode [ 103.257979][ T6831] bridge_slave_1: entered promiscuous mode [ 103.387909][ T1120] bridge0: port 3(dummy0) entered disabled state [ 103.398916][ T1120] bridge_slave_1: left allmulticast mode [ 103.404867][ T1120] bridge_slave_1: left promiscuous mode [ 103.410620][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.420000][ T1120] bridge_slave_0: left allmulticast mode [ 103.425857][ T1120] bridge_slave_0: left promiscuous mode [ 103.431563][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.492870][ T1120] gretap0: left allmulticast mode [ 103.499817][ T1120] gretap0: left promiscuous mode [ 103.666818][ T1120] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 103.816256][ T5128] Bluetooth: hci1: command tx timeout [ 103.922882][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.939273][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.951187][ T1120] bond0 (unregistering): Released all slaves [ 103.972465][ T6831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.037961][ T6831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.058968][ T5128] Bluetooth: hci0: command tx timeout [ 104.120540][ T6949] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 104.155390][ T6949] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 104.211531][ T6949] debugfs: Directory 'netdev:' with parent 'phy4' already present! [ 104.258032][ T6954] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 104.331206][ T6831] team0: Port device team_slave_0 added [ 104.373246][ T6831] team0: Port device team_slave_1 added [ 104.542706][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.550933][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.581724][ T6831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.605447][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.612601][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.639770][ T6831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.694934][ T1120] hsr_slave_0: left promiscuous mode [ 104.707075][ T1120] hsr_slave_1: left promiscuous mode [ 104.715663][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.723116][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.733006][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.741003][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.759970][ T1120] veth1_macvtap: left promiscuous mode [ 104.769484][ T1120] veth0_macvtap: left promiscuous mode [ 104.775415][ T1120] veth1_vlan: left promiscuous mode [ 105.131995][ T1120] team0 (unregistering): Port device team_slave_1 removed [ 105.167454][ T1120] team0 (unregistering): Port device team_slave_0 removed [ 105.484076][ T6964] __nla_validate_parse: 4 callbacks suppressed [ 105.484092][ T6964] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.570206][ T6831] hsr_slave_0: entered promiscuous mode [ 105.591186][ T6831] hsr_slave_1: entered promiscuous mode [ 105.598057][ T6831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.606015][ T6831] Cannot create hsr debugfs directory [ 105.695944][ T6970] sctp: [Deprecated]: syz-executor.2 (pid 6970) Use of int in max_burst socket option. [ 105.695944][ T6970] Use struct sctp_assoc_value instead [ 105.753263][ T6750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.781822][ T6750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.817235][ T6750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.855600][ T6750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.894173][ T5128] Bluetooth: hci1: command tx timeout [ 106.134610][ T5128] Bluetooth: hci0: command tx timeout [ 106.174408][ T6750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.196274][ T6750] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.213338][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.220495][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.248830][ T6906] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.256042][ T6906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.398393][ T6831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.413070][ T6831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.432151][ T6831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.476894][ T6831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.533025][ T6979] netlink: 399 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.561403][ T6750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.622658][ T6983] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 106.635158][ T6983] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.698474][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.770178][ T6750] veth0_vlan: entered promiscuous mode [ 106.803294][ T6831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.834487][ T6750] veth1_vlan: entered promiscuous mode [ 106.876670][ T6831] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.901193][ T6750] veth0_macvtap: entered promiscuous mode [ 106.916874][ T6906] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.924064][ T6906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.951414][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.958660][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.968478][ T6750] veth1_macvtap: entered promiscuous mode [ 106.982371][ T6992] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 107.026423][ T6992] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 107.035763][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.047263][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.059207][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.070192][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.081968][ T6992] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 107.084646][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.125491][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.138548][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.155401][ T6750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.170614][ T6750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.189742][ T6750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.233254][ T6750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.236951][ T6994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.243201][ T6750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.263339][ T6750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.272188][ T6750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.291097][ T6831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.453632][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.485980][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.561690][ T747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.571090][ T747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.691516][ T7008] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.716627][ T7010] sctp: [Deprecated]: syz-executor.3 (pid 7010) Use of int in max_burst socket option. [ 107.716627][ T7010] Use struct sctp_assoc_value instead [ 107.779657][ T7012] syzkaller0: entered promiscuous mode [ 107.785278][ T7012] syzkaller0: entered allmulticast mode [ 107.974189][ T5128] Bluetooth: hci1: command tx timeout [ 108.905125][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.930979][ T6831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.168263][ T7029] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.183404][ T7029] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 109.208094][ T7029] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 109.323633][ T6831] veth0_vlan: entered promiscuous mode [ 109.363396][ T6831] veth1_vlan: entered promiscuous mode [ 109.392147][ T6831] veth0_macvtap: entered promiscuous mode [ 109.401880][ T6831] veth1_macvtap: entered promiscuous mode [ 109.425515][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.437936][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.448509][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.461625][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.473945][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.484702][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.497006][ T6831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.514169][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.528602][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.545711][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.556348][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.570413][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.582168][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.595332][ T6831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.626567][ T6831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.636308][ T6831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.646087][ T6831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.655327][ T6831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.665624][ T7042] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.760734][ T2835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.769763][ T2835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.801477][ T2835] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.811759][ T2835] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.848608][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.944608][ T7051] sctp: [Deprecated]: syz-executor.3 (pid 7051) Use of int in max_burst socket option. [ 109.944608][ T7051] Use struct sctp_assoc_value instead [ 109.990045][ T747] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.228582][ T7056] syzkaller0: entered promiscuous mode [ 110.238977][ T7056] syzkaller0: entered allmulticast mode [ 110.428012][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 110.445193][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 110.458737][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 110.475321][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 110.483216][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 110.492965][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.177774][ T53] Bluetooth: hci1: command 0x0405 tx timeout [ 111.810889][ T7080] team0: Device wg0 is of different type [ 111.906253][ T7089] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.955521][ T7090] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 112.003291][ T7090] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 112.045066][ T7096] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 112.053181][ T7096] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 112.152408][ T747] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.153061][ T7105] sctp: [Deprecated]: syz-executor.2 (pid 7105) Use of int in max_burst socket option. [ 112.153061][ T7105] Use struct sctp_assoc_value instead [ 112.197972][ T7059] chnl_net:caif_netlink_parms(): no params data found [ 112.342562][ T747] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.516369][ T747] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.536014][ T5128] Bluetooth: hci0: command tx timeout [ 112.651697][ T7114] syzkaller0: entered promiscuous mode [ 112.657427][ T7114] syzkaller0: entered allmulticast mode [ 112.668857][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.682592][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.689962][ T7059] bridge_slave_0: entered allmulticast mode [ 112.701987][ T7059] bridge_slave_0: entered promiscuous mode [ 112.717456][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.724632][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.731824][ T7059] bridge_slave_1: entered allmulticast mode [ 112.743950][ T7059] bridge_slave_1: entered promiscuous mode [ 114.160265][ T7138] : renamed from veth0_vlan (while UP) [ 114.195316][ T7059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.233020][ T7059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.332712][ T7140] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.408545][ T7059] team0: Port device team_slave_0 added [ 114.428451][ T7059] team0: Port device team_slave_1 added [ 114.476480][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.492184][ T7151] sctp: [Deprecated]: syz-executor.3 (pid 7151) Use of int in max_burst socket option. [ 114.492184][ T7151] Use struct sctp_assoc_value instead [ 114.493532][ T7153] bond_slave_0: entered promiscuous mode [ 114.512947][ T7153] bond_slave_1: entered promiscuous mode [ 114.520239][ T7153] macsec1: entered allmulticast mode [ 114.525962][ T7153] bond0: entered allmulticast mode [ 114.531301][ T7153] bond_slave_0: entered allmulticast mode [ 114.537382][ T7153] bond_slave_1: entered allmulticast mode [ 114.562972][ T7153] bond0: left allmulticast mode [ 114.568850][ T7153] bond_slave_0: left allmulticast mode [ 114.574898][ T7153] bond_slave_1: left allmulticast mode [ 114.580527][ T7153] bond_slave_0: left promiscuous mode [ 114.586031][ T7153] bond_slave_1: left promiscuous mode [ 114.614157][ T5128] Bluetooth: hci0: command tx timeout [ 114.639117][ T7158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.660791][ T747] bridge_slave_1: left allmulticast mode [ 114.666779][ T747] bridge_slave_1: left promiscuous mode [ 114.672452][ T747] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.682689][ T747] bridge_slave_0: left allmulticast mode [ 114.688706][ T747] bridge_slave_0: left promiscuous mode [ 114.696515][ T747] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.050819][ T747] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.062577][ T747] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.080398][ T747] bond0 (unregistering): Released all slaves [ 115.091257][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.098872][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.125977][ T7059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.185422][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.192407][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.225456][ T7059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.246019][ T7162] sch_fq: defrate 0 ignored. [ 115.257488][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.415347][ T7059] hsr_slave_0: entered promiscuous mode [ 115.451671][ T7059] hsr_slave_1: entered promiscuous mode [ 115.465203][ T7059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.481357][ T7059] Cannot create hsr debugfs directory [ 115.537105][ T7173] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 115.631523][ T7173] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 115.730912][ T29] audit: type=1804 audit(1717861949.102:6): pid=7180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4113420040/syzkaller.GIKHc7/139/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 115.759750][ T747] hsr_slave_0: left promiscuous mode [ 115.769772][ T747] hsr_slave_1: left promiscuous mode [ 115.777982][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.790371][ T747] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.802409][ T747] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.822300][ T747] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.876486][ T747] veth1_macvtap: left promiscuous mode [ 115.882092][ T747] veth0_macvtap: left promiscuous mode [ 115.911450][ T747] veth1_vlan: left promiscuous mode [ 115.920920][ T747] veth0_vlan: left promiscuous mode [ 116.379365][ T747] team0 (unregistering): Port device team_slave_1 removed [ 116.413334][ T747] team0 (unregistering): Port device team_slave_0 removed [ 116.696347][ T5128] Bluetooth: hci0: command tx timeout [ 116.761676][ T7190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.788095][ T7190] bond_slave_0: entered promiscuous mode [ 116.793890][ T7190] bond_slave_1: entered promiscuous mode [ 116.799934][ T7190] macsec1: entered allmulticast mode [ 116.806401][ T7190] bond0: entered allmulticast mode [ 116.811621][ T7190] bond_slave_0: entered allmulticast mode [ 116.818547][ T7190] bond_slave_1: entered allmulticast mode [ 116.829541][ T7190] bond0: left allmulticast mode [ 116.840366][ T7190] bond_slave_0: left allmulticast mode [ 116.847018][ T7190] bond_slave_1: left allmulticast mode [ 116.852654][ T7190] bond_slave_0: left promiscuous mode [ 116.858159][ T7190] bond_slave_1: left promiscuous mode [ 116.970761][ T7204] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 116.997578][ T7204] dummy0: left allmulticast mode [ 117.011345][ T7204] dummy0: left promiscuous mode [ 117.017256][ T7204] bridge0: port 3(dummy0) entered disabled state [ 117.017545][ T7209] tipc: Failed to remove unknown binding: 66,1,1/0:1285827245/1285827247 [ 117.071853][ T7204] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 117.154255][ T7210] tipc: Failed to remove unknown binding: 66,1,1/0:1285827245/1285827247 [ 117.192515][ T7203] tipc: Failed to remove unknown binding: 66,1,1/0:1285827245/1285827247 [ 117.212351][ T7203] tipc: Failed to remove unknown binding: 66,1,1/0:1285827245/1285827247 [ 117.709360][ T7059] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 117.730146][ T7059] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 117.744706][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.760888][ T7242] IPVS: Error joining to the multicast group [ 117.778504][ T7059] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 117.807453][ T7059] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 117.970449][ T7059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 117.996339][ T7059] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.010168][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.017336][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.036514][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.043646][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.350904][ T7059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.418475][ T7059] veth0_vlan: entered promiscuous mode [ 118.432722][ T7059] veth1_vlan: entered promiscuous mode [ 118.453382][ T7272] Unsupported ieee802154 address type: 0 [ 118.484415][ T7059] veth0_macvtap: entered promiscuous mode [ 118.497187][ T7059] veth1_macvtap: entered promiscuous mode [ 118.527520][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.540731][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.551451][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.568782][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.578656][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.594694][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.607400][ T7059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.626122][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.636735][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.648976][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.659752][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.669736][ T7059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.680449][ T7059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.692194][ T7059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.736298][ T7059] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.764138][ T7059] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.774092][ T5128] Bluetooth: hci0: command tx timeout [ 118.806488][ T7059] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.822301][ T7059] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.842304][ T7281] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.853158][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.069697][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.091455][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.168722][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.199227][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.552380][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.564102][ T7320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.579135][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.605815][ T7317] bond_slave_0: entered promiscuous mode [ 119.611849][ T7317] bond_slave_1: entered promiscuous mode [ 119.617692][ T7317] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 119.629516][ T7317] macsec1: entered allmulticast mode [ 119.635204][ T7317] bond0: entered allmulticast mode [ 119.641167][ T7317] bond_slave_0: entered allmulticast mode [ 119.647546][ T7317] bond_slave_1: entered allmulticast mode [ 119.653420][ T7317] macvlan2: entered allmulticast mode [ 119.659723][ T7317] vlan1: entered allmulticast mode [ 119.664910][ T7317] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 119.674299][ T7317] bond0: left allmulticast mode [ 119.679228][ T7317] bond_slave_0: left allmulticast mode [ 119.684886][ T7317] bond_slave_1: left allmulticast mode [ 119.690387][ T7317] macvlan2: left allmulticast mode [ 119.695623][ T7317] vlan1: left allmulticast mode [ 119.700531][ T7317] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 119.708737][ T7317] bond_slave_0: left promiscuous mode [ 119.714193][ T7317] bond_slave_1: left promiscuous mode [ 119.719784][ T7317] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 119.895364][ T7331] FAULT_INJECTION: forcing a failure. [ 119.895364][ T7331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 119.910817][ T7331] CPU: 1 PID: 7331 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 119.921247][ T7331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 119.931288][ T7331] Call Trace: [ 119.934553][ T7331] [ 119.937469][ T7331] dump_stack_lvl+0x241/0x360 [ 119.942166][ T7331] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.947370][ T7331] ? __pfx__printk+0x10/0x10 [ 119.951946][ T7331] ? __pfx_lock_release+0x10/0x10 [ 119.956957][ T7331] should_fail_ex+0x3b0/0x4e0 [ 119.961635][ T7331] _copy_from_iter+0x1f6/0x1960 [ 119.966490][ T7331] ? __virt_addr_valid+0x183/0x520 [ 119.971596][ T7331] ? __pfx_lock_release+0x10/0x10 [ 119.976615][ T7331] ? __alloc_skb+0x28f/0x440 [ 119.981203][ T7331] ? __pfx__copy_from_iter+0x10/0x10 [ 119.986483][ T7331] ? __virt_addr_valid+0x183/0x520 [ 119.991583][ T7331] ? __virt_addr_valid+0x183/0x520 [ 119.996682][ T7331] ? __virt_addr_valid+0x44e/0x520 [ 120.001785][ T7331] ? __check_object_size+0x49c/0x900 [ 120.007071][ T7331] netlink_sendmsg+0x743/0xcb0 [ 120.011833][ T7331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.017108][ T7331] ? aa_sock_msg_perm+0x91/0x160 [ 120.022033][ T7331] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 120.027308][ T7331] ? security_socket_sendmsg+0x87/0xb0 [ 120.032765][ T7331] ? __pfx_netlink_sendmsg+0x10/0x10 [ 120.038041][ T7331] __sock_sendmsg+0x221/0x270 [ 120.042713][ T7331] sock_write_iter+0x2dd/0x400 [ 120.047474][ T7331] ? __pfx_sock_write_iter+0x10/0x10 [ 120.052773][ T7331] do_iter_readv_writev+0x5a4/0x800 [ 120.057970][ T7331] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 120.063683][ T7331] ? bpf_lsm_file_permission+0x9/0x10 [ 120.069043][ T7331] ? security_file_permission+0x7f/0xa0 [ 120.074580][ T7331] ? rw_verify_area+0x1d2/0x6b0 [ 120.079422][ T7331] vfs_writev+0x395/0xbe0 [ 120.083747][ T7331] ? __pfx_vfs_writev+0x10/0x10 [ 120.088585][ T7331] ? vfs_write+0x7c4/0xc90 [ 120.093000][ T7331] ? __fget_files+0x29/0x470 [ 120.097593][ T7331] do_writev+0x1b1/0x350 [ 120.101832][ T7331] ? __pfx_do_writev+0x10/0x10 [ 120.106589][ T7331] ? do_syscall_64+0x100/0x230 [ 120.111346][ T7331] ? do_syscall_64+0xb6/0x230 [ 120.116015][ T7331] do_syscall_64+0xf3/0x230 [ 120.120507][ T7331] ? clear_bhb_loop+0x35/0x90 [ 120.125174][ T7331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.131053][ T7331] RIP: 0033:0x7f528127cf69 [ 120.135454][ T7331] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 120.155046][ T7331] RSP: 002b:00007f52820a90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 120.163460][ T7331] RAX: ffffffffffffffda RBX: 00007f52813b3f80 RCX: 00007f528127cf69 [ 120.171431][ T7331] RDX: 0000000000000001 RSI: 0000000020000740 RDI: 0000000000000003 [ 120.179388][ T7331] RBP: 00007f52820a9120 R08: 0000000000000000 R09: 0000000000000000 [ 120.187344][ T7331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 120.195298][ T7331] R13: 000000000000000b R14: 00007f52813b3f80 R15: 00007ffdcc32d348 [ 120.203266][ T7331] [ 120.491809][ T7354] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.745350][ T7372] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.096845][ T7393] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.111903][ T7393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.127241][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.136008][ T7393] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.166143][ T7396] FAULT_INJECTION: forcing a failure. [ 121.166143][ T7396] name failslab, interval 1, probability 0, space 0, times 0 [ 121.184755][ T7396] CPU: 0 PID: 7396 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 121.195191][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 121.205242][ T7396] Call Trace: [ 121.208519][ T7396] [ 121.211447][ T7396] dump_stack_lvl+0x241/0x360 [ 121.216128][ T7396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.221313][ T7396] ? __pfx__printk+0x10/0x10 [ 121.225918][ T7396] should_fail_ex+0x3b0/0x4e0 [ 121.230601][ T7396] ? allocate_file_region_entries+0x204/0x670 [ 121.236656][ T7396] should_failslab+0x9/0x20 [ 121.241147][ T7396] kmalloc_trace_noprof+0x6c/0x2c0 [ 121.246249][ T7396] allocate_file_region_entries+0x204/0x670 [ 121.252138][ T7396] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 121.258546][ T7396] region_chg+0x2b4/0x390 [ 121.262871][ T7396] __vma_reservation_common+0x3bc/0x7d0 [ 121.268406][ T7396] ? __pfx___vma_reservation_common+0x10/0x10 [ 121.274456][ T7396] ? do_raw_spin_unlock+0x13c/0x8b0 [ 121.279649][ T7396] __unmap_hugepage_range+0x1233/0x2350 [ 121.285212][ T7396] ? __pfx___unmap_hugepage_range+0x10/0x10 [ 121.291096][ T7396] ? uprobe_munmap+0x183/0x410 [ 121.295856][ T7396] ? unmap_single_vma+0x22f/0x2b0 [ 121.300876][ T7396] unmap_vmas+0x3cc/0x5f0 [ 121.305203][ T7396] ? __pfx_unmap_vmas+0x10/0x10 [ 121.310058][ T7396] ? tlb_gather_mmu+0x24e/0x310 [ 121.314903][ T7396] unmap_region+0x1ec/0x350 [ 121.319399][ T7396] ? __pfx_unmap_region+0x10/0x10 [ 121.324423][ T7396] ? __pfx_mas_prev_range+0x10/0x10 [ 121.329610][ T7396] ? __mas_set_range+0x133/0x3c0 [ 121.334538][ T7396] do_vmi_align_munmap+0x1122/0x18c0 [ 121.339832][ T7396] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 121.345460][ T7396] ? mtree_range_walk+0x6fd/0x8e0 [ 121.350490][ T7396] ? mas_find+0x8c0/0xbb0 [ 121.354812][ T7396] do_vmi_munmap+0x261/0x2f0 [ 121.359396][ T7396] mmap_region+0x72f/0x2090 [ 121.363906][ T7396] ? __lock_acquire+0x1346/0x1fd0 [ 121.368916][ T7396] ? __pfx_mmap_region+0x10/0x10 [ 121.373846][ T7396] ? mm_get_unmapped_area+0xa5/0xd0 [ 121.379041][ T7396] ? cap_mmap_addr+0x163/0x2c0 [ 121.383800][ T7396] ? __get_unmapped_area+0x2f0/0x360 [ 121.389088][ T7396] do_mmap+0x8ad/0xfa0 [ 121.393160][ T7396] ? __pfx_do_mmap+0x10/0x10 [ 121.397741][ T7396] ? __pfx_ima_file_mmap+0x10/0x10 [ 121.402847][ T7396] vm_mmap_pgoff+0x1dd/0x3d0 [ 121.407431][ T7396] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 121.412529][ T7396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.418845][ T7396] ? do_syscall_64+0x100/0x230 [ 121.423597][ T7396] ? ksys_mmap_pgoff+0xdf/0x720 [ 121.428442][ T7396] ? __x64_sys_mmap+0x7f/0x140 [ 121.433204][ T7396] do_syscall_64+0xf3/0x230 [ 121.437697][ T7396] ? clear_bhb_loop+0x35/0x90 [ 121.442366][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.448249][ T7396] RIP: 0033:0x7f528127cf69 [ 121.452651][ T7396] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 121.472238][ T7396] RSP: 002b:00007f52820a90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 121.480640][ T7396] RAX: ffffffffffffffda RBX: 00007f52813b3f80 RCX: 00007f528127cf69 [ 121.488600][ T7396] RDX: 0000000000000000 RSI: 00000000001fffff RDI: 0000000020000000 [ 121.496561][ T7396] RBP: 00007f52820a9120 R08: ffffffffffffffff R09: 0000000000000000 [ 121.504521][ T7396] R10: 0000000000028031 R11: 0000000000000246 R12: 0000000000000001 [ 121.512474][ T7396] R13: 000000000000000b R14: 00007f52813b3f80 R15: 00007ffdcc32d348 [ 121.520451][ T7396] [ 121.532705][ T7396] ------------[ cut here ]------------ [ 121.538847][ T7396] kernel BUG at mm/hugetlb.c:813! [ 121.543969][ T7396] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 121.550901][ T7396] CPU: 0 PID: 7396 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 121.561296][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 121.571331][ T7396] RIP: 0010:__vma_reservation_common+0x795/0x7d0 [ 121.577650][ T7396] Code: 61 1e 8f 09 e8 3c 8e 9e ff 90 0f 0b e8 34 8e 9e ff 90 0f 0b e8 2c 8e 9e ff 90 0f 0b e8 24 8e 9e ff 90 0f 0b e8 1c 8e 9e ff 90 <0f> 0b e8 14 8e 9e ff 90 0f 0b e8 0c 8e 9e ff 90 0f 0b e8 04 8e 9e [ 121.597242][ T7396] RSP: 0018:ffffc900045771c0 EFLAGS: 00010293 [ 121.603292][ T7396] RAX: ffffffff81f79864 RBX: 0000000000000000 RCX: ffff88805d160000 [ 121.611245][ T7396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.619199][ T7396] RBP: ffffc90004577290 R08: ffffffff81f79376 R09: fffff520008aee28 [ 121.627152][ T7396] R10: dffffc0000000000 R11: fffff520008aee28 R12: 0000000000000000 [ 121.635106][ T7396] R13: dffffc0000000000 R14: ffff88802a403c08 R15: ffff88802a403c00 [ 121.643059][ T7396] FS: 00007f52820a96c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 121.651970][ T7396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.658535][ T7396] CR2: 00007f52820a8ff8 CR3: 000000007e5d0000 CR4: 00000000003506f0 [ 121.666491][ T7396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 121.674443][ T7396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 121.682396][ T7396] Call Trace: [ 121.685661][ T7396] [ 121.688582][ T7396] ? __die_body+0x88/0xe0 [ 121.692903][ T7396] ? die+0xcf/0x110 [ 121.696698][ T7396] ? do_trap+0x15a/0x3a0 [ 121.700929][ T7396] ? __vma_reservation_common+0x795/0x7d0 [ 121.706632][ T7396] ? do_error_trap+0x1dc/0x2c0 [ 121.711379][ T7396] ? __vma_reservation_common+0x795/0x7d0 [ 121.717080][ T7396] ? __pfx_do_error_trap+0x10/0x10 [ 121.722177][ T7396] ? handle_invalid_op+0x34/0x40 [ 121.727097][ T7396] ? __vma_reservation_common+0x795/0x7d0 [ 121.732795][ T7396] ? exc_invalid_op+0x38/0x50 [ 121.737459][ T7396] ? asm_exc_invalid_op+0x1a/0x20 [ 121.742472][ T7396] ? __vma_reservation_common+0x2a6/0x7d0 [ 121.748171][ T7396] ? __vma_reservation_common+0x794/0x7d0 [ 121.753876][ T7396] ? __vma_reservation_common+0x795/0x7d0 [ 121.759578][ T7396] ? __pfx___vma_reservation_common+0x10/0x10 [ 121.765626][ T7396] ? do_raw_spin_unlock+0x13c/0x8b0 [ 121.770812][ T7396] __unmap_hugepage_range+0x125d/0x2350 [ 121.776354][ T7396] ? __pfx___unmap_hugepage_range+0x10/0x10 [ 121.782232][ T7396] ? uprobe_munmap+0x183/0x410 [ 121.786985][ T7396] ? unmap_single_vma+0x22f/0x2b0 [ 121.791997][ T7396] unmap_vmas+0x3cc/0x5f0 [ 121.796315][ T7396] ? __pfx_unmap_vmas+0x10/0x10 [ 121.801156][ T7396] ? tlb_gather_mmu+0x24e/0x310 [ 121.805991][ T7396] unmap_region+0x1ec/0x350 [ 121.810480][ T7396] ? __pfx_unmap_region+0x10/0x10 [ 121.815490][ T7396] ? __pfx_mas_prev_range+0x10/0x10 [ 121.820669][ T7396] ? __mas_set_range+0x133/0x3c0 [ 121.825589][ T7396] do_vmi_align_munmap+0x1122/0x18c0 [ 121.830866][ T7396] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 121.836483][ T7396] ? mtree_range_walk+0x6fd/0x8e0 [ 121.841500][ T7396] ? mas_find+0x8c0/0xbb0 [ 121.845811][ T7396] do_vmi_munmap+0x261/0x2f0 [ 121.850385][ T7396] mmap_region+0x72f/0x2090 [ 121.854882][ T7396] ? __lock_acquire+0x1346/0x1fd0 [ 121.859891][ T7396] ? __pfx_mmap_region+0x10/0x10 [ 121.864812][ T7396] ? mm_get_unmapped_area+0xa5/0xd0 [ 121.869992][ T7396] ? cap_mmap_addr+0x163/0x2c0 [ 121.874739][ T7396] ? __get_unmapped_area+0x2f0/0x360 [ 121.880011][ T7396] do_mmap+0x8ad/0xfa0 [ 121.884071][ T7396] ? __pfx_do_mmap+0x10/0x10 [ 121.888646][ T7396] ? __pfx_ima_file_mmap+0x10/0x10 [ 121.893742][ T7396] vm_mmap_pgoff+0x1dd/0x3d0 [ 121.898319][ T7396] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 121.903412][ T7396] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 121.909722][ T7396] ? do_syscall_64+0x100/0x230 [ 121.914472][ T7396] ? ksys_mmap_pgoff+0xdf/0x720 [ 121.919308][ T7396] ? __x64_sys_mmap+0x7f/0x140 [ 121.924058][ T7396] do_syscall_64+0xf3/0x230 [ 121.928543][ T7396] ? clear_bhb_loop+0x35/0x90 [ 121.933204][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.939078][ T7396] RIP: 0033:0x7f528127cf69 [ 121.943474][ T7396] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 121.963062][ T7396] RSP: 002b:00007f52820a90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 121.971459][ T7396] RAX: ffffffffffffffda RBX: 00007f52813b3f80 RCX: 00007f528127cf69 [ 121.979413][ T7396] RDX: 0000000000000000 RSI: 00000000001fffff RDI: 0000000020000000 [ 121.987371][ T7396] RBP: 00007f52820a9120 R08: ffffffffffffffff R09: 0000000000000000 [ 121.995326][ T7396] R10: 0000000000028031 R11: 0000000000000246 R12: 0000000000000001 [ 122.003278][ T7396] R13: 000000000000000b R14: 00007f52813b3f80 R15: 00007ffdcc32d348 [ 122.011237][ T7396] [ 122.014239][ T7396] Modules linked in: [ 122.021559][ T7396] ---[ end trace 0000000000000000 ]--- [ 122.027632][ T7396] RIP: 0010:__vma_reservation_common+0x795/0x7d0 [ 122.034009][ T7396] Code: 61 1e 8f 09 e8 3c 8e 9e ff 90 0f 0b e8 34 8e 9e ff 90 0f 0b e8 2c 8e 9e ff 90 0f 0b e8 24 8e 9e ff 90 0f 0b e8 1c 8e 9e ff 90 <0f> 0b e8 14 8e 9e ff 90 0f 0b e8 0c 8e 9e ff 90 0f 0b e8 04 8e 9e [ 122.053654][ T7396] RSP: 0018:ffffc900045771c0 EFLAGS: 00010293 [ 122.059758][ T7396] RAX: ffffffff81f79864 RBX: 0000000000000000 RCX: ffff88805d160000 2024/06/08 15:52:35 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 122.067744][ T7396] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 122.075737][ T7396] RBP: ffffc90004577290 R08: ffffffff81f79376 R09: fffff520008aee28 [ 122.083713][ T7396] R10: dffffc0000000000 R11: fffff520008aee28 R12: 0000000000000000 [ 122.091713][ T7396] R13: dffffc0000000000 R14: ffff88802a403c08 R15: ffff88802a403c00 [ 122.100283][ T7396] FS: 00007f52820a96c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 122.109549][ T7396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 122.116445][ T7396] CR2: 00007f52820a8ff8 CR3: 000000007e5d0000 CR4: 00000000003506f0 [ 122.124462][ T7396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 122.132435][ T7396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 122.140486][ T7396] Kernel panic - not syncing: Fatal exception [ 122.146750][ T7396] Kernel Offset: disabled [ 122.151058][ T7396] Rebooting in 86400 seconds..